joyce8/EMBER2024-capa huggingface dataset:
Function at 0x469340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46940c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe906c6b156bb6cb0
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6396
movabs rdx, 0x702040405060304
mov qword [rsp + 0x22], rdx
movabs rdx, 0x505080004020702
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4693a4
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4693dc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4693ff
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
cmp rsi, 0xa
jb 0x46938a
jmp 0x4693f3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457ea0
mov eax, edi
mov ecx, 0xa
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00469340

Function at 0x469420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4694ec
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xac7265502364e5f4
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf0d269ac72655023
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0a0709030a00
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3000001
xor eax, eax
jmp 0x469485
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4694bc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4694df
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
cmp rsi, 0xb
jb 0x46946b
jmp 0x4694d3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00469420

Function at 0x469b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x469c3d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xdff179938c646c87
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7c75
movabs rdx, 0x603030007090704
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 7
xor eax, eax
jmp 0x469be0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x79]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x79]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x469c0d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x469c30
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x469bc2
jmp 0x469c24
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457ea0
mov eax, edi
mov ecx, 0xa
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.00469b80
Function at 0x46c0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46c187
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6e767c436d686842
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x5f6f6165
movabs rdx, 0x30608020906090b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x405030105080306
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x46c128
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0xd]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x46c157
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x46c17a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x46c10b
jmp 0x46c16e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457ea0
mov eax, edi
mov ecx, 0xc
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0046c0c0

Function at 0x46cda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46ce9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5f2e6163fe60584c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x663c343b64722c5f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6e4a556bfd3bf14d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0e08060c101213
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd06110b130e0201
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x15100d06110b130e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80e030814130f06
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x46ce39
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x46ce6b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x46ce8e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0x17
jb 0x46ce1f
jmp 0x46ce82
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.0046cda0
Function at 0x46d380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46d4ac
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x47498eda04b8bed1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x61ce47498eda04b8
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb46ecb4946a433bf
mov qword [rsp + 0x28], rdx
movabs rdx, 0xff43c865e062b072
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa49f556fc85fa864
mov qword [rsp + 0x38], rdx
movabs rdx, 0x805040b08151f15
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1707201b081d0d07
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20506040d0517
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa19010f05131d17
mov qword [rsp + 0x58], rdx
movabs rdx, 0x110a210c06131103
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x46d446
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x28
jge 0x46d47c
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x46d49f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
cmp rsi, 0x22
jb 0x46d42c
jmp 0x46d493
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x22
call fcn.00445b60
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00457ea0
mov eax, edi
mov ecx, 0x22
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0046d380

Function at 0x46e1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e26c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd2cadb18747d61a4
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x78dc741926d8d2ca
mov qword [rsp + 0x20], rdx
movabs rdx, 0x905000009020a06
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5070608020c0405
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x46e20f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x46e23c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x46e25f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x46e1f2
jmp 0x46e253
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457ea0
mov eax, edi
mov ecx, 0xe
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0046e1a0
Function at 0x4760e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x47624c
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xeb42f8948610c262
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb09573972590101
mov qword [rsp + 0x25], rdx
movabs rdx, 0x200b095739725901
mov qword [rsp + 0x26], rdx
movabs rdx, 0x36d03c1bb4ba12a2
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x692aaf206469805f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x74f4fc6f58dce674
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x41f18172704090c
mov qword [rsp + 0x46], rdx
movabs rdx, 0x140e261a03110e24
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x1305140e261a0311
mov qword [rsp + 0x50], rdx
movabs rdx, 0x81e27120f1e1119
mov qword [rsp + 0x58], rdx
movabs rdx, 0x81417082705270a
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf26161913100115
mov qword [rsp + 0x68], rdx
movabs rdx, 0x7190a1117180e10
mov qword [rsp + 0x70], rdx
movabs rdx, 0x20722030e0a1f23
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4761e7
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x3a
jge 0x47621c
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x29
jae 0x47623f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0x29
jb 0x4761cd
jmp 0x476233
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x29
call fcn.00445b60
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.00457ea0
mov eax, edi
mov ecx, 0x29
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004760e0
Function at 0x47b6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x47b827
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x1eb3113da34fa62
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7672d9374b076165
mov qword [rsp + 0x27], rdx
movabs rdx, 0x2b996e863b757a76
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2be8695e2f67ff6e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x5eeb7490176f2347
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x64b1c352fafd6fc1
mov qword [rsp + 0x46], rdx
movabs rdx, 0x2a132710072d2a0a
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x20152a132710072d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2c02250626291623
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa261016071d2014
mov qword [rsp + 0x60], rdx
movabs rdx, 0x122c0b140b01101f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1820120f0d290c1b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x120c1a1e2a0d0205
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2704122c2d290722
mov qword [rsp + 0x80], rdx
movabs rdx, 0x4120c181d0f030f
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x47b7c0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x42
jge 0x47b7f2
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x47b81a
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0x2f
jb 0x47b7a5
jmp 0x47b80e
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2f
nop
call fcn.00445b60
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00457ea0
mov eax, edi
mov ecx, 0x2f
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0047b6a0
Function at 0x47d540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x47d6ac
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x77b5786fb44d8d70
mov qword [rsp + 0x19], rdx
movabs rdx, 0xfd06b8c0a9cea3a0
mov qword [rsp + 0x21], rdx
movabs rdx, 0x9a2042eccafd06b8
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb46465667275c98b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xea87737e6f708b69
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6a5b754f8d8bb56c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa0d08102624090f
mov qword [rsp + 0x46], rdx
movabs rdx, 0x110c1c190903110e
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x815110c1c190903
mov qword [rsp + 0x50], rdx
movabs rdx, 0x26010616210b0c02
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2709290d01210e01
mov qword [rsp + 0x60], rdx
movabs rdx, 0x28230e0e26072b06
mov qword [rsp + 0x68], rdx
movabs rdx, 0x141100091205002b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x161e0c272c041102
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x47d647
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x3a
jge 0x47d67c
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2d
jae 0x47d69f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0x2d
jb 0x47d62d
jmp 0x47d693
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2d
call fcn.00445b60
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00457ea0
mov eax, edi
mov ecx, 0x2d
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0047d540

Function at 0x480d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480e26
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa6b1acad09c008c9
mov qword [rsp + 0x18], rdx
movabs rdx, 0x546174c4b900a6b1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa0d010203080900
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa080a0d01020308
mov qword [rsp + 0x28], rdx
movabs rdx, 0x703060508020403
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x480dc0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x480df2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x480e17
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
cmp rsi, 0xe
jb 0x480da2
jmp 0x480e0b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457ea0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00480d40
Function at 0x481540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481607
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x41beb9ca39324e37
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xbc52e133
movabs rdx, 0x5070a0606090b01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60a040b05050507
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4815a8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4815d7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4815fa
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x48158b
jmp 0x4815ee
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457ea0
mov eax, edi
mov ecx, 0xc
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00481540

Function at 0x483320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48340c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf599de3134364731
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe3f3933995303831
mov qword [rsp + 0x38], rdx
movabs rdx, 0x358731e97e923490
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb051001010e140a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x606160f140b0e07
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0a13070e0d1612
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4833aa
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x74]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x4833dc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4833ff
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x74]
cmp rsi, 0x18
jb 0x483390
jmp 0x4833f3
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457ea0
mov eax, edi
mov ecx, 0x18
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00483320
Function at 0x48e300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e458
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x63826095eaa75ce
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x100303236f437469
mov qword [rsp + 0x22], rdx
movabs rdx, 0x776f702010030323
mov qword [rsp + 0x26], rdx
movabs rdx, 0x300b2e66d4fc72b7
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xfb4875096c2d696d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x656da160722050d5
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x28292a1e05241a07
mov qword [rsp + 0x46], rdx
movabs rdx, 0xc2028292a1e0524
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c291c200d0a2016
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e0f02231728251e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a0422230d000316
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe2319241f140020
mov qword [rsp + 0x68], rdx
movabs rdx, 0x241429161a23042a
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x48e3f3
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x32
jge 0x48e428
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x48e44b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3a]
nop dword [rax]
cmp rsi, 0x2c
jb 0x48e3d9
jmp 0x48e43f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x2c
call fcn.00445b60
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2c
call fcn.00457ea0
mov eax, edi
mov ecx, 0x2c
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.0048e300
Function at 0x48e780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x48e8e7
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x13186ed088749fd8
mov qword [rsp + 0x19], rdx
movabs rdx, 0xcd13186ed088749f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xac1d6e1869737c92
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8ef52074aa462efa
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x33657466612073e3
mov qword [rsp + 0x32], rdx
movabs rdx, 0x84de0bdb575d37b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xebcd77264c616924
mov qword [rsp + 0x42], rdx
movabs rdx, 0x212b191721120a09
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1110310042b212b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1827252414090810
mov qword [rsp + 0x58], rdx
movabs rdx, 0x718102b112c1230
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2f27222826071109
mov qword [rsp + 0x68], rdx
movabs rdx, 0x210912252007290f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x132409060d2d000d
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x48e88a
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x36
jge 0x48e8b7
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x48e8da
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x31
jb 0x48e86d
jmp 0x48e8ce
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x31
call fcn.00445b60
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x31
call fcn.00457ea0
mov eax, edi
mov ecx, 0x31
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0048e780

Function at 0x48f960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48fa2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x37d5e2a433d531a8
mov qword [rsp + 0x28], rdx
movabs rdx, 0x66bf1fa819613938
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0d04020b020c06
mov qword [rsp + 0x18], rdx
movabs rdx, 0x50d0e0d0d0d0e00
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x48f9cf
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x48f9fc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x48fa1f
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
cmp rsi, 0x10
jb 0x48f9b2
jmp 0x48fa13
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457ea0
mov eax, edi
mov ecx, 0x10
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0048f960
Function at 0x492ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x492f6c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3178ce4727eb6f1f
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x1215
movabs rdx, 0x400080904050203
mov qword [rsp + 0x22], rdx
movabs rdx, 0x903000904020400
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x492f04
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x492f3c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x492f5f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0xa
jb 0x492eea
jmp 0x492f53
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457ea0
mov eax, edi
mov ecx, 0xa
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00492ea0