joyce8/EMBER2024-capa huggingface dataset:
Function at 0x475120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4751e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x685865505f7a7f75
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x5d69
movabs rdx, 0x906090606000102
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x702
xor eax, eax
jmp 0x475180
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4751b2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4751d7
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x11]
cmp rsi, 0xa
jb 0x475162
jmp 0x4751cb
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00475120

Function at 0x476260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476332
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5f7265742fa17335
mov qword [rsp + 0x19], rdx
movabs rdx, 0x69ad6135f79f3d5f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb080b0909020a0d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0308030a0d02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4762cc
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x26]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4762fe
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x476325
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x26]
cmp rsi, 0xf
jb 0x4762b2
jmp 0x476315
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00476260

Function at 0x478300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4783bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7a7e72a64e7b7382
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x89
movabs rdx, 0x608080403050003
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7070102
xor eax, eax
nop
jmp 0x478360
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x47838d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4783b0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x478342
jmp 0x4783a4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00478300
Function at 0x478bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478c87
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x12e7721c2a656449
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc61c6812e7721c2a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9060a0a04070403
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xa090907
xor eax, eax
jmp 0x478c28
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x478c57
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x478c7a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x478c0b
jmp 0x478c6e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00478bc0

Function at 0x478ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478d67
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6e6f4378a869f507
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x490f724e
movabs rdx, 0x100030b08030401
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30b03030a080100
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x478d08
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x478d37
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x478d5a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x478ceb
jmp 0x478d4e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00478ca0

Function at 0x479340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47941d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x868e9b9b88808a82
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7e76748c7b7e6770
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc0c0c010f020002
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5000e0a03040c0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30b0b06090307
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4793c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4793ed
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x479410
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x4793a2
jmp 0x479404
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00479340
Function at 0x47a020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a11b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x56e07273e6e5f850
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x45f1dc56e07273e6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5b506170f0e365e5
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0d120a04121206
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7080b01120e1107
mov qword [rsp + 0x36], rdx
movabs rdx, 0x41107080b01120e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3030612030a0209
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47a0b9
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1a
jge 0x47a0eb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x47a10e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0x13
jb 0x47a09f
jmp 0x47a102
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.0047a020

Function at 0x47a140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a25d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x658bc8f521dc04b6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb4e56382a0d991b8
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80b36e18b4e56382
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe894614dadc6d7bf
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11006050403050e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa1302100403090c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8161a00030b1516
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1310101b0f140106
mov qword [rsp + 0x50], rdx
movabs rdx, 0x17150b0604120e02
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x47a200
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x47a22d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x47a250
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x47a1dd
jmp 0x47a244
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0047a140
Function at 0x47a800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a8ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x52425a474b5a3d52
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2852425a474b5a3d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6c564469724c6524
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9090e08010b0604
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x902050b0e0909
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc030903060b0f07
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47a88d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x47a8ba
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47a8dd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x47a870
jmp 0x47a8d1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0047a800

Function at 0x47b0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b18a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3e70285e665a5261
mov qword [rsp + 0x19], rdx
movabs rdx, 0x493e70285e665a52
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6c6654724d584950
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7010e05070a0b04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc000e0c0a090701
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70c0610020f020c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47b12d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x47b15a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47b17d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x47b110
jmp 0x47b171
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0047b0a0
Function at 0x4889c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488af8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xef5e9ebc1fc665c3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x37e8eca542ef5e9e
mov qword [rsp + 0x20], rdx
movabs rdx, 0xdaa8da6c6101bdbe
mov qword [rsp + 0x28], rdx
movabs rdx, 0xadc0fb96dd01016a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xaea6696c6832748d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14191a0c201f0700
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0f171d20120b0c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d18170b1c241a03
mov qword [rsp + 0x50], rdx
movabs rdx, 0x16020920021a2313
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb0d021b0517150a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x61b120412160e1c
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x488a95
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x77]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x30
jge 0x488ac8
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x488aeb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x77]
nop
cmp rsi, 0x25
jb 0x488a7b
jmp 0x488adf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.00441380
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00451880
mov eax, edi
mov ecx, 0x25
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004889c0

Function at 0x489300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4893fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x96706d91d2bc7e70
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9399747320e2a774
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd4a9778db96f200c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9160a0213101303
mov qword [rsp + 0x34], rdx
movabs rdx, 0x30a170713170902
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x10e0915030a1707
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1040f0701131614
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x489399
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4893cb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4893ee
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 0x18
jb 0x48937f
jmp 0x4893e2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.00489300
Function at 0x489540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48962c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe0fcab52b4aa7270
mov qword [rsp + 0x30], rdx
movabs rdx, 0x63e671e4c50665a2
mov qword [rsp + 0x38], rdx
movabs rdx, 0x74b1739866e7b5ad
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5100b0d030a1608
mov qword [rsp + 0x18], rdx
movabs rdx, 0x14070c070e140606
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc02110412110306
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4895ca
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5b]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x4895fc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x48961f
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5b]
cmp rsi, 0x18
jb 0x4895b0
jmp 0x489613
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00489540
Function at 0x48a760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a87d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xb45946b4859e7493
mov qword [rsp + 0x19], rdx
movabs rdx, 0xff3173e3c98c65ec
mov qword [rsp + 0x21], rdx
movabs rdx, 0xfa20af2065ff3173
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa1659ced664f74ae
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1010b0a0e0c060f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x141401010b0a0e0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x219000304030a0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c070b1214081a0e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1402151a1506080f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x48a820
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x48a84d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x48a870
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1d
jb 0x48a7fd
jmp 0x48a864
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0048a760
Function at 0x48e180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x48e2f2
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x3a7463f932663820
mov qword [rsp + 0x19], rdx
movabs rdx, 0xce72c26e6ea48a3a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd6f4e72e9bd1261
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb23561e6a0242019
mov qword [rsp + 0x30], rdx
movabs rdx, 0x666ffb1d1a752707
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3965a7bc6b614020
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65f1cf3fb3b7d468
mov qword [rsp + 0x48], rdx
movabs rdx, 0x12011a2332332219
mov qword [rsp + 0x50], rdx
movabs rdx, 0x200b1d0914082c2c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2b1f013033352c11
mov qword [rsp + 0x60], rdx
movabs rdx, 0x200c1734282e3310
mov qword [rsp + 0x68], rdx
movabs rdx, 0x3030c1f0431241e
mov qword [rsp + 0x70], rdx
movabs rdx, 0xe040814352c1d11
mov qword [rsp + 0x78], rdx
movabs rdx, 0x23141b1716040001
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x48e28d
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x38
jge 0x48e2bf
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x48e2e5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 0x37
jb 0x48e273
jmp 0x48e2d9
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x37
call fcn.00441380
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x37
call fcn.00451880
mov eax, edi
mov ecx, 0x37
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0048e180
Function at 0x4920c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4921bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xed1c33fd211d65e4
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc81944346c2c56ed
mov qword [rsp + 0x24], rdx
movabs rdx, 0x53933c17653eeb21
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10140c0b15001416
mov qword [rsp + 0x34], rdx
movabs rdx, 0x11130e0d100e0704
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x50f030911130e0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x615100200151404
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x492159
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x26]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x49218b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4921ae
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x26]
cmp rsi, 0x17
jb 0x49213f
jmp 0x4921a2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004920c0

Function at 0x493700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493838
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x1a5c3656ca641a8
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe201a5c3656ca641
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30bd20d2b0a77288
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb4745bb0157b94bc
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5e85bc1cb23ca4d5
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1e1d1b1014130f05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x819010c1800001a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1f151c1019021e0d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1311161b1f07130c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x15080b060c1e0c1f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f201c16120d0911
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4937d5
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x30
jge 0x493808
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x49382b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
nop
cmp rsi, 0x21
jb 0x4937bb
jmp 0x49381f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.00441380
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00451880
mov eax, edi
mov ecx, 0x21
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00493700
Function at 0x493860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493968
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xcb7361b8ce6dbb73
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x69ffee5d27837626
mov qword [rsp + 0x25], rdx
movabs rdx, 0xcc69ffee5d278376
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd6736c2e7719b807
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7140d040b111103
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1130d0e0b011811
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x121701130d0e0b01
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1018010311040a0d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x49390b
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x493938
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x49395b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4938ee
jmp 0x49394f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00493860

Function at 0x493ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493f9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd1657a7393bd0b69
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x6e
movabs rdx, 0x506070107060203
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6020605
xor eax, eax
nop
jmp 0x493f40
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x493f6d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x493f90
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x493f22
jmp 0x493f84
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00493ee0