joyce8/EMBER2024-capa huggingface dataset:
Function at 0x470ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470bec
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x74475e8961557b32
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x52325e4f43755636
mov qword [rsp + 0x52], rdx
movabs rdx, 0x41626934677b5232
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5181548545633d35
mov qword [rsp + 0x60], rdx
movabs rdx, 0x9101d011a110104
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x31c0d0513071418
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1c0c0211031c0d05
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x131b0917090a030f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x131907170b06130f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x61d130a08100415
mov qword [rsp + 0x42], rdx
xor eax, eax
jmp 0x470b86
movzx r9d, byte [rsp + rsi + 0x4a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x4a], dl
mov byte [rsp + rsi + 0x4a], r8b
add rax, 2
cmp rax, 0x2c
jge 0x470bbc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1e
jae 0x470bdf
movzx r8d, byte [rsp + rdi + 0x4a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0x1e
jb 0x470b6c
jmp 0x470bd3
xor eax, eax
lea rbx, [rsp + 0x4a]
mov ecx, 0x1e
call fcn.0045b720
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1e
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00470ac0

Function at 0x471e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471fac
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x36eec397f8c53501
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x383736eec397f8c5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x32e8e9b8b0303003
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7331e76d05353360
mov qword [rsp + 0x50], rdx
movabs rdx, 0xcf9e36303938cf33
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1205191215021605
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x50a120519121502
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x15030a191b0d0e00
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1b040d1620000a0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x122106101b00170f
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x471f46
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x22
jge 0x471f7c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x471f9f
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0x22
jb 0x471f2c
jmp 0x471f93
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x22
call fcn.0045b720
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00460fc0
mov eax, edi
mov ecx, 0x22
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00471e80
Function at 0x471fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4720f8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x9836804f4e636d8a
mov qword [rsp + 0x45], rdx
movabs rdx, 0x6639819836804f4e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5f92946a97323030
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5a645231468a373b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x4932408daa345aa0
mov qword [rsp + 0x60], rdx
movabs rdx, 0x70505111b1e1e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x81f0a192216010e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x100f081f0a192216
mov qword [rsp + 0x25], rdx
movabs rdx, 0xf1f1b0018041320
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x1512111c021f0108
mov qword [rsp + 0x35], rdx
movabs rdx, 0x10031e1a0312071f
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x472095
movzx r9d, byte [rsp + rsi + 0x45]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x45], dl
mov byte [rsp + rsi + 0x45], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4720c8
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x4720eb
movzx r8d, byte [rsp + rdi + 0x45]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
nop
cmp rsi, 0x23
jb 0x47207b
jmp 0x4720df
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x23
call fcn.0045b720
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00460fc0
mov eax, edi
mov ecx, 0x23
call fcn.00460fc0
nop
call fcn.0045ece0
nop dword [rax]
jmp fcn.00471fc0

Function at 0x472980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472acc
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x9933dea6308cb89f
mov qword [rsp + 0x52], rdx
movabs rdx, 0x866b1e8c33889933
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa38f34309e9536f6
mov qword [rsp + 0x60], rdx
movabs rdx, 0x67b58d49dea5d36
mov qword [rsp + 0x68], rdx
movabs rdx, 0x8c32622e81bea800
mov qword [rsp + 0x70], rdx
movabs rdx, 0x90918150a221700
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x19251f1e040e0909
mov qword [rsp + 0x22], rdx
movabs rdx, 0x211f111d070b2109
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x14231a1005001111
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1b2302050a070c20
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc0821190a25040d
mov qword [rsp + 0x42], rdx
movabs rdx, 0x7071c1510000110
mov qword [rsp + 0x4a], rdx
xor eax, eax
jmp 0x472a64
movzx r9d, byte [rsp + rsi + 0x52]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7d]
mov byte [rsp + rdi + 0x52], dl
mov byte [rsp + rsi + 0x52], r8b
add rax, 2
cmp rax, 0x36
jge 0x472a9c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x26
jae 0x472abf
movzx r8d, byte [rsp + rdi + 0x52]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7d]
cmp rsi, 0x26
jb 0x472a4a
jmp 0x472ab3
xor eax, eax
lea rbx, [rsp + 0x52]
mov ecx, 0x26
call fcn.0045b720
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00460fc0
mov eax, edi
mov ecx, 0x26
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00472980
Function at 0x47da40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47db78
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x527e6fb446760872
mov qword [rsp + 0x45], rdx
movabs rdx, 0x7a7a4a527e6fb446
mov qword [rsp + 0x48], rdx
movabs rdx, 0x79359363907f7241
mov qword [rsp + 0x50], rdx
movabs rdx, 0x23681769778fd239
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6c3572707e8d9370
mov qword [rsp + 0x60], rdx
movabs rdx, 0x4100715141c1f0c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1e10080e101c0b22
mov qword [rsp + 0x21], rdx
movabs rdx, 0x2001091d1e10080e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1320110c111f0a06
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x1a0e020d13070211
mov qword [rsp + 0x35], rdx
movabs rdx, 0x1515201801120721
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x47db15
movzx r9d, byte [rsp + rsi + 0x45]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x39]
mov byte [rsp + rdi + 0x45], dl
mov byte [rsp + rsi + 0x45], r8b
add rax, 2
cmp rax, 0x2c
jge 0x47db48
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x47db6b
movzx r8d, byte [rsp + rdi + 0x45]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x39]
nop
cmp rsi, 0x23
jb 0x47dafb
jmp 0x47db5f
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x23
call fcn.0045b720
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00460fc0
mov eax, edi
mov ecx, 0x23
call fcn.00460fc0
nop
call fcn.0045ece0
nop dword [rax]
jmp fcn.0047da40

Function at 0x482880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48296a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7cc3dea4a0bb6e41
mov qword [rsp + 0x33], rdx
movabs rdx, 0x99ab485f907cc3de
mov qword [rsp + 0x38], rdx
movabs rdx, 0x73a8709d44a9aab4
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1003110d05110707
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x80c0f1302061003
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6020b04040e0e03
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x48290d
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x16
jge 0x48293a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x48295d
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x4828f0
jmp 0x482951
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460fc0
mov eax, edi
mov ecx, 0x15
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00482880
Function at 0x4838a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483966
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd78873b1876f8d43
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x9f61
movabs rdx, 0x704010607070707
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x3070903
xor eax, eax
jmp 0x483900
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x483932
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x483957
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0xa
jb 0x4838e3
jmp 0x48394b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460fc0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004838a0

Function at 0x483980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483a46
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1a1d1269906eb90b
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xc6
movabs rdx, 0x607030505010805
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x500
xor eax, eax
nop
jmp 0x4839e0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4e]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x483a12
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x483a37
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4e]
cmp rsi, 9
jb 0x4839c2
jmp 0x483a2b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00460fc0
mov eax, edi
mov ecx, 9
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00483980

Function at 0x484ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484ba6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x74101213c2616847
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6369
movabs rdx, 0x105010103060303
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x504
xor eax, eax
jmp 0x484b40
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x484b72
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x484b97
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x50]
cmp rsi, 0xa
jb 0x484b22
jmp 0x484b8b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460fc0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00484ae0
Function at 0x487960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487a26
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9cd177d382e76897
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x69
movabs rdx, 0x300000604020204
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x707
xor eax, eax
nop
jmp 0x4879c0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4879f2
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x487a17
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 9
jb 0x4879a2
jmp 0x487a0b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00460fc0
mov eax, edi
mov ecx, 9
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00487960

Function at 0x487ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487b78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd08bd5d87aabd14c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x205050401070606
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x4010703
xor eax, eax
jmp 0x487b19
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x2c]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x2c]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x487b48
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x487b6b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x487afc
jmp 0x487b5f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00460fc0
mov eax, edi
mov ecx, 8
call fcn.00460fc0
nop
call fcn.0045ece0
nop dword [rax]
jmp fcn.00487ac0

Function at 0x487ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487c52
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x696eb1bdda6861d9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x304040000040005
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x487bee
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x487c22
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x487c45
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 8
jb 0x487bd4
nop
jmp 0x487c39
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0045b720
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00460fc0
mov eax, edi
mov ecx, 8
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00487ba0
Function at 0x488720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4887e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf690612597f7f54d
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xfcf286f6
movabs rdx, 0x80a0a0604030902
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa04030a0701080a
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x488788
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x4887b7
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4887da
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x48876b
jmp 0x4887ce
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460fc0
mov eax, edi
mov ecx, 0xb
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00488720

Function at 0x48b8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b9cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9bcdc6e025642544
mov qword [rsp + 0x37], rdx
movabs rdx, 0x689bcdc6e0256425
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b006962c3c66cad
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30003060610100a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1040603050704
mov qword [rsp + 0x27], rdx
movabs rdx, 0x60b0a0c0c0f0009
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x48b96a
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x18
jge 0x48b99c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48b9bf
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0x11
jb 0x48b950
jmp 0x48b9b3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00460fc0
mov eax, edi
mov ecx, 0x11
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0048b8e0
Function at 0x48c520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c5dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x680268ef5fe7714f
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7275
movabs rdx, 0x205020204010206
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x402
xor eax, eax
jmp 0x48c580
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x48c5ad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x48c5d0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x48c562
jmp 0x48c5c4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460fc0
mov eax, edi
mov ecx, 0xa
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.0048c520

Function at 0x48c680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c73d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6e4759353b366650
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x65
movabs rdx, 0x305060304020304
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x104
xor eax, eax
nop
jmp 0x48c6e0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x48c70d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x48c730
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x48c6c2
jmp 0x48c724
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00460fc0
mov eax, edi
mov ecx, 9
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.0048c680

Function at 0x48cc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48cccc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x51724d54565c7379
mov qword [rsp + 0x29], rdx
movabs rdx, 0x6943636c6d4b5051
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0d050407050909
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa03000d0c020203
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x48cc6f
movzx r9d, byte [rsp + rsi + 0x29]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x29], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jge 0x48cc9c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x48ccbf
movzx r8d, byte [rsp + rdi + 0x29]
sub r8d, edx
cmp rsi, 0xf
jb 0x48cc52
jmp 0x48ccb3
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460fc0
mov eax, edi
mov ecx, 0xf
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0048cc00
Function at 0x48d2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48d387
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3c41723d5e676959
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x456e633c
movabs rdx, 0x3040304000a0703
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x408080404060304
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x48d328
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x48d357
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x48d37a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x48d30b
jmp 0x48d36e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460fc0
mov eax, edi
mov ecx, 0xb
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0048d2c0

Function at 0x48d9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48daa6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9cf0f774fdc27953
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xbdaca089
movabs rdx, 0x2090609050a0302
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x8070b0a
xor eax, eax
jmp 0x48da40
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x48da72
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x48da97
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0xc
jb 0x48da24
jmp 0x48da8b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460fc0
mov eax, edi
mov ecx, 0xc
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0048d9e0

Function at 0x49a020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a0dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3621216c70404c62
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x52
movabs rdx, 0x2060006060805
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 1
xor eax, eax
nop
jmp 0x49a080
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x49a0ad
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x49a0d0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x49a062
jmp 0x49a0c4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00460fc0
mov eax, edi
mov ecx, 9
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.0049a020