joyce8/EMBER2024-capa huggingface dataset:
Function at 0x472da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472e68
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xc995c7c7ce31bf45
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x107030502070602
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x406
xor eax, eax
nop
jmp 0x472e00
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x472e32
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x472e5b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 8
jb 0x472de2
jmp 0x472e4f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00452c00
mov eax, edi
mov ecx, 8
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.00472da0

Function at 0x473c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473d48
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe2df6959bdeb4fd9
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x64
movabs rdx, 0x206000301010407
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x701
xor eax, eax
jmp 0x473ce3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x473d10
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x473d3b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x473cc6
jmp 0x473d2f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00452c00
mov eax, edi
mov ecx, 9
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.00473c80

Function at 0x474580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47464b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7468e140725e4225
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xe03b
movabs rdx, 0x100090209080904
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1000905
xor eax, eax
jmp 0x4745e6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x474617
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x47463e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4745c9
jmp 0x474632
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00452c00
mov eax, edi
mov ecx, 0xa
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.00474580
Function at 0x474ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474f8b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6561b76369ccaa9e
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x7361
movabs rdx, 0x502000901000102
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2020101
xor eax, eax
jmp 0x474f26
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x19]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x19]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x474f57
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x474f7e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x474f09
jmp 0x474f72
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00452c00
mov eax, edi
mov ecx, 0xa
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.00474ec0

Function at 0x4753a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475472
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2a23693874656527
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x84e7923
movabs rdx, 0x60b040800080704
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0xb0a0600
xor eax, eax
jmp 0x475404
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
cmp rax, 0xc
jge 0x47543c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xc
jae 0x475465
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
cmp rsi, 0xc
jb 0x4753ea
jmp 0x475457
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00452c00
mov eax, edi
mov ecx, 0xc
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004753a0
Function at 0x476200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4762d2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5f88f9ec1b91fc4e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf2750f5f88f9ec1b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x501020806010a03
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x804080a
xor eax, eax
jmp 0x47626e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x47629b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4762c5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x476251
jmp 0x4762b6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00452c00
mov eax, edi
mov ecx, 0xb
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.00476200

Function at 0x4776e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4777ab
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6b65ece85d7361ec
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x83
movabs rdx, 0x403080305020704
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5050800
xor eax, eax
jmp 0x477744
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x477777
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x47779e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x477727
jmp 0x477792
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00452c00
mov eax, edi
mov ecx, 9
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004776e0

Function at 0x4784c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47857c
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x1461685424b52fde
mov qword [rsp + 0x20], rdx
movabs rdx, 0x307010300070102
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x478514
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x478548
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47856f
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
nop
cmp rsi, 8
jb 0x4784fa
jmp 0x478563
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441100
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00452c00
mov eax, edi
mov ecx, 8
call fcn.00452c00
nop
nop dword [rax]
call fcn.004505a0
jmp fcn.004784c0
Function at 0x479420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4794f2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6ad634f72700824
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xac10
movabs rdx, 0x9090000000604
mov qword [rsp + 0x22], rdx
movabs rdx, 0x108060107040009
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x47948d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4794ba
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4794e5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x479470
jmp 0x4794d5
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00452c00
mov eax, edi
mov ecx, 0xa
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.00479420
Function at 0x47c100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c1eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x879e9790b38f9389
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6590c68a9ca2e487
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2070d0c03060804
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd0403030c000207
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60b010904050a0d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47c184
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x16
jge 0x47c1b7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x47c1de
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x47c167
jmp 0x47c1d2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00452c00
mov eax, edi
mov ecx, 0xf
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.0047c100

Function at 0x47c9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47cad6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x540b5b11193d4753
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x38540b5b11193d47
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5d0fce693572374a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x601060f0e01040c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6030c0c0a0a080f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x209070305100609
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47ca73
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x47caa2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47cac9
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x47ca56
nop
jmp 0x47cabd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441100
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452c00
mov eax, edi
mov ecx, 0x11
call fcn.00452c00
nop
call fcn.004505a0
nop dword [rax + rax]
jmp fcn.0047c9e0
Function at 0x48af40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b086
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x4120648fde16652b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2c3c58c942412064
mov qword [rsp + 0x20], rdx
movabs rdx, 0x284475b40f2920ec
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4409640e2eb31f07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x374f0cd7611d2fce
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1a19231c17041911
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf1c0a09190d0316
mov qword [rsp + 0x48], rdx
movabs rdx, 0x150d00191f1d220b
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd1e09041b170f13
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1610181314041421
mov qword [rsp + 0x60], rdx
movabs rdx, 0x41624210c0b0902
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x48b020
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x30
jge 0x48b04d
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x48b074
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x25
jb 0x48b002
jmp 0x48b068
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.00441100
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x25
call fcn.00452c00
mov eax, edi
mov ecx, 0x25
nop dword [rax + rax]
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.0048af40

Function at 0x48b5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b6a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xcd70586063b6dde7
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x63777ed504e358ad
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf961db666669faea
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x507160409150d0b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10a0c01020c0801
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x160d11120e010a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71715100e0c1204
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x48b642
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1e
jge 0x48b66f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x48b69b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x48b625
jmp 0x48b68f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00452c00
mov eax, edi
mov ecx, 0x18
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.0048b5a0
Function at 0x48be40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48bf48
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5663657060b86e75
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5476e04265566365
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70df62dd20654eb7
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6120d02090d0c07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x12071106020e1109
mov qword [rsp + 0x36], rdx
movabs rdx, 0x130212071106020e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0a0e0c0d0a030c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x48bee2
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1a
jge 0x48bf0f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x48bf3b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x48bec5
jmp 0x48bf2f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.00441100
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00452c00
mov eax, edi
mov ecx, 0x15
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.0048be40

Function at 0x48c300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c412
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xc4d1e43f75e061be
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x24de73f37327536d
mov qword [rsp + 0x25], rdx
movabs rdx, 0x93c63e206524de73
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x74eb4047666774bb
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4000f150f141514
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf1b13150c151a0e
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1719051406060f1b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20e0e0900190717
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x48c3b1
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x48c3de
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x48c405
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x48c394
jmp 0x48c3f9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.00441100
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00452c00
mov eax, edi
mov ecx, 0x1d
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.0048c300
Function at 0x48d9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48dac8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7a7405b09f6965cf
mov qword [rsp + 0x18], rdx
movabs rdx, 0x13651d9caa567a74
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2050309020d0707
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb02050309020d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa05020a040b0400
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48da61
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x48da93
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x48dabb
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0xe
jb 0x48da47
jmp 0x48daaf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00441100
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00452c00
mov eax, edi
mov ecx, 0xe
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.0048d9e0
Function at 0x48fb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48fc92
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x2e5065830e566530
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xfa6f765c59565e9b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x33566367673e2084
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x433a6e5c3b54207a
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd04180814050808
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x120c14091d1f101f
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1a0b020a17120c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a1213171306031f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa0500020a0c151b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x150f0b121c170016
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x48fc2c
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x20]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x2e
jge 0x48fc5e
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x48fc85
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x20]
cmp rsi, 0x20
jb 0x48fc12
jmp 0x48fc79
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x20
call fcn.00441100
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
call fcn.00452c00
mov eax, edi
mov ecx, 0x20
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.0048fb60

Function at 0x490ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x490db2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7b6e9e804757756f
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x4e7f346a
movabs rdx, 0xa09050a08050203
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4070202030b0802
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x490d4b
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x490d7d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x490da5
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0xc
jb 0x490d31
jmp 0x490d98
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441100
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00452c00
mov eax, edi
mov ecx, 0xc
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.00490ce0
Function at 0x4937a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x493926
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x1704f31b2d116582
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xee6e72c4303fdc20
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc72655fd6ee6e72
mov qword [rsp + 0x28], rdx
movabs rdx, 0x510d203b1e3a3208
mov qword [rsp + 0x30], rdx
movabs rdx, 0xeb74486d22bba726
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4a65c536c2f941fa
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa222c00260c1e2a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2031a1126142614
mov qword [rsp + 0x50], rdx
movabs rdx, 0x22418091d1b0404
mov qword [rsp + 0x58], rdx
movabs rdx, 0x152c110f15060518
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2526290b20100916
mov qword [rsp + 0x68], rdx
movabs rdx, 0x328021c151c2a07
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1d0503261f1b1519
mov qword [rsp + 0x78], rdx
movabs rdx, 0x4061b041927071e
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4938b9
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x40
jge 0x4938eb
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x493918
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
cmp rsi, 0x2d
jb 0x49389f
jmp 0x49390c
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2d
call fcn.00441100
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00452c00
mov eax, edi
mov ecx, 0x2d
nop
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004937a0