joyce8/EMBER2024-capa huggingface dataset:
Function at 0x477820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477906
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x207e8a6c6176b89e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x859d91a6af678898
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb050c0d00080801
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd01050d0b050c0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80e090f0600090e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4778a0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x29]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4778d2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4778f7
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x29]
cmp rsi, 0x10
jb 0x477882
jmp 0x4778eb
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.0043d2e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.00477820

Function at 0x478fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479086
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4a46969bd876d9e2
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4ded006c61d84a46
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50407070b0c0d03
mov qword [rsp + 0x26], rdx
movabs rdx, 0x400050407070b0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc07000803010006
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x479020
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x479052
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x479077
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0xe
jb 0x479002
jmp 0x47906b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0043d2e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0044c1c0
mov eax, edi
mov ecx, 0xe
nop
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.00478fa0
Function at 0x47a840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a95a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xa0867a56a93c6c2e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xcc97b6206ef0a195
mov qword [rsp + 0x25], rdx
movabs rdx, 0xeb907475ae8aa9cc
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb3d78f8d7579cee9
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1d17031b1d0a0212
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe0d12161d17031b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1612081d071c051e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x403110d18100f04
mov qword [rsp + 0x50], rdx
movabs rdx, 0x619090a1e151005
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x47a8f7
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x24
jge 0x47a929
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x47a94d
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
cmp rsi, 0x1f
jb 0x47a8dd
jmp 0x47a941
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1f
call fcn.0043d2e0
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1f
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x1f
call fcn.0044c1c0
nop
call fcn.00449f60
nop
jmp fcn.0047a840

Function at 0x47a980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47aa8c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6decd537406e1e2d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20d075d11d2e62b7
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65fa1938e083d56f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6161400080b0808
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe09041306161400
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0e0b0b06090e0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11041205080a0603
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160e01150c05050e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x47aa28
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x24
jge 0x47aa5c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x47aa7f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1c]
cmp rsi, 0x18
jb 0x47aa0e
jmp 0x47aa73
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.0043d2e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x18
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.0047a980
Function at 0x47b060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b13d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6cf4ebe3a6e6fe74
mov qword [rsp + 0x18], rdx
movabs rdx, 0x86fff4ec1c056cf4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb060305020a0509
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5070b060305020a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10c04050d010807
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x47b0e0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x47b10d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x47b130
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x47b0c2
jmp 0x47b124
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0043d2e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0044c1c0
mov eax, edi
mov ecx, 0xe
call fcn.0044c1c0
nop
nop dword [rax]
call fcn.00449f60
jmp fcn.0047b060

Function at 0x47dee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47dfc6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc4106465ab1b1413
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x155f6211c2bdc0c4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x907090d060a0802
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0306000907090d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x201070b0d0e010c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x47df60
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x47df92
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x47dfb7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0xf
jb 0x47df42
jmp 0x47dfab
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0043d2e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0044c1c0
mov eax, edi
mov ecx, 0xf
nop
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.0047dee0
Function at 0x47dfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e0fd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xb2026d661d631fc6
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x42b20811bc203d85
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb3b87420a842b208
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6bc428fe06b46e28
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb1b070e19100017
mov qword [rsp + 0x38], rdx
movabs rdx, 0x181314051404090f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30d090c0f0d051b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10c081814040606
mov qword [rsp + 0x50], rdx
movabs rdx, 0x41a0b15181917
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x47e0a0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x47e0cd
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x47e0f0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x47e07d
jmp 0x47e0e4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.0043d2e0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x1d
call fcn.0044c1c0
nop
nop dword [rax]
call fcn.00449f60
jmp fcn.0047dfe0
Function at 0x481740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481826
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa3d958ae746fa070
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1ddb64e3659fa3d9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd06060a080b0508
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4060d06060a080b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10a07040b070c04
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4817c0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4817f2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x481817
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0xe
jb 0x4817a2
jmp 0x48180b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0043d2e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0044c1c0
mov eax, edi
mov ecx, 0xe
nop
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.00481740

Function at 0x481940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481a4c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6c86256f746f4384
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x41cc67f86f357717
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2fe72623f97941cc
mov qword [rsp + 0x48], rdx
movabs rdx, 0xab393f2b6f402958
mov qword [rsp + 0x50], rdx
movabs rdx, 0x12051b110c1c010f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa00181d141b1600
mov qword [rsp + 0x24], rdx
movabs rdx, 0x151806170a130a00
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1a1b0816170e151c
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4819e8
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x481a1c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x481a3f
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x23]
cmp rsi, 0x1e
jb 0x4819ce
jmp 0x481a33
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.0043d2e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x1e
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.00481940
Function at 0x481f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481ffd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x29cf7f2d27762f6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf074736d65f3f910
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2080a06060d00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30a0f040002080a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7050309030a0000
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x481fa0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x481fcd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x481ff0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x481f82
jmp 0x481fe4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.0043d2e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x10
call fcn.0044c1c0
nop
nop dword [rax]
call fcn.00449f60
jmp fcn.00481f20
Function at 0x4832e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4833e8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xde2074d4cbd96fd7
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3074cd6e2065e752
mov qword [rsp + 0x21], rdx
movabs rdx, 0xb33074cd6e2065e7
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd5d274c74fcde214
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf10131100130900
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1703030915101304
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x712111814171703
mov qword [rsp + 0x40], rdx
movabs rdx, 0x171808170f18020d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x48338b
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x45]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x45]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x4833b8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4833db
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x48336e
jmp 0x4833cf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0043d2e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x19
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004832e0

Function at 0x485ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485c67
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x327190447f538561
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xa1717d90
movabs rdx, 0x804020301060b0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6030504090a0a05
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x485c08
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 4]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 4]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x485c37
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x485c5a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x485beb
jmp 0x485c4e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0043d2e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0044c1c0
mov eax, edi
mov ecx, 0xc
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.00485ba0
Function at 0x4862a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48636c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe1e017ae4dea2067
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6c6c6464
movabs rdx, 0x105070402000803
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x506010802030105
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x486305
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x48633c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x48635f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7d]
cmp rsi, 0xc
jb 0x4862eb
jmp 0x486353
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0043d2e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0044c1c0
mov eax, edi
mov ecx, 0xc
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004862a0

Function at 0x4868e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4869a6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6cdeda9c47add041
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xc9
movabs rdx, 0x8060806020306
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1080405
xor eax, eax
nop
jmp 0x486940
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x486972
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x486997
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 9
jb 0x486922
jmp 0x48698b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0043d2e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0044c1c0
mov eax, edi
mov ecx, 9
nop
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004868e0
Function at 0x488420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48851d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1cfd6b1eef116dc5
mov qword [rsp + 0x19], rdx
movabs rdx, 0xfcb5951cfd6b1eef
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x59988374ba6d0eab
mov qword [rsp + 0x24], rdx
movabs rdx, 0x11010b110a06100c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1109090e0212080c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x3030e021109090e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4090b070b000c0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4884c0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4884ed
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x488510
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x48849f
jmp 0x488504
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0043d2e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x13
call fcn.0044c1c0
nop
nop dword [rax]
call fcn.00449f60
jmp fcn.00488420

Function at 0x488760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488846
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc45c2acad865d64f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc2d62c1adcd5d6c3
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0c0d0e09050b0f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x906060803010a0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa070e040e080904
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4887e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x488812
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x488837
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x72]
cmp rsi, 0x10
jb 0x4887c2
jmp 0x48882b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0043d2e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.00488760
Function at 0x488860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48893d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2f6d9ad04e1d6552
mov qword [rsp + 0x19], rdx
movabs rdx, 0x16e1454ebe2f6d9a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x90b0c0505070b03
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20b090b0c050507
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2090402070c0208
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4888e0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x6c]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x6c]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x48890d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x488930
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4888c2
jmp 0x488924
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0043d2e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.0044c1c0
mov eax, edi
mov ecx, 0xd
call fcn.0044c1c0
nop
nop dword [rax]
call fcn.00449f60
jmp fcn.00488860

Function at 0x4890c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48918c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x126f4f4365516543
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x37674742534a126f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0b02050d0b0705
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20b030c08020a0b
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x48912f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x48915c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x48917f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x489112
jmp 0x489173
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0043d2e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0044c1c0
mov eax, edi
mov ecx, 0xe
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004890c0
Function at 0x489fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a0dd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6972658be0720643
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf3cbd372db43b7ef
mov qword [rsp + 0x22], rdx
movabs rdx, 0x611760507f4463ab
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xdb63586c59501b4d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1010161019101310
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1f1309040b141010
mov qword [rsp + 0x40], rdx
movabs rdx, 0x18121d040d0d0903
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe041d1812191503
mov qword [rsp + 0x50], rdx
movabs rdx, 0x30f0b08011f081b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x48a080
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x48a0ad
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x48a0d0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x20
jb 0x48a05d
jmp 0x48a0c4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x20
call fcn.0043d2e0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x20
call fcn.0044c1c0
nop
nop dword [rax]
call fcn.00449f60
jmp fcn.00489fc0

Function at 0x48a6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a7c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd8e04064a326e547
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6f4142cc7323e1d8
mov qword [rsp + 0x26], rdx
movabs rdx, 0x208050b09010c03
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc070208050b0901
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6070d070103080b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x48a760
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x48a792
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x48a7b7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0xf
jb 0x48a742
jmp 0x48a7ab
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0043d2e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0044c1c0
mov eax, edi
mov ecx, 0xf
nop
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.0048a6e0