joyce8/EMBER2024-capa huggingface dataset:
Function at 0x486640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48673b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x11b02805c828a269
mov qword [rsp + 0x18], rdx
movabs rdx, 0x16b9d46c65fb6c6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x116fab73c661bf53
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0d010e05020a0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1000e00110a1703
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0715150f170117
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15040e1306150e0e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4866d9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x48670b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x48672e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x18
jb 0x4866bf
jmp 0x486722
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460ec0
mov eax, edi
mov ecx, 0x18
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.00486640

Function at 0x4882a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48837d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x17706df243af7c47
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8039a71ab7726502
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0e0e0f0a0e0104
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb040d080e0e0e0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70c070a04080208
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x488320
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x48834d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x488370
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x488302
jmp 0x488364
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460ec0
mov eax, edi
mov ecx, 0x10
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004882a0
Function at 0x4883a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48847d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xbd666e06ec1c6547
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc7c90b9c126cbd66
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9060303020b060b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60409060303020b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb020a03070d0c06
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x488420
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x42]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x42]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x48844d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x488470
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x488402
jmp 0x488464
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460ec0
mov eax, edi
mov ecx, 0xe
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004883a0

Function at 0x489ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489be8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65e504cad6efc2f8
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7433e79c6de44303
mov qword [rsp + 0x25], rdx
movabs rdx, 0x697433e79c6de443
mov qword [rsp + 0x26], rdx
movabs rdx, 0xed7508e8a899f20b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x181215050d0a0103
mov qword [rsp + 0x36], rdx
movabs rdx, 0x613140c0e140215
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x40613140c0e14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110e020806160c14
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x489b8b
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x489bb8
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x489bdb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x489b6e
jmp 0x489bcf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460ec0
mov eax, edi
mov ecx, 0x19
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00489ae0
Function at 0x48a200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a2c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x350995eaa7036547
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xf70f740e
movabs rdx, 0x40703050a020707
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x408030b06050407
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48a268
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x48a297
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x48a2ba
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x48a24b
jmp 0x48a2ae
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0048a200

Function at 0x48a5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a686
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1cc4de655674d047
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x2724
movabs rdx, 0x909070108060905
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x807
xor eax, eax
jmp 0x48a620
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x48a652
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x48a677
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0xa
jb 0x48a602
jmp 0x48a66b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460ec0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0048a5c0
Function at 0x48ace0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48adc6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xee29be814a70614d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3d31144666ee29be
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60b040b0306050b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa07060b040b0306
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0c0c040b04060c
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x48ad60
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x26]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x48ad92
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x48adb7
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x26]
cmp rsi, 0xd
jb 0x48ad42
jmp 0x48adab
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00460ec0
mov eax, edi
mov ecx, 0xd
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0048ace0

Function at 0x48b020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b0f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x337300de63158850
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf3fb7772fb467133
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa010c050104020c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2040a0e0d05080a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48b08c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x48b0be
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x48b0e5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0xf
jb 0x48b072
jmp 0x48b0d5
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0048b020
Function at 0x48cec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48cf92
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65f25670310df048
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4a4369df664f0565
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0d020008020d01
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30d0606060d080e
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48cf2c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x48cf5e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x48cf85
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0xf
jb 0x48cf12
jmp 0x48cf75
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0048cec0

Function at 0x48e860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e95b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xbd4e8b65d524f924
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbd271a0d0823bd4e
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc7051aa531394ec4
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10d050d1210140d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x815010303140711
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0e140b020c0309
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0010130a0811
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x48e8f9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x48e92b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x48e94e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 0x16
jb 0x48e8df
jmp 0x48e942
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460ec0
mov eax, edi
mov ecx, 0x16
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.0048e860
Function at 0x48e980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ea66
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3674656e555a3177
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x421445423a613674
mov qword [rsp + 0x24], rdx
movabs rdx, 0x60c0a0706040002
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd060609060c0a07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x900060d06010a06
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x48ea00
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x48ea32
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x48ea57
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0xe
jb 0x48e9e2
jmp 0x48ea4b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460ec0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0048e980

Function at 0x48f520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f5de
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x491b643041746597
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x376fb02b
movabs rdx, 0x80408040b090800
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x90609
xor eax, eax
jmp 0x48f581
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x48f5ae
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x48f5d1
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x48f564
jmp 0x48f5c5
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
nop
call fcn.0045ec40
jmp fcn.0048f520

Function at 0x48f740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f7f8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6c2063e149e31357
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x606010604020402
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x404
xor eax, eax
jmp 0x48f795
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x48f7c8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x48f7eb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
nop
cmp rsi, 8
jb 0x48f77b
jmp 0x48f7df
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00460ec0
mov eax, edi
mov ecx, 8
call fcn.00460ec0
nop
call fcn.0045ec40
nop dword [rax]
jmp fcn.0048f740
Function at 0x48fd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48fe32
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd0ae3cdd3be16567
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x65d1a8d0ae3cdd3b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x206080505030803
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x304040209070206
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48fdcc
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x48fdfe
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x48fe25
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0xb
jb 0x48fdb2
jmp 0x48fe15
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00460ec0
mov eax, edi
mov ecx, 0xb
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0048fd60

Function at 0x490000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4900dd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3476fdb4aae3f69e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb8a4036eef3476fd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x508020400010c03
mov qword [rsp + 0x26], rdx
movabs rdx, 0x407050802040001
mov qword [rsp + 0x28], rdx
movabs rdx, 0x500080b0b0a0405
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x490080
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4900ad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4900d0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x490062
jmp 0x4900c4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00460ec0
mov eax, edi
mov ecx, 0xd
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00490000
Function at 0x490500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4905bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x62726060736c6567
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x7470
movabs rdx, 0x602080108010507
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7060405
xor eax, eax
jmp 0x490560
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x49058d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4905b0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x490543
jmp 0x4905a4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460ec0
mov eax, edi
mov ecx, 0xa
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00490500

Function at 0x490720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4907d8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf577482f7475054f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7040701070701
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x105
xor eax, eax
jmp 0x490778
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x2c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4907a8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4907cb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x49075b
jmp 0x4907bf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00460ec0
mov eax, edi
mov ecx, 8
call fcn.00460ec0
nop
call fcn.0045ec40
nop dword [rax]
jmp fcn.00490720

Function at 0x49cc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49ccfd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x740808284300b2b5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xbc7845baabb3f274
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0a0e0209050608
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60901020a0a0e02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80b000e08040108
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x49cca0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x49cccd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x49ccf0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x49cc82
jmp 0x49cce4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.0049cc20
Function at 0x49d520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d63d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xf3e27785d9fded01
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd865ba6e6204d16c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x74d865ba6e6204d1
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8f0951f469729a53
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x150f0d060f160309
mov qword [rsp + 0x36], rdx
movabs rdx, 0x708150f0d060f16
mov qword [rsp + 0x38], rdx
movabs rdx, 0x16160b0115150b07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1518160a17120a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1607070402010507
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x49d5e0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x49d60d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x49d630
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x49d5bd
jmp 0x49d624
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460ec0
mov eax, edi
mov ecx, 0x19
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.0049d520

Function at 0x49de40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49df06
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1714b2bd6ecfcb16
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x1c
movabs rdx, 0x607080504020401
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8040100
xor eax, eax
nop
jmp 0x49dea0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x49ded2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x49def7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 9
jb 0x49de82
jmp 0x49deeb
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00460ec0
mov eax, edi
mov ecx, 9
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0049de40