joyce8/EMBER2024-capa huggingface dataset:
Function at 0x476140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476212
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8ca0b4f08e726f53
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64c4748ca0b4f08e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x404030609030205
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7020402
xor eax, eax
jmp 0x4761ab
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffcb
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4761dc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x476205
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffcb
add r8d, edx
cmp rsi, 0xb
jb 0x476191
jmp 0x4761f7
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00476140

Function at 0x476540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476636
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5fba651711b82676
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x495fba651711b826
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb670bc721d6e0917
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0c0c00040b0a01
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb02090204100403
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10a0a06030e0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4765d0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffff95
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x476602
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x476629
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffff95
add r8d, edx
cmp rsi, 0x11
jb 0x4765b6
nop
jmp 0x47661d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f380
mov eax, edi
mov ecx, 0x11
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.00476540
Function at 0x476c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476cc8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x65caea67eedfe2f5
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xe3
movabs rdx, 0x505030402080600
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x301
xor eax, eax
jmp 0x476c60
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x79
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x476c91
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x476cbb
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x79
add r8d, edx
cmp rsi, 9
jb 0x476c46
jmp 0x476caf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f380
mov eax, edi
mov ecx, 9
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00476c00

Function at 0x47c7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c8b6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x9e204217e46675ab
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xcb40d067469e2042
mov qword [rsp + 0x22], rdx
movabs rdx, 0x74df759a63c265a2
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0f080c040404
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb00110f070b000b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1303000a070d0d05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47c853
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x47c882
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x47c8a9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x47c836
nop
jmp 0x47c89d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.0047c7c0
Function at 0x47e060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x47e1e6
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x25394cfcdc9d1d6
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2c203ae1b8cacfb9
mov qword [rsp + 0x27], rdx
movabs rdx, 0x729764df552c203a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20e7f7c672107965
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd469731eb0704c73
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe41e75c19ae2ca1a
mov qword [rsp + 0x44], rdx
movabs rdx, 0x16130107051a051b
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x16292827042b0324
mov qword [rsp + 0x54], rdx
movabs rdx, 0x2261a1716292827
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20111d11250c2907
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1272c29131a0f1e
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc0f0a000b202101
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1a051e0410081b10
mov qword [rsp + 0x78], rdx
movabs rdx, 0x251a0901191b1b1a
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x47e179
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x66
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x3c
jge 0x47e1aa
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x47e1d7
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x66
add r8d, edx
cmp rsi, 0x2d
jb 0x47e15f
jmp 0x47e1cb
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2d
call fcn.0044a0a0
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x2d
call fcn.0045f380
mov eax, edi
mov ecx, 0x2d
nop
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0047e060

Function at 0x483ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483f88
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x27252e272a131134
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x706020307010504
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x303
xor eax, eax
nop
jmp 0x483f20
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 9
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x483f51
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x483f7b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 9
add r8d, edx
cmp rsi, 8
jb 0x483f02
jmp 0x483f6f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f380
mov eax, edi
mov ecx, 8
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00483ec0
Function at 0x484280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48435c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xfbaeb6fcf1f7bcf6
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf4fbfcfbaeb6fcf1
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2050809060a010a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x200030a04070205
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4842f2
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x31
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x484328
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x48434f
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x31
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x4842d8
jmp 0x484343
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.00484280

Function at 0x485b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485c68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6e303932ea32bf42
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x445038576e303932
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc1b8d9b434fb2cdd
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe0a0c11110c0703
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd12110b0b11080a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe120a1101130d12
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc08100308070003
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x485c00
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x54
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x485c31
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x485c5b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x54
add r8d, edx
cmp rsi, 0x14
jb 0x485be5
jmp 0x485c4f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00485b60
Function at 0x485f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486076
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x83953136f286999b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7fa1929d33908395
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8676a59e7b883289
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80612130a03100e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x115020e0c0806
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb140a070b0c110d
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x486010
movzx r9d, byte [rsp + rsi + 0x32]
add r9d, 0xffffff8e
add edx, r9d
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x486042
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x486069
movzx r8d, byte [rsp + rdi + 0x32]
add r8d, 0xffffff8e
add r8d, edx
cmp rsi, 0x16
jb 0x485ff6
nop
jmp 0x48605d
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f380
mov eax, edi
mov ecx, 0x16
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.00485f80

Function at 0x4860a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4861a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x5936304966324162
mov qword [rsp + 0x19], rdx
movabs rdx, 0x545d7a3335367a59
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4c7f368acb826176
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100416160c030f16
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40d130c12150108
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0401040e030c11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120c0c0700161507
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x486142
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x48616f
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x48619b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x486125
jmp 0x48618f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f380
mov eax, edi
mov ecx, 0x17
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004860a0
Function at 0x486580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486693
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xc1312c9cc1353431
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x99383ab933381832
mov qword [rsp + 0x22], rdx
movabs rdx, 0x389699383ab93338
mov qword [rsp + 0x24], rdx
movabs rdx, 0x319bb908349bb332
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x171207030f140516
mov qword [rsp + 0x34], rdx
movabs rdx, 0x180413190f0d090c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x517131418041319
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1613100c0f0d0d17
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x48662e
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x6c
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x48665f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x486686
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x6c
add r8d, edx
cmp rsi, 0x1a
jb 0x486614
jmp 0x48667a
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f380
mov eax, edi
mov ecx, 0x1a
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00486580

Function at 0x4866a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4867b3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x38dcd2393cc7363c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x32c0373dc9554f30
mov qword [rsp + 0x25], rdx
movabs rdx, 0x50c54d32c0373dc9
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa3ae36c0efcdcc36
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1215110217090a10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x16100b0e06170305
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0a141714100b15
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a05151400150a19
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x48674e
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x57
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x20
jge 0x48677f
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4867a6
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x57
add r8d, edx
cmp rsi, 0x1b
jb 0x486734
jmp 0x48679a
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0045f380
mov eax, edi
mov ecx, 0x1b
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004866a0
Function at 0x4870e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487208
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x8f3134e33438ef70
mov qword [rsp + 0x19], rdx
movabs rdx, 0xff30f1306e53adea
mov qword [rsp + 0x21], rdx
movabs rdx, 0x838066d365d10ff
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf4a06f5ce2313439
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1e090d1b10111c13
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1a041416131c0013
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf071d140d0a0b0f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13100a08070d01
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10a140f1d141c1e
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4871a0
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x25
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4871d1
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4871fb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x25
add r8d, edx
cmp rsi, 0x1f
jb 0x487183
jmp 0x4871ef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
call fcn.0045f380
mov eax, edi
mov ecx, 0x1f
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004870e0
Function at 0x487f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488048
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xe6f835fb36e9d531
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x34394ee6f835fb36
mov qword [rsp + 0x20], rdx
movabs rdx, 0x649634306932cbdd
mov qword [rsp + 0x28], rdx
movabs rdx, 0xecffdc31120e47d8
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe49c31f33f92e1a0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x21604060c0c120c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe181e1f0c071b1d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb1b141f111d121c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x151a22221c1d0114
mov qword [rsp + 0x58], rdx
movabs rdx, 0x18021f210815131a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x131518151918081d
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x487fe0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x35
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x30
jge 0x488011
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x48803b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x35
add r8d, edx
cmp rsi, 0x23
jb 0x487fc2
jmp 0x48802f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x23
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x23
call fcn.0045f380
mov eax, edi
mov ecx, 0x23
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00487f00

Function at 0x488060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4881a6
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x46d738d9b43838d6
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x30373946d738d9b4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x49aac83235566470
mov qword [rsp + 0x26], rdx
movabs rdx, 0xda33c8b47739c1db
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xac327a0b9a2fd034
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1d11201f131c1607
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x20220b1312030310
mov qword [rsp + 0x46], rdx
movabs rdx, 0xd1420220b131203
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140c1117221e1807
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6181203160b2213
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f1404061c04001a
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x488140
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x2a
jge 0x48816d
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x488194
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x23
jb 0x488122
jmp 0x488188
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x23
call fcn.0044a0a0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x23
call fcn.0045f380
mov eax, edi
mov ecx, 0x23
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00488060
Function at 0x4881c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488308
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x37e5a7c330078d31
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x31c403ae34fb37e5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3332d37d7fe73135
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe530388de531e89b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc3cf3133d27d388a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x16040c02160b0412
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80405040708040b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x251e0b100a08021a
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf16061120252004
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2406191710122102
mov qword [rsp + 0x60], rdx
movabs rdx, 0x80104131d160116
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4882a0
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x1c
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x30
jge 0x4882d1
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x4882fb
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x1c
add r8d, edx
cmp rsi, 0x26
jb 0x488282
jmp 0x4882ef
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x26
call fcn.0045f380
mov eax, edi
mov ecx, 0x26
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004881c0

Function at 0x488900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488a48
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x9e8b7435494f747b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x894b32aa9531739e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x304a6b30323576de
mov qword [rsp + 0x28], rdx
movabs rdx, 0x47704873376fb16a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x945231623773716b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1d0f00231c210f18
mov qword [rsp + 0x40], rdx
movabs rdx, 0x251508050b061b0a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd261f0e17071419
mov qword [rsp + 0x50], rdx
movabs rdx, 0x23061701060d1718
mov qword [rsp + 0x58], rdx
movabs rdx, 0x10b100b20012512
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1c1c1f1b02171e03
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4889e0
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffa9
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x30
jge 0x488a11
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x27
jae 0x488a3b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffa9
add r8d, edx
cmp rsi, 0x27
jb 0x4889c2
jmp 0x488a2f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x27
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x27
call fcn.0045f380
mov eax, edi
mov ecx, 0x27
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00488900
Function at 0x488a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488ba6
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xb138377c7caa09f2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xee582631389af338
mov qword [rsp + 0x26], rdx
movabs rdx, 0x33899886979fe791
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe633b70635e8359b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x838a363083c0350d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x201c0a150d100403
mov qword [rsp + 0x46], rdx
movabs rdx, 0x26232027111a091f
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x1c1626232027111a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x131a1401111f0900
mov qword [rsp + 0x58], rdx
movabs rdx, 0x90f18120f0f0114
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1d07221014020e22
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x488b40
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x2a
jge 0x488b6d
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x488b94
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x28
jb 0x488b22
jmp 0x488b88
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x28
call fcn.0044a0a0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x28
call fcn.0045f380
mov eax, edi
mov ecx, 0x28
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00488a60