joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4791e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479292
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0xee69d86972f067f7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x207070205000702
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x479231
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x47925e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x479285
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x479214
jmp 0x479275
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044d280
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004791e0

Function at 0x479400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4794cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x611932da61290a11
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1a25243135d65fbd
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0d0001080d0e02
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb0c0d0f06050d04
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x47946f
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0x55]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0x55]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x47949c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4794bf
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
cmp rsi, 0x10
jb 0x479452
jmp 0x4794b3
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00462ca0
mov eax, edi
mov ecx, 0x10
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00479400

Function at 0x479660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47971d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x632bdf7263d2ca24
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xe6
movabs rdx, 0x5050005060201
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x5080807
xor eax, eax
nop
jmp 0x4796c0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4796ed
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x479710
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4796a2
jmp 0x479704
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00479660
Function at 0x479740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4797f8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6b47645f66717875
mov qword [rsp + 0x28], rdx
movabs rdx, 0x304020002060703
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x607
xor eax, eax
jmp 0x479795
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x4797c8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4797eb
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
nop
cmp rsi, 8
jb 0x47977b
jmp 0x4797df
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.00479740

Function at 0x479900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4799ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x637493755f534466
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x8a9f72637493755f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x726f74b5897d709d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50e0a04090e0f0f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9070b07050e0a04
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4070007060d0e0f
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x47998a
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4799bc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4799df
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
cmp rsi, 0x13
jb 0x479970
jmp 0x4799d3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00479900
Function at 0x479b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479bcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x15b30516911d1517
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x936f72c3
movabs rdx, 0x601040307020802
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5040100010b0601
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x479b65
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x479b9c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x479bbf
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4d]
cmp rsi, 0xc
jb 0x479b4b
jmp 0x479bb3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00479b00

Function at 0x479ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479ddd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x9f8c8660f191b81
mov qword [rsp + 0x39], rdx
movabs rdx, 0x1b6509725c160509
mov qword [rsp + 0x40], rdx
movabs rdx, 0x746e06af50116505
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0506070d050f04
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe09030111051301
mov qword [rsp + 0x25], rdx
movabs rdx, 0xf0c080e090301
mov qword [rsp + 0x29], rdx
movabs rdx, 0x20a140d0f020011
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x479d80
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x479dad
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x479dd0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x479d5f
jmp 0x479dc4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00479ce0
Function at 0x47a1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a286
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x614d5f8765a59912
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x9bbf
movabs rdx, 0x904080808040400
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x102
xor eax, eax
jmp 0x47a220
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x47a252
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x47a277
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0xa
jb 0x47a202
jmp 0x47a26b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0047a1c0

Function at 0x47a2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a37d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb5ab899e656474a0
mov qword [rsp + 0x31], rdx
movabs rdx, 0x8371618eae8e75b5
mov qword [rsp + 0x38], rdx
movabs rdx, 0x200060d080b040b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd070200060d080b
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd0a02090e050a0a
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x47a320
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x47a34d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x47a370
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x47a302
jmp 0x47a364
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462ca0
mov eax, edi
mov ecx, 0xf
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0047a2a0
Function at 0x47a4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a5bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x658a98658096ba6c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x975279a4a38ba264
mov qword [rsp + 0x44], rdx
movabs rdx, 0x9d616ea0975279a4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8989994d8ca79773
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc131b03010d0213
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd03170b0c131b03
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe0a1a0a10160002
mov qword [rsp + 0x24], rdx
movabs rdx, 0x303061714000f06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1319051503100916
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x47a560
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x47a58d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x47a5b0
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x47a53d
jmp 0x47a5a4
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1c
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0047a4a0

Function at 0x47a660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a74c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7a51355866636a52
mov qword [rsp + 0x36], rdx
movabs rdx, 0x605f7a5135586663
mov qword [rsp + 0x38], rdx
movabs rdx, 0x722f47615069676e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x407020b010b070f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x90307090403050b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60d060b05040d10
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x47a6ea
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x47a71c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47a73f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0x12
jb 0x47a6d0
jmp 0x47a733
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0047a660
Function at 0x47a7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a8ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5d6f5f636e6c6f41
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x3b4f635d
movabs rdx, 0x200040405090002
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30800050307050a
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x47a845
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x47a87c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x47a89f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
cmp rsi, 0xb
jb 0x47a82b
jmp 0x47a893
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0047a7e0

Function at 0x47a8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a9bb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xebeab69eced65a9
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90c17e310ebeab69
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6ecc9b74971e74b0
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7060811020a0809
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9030605060e0011
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50909030605060e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0c0f030f120b00
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x47a959
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1a
jge 0x47a98b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x47a9ae
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
cmp rsi, 0x14
jb 0x47a93f
jmp 0x47a9a2
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00462ca0
mov eax, edi
mov ecx, 0x14
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.0047a8c0
Function at 0x47ec60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ed1d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x55645e745d5e6e69
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x65
movabs rdx, 0x202050303050607
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x7020407
xor eax, eax
nop
jmp 0x47ecc0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0xd]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x47eced
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47ed10
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x47eca2
jmp 0x47ed04
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0047ec60
Function at 0x486c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486d4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa7d263656c8b65a7
mov qword [rsp + 0x31], rdx
movabs rdx, 0x312e70ef6cb8aba7
mov qword [rsp + 0x38], rdx
movabs rdx, 0xce9d2ba9cab986e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14160b1308020608
mov qword [rsp + 0x19], rdx
movabs rdx, 0x70c14121013100e
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1116090015161213
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x486ced
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
cmp rax, 0x18
jge 0x486d1a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x486d3d
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0x17
jb 0x486cd0
jmp 0x486d31
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00486c60

Function at 0x487000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4870fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x727e866f989b6e75
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x7065a520b786727e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x86656c6b20649886
mov qword [rsp + 0x48], rdx
movabs rdx, 0x813030215050815
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70d0b090f0b090b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x12020e0f070d0b09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x120d040607120412
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x487099
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4870cb
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4870ee
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
cmp rsi, 0x16
jb 0x48707f
jmp 0x4870e2
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.00487000
Function at 0x487120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48720c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7566666f635a325b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3a614952205e6555
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6061661b4d3e204c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10080f0201160c17
mov qword [rsp + 0x18], rdx
movabs rdx, 0x50d140d12000806
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1602151713050a00
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4871aa
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x4871dc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4871ff
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
cmp rsi, 0x18
jb 0x487190
jmp 0x4871f3
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00462ca0
mov eax, edi
mov ecx, 0x18
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00487120

Function at 0x4874a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4875fa
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x157463d796660f31
mov qword [rsp + 0x53], rdx
movabs rdx, 0xfc1f1a4031fb69cb
mov qword [rsp + 0x5b], rdx
movabs rdx, 0x33c1ea9a6cfc1f1a
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe4766ec23c3a226f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x68e3bebbd26469c5
mov qword [rsp + 0x70], rdx
movabs rdx, 0xd7f4136e69f02fac
mov qword [rsp + 0x78], rdx
movabs rdx, 0x251c1c191d270f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc040a0300251c1c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1100082b181c0e21
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xa2214000b130c08
mov qword [rsp + 0x33], rdx
movabs rdx, 0x160322011908031d
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x2c20071223270e2a
mov qword [rsp + 0x43], rdx
movabs rdx, 0xf0d2b0b140a262c
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x487598
movzx r9d, byte [rsp + rsi + 0x53]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x53], dl
mov byte [rsp + rsi + 0x53], r8b
add rax, 2
cmp rax, 0x34
jge 0x4875ca
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4875ed
movzx r8d, byte [rsp + rdi + 0x53]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0x2d
jb 0x48757e
jmp 0x4875e1
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x2d
call fcn.0044d280
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00462ca0
mov eax, edi
mov ecx, 0x2d
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.004874a0
Function at 0x487700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487827
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x68b265f8664a19bc
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xb068b265f8664a19
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6c769920b9c520a0
mov qword [rsp + 0x48], rdx
movabs rdx, 0xfa667265b3c77320
mov qword [rsp + 0x50], rdx
movabs rdx, 0xcf75b566762006c7
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf0e140c1d090203
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe020f0e140c1d09
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1a081e0e200b1806
mov qword [rsp + 0x27], rdx
movabs rdx, 0x120602091e0402
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1e1e08191e011304
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4877c9
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x22
jge 0x4877f7
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x21
jae 0x48781a
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x21
jb 0x4877ac
jmp 0x48780e
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x21
call fcn.0044d280
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00462ca0
mov eax, edi
mov ecx, 0x21
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00487700

Function at 0x487840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4879a7
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xdca46365f88e8d0a
mov qword [rsp + 0x53], rdx
movabs rdx, 0x11b976efcf6e6920
mov qword [rsp + 0x5b], rdx
movabs rdx, 0x22726520f411b976
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe7617a027dc726f
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe074fa12ade21503
mov qword [rsp + 0x70], rdx
movabs rdx, 0x16659857ce05bfa5
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1101a2802270d03
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf10100606212025
mov qword [rsp + 0x21], rdx
movabs rdx, 0x190e0f1010060621
mov qword [rsp + 0x23], rdx
movabs rdx, 0x61a1c0e0b1e2627
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1e2a032a1707
mov qword [rsp + 0x33], rdx
movabs rdx, 0x318211f221d1f2c
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x29141a14270c222c
mov qword [rsp + 0x43], rdx
movabs rdx, 0x1f1925291d0f2924
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x48794a
movzx r9d, byte [rsp + rsi + 0x53]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x53], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x53], dl
add rax, 2
cmp rax, 0x3a
jge 0x487977
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x48799a
movzx r8d, byte [rsp + rdi + 0x53]
sub r8d, edx
cmp rsi, 0x2d
jb 0x48792d
jmp 0x48798e
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x2d
call fcn.0044d280
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00462ca0
mov eax, edi
mov ecx, 0x2d
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00487840