joyce8/EMBER2024-capa huggingface dataset:
Function at 0x476780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47685c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x13aaa57a656874a4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7472dc242bd313aa
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa09070a06000904
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7050a080b040a09
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4767f5
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x53]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x53]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x476828
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x47684f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x4767d8
jmp 0x476843
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00476780
Function at 0x477660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47773c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x776953616a671051
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5e6c6163686e7769
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90d0d0105070c03
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa01010207020709
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4776d2
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x477708
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x47772f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
nop dword [rax]
cmp rsi, 0xe
jb 0x4776b8
jmp 0x477723
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00477660

Function at 0x477ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477bb2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x74a344ccb5e76f17
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64658b74a344ccb5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x606020208000204
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3040308
xor eax, eax
jmp 0x477b4e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x477b7b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x477ba5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x477b31
jmp 0x477b96
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00477ae0
Function at 0x4782a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47837c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xb4f3b86513c23457
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x65c827b4f3b86513
mov qword [rsp + 0x22], rdx
movabs rdx, 0x803090208010608
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x706080501060803
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x478312
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x478348
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x47836f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
nop dword [rax]
cmp rsi, 0xb
jb 0x4782f8
jmp 0x478363
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004782a0

Function at 0x47c300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c408
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x3b042e7327749362
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x74493047e2d4e13b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6567acc2eac66f6f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10d0c0613080903
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10a12060a070b0a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa0d010a12060a07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60c09140a0a1113
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x47c3a0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x47c3d2
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x47c3fb
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x17
jb 0x47c385
jmp 0x47c3ef
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0047c300
Function at 0x47cc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x47cd66
sub rsp, 0xc0
mov qword [rsp + 0xb8], rbp
lea rbp, [rsp + 0xb8]
movabs rdx, 0x3e422ef465905d62
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x893a966266823e42
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe742f4616572c763
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2a7672843e64658c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x8c5278fb73446f69
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x77376e855d909a72
mov qword [rsp + 0x44], rdx
movabs rdx, 0x6120102f3f205a42
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x6a73948e7b7c9531
mov qword [rsp + 0x54], rdx
movabs rdx, 0x5a10653cfa6c754d
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x16022a1a15161d22
mov qword [rsp + 0x64], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x00bc7f38]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045fbda
mov rbp, qword [rbp]
xor eax, eax
jmp 0x47ccf9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x54
jge 0x47cd2b
movzx edx, byte [rsp + rax + 0x64]
movzx esi, byte [rsp + rax + 0x65]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x46
jae 0x47cd58
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0x46
jb 0x47ccdf
jmp 0x47cd4c
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x46
call fcn.0044a200
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov eax, esi
mov ecx, 0x46
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x46
nop
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0047cc00

Function at 0x47cf20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d052
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xdeb5d065d3882d62
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xcbfff58fe05c76a7
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6e550b666f207ecd
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x670379768b1bb0fd
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1b1a03110f101c1f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe15050307011b1a
mov qword [rsp + 0x44], rdx
movabs rdx, 0x611071e0e150503
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe18150b1a0d0d1f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b0c0d070a150c1c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x40e1f0708190205
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x47cfec
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2c
jge 0x47d01e
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x47d045
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x20
jb 0x47cfd2
jmp 0x47d039
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.0044a200
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x20
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0047cf20
Function at 0x47d620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d728
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa14c326f6966868b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x943ea14c326f6966
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x788c8f7493af7ca9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x11000e10070c0c0a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf010a110d080a09
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100a0f010a110d08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5060b0b010c0e0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47d6c0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x47d6f2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47d71b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0x12
jb 0x47d6a5
jmp 0x47d70f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0047d620
Function at 0x4801e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x480360
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movups xmmword [rsp + 0x90], xmm15
movups xmmword [rsp + 0xa0], xmm15
movabs rdx, 0x6a6b6949cb5cc300
mov qword [rsp + 0x34], rdx
movabs rdx, 0x77a28f58934f164e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x710b315170d3460
mov qword [rsp + 0x44], rdx
movabs rdx, 0x9b005273bbf60ab
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1b1a03110f101c1f
mov qword [rsp + 0x54], rdx
movabs rdx, 0xe15050307011b1a
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x611071e0e150503
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe18150b1a0d0d1f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1b0c0d070a150c1c
mov qword [rsp + 0x70], rdx
movabs rdx, 0x40e1f0708190205
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4802cc
movzx r8d, byte [rsp + rbx + 0x34]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rsi + 0x34], dl
mov byte [rsp + rbx + 0x34], dil
add rax, 2
cmp rax, 0x2c
jge 0x4802fb
movzx edx, byte [rsp + rax + 0x54]
movzx ebx, byte [rsp + rax + 0x55]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0x20
jae 0x480353
movzx edi, byte [rsp + rsi + 0x34]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x79]
cmp rbx, 0x20
jb 0x4802b2
jmp 0x480347
movups xmmword [rsp + 0x14], xmm15
movups xmmword [rsp + 0x24], xmm15
xor eax, eax
jmp 0x480317
movzx ecx, byte [rsp + rax + 0x34]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 0x20
jl 0x48030b
movups xmm0, xmmword [rsp + 0x14]
movups xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [rsp + 0x24]
movups xmmword [rsp + 0xa0], xmm0
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, ebx
mov ecx, 0x20
call fcn.0045f5c0
mov eax, esi
mov ecx, 0x20
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004801e0

Function at 0x484fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4850ab
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x9f709695309efafb
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xaa32
movabs rdx, 0x504040006050104
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2070904
xor eax, eax
jmp 0x485046
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x5e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x485077
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x48509e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x485029
jmp 0x485092
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00484fe0
Function at 0x4854c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48558b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6364653835326631
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8d905d82
movabs rdx, 0x1090b090807080a
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0xa0a0506
xor eax, eax
jmp 0x485527
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x485557
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x48557e
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x48550a
jmp 0x485572
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004854c0

Function at 0x4855a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48566b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6434bf33398e6762
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5f956333
movabs rdx, 0x20a07000a020a05
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0xb090105
xor eax, eax
jmp 0x485607
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x485637
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x48565e
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4855ea
jmp 0x485652
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004855a0
Function at 0x487a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487b56
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x5d36367630d86cc7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5f34c769a5917371
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80d8d76c36933237
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x121517170b160212
mov qword [rsp + 0x34], rdx
movabs rdx, 0x400161212151717
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8140d040d0b0109
mov qword [rsp + 0x40], rdx
movabs rdx, 0x214081615070a14
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd020f0b0b0b0c0c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x487aee
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x24
jge 0x487b22
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x487b49
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
cmp rsi, 0x18
jb 0x487ad4
nop
jmp 0x487b3d
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x18
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.00487a40

Function at 0x487b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487ca8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x584a31504d353e40
mov qword [rsp + 0x18], rdx
movabs rdx, 0x41387a57374e664d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x383141387a57374e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50512d424250633f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x180a070c04140a13
mov qword [rsp + 0x32], rdx
movabs rdx, 0x116150f0d09180a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb141919060d0619
mov qword [rsp + 0x40], rdx
movabs rdx, 0x619090003090808
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1705121403031700
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x487c40
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x31]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x487c72
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x487c9b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x31]
cmp rsi, 0x1a
jb 0x487c23
jmp 0x487c8f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00487b80
Function at 0x488120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488232
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x737b4a3965335b33
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3261375539305c77
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6340633261375539
mov qword [rsp + 0x24], rdx
movabs rdx, 0x566d5b358c305a7a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x16140c1111181307
mov qword [rsp + 0x34], rdx
movabs rdx, 0x508160609140e0e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1a0e091305081606
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1003071912050116
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4881d1
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1c
jge 0x4881fe
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x488225
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4881b4
jmp 0x488219
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1b
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00488120

Function at 0x488240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488368
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x34f91af291aaa2f3
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1535a135b1d487aa
mov qword [rsp + 0x22], rdx
movabs rdx, 0xac9237781535a135
mov qword [rsp + 0x26], rdx
movabs rdx, 0x351b31fb37303033
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60b050a0e0a1a06
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf03060b050a0e0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10810031318020f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1204030e000a02
mov qword [rsp + 0x48], rdx
movabs rdx, 0x31a0912130e040d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x488300
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x488332
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x48835b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x1c
jb 0x4882e3
jmp 0x48834f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1c
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00488240
Function at 0x489340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489466
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x750c10f2cd343832
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30ee343034d733c9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x39a9f831ece93404
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe8f0ef9c083711be
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1407031318121c16
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1e14140703131812
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4070e0807071d16
mov qword [rsp + 0x48], rdx
movabs rdx, 0x61f151c0a1e1b04
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13051e101906120e
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x489400
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x48942d
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x489454
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x20
jb 0x4893e3
jmp 0x489448
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x20
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00489340
Function at 0x496160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49622b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6e7c96886a72948f
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x92
movabs rdx, 0x304060608080503
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3000801
xor eax, eax
jmp 0x4961c4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xf]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x4961f7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x49621e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4961a7
jmp 0x496212
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00496160

Function at 0x496c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x496d5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xee14364561764869
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2065434c30ee1436
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40405090807060a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x901090a07080404
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x496cf5
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x496d28
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x496d4f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xd
jb 0x496cd8
jmp 0x496d43
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00496c80