joyce8/EMBER2024-capa huggingface dataset:
Function at 0x461ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x461cd8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x3933daad2f33caea
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xead0c83772f93340
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3905e034da3737b4
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xdae53338393264df
mov qword [rsp + 0x34], rdx
movabs rdx, 0x356570f0aae73600
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x191c1b1c1c082501
mov qword [rsp + 0x44], rdx
movabs rdx, 0x11f101003260808
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xe1d2605011f1010
mov qword [rsp + 0x50], rdx
movabs rdx, 0x22031c1804030b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x18240d24150e1e05
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1613200a16230f15
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x461c78
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x2c
jge 0x461ca8
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x461ccb
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x28
jb 0x461c5b
jmp 0x461cbf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x28
call fcn.00441380
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00451880
mov eax, edi
mov ecx, 0x28
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00461ba0

Function at 0x462340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x462498
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x67b159b7d1c43780
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd6bcc14de9bec9c0
mov qword [rsp + 0x20], rdx
movabs rdx, 0xafb4d6bcc14de9be
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4934aba5310634d9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3630d431ad3331a1
mov qword [rsp + 0x32], rdx
movabs rdx, 0x30bfc9486138b1c0
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x14160328290c0b16
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1a11031406231416
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a071f2617040a22
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3102805161d250d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x517071927001a1f
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc050914290d271f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x120f020828270e07
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x462436
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x36
jge 0x462468
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x46248b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x2a
jb 0x462419
jmp 0x46247f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2a
call fcn.00441380
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00451880
mov eax, edi
mov ecx, 0x2a
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00462340
Function at 0x469240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x469378
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x7ceb6f5db20179e2
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc43dcad67ceb6f5d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xdf6c6c6163f4ae6c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xcc2056adf4c58564
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3850c006e58565c1
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8001e1503211800
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x90b081916220b0a
mov qword [rsp + 0x46], rdx
movabs rdx, 0x41e090b08191622
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2013160c02171c21
mov qword [rsp + 0x50], rdx
movabs rdx, 0x40e08061b211f1c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e0717160d0d0717
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x469318
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x2a
jge 0x469348
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x46936b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x24
jb 0x4692fb
jmp 0x46935f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x24
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00451880
mov eax, edi
mov ecx, 0x24
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00469240
Function at 0x46a760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x46a8e7
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x29e6c76fe2697497
mov qword [rsp + 0x18], rdx
movabs rdx, 0x80610765c0514df9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x86c00565cada84fa
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8995fadb74fc573c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb2b9f988867461ad
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc07c69eb11d432b5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1a10100f1d18001c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1609181215290907
mov qword [rsp + 0x50], rdx
movabs rdx, 0x112c0d1505132317
mov qword [rsp + 0x58], rdx
movabs rdx, 0x130828190a1d122b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x290d2a1e062b1d07
mov qword [rsp + 0x68], rdx
movabs rdx, 0x111f13070b130312
mov qword [rsp + 0x70], rdx
movabs rdx, 0x25102f2b26200f1a
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2e0327190d240615
mov qword [rsp + 0x80], rdx
movabs rdx, 0x121a191e1d02101a
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x46a880
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x48
jge 0x46a8b2
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x46a8da
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
cmp rsi, 0x30
jb 0x46a865
jmp 0x46a8ce
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x30
nop
call fcn.00441380
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x30
call fcn.00451880
mov eax, edi
mov ecx, 0x30
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0046a760
Function at 0x46dce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46ddfa
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x9ffc2004636e2473
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x274f2fd736e6ffa
mov qword [rsp + 0x24], rdx
movabs rdx, 0x14f2a50e74af0274
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x656661e9692078fe
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf14100419121c1c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x70107131c120f14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70c141907041515
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140c0d0616131a08
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1904040c191c1916
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x46dd97
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x26
jge 0x46ddc9
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x46dded
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0x1e
jb 0x46dd7d
jmp 0x46dde1
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451880
mov eax, edi
mov ecx, 0x1e
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.0046dce0

Function at 0x46e000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e0ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfd18de90fb806ef0
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x65922b896efd18de
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7368fb798967550b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20b00060e031004
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9050d030a050300
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90b040207051012
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x46e08d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x46e0ba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x46e0dd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x46e070
jmp 0x46e0d1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0046e000
Function at 0x46e180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e232
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0xd473da6e693ae442
mov qword [rsp + 0x20], rdx
movabs rdx, 0x505070501070102
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x46e1ce
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x46e202
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46e225
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7b]
cmp rsi, 8
jb 0x46e1b4
nop
jmp 0x46e219
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441380
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0046e180

Function at 0x46e5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e666
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xfa2ed53f69381233
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x69
movabs rdx, 0x504070002060201
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x400
xor eax, eax
nop
jmp 0x46e600
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x46e632
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x46e657
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 9
jb 0x46e5e2
jmp 0x46e64b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0046e5a0

Function at 0x46e9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46ea52
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0xf3733e6e0867f7fc
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3070005010001
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x46e9ee
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x46ea22
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46ea45
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
cmp rsi, 8
jb 0x46e9d4
nop
jmp 0x46ea39
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441380
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0046e9a0
Function at 0x470240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47033d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x473b698aea79d545
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x95d28eb0473b698a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0af21a3b267b5ec
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd110b0607010c13
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70d0c030b131001
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x130404090807070d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100a0f0c12131013
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4702e0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x47030d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x470330
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4702bf
jmp 0x470324
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00470240

Function at 0x4709e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470ab2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5fbeb3e36a4deebf
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb1648cf1475fbeb3
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa00040900020605
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0a09040a010a00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x470a4c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x470a7e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x470aa5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
cmp rsi, 0xd
jb 0x470a32
jmp 0x470a95
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004709e0
Function at 0x470ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470b72
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x69e16ba26daca9ed
mov qword [rsp + 0x20], rdx
movabs rdx, 0x400010204060006
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x470b0e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x470b42
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x470b65
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 8
jb 0x470af4
nop
jmp 0x470b59
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441380
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00470ac0

Function at 0x471500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4715fd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74fabdfcb6a6fe0d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x66610aab6974fabd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0e66122684750ac
mov qword [rsp + 0x26], rdx
movabs rdx, 0x110d000f0c130d01
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa050c000406130d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x3020a050c000406
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4060d09050c140f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4715a0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4715cd
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4715f0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x47157f
jmp 0x4715e4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00471500

Function at 0x471b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471c38
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2845fe1461796116
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5040405050400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x706
xor eax, eax
jmp 0x471bd8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x471c08
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x471c2b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x471bbb
jmp 0x471c1f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00471b80
Function at 0x472380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472446
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xba6198c5b0b1cd4b
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xa9
movabs rdx, 0x708040201070105
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x803
xor eax, eax
nop
jmp 0x4723e0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x472412
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x472437
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5a]
cmp rsi, 9
jb 0x4723c2
jmp 0x47242b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00472380

Function at 0x472780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472838
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4252722265535f65
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x200020106010604
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x106
xor eax, eax
jmp 0x4727d8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x472808
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47282b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4727bb
jmp 0x47281f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00472780
Function at 0x473940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473a3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8de70a096f72bbae
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9acf8f008de70a09
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7383f49ce4a4eea4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9060d000a0511
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80e0e040f081006
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x807010b0511080e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110c120b050d0c0f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4739d9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x473a0b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x473a2e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0x14
jb 0x4739bf
jmp 0x473a22
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.00473940

Function at 0x474aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474b6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x676875485d6a564f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6e615a744c676875
mov qword [rsp + 0x22], rdx
movabs rdx, 0x601030903010108
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x309020a080a0601
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x474b0f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x474b3c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x474b5f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x474af2
jmp 0x474b53
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00474aa0