joyce8/EMBER2024-capa huggingface dataset:
Function at 0x463840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x463926
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe48237e38b913834
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x398f939e309138e4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9030e020b020c01
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7040e0709030e02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60706020c060d0e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4638c0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4638f2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x463917
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
cmp rsi, 0xf
jb 0x4638a2
jmp 0x46390b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.00441980
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00452300
mov eax, edi
mov ecx, 0xf
nop
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00463840

Function at 0x464780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46486a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x11fc0f36053638e5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30e332080d11fc0f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc5321b250ff00b07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd0e070f0b0b0714
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1207090803000d0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0f111011060503
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x46480d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x46483a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x46485d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4647f0
jmp 0x464851
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00452300
mov eax, edi
mov ecx, 0x15
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00464780
Function at 0x465dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x465ecc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xbb3139313535c03e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb238a44bba3860b3
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa455b238a44bba38
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa946c6aa24ce36c5
mov qword [rsp + 0x30], rdx
movabs rdx, 0x12170c1208091410
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0f0408011815
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0b110f0d160700
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1804151419090904
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x465e68
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x465e9c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x465ebf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0x1a
jb 0x465e4e
jmp 0x465eb3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00441980
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00452300
mov eax, edi
mov ecx, 0x1a
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00465dc0

Function at 0x466a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x466b48
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x37292b00ed373219
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x30e5cee833343435
mov qword [rsp + 0x22], rdx
movabs rdx, 0x12271aee0e3130e5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40c1a3508370b22
mov qword [rsp + 0x30], rdx
movabs rdx, 0x311150c04170d17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x191c00111215041d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16041b051b1b1b0e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x100d14061513170d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x466aeb
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x466b18
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x466b3b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x466ace
jmp 0x466b2f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.00441980
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00452300
mov eax, edi
mov ecx, 0x1e
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00466a40
Function at 0x466b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x466c7d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x4d384a33503f3129
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x442d1f3e1f623736
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1e4c474742243244
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3f33313e327f3810
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd0b041216171100
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1d1602190e1d0d0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x21e111b04080c1b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x31e130a02021508
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13070f0c030f0514
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x466c20
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x466c4d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x466c70
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1f
jb 0x466bfd
jmp 0x466c64
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1f
call fcn.00441980
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00452300
mov eax, edi
mov ecx, 0x1f
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.00466b60

Function at 0x467600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x467738
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x71614e52843535a2
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4d6971614e528435
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x325e304f54937872
mov qword [rsp + 0x24], rdx
movabs rdx, 0x96c2325335643344
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x35325e75b4523799
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc0307061d181a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb1e0d1604101a04
mov qword [rsp + 0x44], rdx
movabs rdx, 0x6000a0c0b1e0d16
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e140b121c08191f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x9000c1e181f050e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x31c09070a121c18
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4676d5
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x2c
jge 0x467708
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x46772b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
nop
cmp rsi, 0x22
jb 0x4676bb
jmp 0x46771f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x22
call fcn.00441980
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00452300
mov eax, edi
mov ecx, 0x22
call fcn.00452300
nop
call fcn.00450080
nop dword [rax]
jmp fcn.00467600
Function at 0x467cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x467dec
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6d7738757a783884
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2379d06d7738757a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xaf32c07435329776
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7caf447cb03984ba
mov qword [rsp + 0x32], rdx
movabs rdx, 0x76644a3555597a34
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x14080c12210322
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1006021a130c0014
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e2016061909060a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7210c0407161c17
mov qword [rsp + 0x58], rdx
movabs rdx, 0x71d090618200b0f
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x467d86
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x26
jge 0x467dbc
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x23
jae 0x467ddf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x23
jb 0x467d6c
jmp 0x467dd3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x23
call fcn.00441980
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00452300
mov eax, edi
mov ecx, 0x23
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00467cc0

Function at 0x467e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x467f2c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xe607ff24bdb13473
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30b2fb02e607ff24
mov qword [rsp + 0x22], rdx
movabs rdx, 0x331c41d36cfef02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x323736150ecc34e5
mov qword [rsp + 0x32], rdx
movabs rdx, 0xfd32d0a17ce33633
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x13061014181f0404
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1800200a03101306
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe050c0018021711
mov qword [rsp + 0x50], rdx
movabs rdx, 0x90c21160a170805
mov qword [rsp + 0x58], rdx
movabs rdx, 0x232002101e070d18
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x467ec6
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x26
jge 0x467efc
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x24
jae 0x467f1f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 0x24
jb 0x467eac
jmp 0x467f13
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x24
call fcn.00441980
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00452300
mov eax, edi
mov ecx, 0x24
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00467e00
Function at 0x470de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x470f67
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x17076eaf900d6fa7
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6717076eaf900d6f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc0c12903469f8768
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1d62a1c46e61b2bb
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xdb534c666141d965
mov qword [rsp + 0x32], rdx
movabs rdx, 0x8959319e6c756d06
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x508b77ddfb74e662
mov qword [rsp + 0x42], rdx
movabs rdx, 0x250b0b1510210b27
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x7300a030e2c1e2c
mov qword [rsp + 0x52], rdx
movabs rdx, 0x2302a0d02190730
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf27000c0a031118
mov qword [rsp + 0x60], rdx
movabs rdx, 0x70a040e12041f20
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1628062c061e1802
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2f1b1a2d200d1512
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2f200c0c190b06
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x470f00
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x3e
jge 0x470f32
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x470f5a
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0x31
jb 0x470ee2
jmp 0x470f4e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x31
nop
call fcn.00441980
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x31
call fcn.00452300
mov eax, edi
mov ecx, 0x31
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00470de0
Function at 0x471c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x471dc7
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x1d7c065920fe6f6e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa96e0836f19beef2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x624e12eb3ff3d134
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe66f2397134d74b3
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4a16de6c33262036
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x3031ad38d207699b
mov qword [rsp + 0x42], rdx
movabs rdx, 0x61c1423281d220b
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1c0d05060a2b061c
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf25151824112b1b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x261315271d0a1f2c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2a25070d0811252d
mov qword [rsp + 0x68], rdx
movabs rdx, 0x213121b2d202416
mov qword [rsp + 0x70], rdx
movabs rdx, 0x52c091b2c0f0a08
mov qword [rsp + 0x78], rdx
movabs rdx, 0x221e25042a221a05
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2b2313110c0f2610
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x471d62
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x46
jge 0x471d8f
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x471dba
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x30
jb 0x471d45
jmp 0x471dae
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x30
nop dword [rax + rax]
call fcn.00441980
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x30
call fcn.00452300
mov eax, edi
mov ecx, 0x30
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00471c40

Function at 0x4720e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4721c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb47435f39b6f3175
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x46ac7443429e7b9e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0307000e0d040d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x8020d0307000e0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2000d060e090a00
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x472160
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x472192
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4721b7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0x10
jb 0x472142
jmp 0x4721ab
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.00441980
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00452300
mov eax, edi
mov ecx, 0x10
nop
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004720e0
Function at 0x472940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4729f2
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x2e0a49651d262fe4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x707020601030600
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x47298e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4729c2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4729e5
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x40]
cmp rsi, 8
jb 0x472974
nop
jmp 0x4729d9
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441980
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00452300
mov eax, edi
mov ecx, 8
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00472940

Function at 0x473620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47370c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1066696c22766c69
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x621066696c22766c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xdb4e1269626c2e69
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60c03070c01010a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1007060c03070c01
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0610030b0e0703
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4736aa
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4736dc
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4736ff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
cmp rsi, 0x11
jb 0x473690
jmp 0x4736f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00441980
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452300
mov eax, edi
mov ecx, 0x11
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00473620
Function at 0x475c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475cd8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf9c06f10696cd2c6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x601050704000504
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x500
xor eax, eax
jmp 0x475c78
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x475ca8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x475ccb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x475c5b
jmp 0x475cbf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441980
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00452300
mov eax, edi
mov ecx, 8
call fcn.00452300
nop
call fcn.00450080
nop dword [rax]
jmp fcn.00475c20

Function at 0x478400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4784b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6eaaa26766d9a60c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6050102060302
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3000306
xor eax, eax
jmp 0x478459
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x478488
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4784ab
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop
cmp rsi, 8
jb 0x47843c
jmp 0x47849f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441980
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00452300
mov eax, edi
mov ecx, 8
call fcn.00452300
nop
call fcn.00450080
nop dword [rax]
jmp fcn.00478400

Function at 0x479e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479f18
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf387203fc9569b8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x406060403000702
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2020600
xor eax, eax
jmp 0x479eb6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x479ee8
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x479f0b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
cmp rsi, 8
jb 0x479e9c
jmp 0x479eff
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441980
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00452300
mov eax, edi
mov ecx, 8
call fcn.00452300
nop
call fcn.00450080
nop dword [rax]
jmp fcn.00479e60
Function at 0x47c3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c48a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6672505065503450
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4c66725050655034
mov qword [rsp + 0x20], rdx
movabs rdx, 0x363e403b2d304b40
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8020e050101090d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0c10030a0b000f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2050d0103040b07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47c42d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x28]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x28]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x47c45a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47c47d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x47c410
jmp 0x47c471
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452300
mov eax, edi
mov ecx, 0x11
call fcn.00452300
nop
call fcn.00450080
jmp fcn.0047c3a0

Function at 0x47c4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c55d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xde76fa765f846c88
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x636e
movabs rdx, 0x7020008050604
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4050602
xor eax, eax
jmp 0x47c500
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x7e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x7e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x47c52d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x47c550
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x47c4e3
jmp 0x47c544
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441980
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00452300
mov eax, edi
mov ecx, 0xa
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.0047c4a0