joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4707c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47088c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3a07003bea081247
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6369
movabs rdx, 0x607020602030501
mov qword [rsp + 0x22], rdx
movabs rdx, 0x303020105040607
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x470824
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x47085c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x47087f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0xa
jb 0x47080a
jmp 0x470873
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004707c0

Function at 0x471400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4714bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xae39fe72b2afc249
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xb3
movabs rdx, 0x703050308020605
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x601
xor eax, eax
nop
jmp 0x471460
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x47148d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4714b0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x471442
jmp 0x4714a4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00471400

Function at 0x471b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471c18
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xdbd840e661dddb5c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x605050005050107
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x402
xor eax, eax
jmp 0x471bb5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x80]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x471be8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x471c0b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x80]
nop
cmp rsi, 8
jb 0x471b9b
jmp 0x471bff
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00471b60
Function at 0x472380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47243d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6461774dcb576837
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xee
movabs rdx, 0x4000402080203
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x803
xor eax, eax
nop
jmp 0x4723e0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x47240d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x472430
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4723c2
jmp 0x472424
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00472380

Function at 0x4726a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472758
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xcfdff561ec78faf2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x501050200030603
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x700
xor eax, eax
jmp 0x4726f5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x472728
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47274b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
nop
cmp rsi, 8
jb 0x4726db
jmp 0x47273f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004726a0

Function at 0x472a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472b07
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xeb3681f6906b955
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xc212
movabs rdx, 0x604080707000201
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8090601070604
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x472aa7
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x48]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x48]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x472ad7
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x472afa
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x472a8a
jmp 0x472aee
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00472a40
Function at 0x4739c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473a7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x373c40743742f924
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6e
movabs rdx, 0x605000001060703
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x502
xor eax, eax
nop
jmp 0x473a20
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x2e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x2e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x473a4d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x473a70
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x473a02
jmp 0x473a64
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004739c0

Function at 0x474220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4742ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x246ee7425f176c06
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e3d0f2725246ee7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20b070004050000
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90b080b0b0a0409
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47428f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4742bc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4742df
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x474272
jmp 0x4742d3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00474220

Function at 0x474aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474b6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x644f6f53044ffd4c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5a4369644f6f5304
mov qword [rsp + 0x20], rdx
movabs rdx, 0x209020302030201
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2020a0a03000606
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x474b0f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x474b3c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x474b5f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x474af2
jmp 0x474b53
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00474aa0
Function at 0x475ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475da7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd768c5a39f8a619c
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xaa47
movabs rdx, 0x805070300020204
mov qword [rsp + 0x22], rdx
movabs rdx, 0x308080909050805
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x475d47
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x475d77
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x475d9a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x475d2a
jmp 0x475d8e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00475ce0

Function at 0x476bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476c78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5671753a2574293d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7000403000107
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
jmp 0x476c15
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x476c48
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x476c6b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xd]
nop
cmp rsi, 8
jb 0x476bfb
jmp 0x476c5f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00476bc0

Function at 0x476f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476fdd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x347a5e623b6e5064
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x653d6157265b3b72
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3090c000e050b0c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70303090c000e05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1010a030a050009
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x476f80
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x476fad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x476fd0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x476f62
jmp 0x476fc4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00476f00
Function at 0x477340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477406
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x743ef26536202744
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6443
movabs rdx, 0x605050205010205
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x308
xor eax, eax
jmp 0x4773a0
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4773d2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4773f7
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1c]
cmp rsi, 0xa
jb 0x477382
jmp 0x4773eb
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00477340

Function at 0x4786a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478786
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c935f596582749f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6284719f7c916894
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8020a0a0f0c0f00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0b060408020a0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0f0b020a0c0402
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x478720
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x478752
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x478777
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0x10
jb 0x478702
jmp 0x47876b
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004786a0
Function at 0x4788e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4789cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc9c35f976568aca9
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb755b37042c9c35f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x946e8774fdc09aa9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40f0b0f0610120d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0d07070014060e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40c010a0a040408
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47896a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x47899c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4789bf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0x15
jb 0x478950
jmp 0x4789b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004788e0

Function at 0x478f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47903d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x974c7a677b6891a4
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb380b59289658b97
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb040503010807
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30c0a070e07000b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0b03080a0a0c00
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x478fe0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x47900d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x479030
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x478fc2
jmp 0x479024
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00478f60
Function at 0x479060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47912c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x100b5ff111689999
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xff2c
movabs rdx, 0x709090304000308
mov qword [rsp + 0x22], rdx
movabs rdx, 0x409060101090709
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4790c4
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4790fc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x47911f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0xa
jb 0x4790aa
jmp 0x479113
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00479060

Function at 0x47a320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a40c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x54612f692a270f2d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6e47494e54612f69
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6e3a3a4b481e0137
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3000c050e10120f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50a0d0708030c01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1110090207110c00
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47a3aa
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xa]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x47a3dc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x47a3ff
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xa]
cmp rsi, 0x14
jb 0x47a390
jmp 0x47a3f3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0047a320
Function at 0x4869e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486afd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x20f2779aa44f6e2a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x75f610e20094241
mov qword [rsp + 0x22], rdx
movabs rdx, 0xbd17075f610e2009
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa460690102b25102
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe13161803120400
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa1314020e131618
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1119110414150f16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40e0e0e16110c02
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf00121000110a06
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x486aa0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x486acd
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x486af0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x486a7d
jmp 0x486ae4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004869e0

Function at 0x486ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486fdb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x75707c6f8f537770
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x88617598208785c2
mov qword [rsp + 0x26], rdx
movabs rdx, 0x79727878996f6c8f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd100f0a03020810
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc09150801130d0c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x140c0c0915080113
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1617011605151103
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x486f79
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1a
jge 0x486fab
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x486fce
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0x18
jb 0x486f5f
jmp 0x486fc2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.00486ee0
Function at 0x487000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4870fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x75709aa09eca8594
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xab8fa4738dcf488e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90019e8d8ba29685
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20503171716100e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x400151211160a00
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x10f0d1404001512
mov qword [rsp + 0x40], rdx
movabs rdx, 0x301090b13140805
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x487099
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4870cb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4870ee
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x18
jb 0x48707f
jmp 0x4870e2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.00487000

Function at 0x487120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48721d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x75e6e16f96c63fd9
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8461f1737c646574
mov qword [rsp + 0x20], rdx
movabs rdx, 0x74c1a41366ddbf5a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x310121500050f06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10150d0614050501
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd02051115020600
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16020f140f030b11
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4871c0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4871ed
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x487210
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x48719f
jmp 0x487204
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00487120