joyce8/EMBER2024-capa huggingface dataset:
Function at 0x460a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x460b6c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x5632396053343471
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x7735384c56323960
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6f4da83170aa4897
mov qword [rsp + 0x48], rdx
movabs rdx, 0x45a07093327b56a1
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7c32544b323336bd
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc1813000f191c1a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x231b0e0b0c181300
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1b11180b21081616
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40c140c1a072003
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7151b151c040d12
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x460b06
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x24
jge 0x460b3c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x24
jae 0x460b5f
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0x24
jb 0x460aec
jmp 0x460b53
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x24
call fcn.00441400
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00451920
mov eax, edi
mov ecx, 0x24
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.00460a40

Function at 0x460b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x460cb8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x7d725434d53232c4
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe941d9754a7d7254
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x903830384bad3133
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc1a6413333633290
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1c18a130cee42f38
mov qword [rsp + 0x36], rdx
movabs rdx, 0x90607091f171f15
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1b100a201b0a0c
mov qword [rsp + 0x46], rdx
movabs rdx, 0x305001b100a201b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e031c08240f0007
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a1a0a1f220f090b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x910141c031a2314
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x460c55
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x460c88
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x460cab
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
nop
cmp rsi, 0x25
jb 0x460c3b
jmp 0x460c9f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
call fcn.00441400
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00451920
mov eax, edi
mov ecx, 0x25
call fcn.00451920
nop
call fcn.0044f6a0
nop dword [rax]
jmp fcn.00460b80
Function at 0x4614e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46162c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x4a8246486fa0514a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4c337f6e6d727d2c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x394c39714c5e4455
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x21334e724f5b3d39
mov qword [rsp + 0x32], rdx
movabs rdx, 0x35a2253039af376f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf22141c2602220a
mov qword [rsp + 0x42], rdx
movabs rdx, 0x320020d200b0f22
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2617060a02200910
mov qword [rsp + 0x50], rdx
movabs rdx, 0x41d060a17171b01
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe25251f0c0b1a12
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2108101000110621
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1719050d16130b07
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4615c4
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x36
jge 0x4615fc
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x28
jae 0x46161f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0x28
jb 0x4615aa
jmp 0x461613
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x28
call fcn.00441400
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00451920
mov eax, edi
mov ecx, 0x28
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004614e0
Function at 0x461c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x461d8c
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x345c8b37b4af7e4d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x413078cf5b398e37
mov qword [rsp + 0x22], rdx
movabs rdx, 0x39e3413078cf5b39
mov qword [rsp + 0x24], rdx
movabs rdx, 0x347f3284d0cd3454
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x87c939318c79b318
mov qword [rsp + 0x34], rdx
movabs rdx, 0x7f5555533263bc41
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc0c160510241820
mov qword [rsp + 0x44], rdx
movabs rdx, 0x31d021d151b011a
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x281b2323031d021d
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd1d29210c140121
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc26150918091c23
mov qword [rsp + 0x60], rdx
movabs rdx, 0x26242302270b2901
mov qword [rsp + 0x68], rdx
movabs rdx, 0xf22270b26000220
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1c12060023281823
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x461d27
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x3c
jge 0x461d5c
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2a
jae 0x461d7f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
cmp rsi, 0x2a
jb 0x461d0d
jmp 0x461d73
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x2a
call fcn.00441400
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00451920
mov eax, edi
mov ecx, 0x2a
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.00461c20
Function at 0x467cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x467e18
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x4338851254577565
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3a3031516f682169
mov qword [rsp + 0x20], rdx
movabs rdx, 0x446f70f43a303151
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30657b4a6f20376b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe22875702075812d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6851406134306663
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x507271023091904
mov qword [rsp + 0x44], rdx
movabs rdx, 0x2070c2005072710
mov qword [rsp + 0x48], rdx
movabs rdx, 0x101a042203092605
mov qword [rsp + 0x50], rdx
movabs rdx, 0x132a240700182710
mov qword [rsp + 0x58], rdx
movabs rdx, 0x141d1c1c07071d1e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2b2b0a0020032a24
mov qword [rsp + 0x68], rdx
movabs rdx, 0x92a152002291920
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x467db3
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x34
jge 0x467de8
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x467e0b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
nop dword [rax]
cmp rsi, 0x2c
jb 0x467d99
jmp 0x467dff
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2c
call fcn.00441400
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2c
call fcn.00451920
mov eax, edi
mov ecx, 0x2c
call fcn.00451920
nop
call fcn.0044f6a0
nop dword [rax]
jmp fcn.00467cc0
Function at 0x467e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x467fc7
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x6495883da9fc6f8a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x676495883da9fc6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1b7408290573202c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa67722746e61f1af
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0dcb6c661cb738f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc410311b6ce2c9cf
mov qword [rsp + 0x40], rdx
movabs rdx, 0xfbc4fade59742c62
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b180f1d212c0603
mov qword [rsp + 0x50], rdx
movabs rdx, 0x27171d1205071830
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd231e0e19210211
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f000c0600282d1b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2f21270520222830
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2a0d042e2e0c1005
mov qword [rsp + 0x78], rdx
movabs rdx, 0x220f0704020e0c20
mov qword [rsp + 0x80], rdx
movabs rdx, 0x18281618251909
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x467f62
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x70]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x40
jge 0x467f8f
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x467fba
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x31
jb 0x467f45
jmp 0x467fae
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x31
nop dword [rax + rax]
call fcn.00441400
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x31
call fcn.00451920
mov eax, edi
mov ecx, 0x31
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.00467e40
Function at 0x46eb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46ebfd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8e6fde6b656e75bf
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x8f
movabs rdx, 0x507000408080500
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x404
xor eax, eax
nop
jmp 0x46eba0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x20]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x46ebcd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x46ebf0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x46eb82
jmp 0x46ebe4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451920
mov eax, edi
mov ecx, 9
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.0046eb40

Function at 0x470120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470206
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd461c70bcaca75ad
mov qword [rsp + 0x19], rdx
movabs rdx, 0x382c8fd72bd461c7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8030c040b0a0c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0008030c040b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa02040309090705
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4701a0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x74]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4701d2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4701f7
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x74]
cmp rsi, 0xd
jb 0x470182
jmp 0x4701eb
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.00441400
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451920
mov eax, edi
mov ecx, 0xd
nop
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.00470120

Function at 0x4705a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470658
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x610750324d2f2334
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x102020001060304
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3060502
xor eax, eax
jmp 0x4705f6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x470628
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47064b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 8
jb 0x4705dc
jmp 0x47063f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451920
mov eax, edi
mov ecx, 8
call fcn.00451920
nop
call fcn.0044f6a0
nop dword [rax]
jmp fcn.004705a0
Function at 0x4710e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471198
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x61b59fc5b00fb016
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x605000503010402
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x404
xor eax, eax
jmp 0x471138
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x471168
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47118b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x47111b
jmp 0x47117f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451920
mov eax, edi
mov ecx, 8
call fcn.00451920
nop
call fcn.0044f6a0
nop dword [rax]
jmp fcn.004710e0

Function at 0x4719a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471a5d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x612732ee19fe61e4
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x3d
movabs rdx, 0x3080202040506
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4080403
xor eax, eax
nop
jmp 0x471a00
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x471a2d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x471a50
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4719e2
jmp 0x471a44
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451920
mov eax, edi
mov ecx, 9
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004719a0

Function at 0x472780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47284c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1f0875d7e323204e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x69d0611f0875d7e3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x406090901010301
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6020907
xor eax, eax
jmp 0x4727e5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x47281c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x47283f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 0xb
jb 0x4727cb
jmp 0x472833
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451920
mov eax, edi
mov ecx, 0xb
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.00472780
Function at 0x4730a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473152
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x693d000d433e054f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x605020104050501
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4730f1
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x35]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x35]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x47311e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x473145
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4730d4
jmp 0x473135
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441400
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00451920
mov eax, edi
mov ecx, 8
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004730a0

Function at 0x473ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473ba6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6b1b758b5f646c14
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6358
movabs rdx, 0x8000404080404
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x806
xor eax, eax
jmp 0x473b40
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x473b72
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x473b97
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0xa
jb 0x473b22
jmp 0x473b8b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451920
mov eax, edi
mov ecx, 0xa
nop
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.00473ae0

Function at 0x475be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475c98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69de0396a39169e2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x306020506050200
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x304
xor eax, eax
jmp 0x475c35
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x475c68
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x475c8b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
nop
cmp rsi, 8
jb 0x475c1b
jmp 0x475c7f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451920
mov eax, edi
mov ecx, 8
call fcn.00451920
nop
call fcn.0044f6a0
nop dword [rax]
jmp fcn.00475be0
Function at 0x476ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476b86
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69f076905ffc655c
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x5c
movabs rdx, 0x404020004000208
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6060605
xor eax, eax
nop
jmp 0x476b20
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x476b52
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x476b77
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 9
jb 0x476b02
jmp 0x476b6b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451920
mov eax, edi
mov ecx, 9
nop
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.00476ac0

Function at 0x476ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476c8a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe26e3b42d453c852
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5f79bce26e3b42d4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb5fad161dd65d1bd
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe030010050c1210
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70e030c0e030010
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb010c1108000710
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x476c2d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x476c5a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x476c7d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x476c10
jmp 0x476c71
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441400
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451920
mov eax, edi
mov ecx, 0x13
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.00476ba0
Function at 0x477480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47757b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf45061a494fa6f4e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xef4365f4657405f4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x727c69e1675fd6e8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb040304070c0802
mov qword [rsp + 0x32], rdx
movabs rdx, 0x100c12150e071203
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x10060e13030f100c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x151315160f131012
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x477519
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x47754b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x47756e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0x17
jb 0x4774ff
jmp 0x477562
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451920
mov eax, edi
mov ecx, 0x17
call fcn.00451920
nop
nop dword [rax + rax]
call fcn.0044f6a0
jmp fcn.00477480

Function at 0x478820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4788fd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x969fa03466f1e48
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3818614a0b020969
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10c0005070905
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x908040d00010c00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0a050809050303
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4788a0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4788cd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4788f0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x478882
jmp 0x4788e4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00441400
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451920
mov eax, edi
mov ecx, 0xe
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.00478820
Function at 0x478920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478a0c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c616e5469677b73
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x81816c616e546967
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4f754f617869647d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1000090a0d0a010d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf11080d1000090a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11010d00000f0d04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4789aa
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x4789dc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4789ff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1a]
cmp rsi, 0x12
jb 0x478990
jmp 0x4789f3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441400
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451920
mov eax, edi
mov ecx, 0x12
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.00478920