joyce8/EMBER2024-capa huggingface dataset:
Function at 0x45b0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45b19b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe17d42dd9bcf2e76
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xcfc7e17d42dd9bcf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6567c387c0f3596f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc030c0b0705070d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x407050309060101
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc0e040705030906
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10b0f0e0208090b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x45b139
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x45b16b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x45b18e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x12
jb 0x45b11f
jmp 0x45b182
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.0045b0a0

Function at 0x45bfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45c0a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe7e8f1f23550eb31
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xa3a63664
movabs rdx, 0xa0506070a0b020a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1040b0201010801
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x45c048
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x45c077
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x45c09a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x45c02b
jmp 0x45c08e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0045bfe0
Function at 0x45e120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45e21d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa36465bb72323357
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa45f588a6ac872a3
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd47536306e9e6a36
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0808161109090b
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb0e0d0500000410
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x100e0c030b0e0d05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15120b06090a0607
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x45e1c0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x45e1ed
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x45e210
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x45e19f
jmp 0x45e204
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0045e120

Function at 0x45e240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45e33b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd868dbc96436e731
mov qword [rsp + 0x18], rdx
movabs rdx, 0x89e688d536d225dd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8576dc337a34e093
mov qword [rsp + 0x28], rdx
movabs rdx, 0x13050f15010d1011
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11016150a0e170a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x106090711030109
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50601150c080411
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x45e2d9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x45e30b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x45e32e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x18
jb 0x45e2bf
jmp 0x45e322
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.0045e240
Function at 0x45e980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45ea9d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x363735949c9191f9
mov qword [rsp + 0x18], rdx
movabs rdx, 0xeaaa2903806120c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30080eaaa2903806
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb98ca619b1113333
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2140c010917100f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x816170d0a040214
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1416141814000f03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x19040e18150815
mov qword [rsp + 0x48], rdx
movabs rdx, 0x202161810150916
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x45ea40
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x45ea6d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x45ea90
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x45ea1d
jmp 0x45ea84
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0045e980

Function at 0x45ede0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45ef0c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6237bde834a93d39
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x32b33349c865d665
mov qword [rsp + 0x22], rdx
movabs rdx, 0xba2d37c332b33349
mov qword [rsp + 0x26], rdx
movabs rdx, 0x35b9b5a5bea430a3
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90a0b070804040a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x40c140113050b13
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe14040c14011305
mov qword [rsp + 0x40], rdx
movabs rdx, 0x18120d0117090217
mov qword [rsp + 0x48], rdx
movabs rdx, 0x205010912101301
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd10161804051a19
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x45eea6
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x2a
jge 0x45eedc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1c
jae 0x45eeff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x1c
jb 0x45ee8c
jmp 0x45eef3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0045ede0
Function at 0x460780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4608b8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x3032888fde913434
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7b6894b73032888f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x63e96de88c79723d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7637806c98a1e2d2
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x64267165fe337c96
mov qword [rsp + 0x34], rdx
movabs rdx, 0x161f111f09100808
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x2120b2218211c0c
mov qword [rsp + 0x44], rdx
movabs rdx, 0x4160b1502120b22
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5151717111d1d03
mov qword [rsp + 0x50], rdx
movabs rdx, 0x90213230f0b1c14
mov qword [rsp + 0x58], rdx
movabs rdx, 0x14191b0d1c0e0a20
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x460855
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x2c
jge 0x460888
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x4608ab
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
nop
cmp rsi, 0x24
jb 0x46083b
jmp 0x46089f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x24
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00451880
mov eax, edi
mov ecx, 0x24
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00460780
Function at 0x46de20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46df1b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdc81cd1d74006e1d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd46948b318dc81cd
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1dfe9db40a676f30
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1314000d050c0d07
mov qword [rsp + 0x34], rdx
movabs rdx, 0x410080406040014
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd14130604100804
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1209070409021108
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x46deb9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x46deeb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x46df0e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
cmp rsi, 0x15
jb 0x46de9f
jmp 0x46df02
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.0046de20

Function at 0x46f4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f5a7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6084616e457b6371
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x7472
movabs rdx, 0x300070700010203
mov qword [rsp + 0x22], rdx
movabs rdx, 0x109010600020300
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x46f547
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x46f577
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x46f59a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x46f52a
jmp 0x46f58e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0046f4e0
Function at 0x46fd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46fdf8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6e3935191c6fd004
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x604040001050100
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 3
xor eax, eax
jmp 0x46fd98
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x46fdc8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46fdeb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x46fd7b
jmp 0x46fddf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.0046fd40

Function at 0x46fe20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46fedd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x748ffb6f67876afb
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x4fd
movabs rdx, 0x602090500080801
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x206
xor eax, eax
jmp 0x46fe80
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x46fead
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x46fed0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x46fe62
jmp 0x46fec4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0046fe20

Function at 0x46ffe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4700ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xedf76c6b786c7547
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7a64e3f747edf76c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x60c0906070a0702
mov qword [rsp + 0x28], rdx
movabs rdx, 0x602040c04030402
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47004f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x47007c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x47009f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x470032
jmp 0x470093
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0046ffe0
Function at 0x4703a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470458
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xcf1c15d0bbc569a4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x703050306070402
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0
xor eax, eax
jmp 0x4703f5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x470428
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47044b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
nop
cmp rsi, 8
jb 0x4703db
jmp 0x47043f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004703a0

Function at 0x471f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472026
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x616cf5cccc6cd858
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xee
movabs rdx, 0x405040308080400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x105
xor eax, eax
nop
jmp 0x471fc0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x471ff2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x472017
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7d]
cmp rsi, 9
jb 0x471fa2
jmp 0x47200b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00471f60

Function at 0x472220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4722ec
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x64eff100653a6502
mov qword [rsp + 0x19], rdx
movabs rdx, 0x29697264eff10065
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x40a02000602050a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2020a0a
xor eax, eax
jmp 0x472285
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4722bc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4722df
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0xb
jb 0x47226b
jmp 0x4722d3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00472220
Function at 0x473920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4739ec
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd0619688aca66c4f
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x959e
movabs rdx, 0x902040809050507
mov qword [rsp + 0x22], rdx
movabs rdx, 0x704090904030902
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x473984
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4739bc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4739df
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0xa
jb 0x47396a
jmp 0x4739d3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00473920

Function at 0x473d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473e2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x739965868a648a8f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x88d5a1739965868a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3060809010a0406
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10904010a000408
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x473dcf
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x473dfc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x473e1f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x473db2
jmp 0x473e13
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00473d60

Function at 0x475340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475406
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x192b92d128182953
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x65
movabs rdx, 0x307070406010501
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x206
xor eax, eax
nop
jmp 0x4753a0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4753d2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4753f7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 9
jb 0x475382
jmp 0x4753eb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00475340
Function at 0x4758c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475978
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xdb4a33cd5fce6147
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7070506000404
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x602
xor eax, eax
jmp 0x475915
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x475948
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47596b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
nop
cmp rsi, 8
jb 0x4758fb
jmp 0x47595f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004758c0

Function at 0x475a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475b18
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x684061263e121514
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4010202010603
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x404
xor eax, eax
jmp 0x475ab5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x475ae8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x475b0b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
nop
cmp rsi, 8
jb 0x475a9b
jmp 0x475aff
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00475a60