joyce8/EMBER2024-capa huggingface dataset:
Function at 0x46a0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46a18b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xbd63b0a968f4e48b
mov qword [rsp + 0x18], rdx
movabs rdx, 0xaa4fb39d59a9bd63
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb040407010d0103
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa090b040407010d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80503000802000d
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x46a124
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x46a157
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x46a17e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x46a107
jmp 0x46a172
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046a0a0
Function at 0x46cd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46ce08
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5a4a5c617347543d
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x68
movabs rdx, 0x106060600000507
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x602
xor eax, eax
jmp 0x46cda0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x46cdd2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x46cdfb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 9
jb 0x46cd86
jmp 0x46cdef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046cd40

Function at 0x46d320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46d416
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x8361696ac4de9343
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6241cf8361696ac4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6c2e6ecfbe692c6f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x708030e04110104
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc08010202020708
mov qword [rsp + 0x38], rdx
movabs rdx, 0x408021102010c0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x46d3b3
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x46d3e2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x46d409
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x46d396
nop
jmp 0x46d3fd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0046d320
Function at 0x46dee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46dfa8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8f9c9ba5cca39d99
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x504070601020301
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 2
xor eax, eax
nop
jmp 0x46df40
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x33]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x46df72
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46df9b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x33]
cmp rsi, 8
jb 0x46df22
jmp 0x46df8f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046dee0

Function at 0x46eb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46ebbc
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x51343967615a5148
mov qword [rsp + 0x20], rdx
movabs rdx, 0x107020606010105
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x46eb54
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x46eb88
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46ebaf
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
nop
cmp rsi, 8
jb 0x46eb3a
jmp 0x46eba3
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0046eb00
Function at 0x46f000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f0f6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa970a69e7c739849
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x9887890b69a970a6
mov qword [rsp + 0x22], rdx
movabs rdx, 0x699aa36c816171ab
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4130e0d05030b09
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb09070b0e100413
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa010a0303070c12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x46f093
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x46f0c2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x46f0e9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x46f076
nop
jmp 0x46f0dd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0046f000

Function at 0x46f380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f446
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xa74c90687bc402c4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x503030005010207
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
nop
jmp 0x46f3e0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x46f40d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46f434
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x46f3c2
jmp 0x46f428
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046f380
Function at 0x46fa40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46fb06
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe05f27e1c4554edd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x704010704050402
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 3
xor eax, eax
nop
jmp 0x46faa0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x46facd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46faf4
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x46fa82
jmp 0x46fae8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046fa40

Function at 0x471220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4712fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd6e3f392364d4ec
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6e314b72190d6e3f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb08070001070a05
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb01030007040b08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x471295
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x4712c8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4712ef
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xd
jb 0x471278
jmp 0x4712e3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00471220
Function at 0x471c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471d16
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x264050493b3ddf19
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x34264050493b3ddf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x444069173972415f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc030d070110000d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5100c030d070110
mov qword [rsp + 0x30], rdx
movabs rdx, 0x408060d0500020f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x471cb3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x471ce2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x471d09
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x471c96
nop
jmp 0x471cfd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.00471c20

Function at 0x4726c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472789
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x746369176519c950
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xb6c4
movabs rdx, 0x204070401010808
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4020907
xor eax, eax
jmp 0x472723
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x472755
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x47277c
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0xa
jb 0x472709
jmp 0x472770
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004726c0
Function at 0x4733a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473472
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe5eeeefb9d6c83e0
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xf6fdf0ec
movabs rdx, 0x1030a0400070806
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb03010105090103
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47340b
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x47343d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x473465
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
cmp rsi, 0xc
jb 0x4733f1
jmp 0x473458
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004733a0

Function at 0x473d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473e06
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2b69a6257222d434
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x407040005000104
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x202
xor eax, eax
nop
jmp 0x473da0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x473dcd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x473df4
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x473d82
jmp 0x473de8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00473d40
Function at 0x477b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477c1c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x94878efb2072ecad
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e75505f94878efb
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf10469789f067400
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1306100f030f0004
mov qword [rsp + 0x32], rdx
movabs rdx, 0x13051003070e1306
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1213010f040e0c0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x477bb0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x477be8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x477c0f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x477b96
jmp 0x477c03
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00477b20

Function at 0x47e520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e616
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x62bfe16ff966b6aa
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x661062bfe16ff966
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x371375e020bca366
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc100b030e051108
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x801000e0c100b03
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb01000500060c11
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47e5b3
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x47e5e2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47e609
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x47e596
nop
jmp 0x47e5fd
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0047e520
Function at 0x47eee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47eff2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x630b216f69644c50
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x743e3a5c706ee353
mov qword [rsp + 0x25], rdx
movabs rdx, 0x2008696a6f743e3a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x695d5c51566f3955
mov qword [rsp + 0x32], rdx
movabs rdx, 0x120c1c0119161909
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x15151c1613180516
mov qword [rsp + 0x42], rdx
movabs rdx, 0x81c080e061515
mov qword [rsp + 0x48], rdx
movabs rdx, 0x12021b1a0b111c19
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x47ef91
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x47efbe
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x47efe5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x47ef74
jmp 0x47efd9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1d
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0047eee0

Function at 0x47f000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f152
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x9cac2167d966bb62
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x522218040e6efb0c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x3020641265522218
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20640c3420047465
mov qword [rsp + 0x32], rdx
movabs rdx, 0x62699273255fcec6
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xcf6ef49d63f708c7
mov qword [rsp + 0x42], rdx
movabs rdx, 0x19141a2222182608
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x110b2c201f052720
mov qword [rsp + 0x52], rdx
movabs rdx, 0x12704031e0e110b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2505291807040d1d
mov qword [rsp + 0x60], rdx
movabs rdx, 0xd040e010c1a1a06
mov qword [rsp + 0x68], rdx
movabs rdx, 0x92a202517181703
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x47f0ea
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x2e
jge 0x47f11c
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x47f145
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0x2d
jb 0x47f0d0
jmp 0x47f137
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2d
call fcn.0044a200
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x2d
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x2d
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0047f000
Function at 0x4841a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48426b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xd0338adc6632cf67
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x3579
movabs rdx, 0x508030001070300
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5050804
xor eax, eax
jmp 0x484206
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x484237
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x48425e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4841e9
jmp 0x484252
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004841a0

Function at 0x484760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484832
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x39ee011a18323517
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xfb04e319
movabs rdx, 0xb0b04090508060b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3060800030a0408
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4847ce
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4847fb
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x484825
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4847b1
jmp 0x484816
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00484760
Function at 0x485c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485d16
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x82a2093116ef34c2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x337a8a82a2093116
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8632b83576377e87
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe00071006020602
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe09081207050e00
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20b02070c020c03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x485cb3
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x485ce2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x485d09
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x485c96
nop
jmp 0x485cfd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.00485c20

Function at 0x485d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485e48
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x4b5d505d39556437
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x396c394b5d505d39
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3548314e72383358
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60e050205090f01
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc04070b110c0b06
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60b0c04070b110c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20c0b030e030c0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x485de0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x485e12
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x485e3b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
cmp rsi, 0x13
jb 0x485dc5
jmp 0x485e2f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00485d40