joyce8/EMBER2024-capa huggingface dataset:
Function at 0x471000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4710c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf869f3f7f96ef74d
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6e
movabs rdx, 0x503010703040105
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x104
xor eax, eax
jmp 0x471060
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x471092
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4710bb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 9
jb 0x471046
jmp 0x4710af
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f500
mov eax, edi
mov ecx, 9
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00471000

Function at 0x4715c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471692
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xec361f5447363a32
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65314cec361f5447
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x707000506010309
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7020707
xor eax, eax
jmp 0x47162e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x47165b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x471685
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x471611
jmp 0x471676
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004715c0
Function at 0x4716a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4717a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xae92656a8c5b7993
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8587d6757e8bae92
mov qword [rsp + 0x22], rdx
movabs rdx, 0x986e28a3928ea475
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb11091213070009
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4090200100d150c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc110b0806080409
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30f0f13130c070c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x471742
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1e
jge 0x47176f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x47179b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x471725
jmp 0x47178f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f500
mov eax, edi
mov ecx, 0x16
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004716a0

Function at 0x472780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47287c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x74754e7955616c60
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7174754e7955616c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5f616971426b6d5f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30b00040d0b0805
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0805030d03100d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0d0f0203000b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x472810
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x472848
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47286f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x4727f6
jmp 0x472863
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f500
mov eax, edi
mov ecx, 0x11
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00472780
Function at 0x472a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472b08
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7ff9689cfd686482
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xfb6ee9f5
movabs rdx, 0x807090604040108
mov qword [rsp + 0x26], rdx
movabs rdx, 0x800080709060404
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3040400080b0400
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x472aa0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x472ad2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x472afb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0xc
jb 0x472a82
jmp 0x472aef
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00472a20

Function at 0x472fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4730a8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x4ba9c15610904a8
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 8
movabs rdx, 0x802060007010506
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5060404
xor eax, eax
jmp 0x473041
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x473073
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47309b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
cmp rsi, 9
jb 0x473027
jmp 0x47308f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f500
mov eax, edi
mov ecx, 9
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00472fe0
Function at 0x473560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473632
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x8ff0fff898723f0e
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x866e9c70
movabs rdx, 0x9090103050b0700
mov qword [rsp + 0x28], rdx
movabs rdx, 0x609040104030005
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4735cb
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4735fd
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x473625
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0xc
jb 0x4735b1
jmp 0x473618
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00473560

Function at 0x474820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474906
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x96b108edcfce7992
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xa56fade5
movabs rdx, 0x4050505080b0002
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70404050505080b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5090309060b0001
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4748a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x2c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x2c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4748cd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4748f4
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xc
jb 0x474882
jmp 0x4748e8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00474820
Function at 0x475180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475288
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xf169720402292351
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x481ff6f7f1697204
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc2f74615265406d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0103130c0a1304
mov qword [rsp + 0x32], rdx
movabs rdx, 0x813130801090012
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x201000f0f070813
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb030400080d020c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x475220
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x475252
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x47527b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0x14
jb 0x475205
jmp 0x47526f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f500
mov eax, edi
mov ecx, 0x14
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00475180

Function at 0x476100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476208
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xf3e4f272f73b084f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3634ea3049f3e4f2
mov qword [rsp + 0x24], rdx
movabs rdx, 0x473c122c78471365
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x114120e070a0112
mov qword [rsp + 0x34], rdx
movabs rdx, 0x50f03060a0f0708
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x20c0f06050f0306
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11090b0813120803
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4761a0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4761d2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4761fb
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
cmp rsi, 0x15
jb 0x476185
jmp 0x4761ef
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f500
mov eax, edi
mov ecx, 0x15
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00476100
Function at 0x476c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476cdc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd5e95fdd6568474f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6561eed472e670d5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9090d07070d0109
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb070b0b040c060b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x476c75
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x476ca8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x476ccf
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xf
jb 0x476c58
jmp 0x476cc3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f500
mov eax, edi
mov ecx, 0xf
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00476c00

Function at 0x477380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47746b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x4cccfd5c741bc6ad
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6b7221c2eec34ccc
mov qword [rsp + 0x24], rdx
movabs rdx, 0x400070a09040505
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0502080400070a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa09090a08060105
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x477404
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x42]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x42]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x477437
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x47745e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4773e7
jmp 0x477452
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f500
mov eax, edi
mov ecx, 0xe
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00477380
Function at 0x477480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477588
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6543596570696261
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x495f654359657069
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5a6a5c403e61586e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0411110b060b0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb00010e10030b0e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x5020b00010e1003
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0c0e0f070d0201
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x477522
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1a
jge 0x47754f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47757b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x477505
jmp 0x47756f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f500
mov eax, edi
mov ecx, 0x12
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00477480

Function at 0x4776a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47777c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x806f718a8f9b6f53
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa47e7b806f718a8f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70403030a090702
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x405040409080704
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x477712
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x477748
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x47776f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
nop dword [rax]
cmp rsi, 0xb
jb 0x4776f8
jmp 0x477763
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.004776a0
Function at 0x4780e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4781ab
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x708b706365706849
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x8a
movabs rdx, 0x605050802010704
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1060501
xor eax, eax
jmp 0x478144
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x478177
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x47819e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x478127
jmp 0x478192
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f500
mov eax, edi
mov ecx, 9
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004780e0

Function at 0x47bec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x47c027
sub rsp, 0xc0
mov qword [rsp + 0xb8], rbp
lea rbp, [rsp + 0xb8]
movabs rdx, 0x752e7b344e0166c8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5523b2686666752e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x88ad2a6b65546edb
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x766572b93d3aa96e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x8f209961736e6f69
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x7728816f6b74a972
mov qword [rsp + 0x44], rdx
movabs rdx, 0xb08c74d76ec87161
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x448eb51b59886020
mov qword [rsp + 0x54], rdx
movabs rdx, 0xfdc865b89dba5fc3
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x23010a0e2213123c
mov qword [rsp + 0x64], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x00649fd8]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045fb1a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x47bfc0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x54
jge 0x47bfed
movzx edx, byte [rsp + rax + 0x64]
movzx esi, byte [rsp + rax + 0x65]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x46
jae 0x47c01a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x46
jb 0x47bf9f
jmp 0x47c00e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x46
call fcn.0044a140
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov eax, esi
mov ecx, 0x46
call fcn.0045f500
mov eax, edi
mov ecx, 0x46
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0047bec0
Function at 0x47dea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47dfc8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x2653062e3366181b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x492054f8486e462d
mov qword [rsp + 0x23], rdx
movabs rdx, 0x200af03863492054
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd037166c21ed033e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd13181b00081510
mov qword [rsp + 0x38], rdx
movabs rdx, 0x161000131a09180c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x111c1205010f0701
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11001b1208100b09
mov qword [rsp + 0x50], rdx
movabs rdx, 0x704110504170003
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x47df60
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x47df92
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x47dfbb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
cmp rsi, 0x1d
jb 0x47df43
jmp 0x47dfaf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f500
mov eax, edi
mov ecx, 0x1d
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0047dea0
Function at 0x47e780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x47e936
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0x3934546169dc463b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9203d73651ed461
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2ec91309203d7365
mov qword [rsp + 0x26], rdx
movabs rdx, 0x58723829f11d4674
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x136115733011f4d8
mov qword [rsp + 0x36], rdx
movabs rdx, 0x13bf3e22630034bf
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x243e656220741f95
mov qword [rsp + 0x46], rdx
movabs rdx, 0x8e60a2519201341
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xf021d1009160a15
mov qword [rsp + 0x56], rdx
movabs rdx, 0x3a1e0f021d100916
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd341e292320392b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x252c36241c161c11
mov qword [rsp + 0x68], rdx
movabs rdx, 0x22072706001b3238
mov qword [rsp + 0x70], rdx
movabs rdx, 0x39282a052b333111
mov qword [rsp + 0x78], rdx
movabs rdx, 0x3704170f12090012
mov qword [rsp + 0x80], rdx
movabs rdx, 0x152c1a01181e322c
mov qword [rsp + 0x88], rdx
movabs rdx, 0x360c013104071629
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x47e8cf
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x42
jge 0x47e8fc
movzx edx, byte [rsp + rax + 0x56]
movzx esi, byte [rsp + rax + 0x57]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3b
jae 0x47e929
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x3b
jb 0x47e8b2
jmp 0x47e91d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x3b
call fcn.0044a140
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x3b
call fcn.0045f500
mov eax, edi
mov ecx, 0x3b
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.0047e780

Function at 0x481720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48180b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x290c273e61490169
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5d55746e7903290c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x108070102050605
mov qword [rsp + 0x26], rdx
movabs rdx, 0x406010807010205
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc060d0802060201
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4817a4
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x29]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x4817d7
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x4817fe
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x481787
jmp 0x4817f2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f500
mov eax, edi
mov ecx, 0xe
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00481720