joyce8/EMBER2024-capa huggingface dataset:
Function at 0x46df80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e072
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6c42606f74f27202
mov qword [rsp + 0x42], rdx
movabs rdx, 0x664d676c74721348
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x6566646f6d3e664d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6c596b3f74735212
mov qword [rsp + 0x58], rdx
movabs rdx, 0x100e1d0e111c190b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x911091d100e1d0e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x609151208090e1d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8111d061102061a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x509161300170c0f
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x46e055
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x42]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x17]
movzx r9d, byte [rsp + rdi + 0x42]
mov byte [rsp + rdi + 0x42], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x17]
mov byte [rsp + rsi + 0x42], dl
add rax, 2
cmp rax, 0x24
jl 0x46e01d
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.0043c360
add rsp, 0x60
pop rbp
ret
call fcn.004497a0
jmp fcn.0046df80

Function at 0x470100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4701d3
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe7b620656cd2d450
mov qword [rsp + 0x33], rdx
movabs rdx, 0x5bfd662053e7b620
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65bf2006453bd66f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb02020f10131011
mov qword [rsp + 0x19], rdx
movabs rdx, 0x11120c0d01120d
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe020011120c0d01
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1112060701071213
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4701b6
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x33]
sub r8d, edx
add r8d, 0xffffffa7
movzx r9d, byte [rsp + rdi + 0x33]
mov byte [rsp + rdi + 0x33], r8b
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x1a
jl 0x47017f
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0043c360
add rsp, 0x48
pop rbp
ret
call fcn.004497a0
jmp fcn.00470100
Function at 0x4712e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4713e1
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x87373775acfcb99d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x56d96fba6d9b94d0
mov qword [rsp + 0x50], rdx
movabs rdx, 0xaef577b179dc943b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x658eae616cba6176
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1608050506101010
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x121e1e1000170c02
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5010315121e1e10
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1a0c0e0c081d101d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x106080f071d110c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x161e0a0314030f09
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4713c4
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x48]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
movzx r9d, byte [rsp + rdi + 0x48]
mov byte [rsp + rdi + 0x48], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rsi + 0x48], dl
add rax, 2
cmp rax, 0x2c
jl 0x47138c
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.0043c360
add rsp, 0x68
pop rbp
ret
call fcn.004497a0
jmp fcn.004712e0

Function at 0x4718e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47198b
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65676e3f4c8e7865
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x6c1c2b26db65676e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30b03030b08020b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa0409090b09030b
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x471969
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2b]
sub r8d, edx
add r8d, 0x50
movzx r9d, byte [rsp + rdi + 0x2b]
mov byte [rsp + rdi + 0x2b], r8b
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jl 0x471932
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop dword [rax + rax]
call fcn.0043c360
add rsp, 0x38
pop rbp
ret
call fcn.004497a0
jmp fcn.004718e0

Function at 0x472e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472ee4
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x530b7265762d3f2f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x330be548e112530b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xdb50451116546469
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc000d0802150b02
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x113110602061212
mov qword [rsp + 0x22], rdx
movabs rdx, 0x21402090a060909
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x472ec7
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x32]
sub r8d, edx
add r8d, 0x4a
movzx r9d, byte [rsp + rdi + 0x32]
mov byte [rsp + rdi + 0x32], r8b
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x18
jl 0x472e90
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0043c360
add rsp, 0x48
pop rbp
ret
call fcn.004497a0
jmp fcn.00472e20
Function at 0x472f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472fd4
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2da3a9bbd9ba7243
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf28b63842da3a9bb
mov qword [rsp + 0x40], rdx
movabs rdx, 0xdfe18973db0b41cc
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7041203020b0f11
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20e13120a030404
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20404030806020e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4051211040c0204
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x472fb7
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
movzx r9d, byte [rsp + rdi + 0x3c]
mov byte [rsp + rdi + 0x3c], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
cmp rax, 0x1e
jl 0x472f7f
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.0043c360
add rsp, 0x50
pop rbp
ret
call fcn.004497a0
jmp fcn.00472f00

Function at 0x473f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473fdd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb37d15506e2b3838
mov qword [rsp + 0x30], rdx
movabs rdx, 0x332ed16f357373f3
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80b07080601010d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x60f0f01080b0708
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe060b0b05000702
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x473fc0
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
movzx r9d, byte [rsp + rdi + 0x30]
mov byte [rsp + rdi + 0x30], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x14
jl 0x473f82
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0043c360
add rsp, 0x40
pop rbp
ret
nop dword [rax]
call fcn.004497a0
jmp fcn.00473f20
Function at 0x474a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474b52
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xa1cad1feb726589
mov qword [rsp + 0x40], rdx
movabs rdx, 0x610ce41d6a746eb0
mov qword [rsp + 0x48], rdx
movabs rdx, 0x78d6745a115a65fd
mov qword [rsp + 0x50], rdx
movabs rdx, 0xabe0a674abfe2c9b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x905161b19130500
mov qword [rsp + 0x18], rdx
movabs rdx, 0x81f0c1812050414
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe05101b1f0b0906
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70d1d080e1a0403
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1f000308160c1e12
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x474b35
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
movzx r9d, byte [rsp + rdi + 0x40]
mov byte [rsp + rdi + 0x40], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
cmp rax, 0x28
jl 0x474afd
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.0043c360
add rsp, 0x60
pop rbp
ret
call fcn.004497a0
jmp fcn.00474a60

Function at 0x474b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474c51
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xd1ccbfd274df25d8
mov qword [rsp + 0x44], rdx
movabs rdx, 0xbeaccfd6e846eb74
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xdc6163aebeaccfd6
mov qword [rsp + 0x50], rdx
movabs rdx, 0xbbbc8dbb3f5e43cf
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc1b0f011a14101b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20a170018021118
mov qword [rsp + 0x24], rdx
movabs rdx, 0x13090d0d16190605
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb00070f16160e04
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc1b16001902001b
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x474c34
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x44]
sub r8d, edx
add r8d, 0xffffffb9
movzx r9d, byte [rsp + rdi + 0x44]
mov byte [rsp + rdi + 0x44], r8b
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rsi + 0x44], dl
add rax, 2
cmp rax, 0x28
jl 0x474bfd
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.0043c360
add rsp, 0x60
pop rbp
ret
call fcn.004497a0
jmp fcn.00474b60
Function at 0x476920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4769bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f515621262b5558
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x782c
movabs rdx, 0x800030602030400
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x1050205
xor eax, eax
jmp 0x4769a0
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
movzx r9d, byte [rsp + rdi + 0x26]
mov byte [rsp + rdi + 0x26], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0xc
jl 0x476963
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0043c360
add rsp, 0x30
pop rbp
ret
nop dword [rax]
call fcn.004497a0
jmp fcn.00476920

Function at 0x4776e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4777b3
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f4933454a5f3b43
mov qword [rsp + 0x32], rdx
movabs rdx, 0x655d55126ff36f49
mov qword [rsp + 0x38], rdx
movabs rdx, 0x74725e6a536f1f2a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf030f08010a0e03
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe1103040b05010b
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb120e1103040b05
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50a0c0e04020513
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x477796
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x32]
sub r8d, edx
add r8d, 0x2f
movzx r9d, byte [rsp + rdi + 0x32]
mov byte [rsp + rdi + 0x32], r8b
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x1a
jl 0x47775f
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0043c360
add rsp, 0x48
pop rbp
ret
call fcn.004497a0
jmp fcn.004776e0

Function at 0x478e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478f0b
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdaf0946ea0417a9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x57b86c9919e40daf
mov qword [rsp + 0x30], rdx
movabs rdx, 0x906000802050a0a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x80a07010a0c0309
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x478ee9
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2a]
sub r8d, edx
add r8d, 0x6e
movzx r9d, byte [rsp + rdi + 0x2a]
mov byte [rsp + rdi + 0x2a], r8b
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jl 0x478eb2
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop dword [rax + rax]
call fcn.0043c360
add rsp, 0x38
pop rbp
ret
call fcn.004497a0
jmp fcn.00478e60
Function at 0x4794c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47956b
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x734d74617f7e7b8c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6a65676c7d89734d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70a090200080107
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x308000a0d0301
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x47954a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1a]
movzx r9d, byte [rsp + rdi + 0x2a]
mov byte [rsp + rdi + 0x2a], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1a]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jl 0x479512
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop dword [rax]
call fcn.0043c360
add rsp, 0x38
pop rbp
ret
call fcn.004497a0
jmp fcn.004794c0

Function at 0x479580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479663
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x69dae7d1636589b5
mov qword [rsp + 0x41], rdx
movabs rdx, 0xa0be0c786e947269
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7c73d0b587b125fc
mov qword [rsp + 0x50], rdx
movabs rdx, 0x410050f0c050503
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf040410050f0c05
mov qword [rsp + 0x21], rdx
movabs rdx, 0x5100d1411130f09
mov qword [rsp + 0x29], rdx
movabs rdx, 0x60c03100b00060c
mov qword [rsp + 0x31], rdx
movabs rdx, 0x160c0b120d0e1401
mov qword [rsp + 0x39], rdx
xor eax, eax
jmp 0x479646
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x41]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
movzx r9d, byte [rsp + rdi + 0x41]
mov byte [rsp + rdi + 0x41], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rsi + 0x41], dl
add rax, 2
cmp rax, 0x22
jl 0x47960e
xor eax, eax
lea rbx, [rsp + 0x41]
mov ecx, 0x17
call fcn.0043c360
add rsp, 0x58
pop rbp
ret
call fcn.004497a0
jmp fcn.00479580

Function at 0x479d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479e1d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7570e25e69f23756
mov qword [rsp + 0x30], rdx
movabs rdx, 0x57656961bf64dc51
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80102040908030d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x803000b010a0801
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2010b090d050a0d
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x479e00
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x73]
movzx r9d, byte [rsp + rdi + 0x30]
mov byte [rsp + rdi + 0x30], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x16
jl 0x479dc2
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0043c360
add rsp, 0x40
pop rbp
ret
nop dword [rax]
call fcn.004497a0
jmp fcn.00479d60
Function at 0x47a4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a585
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x652972e7d91a652a
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1652972e7d91a65
mov qword [rsp + 0x30], rdx
movabs rdx, 0x26df36638f72fb74
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60e02030c02020a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x203060e02030c02
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x81002000f0402
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x47a568
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
movzx r9d, byte [rsp + rdi + 0x2f]
mov byte [rsp + rdi + 0x2f], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jl 0x47a530
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0043c360
add rsp, 0x40
pop rbp
ret
call fcn.004497a0
jmp fcn.0047a4c0

Function at 0x47a5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a674
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x65b27204efc9e547
mov qword [rsp + 0x35], rdx
movabs rdx, 0x4c60e265b27204ef
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe4ff734065c132b2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120c0409020f010a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x11204030204110a
mov qword [rsp + 0x21], rdx
movabs rdx, 0x8020d0b01120403
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc01060912040a02
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x47a657
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x65]
movzx r9d, byte [rsp + rdi + 0x35]
mov byte [rsp + rdi + 0x35], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x65]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x1c
jl 0x47a61f
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0043c360
add rsp, 0x48
pop rbp
ret
call fcn.004497a0
jmp fcn.0047a5a0

Function at 0x47a680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a753
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xfff8006eea058247
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x741b196d756ffff8
mov qword [rsp + 0x40], rdx
movabs rdx, 0x57eef982dc82eaf4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x614120f020f1201
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1211051002120b10
mov qword [rsp + 0x24], rdx
movabs rdx, 0x12010e090b0c1211
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe1305070b0e0301
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x47a736
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3a]
sub r8d, edx
add r8d, 0xffffff93
movzx r9d, byte [rsp + rdi + 0x3a]
mov byte [rsp + rdi + 0x3a], r8b
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
cmp rax, 0x1e
jl 0x47a6ff
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0043c360
add rsp, 0x50
pop rbp
ret
call fcn.004497a0
jmp fcn.0047a680
Function at 0x47b760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b80b
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x41c6cf1298079621
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xcb7365720c0c41c6
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60602030d000102
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x406000205000908
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x47b7e9
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2a]
sub r8d, edx
add r8d, 0x61
movzx r9d, byte [rsp + rdi + 0x2a]
mov byte [rsp + rdi + 0x2a], r8b
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jl 0x47b7b2
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop dword [rax + rax]
call fcn.0043c360
add rsp, 0x38
pop rbp
ret
call fcn.004497a0
jmp fcn.0047b760

Function at 0x47b820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b8d6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xfe5aaf0b14a80110
mov qword [rsp + 0x31], rdx
movabs rdx, 0x101a0b692a0ce4fe
mov qword [rsp + 0x38], rdx
movabs rdx, 0x106080002050a05
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x504010c01060800
mov qword [rsp + 0x21], rdx
movabs rdx, 0x90d0c0e02030a07
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x47b8b9
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x31]
sub r8d, edx
add r8d, 0x6f
movzx r9d, byte [rsp + rdi + 0x31]
mov byte [rsp + rdi + 0x31], r8b
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
cmp rax, 0x14
jl 0x47b882
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.0043c360
add rsp, 0x40
pop rbp
ret
call fcn.004497a0
nop dword [rax + rax]
jmp fcn.0047b820

Function at 0x47f480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f554
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf1e437e760742adb
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xca6e5465f1e437e7
mov qword [rsp + 0x40], rdx
movabs rdx, 0x406f20bfe1d51e71
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd07010503100c07
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x511071309030406
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70b0b1113100511
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10905030f0e0010
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x47f537
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x73]
movzx r9d, byte [rsp + rdi + 0x3c]
mov byte [rsp + rdi + 0x3c], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
cmp rax, 0x1e
jl 0x47f4ff
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.0043c360
add rsp, 0x50
pop rbp
ret
call fcn.004497a0
jmp fcn.0047f480