joyce8/EMBER2024-capa huggingface dataset:
Function at 0x466fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4670f8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xcdd6327330af62f3
mov qword [rsp + 0x42], rdx
movabs rdx, 0xb735c6366e32cdd6
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6d88530c0353635
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8b30386b9724e136
mov qword [rsp + 0x58], rdx
movabs rdx, 0xcf32d09a9fb7389f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x23132006001a0600
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9060b20190d2519
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10209060b20190d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x151a01181422211e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x11d2022111a0117
mov qword [rsp + 0x32], rdx
movabs rdx, 0x13110417191a0407
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x467098
movzx r9d, byte [rsp + rsi + 0x42]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x42], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x42], dl
add rax, 2
cmp rax, 0x2a
jge 0x4670c8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x4670eb
movzx r8d, byte [rsp + rdi + 0x42]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x26
jb 0x46707b
jmp 0x4670df
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x26
call fcn.004415e0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00451e00
mov eax, edi
mov ecx, 0x26
call fcn.00451e00
nop
call fcn.0044fb80
nop dword [rax]
jmp fcn.00466fc0

Function at 0x46b1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46b266
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x32e05f4716353842
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x68
movabs rdx, 0x101020703040607
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x204
xor eax, eax
nop
jmp 0x46b200
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x46b232
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x46b257
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x23]
cmp rsi, 9
jb 0x46b1e2
jmp 0x46b24b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.004415e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451e00
mov eax, edi
mov ecx, 9
nop
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.0046b1a0
Function at 0x46c7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46c88c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x66af5c6f72709f88
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x878d916e
movabs rdx, 0x500010109000106
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10b06070a010500
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x46c825
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x46c85c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x46c87f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0xc
jb 0x46c80b
jmp 0x46c873
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.004415e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451e00
mov eax, edi
mov ecx, 0xc
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.0046c7c0

Function at 0x46cbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46cc86
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6167bf7161f5db19
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x690f
movabs rdx, 0x504050400020001
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x408
xor eax, eax
jmp 0x46cc20
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4b]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x46cc52
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x46cc77
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4b]
cmp rsi, 0xa
jb 0x46cc02
jmp 0x46cc6b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.004415e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451e00
mov eax, edi
mov ecx, 0xa
nop
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.0046cbc0

Function at 0x46e700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e7b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6113fc81617c6962
mov qword [rsp + 0x28], rdx
movabs rdx, 0x506050206020400
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x400
xor eax, eax
jmp 0x46e755
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x46e788
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46e7ab
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
nop
cmp rsi, 8
jb 0x46e73b
jmp 0x46e79f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004415e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451e00
mov eax, edi
mov ecx, 8
call fcn.00451e00
nop
call fcn.0044fb80
nop dword [rax]
jmp fcn.0046e700
Function at 0x46f440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f53d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x74616971635d625c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x5f6253484a697461
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6354697c11485569
mov qword [rsp + 0x48], rdx
movabs rdx, 0x914110b00101110
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x110b04110a0f0615
mov qword [rsp + 0x24], rdx
movabs rdx, 0x201110b0c09110b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0412090e00140e
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x46f4e0
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x28]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x28]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x46f50d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x46f530
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x46f4bf
jmp 0x46f524
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.004415e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451e00
mov eax, edi
mov ecx, 0x16
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.0046f440

Function at 0x46f560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f618
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd8b0a099d3766193
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3070406030505
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x406
xor eax, eax
jmp 0x46f5b5
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x46f5e8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46f60b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
nop
cmp rsi, 8
jb 0x46f59b
jmp 0x46f5ff
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004415e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451e00
mov eax, edi
mov ecx, 8
call fcn.00451e00
nop
call fcn.0044fb80
nop dword [rax]
jmp fcn.0046f560
Function at 0x470540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470606
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x876c6186617a8a4d
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x97
movabs rdx, 0x104070702080108
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x1020707
xor eax, eax
nop
jmp 0x4705a0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4705d2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4705f7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 9
jb 0x470582
jmp 0x4705eb
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.004415e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451e00
mov eax, edi
mov ecx, 9
nop
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.00470540

Function at 0x470b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470c46
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4dec69f66a6cdd80
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xf7657961
movabs rdx, 0x6020301010b0100
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x1060304
xor eax, eax
jmp 0x470be0
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x470c12
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x470c37
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 0xc
jb 0x470bc4
jmp 0x470c2b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.004415e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451e00
mov eax, edi
mov ecx, 0xc
nop
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.00470b80

Function at 0x4715a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471666
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa4d86cd2cc36d24d
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xd5
movabs rdx, 0x406010307030208
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x108
xor eax, eax
nop
jmp 0x471600
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x471632
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x471657
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
cmp rsi, 9
jb 0x4715e2
jmp 0x47164b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.004415e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451e00
mov eax, edi
mov ecx, 9
nop
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004715a0
Function at 0x4724c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472578
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb20b690e43540a4f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x706010704060702
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x104
xor eax, eax
jmp 0x472515
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x472548
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47256b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
nop
cmp rsi, 8
jb 0x4724fb
jmp 0x47255f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004415e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451e00
mov eax, edi
mov ecx, 8
call fcn.00451e00
nop
call fcn.0044fb80
nop dword [rax]
jmp fcn.004724c0

Function at 0x4734c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47358c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc55f9f771410bb15
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x671008a7
movabs rdx, 0x3030701050a0801
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2080109000a0303
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x473525
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x47355c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x47357f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0xc
jb 0x47350b
jmp 0x473573
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.004415e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451e00
mov eax, edi
mov ecx, 0xc
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004734c0

Function at 0x473920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4739ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf46869d0e7cb6150
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x747e7cf4
movabs rdx, 0x204030909060804
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x60702060a070204
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x473985
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4739bc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4739df
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 0xb
jb 0x47396b
jmp 0x4739d3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.004415e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451e00
mov eax, edi
mov ecx, 0xb
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.00473920
Function at 0x4758c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47598c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9b938b9dcfc79990
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x916a899b
movabs rdx, 0x709030200000a01
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x605040208030709
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x475925
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x47595c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x47597f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0xb
jb 0x47590b
jmp 0x475973
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.004415e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451e00
mov eax, edi
mov ecx, 0xb
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004758c0

Function at 0x476600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4766ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e69725247535f49
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x737661456e697252
mov qword [rsp + 0x30], rdx
movabs rdx, 0x186f657872653557
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1110030c0d13090a
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd09090d1110030c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd010a0b08041301
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x47668a
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xb]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x4766bc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4766df
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xb]
cmp rsi, 0x14
jb 0x476670
jmp 0x4766d3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.004415e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451e00
mov eax, edi
mov ecx, 0x14
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.00476600
Function at 0x4767e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4768ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6eaaee5f29ae6f4a
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xad69b374
movabs rdx, 0xa02030a0b060a0a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x502030502090505
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x476845
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x47687c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x47689f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4d]
cmp rsi, 0xc
jb 0x47682b
jmp 0x476893
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.004415e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451e00
mov eax, edi
mov ecx, 0xc
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004767e0

Function at 0x477200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477327
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x65807d6b72877b80
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x7ca865807d6b7287
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6d7a67805f9e6b75
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60437e656c507f7b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x749c697e8f908164
mov qword [rsp + 0x58], rdx
movabs rdx, 0x513081b1417130c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4100513081b1417
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1b20091319001108
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1401130e121e030b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6081c020510101d
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4772c9
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x22
jge 0x4772f7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x22
jae 0x47731a
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x22
jb 0x4772ac
jmp 0x47730e
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x22
call fcn.004415e0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00451e00
mov eax, edi
mov ecx, 0x22
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.00477200
Function at 0x4776e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4777cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x44495f722234221a
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x6144495f72223422
mov qword [rsp + 0x30], rdx
movabs rdx, 0x22456e36746e2616
mov qword [rsp + 0x38], rdx
movabs rdx, 0x902000800020801
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x30f0d1009020008
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x200000a0d0d080f
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x47776a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xa]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x14
jge 0x47779c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4777bf
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xa]
cmp rsi, 0x11
jb 0x477750
jmp 0x4777b3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.004415e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451e00
mov eax, edi
mov ecx, 0x11
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004776e0

Function at 0x4777e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4778bd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x44b9c8dab7689fbe
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x69b71c74f35f44b9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4050c01010b0d05
mov qword [rsp + 0x18], rdx
movabs rdx, 0x60d04050c01010b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x509000c04030904
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x477860
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x47788d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4778b0
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x477842
jmp 0x4778a4
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.004415e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451e00
mov eax, edi
mov ecx, 0xe
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004777e0
Function at 0x484a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484afd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x25fc61dcdbd5eb9a
mov qword [rsp + 0x35], rdx
movabs rdx, 0xd85ff825fc61dcdb
mov qword [rsp + 0x38], rdx
movabs rdx, 0x46573f46cebce65
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4090d0402030c0b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf07030a04000a0b
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb080f07030a0400
mov qword [rsp + 0x25], rdx
movabs rdx, 0x61209010f0c080a
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x484aa0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x6c]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x6c]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x484acd
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x484af0
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x484a7f
jmp 0x484ae4
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004415e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451e00
mov eax, edi
mov ecx, 0x13
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.00484a00

Function at 0x48e900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e9bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xaf9545bcb573a662
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xbf
movabs rdx, 0x803040301060107
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x4070305
xor eax, eax
nop
jmp 0x48e960
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x17]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x17]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x48e98d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x48e9b0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x48e942
jmp 0x48e9a4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.004415e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451e00
mov eax, edi
mov ecx, 9
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.0048e900