joyce8/EMBER2024-capa huggingface dataset:
Function at 0x45fc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45fd9a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x1130370b32342832
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30303e3034082a3e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2b201c2614fb343e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3532312230314125
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0813071910021a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa090d0813071910
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0d0b0d1719150a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c12041213070918
mov qword [rsp + 0x50], rdx
movabs rdx, 0x701041814131613
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x45fd37
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x45fd69
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x45fd8d
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x20
jb 0x45fd1d
jmp 0x45fd81
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.00441380
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x20
call fcn.00451880
mov eax, edi
mov ecx, 0x20
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.0045fc80
Function at 0x461580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4616b8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x312b31318a523535
mov qword [rsp + 0x18], rdx
movabs rdx, 0x93358b75f455312b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7979cd81d188897f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7f80304b3338c986
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x355a7073313031c7
mov qword [rsp + 0x36], rdx
movabs rdx, 0x230a0b2202060908
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x21115090f03160e
mov qword [rsp + 0x46], rdx
movabs rdx, 0x2412021115090f03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6140d1510130208
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a22101e2415171d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x110d0d1011141c1d
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x461655
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x2a
jge 0x461688
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x4616ab
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
nop
cmp rsi, 0x26
jb 0x46163b
jmp 0x46169f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x26
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00451880
mov eax, edi
mov ecx, 0x26
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00461580
Function at 0x469ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x469cec
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x6983342da752b96d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x206a305557795045
mov qword [rsp + 0x25], rdx
movabs rdx, 0x662d34206a305557
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8e0320cc7978723a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x417f7a6f20736955
mov qword [rsp + 0x38], rdx
movabs rdx, 0x206775717c436014
mov qword [rsp + 0x40], rdx
movabs rdx, 0x21061520021a1120
mov qword [rsp + 0x48], rdx
movabs rdx, 0x241b062712280103
mov qword [rsp + 0x50], rdx
movabs rdx, 0x160a0c132315041b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x308132a0826172a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x19170e1012032304
mov qword [rsp + 0x68], rdx
movabs rdx, 0xb122217260b2513
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x469c84
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x30
jge 0x469cbc
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x2b
jae 0x469cdf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x2b
jb 0x469c6a
jmp 0x469cd3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2b
call fcn.00441380
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2b
call fcn.00451880
mov eax, edi
mov ecx, 0x2b
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00469ba0

Function at 0x46a9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46aaf8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x9f8299c2fb757972
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x65abad9f8299c2fb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5bf3c9aabce05964
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6cc100ae2420ad65
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xaf7b3eb8a965aec4
mov qword [rsp + 0x36], rdx
movabs rdx, 0x160e08170f141003
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x16192208111f041f
mov qword [rsp + 0x46], rdx
movabs rdx, 0xe1216192208111f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc1a0d03181b0719
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8071e121f140510
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2111060309081b1c
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x46aa95
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x2a
jge 0x46aac8
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x46aaeb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x67]
nop
cmp rsi, 0x23
jb 0x46aa7b
jmp 0x46aadf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x23
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00451880
mov eax, edi
mov ecx, 0x23
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.0046a9c0
Function at 0x46ff00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46ffb8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6573656e7f88f882
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x202010300020300
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 2
xor eax, eax
jmp 0x46ff55
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x46ff88
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46ffab
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
nop
cmp rsi, 8
jb 0x46ff3b
jmp 0x46ff9f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.0046ff00

Function at 0x470d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470e18
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3f3f10350ceb684a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x602050602030704
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 3
xor eax, eax
jmp 0x470db8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x33]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x33]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x470de8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x470e0b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x470d9b
jmp 0x470dff
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00470d60

Function at 0x4728a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47297d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c61304c55336d41
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x575a613242724128
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8020e040b0c02
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5000008020e040b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb05080c0f03040e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x472920
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x47294d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x472970
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x472902
jmp 0x472964
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004728a0
Function at 0x473520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4735d2
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0xe3d45fc76138f260
mov qword [rsp + 0x20], rdx
movabs rdx, 0x601020107040004
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x47356e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x80]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4735a2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4735c5
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x80]
cmp rsi, 8
jb 0x473554
nop
jmp 0x4735b9
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441380
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00473520

Function at 0x473920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4739e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x887577611875ecf9
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xe9
movabs rdx, 0x708060700030603
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x106
xor eax, eax
nop
jmp 0x473980
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4739b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4739d7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 9
jb 0x473962
jmp 0x4739cb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00473920

Function at 0x4740e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4741bd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5f9d6a7261b261b9
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9db2191bc85f9d6a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5020608050a0c00
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0605020608050a
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa09090a06060b0b
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x474160
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x44]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x44]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x47418d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4741b0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x474142
jmp 0x4741a4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004740e0
Function at 0x4750c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475187
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x75616e616c6eb289
mov qword [rsp + 0x19], rdx
movabs rdx, 0x91726175616e616c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30a01030a000705
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x400000a
xor eax, eax
jmp 0x475128
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x475157
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x47517a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x47510b
jmp 0x47516e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004750c0

Function at 0x4755c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475678
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x162d93b61f206c4f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x702030404050606
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x305
xor eax, eax
jmp 0x475615
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x475648
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47566b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
nop
cmp rsi, 8
jb 0x4755fb
jmp 0x47565f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004755c0

Function at 0x475980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475a3d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1d61f3c205d3d815
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x63e5
movabs rdx, 0x708020507010504
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x30507
xor eax, eax
jmp 0x4759e0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x475a0d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x475a30
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4759c3
jmp 0x475a24
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00475980
Function at 0x475c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475d1d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbb94b1b25f64b84f
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x96a4
movabs rdx, 0x601070805040701
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5090704
xor eax, eax
jmp 0x475cc0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x475ced
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x475d10
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x475ca3
jmp 0x475d04
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00475c60

Function at 0x4768c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476978
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2350bbc0fe61686b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x407000305050400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x507
xor eax, eax
jmp 0x476918
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x476948
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47696b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4768fb
jmp 0x47695f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004768c0

Function at 0x4773c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477487
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2b1153d223268153
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x2bda21db
movabs rdx, 0x804030a04010101
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3090702010b0604
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x477428
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x477457
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x47747a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x47740b
jmp 0x47746e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004773c0
Function at 0x477b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477bb2
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x617704a0a99a619a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3030304020503
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x477b4e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x41]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x477b82
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x477ba5
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x41]
cmp rsi, 8
jb 0x477b34
nop
jmp 0x477b99
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441380
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00477b00

Function at 0x477bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477c78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xeb61bf54b787c854
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x105030203070305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x205
xor eax, eax
jmp 0x477c18
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x477c48
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x477c6b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x477bfb
jmp 0x477c5f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00477bc0

Function at 0x478c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478cec
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x74bac6cbc1bb65bf
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x23cb
movabs rdx, 0x902030508080605
mov qword [rsp + 0x22], rdx
movabs rdx, 0x202000403040902
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x478c84
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x478cbc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x478cdf
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 0xa
jb 0x478c6a
jmp 0x478cd3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00478c20
Function at 0x481b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481bfd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6ae665da706d9eae
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xe8
movabs rdx, 0x604080007070406
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8080100
xor eax, eax
nop
jmp 0x481ba0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x481bcd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x481bf0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x481b82
jmp 0x481be4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00481b40

Function at 0x489920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489a0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1fdfe3e763654426
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6361f6343664653b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc06573fa66234234
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140d0607050d0800
mov qword [rsp + 0x18], rdx
movabs rdx, 0x40b12100010070d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x11010c0505121701
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4899ad
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x4899da
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4899fd
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x489990
jmp 0x4899f1
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00489920