joyce8/EMBER2024-capa huggingface dataset:
Function at 0x476bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476ca6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9dcb690c69eda048
mov qword [rsp + 0x31], rdx
movabs rdx, 0x61ce67a8a121a49d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa02090206070406
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x90d080b0a020902
mov qword [rsp + 0x21], rdx
movabs rdx, 0x8070409010d090a
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x476c40
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x41]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x476c72
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x476c97
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x41]
cmp rsi, 0xf
jb 0x476c22
jmp 0x476c8b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462ca0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00476bc0

Function at 0x476cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476d78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x97dbfa67f40df28a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x307060002020700
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x105
xor eax, eax
jmp 0x476d15
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x476d48
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x476d6b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
nop
cmp rsi, 8
jb 0x476cfb
jmp 0x476d5f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.00476cc0

Function at 0x476e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476ee6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9d8e7072bfcb8d90
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x88
movabs rdx, 0x102070600050308
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x1080801
xor eax, eax
nop
jmp 0x476e80
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x476eb2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x476ed7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 9
jb 0x476e62
jmp 0x476ecb
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00476e20
Function at 0x477180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47723d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9a0b736f929b294b
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6968
movabs rdx, 0x706010302070102
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x102
xor eax, eax
jmp 0x4771e0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x47720d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x477230
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4771c2
jmp 0x477224
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00477180

Function at 0x477460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477518
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xdac93d3ed2cb614d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x706020304040605
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x404
xor eax, eax
jmp 0x4774b8
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x4774e8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47750b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x47749b
jmp 0x4774ff
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.00477460

Function at 0x477620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4776ec
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1d614e1869484b58
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x1436
movabs rdx, 0x104040400080009
mov qword [rsp + 0x18], rdx
movabs rdx, 0x502010807080104
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x477684
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xe
jge 0x4776bc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4776df
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xd]
cmp rsi, 0xa
jb 0x47766a
jmp 0x4776d3
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00477620
Function at 0x477780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47783e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6472b9ab65b065a4
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xa8697264
movabs rdx, 0x402050500040a02
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0xa050600
xor eax, eax
jmp 0x4777e1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x17]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x17]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x47780e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x477831
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4777c4
jmp 0x477825
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
nop
call fcn.004609c0
jmp fcn.00477780

Function at 0x4778e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4779ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x69eb56a16477f3a3
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x6999a98f6b69eb56
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa05000901040206
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x204060b020a0a06
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x47794f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0x10
jge 0x47797c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x47799f
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x477932
jmp 0x477993
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00462ca0
mov eax, edi
mov ecx, 0xd
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004778e0

Function at 0x477bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477c8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfa3b3f445545424e
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x433642fa
movabs rdx, 0x704070906040907
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa02030506060801
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x477c25
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x477c5c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x477c7f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xe]
cmp rsi, 0xb
jb 0x477c0b
jmp 0x477c73
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00477bc0
Function at 0x477d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477e47
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfebd61546765654e
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xd814c3fe
movabs rdx, 0xa03070803020603
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x309070a07060a03
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x477de8
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x477e17
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x477e3a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x477dcb
jmp 0x477e2e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00477d80

Function at 0x477e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477f5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xedf524e34269344e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd414b28745fedf5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3d18343f32c11575
mov qword [rsp + 0x48], rdx
movabs rdx, 0x14010f1104071409
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0a0101100d0506
mov qword [rsp + 0x26], rdx
movabs rdx, 0x710050a0d0a0101
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x120b03130c150401
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x477f00
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x55]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x55]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x477f2d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x477f50
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x477edf
jmp 0x477f44
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00477e60
Function at 0x478000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4780cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf1757548ee8273e5
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xe2fc87f986f17575
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80702000a010306
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb07000c0109030a
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x47806f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0x10
jge 0x47809c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4780bf
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x478052
jmp 0x4780b3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00462ca0
mov eax, edi
mov ecx, 0xd
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00478000

Function at 0x4780e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4781a7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x656168644e796c4f
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6981
movabs rdx, 0x509020907050202
mov qword [rsp + 0x18], rdx
movabs rdx, 0x707080504030509
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x478147
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x478177
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x47819a
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x47812a
jmp 0x47818e
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004780e0
Function at 0x4781c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4782aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf172c7d2d7d2ded3
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xcaf172c7d2d7d2de
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf75a69c0ce5b41d0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40b040f0d000305
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc09040b040f0d00
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x101080402020710
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x47824d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jge 0x47827a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47829d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x478230
jmp 0x478291
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004781c0

Function at 0x4782c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478386
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xddc4657a85806c4f
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xa169
movabs rdx, 0x906070606070404
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x6070302
xor eax, eax
jmp 0x478320
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x478352
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x478377
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0xa
jb 0x478303
jmp 0x47836b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004782c0
Function at 0x478700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4787c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x54d572c666eb61ec
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x3a
movabs rdx, 0x6060800070300
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x4020004
xor eax, eax
nop
jmp 0x478760
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x478792
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4787b7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 9
jb 0x478742
jmp 0x4787ab
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00478700

Function at 0x4788c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478972
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x44cd27ce67e0d050
mov qword [rsp + 0x20], rdx
movabs rdx, 0x501070607050204
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x478911
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x47893e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x478965
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4788f4
jmp 0x478955
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044d280
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004788c0

Function at 0x478de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478eb8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8bbc897fadd48a82
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xa1726e99
movabs rdx, 0x80b010505030900
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x80b080b01050503
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x204050706040602
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x478e57
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x12]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x12]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x12
jge 0x478e88
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x478eab
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x478e3a
jmp 0x478e9f
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.00478de0
Function at 0x478ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478f92
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0xda776e5d53d061e3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x407000203040404
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x478f2e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x478f62
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x478f85
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 8
jb 0x478f14
nop
jmp 0x478f79
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044d280
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00478ee0

Function at 0x479020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4790d8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd31ebf1998d76154
mov qword [rsp + 0x28], rdx
movabs rdx, 0x506070202030702
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x7070604
xor eax, eax
jmp 0x479076
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xc
jge 0x4790a8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4790cb
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 8
jb 0x47905c
jmp 0x4790bf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.00479020

Function at 0x479100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4791b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x67677f7773667962
mov qword [rsp + 0x28], rdx
movabs rdx, 0x701030005030401
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x1050300
xor eax, eax
jmp 0x479156
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x10]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xc
jge 0x479188
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4791ab
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x10]
cmp rsi, 8
jb 0x47913c
jmp 0x47919f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.00479100