joyce8/EMBER2024-capa huggingface dataset:
Function at 0x46dea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46df8c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x731e63153f20006e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x61a7731e63153f20
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa16c62190169f8af
mov qword [rsp + 0x38], rdx
movabs rdx, 0x308110b06060406
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10b0308110b0606
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3060e0d08060a0e
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x46df2a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x46df5c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x46df7f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 0x12
jb 0x46df10
jmp 0x46df73
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00454ec0
mov eax, edi
mov ecx, 0x12
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0046dea0

Function at 0x46e6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e7fd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x94adbca77eb3766a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6f206f6b87207e96
mov qword [rsp + 0x25], rdx
movabs rdx, 0x2bcf8f207a6f206f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6b9e7f7e86659f28
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb12090d15070c05
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb150c160b130b12
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11610021a1615
mov qword [rsp + 0x48], rdx
movabs rdx, 0x181019081a191514
mov qword [rsp + 0x50], rdx
movabs rdx, 0x14031b0406030c0d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x46e7a0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x46e7cd
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x46e7f0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x46e77d
jmp 0x46e7e4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.00443420
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1d
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0046e6e0
Function at 0x46e820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e90c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc188636fbadd72db
mov qword [rsp + 0x32], rdx
movabs rdx, 0x61d3746f8f20c188
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc86ccd95c66961bd
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc06020e09000e12
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe13071500130c06
mov qword [rsp + 0x22], rdx
movabs rdx, 0x311060213031306
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x46e8aa
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x46e8dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x46e8ff
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 0x16
jb 0x46e890
jmp 0x46e8f3
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00454ec0
mov eax, edi
mov ecx, 0x16
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0046e820

Function at 0x46f680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f79a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xa6b2ea61a8ac704d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xdc7e8ba89bd8a74e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x65b164dc7e8ba89b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x65a572a398e35577
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70e0a050f0c1309
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x121917181715070e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140d02050b001411
mov qword [rsp + 0x48], rdx
movabs rdx, 0x191803190a180106
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1617010c0605160c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x46f737
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x26
jge 0x46f769
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x46f78d
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0x1b
jb 0x46f71d
jmp 0x46f781
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1b
call fcn.00443420
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1b
call fcn.00454ec0
nop
call fcn.00452c40
nop
jmp fcn.0046f680
Function at 0x4711a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47129b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6f27f8df7265bbaf
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xcdbd74b26dc4ae6f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x116574b480b2a365
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb050a090a0e1612
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb100d050b061316
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x130401010e000b10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1110040813120800
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x471239
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x47126b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x47128e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0x17
jb 0x47121f
jmp 0x471282
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.004711a0

Function at 0x4721c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4722bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x32085d2a76dad9e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9f73c01864960320
mov qword [rsp + 0x22], rdx
movabs rdx, 0x64a8adae618897a0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe120d0312070d01
mov qword [rsp + 0x32], rdx
movabs rdx, 0x101307010b0d0a14
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe100d1405051013
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf080e0e000d0400
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x472260
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x47228d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4722b0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x47223f
jmp 0x4722a4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00454ec0
mov eax, edi
mov ecx, 0x16
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004721c0
Function at 0x473640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473712
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x20333954546dd253
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xdc6fd2dc65203339
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4050a03000004
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10a0a06090c0004
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4736ac
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4736de
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x473705
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0xd
jb 0x473692
jmp 0x4736f5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0xd
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00473640

Function at 0x473da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473ed8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x1a0f616d200962f6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5c201a0f616d2009
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6263463e423d464a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x33516e3105200557
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6549016ce36f0af9
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1b1d1f13190c1a0d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1f0015020b072112
mov qword [rsp + 0x46], rdx
movabs rdx, 0xd061f0015020b07
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0f1f0f16151c20
mov qword [rsp + 0x50], rdx
movabs rdx, 0x180b0b021d1c0d0a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x90006111801200b
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x473e78
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x2a
jge 0x473ea8
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x473ecb
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x22
jb 0x473e5b
jmp 0x473ebf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x22
call fcn.00443420
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00454ec0
mov eax, edi
mov ecx, 0x22
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.00473da0
Function at 0x4748a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474986
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7933191c1b24c4d4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7c7ec921b9d07933
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20a0d050206030d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc08020a0d05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20106090d0b0204
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x474920
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x474952
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x474977
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
cmp rsi, 0xe
jb 0x474902
jmp 0x47496b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00454ec0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004748a0
Function at 0x4760a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476172
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2e009ecf1fef6532
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6ca9642e009ecf1f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x409020300030602
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6050902090002
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47610c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x47613e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x476165
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4a]
cmp rsi, 0xb
jb 0x4760f2
jmp 0x476155
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0xb
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004760a0

Function at 0x4763e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4764ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x537fabb376858543
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb35398bcf088537f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5789bb5386868972
mov qword [rsp + 0x28], rdx
movabs rdx, 0x105020604101009
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8130a0d080d040a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb01141110040f08
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47646d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 9]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 9]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x47649a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4764bd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x476450
jmp 0x4764b1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00454ec0
mov eax, edi
mov ecx, 0x16
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004763e0
Function at 0x477b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477c3a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x43bb649592ce6543
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x91639ba49374b38c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9965738d6c43b890
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd5b0747453925474
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf061d11061e1f17
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x417021a0c0b0f06
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd081d1d141a091d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130b13081e021410
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2151e1104110203
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x477bd7
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x26
jge 0x477c09
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x477c2d
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x20
jb 0x477bbd
jmp 0x477c21
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x20
call fcn.00443420
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x20
call fcn.00454ec0
mov eax, edi
mov ecx, 0x20
call fcn.00454ec0
nop
call fcn.00452c40
nop
jmp fcn.00477b20
Function at 0x479ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479f87
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc775ea65e56f6e71
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6581cec775ea65e5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x306070001000805
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3010109
xor eax, eax
jmp 0x479f28
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x479f57
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x479f7a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x479f0b
jmp 0x479f6e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00454ec0
mov eax, edi
mov ecx, 0xb
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00479ec0

Function at 0x47c280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c35d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x37443c304a756c23
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1e6c441d1f4ff237
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0a0a080b0e0c06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0a05040a0a0a08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x403030704080000
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x47c300
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x47c32d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x47c350
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x47c2e2
jmp 0x47c344
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00454ec0
mov eax, edi
mov ecx, 0xf
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0047c280
Function at 0x47e160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e26c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4f6037694e744328
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5e7461554156466e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x32265e7461554156
mov qword [rsp + 0x22], rdx
movabs rdx, 0x605b642223584e42
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0313180f0709
mov qword [rsp + 0x32], rdx
movabs rdx, 0x60a160b05130c01
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x10b160c0310060a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1411131915030901
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x47e208
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xb]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x47e23c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x47e25f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xb]
cmp rsi, 0x1a
jb 0x47e1ee
jmp 0x47e253
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0047e160

Function at 0x47eb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ec06
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1367f56f4c11ae47
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe6518b8bdff016e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc080d020b090f08
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0f01080c080d02
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa09070508080c08
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x47eba0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x47ebd2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x47ebf7
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0x10
jb 0x47eb82
jmp 0x47ebeb
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00454ec0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0047eb20
Function at 0x47ec20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ecf2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd46394729474d58b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x736f7f916491d463
mov qword [rsp + 0x30], rdx
movabs rdx, 0x801030b070c0101
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8000a050c0c0801
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x47ec8c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x47ecbe
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x47ece5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0xe
jb 0x47ec72
jmp 0x47ecd5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0xe
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0047ec20

Function at 0x47eec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47efc8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x657511db390d5947
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7445383b506f3efc
mov qword [rsp + 0x25], rdx
movabs rdx, 0xf07445383b506f3e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4b757430741e3c6f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x409090205080e12
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1305031510101509
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x50d130503151010
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc080b1509100118
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x47ef6b
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x47ef98
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x47efbb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x47ef4e
jmp 0x47efaf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00454ec0
mov eax, edi
mov ecx, 0x19
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0047eec0
Function at 0x47f5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f6db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xbc79ee686572d2b5
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xfc41d06d69e96dbc
mov qword [rsp + 0x26], rdx
movabs rdx, 0x63e8e454656c69d6
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4140c0e0e060907
mov qword [rsp + 0x36], rdx
movabs rdx, 0x116050e090f0203
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1040116050e090f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20105030f001514
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x47f679
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x47f6ab
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x47f6ce
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 0x17
jb 0x47f65f
jmp 0x47f6c2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.0047f5e0

Function at 0x47fbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47fc7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69ac72e656dbabee
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xb1a1
movabs rdx, 0x4010800000906
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x40002
xor eax, eax
jmp 0x47fc20
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x2f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x47fc4d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x47fc70
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x47fc03
jmp 0x47fc64
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00454ec0
mov eax, edi
mov ecx, 0xa
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0047fbc0