joyce8/EMBER2024-capa huggingface dataset:
Function at 0x469f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46a07a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x38affaacef339a7c
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xbb633745d1abaacf
mov qword [rsp + 0x45], rdx
movabs rdx, 0xfc8839bb633745d1
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd63236d5ced71d36
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf050f00040e0e14
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa0114090f050f00
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x150a00090e111214
mov qword [rsp + 0x25], rdx
movabs rdx, 0x503010406010c01
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x10e170b061a1608
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x46a017
movzx r9d, byte [rsp + rsi + 0x3d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x3d], dl
mov byte [rsp + rsi + 0x3d], r8b
add rax, 2
cmp rax, 0x24
jge 0x46a049
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x46a06d
movzx r8d, byte [rsp + rdi + 0x3d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0x1b
jb 0x469ffd
jmp 0x46a061
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.00449780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0045cd80
mov eax, edi
mov ecx, 0x1b
call fcn.0045cd80
nop
call fcn.0045aaa0
nop
jmp fcn.00469f60

Function at 0x46f120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f26c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xc235cd31a4353583
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x3782f6314b8bc235
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8a7531af3087b331
mov qword [rsp + 0x58], rdx
movabs rdx, 0xcee3ad34ac3857a5
mov qword [rsp + 0x60], rdx
movabs rdx, 0x94071635e8763134
mov qword [rsp + 0x68], rdx
movabs rdx, 0x17050e001d07000b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x161717050e001d07
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1c250f1006100905
mov qword [rsp + 0x22], rdx
movabs rdx, 0x251b0e071b060812
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2415050e24230e07
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1621170319120b16
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x2014230c03190016
mov qword [rsp + 0x42], rdx
xor eax, eax
jmp 0x46f204
movzx r9d, byte [rsp + rsi + 0x4a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rdi + 0x4a], dl
mov byte [rsp + rsi + 0x4a], r8b
add rax, 2
cmp rax, 0x32
jge 0x46f23c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x26
jae 0x46f25f
movzx r8d, byte [rsp + rdi + 0x4a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x57]
cmp rsi, 0x26
jb 0x46f1ea
jmp 0x46f253
xor eax, eax
lea rbx, [rsp + 0x4a]
mov ecx, 0x26
call fcn.00449780
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.0045cd80
mov eax, edi
mov ecx, 0x26
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0046f120
Function at 0x46f3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f527
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x4a69481d26382a33
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3534343355492038
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2f35754535604e71
mov qword [rsp + 0x60], rdx
movabs rdx, 0x8da32e3154521b3d
mov qword [rsp + 0x68], rdx
movabs rdx, 0x587c544a685c7a45
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1a14201e241909
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x504170c001a1420
mov qword [rsp + 0x20], rdx
movabs rdx, 0x151d1f2721111f1f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x271d222501031d24
mov qword [rsp + 0x30], rdx
movabs rdx, 0x26171217220b1125
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b1824001d0a1b1d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1804062318101707
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x46f4c7
movzx r9d, byte [rsp + rsi + 0x50]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x50], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x50], dl
add rax, 2
cmp rax, 0x34
jge 0x46f4f7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x28
jae 0x46f51a
movzx r8d, byte [rsp + rdi + 0x50]
sub r8d, edx
cmp rsi, 0x28
jb 0x46f4aa
jmp 0x46f50e
xor eax, eax
lea rbx, [rsp + 0x50]
mov ecx, 0x28
call fcn.00449780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.0045cd80
mov eax, edi
mov ecx, 0x28
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0046f3e0
Function at 0x476180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4762d8
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x62ccc574e32877c9
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xbb70d6773c502b69
mov qword [rsp + 0x54], rdx
movabs rdx, 0xabc17089bb70d677
mov qword [rsp + 0x58], rdx
movabs rdx, 0x30bb9b666f20927f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x20649b9320ae6963
mov qword [rsp + 0x68], rdx
movabs rdx, 0x65e76e61fcbfbb87
mov qword [rsp + 0x70], rdx
movabs rdx, 0x910271e0e102620
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3031c0d0910271e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x141c12090b121506
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2011a252a1920
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x140d22041e250f00
mov qword [rsp + 0x34], rdx
movabs rdx, 0x92125222210050f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x13240f220d0f1314
mov qword [rsp + 0x44], rdx
xor eax, eax
jmp 0x476273
movzx r9d, byte [rsp + rsi + 0x4c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x4c], dl
mov byte [rsp + rsi + 0x4c], r8b
add rax, 2
cmp rax, 0x34
jge 0x4762a8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x4762cb
movzx r8d, byte [rsp + rdi + 0x4c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
nop dword [rax]
cmp rsi, 0x2c
jb 0x476259
jmp 0x4762bf
xor eax, eax
lea rbx, [rsp + 0x4c]
mov ecx, 0x2c
call fcn.00449780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2c
call fcn.0045cd80
mov eax, edi
mov ecx, 0x2c
call fcn.0045cd80
nop
call fcn.0045aaa0
nop dword [rax]
jmp fcn.00476180

Function at 0x477660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4777ac
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x465559163826c072
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6320f0335f654af8
mov qword [rsp + 0x58], rdx
movabs rdx, 0x69774d641a71fce1
mov qword [rsp + 0x60], rdx
movabs rdx, 0x54bf5d141c205c12
mov qword [rsp + 0x68], rdx
movabs rdx, 0x98653b4420654d4e
mov qword [rsp + 0x70], rdx
movabs rdx, 0x11241808210b241b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x112082011241808
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30613060924131e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1020151c1f050203
mov qword [rsp + 0x30], rdx
movabs rdx, 0x201e27180912191d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x25060d0409252702
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c041c040327181c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x477744
movzx r9d, byte [rsp + rsi + 0x50]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x50], dl
mov byte [rsp + rsi + 0x50], r8b
add rax, 2
cmp rax, 0x34
jge 0x47777c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x28
jae 0x47779f
movzx r8d, byte [rsp + rdi + 0x50]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x28
jb 0x47772a
jmp 0x477793
xor eax, eax
lea rbx, [rsp + 0x50]
mov ecx, 0x28
call fcn.00449780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.0045cd80
mov eax, edi
mov ecx, 0x28
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00477660
Function at 0x47c480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c57b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x38211bcb741c11df
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x8923f73e6e38211b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc50c7013c3a7e12b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0c04070a0e090d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x10020b110e140700
mov qword [rsp + 0x27], rdx
movabs rdx, 0xf050e1410020b11
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x10706060a050213
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x47c519
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x47c54b
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x47c56e
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0x15
jb 0x47c4ff
jmp 0x47c562
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00449780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045cd80
mov eax, edi
mov ecx, 0x15
call fcn.0045cd80
nop
nop dword [rax + rax]
call fcn.0045aaa0
jmp fcn.0047c480

Function at 0x47d4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d5ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xcccb9bb9eed261d4
mov qword [rsp + 0x36], rdx
movabs rdx, 0xbb0ccccb9bb9eed2
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6e8fbe11c662d741
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe080e03020b1008
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1003060e0904080e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50700050d0f0200
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x47d54a
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x47d57c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47d59f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
cmp rsi, 0x12
jb 0x47d530
jmp 0x47d593
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00449780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045cd80
mov eax, edi
mov ecx, 0x12
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0047d4c0
Function at 0x47d5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d678
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x91a3939572659a43
mov qword [rsp + 0x28], rdx
movabs rdx, 0x701040505060501
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x501
xor eax, eax
jmp 0x47d615
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x61]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x47d648
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47d66b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x61]
nop
cmp rsi, 8
jb 0x47d5fb
jmp 0x47d65f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045cd80
mov eax, edi
mov ecx, 8
call fcn.0045cd80
nop
call fcn.0045aaa0
nop dword [rax]
jmp fcn.0047d5c0

Function at 0x47e6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e752
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x9c8a756f6955867b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x501070502000006
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x47e6f1
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x47e71e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47e745
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x47e6d4
jmp 0x47e735
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00449780
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.0045cd80
mov eax, edi
mov ecx, 8
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0047e6a0

Function at 0x47eda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ee7d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa47e2fa79ac16161
mov qword [rsp + 0x31], rdx
movabs rdx, 0xac79a16ed6a0b0a4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5050600070a0a02
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6030c0905050600
mov qword [rsp + 0x21], rdx
movabs rdx, 0x8020e0408050302
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x47ee20
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0x2c]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0x2c]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x47ee4d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x47ee70
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x47ee02
jmp 0x47ee64
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045cd80
mov eax, edi
mov ecx, 0xf
call fcn.0045cd80
nop
nop dword [rax]
call fcn.0045aaa0
jmp fcn.0047eda0
Function at 0x47f900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f9b2
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0xba73ba0c6176e500
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4010404000705
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x47f94e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x47f982
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47f9a5
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 8
jb 0x47f934
nop
jmp 0x47f999
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00449780
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045cd80
mov eax, edi
mov ecx, 8
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0047f900

Function at 0x47fc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47fcb8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x92979c7bcbe37b91
mov qword [rsp + 0x28], rdx
movabs rdx, 0x302050700010604
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x302
xor eax, eax
jmp 0x47fc58
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x47fc88
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47fcab
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x47fc3b
jmp 0x47fc9f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045cd80
mov eax, edi
mov ecx, 8
call fcn.0045cd80
nop
call fcn.0045aaa0
nop dword [rax]
jmp fcn.0047fc00

Function at 0x47fce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47fda7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc16873d259d8d9ac
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x69c2
movabs rdx, 0x200070000070104
mov qword [rsp + 0x18], rdx
movabs rdx, 0x708080007030200
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x47fd47
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x47fd77
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x47fd9a
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x47fd2a
jmp 0x47fd8e
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045cd80
mov eax, edi
mov ecx, 0xa
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0047fce0
Function at 0x47fec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ff7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa8d59161f3a668d5
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x7e
movabs rdx, 0x705050600080603
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x8030202
xor eax, eax
nop
jmp 0x47ff20
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x47ff4d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47ff70
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x47ff02
jmp 0x47ff64
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045cd80
mov eax, edi
mov ecx, 9
call fcn.0045cd80
nop
nop dword [rax]
call fcn.0045aaa0
jmp fcn.0047fec0

Function at 0x480660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48071d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbe6119c026064d
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x1b
movabs rdx, 0x801010306080707
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x204
xor eax, eax
nop
jmp 0x4806c0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4806ed
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x480710
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4806a2
jmp 0x480704
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045cd80
mov eax, edi
mov ecx, 9
call fcn.0045cd80
nop
nop dword [rax]
call fcn.0045aaa0
jmp fcn.00480660

Function at 0x480740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480807
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x65b90c8f056e0a05
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x11cd
movabs rdx, 0x106000000040303
mov qword [rsp + 0x18], rdx
movabs rdx, 0x109010805050106
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x4807a7
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x4807d7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4807fa
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x48078a
jmp 0x4807ee
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045cd80
mov eax, edi
mov ecx, 0xa
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00480740
Function at 0x480d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480e66
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5b4c536551495f4d
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x405a6b36595b4c53
mov qword [rsp + 0x30], rdx
movabs rdx, 0x308050b0c0b0c05
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb050308050b0c0b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc08080206090107
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x480e00
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 6]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x480e32
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x480e57
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 6]
cmp rsi, 0xd
jb 0x480de2
jmp 0x480e4b
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045cd80
mov eax, edi
mov ecx, 0xd
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00480d80

Function at 0x480e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480f66
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1de646cc6f26333b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2676d8da38f5605f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0c040d0a000505
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf060d0904000b0c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70b070f0d0f0201
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x480f00
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x480f32
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x480f57
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0x10
jb 0x480ee2
jmp 0x480f4b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045cd80
mov eax, edi
mov ecx, 0x10
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00480e80
Function at 0x481ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481f78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x83a488a4435f74cf
mov qword [rsp + 0x28], rdx
movabs rdx, 0x501060404010100
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x407
xor eax, eax
jmp 0x481f15
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x26]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x481f48
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x481f6b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x26]
nop
cmp rsi, 8
jb 0x481efb
jmp 0x481f5f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045cd80
mov eax, edi
mov ecx, 8
call fcn.0045cd80
nop
call fcn.0045aaa0
nop dword [rax]
jmp fcn.00481ec0

Function at 0x482880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48296a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74ba6f835f9f654f
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x6874ba6f835f9f65
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0746f627480b685
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa100e0e0905100b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x100602050a100e0e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x51004010f0c050b
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x48290d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x14
jge 0x48293a
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48295d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4828f0
jmp 0x482951
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045cd80
mov eax, edi
mov ecx, 0x11
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00482880