joyce8/EMBER2024-capa huggingface dataset:
Function at 0x462ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x462bc6
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xc1878a38357dc331
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x847f36ce
movabs rdx, 0xb020505010a080b
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x60a0706
xor eax, eax
jmp 0x462b44
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
cmp rax, 0xc
jge 0x462b82
movzx edx, byte [rsp + rax + 0x18]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x462bb5
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x462ba9
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0xc
jb 0x462b2a
nop
jmp 0x462b9d
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457f40
mov eax, edi
mov ecx, 0xc
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
nop dword [rax]
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00462ae0

Function at 0x463740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x463853
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7ddbafc777bb390a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x707ddbafc777bb39
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x357436307973797e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc02040a04000604
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa050c070c02040a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0f0909060a0803
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4637d0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x46380d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
nop
cmp rsi, 0x14
jae 0x463845
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x463834
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0x11
jb 0x4637b6
jmp 0x463828
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457f40
mov eax, edi
mov ecx, 0x11
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00463740
Function at 0x463860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x463973
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x88968a8398a08f32
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe88288968a8398a0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe13294843539a2ee
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2020a030b0b110e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x601090902020a03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x408070905030e0f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4638f0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x46392d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
nop
cmp rsi, 0x14
jae 0x463965
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x463954
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x12
jb 0x4638d6
jmp 0x463948
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457f40
mov eax, edi
mov ecx, 0x12
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00463860

Function at 0x463980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x463a8b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x4b305a3541563d37
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6036744b305a3541
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5332503875389780
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20805020e12100b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x202030102080502
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa10100c05071202
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x463a13
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x463a4a
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x463a7d
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x463a71
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4639f6
jmp 0x463a65
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457f40
mov eax, edi
mov ecx, 0x13
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00463980
Function at 0x4642c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4643df
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x462e32c52b3a3fac
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa13531315c462e32
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5d32283531221f37
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x81403090f0c060e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1203120106001212
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc040b0c020c1203
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14080e09070e0c09
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x464362
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x464399
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x1e
jae 0x4643d1
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4643c5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x464345
jmp 0x4643b4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x15
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1e
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004642c0
Function at 0x466420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46655f
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x747dde38363332ec
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3036319412c20d37
mov qword [rsp + 0x21], rdx
movabs rdx, 0x7988868c37d1c230
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc693e83823873845
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb010509171c090b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x160b160b110c0c00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6100c171a151d16
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e0914191e0a1315
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa061d1c13071c1c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4664e0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x46651c
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x28
jae 0x466551
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x466545
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0x1f
jb 0x4664c3
jmp 0x466537
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.00446000
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x1f
call fcn.00457f40
mov rax, rsi
mov ecx, 0x28
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00466420

Function at 0x466b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x466c7f
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xdb8b3e8c318f7831
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x87db8b3e8c318f78
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7ba447e6fbc690f6
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf5b7b2b9a6373137
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf3323635308b3305
mov qword [rsp + 0x38], rdx
movabs rdx, 0x101615170b1c1c10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c19010c20142005
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe1c14181c02140c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x190e08141c071b06
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd0a0e1c0b040709
mov qword [rsp + 0x60], rdx
movabs rdx, 0x19200a01190f0507
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x466c00
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x30
jge 0x466c3c
movzx edx, byte [rsp + rax + 0x40]
lea rsi, [rax + 1]
cmp rsi, 0x30
jae 0x466c71
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x466c65
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x21
jb 0x466be2
jmp 0x466c57
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.00446000
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x21
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x21
call fcn.00457f40
mov rax, rsi
mov ecx, 0x30
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00466b20
Function at 0x4693c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x469529
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x814c81ce405ffbb
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf051636b1dd3608
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1839ceec31713331
mov qword [rsp + 0x28], rdx
movabs rdx, 0x372b3230f70c399e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x17e8103805c70a1d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1a1711170000210a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30519071a142200
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60d212625060113
mov qword [rsp + 0x50], rdx
movabs rdx, 0x26051a16160a091a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2224041902032211
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe0c1f051f012420
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1b211d19011d04
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4694ad
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x53]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x53]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x38
jge 0x4694e8
movzx edx, byte [rsp + rax + 0x40]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x38
jae 0x46951b
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x27
jae 0x46950f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x27
jb 0x469490
jmp 0x469503
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x27
call fcn.00446000
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x27
call fcn.00457f40
mov eax, edi
mov ecx, 0x27
call fcn.00457f40
mov rax, rsi
mov ecx, 0x38
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004693c0
Function at 0x46f1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x46f353
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x58056e658474797c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6758056e65847479
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x72316e905d0120e1
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6954db74f6cd6309
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xcde8f5d0c320f874
mov qword [rsp + 0x32], rdx
movabs rdx, 0xcb6d317412756dab
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x349ab1a0efff1bf3
mov qword [rsp + 0x42], rdx
movabs rdx, 0xb061a110701242e
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x17142b002b170f1e
mov qword [rsp + 0x52], rdx
movabs rdx, 0x292901101c091714
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2c20212107100d16
mov qword [rsp + 0x60], rdx
movabs rdx, 0x30240001141f2a07
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2b07161f24010913
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2703241e1d072803
mov qword [rsp + 0x78], rdx
movabs rdx, 0x300c13301f2d2f11
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x46f2c8
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x3e
jge 0x46f308
movzx edx, byte [rsp + rax + 0x4a]
lea rsi, [rax + 1]
cmp rsi, 0x3e
jae 0x46f345
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x46f335
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
nop dword [rax]
cmp rsi, 0x31
jb 0x46f2ae
jmp 0x46f329
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x31
call fcn.00446000
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x31
call fcn.00457f40
mov eax, edi
mov ecx, 0x31
nop dword [rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x3e
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0046f1a0
Function at 0x46f900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x46fa9f
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xec72f714077495ae
mov qword [rsp + 0x19], rdx
movabs rdx, 0x67ec72f714077495
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2169e320297320d2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6962dd7450611a69
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3565740718200990
mov qword [rsp + 0x32], rdx
movabs rdx, 0x14338e126ce9c02f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe80d1464c17ee962
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2f26270522191a14
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2d2e140928302f26
mov qword [rsp + 0x50], rdx
movabs rdx, 0x100d2b1401030716
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe012c28202d002c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x10c2500041c062f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x612231d1d2e2221
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2f03142a0719302f
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x46fa16
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x36
jge 0x46fa52
movzx edx, byte [rsp + rax + 0x4a]
lea rsi, [rax + 1]
cmp rsi, 0x36
jae 0x46fa91
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x46fa85
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 0x31
jb 0x46f9fc
jmp 0x46fa75
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x31
nop
call fcn.00446000
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x31
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x31
call fcn.00457f40
mov rax, rsi
mov ecx, 0x36
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0046f900
Function at 0x475b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475c3f
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x6e37304730234ad5
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x33c94b1651f44aef
mov qword [rsp + 0x22], rdx
movabs rdx, 0x744937074a4e33c9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x651138322d0fb665
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110d181c1a0a0802
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1302130c0e14041a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x619171c1212000b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140810170a09010b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x313051c080f011b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x475bc0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 7]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x475bfc
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x28
jae 0x475c31
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x475c25
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 7]
cmp rsi, 0x1e
jb 0x475ba3
jmp 0x475c17
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.00446000
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x1e
call fcn.00457f40
mov rax, rsi
mov ecx, 0x28
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00475b00

Function at 0x475c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475d9f
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xed69e5df636e79e8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xea74dc9400cbbde8
mov qword [rsp + 0x24], rdx
movabs rdx, 0x74869adf7491ea74
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xfdb862255367895
mov qword [rsp + 0x32], rdx
movabs rdx, 0x16180c050c1d0413
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1d0a0b1c07001618
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b0805140f0d191c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a08160a1c191012
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1409081c1a1b041b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x475d20
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x77]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x475d5c
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
cmp rsi, 0x26
jae 0x475d91
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x475d85
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x77]
cmp rsi, 0x1e
jb 0x475d03
jmp 0x475d77
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.00446000
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x1e
call fcn.00457f40
mov rax, rsi
mov ecx, 0x26
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00475c60
Function at 0x4760c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4761f3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x4fd203a2101f073
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x20666f036b17f582
mov qword [rsp + 0x42], rdx
movabs rdx, 0x6b63451d01912066
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b6574ae6df87a8c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x211081d1012031d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa12160301171a0c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1316131203090a12
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x607011d08081812
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x47616e
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4761ad
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x1e
jae 0x4761e5
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4761d4
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0x1e
jb 0x476154
jmp 0x4761c8
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00457f40
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1e
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004760c0

Function at 0x477880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4779b8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xe5d2128199587973
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5d48a976e1a261bc
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8c876ff947fb699e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf7c57412a58b6388
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1810040d060f070b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b0a0e0203060405
mov qword [rsp + 0x40], rdx
movabs rdx, 0x21c121a16140d1f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e12040e1e05061b
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe0814100a1c1714
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x477940
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x70]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x28
jge 0x477977
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x28
jae 0x4779aa
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x47799e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x20
jb 0x477923
jmp 0x477992
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.00446000
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x20
call fcn.00457f40
mov eax, edi
mov ecx, 0x20
call fcn.00457f40
mov rax, rsi
mov ecx, 0x28
call fcn.00457f40
nop
call fcn.00455860
nop dword [rax]
jmp fcn.00477880
Function at 0x478500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x4786e6
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
movabs rdx, 0x61b11c88636e7973
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe2aaf53572d79969
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6de2aaf53572d799
mov qword [rsp + 0x24], rdx
movabs rdx, 0x561c9a98732e7317
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc7fdfedbdd206411
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1a209fb9af71ba74
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x7720cb6c18e06572
mov qword [rsp + 0x44], rdx
movabs rdx, 0x7458dee8cfbd4626
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1c2b0f262c280632
mov qword [rsp + 0x54], rdx
movabs rdx, 0x210c15321a04212e
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x27111e0d210c1532
mov qword [rsp + 0x60], rdx
movabs rdx, 0x31311c2e06371934
mov qword [rsp + 0x68], rdx
movabs rdx, 0x36352e05221a1d25
mov qword [rsp + 0x70], rdx
movabs rdx, 0x131734130917310a
mov qword [rsp + 0x78], rdx
movabs rdx, 0xe041732241f2215
mov qword [rsp + 0x80], rdx
movabs rdx, 0x1327253433110921
mov qword [rsp + 0x88], rdx
movabs rdx, 0x63116230c2e1822
mov qword [rsp + 0x90], rdx
movabs rdx, 0x2020051c31241c17
mov qword [rsp + 0x98], rdx
xor eax, eax
jmp 0x478660
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x4c
jge 0x47869c
movzx edx, byte [rsp + rax + 0x54]
lea rsi, [rax + 1]
cmp rsi, 0x4c
jae 0x4786d5
movzx esi, byte [rsp + rax + 0x55]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x39
jae 0x4786c9
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0x39
jb 0x478644
jmp 0x4786bd
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x39
call fcn.00446000
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
mov eax, esi
mov ecx, 0x39
call fcn.00457f40
mov eax, edi
mov ecx, 0x39
call fcn.00457f40
mov rax, rsi
mov ecx, 0x4c
nop dword [rax]
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00478500