joyce8/EMBER2024-capa huggingface dataset:
Function at 0x461100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4611f6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x663654505263387f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x304d6e364cb96439
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3532657036457940
mov qword [rsp + 0x40], rdx
movabs rdx, 0x904110a09091210
mov qword [rsp + 0x18], rdx
movabs rdx, 0x30b0b0e0a0002
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7050d1411070215
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x461193
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x4611c2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4611e9
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x461176
nop
jmp 0x4611dd
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x18
call fcn.00453440
mov eax, edi
mov ecx, 0x18
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.00461100

Function at 0x461220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x461348
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x302982f67eee3914
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30c233c3edbd350f
mov qword [rsp + 0x25], rdx
movabs rdx, 0x3330c233c3edbd35
mov qword [rsp + 0x26], rdx
movabs rdx, 0xfe32ee389f3339e0
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe18120605000308
mov qword [rsp + 0x36], rdx
movabs rdx, 0x12040e1812060500
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa060c1608180c03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6030a14000a0216
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb1100180a020b04
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4612e0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x461312
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x46133b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1d]
cmp rsi, 0x19
jb 0x4612c3
jmp 0x46132f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00453440
mov eax, edi
mov ecx, 0x19
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00461220
Function at 0x462860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x462986
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x5e3836389cbe765d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x67b7b26860325599
mov qword [rsp + 0x25], rdx
movabs rdx, 0x637f397486817f67
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa2326a5a32616baf
mov qword [rsp + 0x34], rdx
movabs rdx, 0x17101c030c121512
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x9000e17101c03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9180b07081b1b10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c191617020f0d15
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf1101131b151e1b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x462920
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x24
jge 0x46294d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x462974
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1f
jb 0x462903
jmp 0x462968
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1f
call fcn.004418e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00453440
mov eax, edi
mov ecx, 0x1f
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00462860
Function at 0x463320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x463468
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xac2e311780353533
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3837ac2e31178035
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf4035acc3968b7f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2831321ca31c9d39
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3581e0c9f99dad33
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0d07190c0c1016
mov qword [rsp + 0x40], rdx
movabs rdx, 0x714160a0a1f1e1c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b111d1616061e07
mov qword [rsp + 0x50], rdx
movabs rdx, 0x30e040e2016030b
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb0e1f150b060713
mov qword [rsp + 0x60], rdx
movabs rdx, 0x151b0d10060e0d0c
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x463400
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x30
jge 0x463432
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x46345b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
cmp rsi, 0x22
jb 0x4633e2
jmp 0x46344f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x22
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x22
call fcn.00453440
mov eax, edi
mov ecx, 0x22
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00463320
Function at 0x4641a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4642f2
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xae3ff24feed0226
mov qword [rsp + 0x19], rdx
movabs rdx, 0x22eb1511aa0ae3ff
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x91d5ec389d3331de
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd3633302e223220
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xeb32dad1db1702f8
mov qword [rsp + 0x36], rdx
movabs rdx, 0x150d1700130c1f19
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x2210150d1700130c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30415021f181d22
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6060c1009060615
mov qword [rsp + 0x50], rdx
movabs rdx, 0x814191212211c04
mov qword [rsp + 0x58], rdx
movabs rdx, 0x80a240b101d1e05
mov qword [rsp + 0x60], rdx
movabs rdx, 0x142002071501020a
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x46428a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xb]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x32
jge 0x4642bc
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4642e5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xb]
cmp rsi, 0x25
jb 0x464270
jmp 0x4642d7
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
call fcn.004418e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x25
nop
call fcn.00453440
mov eax, edi
mov ecx, 0x25
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004641a0

Function at 0x464a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x464b88
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x3135ae3131be9714
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf5dd329333323135
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc4315128d448c13e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x35f9a53433e9d19a
mov qword [rsp + 0x32], rdx
movabs rdx, 0xfa1fd5a6affd319f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x22101b1018110e0c
mov qword [rsp + 0x42], rdx
movabs rdx, 0x20f1715200d241c
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x512111c1311020f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x220c25240a1e13
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5050d23131b1705
mov qword [rsp + 0x60], rdx
movabs rdx, 0xd2021220c161b01
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x464b20
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2e
jge 0x464b52
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x464b7b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0x26
jb 0x464b02
jmp 0x464b6f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x26
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x26
call fcn.00453440
mov eax, edi
mov ecx, 0x26
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00464a40
Function at 0x46c140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x46c2c7
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x62aee9f2daa8e065
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x550195cdb8d88153
mov qword [rsp + 0x26], rdx
movabs rdx, 0x702270ef550195cd
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x64afa6c1e6ac7265
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc800162ed1e81d20
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x65c1fcd040200f96
mov qword [rsp + 0x42], rdx
movabs rdx, 0x321090f0b182121
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x21b1b121f0c2404
mov qword [rsp + 0x52], rdx
movabs rdx, 0xa2a28271f00021b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x251f0e092005241d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x190d291d24121701
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1e08242813121308
mov qword [rsp + 0x70], rdx
movabs rdx, 0x22161b1f091a0e
mov qword [rsp + 0x78], rdx
movabs rdx, 0x506092810132316
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x46c260
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x3e
jge 0x46c28d
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x46c2ba
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x2c
jb 0x46c23f
jmp 0x46c2ae
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x2c
call fcn.004418e0
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x2c
call fcn.00453440
mov eax, edi
mov ecx, 0x2c
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0046c140
Function at 0x46c2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x46c466
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xc9e286da74df65c3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb65cb7bfba6f0362
mov qword [rsp + 0x23], rdx
movabs rdx, 0x824270b65cb7bfba
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30cd66ee6f6d3912
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb9a8ae1920d1696d
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe6f81061e7768c66
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x250e132604132318
mov qword [rsp + 0x46], rdx
movabs rdx, 0x21072a0c24280205
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x202321072a0c2428
mov qword [rsp + 0x50], rdx
movabs rdx, 0x61121191d201409
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd2a0904010c1429
mov qword [rsp + 0x60], rdx
movabs rdx, 0x4230b1106111417
mov qword [rsp + 0x68], rdx
movabs rdx, 0xf08130905121d1f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x241d2228151b1400
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x46c3f9
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x3a
jge 0x46c428
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x46c455
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
nop
cmp rsi, 0x2b
jb 0x46c3dc
jmp 0x46c449
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2b
call fcn.004418e0
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2b
call fcn.00453440
mov eax, edi
mov ecx, 0x2b
nop dword [rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0046c2e0
Function at 0x46c480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x46c606
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x756d506520d7dc81
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x44756d506520d7dc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x488e6ed9bdb3c501
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb3ff20ccdc956369
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x976501b74120cd5c
mov qword [rsp + 0x36], rdx
movabs rdx, 0xec3231a809d39320
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x5f34d95d507469f0
mov qword [rsp + 0x46], rdx
movabs rdx, 0xb0c2d0805232f0f
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xa100b0c2d080523
mov qword [rsp + 0x50], rdx
movabs rdx, 0x200a28180f152819
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1c1d2d0630221a0d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x25131e2400292308
mov qword [rsp + 0x68], rdx
movabs rdx, 0x102082d1d061729
mov qword [rsp + 0x70], rdx
movabs rdx, 0x141d251322092e2d
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x46c599
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x32
jge 0x46c5c8
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x46c5f5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop
cmp rsi, 0x31
jb 0x46c57c
jmp 0x46c5e9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x31
call fcn.004418e0
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x31
call fcn.00453440
mov eax, edi
mov ecx, 0x31
nop dword [rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0046c480
Function at 0x46c620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46c772
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xa5c22ab46d679d8
mov qword [rsp + 0x18], rdx
movabs rdx, 0x55e551770a5c22ab
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x776c168cd289342f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4920b428e1a53eb4
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6cca206b6f636572
mov qword [rsp + 0x34], rdx
movabs rdx, 0x110b23060f170f1b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa1f09110b2306
mov qword [rsp + 0x40], rdx
movabs rdx, 0x220208020e20181f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x70c13231015050f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x614221b100b0519
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1b071f0513190709
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb0c14040c11160f
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x46c70a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x79]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x34
jge 0x46c73c
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x46c765
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x79]
cmp rsi, 0x24
jb 0x46c6f0
jmp 0x46c757
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x24
call fcn.004418e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x24
nop
call fcn.00453440
mov eax, edi
mov ecx, 0x24
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0046c620

Function at 0x46c780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46c8c6
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x67716f74bb757901
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf115c033c0cd7869
mov qword [rsp + 0x26], rdx
movabs rdx, 0x697bf8dbff6c8258
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xce61c4656e209374
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9ea472cbb2b2fc8d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe10260f0f0a200a
mov qword [rsp + 0x46], rdx
movabs rdx, 0xa1015151f102213
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x261d0a1015151f10
mov qword [rsp + 0x50], rdx
movabs rdx, 0x23062411191d0711
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2703101414210d16
mov qword [rsp + 0x60], rdx
movabs rdx, 0x222415200b1f2400
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x46c860
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x2a
jge 0x46c88d
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x46c8b4
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x28
jb 0x46c842
jmp 0x46c8a8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x28
call fcn.004418e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x28
call fcn.00453440
mov eax, edi
mov ecx, 0x28
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0046c780
Function at 0x46db80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46dc6b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x370035af33906292
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x469fa696aa04ed9c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0e0c0900060109
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2010e0e0c090006
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8040d0c0b0a0d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x46dc04
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x46dc37
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x46dc5e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x46dbe7
jmp 0x46dc52
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453440
mov eax, edi
mov ecx, 0x10
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0046db80

Function at 0x4726a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472796
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xaf87878c82ce9999
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9e95af87878c82ce
mov qword [rsp + 0x20], rdx
movabs rdx, 0xae61698fd3babba2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5000d0303070605
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90e03080a02010b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa08110c01010404
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x472733
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x472762
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x472789
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x472716
nop
jmp 0x47277d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00453440
mov eax, edi
mov ecx, 0x12
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004726a0
Function at 0x472dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472e88
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x98996c9df39bb043
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x204030207070101
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x604
xor eax, eax
nop
jmp 0x472e20
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x472e52
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x472e7b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 8
jb 0x472e02
jmp 0x472e6f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00453440
mov eax, edi
mov ecx, 8
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00472dc0

Function at 0x473420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473528
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x62616a757461785e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x754d627062616a75
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7368725f5d686f85
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2070b111100000f
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd0e0f05040d100c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe02080c11010d0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30008090a080308
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4734c2
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x4734ef
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x47351b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4734a5
jmp 0x47350f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453440
mov eax, edi
mov ecx, 0x14
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00473420
Function at 0x477880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47796b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x67e2e8de5fecbe4f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6ee7e545e167e2e8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8080a090b040108
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10408080a090b04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40a020601050808
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x477904
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6c]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6c]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x477937
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x47795e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4778e7
jmp 0x477952
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00453440
mov eax, edi
mov ecx, 0xd
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00477880

Function at 0x477e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477f1c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x41625350c9645a9b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd8e56941625350c9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x700050106000a03
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90009060501090a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x477eb2
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x477ee8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x477f0f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
nop dword [rax]
cmp rsi, 0xb
jb 0x477e98
jmp 0x477f03
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.00477e40