joyce8/EMBER2024-capa huggingface dataset:
Function at 0x466440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46651c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa3e276af641065d7
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5bece1a3e276af64
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60808000a040209
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x207080007090608
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4664b2
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4664e8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x46650f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
nop dword [rax]
cmp rsi, 0xb
jb 0x466498
jmp 0x466503
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00466440

Function at 0x468da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x468ec8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x9d47a19b7cbcd2ba
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9e669ec5b363c395
mov qword [rsp + 0x24], rdx
movabs rdx, 0x47636f809f8e9e66
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd2b309c5c120ce65
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb080d1119070817
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x50b09101d1b0b08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1d041a0f150c0001
mov qword [rsp + 0x48], rdx
movabs rdx, 0x409031c1b000210
mov qword [rsp + 0x50], rdx
movabs rdx, 0x91210150f060703
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x468e60
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x468e92
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x468ebb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 0x1e
jb 0x468e43
jmp 0x468eaf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1e
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00468da0
Function at 0x469aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x469b72
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe5de2074d1dee34b
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc27469e5de2074d1
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x303030a07010007
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2020603
xor eax, eax
jmp 0x469b0b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x469b3d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x469b65
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0xb
jb 0x469af1
jmp 0x469b58
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00469aa0

Function at 0x469ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x469fb2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf5344743c6f6759
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x725d635c
movabs rdx, 0x505080a09030006
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x705050901000505
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x469f4b
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x469f7d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x469fa5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 0xc
jb 0x469f31
jmp 0x469f98
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00469ee0
Function at 0x46bdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46bec8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x36b2b1be1f61733b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc669c50ebf36b2b1
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1c1fbd366c676f30
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1309111400060303
mov qword [rsp + 0x34], rdx
movabs rdx, 0x140c14010d0d070a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x30a0812140c1401
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1305040c0d061109
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x46be60
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x46be92
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x46bebb
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x15
jb 0x46be45
jmp 0x46beaf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046bdc0

Function at 0x46c000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46c0c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x197313ba1b1c6142
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x203030702020503
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x405
xor eax, eax
nop
jmp 0x46c060
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x46c092
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46c0bb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 8
jb 0x46c042
jmp 0x46c0af
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046c000
Function at 0x46c0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46c1a8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf7611caef730517
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xba
movabs rdx, 0x8010608060400
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x30507
xor eax, eax
jmp 0x46c141
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x46c173
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x46c19b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 9
jb 0x46c127
jmp 0x46c18f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046c0e0

Function at 0x46c480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46c53c
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x6573ae6eaa850338
mov qword [rsp + 0x20], rdx
movabs rdx, 0x200000100010305
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x46c4d4
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x46c508
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46c52f
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
nop
cmp rsi, 8
jb 0x46c4ba
jmp 0x46c523
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0046c480

Function at 0x46cfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46d0a6
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x707079756c70455f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x400000701000606
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x70106
xor eax, eax
jmp 0x46d040
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x46d06d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46d094
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x46d022
jmp 0x46d088
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046cfe0
Function at 0x46d620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46d6dc
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x486169413d6f355c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1070407040003
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x46d677
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x46d6a8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46d6cf
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x46d65a
jmp 0x46d6c3
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0046d620

Function at 0x46e280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e368
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7ea49f7565709a90
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x89aca66d699d8da2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9040f0105000e06
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0f0d0f080904
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90f0e0607060a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x46e301
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x46e333
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x46e35b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 0x10
jb 0x46e2e7
jmp 0x46e34f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046e280
Function at 0x46f060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f132
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x74e373c672e1695b
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6e69
movabs rdx, 0x1060106080900
mov qword [rsp + 0x22], rdx
movabs rdx, 0x400060609020001
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x46f0ca
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x46f0fc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x46f125
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0xa
jb 0x46f0b0
jmp 0x46f117
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046f060

Function at 0x46fde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46feab
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x19610c63a23de39a
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x1061
movabs rdx, 0x105030102050100
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1010907
xor eax, eax
jmp 0x46fe46
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x46fe77
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x46fe9e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x46fe29
jmp 0x46fe92
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0046fde0
Function at 0x470400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4704eb
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x82c38882b8be6ea0
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc4bd85618582c388
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb01010603070a08
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb000b0101060307
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1070c0702010405
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x470484
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x4704b7
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x4704de
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x470467
jmp 0x4704d2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00470400

Function at 0x470a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470b28
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf3f1666f6773f7fc
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6e
movabs rdx, 0x702020501000105
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x506
xor eax, eax
jmp 0x470ac0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x470af2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x470b1b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x70]
cmp rsi, 9
jb 0x470aa6
jmp 0x470b0f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00470a60
Function at 0x470b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470c08
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xde00cbad616261cb
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6e
movabs rdx, 0x700040705000506
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 7
xor eax, eax
jmp 0x470ba3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x470bd0
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x470bfb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x470b86
jmp 0x470bef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00470b40

Function at 0x471180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471248
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8e887a68915f7b59
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x705060100030305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x105
xor eax, eax
nop
jmp 0x4711e0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x471212
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47123b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
cmp rsi, 8
jb 0x4711c2
jmp 0x47122f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00471180
Function at 0x4716c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4717bc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xd272dfafc8f7d6a3
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd0d272dfafc8f7d6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6ef4d69dbe7ba9ad
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8030e090f0a0805
mov qword [rsp + 0x30], rdx
movabs rdx, 0x405000807010102
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2090b0a010d020c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x471750
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x471788
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4717af
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x471736
jmp 0x4717a3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004716c0

Function at 0x471ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471c7c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd9ecd94a41bd6cd2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf0e569d9ecd94a41
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70a040400020709
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50403050a06070a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x471c15
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x471c48
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x471c6f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x471bf8
jmp 0x471c63
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00471ba0
Function at 0x474b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474c48
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe44a6954e161de44
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xe1
movabs rdx, 0x308060607040604
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
jmp 0x474be3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x474c10
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x474c3b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x474bc6
jmp 0x474c2f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00474b80

Function at 0x476260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4763a8
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x554483506568945a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x33d1554483506568
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3fda2c175ff1c594
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe1ce4321c0464072
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x746e69d4505f2753
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa14040008160b0c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x18170a090f01070c
mov qword [rsp + 0x42], rdx
movabs rdx, 0xc0f191110041817
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5141a181a051913
mov qword [rsp + 0x50], rdx
movabs rdx, 0x181405071e190008
mov qword [rsp + 0x58], rdx
movabs rdx, 0x15010a1b0c0e0e1b
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x476340
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2e
jge 0x476372
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x47639b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0x22
jb 0x476322
jmp 0x47638f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x22
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x22
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x22
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00476260