joyce8/EMBER2024-capa huggingface dataset:
Function at 0x46a720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46a80b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x52700a13605a4c58
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x546553f174512050
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1050c0a0c040505
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf010a0200070105
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd03010e040d0801
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x46a7a4
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x16
jge 0x46a7d7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x46a7fe
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x46a787
jmp 0x46a7f2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0046a720

Function at 0x46a820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46a8fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x724e76fade6165e2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3fac9f724e76fade
mov qword [rsp + 0x22], rdx
movabs rdx, 0x804000a03090804
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3060803060804
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x46a892
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffff84
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x46a8c8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x46a8ef
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffff84
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x46a878
jmp 0x46a8e3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.0046a820
Function at 0x46a920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46a9f2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xfebcb1e3ef7821fe
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x1fac71f3
movabs rdx, 0x50806090b050007
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0a060604030a01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x46a98b
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x6f
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x46a9bc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x46a9e5
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x6f
add r8d, edx
cmp rsi, 0xc
jb 0x46a971
jmp 0x46a9d7
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0046a920
Function at 0x46fa20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46fb52
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x48528e3a2b405453
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9d48528e3a2b4054
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x206674596baf4d6c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x69246b3a7c6c6e6e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5161727c2c6f4d68
mov qword [rsp + 0x34], rdx
movabs rdx, 0x151d1b08080b0502
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd1c140e151d1b08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71a0b190811081b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1f201720030e1e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d190a2001180a1a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x46faec
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffd9
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x46fb1d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x46fb45
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffd9
add r8d, edx
cmp rsi, 0x21
jb 0x46fad2
jmp 0x46fb38
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x21
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0x21
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0046fa20

Function at 0x478780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478848
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x32fcfb1319001832
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x35
movabs rdx, 0x203030602020105
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x401
xor eax, eax
jmp 0x4787e0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x14
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x478811
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47883b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x14
add r8d, edx
cmp rsi, 9
jb 0x4787c6
jmp 0x47882f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00478780
Function at 0x4789e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478aab
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x701031359b76319f
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x35aa
movabs rdx, 0x207020700060707
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8000302
xor eax, eax
jmp 0x478a46
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x478a77
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x478a9e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x478a29
jmp 0x478a92
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004789e0

Function at 0x478bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478c8b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x3534393366a46aa6
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x71ec7833
movabs rdx, 0x203010b0000010a
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0xb000309
xor eax, eax
jmp 0x478c27
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x478c57
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x478c7e
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x478c0a
jmp 0x478c72
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00478bc0
Function at 0x47a820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a928
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x78b435827536d3db
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6bd152b936526d31
mov qword [rsp + 0x22], rdx
movabs rdx, 0x69a38d69357c3431
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc030107140e0c00
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1606090007170614
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x140a15040f061606
mov qword [rsp + 0x40], rdx
movabs rdx, 0x31703120d15040a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x47a8c0
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffaf
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x47a8f1
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x47a91b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffaf
add r8d, edx
cmp rsi, 0x18
jb 0x47a8a5
jmp 0x47a90f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0047a820

Function at 0x47b140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b253
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x35f4c4fe3535ba31
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc0eff33f332f2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3afe000c0eff33f3
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7632a4300c89f8ff
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1901120511010410
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1506190114150d0e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x806190a15061901
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1101131201170f0c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x47b1ee
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x1f
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x47b21f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x47b246
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x1f
add r8d, edx
cmp rsi, 0x1a
jb 0x47b1d4
jmp 0x47b23a
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461e80
mov eax, edi
mov ecx, 0x1a
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0047b140
Function at 0x47b260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b372
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x3637404b85375265
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4032604d7c5a5c53
mov qword [rsp + 0x26], rdx
movabs rdx, 0x71844032604d7c5a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x48599a604d65336c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9050508110c100b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x19150c0f0c170416
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30d05040b010b0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x100f120d140a18
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x47b311
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 2]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 2]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x47b33e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x47b365
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x47b2f4
jmp 0x47b359
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461e80
mov eax, edi
mov ecx, 0x1a
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0047b260

Function at 0x47bb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47bc28
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x8b5a5f8b72397f32
mov qword [rsp + 0x18], rdx
movabs rdx, 0x30700432336d34b4
mov qword [rsp + 0x20], rdx
movabs rdx, 0xec797f796cae3070
mov qword [rsp + 0x26], rdx
movabs rdx, 0x78655c8836a87835
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40713020215101a
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa15040713020215
mov qword [rsp + 0x38], rdx
movabs rdx, 0x101180e0a0d1d12
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80d051b0a081103
mov qword [rsp + 0x48], rdx
movabs rdx, 0x131c0e0a1a061714
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x47bbc0
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffa3
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x47bbf1
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x47bc1b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffa3
add r8d, edx
cmp rsi, 0x1e
jb 0x47bba3
jmp 0x47bc0f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461e80
mov eax, edi
mov ecx, 0x1e
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0047bb00
Function at 0x47d960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47daa8
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x3090979c303232a0
mov qword [rsp + 0x19], rdx
movabs rdx, 0x60f1dde3e8309097
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x86387d7f308f317e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xfcea33ae0536e337
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x353236415c368638
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd1c210d1918160b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x91114081b0f16
mov qword [rsp + 0x46], rdx
movabs rdx, 0x140a00091114081b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e0b0604110a1c08
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1205120d0d0405
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1b190c201411110a
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x47da40
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff82
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2a
jge 0x47da71
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x47da9b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff82
add r8d, edx
cmp rsi, 0x25
jb 0x47da22
jmp 0x47da8f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x25
call fcn.00461e80
mov eax, edi
mov ecx, 0x25
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0047d960

Function at 0x47e940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ea92
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0xf10457ef7fdd3936
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd1f16c3a84afe830
mov qword [rsp + 0x20], rdx
movabs rdx, 0x82dabeb636a9beeb
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1b2afd366bd3935
mov qword [rsp + 0x30], rdx
movabs rdx, 0xcb32313335396dc5
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2004061e210a211b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe050b272120210e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b05141d0c1d1d18
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f0d2710120f0d12
mov qword [rsp + 0x58], rdx
movabs rdx, 0x170e031e1b0d1115
mov qword [rsp + 0x60], rdx
movabs rdx, 0xd031f0309201a1a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1e0e1c1b07210216
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x47ea2d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x38
jge 0x47ea5a
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x47ea85
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x28
jb 0x47ea10
jmp 0x47ea75
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x28
call fcn.0044ba20
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x28
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0x28
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0047e940
Function at 0x47eaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ebf2
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x714db0347836b987
mov qword [rsp + 0x19], rdx
movabs rdx, 0x34ba658035d78c7a
mov qword [rsp + 0x21], rdx
movabs rdx, 0x7934ba658035d78c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6487388096bd7d38
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3138c965ce8aac39
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe3325da64937bf77
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x91c25180e1b2205
mov qword [rsp + 0x42], rdx
movabs rdx, 0x32807210c151b26
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1201171a0d220328
mov qword [rsp + 0x50], rdx
movabs rdx, 0x141e00000a000510
mov qword [rsp + 0x58], rdx
movabs rdx, 0x281714131e240818
mov qword [rsp + 0x60], rdx
movabs rdx, 0x121406281d090903
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x47eb8a
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff90
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2e
jge 0x47ebbb
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x47ebe5
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff90
add r8d, edx
cmp rsi, 0x29
jb 0x47eb70
jmp 0x47ebd6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x29
call fcn.0044ba20
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x29
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0x29
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0047eaa0
Function at 0x488900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x488a86
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x786f6e9b70749886
mov qword [rsp + 0x19], rdx
movabs rdx, 0x82786f6e9b707498
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x68696e67f07a207f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa5947e91876163cd
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x72fd798b59a9ac7b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x89a18dab6c8b6d20
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x30897741507495a6
mov qword [rsp + 0x42], rdx
movabs rdx, 0x15091f292810142a
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2f1c2d030b1e1509
mov qword [rsp + 0x50], rdx
movabs rdx, 0x80729001a251617
mov qword [rsp + 0x58], rdx
movabs rdx, 0x9110c0107170423
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2828082701091919
mov qword [rsp + 0x68], rdx
movabs rdx, 0x16092d260c1d1b2a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1801161f1f170016
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x488a19
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x36
jge 0x488a48
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x488a75
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop
cmp rsi, 0x31
jb 0x4889fc
jmp 0x488a69
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x31
call fcn.0044ba20
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x31
call fcn.00461e80
mov eax, edi
mov ecx, 0x31
nop dword [rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00488900
Function at 0x489200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489348
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xf2c6f74b24cdae4
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x65e7690f2c6f74b2
mov qword [rsp + 0x22], rdx
movabs rdx, 0xed0614a205ae31e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x36f27450fbd04f59
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc4b23e1c631f5170
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x21c111f0d0b110c
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1603011309142216
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x17111d1614021603
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf0221150c13071f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x3140613001a1f12
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1503190d16171f1d
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4892e0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 2
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2e
jge 0x489311
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x48933b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 2
add r8d, edx
cmp rsi, 0x23
jb 0x4892c2
jmp 0x48932f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x23
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x23
call fcn.00461e80
mov eax, edi
mov ecx, 0x23
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00489200

Function at 0x48a3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a488
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6e5a4b36695d615f
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x74
movabs rdx, 0x503040200060604
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x305
xor eax, eax
jmp 0x48a423
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x12]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x12]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x48a450
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x48a47b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x48a406
jmp 0x48a46f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0048a3c0
Function at 0x48aba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ac68
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xfb691765fd11614a
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x74
movabs rdx, 0x502070302030505
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 3
xor eax, eax
jmp 0x48ac03
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x48ac30
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x48ac5b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x48abe6
jmp 0x48ac4f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0048aba0

Function at 0x48ade0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48aeab
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf9eb55fa2be5e350
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x25
movabs rdx, 0x307030206010804
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1060803
xor eax, eax
jmp 0x48ae44
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x4c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x4c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x48ae77
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x48ae9e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x48ae27
jmp 0x48ae92
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0048ade0