joyce8/EMBER2024-capa huggingface dataset:
Function at 0x45b860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45b91d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8cf053533ffcbd2
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x4d6
movabs rdx, 0x209060101060802
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5070700
xor eax, eax
jmp 0x45b8c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x45b8ed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x45b910
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x45b8a3
jmp 0x45b904
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0045b860

Function at 0x45cc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45cd6a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf0feeefeb886c635
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd2f0feeefeb886c6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x350d3696393335f6
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd02030903020705
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2010d0203090302
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4060f0109020208
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x45cd0d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x48]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x48]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x45cd3a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x45cd5d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x45ccf0
jmp 0x45cd51
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0045cc80
Function at 0x45ee40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45ef5d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x2edf370337f6e01c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x31191e343635382a
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb35392b1131191e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xdd2b0a0706052817
mov qword [rsp + 0x34], rdx
movabs rdx, 0x18020604011a1c19
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe1a170818020604
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16010e0819181014
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd04160811070d15
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd0d0a1c1b150200
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x45ef00
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x45ef2d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x45ef50
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1d
jb 0x45eedd
jmp 0x45ef44
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0045ee40

Function at 0x45f760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45f887
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x8b6d25b832f43832
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb587bd6f64b633ca
mov qword [rsp + 0x26], rdx
movabs rdx, 0x39346f72343334c3
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf96d38207aec30ab
mov qword [rsp + 0x36], rdx
movabs rdx, 0x151a020b1f181a02
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x60a150b040f1e0c
mov qword [rsp + 0x46], rdx
movabs rdx, 0x141b060a150b040f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1f0f1f101808050d
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd1d040718081c07
mov qword [rsp + 0x58], rdx
movabs rdx, 0x41d06060d04050e
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x45f829
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2a
jge 0x45f857
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x45f87a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x20
jb 0x45f80c
jmp 0x45f86e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00451880
mov eax, edi
mov ecx, 0x20
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0045f760
Function at 0x469940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x469a6c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x80776fb846757918
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7307e56980776fb8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x746c6c9dccfb3499
mov qword [rsp + 0x28], rdx
movabs rdx, 0x702014dc9577f3ec
mov qword [rsp + 0x30], rdx
movabs rdx, 0xcfb620c0f74d16a1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1d000a0c00040a0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x171f201d0a0e1319
mov qword [rsp + 0x48], rdx
movabs rdx, 0x70f06040e1e0704
mov qword [rsp + 0x50], rdx
movabs rdx, 0x191e100e1c151f10
mov qword [rsp + 0x58], rdx
movabs rdx, 0x904230013221814
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x469a06
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x28
jge 0x469a3c
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x24
jae 0x469a5f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0x24
jb 0x4699ec
jmp 0x469a53
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x24
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00451880
mov eax, edi
mov ecx, 0x24
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00469940
Function at 0x46a880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46a9a7
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xa459b97446e279db
mov qword [rsp + 0x19], rdx
movabs rdx, 0x43cfffa459b97446
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe76cbfeaeecc33b9
mov qword [rsp + 0x24], rdx
movabs rdx, 0xcaef74e8dcd6cf79
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6203ebe63454bcf
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0b081d17101f13
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1d0d06050a0b081d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x219221b0b16081c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a07090815120512
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe1015101414000f
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x46a949
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x24
jge 0x46a977
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x23
jae 0x46a99a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x23
jb 0x46a92c
jmp 0x46a98e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x23
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00451880
mov eax, edi
mov ecx, 0x23
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0046a880

Function at 0x46b2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46b3a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd4ceffd0d93276d6
mov qword [rsp + 0x18], rdx
movabs rdx, 0xfa45c34342729d66
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4080300030a0309
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5060f040a070104
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0d07060d040606
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x46b340
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x56]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x46b372
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x46b397
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x56]
cmp rsi, 0x10
jb 0x46b322
jmp 0x46b38b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0046b2c0
Function at 0x46e500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e607
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6e6920b3956e8fa5
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6582734c836e6f63
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa3606dc379bf6582
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa9c7ae9db97c8d44
mov qword [rsp + 0x30], rdx
movabs rdx, 0x181a011914160f0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x111b1c010e0b1b04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11510031d100416
mov qword [rsp + 0x48], rdx
movabs rdx, 0x171d001412140c18
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x46e5a5
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
mov byte [rsp + rdi + 0x1a], r9b
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x46e5d7
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0x1e
jae 0x46e5fa
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x46e58e
jmp 0x46e5ee
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451880
mov eax, edi
mov ecx, 0x1e
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0046e500

Function at 0x46e620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e73a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xa298e157ec6ef5ed
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xef746c7373f28af1
mov qword [rsp + 0x22], rdx
movabs rdx, 0x73e86dd92f53ef74
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9cf76146f0cc5972
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80f0d1c171d010c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1115161c17111a03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110112091d030a00
mov qword [rsp + 0x48], rdx
movabs rdx, 0x605071804171c19
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1417101717181715
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x46e6d7
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x28
jge 0x46e709
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x46e72d
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x1e
jb 0x46e6bd
jmp 0x46e721
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451880
mov eax, edi
mov ecx, 0x1e
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.0046e620
Function at 0x46f000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f0b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6fe0b990ae708b88
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x404050100060403
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1050500
xor eax, eax
jmp 0x46f059
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x46f088
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x46f0ab
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop
cmp rsi, 8
jb 0x46f03c
jmp 0x46f09f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.0046f000

Function at 0x470340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4703f8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x33e3700f3d373610
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x700010306070403
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x207
xor eax, eax
jmp 0x470398
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4703c8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4703eb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x47037b
jmp 0x4703df
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00470340

Function at 0x471e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471eb8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xdc4cdc6861bedafc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x501070007070200
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 7
xor eax, eax
jmp 0x471e55
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x471e88
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x471eab
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
nop
cmp rsi, 8
jb 0x471e3b
jmp 0x471e9f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00471e00
Function at 0x472880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472938
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69bafb6661fe61f7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x406000006050405
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5020506
xor eax, eax
jmp 0x4728d6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x472908
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47292b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 8
jb 0x4728bc
jmp 0x47291f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00472880

Function at 0x472b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472bfd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf76d315361735837
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2ce1073c4af76d31
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0b000c07000509
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9040c0b000c0700
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa01080c0a0a0a0c
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x472ba0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x472bcd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x472bf0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x472b82
jmp 0x472be4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00472b20

Function at 0x472c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472cf2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3693a3fe7646541
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x10cd7203693a3fe7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x403040a070303
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa070a0505090004
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x472c8c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x472cbe
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x472ce5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0xb
jb 0x472c72
jmp 0x472cd5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00472c20
Function at 0x473540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473606
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xca8f61ba88cf864e
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x86
movabs rdx, 0x304030704020608
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4020301
xor eax, eax
nop
jmp 0x4735a0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4735d2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4735f7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 9
jb 0x473582
jmp 0x4735eb
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00473540

Function at 0x474240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47430c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1d201c5033d36cee
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6e61d41d201c5033
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x508000000020306
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5050207
xor eax, eax
jmp 0x4742a5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4742dc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4742ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3a]
cmp rsi, 0xb
jb 0x47428b
jmp 0x4742f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00474240

Function at 0x475400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4754c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x61a3697d8a92a592
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x6e
movabs rdx, 0x306020001010600
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x10401
xor eax, eax
nop
jmp 0x475460
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x21]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x475492
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4754b7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x21]
cmp rsi, 9
jb 0x475442
jmp 0x4754ab
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00475400
Function at 0x475be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475c98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x611917cca8cc1e74
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x502030504060300
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4030103
xor eax, eax
jmp 0x475c39
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x475c68
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x475c8b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop
cmp rsi, 8
jb 0x475c1c
jmp 0x475c7f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00475be0

Function at 0x476520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4765ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf34c2bf3f1d62541
mov qword [rsp + 0x19], rdx
movabs rdx, 0x160f67a81a5f78f3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70a030703060b0b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10d040b0e050402
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47658f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4765bc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4765df
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x476572
jmp 0x4765d3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00476520

Function at 0x4767c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476886
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7db08b72a8aab3b0
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x63
movabs rdx, 0x302050605000007
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x601
xor eax, eax
nop
jmp 0x476820
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x476852
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x476877
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 9
jb 0x476802
jmp 0x47686b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004767c0