joyce8/EMBER2024-capa huggingface dataset:
Function at 0x461620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46174c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x3537be3522cd58c4
mov qword [rsp + 0x19], rdx
movabs rdx, 0x39e9323663313635
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30396f8c43d27931
mov qword [rsp + 0x28], rdx
movabs rdx, 0x373255afec31c794
mov qword [rsp + 0x30], rdx
movabs rdx, 0x35c2c238ca4cc197
mov qword [rsp + 0x38], rdx
movabs rdx, 0x240a1a1b17130110
mov qword [rsp + 0x40], rdx
movabs rdx, 0x32521120622021c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1314022100200d0d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x102224241a170118
mov qword [rsp + 0x58], rdx
movabs rdx, 0x121311051f251117
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4616e6
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x28
jge 0x46171c
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x27
jae 0x46173f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0x27
jb 0x4616cc
jmp 0x461733
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x27
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x27
call fcn.00451880
mov eax, edi
mov ecx, 0x27
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00461620

Function at 0x4620c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x462218
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x39363434495536b1
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x34319233639f3172
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1d34319233639f31
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1b1a882c0c386738
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5f645d613e322739
mov qword [rsp + 0x34], rdx
movabs rdx, 0x4c6736937e375e41
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1f25271a1c141a00
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1d1810171f25271a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c152228081d1418
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10d271e22140d25
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa201a0328120b18
mov qword [rsp + 0x60], rdx
movabs rdx, 0x161d220b1f021d24
mov qword [rsp + 0x68], rdx
movabs rdx, 0x251d1802201e2124
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4621b6
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x34
jge 0x4621e8
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x46220b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x29
jb 0x462199
jmp 0x4621ff
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x29
call fcn.00441380
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.00451880
mov eax, edi
mov ecx, 0x29
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004620c0
Function at 0x46abc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x46ad47
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0xd710d7253416960
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc36170466c6c0684
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8dc46f976f70a359
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x727884c474b36feb
mov qword [rsp + 0x36], rdx
movabs rdx, 0x747c6c9c1ba9616d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x73889b7ba6afc1e7
mov qword [rsp + 0x46], rdx
movabs rdx, 0xd022b2d15012614
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x9290d022b2d1501
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2131e1329160426
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd182b2f1c2b2511
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf24170010282f1a
mov qword [rsp + 0x68], rdx
movabs rdx, 0xd1d252406031c0c
mov qword [rsp + 0x70], rdx
movabs rdx, 0x92208232a181d2e
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2f07072a29250806
mov qword [rsp + 0x80], rdx
movabs rdx, 0x162d2a062d05102c
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x46ace2
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x1b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x1b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x42
jge 0x46ad0f
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x46ad3a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x30
jb 0x46acc5
jmp 0x46ad2e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x30
nop dword [rax + rax]
call fcn.00441380
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x30
call fcn.00451880
mov eax, edi
mov ecx, 0x30
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0046abc0

Function at 0x46eca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46ed5d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb40b736b8c026802
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xc
movabs rdx, 0x806070207030807
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 3
xor eax, eax
nop
jmp 0x46ed00
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x46ed2d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x46ed50
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x46ece2
jmp 0x46ed44
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0046eca0
Function at 0x46f780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f83d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa66ff569a5b388ba
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xff
movabs rdx, 0x702030307050802
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 1
xor eax, eax
nop
jmp 0x46f7e0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x46f80d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x46f830
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x46f7c2
jmp 0x46f824
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0046f780

Function at 0x471e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471eec
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x64693431c42fe5ea
mov qword [rsp + 0x19], rdx
movabs rdx, 0x25157264693431c4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x509040500090304
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xa02010a
xor eax, eax
jmp 0x471e85
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x471ebc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x471edf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0xb
jb 0x471e6b
jmp 0x471ed3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00471e20
Function at 0x472bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472cbb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4e6e6c6b7651794e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x60637c4a4d5c4e6e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x476d836d485f6577
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc14030513140e0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd03090205140805
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0c0d14020e0713
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc15130e0507090e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x472c59
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x472c8b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x472cae
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
cmp rsi, 0x16
jb 0x472c3f
jmp 0x472ca2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.00472bc0

Function at 0x472ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472d98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x80ebc9f2e4f26c06
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x704020002050305
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4060206
xor eax, eax
jmp 0x472d39
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x472d68
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x472d8b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop
cmp rsi, 8
jb 0x472d1c
jmp 0x472d7f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00472ce0
Function at 0x473360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47342c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x643f594b613c224f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x52614d643f594b61
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa03020108040602
mov qword [rsp + 0x28], rdx
movabs rdx, 0x604080802050602
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4733cf
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x4733fc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x47341f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4733b2
jmp 0x473413
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00473360

Function at 0x4747a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474866
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe51929618c072222
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x65
movabs rdx, 0x501030607030307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 2
xor eax, eax
nop
jmp 0x474800
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x474832
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x474857
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 9
jb 0x4747e2
jmp 0x47484b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004747a0

Function at 0x4750e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475198
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2e2974013d61f655
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x404030301070404
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x607
xor eax, eax
jmp 0x475135
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x475168
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47518b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
nop
cmp rsi, 8
jb 0x47511b
jmp 0x47517f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004750e0
Function at 0x4752c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47538c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc7c81dcc996abab5
mov qword [rsp + 0x19], rdx
movabs rdx, 0x697469c7c81dcc99
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20401060506
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7030407
xor eax, eax
jmp 0x475325
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x47535c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x47537f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 0xb
jb 0x47530b
jmp 0x475373
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004752c0

Function at 0x4776c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4777ac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x12e2f9e6dfc388c0
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2d12e2f9e6dfc388
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd775e92fd06e3448
mov qword [rsp + 0x22], rdx
movabs rdx, 0x100a010e00090405
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100e0602100d100a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x807100008070c03
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47774a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x47777c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47779f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0x11
jb 0x477730
jmp 0x477793
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004776c0
Function at 0x478f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47906a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5ff8659092fbb355
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x495ff8659092fbb3
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe270bb9192d765c4
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb01020d10031006
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30d0c040101060b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb03090b0e0b0101
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47900d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x15]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x15]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x47903a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47905d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x478ff0
jmp 0x479051
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00478f80
Function at 0x487600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4876fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7585d07d63558064
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8e90ac828f866574
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7465798166a620b9
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x140812100e0f020d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x20404120a0b0a05
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1500081002040412
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa150d010d0b060c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x487699
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4876cb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4876ee
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x18
jb 0x48767f
jmp 0x4876e2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.00487600

Function at 0x487a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487aec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7484657078a06e56
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20762e3b98748465
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1a65e1738665751d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x900140800060212
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc020a12090a0900
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa140a0d060d1014
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x487a8a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x487abc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x487adf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0x15
jb 0x487a70
jmp 0x487ad3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00487a00
Function at 0x4889e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488b0c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x7246b56fb2146580
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x692928731165b896
mov qword [rsp + 0x26], rdx
movabs rdx, 0x14b9dd21bc396929
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x79657217667e66cc
mov qword [rsp + 0x34], rdx
movabs rdx, 0x15101b08181b0e16
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe161a051b1a0e0d
mov qword [rsp + 0x44], rdx
movabs rdx, 0x121d13180e161a05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170d1802000b0514
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130811081b18151d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1003031709001702
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x488aa6
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x2c
jge 0x488adc
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1e
jae 0x488aff
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
cmp rsi, 0x1e
jb 0x488a8c
jmp 0x488af3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451880
mov eax, edi
mov ecx, 0x1e
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004889e0

Function at 0x488b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x488c92
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x3a2a7665d5b357e3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x56d03d650d6e0cf0
mov qword [rsp + 0x23], rdx
movabs rdx, 0x25721620d156d03d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xff21fe69f9c0726f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe6393ffd20c35f6c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7811168f31201c6f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1e1f17060801052b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6290d29020f1a10
mov qword [rsp + 0x50], rdx
movabs rdx, 0x324081800120b08
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2a212106180e021f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f1f0f170d02141b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1c090f231222062b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x23080e0226240306
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1c031e090b1a2817
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x488c30
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x40
jge 0x488c5d
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x488c85
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x2d
jb 0x488c13
jmp 0x488c77
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2d
call fcn.00441380
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
nop
call fcn.00451880
mov eax, edi
mov ecx, 0x2d
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00488b20