joyce8/EMBER2024-capa huggingface dataset:
Function at 0x472b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472c58
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x13cf6e9f22901111
mov qword [rsp + 0x4f], rdx
movabs rdx, 0x978567b882488272
mov qword [rsp + 0x57], rdx
movabs rdx, 0x72978567b8824882
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd5fed4ecf57070f1
mov qword [rsp + 0x60], rdx
movabs rdx, 0x74bcb478ad462f10
mov qword [rsp + 0x68], rdx
movabs rdx, 0xbac8e46218e76e58
mov qword [rsp + 0x70], rdx
movabs rdx, 0x100c19001f0b1807
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1030a09100c1900
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x140b211e1c18021d
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa11240f09040904
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x181d111614170e08
mov qword [rsp + 0x37], rdx
movabs rdx, 0x270e171c28160223
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xf081e150c1f0626
mov qword [rsp + 0x47], rdx
xor eax, eax
jmp 0x472bf3
movzx r9d, byte [rsp + rsi + 0x4f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x4f], dl
mov byte [rsp + rsi + 0x4f], r8b
add rax, 2
cmp rax, 0x34
jge 0x472c28
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x472c4b
movzx r8d, byte [rsp + rdi + 0x4f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
nop dword [rax]
cmp rsi, 0x29
jb 0x472bd9
jmp 0x472c3f
xor eax, eax
lea rbx, [rsp + 0x4f]
mov ecx, 0x29
call fcn.0044d280
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.00462ca0
mov eax, edi
mov ecx, 0x29
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.00472b00
Function at 0x472c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472dd8
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x104248a07400396d
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x423a0a32776f5028
mov qword [rsp + 0x55], rdx
movabs rdx, 0x8f6f68423a0a3277
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7e31766659c44b71
mov qword [rsp + 0x60], rdx
movabs rdx, 0x806f756f437369a9
mov qword [rsp + 0x68], rdx
movabs rdx, 0x7f676e92905f666f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x70d02010802122a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1422070d02010802
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x271a0422162a1527
mov qword [rsp + 0x25], rdx
movabs rdx, 0x508052518262a15
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x221a02081a211002
mov qword [rsp + 0x35], rdx
movabs rdx, 0x250f061a07051805
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xc1e13100426041b
mov qword [rsp + 0x45], rdx
xor eax, eax
jmp 0x472d76
movzx r9d, byte [rsp + rsi + 0x4d]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x4d], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x4d], dl
add rax, 2
cmp rax, 0x32
jge 0x472da8
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x472dcb
movzx r8d, byte [rsp + rdi + 0x4d]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x2b
jb 0x472d59
jmp 0x472dbf
xor eax, eax
lea rbx, [rsp + 0x4d]
mov ecx, 0x2b
call fcn.0044d280
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2b
call fcn.00462ca0
mov eax, edi
mov ecx, 0x2b
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.00472c80
Function at 0x472e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x472f6c
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x75476d4196746f6e
mov qword [rsp + 0x4f], rdx
movabs rdx, 0x8475476d4196746f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xdb696a587d929b68
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a626a456e61a764
mov qword [rsp + 0x60], rdx
movabs rdx, 0x726574a14d862393
mov qword [rsp + 0x68], rdx
movabs rdx, 0x38404a85654e9520
mov qword [rsp + 0x70], rdx
movabs rdx, 0x89642488b7765669
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1b04121d1210082d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2c251b04121d1210
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2f1c241815301029
mov qword [rsp + 0x27], rdx
movabs rdx, 0x271a2416190b2505
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xe120a2e2b220306
mov qword [rsp + 0x37], rdx
movabs rdx, 0x190c2e2e262f1125
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x2a0d0e2d1a222312
mov qword [rsp + 0x47], rdx
xor eax, eax
jmp 0x472f07
movzx r9d, byte [rsp + rsi + 0x4f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x4f], dl
mov byte [rsp + rsi + 0x4f], r8b
add rax, 2
cmp rax, 0x32
jge 0x472f3c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x31
jae 0x472f5f
movzx r8d, byte [rsp + rdi + 0x4f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0x31
jb 0x472eed
jmp 0x472f53
xor eax, eax
lea rbx, [rsp + 0x4f]
mov ecx, 0x31
call fcn.0044d280
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x31
call fcn.00462ca0
mov eax, edi
mov ecx, 0x31
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00472e00

Function at 0x472f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4730a7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x46506f365c637961
mov qword [rsp + 0x44], rdx
movabs rdx, 0xd95d785846506f36
mov qword [rsp + 0x48], rdx
movabs rdx, 0x657268a8632a3478
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6a87554f7377845e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7f7e5f3e203c5972
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1122001b0a140608
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe1b181d1d232110
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1e040212150e0304
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x21171a040b171206
mov qword [rsp + 0x34], rdx
movabs rdx, 0x15221921100c1b0e
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x473049
movzx r9d, byte [rsp + rsi + 0x44]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x44], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x44], dl
add rax, 2
cmp rax, 0x28
jge 0x473077
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x24
jae 0x47309a
movzx r8d, byte [rsp + rdi + 0x44]
sub r8d, edx
cmp rsi, 0x24
jb 0x47302c
jmp 0x47308e
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x24
call fcn.0044d280
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00462ca0
mov eax, edi
mov ecx, 0x24
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00472f80
Function at 0x4730c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4731f8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x46c26fd646cfc4d2
mov qword [rsp + 0x48], rdx
movabs rdx, 0x28d0325c64d9cee1
mov qword [rsp + 0x50], rdx
movabs rdx, 0x44772057aaa36c30
mov qword [rsp + 0x58], rdx
movabs rdx, 0x74d2c3650e2015d2
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf13972fe20399d3e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x12132724200a0a1b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x191e260e1720220c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x100609180c1b191e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf0117220e192427
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20014060a012021
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60608041d1e2006
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x473198
movzx r9d, byte [rsp + rsi + 0x48]
sub r9d, edx
lea edx, [r9 - 0x37]
mov byte [rsp + rdi + 0x48], dl
lea edx, [r8 - 0x37]
mov byte [rsp + rsi + 0x48], dl
add rax, 2
cmp rax, 0x2e
jge 0x4731c8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x4731eb
movzx r8d, byte [rsp + rdi + 0x48]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x28
jb 0x47317b
jmp 0x4731df
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x28
call fcn.0044d280
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00462ca0
mov eax, edi
mov ecx, 0x28
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.004730c0

Function at 0x4733c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47349d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3736cfdd02e77630
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd364c9436c6439f6
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40e0d0508050308
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3010b0a040e0d05
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0a030b04010f02
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x473440
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x47346d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x473490
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x473422
jmp 0x473484
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00462ca0
mov eax, edi
mov ecx, 0x10
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004733c0
Function at 0x4734c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x47361a
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x86545e6fdc727429
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6c61670b14606920
mov qword [rsp + 0x58], rdx
movabs rdx, 0x3c455e6570414134
mov qword [rsp + 0x60], rdx
movabs rdx, 0x725b39ee744b6f5c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x7421563b11fc6a0a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x656a6953717a5020
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2e061d032923251e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2a252e061d032923
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2b2418031c000707
mov qword [rsp + 0x28], rdx
movabs rdx, 0x221d261720162921
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7002110180a2b1a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc1222072e240515
mov qword [rsp + 0x40], rdx
movabs rdx, 0x22160a12230b121d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4735b8
movzx r9d, byte [rsp + rsi + 0x50]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x50], dl
mov byte [rsp + rsi + 0x50], r8b
add rax, 2
cmp rax, 0x32
jge 0x4735ea
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x47360d
movzx r8d, byte [rsp + rdi + 0x50]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0x30
jb 0x47359e
jmp 0x473601
xor eax, eax
lea rbx, [rsp + 0x50]
mov ecx, 0x30
call fcn.0044d280
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x30
call fcn.00462ca0
mov eax, edi
mov ecx, 0x30
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.004734c0

Function at 0x4754c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4755da
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa5a5203a63990dcb
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x20a1b3209c4daa18
mov qword [rsp + 0x42], rdx
movabs rdx, 0xafcdaa6c6eb820a1
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd3b1960a6dddde65
mov qword [rsp + 0x50], rdx
movabs rdx, 0x717080813090801
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1a01071708081309
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x114181d0d0615
mov qword [rsp + 0x22], rdx
movabs rdx, 0x180a140010101a07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1b010d020e0b011c
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x475577
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x22
jge 0x4755a9
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4755cd
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0x1e
jb 0x47555d
jmp 0x4755c1
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.0044d280
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1e
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.004754c0
Function at 0x475600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475708
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6e69b13a636e7dcf
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x652c7369d8e1e2e4
mov qword [rsp + 0x42], rdx
movabs rdx, 0x9827c72074ca652c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xcca07874bcb97882
mov qword [rsp + 0x50], rdx
movabs rdx, 0x161d1d0e1c0e0508
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x130b1c13141d05
mov qword [rsp + 0x22], rdx
movabs rdx, 0x16051b18191d1510
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9190a0101100501
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4756ab
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
cmp rax, 0x20
jge 0x4756d8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4756fb
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x47568e
jmp 0x4756ef
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1e
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00475600

Function at 0x475720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47583a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x83b711c8636e2789
mov qword [rsp + 0x42], rdx
movabs rdx, 0xd7440e1730c6f88
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x7475cc20cea40d74
mov qword [rsp + 0x50], rdx
movabs rdx, 0x673020744c20d0c8
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc0a1008070d0d19
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1c0d051b0c0a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1719100100050508
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x161611010c040d0f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1b0d1c061d051013
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x4757d7
movzx r9d, byte [rsp + rsi + 0x42]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x42], dl
mov byte [rsp + rsi + 0x42], r8b
add rax, 2
cmp rax, 0x26
jge 0x475809
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x47582d
movzx r8d, byte [rsp + rdi + 0x42]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 0x1e
jb 0x4757bd
jmp 0x475821
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.0044d280
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1e
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.00475720
Function at 0x475a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475b0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6169af2b74d8adb8
mov qword [rsp + 0x33], rdx
movabs rdx, 0x2769b85f6e6169af
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe7eef910b3676fc8
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd120d040c040d14
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc130c1113130014
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa0d0501020d1011
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x475aad
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jge 0x475ada
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x475afd
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x475a90
jmp 0x475af1
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00475a20

Function at 0x475ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475f72
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x4773eb6ea367e3d6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x500070005010301
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x475f0e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x475f42
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x475f65
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7c]
cmp rsi, 8
jb 0x475ef4
nop
jmp 0x475f59
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044d280
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00475ec0

Function at 0x476200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4762c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x30608d265f2f986
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xfe
movabs rdx, 0x808000406070501
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x204
xor eax, eax
nop
jmp 0x476260
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x476292
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4762b7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 9
jb 0x476242
jmp 0x4762ab
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00476200
Function at 0x4763e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4764ac
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe667bccdda52dabd
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x2372
movabs rdx, 0x103090102050500
mov qword [rsp + 0x18], rdx
movabs rdx, 0x405030402070103
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x476444
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xe
jge 0x47647c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x47649f
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0xa
jb 0x47642a
jmp 0x476493
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004763e0

Function at 0x476540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4765f8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5c65706f6a38616a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x505000703010602
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x600
xor eax, eax
jmp 0x476598
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x4765c8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4765eb
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x47657b
jmp 0x4765df
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.00476540

Function at 0x4767c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476878
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2a932c2b21156529
mov qword [rsp + 0x28], rdx
movabs rdx, 0x702070305030206
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x7040200
xor eax, eax
jmp 0x476819
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x476848
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47686b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x4767fc
jmp 0x47685f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.004767c0
Function at 0x4768a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476967
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x74efda6fe261dde2
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xe2bf
movabs rdx, 0x301090108000505
mov qword [rsp + 0x18], rdx
movabs rdx, 0x307060808070301
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x476907
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x6e]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x6e]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x476937
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x47695a
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4768ea
jmp 0x47694e
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004768a0

Function at 0x476a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476acc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5fca6ccaecf95e73
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xe6eb74eae45fca6c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0b090a04080301
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x306090206000c0b
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x476a6f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jge 0x476a9c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x476abf
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x476a52
jmp 0x476ab3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00462ca0
mov eax, edi
mov ecx, 0xd
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00476a00