joyce8/EMBER2024-capa huggingface dataset:
Function at 0x46d440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46d4fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7a565f9ba6d56124
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x68
movabs rdx, 0x407020203030007
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x402
xor eax, eax
nop
jmp 0x46d4a0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x46d4cd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x46d4f0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x46d482
jmp 0x46d4e4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0046d440

Function at 0x46e720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46e7e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x726fa99bdfdad2b7
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6d
movabs rdx, 0x105020000030200
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x504
xor eax, eax
nop
jmp 0x46e780
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x46e7b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x46e7d7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 9
jb 0x46e762
jmp 0x46e7cb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0046e720

Function at 0x470100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4701cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7a617961f46e75f6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xcf646e80d37a6179
mov qword [rsp + 0x22], rdx
movabs rdx, 0x500070905070708
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3070c0803050500
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47016f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x47019c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4701bf
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x470152
jmp 0x4701b3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00470100
Function at 0x4701e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470298
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x66bb0f106d9675ca
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x607000505070004
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 2
xor eax, eax
jmp 0x470235
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x470268
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47028b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
nop
cmp rsi, 8
jb 0x47021b
jmp 0x47027f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.004701e0

Function at 0x4715a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47169d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x79737658787f784b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6c7e7f7973765878
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7372696d6f809159
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1030c120c050507
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0d030d11071111
mov qword [rsp + 0x34], rdx
movabs rdx, 0x60104070b0d030d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80202050e06090f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x471640
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x47166d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x471690
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x47161f
jmp 0x471684
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004715a0
Function at 0x472b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472c32
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1e6e10fe7a296177
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd4b4121e6e10fe7a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x805080300090202
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40005070a070709
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x472bcc
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x472bfe
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x472c25
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0xb
jb 0x472bb2
jmp 0x472c15
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00472b60

Function at 0x4749c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474a78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5850e1de67cce8dd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x404020004050705
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x104
xor eax, eax
jmp 0x474a15
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x474a48
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x474a6b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
nop
cmp rsi, 8
jb 0x4749fb
jmp 0x474a5f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.004749c0
Function at 0x474e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474f26
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x48eaac066061b450
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa976f7b7bdb1ae48
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa04060c01070306
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa050a010a04060c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0b0308090e060c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x474ec0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x474ef2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x474f17
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0xf
jb 0x474ea2
jmp 0x474f0b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00474e40

Function at 0x475820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4758e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x73675d696f6c4453
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x5e726d61
movabs rdx, 0x70b090b09070104
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70405060701070b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x475888
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4758b7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4758da
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x47586b
jmp 0x4758ce
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00475820

Function at 0x475d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475db8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7869746972fd3df9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x100000707070107
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x201
xor eax, eax
jmp 0x475d58
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x75]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x75]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x475d88
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x475dab
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x475d3b
jmp 0x475d9f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.00475d00
Function at 0x476be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476c9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x696769375f1dbbb7
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x7b
movabs rdx, 0x2040801020800
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x402
xor eax, eax
nop
jmp 0x476c40
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x476c6d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x476c90
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x476c22
jmp 0x476c84
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00476be0

Function at 0x476cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476dac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x61f4c2e65fc13de4
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5ff17261f4c2e65f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb447a561f0655cd9
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc091204060e1104
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50112000c091204
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20900050b1009
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x476d4a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x476d7c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x476d9f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0x13
jb 0x476d30
jmp 0x476d93
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00476cc0
Function at 0x477020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4770ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x70c32894ca6d3629
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x63696870c32894ca
mov qword [rsp + 0x22], rdx
movabs rdx, 0x401000506020402
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x306010005040401
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47708f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4770bc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4770df
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x477072
jmp 0x4770d3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00477020

Function at 0x477540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47763d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaa728e898581a668
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6f4360938c7363aa
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb46e886fa9797c60
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3160f1202000c0f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x100307110c0f0b10
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb00090905091003
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110a04140c100110
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4775e0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x47760d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x477630
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x4775bf
jmp 0x477624
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00477540
Function at 0x47a280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a34c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xae53022121286831
mov qword [rsp + 0x19], rdx
movabs rdx, 0x653225ae53022121
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2040802070502
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x903
xor eax, eax
jmp 0x47a2e5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x47a31c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x47a33f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0xb
jb 0x47a2cb
jmp 0x47a333
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0047a280

Function at 0x47f480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f56c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x62a23a7b8d817597
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x661562a23a7b8d81
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9177bd662072408c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30f0f0311030811
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa10060b030f0f03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4100b0203030010
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47f50a
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x47f53c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47f55f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x12
jb 0x47f4f0
jmp 0x47f553
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0047f480
Function at 0x4873c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48748c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3592383338363734
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd93485d4e2858035
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50d0c0e050d080b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6050c0d0908090a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48742f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x48745c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x48747f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x487412
jmp 0x487473
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004873c0

Function at 0x487740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48782c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb432b5b13239f831
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe9b432b5b13239f8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x35681b75edeffc74
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd01040b0d090a05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x107010e0907070f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80b0c0f090a0709
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4877ca
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x4877fc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48781f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0x11
jb 0x4877b0
jmp 0x487813
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00487740
Function at 0x487fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4880db
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3530c67ba4fa869b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x390a713530c67ba4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf958b77c7f02576c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x201100b1209090d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd040b0f090e0b05
mov qword [rsp + 0x34], rdx
movabs rdx, 0x30400120d040b0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe08110c12040801
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x488079
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4880ab
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4880ce
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5a]
cmp rsi, 0x13
jb 0x48805f
jmp 0x4880c2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00487fe0

Function at 0x488100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4881fb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xac3035b43d4d37b6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc5cd51cbac3035b4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa9c636a9bb3139af
mov qword [rsp + 0x26], rdx
movabs rdx, 0x902080c0a0a120c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10020b090c000302
mov qword [rsp + 0x36], rdx
movabs rdx, 0x71310020b090c00
mov qword [rsp + 0x38], rdx
movabs rdx, 0x205040005020f08
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x488199
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4881cb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4881ee
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
cmp rsi, 0x14
jb 0x48817f
jmp 0x4881e2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00488100