joyce8/EMBER2024-capa huggingface dataset:
Function at 0x470920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4709f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x311fc6134fa0447
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x69036e1d2b0311fc
mov qword [rsp + 0x22], rdx
movabs rdx, 0x702070b01050806
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7090305010b0702
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47098c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4709be
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4709e5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0xd
jb 0x470972
jmp 0x4709d5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.004518a0
mov eax, edi
mov ecx, 0xd
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.00470920

Function at 0x472040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4720f8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x42e690898dfc0109
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x500020104030304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 6
xor eax, eax
jmp 0x472098
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4720c8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4720eb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x47207b
jmp 0x4720df
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004518a0
mov eax, edi
mov ecx, 8
call fcn.004518a0
nop
call fcn.0044f620
nop dword [rax]
jmp fcn.00472040

Function at 0x472980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472a52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x64699f7df7649b9c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x98eb0264699f7df7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x808030a05010809
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40009000a000808
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4729ec
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x472a1e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x472a45
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0xb
jb 0x4729d2
jmp 0x472a35
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.004518a0
mov eax, edi
mov ecx, 0xb
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.00472980
Function at 0x473580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473646
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf467f26f756ee6dc
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xe8
movabs rdx, 0x107080600000305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x805
xor eax, eax
nop
jmp 0x4735e0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x473612
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x473637
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 9
jb 0x4735c2
jmp 0x47362b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004518a0
mov eax, edi
mov ecx, 9
nop
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.00473580

Function at 0x473780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47384c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x846e5542b267614e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x210d0b846e5542b2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x907030703050704
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80304040a050907
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4737ef
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x47381c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x47383f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4737d2
jmp 0x473833
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004518a0
mov eax, edi
mov ecx, 0xb
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.00473780
Function at 0x474ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474c8c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb0189e0806d1e40f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x68b0189e0806d1e4
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb60669b20e72d95f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa030f0f040602
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40c0710010a000a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0004050d0f0202
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x474c2a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x474c5c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x474c7f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0x11
jb 0x474c10
jmp 0x474c73
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004518a0
mov eax, edi
mov ecx, 0x11
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.00474ba0

Function at 0x474ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474d67
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa8c6ca5f186cba
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6368
movabs rdx, 0x703050802030208
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3040602000703
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x474d07
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x474d37
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x474d5a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x474cea
jmp 0x474d4e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004518a0
mov eax, edi
mov ecx, 0xa
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.00474ca0
Function at 0x475580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47566c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2156fe7bd649e03
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6802156fe7bd649e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6b6115ca537210bd
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0d03090903100a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x704040a0e0d0309
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60e06000c000106
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47560a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x47563c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47565f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
cmp rsi, 0x11
jb 0x4755f0
jmp 0x475653
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004518a0
mov eax, edi
mov ecx, 0x11
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.00475580

Function at 0x476ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476c67
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xca5f5b74d8daa25e
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xdddec1e6
movabs rdx, 0x80302010902050b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0a020107000200
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x476c08
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x476c37
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x476c5a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x476beb
jmp 0x476c4e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004518a0
mov eax, edi
mov ecx, 0xc
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.00476ba0

Function at 0x477000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4770b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7d6ded6beff3f356
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x203060205030307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x201
xor eax, eax
jmp 0x477055
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x76]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x477088
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4770ab
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x76]
nop
cmp rsi, 8
jb 0x47703b
jmp 0x47709f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004518a0
mov eax, edi
mov ecx, 8
call fcn.004518a0
nop
call fcn.0044f620
nop dword [rax]
jmp fcn.00477000
Function at 0x4770e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4771a7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4326a56ec9728657
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc1cd694326a56ec9
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x106050101060a03
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1010906
xor eax, eax
jmp 0x477148
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x57]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x57]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x477177
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x47719a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x47712b
jmp 0x47718e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004518a0
mov eax, edi
mov ecx, 0xb
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004770e0

Function at 0x4771c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47729d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xdc28612641c62f5a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9f226122f0302d72
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb0c0c070f0b0407
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2010e090b090b0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40a0a0106030c0f
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x477240
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x47726d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x477290
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x477222
jmp 0x477284
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004518a0
mov eax, edi
mov ecx, 0x10
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004771c0
Function at 0x477480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477558
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf88b432369648abc
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xf230fe74
movabs rdx, 0x409070b060b0401
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9000409070b060b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6040a0b09060607
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4774f7
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x477528
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x47754b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x4774da
jmp 0x47753f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004518a0
mov eax, edi
mov ecx, 0xc
call fcn.004518a0
nop
call fcn.0044f620
nop dword [rax]
jmp fcn.00477480

Function at 0x477a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477ad8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb965186e6574c045
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x705050501010401
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
jmp 0x477a78
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x477aa8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x477acb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x477a5b
jmp 0x477abf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004518a0
mov eax, edi
mov ecx, 8
call fcn.004518a0
nop
call fcn.0044f620
nop dword [rax]
jmp fcn.00477a20
Function at 0x478000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4780ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2d26001af51844f1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x19d905612d26001a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2391271772657011
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30504000c030412
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5020b1003050400
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90206131107060a
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x47808d
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x14
jge 0x4780ba
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4780dd
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0x14
jb 0x478070
jmp 0x4780d1
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004518a0
mov eax, edi
mov ecx, 0x14
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.00478000

Function at 0x478100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4781cc
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x706172670c7e1c9a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x271e68706172670c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3000a000a020202
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x901010a
xor eax, eax
jmp 0x478165
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x47819c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4781bf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0xb
jb 0x47814b
jmp 0x4781b3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004518a0
mov eax, edi
mov ecx, 0xb
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.00478100
Function at 0x478340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47843d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x413e401369673a4c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x50f33e4d5f230c41
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6e26c70442213478
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9050d0913111401
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80606010e150b12
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x411080606010e15
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6070a130c131110
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4783e0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x44]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x44]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x47840d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x478430
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4783bf
jmp 0x478424
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004518a0
mov eax, edi
mov ecx, 0x17
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.00478340

Function at 0x479360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47941d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x26080572f11fb3d0
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x3374
movabs rdx, 0x207090105060600
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9030903
xor eax, eax
jmp 0x4793c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4793ed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x479410
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4793a3
jmp 0x479404
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004518a0
mov eax, edi
mov ecx, 0xa
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.00479360
Function at 0x479fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a0bd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6c616e8d31c56552
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x495f6c616e8d31c5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x722700cb0efd03c8
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc040e0204020403
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30c0f020a021002
mov qword [rsp + 0x36], rdx
movabs rdx, 0x310030c0f020a02
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0d0e0a0e0f0b03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47a060
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x47a08d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47a0b0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x47a03f
jmp 0x47a0a4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004518a0
mov eax, edi
mov ecx, 0x12
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.00479fc0

Function at 0x47ac60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ad4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f13740615110756
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3386f1374061511
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6f260865f8d429
mov qword [rsp + 0x28], rdx
movabs rdx, 0x11040204010e0b03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1010109010c0803
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa060e08040f020b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47acea
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x47ad1c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47ad3f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1e]
cmp rsi, 0x12
jb 0x47acd0
jmp 0x47ad33
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004518a0
mov eax, edi
mov ecx, 0x12
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.0047ac60