joyce8/EMBER2024-capa huggingface dataset:
Function at 0x45ddc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45de88
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x35eae9898df0999d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x306050205020100
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x304
xor eax, eax
nop
jmp 0x45de20
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x45de52
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x45de7b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 8
jb 0x45de02
jmp 0x45de6f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.004533e0
mov eax, edi
mov ecx, 8
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.0045ddc0

Function at 0x45e3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45e492
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x38936c659735ff33
mov qword [rsp + 0x19], rdx
movabs rdx, 0x35623138936c6597
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x404030609010106
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5060306
xor eax, eax
jmp 0x45e42e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x45e45b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x45e485
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x45e411
jmp 0x45e476
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.004533e0
mov eax, edi
mov ecx, 0xb
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.0045e3c0
Function at 0x45fc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45fcf6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1c30b23235a5a8a2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbff2bd391c30b232
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc0c38c308fa03931
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe0a0f0f0a0f0111
mov qword [rsp + 0x32], rdx
movabs rdx, 0x207000f00010e0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50e0002130b1209
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x45fc93
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x45fcc2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x45fce9
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x45fc76
nop
jmp 0x45fcdd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.004533e0
mov eax, edi
mov ecx, 0x14
call fcn.004533e0
nop
call fcn.00450d80
nop dword [rax + rax]
jmp fcn.0045fc00

Function at 0x460d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x460e88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x30503662bc3c3835
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7a5158b45533316a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb4c3d8b2b664dcbd
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd0e15110f100806
mov qword [rsp + 0x32], rdx
movabs rdx, 0x120c021010120b04
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x8170c0b1604120c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100d06061303140e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x460e20
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x460e52
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x460e7b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0x18
jb 0x460e05
jmp 0x460e6f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop
call fcn.00441880
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.004533e0
mov eax, edi
mov ecx, 0x18
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.00460d80
Function at 0x4613e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4614f6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x68ca7e83357a587f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xae326a82e87d7c31
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6e39ae326a82e87d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x356080f030817fc3
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf1200161401070b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x607040b14061702
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0f0a0414130d11
mov qword [rsp + 0x48], rdx
movabs rdx, 0x51807120005090a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x46148e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4614c2
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4614e9
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x1a
jb 0x461474
nop
jmp 0x4614dd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00441880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004533e0
mov eax, edi
mov ecx, 0x1a
call fcn.004533e0
nop
call fcn.00450d80
nop dword [rax + rax]
jmp fcn.004613e0
Function at 0x463040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x463186
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xd23732587cc1d450
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x76d23732587cc1d4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbaedc342c030d637
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb870f8dbd8fe6ebd
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf432d4bad3d45036
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1d1a0d2018160004
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1011020c1d010f0d
mov qword [rsp + 0x46], rdx
movabs rdx, 0xa151011020c1d01
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18170f03081c1e07
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2013171b1c120e0d
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf040e1413181c
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x463120
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x2a
jge 0x46314d
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x463174
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x21
jb 0x463102
jmp 0x463168
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
call fcn.00441880
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.004533e0
mov eax, edi
mov ecx, 0x21
nop dword [rax + rax]
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.00463040

Function at 0x4631a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4632e8
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x367031e8b566b457
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe337367031e8b566
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x41c5b9e1be7230d9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x697532c835cd3a89
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc1bf363039cb37cb
mov qword [rsp + 0x32], rdx
movabs rdx, 0x60609200c09180a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x12190214160e040e
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1306190621161219
mov qword [rsp + 0x48], rdx
movabs rdx, 0x141c160910001104
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13120a091b04101a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1106040d010f1603
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x463280
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2e
jge 0x4632b2
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x4632db
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0x22
jb 0x463262
jmp 0x4632cf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x22
nop
call fcn.00441880
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x22
call fcn.004533e0
mov eax, edi
mov ecx, 0x22
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004631a0
Function at 0x466340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4664b2
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x848b86875737c213
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x35333034a93889a4
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb78935333034a938
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe321e0739e02732
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3394329397c15130
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc538923010cd3937
mov qword [rsp + 0x40], rdx
movabs rdx, 0x19010906191b0410
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1922271108200b25
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11000b1307050817
mov qword [rsp + 0x58], rdx
movabs rdx, 0x31f1e1d141d1c29
mov qword [rsp + 0x60], rdx
movabs rdx, 0x3031e1b010016
mov qword [rsp + 0x68], rdx
movabs rdx, 0x17241f2201170b28
mov qword [rsp + 0x70], rdx
movabs rdx, 0x80b0b0311191917
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x46644a
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x38
jge 0x466477
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x4664a5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x2a
jb 0x46642d
jmp 0x466498
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x2a
call fcn.00441880
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2a
nop
call fcn.004533e0
mov eax, edi
mov ecx, 0x2a
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.00466340
Function at 0x46c420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46c566
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x53f5b9144675f604
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3216e66953f5b914
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x656c9c610c2024a2
mov qword [rsp + 0x24], rdx
movabs rdx, 0xfd26bbcb691219cf
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x38318d9c20ba65e2
mov qword [rsp + 0x34], rdx
movabs rdx, 0x111b0f0100092107
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1519051518050c21
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1921200615190515
mov qword [rsp + 0x48], rdx
movabs rdx, 0x191604051e041b0a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c041418001c041c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x180b1a06040d0c07
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x46c500
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x2c
jge 0x46c52d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x46c554
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x24
jb 0x46c4e2
jmp 0x46c548
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x24
call fcn.00441880
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x24
call fcn.004533e0
mov eax, edi
mov ecx, 0x24
nop dword [rax + rax]
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.0046c420
Function at 0x46c580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x46c706
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xb56fadd52cef21fa
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xcab56fadd52cef21
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8b1c29672773cf28
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90ffc80b704c6369
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf808166661207387
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2d3231e76c0a9420
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x3010356fa01ed8b5
mov qword [rsp + 0x44], rdx
movabs rdx, 0x23150e04292e1903
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1608201323150e04
mov qword [rsp + 0x50], rdx
movabs rdx, 0x29141828090c1818
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa03222b080f1e10
mov qword [rsp + 0x60], rdx
movabs rdx, 0x291e0701142b202c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x200e012f2a050e
mov qword [rsp + 0x70], rdx
movabs rdx, 0x252c171f022e181f
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x46c696
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x34
jge 0x46c6c8
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x46c6f5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0x31
jb 0x46c67c
jmp 0x46c6e9
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x31
call fcn.00441880
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x31
call fcn.004533e0
mov eax, edi
mov ecx, 0x31
nop dword [rax]
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.0046c580
Function at 0x46cb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46cc46
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x9e2c6f7400bc791f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb978c99e2c6f7400
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6ceebd632932038d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x43a81369fe204fc1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x39203e962e9ea4d9
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1c1d1f14190c070b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa030b021f101307
mov qword [rsp + 0x46], rdx
movabs rdx, 0x13160a030b021f10
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb181c111a160311
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe1b16100c08001e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d0614070c101d1c
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x46cbe0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x2a
jge 0x46cc0d
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x46cc34
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x23
jb 0x46cbc2
jmp 0x46cc28
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x23
call fcn.00441880
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x23
call fcn.004533e0
mov eax, edi
mov ecx, 0x23
nop dword [rax + rax]
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.0046cb00

Function at 0x46d0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46d1ab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x37209b1a3332c630
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9be993140d16b0db
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd050d090b0f0801
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x40e05090d050d09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80d0b06090d0a0c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x46d144
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x5f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x5f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x14
jge 0x46d177
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x46d19e
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x46d127
jmp 0x46d192
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00441880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.004533e0
mov eax, edi
mov ecx, 0x10
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.0046d0c0
Function at 0x473a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473b68
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa2b0e7e79ba5a8ec
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc7648b30b6a2b0e7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x108010c0a000906
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6020108010c0a00
mov qword [rsp + 0x28], rdx
movabs rdx, 0x307020a07040205
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x473b01
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x473b33
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x473b5b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 0xd
jb 0x473ae7
jmp 0x473b4f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.004533e0
mov eax, edi
mov ecx, 0xd
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.00473a80

Function at 0x474440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47453c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1570dd7263386e49
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x99618ecd691570dd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3998612744c9d3d2
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf110a1102101409
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0d0f130a100c02
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe090d0509070502
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4744d0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x474508
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x47452f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
nop word [rax + rax]
cmp rsi, 0x15
jb 0x4744b6
jmp 0x474523
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.004533e0
mov eax, edi
mov ecx, 0x15
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.00474440
Function at 0x474bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474c92
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x52cb73c89c61a8a1
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x9b68
movabs rdx, 0x903030406090607
mov qword [rsp + 0x22], rdx
movabs rdx, 0x107030007030903
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x474c2d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x474c5a
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x474c85
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x474c10
jmp 0x474c75
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.004533e0
mov eax, edi
mov ecx, 0xa
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.00474bc0

Function at 0x475620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4756e6
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xffd9e1288c8c0af3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x703000500040702
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6070501
xor eax, eax
jmp 0x475680
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4756ad
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4756d4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x475662
jmp 0x4756c8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.004533e0
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.00475620
Function at 0x4763c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4764a8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x82f4be96a0d76598
mov qword [rsp + 0x19], rdx
movabs rdx, 0x691ea0616b82f4be
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x607020a03030b02
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70607020a0303
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa000b040a0b0500
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x476441
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x476473
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x47649b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 0xd
jb 0x476427
jmp 0x47648f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.004533e0
mov eax, edi
mov ecx, 0xd
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004763c0

Function at 0x477a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477ae9
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x1e7210505f361d76
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x6301
movabs rdx, 0x707070100080102
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7050805
xor eax, eax
jmp 0x477a83
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x477ab5
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x477adc
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
cmp rsi, 0xa
jb 0x477a69
jmp 0x477ad0
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.004533e0
mov eax, edi
mov ecx, 0xa
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.00477a20