joyce8/EMBER2024-capa huggingface dataset:
Function at 0x46ef20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46efdd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x74e3992067762fdf
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x6369
movabs rdx, 0x200050204060002
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2000401
xor eax, eax
jmp 0x46ef80
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x46efad
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x46efd0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x46ef63
jmp 0x46efc4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0046ef20

Function at 0x46fdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46febb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x97a4791963e16e9b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5fe388916fc697a4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6ee5c3680de2aaaf
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0a140808040c11
mov qword [rsp + 0x30], rdx
movabs rdx, 0x708021411111410
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5001307140f000c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50b02140706040f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x46fe59
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x46fe8b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x46feae
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
cmp rsi, 0x16
jb 0x46fe3f
jmp 0x46fea2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0046fdc0
Function at 0x470480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47056a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x50cd6ef1cfadf74b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6ce26d50cd6ef1cf
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xeb4d6f72cd6ec86c
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd10110209030702
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0e0c070d101102
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4100d0201120606
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47050d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x47053a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x47055d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4704f0
jmp 0x470551
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00470480

Function at 0x471bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471c86
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc768db746165614e
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xd6
movabs rdx, 0x205080208070602
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x606
xor eax, eax
nop
jmp 0x471c20
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x471c52
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x471c77
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
cmp rsi, 9
jb 0x471c02
jmp 0x471c6b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00471bc0
Function at 0x471ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471d6c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x64fcf8f85fb5ec45
mov qword [rsp + 0x19], rdx
movabs rdx, 0x69f86164fcf8f85f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x501020101000002
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2040609
xor eax, eax
jmp 0x471d05
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x471d3c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x471d5f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0xb
jb 0x471ceb
jmp 0x471d53
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00471ca0

Function at 0x472a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472b47
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8f9d659a5f64e882
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xf7c1
movabs rdx, 0x109080608090707
mov qword [rsp + 0x22], rdx
movabs rdx, 0x400060604090109
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x472ae7
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x472b17
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x472b3a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x472aca
jmp 0x472b2e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00472a80

Function at 0x4732c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473387
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x485f68f1e168615c
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xe7e84979
movabs rdx, 0xa0a04080b090009
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x303040400000a0a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x473328
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x74]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x74]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x473357
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x47337a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x47330b
jmp 0x47336e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004732c0
Function at 0x473ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473d7d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5fdb4e746cd8d7f7
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x69e0665568c7505f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x209050b0601060b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0c0209050b0601
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb05000d060b0d02
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x473d20
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x473d4d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x473d70
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x473d02
jmp 0x473d64
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00473ca0

Function at 0x4746c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474772
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x7da4d9545f698a83
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7010005010006
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x474711
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x47473e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x474765
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4746f4
jmp 0x474755
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004746c0

Function at 0x474880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474938
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf27f61f285e583f7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x701060300020601
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x406
xor eax, eax
jmp 0x4748d5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x474908
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47492b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
nop
cmp rsi, 8
jb 0x4748bb
jmp 0x47491f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.00474880
Function at 0x478600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4786ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3691d6169b5618f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5f2403691d6169b5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb7a374b919c0c468
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe10100a0b11000d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70d0e080e10100a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc070e02000d0507
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47868a
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x4786bc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4786df
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x12
jb 0x478670
jmp 0x4786d3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00478600

Function at 0x478700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4787cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa99efa8ca9b4ee3a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x65a843a99efa8ca9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x905000508070604
mov qword [rsp + 0x28], rdx
movabs rdx, 0x900070009010203
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47876f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x37]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x37]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x47879c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4787bf
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x478752
jmp 0x4787b3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00478700
Function at 0x47bfa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c09d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x750f2ee2cf1b7922
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf1203ace6566e075
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65efd48e23e3c8e2
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x311130e1308060f
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb04100011080212
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x4040b0410001108
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb13030014030b15
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x47c040
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x47c06d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x47c090
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x47c01f
jmp 0x47c084
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0047bfa0
Function at 0x47cd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ce3d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xda103b0837ffe376
mov qword [rsp + 0x18], rdx
movabs rdx, 0x98a1eff6c229f6e
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd1a00b666f1f39ff
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc023ac04c73f6572
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10d0200151b0a17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x16090f0a071c0e07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c0c061602121d1e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x90e10051e04101f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a031e07110d1f04
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x47cde0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x47ce0d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x47ce30
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x20
jb 0x47cdbd
jmp 0x47ce24
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461020
mov eax, edi
mov ecx, 0x20
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0047cd20

Function at 0x47ce60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47cf8c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xcf203a6f6927f178
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb120d5695bd630f8
mov qword [rsp + 0x22], rdx
movabs rdx, 0xfb5b20c044bb65c1
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x451bf4e6e6d8abf8
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7161d1700101813
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1e0f1f160b1b0108
mov qword [rsp + 0x42], rdx
movabs rdx, 0xf1b07101f1c1e0f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa1b1b19091e0a00
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1609190d0216070d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x141916120a181a1e
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x47cf26
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x2e
jge 0x47cf5c
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x47cf7f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 0x20
jb 0x47cf0c
jmp 0x47cf73
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x20
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461020
mov eax, edi
mov ecx, 0x20
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0047ce60
Function at 0x47f340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f492
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x88], xmm15
movups xmmword [rsp + 0x98], xmm15
movabs rdx, 0x7acbe7a2e89d9963
mov qword [rsp + 0x30], rdx
movabs rdx, 0xbc3aaac80fbb971e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6484ad1517d5e6ad
mov qword [rsp + 0x40], rdx
movabs rdx, 0x94af509abad80c1a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10d0200151b0a17
mov qword [rsp + 0x50], rdx
movabs rdx, 0x16090f0a071c0e07
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1c0c061602121d1e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x90e10051e04101f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1a031e07110d1f04
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x47f40b
movzx r8d, byte [rsp + rbx + 0x30]
sub r8d, edx
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x30], dl
lea edx, [rdi + 0x69]
mov byte [rsp + rbx + 0x30], dl
add rax, 2
cmp rax, 0x28
jge 0x47f436
movzx edx, byte [rsp + rax + 0x50]
movzx ebx, byte [rsp + rax + 0x51]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0x20
jae 0x47f485
movzx edi, byte [rsp + rsi + 0x30]
sub edi, edx
cmp rbx, 0x20
jb 0x47f3ef
jmp 0x47f478
movups xmmword [rsp + 0x10], xmm15
movups xmmword [rsp + 0x20], xmm15
xor eax, eax
jmp 0x47f452
movzx ecx, byte [rsp + rax + 0x30]
mov byte [rsp + rax + 0x10], cl
inc rax
cmp rax, 0x20
jl 0x47f446
movups xmm0, xmmword [rsp + 0x10]
movups xmmword [rsp + 0x88], xmm0
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [rsp + 0x98], xmm0
add rsp, 0x78
pop rbp
ret
mov eax, ebx
mov ecx, 0x20
nop
call fcn.00461020
mov eax, esi
mov ecx, 0x20
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0047f340
Function at 0x47f4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x68]
cmp r12, qword [r14 + 0x10]
jbe 0x47f6ec
push rbp
mov rbp, rsp
sub rsp, 0xe0
movups xmmword [rsp + 0xf0], xmm15
movups xmmword [rsp + 0x100], xmm15
movups xmmword [rsp + 0x110], xmm15
movups xmmword [rsp + 0x120], xmm15
movabs rdx, 0xe21cc898026f01cf
mov qword [rsp + 0x52], rdx
movabs rdx, 0x41172507274553d
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x6e842b49be842f3e
mov qword [rsp + 0x62], rdx
movabs rdx, 0x994012b4baca87de
mov qword [rsp + 0x6a], rdx
movabs rdx, 0x9225293d1b7fb17d
mov qword [rsp + 0x72], rdx
movabs rdx, 0xf4177ca5f165fa3a
mov qword [rsp + 0x7a], rdx
movabs rdx, 0xade527e0fa21a00
mov qword [rsp + 0x82], rdx
movabs rdx, 0xf07ff0d8f127e86
mov qword [rsp + 0x8a], rdx
movabs rdx, 0x7363d1700301813
mov qword [rsp + 0x92], rdx
movabs rdx, 0x1e2f3f362b3b2128
mov qword [rsp + 0x9a], rdx
movabs rdx, 0x2f3b07301f1c1e2f
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x2a1b3b19091e0a00
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x1629392d2236272d
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x143916322a381a1e
mov qword [rsp + 0xb8], rdx
movabs rdx, 0x12052c041720021a
mov qword [rsp + 0xc0], rdx
movabs rdx, 0x12140d1634211735
mov qword [rsp + 0xc8], rdx
movabs rdx, 0x13240c29342c2032
mov qword [rsp + 0xd0], rdx
movabs rdx, 0x40b1e05073a1f3b
mov qword [rsp + 0xd8], rdx
xor eax, eax
jmp 0x47f62e
movzx r8d, byte [rsp + rbx + 0x52]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rsi + 0x52], dl
mov byte [rsp + rbx + 0x52], dil
add rax, 2
cmp rax, 0x4e
jge 0x47f668
movzx edx, byte [rsp + rax + 0x92]
movzx ebx, byte [rsp + rax + 0x93]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0x40
jae 0x47f6df
movzx edi, byte [rsp + rsi + 0x52]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x6c]
nop
cmp rbx, 0x40
jb 0x47f614
jmp 0x47f6d3
movups xmmword [rsp + 0x12], xmm15
movups xmmword [rsp + 0x22], xmm15
movups xmmword [rsp + 0x32], xmm15
movups xmmword [rsp + 0x42], xmm15
xor eax, eax
jmp 0x47f690
movzx ecx, byte [rsp + rax + 0x52]
mov byte [rsp + rax + 0x12], cl
inc rax
cmp rax, 0x40
jl 0x47f684
movups xmm0, xmmword [rsp + 0x12]
movups xmmword [rsp + 0xf0], xmm0
movups xmm0, xmmword [rsp + 0x22]
movups xmmword [rsp + 0x100], xmm0
movups xmm0, xmmword [rsp + 0x32]
movups xmmword [rsp + 0x110], xmm0
movups xmm0, xmmword [rsp + 0x42]
movups xmmword [rsp + 0x120], xmm0
add rsp, 0xe0
pop rbp
ret
mov eax, ebx
mov ecx, 0x40
call fcn.00461020
mov eax, esi
mov ecx, 0x40
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0047f4a0
Function at 0x481660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48173d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc7bfd0e061766ed7
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa2085ccc54bc7bf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50a08090a0c0a0d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x900050a08090a0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb040606070b0700
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4816e0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x48170d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x481730
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4816c2
jmp 0x481724
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00481660

Function at 0x483360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483412
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x757cbd783279b334
mov qword [rsp + 0x20], rdx
movabs rdx, 0x702020106040504
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4833ae
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4833e2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x483405
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 8
jb 0x483394
nop
jmp 0x4833f9
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00483360

Function at 0x483420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4834e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7b5a304e517f349e
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x35
movabs rdx, 0x600060702060007
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
nop
jmp 0x483480
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4834b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4834d7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
cmp rsi, 9
jb 0x483462
jmp 0x4834cb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00483420