joyce8/EMBER2024-capa huggingface dataset:
Function at 0x484540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484612
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa2f639f139e8ee96
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xa54ee6e4
movabs rdx, 0x207000a0700070a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1040b0608090b0b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4845ae
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4845db
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x484605
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x484591
jmp 0x4845f6
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00484540

Function at 0x484ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484c7c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x319aff37f4a59a96
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3532a2019ef9319a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa06090003030800
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb02060601030305
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x484c15
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x484c48
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x484c6f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x484bf8
jmp 0x484c63
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f500
mov eax, edi
mov ecx, 0xe
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00484ba0
Function at 0x484ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484fc8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x378df4f3a395a4f8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf33236f63130fb51
mov qword [rsp + 0x24], rdx
movabs rdx, 0x409040c05090301
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50f00050409040c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5050c0605020208
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x484f61
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x14
jge 0x484f93
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x484fbb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x72]
cmp rsi, 0x10
jb 0x484f47
jmp 0x484faf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f500
mov eax, edi
mov ecx, 0x10
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00484ee0

Function at 0x485380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48547c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x3434247862767e35
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc93434247862767e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5dbbee82397b3537
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0b05010d0f080d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4020e0b05010d0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1003010d0b010b01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x485410
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x485448
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48546f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x4853f6
jmp 0x485463
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f500
mov eax, edi
mov ecx, 0x11
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00485380
Function at 0x4854a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485596
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x8a32529730605c82
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5fa28a3252973060
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa17e596574519537
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20e07090f0c0005
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40d01050d11020e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0d09100d0b0809
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x485533
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x485562
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x485589
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x485516
nop
jmp 0x48557d
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f500
mov eax, edi
mov ecx, 0x12
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004854a0

Function at 0x4861c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4862c6
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x556d63315e9d3131
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x515a4439393d8283
mov qword [rsp + 0x26], rdx
movabs rdx, 0x356e313935345a61
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0a060f02161411
mov qword [rsp + 0x36], rdx
movabs rdx, 0x91606050f0d1408
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x910091606050f0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe020d0614030716
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x486260
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
mov byte [rsp + rdi + 0x1e], r9b
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x48628d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4862b4
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x486245
jmp 0x4862a8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f500
mov eax, edi
mov ecx, 0x18
nop dword [rax + rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004861c0
Function at 0x4882c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4883f2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x24360f3333d232fa
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x311807fe3314d707
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd12910eecd1e3118
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3509d41cf6370c1b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x130e0c090a111115
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1212051a121b0802
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1c190d101212051a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x151b00170008071a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x419140f0c1b1000
mov qword [rsp + 0x58], rdx
movabs rdx, 0x9120e081c1b0e16
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x48838f
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2c
jge 0x4883bc
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4883e5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x488372
jmp 0x4883d7
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.0044a140
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x1e
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0x1e
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004882c0

Function at 0x488fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489112
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xdd84d337c48e3533
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9f56dd84d337c48e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x323930de09e959dd
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30e12edaddc033e6
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc132ddea3938deda
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1a06170e191e081e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x71f12021a06170e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b0a18150e0c0e09
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb142103161a1219
mov qword [rsp + 0x50], rdx
movabs rdx, 0x9051e14141e0d14
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4890ac
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x24
jge 0x4890de
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x489105
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
cmp rsi, 0x22
jb 0x489092
jmp 0x4890f9
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x22
call fcn.0044a140
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x22
call fcn.0045f500
mov eax, edi
mov ecx, 0x22
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00488fe0
Function at 0x489660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489792
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xfe0ca2ec170eff32
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x30b1191434fe0ca2
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc338033830041aa7
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5360c333338ec0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x35033630e117f938
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd231e1517170520
mov qword [rsp + 0x40], rdx
movabs rdx, 0x41a1e0b03142002
mov qword [rsp + 0x48], rdx
movabs rdx, 0x161a23070102091f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7151e01051c0a0e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6020f01121a0312
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x48972c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x28
jge 0x48975e
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x489785
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 0x25
jb 0x489712
jmp 0x489779
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.0044a140
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x25
call fcn.0045f500
mov eax, edi
mov ecx, 0x25
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00489660

Function at 0x4897a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4898f2
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x4535a481319f35e8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e358c3126854535
mov qword [rsp + 0x24], rdx
movabs rdx, 0xdd8518f930374638
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3534b677a1eeaaba
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe2b7878474fb05b7
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x13040024091b0720
mov qword [rsp + 0x44], rdx
movabs rdx, 0x2314141e13040024
mov qword [rsp + 0x48], rdx
movabs rdx, 0x250b1622001b051e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8201302171f241a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x823040f120f0218
mov qword [rsp + 0x60], rdx
movabs rdx, 0x17051922150b191b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x70b0208210d0212
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x48988a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x34
jge 0x4898bc
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x4898e5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 0x26
jb 0x489870
jmp 0x4898d7
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x26
call fcn.0044a140
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x26
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0x26
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004897a0
Function at 0x489f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x48a096
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x373897ac6350d28a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd46e95df3837c1ab
mov qword [rsp + 0x26], rdx
movabs rdx, 0x33713981d58476bf
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x37968b9851719d39
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb5ac9dae9a384870
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x90f1b010d082624
mov qword [rsp + 0x46], rdx
movabs rdx, 0x2011319081c221a
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x1e1002011319081c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f27140c25231a00
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1c141227120112
mov qword [rsp + 0x60], rdx
movabs rdx, 0x111d1f02201405
mov qword [rsp + 0x68], rdx
movabs rdx, 0x20140e1903271c21
mov qword [rsp + 0x70], rdx
movabs rdx, 0x91e210f161b0416
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x48a027
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x3a
jge 0x48a05c
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x28
jae 0x48a089
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0x28
jb 0x48a00d
jmp 0x48a07d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x28
call fcn.0044a140
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x28
call fcn.0045f500
mov eax, edi
mov ecx, 0x28
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.00489f20
Function at 0x490f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4910e7
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x29383210066d753c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3a3e395d28051e3d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2e53704c3a3e395d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf87186abae202b65
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6b74756f3ad38383
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x8730798d72236614
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1323000b07261e1b
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x29170703080e0c24
mov qword [rsp + 0x52], rdx
movabs rdx, 0xa19150d1e1b2917
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2a1a00042a10120d
mov qword [rsp + 0x60], rdx
movabs rdx, 0xa1518121f231b09
mov qword [rsp + 0x68], rdx
movabs rdx, 0x71a1d2b0e1a1228
mov qword [rsp + 0x70], rdx
movabs rdx, 0x41e0e261c280c07
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2081c002915070d
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x491080
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x3e
jge 0x4910ad
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x4910da
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x2c
jb 0x49105f
jmp 0x4910ce
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x2c
call fcn.0044a140
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x2c
call fcn.0045f500
mov eax, edi
mov ecx, 0x2c
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00490f60
Function at 0x493440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4935c6
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x58657c3e2005916b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf5d167de73d50227
mov qword [rsp + 0x22], rdx
movabs rdx, 0x42074de9f8b69bc
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc8d866ded2739523
mov qword [rsp + 0x32], rdx
movabs rdx, 0x340ccaf89d2220e6
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd489774050cc6958
mov qword [rsp + 0x42], rdx
movabs rdx, 0x729091819022223
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2622171728062407
mov qword [rsp + 0x52], rdx
movabs rdx, 0x290c2a1f26132622
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2810082f122e0102
mov qword [rsp + 0x60], rdx
movabs rdx, 0x120a0f0f202a0002
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe1c131425042c2a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2c201b091e2a1e10
mov qword [rsp + 0x78], rdx
movabs rdx, 0x602252a2f050a22
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x493559
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x3e
jge 0x49358b
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x4935b8
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0x30
jb 0x49353f
jmp 0x4935ac
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x30
call fcn.0044a140
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x30
call fcn.0045f500
mov eax, edi
mov ecx, 0x30
nop
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00493440
Function at 0x4938a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x493a27
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x3a766e7611c274ff
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6cdfcf29e027b166
mov qword [rsp + 0x22], rdx
movabs rdx, 0x46b18f0bfa701620
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1d764935f5616f14
mov qword [rsp + 0x32], rdx
movabs rdx, 0xcc79e8904674674e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1882cc5874c26201
mov qword [rsp + 0x42], rdx
movabs rdx, 0x82c1528242d2511
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2c0d04270021162f
mov qword [rsp + 0x52], rdx
movabs rdx, 0x1e021409261f2c0d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2f2a182c1c1f1c2e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x41b140302270e28
mov qword [rsp + 0x68], rdx
movabs rdx, 0x28132f0a1d27280b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x13240d1e000e0008
mov qword [rsp + 0x78], rdx
movabs rdx, 0x41f2d042015020c
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4939c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x3e
jge 0x4939ed
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x493a1a
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x30
jb 0x49399f
jmp 0x493a0e
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x30
call fcn.0044a140
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x30
call fcn.0045f500
mov eax, edi
mov ecx, 0x30
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004938a0

Function at 0x494120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4941e8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe269cdeb73f061d2
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x74
movabs rdx, 0x202010304070500
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x103
xor eax, eax
jmp 0x494183
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x4941b0
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4941db
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x494166
jmp 0x4941cf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f500
mov eax, edi
mov ecx, 9
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00494120
Function at 0x4946e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4947a8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6f6971525b5d6450
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x74
movabs rdx, 0x104070205030304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x407
xor eax, eax
jmp 0x494740
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 6]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x494772
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x49479b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 6]
cmp rsi, 9
jb 0x494726
jmp 0x49478f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f500
mov eax, edi
mov ecx, 9
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004946e0
Function at 0x4a1700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a1832
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x72a2ea6f9bd99a2d
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf5c320b4accef961
mov qword [rsp + 0x20], rdx
movabs rdx, 0x65688f22d27af5c3
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf86573a7d24f8e45
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x16120b190f050f09
mov qword [rsp + 0x36], rdx
movabs rdx, 0x20c120203001106
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x161d020c12020300
mov qword [rsp + 0x40], rdx
movabs rdx, 0x160b170a0e1a0a03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9131200031a0901
mov qword [rsp + 0x50], rdx
movabs rdx, 0x140615061d0f050b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a17cc
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4a17fe
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4a1825
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5c]
cmp rsi, 0x1e
jb 0x4a17b2
jmp 0x4a1819
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.0044a140
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f500
mov eax, edi
mov ecx, 0x1e
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004a1700