joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4784e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4785bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x39322900412c61b1
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x75dd413932290041
mov qword [rsp + 0x22], rdx
movabs rdx, 0x603070709040200
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x804050908020603
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x478552
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x478588
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4785af
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
nop dword [rax]
cmp rsi, 0xb
jb 0x478538
jmp 0x4785a3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.004533e0
mov eax, edi
mov ecx, 0xb
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.004784e0

Function at 0x479560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47962b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xaf5f69b88e6ca4d7
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xa7baa940
movabs rdx, 0xb09070308010a04
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x1000001
xor eax, eax
jmp 0x4795c7
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4795f7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x47961e
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4795aa
jmp 0x479612
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.004533e0
mov eax, edi
mov ecx, 0xc
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.00479560
Function at 0x47a420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a4eb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf00863ad6f700bbb
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xc65
movabs rdx, 0x4030409010400
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6060700
xor eax, eax
jmp 0x47a486
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x47a4b7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x47a4de
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x47a469
jmp 0x47a4d2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.004533e0
mov eax, edi
mov ecx, 0xa
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.0047a420

Function at 0x47b280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b35c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf761eda2fef16449
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb1bbfbf761eda2fe
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9050505030a0402
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40a0a08070a0905
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47b2f5
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x37]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x37]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x47b328
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x47b34f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x47b2d8
jmp 0x47b343
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.004533e0
mov eax, edi
mov ecx, 0xb
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.0047b280
Function at 0x47cc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ccd2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x9da9158cb7eeaeb3
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x96ee
movabs rdx, 0x8010208060605
mov qword [rsp + 0x22], rdx
movabs rdx, 0x604090703010008
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x47cc6a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x47cc9c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x47ccc5
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4d]
cmp rsi, 0xa
jb 0x47cc50
jmp 0x47ccb7
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.004533e0
mov eax, edi
mov ecx, 0xa
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.0047cc00

Function at 0x47d220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d316
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xcaa672655674b350
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5b866caa6726556
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7f06c8705f0db374
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3120e0d06011103
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80d110e0d110a0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10070d03090c0d03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47d2b3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x47d2e2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x47d309
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x47d296
nop
jmp 0x47d2fd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.004533e0
mov eax, edi
mov ecx, 0x13
call fcn.004533e0
nop
call fcn.00450d80
nop dword [rax + rax]
jmp fcn.0047d220
Function at 0x47dea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47df72
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6d939d5f9a9cc195
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa7d8746d939d5f9a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x602050700010a01
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xa030a09
xor eax, eax
jmp 0x47df0e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x47df3b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x47df65
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x47def1
jmp 0x47df56
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.004533e0
mov eax, edi
mov ecx, 0xb
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.0047dea0

Function at 0x47df80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e07c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1e494b3f2e1d6549
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6e3b50441e494b3f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x363169136165ff42
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0d0d12060e0e0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70702030c101200
mov qword [rsp + 0x38], rdx
movabs rdx, 0x71302050803040c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47e010
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x47e048
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x47e06f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x47dff6
jmp 0x47e063
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.004533e0
mov eax, edi
mov ecx, 0x14
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.0047df80
Function at 0x484a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484b0b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x17c8656c79231b8f
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xdc10
movabs rdx, 0x206000803070303
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1020908
xor eax, eax
jmp 0x484aa6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x5f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x5f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x484ad7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x484afe
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x484a89
jmp 0x484af2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.004533e0
mov eax, edi
mov ecx, 0xa
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.00484a40
Function at 0x48b5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b732
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x895c1e6f4c34656d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7161154983895c1e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5891726c8a287d4c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4f777948156f4206
mov qword [rsp + 0x34], rdx
movabs rdx, 0x7829499a7c207419
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf230d19170f061d
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1b201a230f230d19
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa181417120e1907
mov qword [rsp + 0x50], rdx
movabs rdx, 0x60708240d191415
mov qword [rsp + 0x58], rdx
movabs rdx, 0x50e0c080c021021
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1c171b1322130315
mov qword [rsp + 0x68], rdx
movabs rdx, 0x5101d1d0d120f06
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x48b6cd
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x34
jge 0x48b6fa
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x48b725
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x25
jb 0x48b6b0
jmp 0x48b715
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x25
call fcn.00441880
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x25
nop dword [rax]
call fcn.004533e0
mov eax, edi
mov ecx, 0x25
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.0048b5e0

Function at 0x48d8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48d9d2
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x6118563a4d203b6f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x563f73632c2b530f
mov qword [rsp + 0x21], rdx
movabs rdx, 0x726c802036563f73
mov qword [rsp + 0x26], rdx
movabs rdx, 0x71112fff521cff48
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x16060e10080b1b1a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1018180a0b0e1516
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x17191018180a0b0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3041c00170c190f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120f190818030309
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1050213060a171a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x48d96f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x2a
jge 0x48d99c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x48d9c5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1d
jb 0x48d952
jmp 0x48d9b7
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.00441880
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
nop
call fcn.004533e0
mov eax, edi
mov ecx, 0x1d
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.0048d8a0
Function at 0x48f600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f6fc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xbea7057520666f20
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3740af570bea705
mov qword [rsp + 0x22], rdx
movabs rdx, 0x646f98740b7c4529
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60712100e07050d
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa100a070f060607
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6101005090c0905
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x48f690
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x48f6c8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x48f6ef
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x57]
nop word [rax + rax]
cmp rsi, 0x15
jb 0x48f676
jmp 0x48f6e3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.004533e0
mov eax, edi
mov ecx, 0x15
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.0048f600

Function at 0x4903a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x490526
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x1733c46509664720
mov qword [rsp + 0x18], rdx
movabs rdx, 0x79614c6b05c86645
mov qword [rsp + 0x20], rdx
movabs rdx, 0x374e16e879614c6b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x17b68cbb929910ea
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xeb2082cb61feabc0
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa2721d4dee651c14
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x12290b2828000a19
mov qword [rsp + 0x44], rdx
movabs rdx, 0x800191410010121
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1524290508001914
mov qword [rsp + 0x50], rdx
movabs rdx, 0x321051e0b06002b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x25030a141618200a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1d170b290b1a000c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x27131b110a16171a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x71d082300071c18
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4904b9
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x3c
jge 0x4904e8
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x490515
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
nop
cmp rsi, 0x2c
jb 0x49049c
jmp 0x490509
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2c
call fcn.00441880
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2c
call fcn.004533e0
mov eax, edi
mov ecx, 0x2c
nop dword [rax]
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004903a0
Function at 0x4920e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4921bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x8b3ef961acfd0000
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x53acfd8b3ef961ac
mov qword [rsp + 0x20], rdx
movabs rdx, 0x709000a05060307
mov qword [rsp + 0x28], rdx
movabs rdx, 0x708010207050003
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x492155
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x73]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x73]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x492188
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4921af
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x492138
jmp 0x4921a3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.004533e0
mov eax, edi
mov ecx, 0xb
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.004920e0

Function at 0x492460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49254b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd15973899c693377
mov qword [rsp + 0x19], rdx
movabs rdx, 0x49aef95974d15973
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa050c09010a0a04
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4050a050c09010a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40005030b060703
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4924e4
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x20]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x492517
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x49253e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4924c7
jmp 0x492532
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.004533e0
mov eax, edi
mov ecx, 0xd
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.00492460
Function at 0x497da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x497f26
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x611d0b741009374d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbd637e21576c3556
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf956bd637e21576c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3447cff3ad45ca65
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xfa5eccf522de3b5a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2fe75325dc9d0f00
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x2720101a0b0f1d20
mov qword [rsp + 0x44], rdx
movabs rdx, 0x251707061d23051b
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x260c0d2825170706
mov qword [rsp + 0x50], rdx
movabs rdx, 0x240b28241b092816
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2121290b1114011d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f1f25150128131c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x224280316251819
mov qword [rsp + 0x70], rdx
movabs rdx, 0x231f291c13011e22
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x497eb6
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x3c
jge 0x497ee8
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x497f15
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0x2a
jb 0x497e9c
jmp 0x497f09
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x2a
call fcn.00441880
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2a
call fcn.004533e0
mov eax, edi
mov ecx, 0x2a
nop dword [rax]
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.00497da0

Function at 0x498bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498cd6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x2e74e5306c2f6572
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x343f343dff6ce535
mov qword [rsp + 0x26], rdx
movabs rdx, 0x174d343f343dff6c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x629d80c72022cf4
mov qword [rsp + 0x30], rdx
movabs rdx, 0x170b181111131016
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8080c0905140d12
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5100c0c0f021719
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb0e1317040c1417
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x498c6e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x498ca2
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x498cc9
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0x1a
jb 0x498c54
nop
jmp 0x498cbd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00441880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004533e0
mov eax, edi
mov ecx, 0x1a
call fcn.004533e0
nop
call fcn.00450d80
nop dword [rax + rax]
jmp fcn.00498bc0
Function at 0x4995c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499706
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x5174fb6c03c154f6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb9875174fb6c03c1
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7a6903a4faca72fc
mov qword [rsp + 0x28], rdx
movabs rdx, 0x11f775f811e765a6
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4267c2b07220c0f0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70812140d001801
mov qword [rsp + 0x40], rdx
movabs rdx, 0x41f070c05041a04
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e16050919031b0f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2081919041a0a0e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x216050a04151104
mov qword [rsp + 0x60], rdx
movabs rdx, 0x21091f0f14181819
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4996a0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x30
jge 0x4996cd
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x4996f4
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x22
jb 0x499682
jmp 0x4996e8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x22
call fcn.00441880
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x22
call fcn.004533e0
mov eax, edi
mov ecx, 0x22
nop dword [rax + rax]
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004995c0