joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4abce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x4abe75
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
movabs rdx, 0x2e32634a362d6541
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x65666c2f522e3263
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6d3a16dd28611e2e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6720fa5fe5727417
mov qword [rsp + 0x30], rdx
movabs rdx, 0x526e34202861542b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6f19195e50397827
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6793f1f6f625552
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1215250e1c24111a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2e312e1d28100920
mov qword [rsp + 0x58], rdx
movabs rdx, 0x142a1132201f2b03
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2e021806222d0428
mov qword [rsp + 0x68], rdx
movabs rdx, 0x25062e28342b0627
mov qword [rsp + 0x70], rdx
movabs rdx, 0x151820060b292902
mov qword [rsp + 0x78], rdx
movabs rdx, 0x8031a2e09001e04
mov qword [rsp + 0x80], rdx
movabs rdx, 0x1a242218331d190f
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x4abe0e
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x40
jge 0x4abe3b
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x35
jae 0x4abe68
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x35
jb 0x4abdf1
jmp 0x4abe5c
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x35
call fcn.0044a200
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov eax, esi
mov ecx, 0x35
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x35
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004abce0

Function at 0x4ae9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aeb06
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xf1c70474f670619a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xdd97beeb2063fc4b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x667aec20f4f7dd97
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x498c654ef9ef70e7
mov qword [rsp + 0x34], rdx
movabs rdx, 0x50f1d0a0c130619
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf19141c050f1d0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x171409141d18030a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf19000e17100900
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11141c09070d1600
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4aeaa0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x24
jge 0x4aeacd
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4aeaf4
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4aea83
jmp 0x4aeae8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004ae9e0
Function at 0x4aff40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0036
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xe7746365b36e6572
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe9e7746365b36e65
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x74747b753975ee08
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0d0f0e10090802
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0c03070c0d0f0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0d08090f0e030f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4affd3
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4b0002
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b0029
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4affb6
nop
jmp 0x4b001d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004aff40
Function at 0x4b4480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b45d2
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xb820676ede73cc20
mov qword [rsp + 0x44], rdx
movabs rdx, 0xdb62074cfc756061
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x2c6e6961db62074c
mov qword [rsp + 0x50], rdx
movabs rdx, 0xdd09d9457375ce72
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7a726f70f8f9bcb3
mov qword [rsp + 0x60], rdx
movabs rdx, 0xba6c65516638474f
mov qword [rsp + 0x68], rdx
movabs rdx, 0xb1c240d28131418
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1a1f240c180e2525
mov qword [rsp + 0x20], rdx
movabs rdx, 0x130f1e1e1a1f240c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x319240126251523
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2b1d0d180e091b0b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2514090e28071b2b
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x4b456a
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4b459c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x4b45c5
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0x2c
jb 0x4b4550
jmp 0x4b45b7
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x2c
call fcn.0044a200
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x2c
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x2c
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004b4480
Function at 0x4b78c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b79b6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x381f3b0b30d33c3e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3c381f3b0b30d33c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64f4456e65642038
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe040703030207
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9010f01000e0407
mov qword [rsp + 0x30], rdx
movabs rdx, 0x907050406070808
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b7953
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4b7982
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b79a9
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4b7936
nop
jmp 0x4b799d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004b78c0

Function at 0x4ba360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba428
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x70e1721d6528e14e
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xe3
movabs rdx, 0x106080200060801
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x40100
xor eax, eax
jmp 0x4ba3c1
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x4ba3f3
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4ba41b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 9
jb 0x4ba3a7
jmp 0x4ba40f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004ba360
Function at 0x4baf20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb028
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa5fc64c2b765b275
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1aca316ea3a5fc64
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3120075ad6536973
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0812060606070f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x311080604120808
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x303010703110806
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb030c010c0c0110
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bafc2
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1c
jge 0x4bafef
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4bb01b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4bafa5
jmp 0x4bb00f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004baf20
Function at 0x4beda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bee72
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2f64692d19bd0cd1
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xdd426c73
movabs rdx, 0x20a020003010202
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4070402070b020a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bee0e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4bee3b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4bee65
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4bedf1
jmp 0x4bee56
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004beda0

Function at 0x4c09c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0af2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x928362728b846577
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x808c7d67586b202f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6a5b906a5d207e73
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x41696f7f69522073
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1316131a131f1403
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe1d0d110b030805
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1b100e1d0d110b03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1402061b1718050a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7071d1007010a16
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20b1501101c0f00
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4c0a8f
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2a
jge 0x4c0abc
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4c0ae5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x20
jb 0x4c0a72
jmp 0x4c0ad7
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.0044a200
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x20
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004c09c0
Function at 0x4c6200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6308
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x11a28c6d93a8c3ce
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9c6f2011a28c6d93
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x73bd6c8cbe7ae265
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf0a01110c070f01
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x311000d0f050502
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10c0e070311000d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6070d000e0a0e01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c62a2
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1c
jge 0x4c62cf
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c62fb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4c6285
jmp 0x4c62ef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004c6200
Function at 0x4c8cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8d9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1ec4648025746f6e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x646e75bfd7c26d1e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x207060302030903
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0904020b0a0607
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c8d35
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4c8d68
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c8d8f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xf
jb 0x4c8d18
jmp 0x4c8d83
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004c8cc0
Function at 0x4cce80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ccf92
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x74d96e54dce0096e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2065317145f37520
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd36f2065317145f3
mov qword [rsp + 0x22], rdx
movabs rdx, 0x91896fd13b48d245
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x180216060b191819
mov qword [rsp + 0x32], rdx
movabs rdx, 0x11030d190d040415
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x20b150a19011103
mov qword [rsp + 0x40], rdx
movabs rdx, 0x104121914131412
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ccf31
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1e
jge 0x4ccf5e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4ccf85
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4ccf14
jmp 0x4ccf79
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004cce80

Function at 0x4cd0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd1e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xec023f3ff3bb70af
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4d4e3f6ff7201fec
mov qword [rsp + 0x20], rdx
movabs rdx, 0x642374bc530f704b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60a020003071304
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe120c0515070e11
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa12080a04030206
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf070d000d060d03
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4cd182
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x4cd1af
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4cd1db
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4cd165
jmp 0x4cd1cf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004cd0e0
Function at 0x4cd200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd352
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x942d20faefcac476
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xce403e84b2942d20
mov qword [rsp + 0x22], rdx
movabs rdx, 0x642072f864fa6567
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x64200f6592ed8065
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb2e479e6203074c1
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x40610060a241116
mov qword [rsp + 0x42], rdx
movabs rdx, 0x9180c02071f0406
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170809030f170311
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb1d011811060416
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6241a0b231d0f1f
mov qword [rsp + 0x60], rdx
movabs rdx, 0xa1708180323241f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x10c240618210216
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4cd2ea
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x36
jge 0x4cd31c
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4cd345
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0x25
jb 0x4cd2d0
jmp 0x4cd337
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x25
call fcn.0044a200
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x25
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x25
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004cd200

Function at 0x4cd360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd432
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xd5e2cacf161016d6
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x2219
movabs rdx, 0x900000504090706
mov qword [rsp + 0x22], rdx
movabs rdx, 0x701080206030900
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4cd3ca
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4cd3fc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4cd425
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 0xa
jb 0x4cd3b0
jmp 0x4cd417
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004cd360
Function at 0x4cd440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd53c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb86974720665708b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7007036fe0f86eb8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x64e774a4f2e1728c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x13090c00070d0f03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x120012000403150f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa111503120c0c00
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cd4d0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x4cd508
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4cd52f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
nop word [rax + rax]
cmp rsi, 0x17
jb 0x4cd4b6
jmp 0x4cd523
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004cd440

Function at 0x4cd8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd992
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2920d965a1e57262
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2227692920d965a1
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7050a0a07020203
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9090307
xor eax, eax
jmp 0x4cd92b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4cd95d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4cd985
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0xb
jb 0x4cd911
jmp 0x4cd978
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004cd8c0
Function at 0x4cdee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdff2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x554b69fa650a756e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x746c5445650b2051
mov qword [rsp + 0x25], rdx
movabs rdx, 0x4174cf3820746c54
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x22503d610dea3cb1
mov qword [rsp + 0x32], rdx
movabs rdx, 0x61a041412150a1a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd11141715111215
mov qword [rsp + 0x42], rdx
movabs rdx, 0x18081c1607120d11
mov qword [rsp + 0x48], rdx
movabs rdx, 0x161b02170c17081b
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4cdf91
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x4cdfbe
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4cdfe5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4cdf74
jmp 0x4cdfd9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1d
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004cdee0