joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49cae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49cbca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb1bb6ea76d9afb70
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9874b1bb6ea76d9a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x74ad758c66a06ebd
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1001040709070c07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60c0e010a071001
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc02000702000210
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x49cb6d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x49cb9a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x49cbbd
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x49cb50
jmp 0x49cbb1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0049cae0

Function at 0x49ce80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49cf52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4f36206d3421515e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5055504f36206d34
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1060108030802
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3090800070a0001
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49ceec
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 7]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x49cf1e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x49cf45
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 7]
cmp rsi, 0xb
jb 0x49ced2
jmp 0x49cf35
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0049ce80
Function at 0x49d300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d3ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6031705f54332eab
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2e5f6031705f5433
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa4670e336e9666b5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70a0a0d030f0f0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110c000c07101100
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0804001005040d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x49d38d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x49d3ba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x49d3dd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x49d370
jmp 0x49d3d1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0049d300

Function at 0x49d6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d7ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb134ba2eaa38b125
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4aada92e312eb134
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2cb230f92e302c37
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1507120702140f14
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd141307000b1507
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1405010b03030c07
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x49d76d
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x49d79a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x49d7bd
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x49d750
jmp 0x49d7b1
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0049d6e0
Function at 0x4a0920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a0a1d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8b20a62d90959f64
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x766f90657270508b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9b7b7cd5a2ae6372
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x15010409070e0116
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1513021605111613
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x30c0c0215130216
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8120e0511140303
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a09c0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4a09ed
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4a0a10
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x4a099f
jmp 0x4a0a04
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004a0920

Function at 0x4a2ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a2bac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6fa078b17a4faf68
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa27c746fa078b17a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xbc957f659063bc65
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90c091202041106
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10000a000901090c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5090a0a1103020e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a2b4a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4a2b7c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a2b9f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0x13
jb 0x4a2b30
jmp 0x4a2b93
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a2ac0
Function at 0x4a44c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a45aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf5480626fe1c5c69
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30fe6465f5480626
mov qword [rsp + 0x30], rdx
movabs rdx, 0x446c6958d7654d79
mov qword [rsp + 0x38], rdx
movabs rdx, 0x710040703020613
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb0f020a07100407
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10d0d03050f0a0b
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4a454d
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x14
jge 0x4a457a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4a459d
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4a4530
jmp 0x4a4591
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a44c0

Function at 0x4a60c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a61bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x13c16e2091aec4b0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2074b2ac2029f2bd
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6502b86172ca846f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x150903150a0a1112
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8020a0607010016
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc1508020a060701
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90d0001090d0d08
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a6159
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a618b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a61ae
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x67]
cmp rsi, 0x18
jb 0x4a613f
jmp 0x4a61a2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004a60c0
Function at 0x4a6720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a680a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x356d20816e277269
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xeb356d20816e2772
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30e27926202919a1
mov qword [rsp + 0x24], rdx
movabs rdx, 0x809080f00080f04
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa080b020809080f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa00000f0d071004
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a67ad
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4a67da
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a67fd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4a6790
jmp 0x4a67f1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a6720

Function at 0x4a71e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a72fa
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x58839388433d6f6b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6faa7e6682685994
mov qword [rsp + 0x23], rdx
movabs rdx, 0x447b5490946faa7e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8a768fb27e786162
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe06040a13031402
mov qword [rsp + 0x38], rdx
movabs rdx, 0x101a0d080b151c05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9061c171a001719
mov qword [rsp + 0x48], rdx
movabs rdx, 0x151b0e051b11181c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2080c120b141408
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a7297
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x28
jge 0x4a72c9
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4a72ed
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x1d
jb 0x4a727d
jmp 0x4a72e1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.004a71e0
Function at 0x4a7e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7f18
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa5866f7c619a4f94
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x202040601000007
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1070200
xor eax, eax
jmp 0x4a7eb6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x4a7ee8
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4a7f0b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1e]
cmp rsi, 8
jb 0x4a7e9c
jmp 0x4a7eff
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004a7e60

Function at 0x4a9a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9b2c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x7656e3e5267616d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x55f52a6f520a7369
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6558ed2f1155f52a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3114643c4c54dc52
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x190a0f1603120e10
mov qword [rsp + 0x36], rdx
movabs rdx, 0x110f02121b0a1004
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xf1b110f02121b0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c1c151c16191107
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1316180b1b1a0f0d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x15031504130f1017
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a9ac6
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4a9afc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1d
jae 0x4a9b1f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xf]
cmp rsi, 0x1d
jb 0x4a9aac
jmp 0x4a9b13
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a9a00
Function at 0x4a9e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9f0c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1c6f63d0cf6f1470
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe42b746f29d21c6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x651c87611a0dd6cd
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40e1007100e090f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x140e0d0c0c040913
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1110d090809030c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a9eaa
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a9edc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a9eff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
cmp rsi, 0x16
jb 0x4a9e90
jmp 0x4a9ef3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a9e20

Function at 0x4aa420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa50a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e3865488e766577
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3b66a66e3865488e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9d99658b74848b98
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf090b09120f0608
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6040f11080c0f09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8040a060d03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4aa4ad
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4aa4da
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4aa4fd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4aa490
jmp 0x4aa4f1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004aa420
Function at 0x4aa520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa61d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x111641432f074b80
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x70214720746fed3d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4c6532d765dc2d2c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd10020014100311
mov qword [rsp + 0x32], rdx
movabs rdx, 0x170e0d0607040412
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x17150d020902170e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70104050d0809
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4aa5c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x48]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x48]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4aa5ed
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4aa610
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x4aa59f
jmp 0x4aa604
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004aa520
Function at 0x4abec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4abfdd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xe46f4d20ac6dd4ca
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xaae4c371d4f87507
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e06aae4c371d4f8
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6b6ca0dabfb3fbbb
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1303140701071716
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe05031813031407
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80817030e0a0b0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10512150b151510
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170a0d0008100f0e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4abf80
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4abfad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4abfd0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4abf5d
jmp 0x4abfc4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004abec0

Function at 0x4ad9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4adae7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x791d746f9a1d7285
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd20671c6f97a807
mov qword [rsp + 0x26], rdx
movabs rdx, 0x38661665bd790d20
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9c92c5e6ef732782
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1113190c09171d0a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1c150716060516
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1a1b0019001c1507
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1600051507131a09
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d020308001a1109
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa11090f1c1c0807
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4ada89
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2c
jge 0x4adab7
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x4adada
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4ada6c
jmp 0x4adace
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451880
mov eax, edi
mov ecx, 0x1e
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ad9c0
Function at 0x4adde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4adeb2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x70757463655e7428
mov qword [rsp + 0x28], rdx
movabs rdx, 0x22745b6c6572654f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90f01080600070c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x10d0606010d0f02
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4ade4c
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ade7e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4adea5
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0x10
jb 0x4ade32
jmp 0x4ade95
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004adde0

Function at 0x4adec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4adfa6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc4b1006c766db59b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xcac1620065cf4fb9
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7000c0f04040a03
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3080e0407000c0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60d0605010f0e0e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4adf40
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4adf72
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4adf97
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5f]
cmp rsi, 0x10
jb 0x4adf22
jmp 0x4adf8b
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004adec0