joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49f1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f2fd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7489ca6c0f7624c1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x20742c65b583657c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656420742c65b583
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1e6747036087912
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x807140008131908
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb05000008071400
mov qword [rsp + 0x38], rdx
movabs rdx, 0x51319060012030a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1206081203191401
mov qword [rsp + 0x48], rdx
movabs rdx, 0x150d030518070b19
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x49f2a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x49f2cd
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x49f2f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x49f27d
jmp 0x49f2e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004518a0
mov eax, edi
mov ecx, 0x1a
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.0049f1e0

Function at 0x49fd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49fe2a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x696e9c8b6e7c7b63
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x969c696e9c8b6e7c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd665737b8d658a85
mov qword [rsp + 0x24], rdx
movabs rdx, 0x110b02010605080e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9040d09110b0201
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0a040d060e0b06
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x49fdcd
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x49fdfa
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x49fe1d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x49fdb0
jmp 0x49fe11
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004518a0
mov eax, edi
mov ecx, 0x12
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.0049fd40
Function at 0x4a30c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a31bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2d735a768279367a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e8e921d2d735a76
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4f6578826e879066
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30a0d0d11000e10
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1010090501030e09
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa090704071010
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40c13080e0f0807
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a3159
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a318b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4a31ae
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0x14
jb 0x4a313f
jmp 0x4a31a2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004518a0
mov eax, edi
mov ecx, 0x14
call fcn.004518a0
nop
nop dword [rax + rax]
call fcn.0044f620
jmp fcn.004a30c0

Function at 0x4a31e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a32ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb532b66c65fba9ac
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2c007041068b532
mov qword [rsp + 0x30], rdx
movabs rdx, 0x707000d0d010902
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0c0a0d0c050707
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4a324f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x71]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4a327c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4a329f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4a3232
jmp 0x4a3293
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004518a0
mov eax, edi
mov ecx, 0xe
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004a31e0
Function at 0x4a4b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4c3d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x965f876be5d8763
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe2cccff5086f6910
mov qword [rsp + 0x21], rdx
movabs rdx, 0xba13c501ee4761e2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6465747075a47218
mov qword [rsp + 0x30], rdx
movabs rdx, 0x12140a0012040002
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc08130b01070d0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x21202010f16110e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30e1619040e0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x15190507170e0402
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a4be0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4a4c0d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4a4c30
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4a4bbd
jmp 0x4a4c24
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.004518a0
mov eax, edi
mov ecx, 0x1f
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004a4b20

Function at 0x4a4c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4d5b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xfd246e3bd4f9696c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x54dbdde3e0aadee1
mov qword [rsp + 0x22], rdx
movabs rdx, 0xdb996eca72205378
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6060809040f1611
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6071716100f020e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6040c0d0e0b0607
mov qword [rsp + 0x40], rdx
movabs rdx, 0x303140a11140307
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a4cf9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a4d2b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a4d4e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
cmp rsi, 0x18
jb 0x4a4cdf
jmp 0x4a4d42
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004518a0
mov eax, edi
mov ecx, 0x18
call fcn.004518a0
nop
nop dword [rax + rax]
call fcn.0044f620
jmp fcn.004a4c60
Function at 0x4a5000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a50ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x796e616d8b923c76
mov qword [rsp + 0x19], rdx
movabs rdx, 0x706f80796e616d8b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6b656d0f6e933b7b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0808020c0d0103
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20f0f100c080802
mov qword [rsp + 0x30], rdx
movabs rdx, 0x12020b0e08100b00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a508a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4a50bc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a50df
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1e]
cmp rsi, 0x13
jb 0x4a5070
jmp 0x4a50d3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004518a0
mov eax, edi
mov ecx, 0x13
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004a5000

Function at 0x4a5b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5ca7
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xc70272572d743a06
mov qword [rsp + 0x19], rdx
movabs rdx, 0xffe450c70272572d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4200634f64c85431
mov qword [rsp + 0x24], rdx
movabs rdx, 0x546e4169264b653f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x747c735b0b4e6e2f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1e0d181b18060709
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x90116081e0d181b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1d0a0d0b121e0f11
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1312030c1a000815
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc1f010118210413
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a5c49
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x24
jge 0x4a5c77
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x23
jae 0x4a5c9a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x23
jb 0x4a5c2c
jmp 0x4a5c8e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x23
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.004518a0
mov eax, edi
mov ecx, 0x23
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004a5b80
Function at 0x4a75a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a767d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe70eed4b18ec6f6e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6420f94f3d2043e7
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30c0d0a05020706
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70b0c06030c0d0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0c0c050408030c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4a7620
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4a764d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4a7670
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x4a7602
jmp 0x4a7664
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004518a0
mov eax, edi
mov ecx, 0xf
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004a75a0

Function at 0x4a7a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7b48
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x616b8f8cb1169d6e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x656187666fedb951
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe973656187666fed
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65707934beba65d0
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5021202110d040e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80d04120d111609
mov qword [rsp + 0x40], rdx
movabs rdx, 0x812040a01090908
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20a080415060314
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a7aeb
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x4a7b18
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a7b3b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4a7ace
jmp 0x4a7b2f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004518a0
mov eax, edi
mov ecx, 0x1a
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004a7a40
Function at 0x4a9180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a927d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xcc6ee4e7fd367493
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc2650d2274cc6ee4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65f91bcd9c653be9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x900020a0c0c0412
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70d0312030a1003
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa0e0e130d0c070d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1007071205091211
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a9220
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4a924d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a9270
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4a91ff
jmp 0x4a9264
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004518a0
mov eax, edi
mov ecx, 0x15
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004a9180
Function at 0x4a9f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa05a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x26dfeca165b9566e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc06574baad1dcc20
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb78ec06574baad1d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6b7296acec65ea56
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0901070c150701
mov qword [rsp + 0x36], rdx
movabs rdx, 0x130a0d0901070c15
mov qword [rsp + 0x38], rdx
movabs rdx, 0x516120f100a0c13
mov qword [rsp + 0x40], rdx
movabs rdx, 0x212170112060902
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa040b0c06121611
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a9ff7
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x61]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x22
jge 0x4aa029
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4aa04d
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x61]
cmp rsi, 0x1a
jb 0x4a9fdd
jmp 0x4aa041
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004518a0
mov eax, edi
mov ecx, 0x1a
call fcn.004518a0
nop
call fcn.0044f620
nop
jmp fcn.004a9f40

Function at 0x4aa080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa188
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x20c48411d4c7c4b7
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe0e265c9c4765dcf
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd0e0e265c9c4765d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8f81657239c43220
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x317000b00060410
mov qword [rsp + 0x34], rdx
movabs rdx, 0x91402030b011013
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe18010809140203
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140f0c0902051202
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4aa12b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4aa158
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4aa17b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4aa10e
jmp 0x4aa16f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004518a0
mov eax, edi
mov ecx, 0x19
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004aa080
Function at 0x4aaa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aaabd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x484d20724b504c40
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x3859
movabs rdx, 0x607080203000309
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x301
xor eax, eax
jmp 0x4aaa60
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4aaa8d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4aaab0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4aaa42
jmp 0x4aaaa4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004518a0
mov eax, edi
mov ecx, 0xa
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004aaa00

Function at 0x4aaae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aabca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5854746172eb017d
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe2206f6f6e206e58
mov qword [rsp + 0x20], rdx
movabs rdx, 0xee66fdeb746d7265
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1206060c0713160c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc13131215000e0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x615000201141316
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4aab6d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x4aab9a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4aabbd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4aab50
jmp 0x4aabb1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004518a0
mov eax, edi
mov ecx, 0x17
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004aaae0
Function at 0x4ab660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab76c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xafc72723620b7270
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa201502b0721305
mov qword [rsp + 0x42], rdx
movabs rdx, 0x6f6620b270a30a20
mov qword [rsp + 0x48], rdx
movabs rdx, 0x74c202946f7306bb
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1216060309051004
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x121c1b041a041c08
mov qword [rsp + 0x24], rdx
movabs rdx, 0x160c0b0d0b07121c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30f070212170603
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4ab708
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4ab73c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x4ab75f
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 0x1e
jb 0x4ab6ee
jmp 0x4ab753
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.004518a0
mov eax, edi
mov ecx, 0x1e
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004ab660

Function at 0x4ab780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab86c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x43f4a19af681fb7d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x73736572f46443f4
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf4f9dc8aa068e00f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x912150607150212
mov qword [rsp + 0x30], rdx
movabs rdx, 0x400050414110e11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10204140f130305
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ab80a
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ab83c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ab85f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0x16
jb 0x4ab7f0
jmp 0x4ab853
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004518a0
mov eax, edi
mov ecx, 0x16
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004ab780
Function at 0x4ab880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab966
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8c8d99ea978bab87
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd9866fa2897220ae
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40b0108050f01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5030300040e0004
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe060b0f0c0b0702
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ab900
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4ab932
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4ab957
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x10
jb 0x4ab8e2
jmp 0x4ab94b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004518a0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004ab880

Function at 0x4ad060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad168
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7b84b4631d7f6273
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7682566f71932065
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9073696ea0916c94
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5020b010f030f16
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0d05020b010f03
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0d03060e030c0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x713070506061207
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa17030310071702
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ad10b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x4ad138
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4ad15b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4ad0ee
jmp 0x4ad14f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004518a0
mov eax, edi
mov ecx, 0x18
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004ad060