joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49d140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d207
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8407ac6512000f04
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x869c08a1
movabs rdx, 0x800060a0b070509
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x609070301020b00
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x49d1a8
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x49d1d7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x49d1fa
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x49d18b
jmp 0x49d1ee
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049d140

Function at 0x49d220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d30c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x43424e75530fbced
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x4543424e75530fbc
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30361af0744c751e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf020d0f0b010503
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb100b00060e0f02
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf0f090802070009
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x49d2aa
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x16
jge 0x49d2dc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x49d2ff
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0x11
jb 0x49d290
jmp 0x49d2f3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049d220
Function at 0x49d400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d51d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x43d96441da0e6570
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc912710fa3747262
mov qword [rsp + 0x48], rdx
movabs rdx, 0x781674f35aab6514
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6572d3740d6fc927
mov qword [rsp + 0x58], rdx
movabs rdx, 0x314190b100d1b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30f000314190b10
mov qword [rsp + 0x20], rdx
movabs rdx, 0x13121d06101b1803
mov qword [rsp + 0x28], rdx
movabs rdx, 0x206120816130812
mov qword [rsp + 0x30], rdx
movabs rdx, 0x140f1d100e0c081d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x49d4c0
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x49d4ed
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x49d510
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x20
jb 0x49d49d
jmp 0x49d504
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.0044d280
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00462ca0
mov eax, edi
mov ecx, 0x20
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049d400

Function at 0x49daa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49dbbd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xbd7265c4c7cf65a3
mov qword [rsp + 0x40], rdx
movabs rdx, 0xaa69bc72ab43e32b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xacdbd8dc74ab83a5
mov qword [rsp + 0x50], rdx
movabs rdx, 0xff45a9e0c1c76e69
mov qword [rsp + 0x58], rdx
movabs rdx, 0x12021008041f1e04
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1100091c12141202
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd1b171c1d101615
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1216041d1a091e15
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1f07030713030b0f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x49db60
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x49db8d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x49dbb0
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x20
jb 0x49db3d
jmp 0x49dba4
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.0044d280
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00462ca0
mov eax, edi
mov ecx, 0x20
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049daa0
Function at 0x49dbe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49dcc6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x435c62614e3f6144
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6c5f6d7161627352
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0d0c090c030c0f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x103080f0a0d0c09
mov qword [rsp + 0x20], rdx
movabs rdx, 0x303020305030609
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x49dc60
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x49dc92
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x49dcb7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0x10
jb 0x49dc42
jmp 0x49dcab
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00462ca0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049dbe0

Function at 0x49dde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49de92
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x6f4946cb6348cfaa
mov qword [rsp + 0x20], rdx
movabs rdx, 0x205000001040502
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x49de31
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x49de5e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x49de85
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x49de14
jmp 0x49de75
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044d280
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049dde0

Function at 0x49e080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e146
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf346b9e29afc7243
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xa4e5abf3
movabs rdx, 0xa03040802080705
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x8050905
xor eax, eax
jmp 0x49e0e0
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x49e112
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x49e137
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0xb
jb 0x49e0c4
jmp 0x49e12b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049e080
Function at 0x49e260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e34a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f496559ef656325
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6ce50e766f436f49
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9a728301846f9074
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30a120c0a010a0d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd00040d13000f0f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x110f0b1313151113
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x49e2ed
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x18
jge 0x49e31a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x49e33d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x49e2d0
jmp 0x49e331
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049e260

Function at 0x49e360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e45b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf6467879edd572b8
mov qword [rsp + 0x35], rdx
movabs rdx, 0xece7e4f6467879ed
mov qword [rsp + 0x38], rdx
movabs rdx, 0x576b61de4c7a69f9
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7020502050f0f00
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5090a0d10050b04
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1006000305090a0d
mov qword [rsp + 0x25], rdx
movabs rdx, 0x80f10030b0a0003
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x49e3f9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1c
jge 0x49e42b
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x49e44e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x64]
cmp rsi, 0x13
jb 0x49e3df
jmp 0x49e442
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.0049e360
Function at 0x49e5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e666
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69469390c9fec79a
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x5765a869
movabs rdx, 0x305010001080203
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x8040205
xor eax, eax
jmp 0x49e600
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x49e632
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x49e657
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0xb
jb 0x49e5e4
jmp 0x49e64b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049e5a0

Function at 0x49e680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e79a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x72ad9bd1561765a2
mov qword [rsp + 0x43], rdx
movabs rdx, 0x9aeab35968f76314
mov qword [rsp + 0x4b], rdx
movabs rdx, 0xa0722d0d0f9aeab3
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7473fd2f650b7513
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf0003140d151211
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x141208020f060f00
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1519101419150f1a
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x5030d1910041500
mov qword [rsp + 0x33], rdx
movabs rdx, 0x3190a0e17120c03
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x49e737
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x26
jge 0x49e769
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x49e78d
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
cmp rsi, 0x1d
jb 0x49e71d
jmp 0x49e781
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.0044d280
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1d
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.0049e680
Function at 0x49e7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e8a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf049651b693bc824
mov qword [rsp + 0x31], rdx
movabs rdx, 0x43da4e1241073df0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90d0d070c0b0b00
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa0e0004090d0d07
mov qword [rsp + 0x21], rdx
movabs rdx, 0x807080d010d0902
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x49e840
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1d]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x49e872
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x49e897
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1d]
cmp rsi, 0xf
jb 0x49e822
jmp 0x49e88b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462ca0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049e7c0

Function at 0x49e8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e97e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x63c67250e169f163
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xdc73f663
movabs rdx, 0x80301030a010000
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x60100
xor eax, eax
jmp 0x49e921
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x49e94e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x49e971
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x49e904
jmp 0x49e965
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
nop
call fcn.004609c0
jmp fcn.0049e8c0
Function at 0x49e9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49ea7d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5dd8e5d4e46ee346
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc3f260dfae615dd8
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60b080601070909
mov qword [rsp + 0x18], rdx
movabs rdx, 0x801060b08060107
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x105060c040d030a
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x49ea20
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x49ea4d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x49ea70
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x49ea02
jmp 0x49ea64
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00462ca0
mov eax, edi
mov ecx, 0xe
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049e9a0

Function at 0x49eaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49eb7d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c7a6c8575736c90
mov qword [rsp + 0x30], rdx
movabs rdx, 0x736882517e8d8378
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0d020d04050805
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb0a03090e03050c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe000b0a0404060c
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x49eb20
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x49eb4d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x49eb70
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x49eb02
jmp 0x49eb64
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00462ca0
mov eax, edi
mov ecx, 0x10
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049eaa0
Function at 0x49eba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49ec72
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6527563a6375312a
mov qword [rsp + 0x29], rdx
movabs rdx, 0x655e6957645c5e65
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90d0a04090608
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb01030809000008
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x49ec0c
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x49ec3e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x49ec65
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
cmp rsi, 0xf
jb 0x49ebf2
jmp 0x49ec55
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00462ca0
mov eax, edi
mov ecx, 0xf
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049eba0

Function at 0x49ec80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49ed52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4a0d3d4e40722f2a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x17464a6173734a0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0304070c000c0d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb05010601060c03
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x49ecec
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x49ed1e
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x49ed45
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0xe
jb 0x49ecd2
jmp 0x49ed35
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00462ca0
mov eax, edi
mov ecx, 0xe
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049ec80
Function at 0x49ed60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49ee5b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf676df4503e00646
mov qword [rsp + 0x39], rdx
movabs rdx, 0x746eecd7566f72f6
mov qword [rsp + 0x40], rdx
movabs rdx, 0xff3e7f15ff97053
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10715160c100311
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x12030a1407100712
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1130c1012030a14
mov qword [rsp + 0x29], rdx
movabs rdx, 0xc02071305120b14
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x49edf9
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1c
jge 0x49ee2b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x49ee4e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x17
jb 0x49eddf
jmp 0x49ee42
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.0049ed60

Function at 0x49ee80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49ef47
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2d624c033e1a1a18
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x7940422d
movabs rdx, 0x409050101000308
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x700000209040209
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x49eee8
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x2e]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x2e]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x10
jge 0x49ef17
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x49ef3a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x49eecb
jmp 0x49ef2e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049ee80
Function at 0x49ef60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f046
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd77fb298ad849b47
mov qword [rsp + 0x31], rdx
movabs rdx, 0x576590614c8888d7
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc040906050c0307
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x30b0c040906050c
mov qword [rsp + 0x21], rdx
movabs rdx, 0xc08010c0707020b
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x49efe0
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x49f012
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x49f037
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 0xf
jb 0x49efc2
jmp 0x49f02b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462ca0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049ef60

Function at 0x49f160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f24a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6572dbc443fefe47
mov qword [rsp + 0x35], rdx
movabs rdx, 0xa174bd6572dbc443
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd2490a6665e4a772
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0a0c01100f0d0f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x41002050a020d0a
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc120f080a020c04
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x49f1ed
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x49f21a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x49f23d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x49f1d0
jmp 0x49f231
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049f160