joyce8/EMBER2024-capa huggingface dataset:
Function at 0x499700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4997e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd412c42684d6d8d9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x74e46fc62090d5ca
mov qword [rsp + 0x38], rdx
movabs rdx, 0x408090e0100040a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2030408090e0100
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0c0a0605070809
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x499780
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6d]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4997b2
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4997d7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6d]
cmp rsi, 0x10
jb 0x499762
jmp 0x4997cb
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00462ca0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00499700

Function at 0x499a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499b52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa36964c5db20a280
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa1726fc1c588a369
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9090409000a03
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8030d0a07010009
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x499aec
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x499b1e
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x499b45
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 0xe
jb 0x499ad2
jmp 0x499b35
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00462ca0
mov eax, edi
mov ecx, 0xe
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00499a80
Function at 0x499b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499c4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6d4e7d2061665475
mov qword [rsp + 0x34], rdx
movabs rdx, 0x596670246d4e7d20
mov qword [rsp + 0x38], rdx
movabs rdx, 0x556c6066691c6320
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf08090206000c05
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20c0b06050a0e0c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x111131100130e0d
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x499bea
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x18
jge 0x499c1c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x499c3f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x11]
cmp rsi, 0x14
jb 0x499bd0
jmp 0x499c33
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00462ca0
mov eax, edi
mov ecx, 0x14
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00499b60

Function at 0x499d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499eac
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xafd873d665ca2c61
mov qword [rsp + 0x44], rdx
movabs rdx, 0x20cc2067afd873d6
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9ec038da72723fde
mov qword [rsp + 0x50], rdx
movabs rdx, 0x64ec956168c6e764
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc3f9b6f98d0ac820
mov qword [rsp + 0x60], rdx
movabs rdx, 0x201e060c15192023
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x220d011e221a0411
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1f161022020a210d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2004071a161e2120
mov qword [rsp + 0x34], rdx
movabs rdx, 0x12220131e101d12
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x499e46
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7d]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x28
jge 0x499e7c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x24
jae 0x499e9f
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7d]
cmp rsi, 0x24
jb 0x499e2c
jmp 0x499e93
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x24
call fcn.0044d280
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00462ca0
mov eax, edi
mov ecx, 0x24
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00499d80
Function at 0x499ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x49a032
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x78202ec95a0f93ce
mov qword [rsp + 0x59], rdx
movabs rdx, 0xf5810722a7d00d81
mov qword [rsp + 0x61], rdx
movabs rdx, 0xbf206e69fbf26ef5
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc81eb269f889286f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x182029dc72fd8073
mov qword [rsp + 0x78], rdx
movabs rdx, 0xcca984620a726269
mov qword [rsp + 0x80], rdx
movabs rdx, 0x50b192d1c060c01
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7120f2103122b24
mov qword [rsp + 0x27], rdx
movabs rdx, 0x2a0807120f210312
mov qword [rsp + 0x29], rdx
movabs rdx, 0x26240a000d2d2d03
mov qword [rsp + 0x31], rdx
movabs rdx, 0x161902002d0e181d
mov qword [rsp + 0x39], rdx
movabs rdx, 0x42a090626011a07
mov qword [rsp + 0x41], rdx
movabs rdx, 0x1e201b2e122c2a1b
mov qword [rsp + 0x49], rdx
movabs rdx, 0x11052d2a260e0c23
mov qword [rsp + 0x51], rdx
xor eax, eax
jmp 0x499fcd
movzx r9d, byte [rsp + rsi + 0x59]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x59], dl
mov byte [rsp + rsi + 0x59], r8b
add rax, 2
cmp rax, 0x3a
jge 0x499fff
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x49a025
movzx r8d, byte [rsp + rdi + 0x59]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
cmp rsi, 0x2f
jb 0x499fb3
jmp 0x49a019
xor eax, eax
lea rbx, [rsp + 0x59]
mov ecx, 0x2f
call fcn.0044d280
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00462ca0
mov eax, edi
mov ecx, 0x2f
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00499ec0

Function at 0x49a040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a13d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6d757c97c8241f74
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2031302a1e72fa0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x34676efc2e2008e7
mov qword [rsp + 0x48], rdx
movabs rdx, 0x405000b00051002
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x140c130201050314
mov qword [rsp + 0x24], rdx
movabs rdx, 0x17090817140c1302
mov qword [rsp + 0x28], rdx
movabs rdx, 0x170c1711010e030d
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49a0e0
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x49a10d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x49a130
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x49a0bf
jmp 0x49a124
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00462ca0
mov eax, edi
mov ecx, 0x18
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049a040
Function at 0x49a2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a38c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x65d820fb6e1c1f18
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x2065d820fb6e1c1f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x651bd89920d83294
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60d0e0404040d09
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa0a040b0608060d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x400010d020f090d
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x49a32a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x16
jge 0x49a35c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x49a37f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
cmp rsi, 0x11
jb 0x49a310
jmp 0x49a373
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049a2a0

Function at 0x49a6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a78a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8f15920622e4b60
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x536508f15920622e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6b78613b555a4e72
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90b060b0d070201
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1000e00030c090b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf0303110105100a
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x49a72d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x24]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x24]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jge 0x49a75a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x49a77d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x49a710
jmp 0x49a771
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049a6a0
Function at 0x49a7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a8ac
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8749717258315e6e
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x6f6870626d65e878
mov qword [rsp + 0x43], rdx
movabs rdx, 0x5b3a4c685f6f6870
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7c6c342464526f76
mov qword [rsp + 0x50], rdx
movabs rdx, 0x40c020804071904
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1816170212051c1c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x11109131a040c07
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x20c0c1314091910
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x49a848
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x20
jge 0x49a87c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x49a89f
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0x1d
jb 0x49a82e
jmp 0x49a893
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1d
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049a7a0

Function at 0x49a8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a98c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x206b721adc74b7f3
mov qword [rsp + 0x29], rdx
movabs rdx, 0x6e336f45202f3120
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b0d0808010304
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3030d0d000b09
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x49a92f
movzx r9d, byte [rsp + rsi + 0x29]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x29], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jge 0x49a95c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x49a97f
movzx r8d, byte [rsp + rdi + 0x29]
sub r8d, edx
cmp rsi, 0xf
jb 0x49a912
jmp 0x49a973
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462ca0
mov eax, edi
mov ecx, 0xf
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049a8c0
Function at 0x49a9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49aa9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x9f94d990210e545a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe767f52073699f94
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65f4beed68ab969d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0112020f0c0604
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x30714120d0e0507
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0b0e020d020700
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf120f0b00131410
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x49aa40
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x49aa6d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x49aa90
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x49aa1f
jmp 0x49aa84
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049a9a0

Function at 0x49aac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49abcc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xc5c3bdc220b21ece
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xbbd0bfd365857020
mov qword [rsp + 0x43], rdx
movabs rdx, 0xd38ac4b96cbbd0bf
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6dd12601b403206e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13130511040c1a0a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc070e0a12141201
mov qword [rsp + 0x23], rdx
movabs rdx, 0x190207001b1a0f17
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x181b090d0f000602
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x49ab68
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x20
jge 0x49ab9c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x49abbf
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0x1d
jb 0x49ab4e
jmp 0x49abb3
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1d
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049aac0
Function at 0x49abe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49acfd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x92a9490fc0aa6ff8
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb7104b74bd55a674
mov qword [rsp + 0x46], rdx
movabs rdx, 0xf063b7104b74bd55
mov qword [rsp + 0x48], rdx
movabs rdx, 0x56102161ff691ebb
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb1519090015020a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x111113040d180b15
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30e091810060f06
mov qword [rsp + 0x26], rdx
movabs rdx, 0x617130d12181713
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x904171100000703
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x49aca0
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x49accd
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x49acf0
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x49ac7d
jmp 0x49ace4
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049abe0

Function at 0x49ad20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49ae06
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9483a99b9d206fb3
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x65ba588ecc7f9483
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70a0a0903040a0c
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb070a0a090304
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7050708060b06
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x49ada0
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x31]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x49add2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x49adf7
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x31]
cmp rsi, 0xe
jb 0x49ad82
jmp 0x49adeb
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00462ca0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049ad20
Function at 0x49af60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b05d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x212084bea46e6112
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x747dca1cce082120
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6f21d4833a2d2f65
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb1203150a070300
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb0b140705030408
mov qword [rsp + 0x22], rdx
movabs rdx, 0x110a07040f10030f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90a0f0c050b0313
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x49b000
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x49b02d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x49b050
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x49afdf
jmp 0x49b044
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049af60

Function at 0x49b2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b3d8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x49e5e6ea6e61e038
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x650d7449e5e6ea6e
mov qword [rsp + 0x50], rdx
movabs rdx, 0xdc746e3e1adf2e6e
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf320656ada20738a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x640fb9c5454ed86f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x18071f0c21130000
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x130d0f121d1d0e1e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x4121f1c1e12130d
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x1818051a0e011f04
mov qword [rsp + 0x35], rdx
movabs rdx, 0x71d16160d061700
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x6210406120920
mov qword [rsp + 0x45], rdx
xor eax, eax
jmp 0x49b378
movzx r9d, byte [rsp + rsi + 0x4d]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x4d], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x4d], dl
add rax, 2
cmp rax, 0x2e
jge 0x49b3a8
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x49b3cb
movzx r8d, byte [rsp + rdi + 0x4d]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x23
jb 0x49b35b
jmp 0x49b3bf
xor eax, eax
lea rbx, [rsp + 0x4d]
mov ecx, 0x23
call fcn.0044d280
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00462ca0
mov eax, edi
mov ecx, 0x23
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.0049b2a0
Function at 0x49b400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b51a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x67580632ec746f6e
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xa36d61e82011a54e
mov qword [rsp + 0x45], rdx
movabs rdx, 0xb020eca36d61e820
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8dc269f7dd916aa1
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf1215130512051a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa160f1215130512
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x140419071612171a
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc19030f15120f04
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x1413161417100309
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x49b4b7
movzx r9d, byte [rsp + rsi + 0x3d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rdi + 0x3d], dl
mov byte [rsp + rsi + 0x3d], r8b
add rax, 2
cmp rax, 0x22
jge 0x49b4e9
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x49b50d
movzx r8d, byte [rsp + rdi + 0x3d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x57]
cmp rsi, 0x1b
jb 0x49b49d
jmp 0x49b501
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.0044d280
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1b
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.0049b400

Function at 0x49b540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b64c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6f6f74d06bdc4b73
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xef446974ca89dedc
mov qword [rsp + 0x42], rdx
movabs rdx, 0xdd6eb56ec420ef44
mov qword [rsp + 0x48], rdx
movabs rdx, 0x74656b63df73b714
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb0e011908150b06
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x40b0616130a0b06
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa06060a1916040b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x170911061102090f
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x49b5e8
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x49b61c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x49b63f
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0x1e
jb 0x49b5ce
jmp 0x49b633
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1e
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049b540