joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49b780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b888
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x201eef7573966f6e
mov qword [rsp + 0x37], rdx
movabs rdx, 0x37fa35632b363ae8
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x7237fa35632b363a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4a7319f82f3b0320
mov qword [rsp + 0x48], rdx
movabs rdx, 0x121502081309140e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1216060f0b08140d
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb0a18051216060f
mov qword [rsp + 0x27], rdx
movabs rdx, 0x15120e180f140d0a
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x49b82b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1c
jge 0x49b858
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x49b87b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x49b80e
jmp 0x49b86f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462ca0
mov eax, edi
mov ecx, 0x19
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049b780

Function at 0x49b8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b99b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x83c4747b72b047b2
mov qword [rsp + 0x39], rdx
movabs rdx, 0x7397c08a6e206e83
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd5a78b728ed59595
mov qword [rsp + 0x48], rdx
movabs rdx, 0x211010d100c1610
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x600100602000c14
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1011040715040600
mov qword [rsp + 0x29], rdx
movabs rdx, 0xb0b0c02020f1211
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x49b939
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1e
jge 0x49b96b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x49b98e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0x17
jb 0x49b91f
jmp 0x49b982
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.0049b8a0
Function at 0x49b9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49bb0c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x6f742065a86c3f76
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x477fb420556f7420
mov qword [rsp + 0x50], rdx
movabs rdx, 0xfa61646ff41bd4d5
mov qword [rsp + 0x58], rdx
movabs rdx, 0x40b11e46f8d0c0e0
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc05ab6d12044d761
mov qword [rsp + 0x68], rdx
movabs rdx, 0x191a1b190f0c1808
mov qword [rsp + 0x19], rdx
movabs rdx, 0x160b191a1b190f0c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x130a152119141e23
mov qword [rsp + 0x23], rdx
movabs rdx, 0x140a1303081e1322
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x241810120f1b1610
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1f12011c1e0b100d
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x31c011e22120e17
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x49baa4
movzx r9d, byte [rsp + rsi + 0x4b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x4b], dl
mov byte [rsp + rsi + 0x4b], r8b
add rax, 2
cmp rax, 0x32
jge 0x49badc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x49baff
movzx r8d, byte [rsp + rdi + 0x4b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0x25
jb 0x49ba8a
jmp 0x49baf3
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.0044d280
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00462ca0
mov eax, edi
mov ecx, 0x25
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049b9c0

Function at 0x49bb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49bbe7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7080206f65f47772
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7765
movabs rdx, 0x902020409060700
mov qword [rsp + 0x18], rdx
movabs rdx, 0x607000007020902
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x49bb87
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x49bbb7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x49bbda
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x49bb6a
jmp 0x49bbce
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049bb20
Function at 0x49bc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49bd1a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xbc43646bd250557
mov qword [rsp + 0x42], rdx
movabs rdx, 0xdd4767d1ee7238ff
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x6f473d2f0c18dd47
mov qword [rsp + 0x50], rdx
movabs rdx, 0x37656bad3dfd2033
mov qword [rsp + 0x58], rdx
movabs rdx, 0x618000f11190519
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe03140e100c1a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40c18081a06130b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x116140718060107
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2121907091d0904
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x49bcb7
movzx r9d, byte [rsp + rsi + 0x42]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xa]
mov byte [rsp + rdi + 0x42], dl
mov byte [rsp + rsi + 0x42], r8b
add rax, 2
cmp rax, 0x28
jge 0x49bce9
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x49bd0d
movzx r8d, byte [rsp + rdi + 0x42]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xa]
cmp rsi, 0x1e
jb 0x49bc9d
jmp 0x49bd01
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.0044d280
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1e
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.0049bc00

Function at 0x49bd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x49be9a
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x7f6415518d744f8e
mov qword [rsp + 0x55], rdx
movabs rdx, 0x7a7f2375d0509a23
mov qword [rsp + 0x5d], rdx
movabs rdx, 0x417b657a7f2375d0
mov qword [rsp + 0x60], rdx
movabs rdx, 0x4b5573856c7d6163
mov qword [rsp + 0x68], rdx
movabs rdx, 0xef77657120842b6e
mov qword [rsp + 0x70], rdx
movabs rdx, 0x6e47747203367358
mov qword [rsp + 0x78], rdx
movabs rdx, 0x90a170c21000b0a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2a06030e2108090a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x170d07151a21111d
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x91b122605211b0a
mov qword [rsp + 0x35], rdx
movabs rdx, 0x23041f15150d080f
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x2622221c08051a29
mov qword [rsp + 0x45], rdx
movabs rdx, 0x23251901222a251c
mov qword [rsp + 0x4d], rdx
xor eax, eax
jmp 0x49be38
movzx r9d, byte [rsp + rsi + 0x55]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x31]
mov byte [rsp + rdi + 0x55], dl
mov byte [rsp + rsi + 0x55], r8b
add rax, 2
cmp rax, 0x36
jge 0x49be6a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x49be8d
movzx r8d, byte [rsp + rdi + 0x55]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x31]
cmp rsi, 0x2b
jb 0x49be1e
jmp 0x49be81
xor eax, eax
lea rbx, [rsp + 0x55]
mov ecx, 0x2b
call fcn.0044d280
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2b
call fcn.00462ca0
mov eax, edi
mov ecx, 0x2b
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.0049bd40
Function at 0x49bec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49bfaa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x286e6fd564afc211
mov qword [rsp + 0x33], rdx
movabs rdx, 0x6c078e0cad286e6f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x76c2c0731c73dfc1
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80d10041404020b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x113091407091210
mov qword [rsp + 0x23], rdx
movabs rdx, 0x40a0207120e0200
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x49bf4d
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jge 0x49bf7a
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x49bf9d
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x49bf30
jmp 0x49bf91
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049bec0

Function at 0x49c0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c172
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd728201f652069dc
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xe4657218aad72820
mov qword [rsp + 0x30], rdx
movabs rdx, 0x602000000080c07
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc09040800070602
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x49c10c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x49c13e
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x49c165
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 0xd
jb 0x49c0f2
jmp 0x49c155
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00462ca0
mov eax, edi
mov ecx, 0xd
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049c0a0
Function at 0x49c180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c27b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xecb3ba6e6e6e6ffc
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb34fc6ccecb3ba6e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xaaba5c23b9b3143c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf05090c11100808
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8000408040a1008
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7080d1309130800
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80e060b11121308
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x49c219
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x49c24b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x49c26e
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x14
jb 0x49c1ff
jmp 0x49c262
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00462ca0
mov eax, edi
mov ecx, 0x14
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.0049c180

Function at 0x49c2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c3cc
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x7935676d6550427f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x3f577935676d6550
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6746526572186678
mov qword [rsp + 0x48], rdx
movabs rdx, 0x73ff0d3763205e6f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e3b4c6c254c2074
mov qword [rsp + 0x58], rdx
movabs rdx, 0x313171912110600
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1f100a0f03131719
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2018030c21161205
mov qword [rsp + 0x26], rdx
movabs rdx, 0x13001d2011130a16
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x910011f0819021c
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x49c366
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x17]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x24
jge 0x49c39c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x49c3bf
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x17]
cmp rsi, 0x22
jb 0x49c34c
jmp 0x49c3b3
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x22
call fcn.0044d280
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00462ca0
mov eax, edi
mov ecx, 0x22
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049c2a0
Function at 0x49c3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c4db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x9e9b7f63309f8aa7
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8673446569856d81
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7caa956e619a8977
mov qword [rsp + 0x48], rdx
movabs rdx, 0x706151502001216
mov qword [rsp + 0x18], rdx
movabs rdx, 0x91117090d020f01
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3120310170b0a05
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf08081001080902
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49c479
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x20
jge 0x49c4ab
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x49c4ce
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x18
jb 0x49c45f
jmp 0x49c4c2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00462ca0
mov eax, edi
mov ecx, 0x18
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.0049c3e0

Function at 0x49c500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c61d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xc1bdad1d44cd7214
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x17265fbf2722214
mov qword [rsp + 0x44], rdx
movabs rdx, 0x3440a63017265fb
mov qword [rsp + 0x48], rdx
movabs rdx, 0x146541350a7412d2
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb130312190c180b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3110b130312190c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1b020c1106130812
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf05091510050717
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1700041b11101408
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x49c5c0
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x49c5ed
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x49c610
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x49c59d
jmp 0x49c604
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1c
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049c500
Function at 0x49c640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c712
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9e6eea6da0ab9fa6
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4d72dcef86209e6e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1070a0100020d03
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7090b0909050b05
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x49c6ac
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x49c6de
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x49c705
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0xe
jb 0x49c692
jmp 0x49c6f5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00462ca0
mov eax, edi
mov ecx, 0xe
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049c640

Function at 0x49c840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c90c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2e327f73887d708f
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x6c69402e
movabs rdx, 0x504080403020002
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x809010800000504
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x49c8a5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x49c8dc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x49c8ff
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 0xb
jb 0x49c88b
jmp 0x49c8f3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049c840

Function at 0x49c920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c9dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xcbba0f2661730812
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x2a8e
movabs rdx, 0x705080807060001
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x9040608
xor eax, eax
jmp 0x49c980
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x49c9ad
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x49c9d0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x49c963
jmp 0x49c9c4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049c920
Function at 0x49ca00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49cad8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8b003365ffec83f6
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x8acdc30b
movabs rdx, 0xb010709080a0005
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6000b010709080a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x209010b06030503
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x49ca74
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x49caa8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x49cacb
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
nop
cmp rsi, 0xc
jb 0x49ca5a
jmp 0x49cabf
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.0049ca00

Function at 0x49cbe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49cca7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x836b8fc084868d55
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x8a6c7a83
movabs rdx, 0x401010408000207
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x502030a0a040807
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x49cc48
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x10
jge 0x49cc77
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x49cc9a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x49cc2b
jmp 0x49cc8e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049cbe0

Function at 0x49ce80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49cf3e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2e3733886c30f738
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xcd6c3f2e
movabs rdx, 0x800000a02010204
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x6010802
xor eax, eax
jmp 0x49cee1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x49cf0e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x49cf31
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x49cec4
jmp 0x49cf25
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
nop
call fcn.004609c0
jmp fcn.0049ce80
Function at 0x49cf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d01d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x642efed52d32ec36
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x21d3
movabs rdx, 0x305010305090008
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x1080904
xor eax, eax
jmp 0x49cfc0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x49cfed
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x49d010
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x49cfa3
jmp 0x49d004
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049cf60

Function at 0x49d040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d12a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe2b3e56d13a7243
mov qword [rsp + 0x34], rdx
movabs rdx, 0x127240220e2b3e56
mov qword [rsp + 0x38], rdx
movabs rdx, 0x407478217441195b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13090b0d05070203
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x204080d0e0e060d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc040b0d0b091009
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x49d0cd
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x18
jge 0x49d0fa
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x49d11d
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x49d0b0
jmp 0x49d111
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00462ca0
mov eax, edi
mov ecx, 0x14
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049d040