joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49e3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e492
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfa553c45192b394f
mov qword [rsp + 0x29], rdx
movabs rdx, 0x4b4423463e6570fa
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4020c010b05030b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x40d0e0a04010107
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x49e42c
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x49e45e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x49e485
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0xf
jb 0x49e412
jmp 0x49e475
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.0046d060
mov eax, edi
mov ecx, 0xf
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0049e3c0

Function at 0x4a01c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a02b8
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f5b1546694e5a56
mov qword [rsp + 0x36], rdx
movabs rdx, 0x64156f5b1546694e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x72192153656c3256
mov qword [rsp + 0x40], rdx
movabs rdx, 0x501100110050707
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0209040f09080b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0e0b0209040f09
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40806050a020105
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4a0255
movzx r9d, byte [rsp + rsi + 0x36]
add edx, r9d
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a0288
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a02ab
movzx r8d, byte [rsp + rdi + 0x36]
add r8d, edx
nop word [rax + rax]
cmp rsi, 0x12
jb 0x4a023f
jmp 0x4a029f
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
call fcn.0046ad80
nop dword [rax]
jmp fcn.004a01c0
Function at 0x4a52c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a53a6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xed2ef37b61736e75
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x948a246ef407ed2e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90c02080c0b080d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90b090c02080c0b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x507050805040808
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4a5340
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4a5372
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4a5397
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0xe
jb 0x4a5322
jmp 0x4a538b
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0046d060
mov eax, edi
mov ecx, 0xe
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004a52c0
Function at 0x4ac4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac5a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x779577676e6b6e75
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x7543848420248f41
mov qword [rsp + 0x46], rdx
movabs rdx, 0x7d77754384842024
mov qword [rsp + 0x48], rdx
movabs rdx, 0x789b59666972895b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x171211121815150c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa0e0f0412130a07
mov qword [rsp + 0x26], rdx
movabs rdx, 0x916150a19150c0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x612190c18101017
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4ac54b
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x20
jge 0x4ac578
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4ac59b
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4ac52e
jmp 0x4ac58f
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00467060
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0046d060
mov eax, edi
mov ecx, 0x1a
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004ac4a0

Function at 0x4af2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af3f8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x9bc62bb7241b1d6d
mov qword [rsp + 0x44], rdx
movabs rdx, 0xd7c649009bc62bb7
mov qword [rsp + 0x48], rdx
movabs rdx, 0xdd7520b9d73f646e
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb95fa620f542410b
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe667697861c56dcd
mov qword [rsp + 0x60], rdx
movabs rdx, 0x10e190719071d03
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2017101e1b1c1104
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2052017101e1b1c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8130e0f031e011a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x191b231a0a06011c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10110f140b171b14
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x4af395
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4af3c8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x4af3eb
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
nop
cmp rsi, 0x24
jb 0x4af37b
jmp 0x4af3df
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x24
call fcn.00467060
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.0046d060
mov eax, edi
mov ecx, 0x24
call fcn.0046d060
nop
call fcn.0046ad80
nop dword [rax]
jmp fcn.004af2c0
Function at 0x4b3400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b34ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa7377ebb6ce2ae72
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x20a7377ebb6ce2ae
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2066e0e3b28eecd0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90d0c060b09010e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa0b0102090d0c06
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5070b040b0c0109
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4b348d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x30]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x30]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x14
jge 0x4b34ba
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b34dd
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4b3470
jmp 0x4b34d1
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0046d060
mov eax, edi
mov ecx, 0x11
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004b3400

Function at 0x4b7ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x4b7cf5
push rbp
mov rbp, rsp
sub rsp, 0xb0
movabs rdx, 0x4674cf656c66295a
mov qword [rsp + 0x6c], rdx
movabs rdx, 0x667541204674cf65
mov qword [rsp + 0x70], rdx
movabs rdx, 0x27617685b263286c
mov qword [rsp + 0x78], rdx
movabs rdx, 0xb4b01eced2e814b
mov qword [rsp + 0x80], rdx
movabs rdx, 0xe3653f6e25bf50f7
mov qword [rsp + 0x88], rdx
movabs rdx, 0xac20253b20e800fa
mov qword [rsp + 0x90], rdx
movabs rdx, 0x6e6c64ed2221095b
mov qword [rsp + 0x98], rdx
movabs rdx, 0x3fe065683cd9746f
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x9865001f69d0d300
mov qword [rsp + 0xa8], rdx
lea rdi, [rsp + 0x1c]
lea rsi, [0x0068d770]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046d67a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4b7c94
movzx r9d, byte [rsp + rsi + 0x6c]
sub r9d, edx
lea edx, [r9 - 0x43]
mov byte [rsp + rdi + 0x6c], dl
lea edx, [r8 - 0x43]
mov byte [rsp + rsi + 0x6c], dl
add rax, 2
cmp rax, 0x50
jge 0x4b7cc2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x44
jae 0x4b7ce8
movzx r8d, byte [rsp + rdi + 0x6c]
sub r8d, edx
cmp rsi, 0x44
jb 0x4b7c77
nop
jmp 0x4b7cdc
xor eax, eax
lea rbx, [rsp + 0x6c]
mov ecx, 0x44
call fcn.00467060
add rsp, 0xb0
pop rbp
ret
mov eax, esi
mov ecx, 0x44
call fcn.0046d060
mov eax, edi
mov ecx, 0x44
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004b7ba0
Function at 0x4b7d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7e1d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x2e7480515a476572
mov qword [rsp + 0x45], rdx
movabs rdx, 0x6051604e5ffd6e47
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x3f614e6051604e5f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x723d3a556e685036
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb0a13121817150c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x310041602080b0a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x17121610190f1509
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x160a18050b0d0f08
mov qword [rsp + 0x35], rdx
movabs rdx, 0xb040c16080e0302
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x4b7dc0
movzx r9d, byte [rsp + rsi + 0x45]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x45], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x45], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4b7ded
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4b7e10
movzx r8d, byte [rsp + rdi + 0x45]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4b7d9d
jmp 0x4b7e04
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x1b
call fcn.00467060
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0046d060
mov eax, edi
mov ecx, 0x1b
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.004b7d00

Function at 0x4bb4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb5ec
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x8b7f7c5149918e61
mov qword [rsp + 0x46], rdx
movabs rdx, 0x6188a58c756c77a4
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x61846188a58c756c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x837d206ebe7a6443
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20af3574d6757751
mov qword [rsp + 0x60], rdx
movabs rdx, 0x7d577461a1676096
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1a0720250129081d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x22000d0424110819
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe15230022000d04
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2812230502180e02
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60c0210091b2211
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe182811141f2410
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x4bb584
movzx r9d, byte [rsp + rsi + 0x46]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x46], dl
mov byte [rsp + rsi + 0x46], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4bb5bc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x2a
jae 0x4bb5df
movzx r8d, byte [rsp + rdi + 0x46]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0x2a
jb 0x4bb56a
jmp 0x4bb5d3
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x2a
call fcn.00467060
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x2a
call fcn.0046d060
mov eax, edi
mov ecx, 0x2a
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004bb4a0
Function at 0x4bbd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbe3d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6cdeb747b3aa615a
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xbc069b5dfb5b7626
mov qword [rsp + 0x47], rdx
movabs rdx, 0x27bc069b5dfb5b76
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6eb3b789efa49c3c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2100f140b141404
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb0d060d02100f14
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x17130312060e0002
mov qword [rsp + 0x27], rdx
movabs rdx, 0x502160204001603
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x61607041012150d
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4bbde0
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4bbe0d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4bbe30
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4bbdbd
jmp 0x4bbe24
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00467060
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0046d060
mov eax, edi
mov ecx, 0x19
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.004bbd20
Function at 0x4bd9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x4bdb68
push rbp
mov rbp, rsp
sub rsp, 0xa0
movabs rdx, 0x3a4963c8261d4a9d
mov qword [rsp + 0x65], rdx
movabs rdx, 0x1b54dc6c3c293621
mov qword [rsp + 0x6d], rdx
movabs rdx, 0x61fd2e1b54dc6c3c
mov qword [rsp + 0x70], rdx
movabs rdx, 0xaa6503456c297523
mov qword [rsp + 0x78], rdx
movabs rdx, 0xcd8b6e13183b4106
mov qword [rsp + 0x80], rdx
movabs rdx, 0x6e60454ed8b20bc0
mov qword [rsp + 0x88], rdx
movabs rdx, 0x405665da3d69741b
mov qword [rsp + 0x90], rdx
movabs rdx, 0x11090c6e699e3939
mov qword [rsp + 0x98], rdx
movabs rdx, 0x321c080827312100
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x35041f041a0e3829
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1d042834181e2406
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x2e25221e0a260915
mov qword [rsp + 0x35], rdx
movabs rdx, 0x3262f233a022f16
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x2b0301002333060e
mov qword [rsp + 0x45], rdx
movabs rdx, 0xd01181f112f0b06
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x39092b1d130f0b18
mov qword [rsp + 0x55], rdx
movabs rdx, 0x10a0d2e391b2e21
mov qword [rsp + 0x5d], rdx
xor eax, eax
jmp 0x4bdb03
movzx r9d, byte [rsp + rsi + 0x65]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x65], dl
mov byte [rsp + rsi + 0x65], r8b
add rax, 2
cmp rax, 0x48
jge 0x4bdb35
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3b
jae 0x4bdb5b
movzx r8d, byte [rsp + rdi + 0x65]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x3b
jb 0x4bdae9
jmp 0x4bdb4f
xor eax, eax
lea rbx, [rsp + 0x65]
mov ecx, 0x3b
call fcn.00467060
add rsp, 0xa0
pop rbp
ret
mov eax, esi
mov ecx, 0x3b
call fcn.0046d060
mov eax, edi
mov ecx, 0x3b
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004bd9c0

Function at 0x4c0c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0d3d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb064b1f86134aab5
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x6e
movabs rdx, 0x400040001050200
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x705
xor eax, eax
nop
jmp 0x4c0ce0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4c0d0d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4c0d30
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4c0cc2
jmp 0x4c0d24
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046d060
mov eax, edi
mov ecx, 9
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.004c0c80
Function at 0x4c7660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c774c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6eba1f93e6658953
mov qword [rsp + 0x34], rdx
movabs rdx, 0x698361766eba1f93
mov qword [rsp + 0x38], rdx
movabs rdx, 0x858e5a89888ab064
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd03030605030306
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4110a1012060d03
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0512030f01130e
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4c76ea
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x41]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c771c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c773f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x41]
cmp rsi, 0x14
jb 0x4c76d0
jmp 0x4c7733
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0046d060
mov eax, edi
mov ecx, 0x14
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004c7660

Function at 0x4c9240
Capabilities:
Hash data using fnv

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9994
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
movabs rcx, 0xcbf29ce484222325
jmp 0x4c926d
lea rax, [rdx + 0x10]
dec rbx
mov rcx, rsi
test rbx, rbx
jle 0x4c94f1
mov rdx, rax
mov rsi, qword [rax]
nop dword [rax]
test rsi, rsi
je 0x4c951d
mov edi, dword [rsi + 0x10]
shr edi, 1
mov r8, qword [rax + 8]
and edi, 0x3f
lea rax, [0x00693c60]
jmp qword [rax + rdi*8]
mov rax, rcx
add rsp, 0x10
pop rbp
ret
nop dword [rax]
call fcn.004c9ba0
call fcn.00461280
mov rbx, rax
lea rax, [0x00619340]
call fcn.00465420
inc rax
nop dword [rax]
cmp rax, r8
jge 0x4c954e
mov r9, qword [rsi + rax*8]
xor r10d, r10d
jmp 0x4c9583
lea rdi, [0x006193c0]
mov rsi, rcx
movabs rcx, 0x100000001b3
jmp 0x4c9263
movzx r11d, r9b
xor rcx, r11
inc r10
shr r9, 8
movabs r11, 0x100000001b3
imul rcx, r11
cmp r10, 8
jl 0x4c9567
jmp 0x4c9539
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.0046ad80
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.004c9240

Function at 0x4c9b20
Capabilities:
Hash data using fnv

Disassembly:
test byte [rax], al
mov rcx, rbx
and ebx, 0x7f
shl rbx, 5
lea rdx, [rax + rbx]
xor eax, eax
jmp 0x4c9b37
inc rax
cmp rax, 4
jge 0x4c9b4f
lea rbx, [rdx + rax*8]
mov rbx, qword [rbx]
cmp rbx, rcx
jne 0x4c9b34
mov eax, 1
ret
xor eax, eax
movabs rbx, 0xcbf29ce484222325
jmp 0x4c9b60
inc rax
cmp rax, 4
jge 0x4c9b6e
mov rsi, qword [rdx + rax*8]
xor edi, edi
jmp 0x4c9b97
and ebx, 3
lea rdx, [rdx + rbx*8]
xchg qword [rdx], rcx
xor eax, eax
ret
movzx r8d, sil
xor rbx, r8
inc rdi
shr rsi, 8
movabs r8, 0x100000001b3
imul rbx, r8
cmp rdi, 8
jl 0x4c9b7b
jmp 0x4c9b5d
Function at 0x4cc3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc518
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x576d834f617133a2
mov qword [rsp + 0x44], rdx
movabs rdx, 0x64652970576d834f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7484801a12799987
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6661208428207061
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5ae8295d1676857a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x50c0e180400180d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1d120f011f112009
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6121d120f011f11
mov qword [rsp + 0x24], rdx
movabs rdx, 0x180a1d1c0d1f01
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1200061010072311
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1f220b1c151e0204
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x4cc4b5
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4cc4e8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x4cc50b
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
nop
cmp rsi, 0x24
jb 0x4cc49b
jmp 0x4cc4ff
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x24
call fcn.00467060
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.0046d060
mov eax, edi
mov ecx, 0x24
call fcn.0046d060
nop
call fcn.0046ad80
nop dword [rax]
jmp fcn.004cc3e0

Function at 0x4d8420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d84e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2ce37272ed3f6e22
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xce
movabs rdx, 0x608020003000602
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x7060608
xor eax, eax
nop
jmp 0x4d8480
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4d84b2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d84d7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 9
jb 0x4d8462
jmp 0x4d84cb
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046d060
mov eax, edi
mov ecx, 9
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004d8420
Function at 0x4d8ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8b7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe344e5645737536
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x6d
movabs rdx, 0x703040503000603
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x8050706
xor eax, eax
nop
jmp 0x4d8b20
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4d8b4d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d8b70
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4d8b02
jmp 0x4d8b64
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046d060
mov eax, edi
mov ecx, 9
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.004d8ac0

Function at 0x4db4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db60c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0xafc5d712ba64ff61
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6e8abf929b61e585
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6fc28f3473c774b0
mov qword [rsp + 0x60], rdx
movabs rdx, 0x8b88812009c87472
mov qword [rsp + 0x68], rdx
movabs rdx, 0x68c1c06f676f8c7b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1527060d260b0c1d
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb21161403251404
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1041a0710051b1a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2008100a10042512
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc12071525051d0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1a1b1b09051a0103
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3161a1e23041f10
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4db5a4
movzx r9d, byte [rsp + rsi + 0x50]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5b]
mov byte [rsp + rdi + 0x50], dl
mov byte [rsp + rsi + 0x50], r8b
add rax, 2
cmp rax, 0x38
jge 0x4db5dc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x28
jae 0x4db5ff
movzx r8d, byte [rsp + rdi + 0x50]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5b]
cmp rsi, 0x28
jb 0x4db58a
jmp 0x4db5f3
xor eax, eax
lea rbx, [rsp + 0x50]
mov ecx, 0x28
call fcn.00467060
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.0046d060
mov eax, edi
mov ecx, 0x28
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004db4c0