joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a4ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4de8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6172461d75c46176
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x2917732013b2bf20
mov qword [rsp + 0x43], rdx
movabs rdx, 0x7246203c1d291773
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa112376666543809
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c0f0b0b1a1b0217
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2081b0a09150410
mov qword [rsp + 0x25], rdx
movabs rdx, 0xf130e0e15170208
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xa0a11080916121b
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4a4d8b
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
cmp rax, 0x1e
jge 0x4a4db8
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4a4ddb
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4a4d6e
jmp 0x4a4dcf
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1d
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004a4ce0

Function at 0x4a8f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a907a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xbb74637f833da989
mov qword [rsp + 0x42], rdx
movabs rdx, 0x6a7b6abf596c3139
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x6172246e696a6a7b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x396ba0797f20646a
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb1b190307010c0b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe0b1b0302070100
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80c071d04030b1c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100f1c101b030d09
mov qword [rsp + 0x32], rdx
movabs rdx, 0x131009151416150c
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x4a9017
movzx r9d, byte [rsp + rsi + 0x42]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x42], dl
mov byte [rsp + rsi + 0x42], r8b
add rax, 2
cmp rax, 0x28
jge 0x4a9049
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4a906d
movzx r8d, byte [rsp + rdi + 0x42]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0x1e
jb 0x4a8ffd
jmp 0x4a9061
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.0045b720
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1e
call fcn.00460fc0
nop
call fcn.0045ece0
nop
jmp fcn.004a8f60
Function at 0x4a9a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9b87
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x3aa5d8652f666548
mov qword [rsp + 0x49], rdx
movabs rdx, 0xf90c5bac9365d820
mov qword [rsp + 0x51], rdx
movabs rdx, 0x472612d08cb0bf9
mov qword [rsp + 0x58], rdx
movabs rdx, 0x80a8b69b74fd0e2a
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb100d1d191b0f06
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd180e1c181e0018
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd0c0d180e1c181e
mov qword [rsp + 0x29], rdx
movabs rdx, 0x100d1216101c1017
mov qword [rsp + 0x31], rdx
movabs rdx, 0x5190c1d1c091b0d
mov qword [rsp + 0x39], rdx
movabs rdx, 0xe1d111d1c030d1e
mov qword [rsp + 0x41], rdx
xor eax, eax
jmp 0x4a9b29
movzx r9d, byte [rsp + rsi + 0x49]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x49], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x49], dl
add rax, 2
cmp rax, 0x2a
jge 0x4a9b57
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x4a9b7a
movzx r8d, byte [rsp + rdi + 0x49]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4a9b0c
jmp 0x4a9b6e
xor eax, eax
lea rbx, [rsp + 0x49]
mov ecx, 0x1f
call fcn.0045b720
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1f
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004a9a60

Function at 0x4aa100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa1ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7ebd6365ba661572
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x61567ebd6365ba66
mov qword [rsp + 0x30], rdx
movabs rdx, 0x826e699a8e53959e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70c0a0a07030107
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb0e0d01060b070c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x110e010111010311
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4aa18a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4aa1bc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4aa1df
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
cmp rsi, 0x12
jb 0x4aa170
jmp 0x4aa1d3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460fc0
mov eax, edi
mov ecx, 0x12
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004aa100
Function at 0x4b0d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0e2a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2e1fb28a13d11e14
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xc72e1fb28a13d11e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x74c2bd0665752361
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80508000306010e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa0f080508000306
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6020e040f030d04
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4b0dcd
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x49]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jge 0x4b0dfa
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b0e1d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4b0db0
jmp 0x4b0e11
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00460fc0
mov eax, edi
mov ecx, 0x11
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004b0d40

Function at 0x4b1be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1d0c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x528c1565be40ac9c
mov qword [rsp + 0x46], rdx
movabs rdx, 0xa986528c1565be40
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb169808b95697285
mov qword [rsp + 0x50], rdx
movabs rdx, 0x50a8bf6ba1786564
mov qword [rsp + 0x58], rdx
movabs rdx, 0x8a256e61962006b3
mov qword [rsp + 0x60], rdx
movabs rdx, 0x31d1b0311210515
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x717061a07150918
mov qword [rsp + 0x26], rdx
movabs rdx, 0x11b0e1a210f21
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1919160a0f20061d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70a02080d060020
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x4b1ca6
movzx r9d, byte [rsp + rsi + 0x46]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x46], dl
mov byte [rsp + rsi + 0x46], r8b
add rax, 2
cmp rax, 0x28
jge 0x4b1cdc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x4b1cff
movzx r8d, byte [rsp + rdi + 0x46]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x22
jb 0x4b1c8c
jmp 0x4b1cf3
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.0045b720
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00460fc0
mov eax, edi
mov ecx, 0x22
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004b1be0
Function at 0x4b1e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1eea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2e7463b86c8d1312
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x4661af2e7463b86c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xcdc96f2346c1075b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80c0f1200040a0b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x12010b04080c0f12
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1112020d0d0a0804
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4b1e8d
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x14
jge 0x4b1eba
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b1edd
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b1e70
jmp 0x4b1ed1
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460fc0
mov eax, edi
mov ecx, 0x13
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004b1e00

Function at 0x4b4b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4c2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xcf6fb387de968662
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x657a69cf
movabs rdx, 0x402060707030505
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x302030101010701
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4b4bc5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x41]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b4bfc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4b4c1f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x41]
cmp rsi, 0xb
jb 0x4b4bab
jmp 0x4b4c13
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460fc0
mov eax, edi
mov ecx, 0xb
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004b4b60
Function at 0x4b5300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x4b54a8
push rbp
mov rbp, rsp
sub rsp, 0xa0
movabs rdx, 0xa1a980c5c36e6f6e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x8e9b6e290eb81079
mov qword [rsp + 0x70], rdx
movabs rdx, 0x41aa3b0c61782095
mov qword [rsp + 0x78], rdx
movabs rdx, 0xf3b2667c9cc9ae21
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2a6f0d2e6e358220
mov qword [rsp + 0x88], rdx
movabs rdx, 0xa7695a34a66574ae
mov qword [rsp + 0x90], rdx
movabs rdx, 0x73920f6c83de235a
mov qword [rsp + 0x98], rdx
movabs rdx, 0x30310c0e270f030e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa310b0b1c092c1f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1e2f1c2d0a310b0b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc3019321a142522
mov qword [rsp + 0x30], rdx
movabs rdx, 0x330c1f35250b0436
mov qword [rsp + 0x38], rdx
movabs rdx, 0x161a0e1f1906180e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x22283035070a172c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x100b2b360b0f171b
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa331f0e12212415
mov qword [rsp + 0x58], rdx
movabs rdx, 0x14302731052d1236
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4b5443
movzx r9d, byte [rsp + rsi + 0x68]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + rdi + 0x68], dl
mov byte [rsp + rsi + 0x68], r8b
add rax, 2
cmp rax, 0x4c
jge 0x4b5475
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x38
jae 0x4b549b
movzx r8d, byte [rsp + rdi + 0x68]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7b]
cmp rsi, 0x38
jb 0x4b5429
jmp 0x4b548f
xor eax, eax
lea rbx, [rsp + 0x68]
mov ecx, 0x38
call fcn.0045b720
add rsp, 0xa0
pop rbp
ret
mov eax, esi
mov ecx, 0x38
call fcn.00460fc0
mov eax, edi
mov ecx, 0x38
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004b5300

Function at 0x4b54c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b557d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3d6d76a569669074
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x5274
movabs rdx, 0x506020801040604
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x906
xor eax, eax
jmp 0x4b5520
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4b554d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4b5570
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4b5502
jmp 0x4b5564
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460fc0
mov eax, edi
mov ecx, 0xa
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.004b54c0
Function at 0x4b55a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b568c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x20ee294e6ef16ea6
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x4e20ee294e6ef16e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe16e69d85e65da0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x608060c06090410
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20608060c0609
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd10060a0510020d
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4b562a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x4b565c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b567f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
cmp rsi, 0x11
jb 0x4b5610
jmp 0x4b5673
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00460fc0
mov eax, edi
mov ecx, 0x11
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004b55a0

Function at 0x4b7020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b710a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x80cadba295be6162
mov qword [rsp + 0x33], rdx
movabs rdx, 0x4bb06e698e80cadb
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20b165aafb7b56ad
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1003110d05110707
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x80c0f1302061003
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6020b04040e0e03
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4b70ad
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x16
jge 0x4b70da
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b70fd
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x4b7090
jmp 0x4b70f1
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460fc0
mov eax, edi
mov ecx, 0x15
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004b7020
Function at 0x4b8d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8e1e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x977793747292688c
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xc79be297
movabs rdx, 0x902050a02000800
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x5070702
xor eax, eax
jmp 0x4b8dc1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4b8dee
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b8e11
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b8da4
jmp 0x4b8e05
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460fc0
mov eax, edi
mov ecx, 0xb
call fcn.00460fc0
nop
nop
call fcn.0045ece0
jmp fcn.004b8d60

Function at 0x4b8e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8f2c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2032252861766ed0
mov qword [rsp + 0x34], rdx
movabs rdx, 0x3b25103e20322528
mov qword [rsp + 0x38], rdx
movabs rdx, 0xedbe0a211a2a2065
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe00001213060912
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10040a0508090e00
mov qword [rsp + 0x24], rdx
movabs rdx, 0x612110f0e06080b
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4b8eca
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b8efc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b8f1f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0x14
jb 0x4b8eb0
jmp 0x4b8f13
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460fc0
mov eax, edi
mov ecx, 0x14
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004b8e40
Function at 0x4bbaa0
Capabilities:
Hash data using fnv

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc1f4
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
movabs rcx, 0xcbf29ce484222325
jmp 0x4bbacd
lea rax, [rdx + 0x10]
dec rbx
mov rcx, rsi
test rbx, rbx
jle 0x4bbd51
mov rdx, rax
mov rsi, qword [rax]
nop dword [rax]
test rsi, rsi
je 0x4bbd7d
mov edi, dword [rsi + 0x10]
shr edi, 1
mov r8, qword [rax + 8]
and edi, 0x3f
lea rax, [0x0067c3c0]
jmp qword [rax + rdi*8]
mov rax, rcx
add rsp, 0x10
pop rbp
ret
nop dword [rax]
call fcn.004bc400
call fcn.00455c40
mov rbx, rax
lea rax, [0x006045c0]
call fcn.00459de0
inc rax
nop dword [rax]
cmp rax, r8
jge 0x4bbdae
mov r9, qword [rsi + rax*8]
xor r10d, r10d
jmp 0x4bbde3
lea rdi, [0x00604640]
mov rsi, rcx
movabs rcx, 0x100000001b3
jmp 0x4bbac3
movzx r11d, r9b
xor rcx, r11
inc r10
shr r9, 8
movabs r11, 0x100000001b3
imul rcx, r11
cmp r10, 8
jl 0x4bbdc7
jmp 0x4bbd99
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.0045ece0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.004bbaa0

Function at 0x4bc380
Capabilities:
Hash data using fnv

Disassembly:
test byte [rax], al
mov rcx, rbx
and ebx, 0x7f
shl rbx, 5
lea rdx, [rax + rbx]
xor eax, eax
jmp 0x4bc397
inc rax
cmp rax, 4
jge 0x4bc3af
lea rbx, [rdx + rax*8]
mov rbx, qword [rbx]
cmp rbx, rcx
jne 0x4bc394
mov eax, 1
ret
xor eax, eax
movabs rbx, 0xcbf29ce484222325
jmp 0x4bc3c0
inc rax
cmp rax, 4
jge 0x4bc3ce
mov rsi, qword [rdx + rax*8]
xor edi, edi
jmp 0x4bc3f7
and ebx, 3
lea rdx, [rdx + rbx*8]
xchg qword [rdx], rcx
xor eax, eax
ret
movzx r8d, sil
xor rbx, r8
inc rdi
shr rsi, 8
movabs r8, 0x100000001b3
imul rbx, r8
cmp rdi, 8
jl 0x4bc3db
jmp 0x4bc3bd

Function at 0x4bd260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd34a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9164690361916e48
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20bc8a53dda8ef5c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xacbec961746e79a9
mov qword [rsp + 0x40], rdx
movabs rdx, 0x700020417080a10
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe150b15090d0b0c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe0c0c020b160d0e
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4bd2ed
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x4bd31a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4bd33d
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x4bd2d0
jmp 0x4bd331
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460fc0
mov eax, edi
mov ecx, 0x18
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004bd260
Function at 0x4be8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be9f8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x426469ec89a05d73
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x8f746170426469ec
mov qword [rsp + 0x50], rdx
movabs rdx, 0xef8879f326f3e665
mov qword [rsp + 0x58], rdx
movabs rdx, 0x39b1f65728f28ce0
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc07c6c6e31aac12
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d00231b120f0f0b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x161a07070e12151c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x131418071d011902
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf13212222001e21
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1d0e000f2303101c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb2013071f1b0d04
mov qword [rsp + 0x44], rdx
xor eax, eax
jmp 0x4be995
movzx r9d, byte [rsp + rsi + 0x4c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x4c], dl
mov byte [rsp + rsi + 0x4c], r8b
add rax, 2
cmp rax, 0x30
jge 0x4be9c8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x4be9eb
movzx r8d, byte [rsp + rdi + 0x4c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
nop
cmp rsi, 0x24
jb 0x4be97b
jmp 0x4be9df
xor eax, eax
lea rbx, [rsp + 0x4c]
mov ecx, 0x24
call fcn.0045b720
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00460fc0
mov eax, edi
mov ecx, 0x24
call fcn.00460fc0
nop
call fcn.0045ece0
nop dword [rax]
jmp fcn.004be8c0

Function at 0x4c17c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c18f8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xb167c1ee65bd339d
mov qword [rsp + 0x4b], rdx
movabs rdx, 0xc76500ed9db167c1
mov qword [rsp + 0x50], rdx
movabs rdx, 0xaa36465740a04b1
mov qword [rsp + 0x58], rdx
movabs rdx, 0x9e65f86e1e676371
mov qword [rsp + 0x60], rdx
movabs rdx, 0x566d69396c67505
mov qword [rsp + 0x68], rdx
movabs rdx, 0x22210e2407171c00
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1813141508010c1a
mov qword [rsp + 0x27], rdx
movabs rdx, 0x240f150d18131415
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x409211a24170d0d
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1d020a091f081f05
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xc09201302040e1f
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x4c1898
movzx r9d, byte [rsp + rsi + 0x4b]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x4b], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x4b], dl
add rax, 2
cmp rax, 0x2c
jge 0x4c18c8
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4c18eb
movzx r8d, byte [rsp + rdi + 0x4b]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x25
jb 0x4c187b
jmp 0x4c18df
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.0045b720
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00460fc0
mov eax, edi
mov ecx, 0x25
call fcn.00460fc0
nop
call fcn.0045ece0
nop dword [rax]
jmp fcn.004c17c0