joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5b23c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x13441ce83eebfba1
mov qword [rsp + 0x20], rdx
movabs rdx, 0x203000104050307
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5b2415
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x3b]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x3b]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x5b2442
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5b2486
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x5b23f9
nop
jmp 0x5b247a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5b2460
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5b244f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3

Function at 0x5b2720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x220951f779e938b8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x703010206030103
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x506
xor eax, eax
nop
jmp 0x5b2780
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5b27af
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5b27ee
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x1f]
cmp rbx, 8
jb 0x5b2762
jmp 0x5b27e2
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5b27c8
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5b27bc
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3
Function at 0x5b2aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x557beef1309012ce
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2020502010400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 6
xor eax, eax
nop
jmp 0x5b2b00
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5b2b2f
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5b2b6e
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x23]
cmp rbx, 8
jb 0x5b2ae2
jmp 0x5b2b62
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5b2b48
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5b2b3c
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3

Function at 0x5b3bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0x73447b0a9e38f125
mov qword [rsp + 0x18], rax
movabs rax, 0x6cef5fb9d58f7585
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1e]
movzx ecx, byte [rsp + 0x24]
sub eax, ecx
movzx ecx, byte [rsp + 0x26]
movzx edx, byte [rsp + 0x23]
movzx ebx, byte [rsp + 0x19]
movzx esi, byte [rsp + 0x22]
movzx edi, byte [rsp + 0x1c]
movzx r8d, byte [rsp + 0x27]
movzx r9d, byte [rsp + 0x21]
movzx r10d, byte [rsp + 0x1d]
movzx r11d, byte [rsp + 0x1f]
movzx r12d, byte [rsp + 0x18]
movzx r13d, byte [rsp + 0x1a]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x1b]
movzx r13d, byte [rsp + 0x20]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x25]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
xor ebx, esi
mov byte [rsp + 0x11], bl
lea eax, [r8 + rdi]
mov byte [rsp + 0x12], al
sub r9d, r10d
mov byte [rsp + 0x13], r9b
lea eax, [r12 + r11]
mov byte [rsp + 0x14], al
movzx eax, byte [rsp + 6]
add eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
add eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x5b3cc5
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x5b3cb9
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
Function at 0x5b3ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0x6609b68fefd70d39
mov qword [rsp + 0x18], rax
movabs rax, 0x5337487cb61eccc
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1c]
movzx ecx, byte [rsp + 0x21]
sub eax, ecx
movzx ecx, byte [rsp + 0x25]
movzx edx, byte [rsp + 0x23]
movzx ebx, byte [rsp + 0x26]
movzx esi, byte [rsp + 0x18]
movzx edi, byte [rsp + 0x1d]
movzx r8d, byte [rsp + 0x20]
movzx r9d, byte [rsp + 0x1b]
movzx r10d, byte [rsp + 0x1f]
movzx r11d, byte [rsp + 0x1a]
movzx r12d, byte [rsp + 0x24]
movzx r13d, byte [rsp + 0x22]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x27]
movzx r13d, byte [rsp + 0x19]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x1e]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
lea eax, [rsi + rbx]
mov byte [rsp + 0x11], al
lea eax, [r8 + rdi]
mov byte [rsp + 0x12], al
xor r9d, r10d
mov byte [rsp + 0x13], r9b
lea eax, [r12 + r11]
mov byte [rsp + 0x14], al
movzx eax, byte [rsp + 6]
sub eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
sub eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x5b3de6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x5b3dda
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret

Function at 0x5b3e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x7b57879fc979fe91
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x304020205040605
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x103
xor eax, eax
nop
jmp 0x5b3e80
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x44]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5b3eaf
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5b3eee
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x44]
cmp rbx, 8
jb 0x5b3e62
jmp 0x5b3ee2
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5b3ec8
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5b3ebc
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3
Function at 0x5b47c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xa434a0eb82b289ca
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7010100070702
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x605
xor eax, eax
nop
jmp 0x5b4820
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x7b]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x5b484b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5b488a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x5b4802
jmp 0x5b487e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5b4864
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5b4858
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3

Function at 0x5b8d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x865012b6a5dd9692
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x200050001040702
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6020601
xor eax, eax
nop
jmp 0x5b8d60
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x69]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x5b8d8b
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5b8dca
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x5b8d42
jmp 0x5b8dbe
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x5b8da4
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5b8d98
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3
Function at 0x5b9dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x12ec275879386154
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x407060104070600
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6070601
xor eax, eax
nop
jmp 0x5b9e20
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x5b9e4f
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5b9e8e
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x72]
cmp rbx, 8
jb 0x5b9e02
jmp 0x5b9e82
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x5b9e68
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5b9e5c
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3

Function at 0x5b9ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x5dddf43f09225a96
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x405020307040506
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x606
xor eax, eax
nop
jmp 0x5b9f00
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5b9f2f
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5b9f6e
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x5b]
cmp rbx, 8
jb 0x5b9ee2
jmp 0x5b9f62
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5b9f48
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5b9f3c
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3
Function at 0x5b9f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xba333342329b015
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6000705060607
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5b9fd5
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x47]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x5ba002
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5ba046
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x5b9fb9
nop
jmp 0x5ba03a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5ba020
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5ba00f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3

Function at 0x5ba060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x4bfa6e11fb318120
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x707030401060105
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x500
xor eax, eax
nop
jmp 0x5ba0c0
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5ba0ef
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5ba12e
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x16]
cmp rbx, 8
jb 0x5ba0a2
jmp 0x5ba122
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5ba108
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5ba0fc
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3
Function at 0x5ba880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x65798498dc0d8a7f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x206060402000105
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x500
xor eax, eax
nop
jmp 0x5ba8e0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x60]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x5ba90b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5ba94a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x5ba8c2
jmp 0x5ba93e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5ba924
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5ba918
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3

Function at 0x5bb160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x6bcf2f623452c2d3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x702070100040207
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x400
xor eax, eax
nop
jmp 0x5bb1c0
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5bb1ef
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5bb22e
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x2f]
cmp rbx, 8
jb 0x5bb1a2
jmp 0x5bb222
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5bb208
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5bb1fc
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3
Function at 0x5bb8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xc967c2ac052e1174
mov qword [rsp + 0x20], rdx
movabs rdx, 0x103020600000105
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5bb915
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x46]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x5bb942
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5bb986
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x5bb8f9
nop
jmp 0x5bb97a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5bb960
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5bb94f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3

Function at 0x5bd100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bd1dc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2e747b6f867a6574
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7667742e747b6f86
mov qword [rsp + 0x22], rdx
movabs rdx, 0x90a000309050808
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20502000508090a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5bd172
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x5bd1a8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5bd1cf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x13]
nop dword [rax]
cmp rsi, 0xb
jb 0x5bd158
jmp 0x5bd1c3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457d20
mov eax, edi
mov ecx, 0xb
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.005bd100
Function at 0x5bd640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bd71c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2ef1896c6cecc473
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc9f3642ef1896c6c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x502090605060209
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90a020102020502
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5bd6b2
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x5bd6e8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5bd70f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6c]
nop dword [rax]
cmp rsi, 0xb
jb 0x5bd698
jmp 0x5bd703
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457d20
mov eax, edi
mov ecx, 0xb
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.005bd640

Function at 0x5bd740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bd80b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7c2e87855c7b8975
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x4ca7
movabs rdx, 0x702030305080409
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1010503
xor eax, eax
jmp 0x5bd7a6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x5bd7d7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x5bd7fe
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x5bd789
jmp 0x5bd7f2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457d20
mov eax, edi
mov ecx, 0xa
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005bd740
Function at 0x5bdcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bdd8b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf564b86d790ffdbb
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xfb
movabs rdx, 0x503010207020802
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2020800
xor eax, eax
jmp 0x5bdd24
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x5bdd57
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x5bdd7e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x5bdd07
jmp 0x5bdd72
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457d20
mov eax, edi
mov ecx, 9
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005bdcc0

Function at 0x5bf400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bf512
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xf5efc4a6a203e8a0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc087a8ba2c58ebf2
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1169537cafbf1ea8
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa01030d070b0014
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100406010a01030d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0b021106090c12
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7060a0911010e08
mov qword [rsp + 0x48], rdx
movabs rdx, 0x21313170e05060f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5bf4b1
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x27]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x27]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x24
jge 0x5bf4de
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5bf505
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x5bf494
jmp 0x5bf4f9
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457d20
mov eax, edi
mov ecx, 0x18
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005bf400
Function at 0x5bfc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bfd08
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x9c2b1ccc6e37cf43
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf6b6ac729c2b1ccc
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57679cf66e31f75a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10050b0c02070b11
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50a070511060109
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb0c090d050a0705
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4110c100b090e11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5bfca2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x5bfccf
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5bfcfb
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x5bfc85
jmp 0x5bfcef
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457d20
mov eax, edi
mov ecx, 0x14
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005bfc00