joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5a1020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a10dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x386433cf3956b849
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x64cf
movabs rdx, 0x803050507010703
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x504
xor eax, eax
jmp 0x5a1080
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x5a10ad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5a10d0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x5a1062
jmp 0x5a10c4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460fc0
mov eax, edi
mov ecx, 0xa
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.005a1020

Function at 0x5a1100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a11e6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4a673e6765574d6f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x69695e766d704a67
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7040d0708000701
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90a07040d070800
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x607070501000b0d
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x5a1180
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x5a11b2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5a11d7
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0xe
jb 0x5a1162
jmp 0x5a11cb
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460fc0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005a1100
Function at 0x5a3400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a351d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x720bda27043133ee
mov qword [rsp + 0x42], rdx
movabs rdx, 0xea16e744eee33e4c
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x3007346369ecea16
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6eb869623528506f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x40e140203051c0d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0b1c040e1402
mov qword [rsp + 0x22], rdx
movabs rdx, 0x81706100f13181c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x19150d0906130a03
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1a04000306010210
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x5a34c0
movzx r9d, byte [rsp + rsi + 0x42]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x42], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x42], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x5a34ed
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x5a3510
movzx r8d, byte [rsp + rdi + 0x42]
sub r8d, edx
cmp rsi, 0x1e
jb 0x5a349d
jmp 0x5a3504
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.0045b720
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1e
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.005a3400

Function at 0x5a3540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a362c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x723e53152939c735
mov qword [rsp + 0x31], rdx
movabs rdx, 0x63564cbb404b3b72
mov qword [rsp + 0x38], rdx
movabs rdx, 0x574275f461575335
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0615040d150d01
mov qword [rsp + 0x19], rdx
movabs rdx, 0x40903151111030b
mov qword [rsp + 0x21], rdx
movabs rdx, 0x15080b020f0f13
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x5a35ca
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x18
jge 0x5a35fc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5a361f
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0x17
jb 0x5a35b0
jmp 0x5a3613
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00460fc0
mov eax, edi
mov ecx, 0x17
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005a3540
Function at 0x5a40c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a4187
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2f5861647e686a52
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x7b6d4b2f
movabs rdx, 0x707060605040706
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2010603030a0709
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x5a4128
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x10
jge 0x5a4157
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x5a417a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x5a410b
jmp 0x5a416e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460fc0
mov eax, edi
mov ecx, 0xb
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005a40c0

Function at 0x5a51a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a526c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6fb874fc4eb26518
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x666c5dbc
movabs rdx, 0x906040306090200
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x302030608090409
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x5a5205
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x5a523c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x5a525f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
cmp rsi, 0xc
jb 0x5a51eb
jmp 0x5a5253
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460fc0
mov eax, edi
mov ecx, 0xc
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005a51a0
Function at 0x5a5280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a535d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x572b4e6e4a3e1b4e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x573f482e60491d38
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe080e06030d090c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe07060b09090e08
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20e000203050105
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x5a5300
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x29]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x5a532d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5a5350
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x5a52e2
jmp 0x5a5344
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460fc0
mov eax, edi
mov ecx, 0x10
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.005a5280

Function at 0x5a5f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a606c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x72a463b7d024ff53
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf0cb1d65bd0c0006
mov qword [rsp + 0x44], rdx
movabs rdx, 0xfc101920f0cb1d65
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa9f569226e27eb72
mov qword [rsp + 0x50], rdx
movabs rdx, 0x209030d190d1816
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0b040a060d0204
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1a011b080a121011
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe150208130d030f
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x5a6008
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x20
jge 0x5a603c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x5a605f
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0x1c
jb 0x5a5fee
jmp 0x5a6053
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1c
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005a5f60
Function at 0x5ab520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ab61b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e652fbf74183520
mov qword [rsp + 0x34], rdx
movabs rdx, 0x26edd9536e652fbf
mov qword [rsp + 0x38], rdx
movabs rdx, 0xfbc6d2f4ddc834fb
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0f04130a120f0e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9110402120a0c0f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x130e010b09110402
mov qword [rsp + 0x24], rdx
movabs rdx, 0x100011090f050d0d
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x5ab5b9
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5ab5eb
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5ab60e
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 0x14
jb 0x5ab59f
jmp 0x5ab602
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460fc0
mov eax, edi
mov ecx, 0x14
call fcn.00460fc0
nop
nop dword [rax + rax]
call fcn.0045ece0
jmp fcn.005ab520

Function at 0x5ab640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ab748
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x240965567487f2e4
mov qword [rsp + 0x38], rdx
movabs rdx, 0xed98fc04654379ed
mov qword [rsp + 0x40], rdx
movabs rdx, 0xedde93c0fe1c6371
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7905696c6ff606f5
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe01120210020700
mov qword [rsp + 0x18], rdx
movabs rdx, 0x161a0f08190d1415
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1318001818190c02
mov qword [rsp + 0x28], rdx
movabs rdx, 0x614010c101e1717
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5ab6eb
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 - 0x74]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 - 0x74]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
cmp rax, 0x20
jge 0x5ab718
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x5ab73b
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x20
jb 0x5ab6ce
jmp 0x5ab72f
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x20
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00460fc0
mov eax, edi
mov ecx, 0x20
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005ab640
Function at 0x5ad4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ad5b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x747000640d74bd31
mov qword [rsp + 0x29], rdx
movabs rdx, 0x6f66cf183a8c6574
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90c01000909090c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9030b050a0a0300
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x5ad54c
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2f]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x5ad57e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5ad5a5
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2f]
cmp rsi, 0xf
jb 0x5ad532
jmp 0x5ad595
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00460fc0
mov eax, edi
mov ecx, 0xf
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005ad4e0

Function at 0x5ad6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ad798
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3f31026c45646441
mov qword [rsp + 0x31], rdx
movabs rdx, 0x5d723b5c63654c3f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0b060603030706
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30c05030b0b0606
mov qword [rsp + 0x21], rdx
movabs rdx, 0xb0e080508070c03
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x5ad738
movzx r9d, byte [rsp + rsi + 0x31]
add edx, r9d
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x14
jge 0x5ad768
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5ad78b
movzx r8d, byte [rsp + rdi + 0x31]
add r8d, edx
nop dword [rax]
cmp rsi, 0xf
jb 0x5ad722
jmp 0x5ad77f
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460fc0
mov eax, edi
mov ecx, 0xf
call fcn.00460fc0
nop
call fcn.0045ece0
nop dword [rax]
jmp fcn.005ad6c0
Function at 0x5af500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5af5ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6944e2d8616572de
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xbc6a6944e2d86165
mov qword [rsp + 0x30], rdx
movabs rdx, 0x57677b69487061e3
mov qword [rsp + 0x38], rdx
movabs rdx, 0x405000906080a0d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x608040500090608
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x40a04040f0a040a
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x5af58d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0x6c]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0x6c]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x5af5ba
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5af5dd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x5af570
jmp 0x5af5d1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460fc0
mov eax, edi
mov ecx, 0x12
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005af500

Function at 0x5b1e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b1f7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x358f6561113f3ef1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x32d8fd266530c72c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd96f68e070226e53
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4011209140e0702
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd00010a140c0006
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60d0d00010a140c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8080e1703120e0a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5b1f19
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1a
jge 0x5b1f4b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5b1f6e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0x18
jb 0x5b1eff
jmp 0x5b1f62
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460fc0
mov eax, edi
mov ecx, 0x18
call fcn.00460fc0
nop
nop dword [rax + rax]
call fcn.0045ece0
jmp fcn.005b1e80
Function at 0x5b2220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b22ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfbbcc974bd56cd08
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x57bfb6fb
movabs rdx, 0x705090105020201
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x709050603080900
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x5b2285
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x5b22bc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x5b22df
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0xb
jb 0x5b226b
jmp 0x5b22d3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460fc0
mov eax, edi
mov ecx, 0xb
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005b2220

Function at 0x5b2300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b241a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x1cf3290b6522caee
mov qword [rsp + 0x43], rdx
movabs rdx, 0xbc8c271f35196316
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x693174749dbc8c27
mov qword [rsp + 0x50], rdx
movabs rdx, 0xae73fbf6a31f8562
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa0618130e0b1c19
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1c0b0a13170f0a06
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1710191c00041c19
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x160804020217010a
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1a0a05070d0c080d
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x5b23b7
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x26
jge 0x5b23e9
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x5b240d
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 0x1d
jb 0x5b239d
jmp 0x5b2401
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.0045b720
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1d
call fcn.00460fc0
nop
call fcn.0045ece0
nop
jmp fcn.005b2300
Function at 0x5b50e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b51e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2d78144ebe6eed27
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6fbc7aa4e2bb7b56
mov qword [rsp + 0x47], rdx
movabs rdx, 0xea6fbc7aa4e2bb7b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x57b6b8c56f1874d1
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130a0e0109161509
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb15050910130b11
mov qword [rsp + 0x27], rdx
movabs rdx, 0x17170d0317170d03
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xd0111070b000c0b
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x5b518b
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 + 0x73]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 + 0x73]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x20
jge 0x5b51b8
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5b51db
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x5b516e
jmp 0x5b51cf
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460fc0
mov eax, edi
mov ecx, 0x19
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005b50e0

Function at 0x5b61e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b62c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c8f9168adeded21
mov qword [rsp + 0x30], rdx
movabs rdx, 0x73b46531fe75c039
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe030c060501080b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1080c0c09030e02
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50c020e08000309
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x5b6260
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x5b6292
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5b62b7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0x10
jb 0x5b6242
jmp 0x5b62ab
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460fc0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005b61e0
Function at 0x5b62e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b63c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8488568973527281
mov qword [rsp + 0x31], rdx
movabs rdx, 0x9f6c8046774f7484
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40e0404060a060e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x70c0c0c040e0404
mov qword [rsp + 0x21], rdx
movabs rdx, 0x80c08010200080a
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x5b6360
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1c]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x5b6392
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5b63b7
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1c]
cmp rsi, 0xf
jb 0x5b6342
jmp 0x5b63ab
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460fc0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005b62e0

Function at 0x5b6ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b6dac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7a7896807d557246
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x6c70617a
movabs rdx, 0x204040705070309
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6020a06020a0204
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x5b6d45
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x5b6d7c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x5b6d9f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0xb
jb 0x5b6d2b
jmp 0x5b6d93
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460fc0
mov eax, edi
mov ecx, 0xb
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005b6ce0