joyce8/EMBER2024-capa huggingface dataset:
Function at 0x56d300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56d3c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x975e708e738c8169
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x65
movabs rdx, 0x201070707040508
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x600
xor eax, eax
nop
jmp 0x56d360
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x29]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x56d392
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x56d3b7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x29]
cmp rsi, 9
jb 0x56d342
jmp 0x56d3ab
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046d060
mov eax, edi
mov ecx, 9
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0056d300

Function at 0x56d3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56d4a6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4eb92f1afd336c43
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xff30
movabs rdx, 0x504020402030803
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x9090609
xor eax, eax
jmp 0x56d440
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x56d472
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x56d497
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 0xa
jb 0x56d423
jmp 0x56d48b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0046d060
mov eax, edi
mov ecx, 0xa
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0056d3e0

Function at 0x56d720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56d7ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x275938732e303831
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x44423227
movabs rdx, 0x600010607010801
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x902000305050600
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x56d785
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 8]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x56d7bc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x56d7df
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 8]
cmp rsi, 0xb
jb 0x56d76b
jmp 0x56d7d3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046d060
mov eax, edi
mov ecx, 0xb
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0056d720
Function at 0x56d800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56d8b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x593f5b19db611f57
mov qword [rsp + 0x28], rdx
movabs rdx, 0x605010005030401
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x4050406
xor eax, eax
jmp 0x56d856
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xc
jge 0x56d888
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x56d8ab
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 8
jb 0x56d83c
jmp 0x56d89f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046d060
mov eax, edi
mov ecx, 8
call fcn.0046d060
nop
call fcn.0046ad80
nop dword [rax]
jmp fcn.0056d800

Function at 0x570d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x570e32
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x54643f03f4766e69
mov qword [rsp + 0x28], rdx
movabs rdx, 0x516d61442d4e4e64
mov qword [rsp + 0x30], rdx
movabs rdx, 0x309050c0c0a0a05
mov qword [rsp + 0x18], rdx
movabs rdx, 0x40f040b07090a03
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x570dcc
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 2]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x570dfe
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x570e25
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 2]
cmp rsi, 0x10
jb 0x570db2
jmp 0x570e15
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.0046d060
mov eax, edi
mov ecx, 0x10
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00570d60

Function at 0x574b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574c1d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf6dcf06f6879f541
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x6f
movabs rdx, 0x505080502050606
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x701
xor eax, eax
nop
jmp 0x574bc0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x574bed
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x574c10
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x574ba2
jmp 0x574c04
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046d060
mov eax, edi
mov ecx, 9
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.00574b60
Function at 0x576de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x576eb8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xeb3695fd3729333b
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xbb6337f9
movabs rdx, 0x802030904010b08
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb05080203090401
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20607060b020001
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x576e54
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2f]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x576e88
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x576eab
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2f]
nop
cmp rsi, 0xc
jb 0x576e3a
jmp 0x576e9f
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0046d060
mov eax, edi
mov ecx, 0xc
call fcn.0046d060
nop
call fcn.0046ad80
nop dword [rax]
jmp fcn.00576de0

Function at 0x577820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577928
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6d9c819646b0619c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x449e6cb7e1ad9992
mov qword [rsp + 0x46], rdx
movabs rdx, 0x806d449e6cb7e1ad
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa867acf973f52120
mov qword [rsp + 0x50], rdx
movabs rdx, 0x50003091010080a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x131604080b160e09
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60004160e041111
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0217190b041402
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x5778cb
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x20
jge 0x5778f8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x57791b
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x5778ae
jmp 0x57790f
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00467060
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0046d060
mov eax, edi
mov ecx, 0x1a
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00577820
Function at 0x577940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577a3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x29b5692b5e999dd7
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf5e633d629b5692b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65ff266fdf73f22e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60d081211030303
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x120609010d040711
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9070b0a0b001206
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0407000c0f0200
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x5779d9
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x577a0b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x577a2e
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x14
jb 0x5779bf
jmp 0x577a22
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0046d060
mov eax, edi
mov ecx, 0x14
call fcn.0046d060
nop
nop dword [rax + rax]
call fcn.0046ad80
jmp fcn.00577940

Function at 0x577d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577dd8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x309e6e94c3be93ed
mov qword [rsp + 0x28], rdx
movabs rdx, 0x403020604020004
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x401
xor eax, eax
jmp 0x577d78
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x577da8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x577dcb
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x577d5b
jmp 0x577dbf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046d060
mov eax, edi
mov ecx, 8
call fcn.0046d060
nop
call fcn.0046ad80
nop dword [rax]
jmp fcn.00577d20
Function at 0x57d6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57d787
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2473757573876c6e
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x678e6f35
movabs rdx, 0x70206010a050a0b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa070b070a080702
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x57d728
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x57d757
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x57d77a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x57d70b
jmp 0x57d76e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0046d060
mov eax, edi
mov ecx, 0xc
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0057d6c0

Function at 0x5902e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5903dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xee65649e72c186d4
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x8cbe97fa20ee6564
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc920b683b2bb40dc
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc0e0d111408010b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x10208040d140e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1109110700010208
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xf12110e1001080a
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x590380
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x5903ad
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5903d0
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x59035f
jmp 0x5903c4
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0046d060
mov eax, edi
mov ecx, 0x15
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005902e0
Function at 0x590400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5904c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x704b6e064b54300d
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x65586970
movabs rdx, 0x203030009010000
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x9020406
xor eax, eax
jmp 0x590460
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x590492
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5904b7
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0xb
jb 0x590444
jmp 0x5904ab
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046d060
mov eax, edi
mov ecx, 0xb
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00590400

Function at 0x593c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x9276521beeacbea5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x504030304040506
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x593c8f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x22]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x593cba
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x593cf5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x593c73
jmp 0x593ce9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x593cd3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x593cc7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.0046d060
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.0046d060
nop
int3

Function at 0x594080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xb349ab5acdcf4ead
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5060206040705
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5940cd
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 1]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x5940fc
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x594137
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 1]
cmp rbx, 8
jb 0x5940b3
jmp 0x59412b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x594115
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x594109
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.0046d060
mov eax, esi
mov ecx, 8
nop
call fcn.0046d060
nop
int3
Function at 0x594820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x54847c2e364ce3ba
mov qword [rsp + 0x28], rdx
movabs rdx, 0x406010502060406
mov qword [rsp + 0x14], rdx
mov dword [rsp + 0x1c], 0x4040506
xor eax, eax
jmp 0x594877
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi - 0x64]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x5948a8
movzx edx, byte [rsp + rax + 0x14]
movzx ebx, byte [rsp + rax + 0x15]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5948e5
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x59485b
jmp 0x5948d7
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5948c1
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x5948b5
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3

Function at 0x59b900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x299b29cd7d1282a3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x502070205070707
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x59b94d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x59b97c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x59b9b7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x65]
cmp rbx, 8
jb 0x59b933
jmp 0x59b9ab
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x59b995
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x59b989
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.0046d060
mov eax, esi
mov ecx, 8
nop
call fcn.0046d060
nop
int3

Function at 0x59bd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xb5b5d19b5e6b68ac
mov qword [rsp + 0x20], rdx
movabs rdx, 0x106040106050106
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x59bd8d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 1]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x59bdbc
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x59bdf7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 1]
cmp rbx, 8
jb 0x59bd73
jmp 0x59bdeb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x59bdd5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x59bdc9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.0046d060
mov eax, esi
mov ecx, 8
nop
call fcn.0046d060
nop
int3
Function at 0x59da60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x6816a807814f24b6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x602040703010405
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x205
xor eax, eax
jmp 0x59dab6
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi + 0x25]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x59dae2
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x59db25
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
cmp rbx, 8
jb 0x59da9a
nop
jmp 0x59db16
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x59db00
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x59daef
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3

Function at 0x59de80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xf00f46ded28fb481
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4060307050302
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x600
xor eax, eax
jmp 0x59ded4
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x59df08
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x59df45
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x5a]
nop dword [rax + rax]
cmp rbx, 8
jb 0x59deba
jmp 0x59df37
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x59df21
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x59df15
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3
Function at 0x59df60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x9c94c1b6eb474420
mov qword [rsp + 0x28], rdx
movabs rdx, 0x301070301070401
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x200
xor eax, eax
jmp 0x59dfb4
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x59dfe8
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x59e025
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x41]
nop dword [rax + rax]
cmp rbx, 8
jb 0x59df9a
jmp 0x59e017
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x59e001
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x59dff5
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3

Function at 0x59e600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x68b9454c4f9ab240
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5060305050000
mov qword [rsp + 0x14], rdx
mov dword [rsp + 0x1c], 0x6020604
xor eax, eax
jmp 0x59e657
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 - 0x43]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi - 0x43]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x59e688
movzx edx, byte [rsp + rax + 0x14]
movzx ebx, byte [rsp + rax + 0x15]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x59e6c5
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x59e63b
jmp 0x59e6b7
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x59e6a1
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x59e695
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3