joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de5679c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de567af3
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6508560861dcdbee
mov qword [rsp + 0x19], rdx
movabs rdx, 0x44def89c654cea63
mov qword [rsp + 0x21], rdx
movabs rdx, 0x4e44def89c654cea
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7265762ba27e6d53
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x14141214050d0b0d
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa040c0906050008
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x9130d150a0e0a04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2050104130d0600
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de567a6e
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x1de567aad
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x1e
jae 0x1de567ae5
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1de567ad4
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0x19
jb 0x1de567a54
jmp 0x1de567ac8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1e
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5679c0

Function at 0x1de5685a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de568693
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x71956530b41b6e73
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x60753a31
movabs rdx, 0x7060a06020a0003
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0701000b050706
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de56860b
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de56864d
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0xe
jae 0x1de568685
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1de568674
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0xc
jb 0x1de5685f1
jmp 0x1de568668
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5685a0
Function at 0x1de569980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de569a66
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
lea rax, [0x1de613d20]
nop
call fcn.1de44cd20
movabs rcx, 0xd00001d161454
mov qword [rax], rcx
mov dword [rax + 8], 0x580e0000
movabs rcx, 0x3000002030b02
mov qword [rsp + 0x12], rcx
movabs rcx, 0x60103010a000003
mov qword [rsp + 0x18], rcx
xor ecx, ecx
jmp 0x1de5699f2
movzx r9d, byte [rsi + rax]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x20]
mov byte [rax + rdi], dl
mov byte [rax + rsi], r8b
add rcx, 2
cmp rcx, 0xe
jge 0x1de569a2d
movzx edx, byte [rsp + rcx + 0x12]
lea rsi, [rcx + 1]
cmp rsi, 0xe
jae 0x1de569a57
movzx esi, byte [rsp + rcx + 0x13]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0xc
jae 0x1de569a4b
movzx r8d, byte [rdi + rax]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x20]
cmp rsi, 0xc
jb 0x1de5699db
jmp 0x1de569a3f
mov ebx, 0xc
mov rcx, rbx
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov eax, esi
mov ecx, 0xc
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xc
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
nop
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de569980

Function at 0x1de56d7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de56d8d3
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1ad11cc0c3ae696e
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xc0736f01
movabs rdx, 0x407020505010607
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x703020b05080407
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de56d84b
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de56d88d
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0xe
jae 0x1de56d8c5
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1de56d8b4
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4d]
cmp rsi, 0xc
jb 0x1de56d831
jmp 0x1de56d8a8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de56d7e0
Function at 0x1de573960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
mov dword [rsp + 0x28], 0
mov word [rsp + 0x2c], 0
mov dword [rsp + 0xc], 0x6848cab4
mov word [rsp + 0x10], 0xa353
mov dword [rsp + 0x12], 0x6848cab4
mov word [rsp + 0x16], 0xa253
xor eax, eax
jmp 0x1de5739b2
movzx ecx, byte [rsp + rax + 0xc]
movzx edx, byte [rsp + rax + 0x12]
xor edx, ecx
mov byte [rsp + rax + 0x12], dl
inc rax
cmp rax, 6
jl 0x1de57399f
mov dword [rsp + 6], 0
mov word [rsp + 0xa], 0
xor eax, eax
jmp 0x1de5739d7
movzx ecx, byte [rsp + rax + 0x12]
mov byte [rsp + rax + 6], cl
inc rax
cmp rax, 6
jl 0x1de5739cb
mov eax, dword [rsp + 6]
movzx ecx, word [rsp + 0xa]
mov dword [rsp + 0x28], eax
mov word [rsp + 0x2c], cx
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret

Function at 0x1de574100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x38], 0
mov word [rsp + 0x3c], 0
mov dword [rsp + 0x1a], 0xc2e3df00
mov word [rsp + 0x1e], 0xc5e4
movabs rdx, 0x405020102030505
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de574159
movzx r8d, byte [rsp + rbx + 0x1a]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rsi + 0x1a], dl
mov byte [rsp + rbx + 0x1a], dil
add rax, 2
cmp rax, 8
jge 0x1de574192
movzx edx, byte [rsp + rax + 0x20]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de5741eb
movzx ebx, byte [rsp + rax + 0x21]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 6
jae 0x1de5741df
movzx edi, byte [rsp + rsi + 0x1a]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x1a]
cmp rbx, 6
jb 0x1de57413f
jmp 0x1de5741d3
mov dword [rsp + 0x14], 0
mov word [rsp + 0x18], 0
xor eax, eax
jmp 0x1de5741b1
movzx ecx, byte [rsp + rax + 0x1a]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 6
jl 0x1de5741a5
mov eax, dword [rsp + 0x14]
movzx ecx, word [rsp + 0x18]
mov dword [rsp + 0x38], eax
mov word [rsp + 0x3c], cx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 6
call fcn.1de49fa60
mov eax, esi
mov ecx, 6
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
call fcn.1de49fa60
nop
int3

Function at 0x1de574c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de574d49
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1e], 0xb00475ad
mov dword [rsp + 0x22], 0x2020300
mov word [rsp + 0x26], 0x300
xor eax, eax
jmp 0x1de574cd0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 6
jge 0x1de574d08
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
nop
cmp rsi, 6
jae 0x1de574d3b
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 4
jae 0x1de574d2f
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 4
jb 0x1de574cb3
jmp 0x1de574d23
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 4
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 4
call fcn.1de49fa60
mov eax, edi
mov ecx, 4
call fcn.1de49fa60
mov rax, rsi
mov ecx, 6
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de574c80
Function at 0x1de574d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de574e7f
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x206caa95656ea271
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xdb6e74206caa9565
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6eb569a7daa0727f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0f04020e110002
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf110e080b010500
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa0f110e080b01
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0b110d0800020a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de574e02
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x1de574e39
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x1de574e71
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1de574e65
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x1de574de5
jmp 0x1de574e54
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x13
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1a
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de574d60

Function at 0x1de575260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de575335
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x19], 0x43315423
mov dword [rsp + 0x1c], 0x64653343
movabs rdx, 0x200010300020401
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de5752b8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 8
jge 0x1de5752ef
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de575327
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 7
jae 0x1de57531b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 7
jb 0x1de57529b
jmp 0x1de57530f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 7
nop dword [rax + rax]
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 7
call fcn.1de49fa60
mov eax, edi
mov ecx, 7
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de575260
Function at 0x1de575da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de575eab
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x617482960a67d9e3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9292617482960a67
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd36ceca895206eb5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30901050008110e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0f090a0d050f09
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0a090e040d0e08
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de575e33
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x15]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x15]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x1de575e6a
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x1de575e9d
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1de575e91
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x1de575e16
jmp 0x1de575e85
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x12
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x18
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de575da0
Function at 0x1de577f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de578117
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov qword [rsp + 0x78], 0
movabs rdx, 0xa402739608f8ce9a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x41c974bcc6032c42
mov qword [rsp + 0x60], rdx
movzx edx, byte [rsp + 0x67]
mov byte [rsp + 0x4f], dl
movzx r8d, byte [rsp + 0x64]
mov byte [rsp + 0x4e], r8b
movzx r9d, byte [rsp + 0x58]
mov byte [rsp + 0x4d], r9b
movzx r10d, byte [rsp + 0x5d]
mov byte [rsp + 0x4c], r10b
movzx r11d, byte [rsp + 0x60]
mov byte [rsp + 0x4b], r11b
movzx r12d, byte [rsp + 0x66]
mov byte [rsp + 0x4a], r12b
movzx r13d, byte [rsp + 0x59]
mov byte [rsp + 0x49], r13b
movzx r15d, byte [rsp + 0x5e]
mov byte [rsp + 0x48], r15b
movzx r13d, byte [rsp + 0x5a]
mov byte [rsp + 0x47], r13b
movzx r13d, byte [rsp + 0x5c]
mov byte [rsp + 0x46], r13b
movzx r13d, byte [rsp + 0x61]
mov byte [rsp + 0x45], r13b
movzx r13d, byte [rsp + 0x63]
mov byte [rsp + 0x44], r13b
movzx r13d, byte [rsp + 0x5b]
mov byte [rsp + 0x43], r13b
movzx r13d, byte [rsp + 0x65]
mov byte [rsp + 0x42], r13b
movzx r13d, byte [rsp + 0x62]
mov byte [rsp + 0x41], r13b
movzx r13d, byte [rsp + 0x5f]
mov byte [rsp + 0x40], r13b
lea rax, [0x1de613a40]
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
mov esi, 8
call fcn.1de487660
movzx edx, byte [rsp + 0x4f]
movzx r8d, byte [rsp + 0x4e]
sub edx, r8d
mov byte [rax], dl
movzx edx, byte [rsp + 0x4d]
movzx r8d, byte [rsp + 0x4c]
add edx, r8d
mov byte [rax + 1], dl
movzx edx, byte [rsp + 0x4b]
movzx r8d, byte [rsp + 0x4a]
sub edx, r8d
mov byte [rax + 2], dl
movzx edx, byte [rsp + 0x49]
movzx r8d, byte [rsp + 0x48]
add edx, r8d
mov byte [rax + 3], dl
movzx edx, byte [rsp + 0x47]
movzx r8d, byte [rsp + 0x46]
add edx, r8d
mov byte [rax + 4], dl
movzx edx, byte [rsp + 0x45]
movzx r8d, byte [rsp + 0x44]
sub edx, r8d
mov byte [rax + 5], dl
movzx edx, byte [rsp + 0x43]
movzx r8d, byte [rsp + 0x42]
xor edx, r8d
mov byte [rax + 6], dl
movzx edx, byte [rsp + 0x41]
movzx r8d, byte [rsp + 0x40]
add edx, r8d
mov byte [rax + 7], dl
mov qword [rsp + 0x50], 0
lea rdx, [rbx + 8]
xor ecx, ecx
jmp 0x1de5780e4
mov byte [rsp + rcx + 0x50], bl
inc rcx
cmp rcx, rdx
jge 0x1de5780f5
movzx ebx, byte [rax + rcx]
cmp rcx, 8
jb 0x1de5780dd
jmp 0x1de578109
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov rax, rcx
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de577f40
Function at 0x1de578540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x61659e87133763c3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x607000405030300
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1de578595
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x27]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x1de5785ca
movzx edx, byte [rsp + rax + 0x10]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de578615
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de578609
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x1de578579
jmp 0x1de5785fd
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1de5785e3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1de5785d7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
nop dword [rax]
call fcn.1de49fa60
nop
int3

Function at 0x1de578aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x7130d6a23e2c14
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x201000703030307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x405
xor eax, eax
nop
jmp 0x1de578b00
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x77]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x1de578b35
movzx edx, byte [rsp + rax + 0x26]
lea rbx, [rax + 1]
cmp rbx, 0xa
jae 0x1de578b85
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de578b74
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x1de578ae2
jmp 0x1de578b68
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1de578b4e
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1de578b42
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xa
call fcn.1de49fa60
nop
int3
Function at 0x1de578e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xdd3258492082ff88
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x203050603040403
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
nop
jmp 0x1de578ea0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x73]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x1de578ed5
movzx edx, byte [rsp + rax + 0x26]
lea rbx, [rax + 1]
cmp rbx, 0xa
jae 0x1de578f25
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de578f14
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x1de578e82
jmp 0x1de578f08
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1de578eee
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1de578ee2
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xa
call fcn.1de49fa60
nop
int3

Function at 0x1de5794a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x638dacf65fc511bc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x705060307040200
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 1
xor eax, eax
nop
jmp 0x1de579500
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x60]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x1de579539
movzx edx, byte [rsp + rax + 0x26]
lea rbx, [rax + 1]
cmp rbx, 0xa
jae 0x1de579585
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de579578
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x60]
cmp rbx, 8
jb 0x1de5794e2
jmp 0x1de57956c
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1de579552
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1de579546
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xa
call fcn.1de49fa60
nop
int3
Function at 0x1de579640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xd4fcd441556d2360
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x303000502030701
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1020307
xor eax, eax
nop
jmp 0x1de5796a0
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x1de5796d9
movzx edx, byte [rsp + rax + 0x24]
lea rbx, [rax + 1]
cmp rbx, 0xc
jae 0x1de579725
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de579718
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x23]
cmp rbx, 8
jb 0x1de579682
jmp 0x1de57970c
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x1de5796f2
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x1de5796e6
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xc
call fcn.1de49fa60
nop
int3

Function at 0x1de57a2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x8358dadb9e2c5e15
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x300020302020007
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4020005
xor eax, eax
nop
jmp 0x1de57a300
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x1a]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x1de57a335
movzx edx, byte [rsp + rax + 0x24]
lea rbx, [rax + 1]
cmp rbx, 0xc
jae 0x1de57a385
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57a374
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x1de57a2e2
jmp 0x1de57a368
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x1de57a34e
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x1de57a342
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xc
call fcn.1de49fa60
nop
int3