joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de583be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xbb20500fb2b37e82
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3020606070602
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1de583c33
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x31]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x1de583c6c
movzx edx, byte [rsp + rax + 0x10]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de583cb7
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de583cab
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x31]
cmp rbx, 8
jb 0x1de583c19
jmp 0x1de583c9f
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1de583c85
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1de583c79
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
nop
call fcn.1de49fa60
nop
int3

Function at 0x1de583d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x9ad766b9a90200fe
mov qword [rsp + 0x20], rdx
movabs rdx, 0x707030703000603
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1de583dd5
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x75]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x75]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x1de583e0a
movzx edx, byte [rsp + rax + 0x10]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de583e55
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de583e49
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x1de583db9
jmp 0x1de583e3d
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1de583e23
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1de583e17
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
nop dword [rax]
call fcn.1de49fa60
nop
int3
Function at 0x1de583e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de584057
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov qword [rsp + 0x78], 0
movabs rdx, 0x48fb2636fcc9aca5
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf9cb31f3e1cda27a
mov qword [rsp + 0x60], rdx
movzx edx, byte [rsp + 0x5e]
mov byte [rsp + 0x4f], dl
movzx r8d, byte [rsp + 0x5f]
mov byte [rsp + 0x4e], r8b
movzx r9d, byte [rsp + 0x61]
mov byte [rsp + 0x4d], r9b
movzx r10d, byte [rsp + 0x5a]
mov byte [rsp + 0x4c], r10b
movzx r11d, byte [rsp + 0x62]
mov byte [rsp + 0x4b], r11b
movzx r12d, byte [rsp + 0x5d]
mov byte [rsp + 0x4a], r12b
movzx r13d, byte [rsp + 0x63]
mov byte [rsp + 0x49], r13b
movzx r15d, byte [rsp + 0x5b]
mov byte [rsp + 0x48], r15b
movzx r13d, byte [rsp + 0x5c]
mov byte [rsp + 0x47], r13b
movzx r13d, byte [rsp + 0x64]
mov byte [rsp + 0x46], r13b
movzx r13d, byte [rsp + 0x66]
mov byte [rsp + 0x45], r13b
movzx r13d, byte [rsp + 0x67]
mov byte [rsp + 0x44], r13b
movzx r13d, byte [rsp + 0x59]
mov byte [rsp + 0x43], r13b
movzx r13d, byte [rsp + 0x60]
mov byte [rsp + 0x42], r13b
movzx r13d, byte [rsp + 0x65]
mov byte [rsp + 0x41], r13b
movzx r13d, byte [rsp + 0x58]
mov byte [rsp + 0x40], r13b
lea rax, [0x1de613a40]
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
mov esi, 8
call fcn.1de487660
movzx edx, byte [rsp + 0x4f]
movzx r8d, byte [rsp + 0x4e]
sub edx, r8d
mov byte [rax], dl
movzx edx, byte [rsp + 0x4d]
movzx r8d, byte [rsp + 0x4c]
sub edx, r8d
mov byte [rax + 1], dl
movzx edx, byte [rsp + 0x4b]
movzx r8d, byte [rsp + 0x4a]
sub edx, r8d
mov byte [rax + 2], dl
movzx edx, byte [rsp + 0x49]
movzx r8d, byte [rsp + 0x48]
sub edx, r8d
mov byte [rax + 3], dl
movzx edx, byte [rsp + 0x47]
movzx r8d, byte [rsp + 0x46]
sub edx, r8d
mov byte [rax + 4], dl
movzx edx, byte [rsp + 0x45]
movzx r8d, byte [rsp + 0x44]
xor edx, r8d
mov byte [rax + 5], dl
movzx edx, byte [rsp + 0x43]
movzx r8d, byte [rsp + 0x42]
sub edx, r8d
mov byte [rax + 6], dl
movzx edx, byte [rsp + 0x41]
movzx r8d, byte [rsp + 0x40]
sub edx, r8d
mov byte [rax + 7], dl
mov qword [rsp + 0x50], 0
lea rdx, [rbx + 8]
xor ecx, ecx
jmp 0x1de584024
mov byte [rsp + rcx + 0x50], bl
inc rcx
cmp rcx, rdx
jge 0x1de584035
movzx ebx, byte [rax + rcx]
cmp rcx, 8
jb 0x1de58401d
jmp 0x1de584049
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov rax, rcx
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de583e80
Function at 0x1de584b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x944948a6c5827ef7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x200070306070101
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x301
xor eax, eax
nop
jmp 0x1de584ba0
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x1de584bd9
movzx edx, byte [rsp + rax + 0x26]
lea rbx, [rax + 1]
cmp rbx, 0xa
jae 0x1de584c25
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de584c18
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x29]
cmp rbx, 8
jb 0x1de584b82
jmp 0x1de584c0c
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1de584bf2
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1de584be6
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xa
call fcn.1de49fa60
nop
int3

Function at 0x1de585860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x98085855f3c85741
mov qword [rsp + 0x20], rdx
movabs rdx, 0x707050202010200
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1de5858b3
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x1de5858ec
movzx edx, byte [rsp + rax + 0x10]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de585937
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de58592b
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x43]
cmp rbx, 8
jb 0x1de585899
jmp 0x1de58591f
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1de585905
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1de5858f9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
nop
call fcn.1de49fa60
nop
int3
Function at 0x1de585cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de585e97
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov qword [rsp + 0x78], 0
movabs rdx, 0x4a8a1e0e035d367e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x95d13e1fc9594cf9
mov qword [rsp + 0x60], rdx
movzx edx, byte [rsp + 0x65]
mov byte [rsp + 0x4f], dl
movzx r8d, byte [rsp + 0x5e]
mov byte [rsp + 0x4e], r8b
movzx r9d, byte [rsp + 0x64]
mov byte [rsp + 0x4d], r9b
movzx r10d, byte [rsp + 0x63]
mov byte [rsp + 0x4c], r10b
movzx r11d, byte [rsp + 0x58]
mov byte [rsp + 0x4b], r11b
movzx r12d, byte [rsp + 0x62]
mov byte [rsp + 0x4a], r12b
movzx r13d, byte [rsp + 0x66]
mov byte [rsp + 0x49], r13b
movzx r15d, byte [rsp + 0x5d]
mov byte [rsp + 0x48], r15b
movzx r13d, byte [rsp + 0x67]
mov byte [rsp + 0x47], r13b
movzx r13d, byte [rsp + 0x5b]
mov byte [rsp + 0x46], r13b
movzx r13d, byte [rsp + 0x5f]
mov byte [rsp + 0x45], r13b
movzx r13d, byte [rsp + 0x60]
mov byte [rsp + 0x44], r13b
movzx r13d, byte [rsp + 0x5c]
mov byte [rsp + 0x43], r13b
movzx r13d, byte [rsp + 0x59]
mov byte [rsp + 0x42], r13b
movzx r13d, byte [rsp + 0x61]
mov byte [rsp + 0x41], r13b
movzx r13d, byte [rsp + 0x5a]
mov byte [rsp + 0x40], r13b
lea rax, [0x1de613a40]
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
mov esi, 8
call fcn.1de487660
movzx edx, byte [rsp + 0x4f]
movzx r8d, byte [rsp + 0x4e]
xor edx, r8d
mov byte [rax], dl
movzx edx, byte [rsp + 0x4d]
movzx r8d, byte [rsp + 0x4c]
sub edx, r8d
mov byte [rax + 1], dl
movzx edx, byte [rsp + 0x4b]
movzx r8d, byte [rsp + 0x4a]
add edx, r8d
mov byte [rax + 2], dl
movzx edx, byte [rsp + 0x49]
movzx r8d, byte [rsp + 0x48]
sub edx, r8d
mov byte [rax + 3], dl
movzx edx, byte [rsp + 0x47]
movzx r8d, byte [rsp + 0x46]
add edx, r8d
mov byte [rax + 4], dl
movzx edx, byte [rsp + 0x45]
movzx r8d, byte [rsp + 0x44]
sub edx, r8d
mov byte [rax + 5], dl
movzx edx, byte [rsp + 0x43]
movzx r8d, byte [rsp + 0x42]
sub edx, r8d
mov byte [rax + 6], dl
movzx edx, byte [rsp + 0x41]
movzx r8d, byte [rsp + 0x40]
add edx, r8d
mov byte [rax + 7], dl
mov qword [rsp + 0x50], 0
lea rdx, [rbx + 8]
xor ecx, ecx
jmp 0x1de585e64
mov byte [rsp + rcx + 0x50], bl
inc rcx
cmp rcx, rdx
jge 0x1de585e75
movzx ebx, byte [rax + rcx]
cmp rcx, 8
jb 0x1de585e5d
jmp 0x1de585e89
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov rax, rcx
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de585cc0
Function at 0x1de586400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xf0ec65de10af618b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4030406000106
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x604
xor eax, eax
nop
jmp 0x1de586460
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x4e]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x1de586495
movzx edx, byte [rsp + rax + 0x26]
lea rbx, [rax + 1]
cmp rbx, 0xa
jae 0x1de5864e5
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de5864d4
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x1de586442
jmp 0x1de5864c8
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1de5864ae
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1de5864a2
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xa
call fcn.1de49fa60
nop
int3

Function at 0x1de586a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xc0b1c15c2e0520b9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x405040704040205
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x305
xor eax, eax
nop
jmp 0x1de586ab8
movzx r8d, byte [rsp + rbx + 0x1e]
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x1de586aed
movzx edx, byte [rsp + rax + 0x26]
lea rbx, [rax + 1]
cmp rbx, 0xa
jae 0x1de586b39
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de586b2d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, edx
cmp rbx, 8
jb 0x1de586aa2
jmp 0x1de586b21
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1de586b06
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1de586afa
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
nop
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xa
call fcn.1de49fa60
nop
int3
Function at 0x1de586ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de586e77
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov qword [rsp + 0x78], 0
movabs rdx, 0x747ae697329afcd1
mov qword [rsp + 0x58], rdx
movabs rdx, 0x891c1117e8a9ad66
mov qword [rsp + 0x60], rdx
movzx edx, byte [rsp + 0x5b]
mov byte [rsp + 0x4f], dl
movzx r8d, byte [rsp + 0x67]
mov byte [rsp + 0x4e], r8b
movzx r9d, byte [rsp + 0x61]
mov byte [rsp + 0x4d], r9b
movzx r10d, byte [rsp + 0x59]
mov byte [rsp + 0x4c], r10b
movzx r11d, byte [rsp + 0x5a]
mov byte [rsp + 0x4b], r11b
movzx r12d, byte [rsp + 0x5f]
mov byte [rsp + 0x4a], r12b
movzx r13d, byte [rsp + 0x5c]
mov byte [rsp + 0x49], r13b
movzx r15d, byte [rsp + 0x64]
mov byte [rsp + 0x48], r15b
movzx r13d, byte [rsp + 0x66]
mov byte [rsp + 0x47], r13b
movzx r13d, byte [rsp + 0x62]
mov byte [rsp + 0x46], r13b
movzx r13d, byte [rsp + 0x63]
mov byte [rsp + 0x45], r13b
movzx r13d, byte [rsp + 0x65]
mov byte [rsp + 0x44], r13b
movzx r13d, byte [rsp + 0x5d]
mov byte [rsp + 0x43], r13b
movzx r13d, byte [rsp + 0x5e]
mov byte [rsp + 0x42], r13b
movzx r13d, byte [rsp + 0x60]
mov byte [rsp + 0x41], r13b
movzx r13d, byte [rsp + 0x58]
mov byte [rsp + 0x40], r13b
lea rax, [0x1de613a40]
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
mov esi, 8
call fcn.1de487660
movzx edx, byte [rsp + 0x4f]
movzx r8d, byte [rsp + 0x4e]
xor edx, r8d
mov byte [rax], dl
movzx edx, byte [rsp + 0x4d]
movzx r8d, byte [rsp + 0x4c]
sub edx, r8d
mov byte [rax + 1], dl
movzx edx, byte [rsp + 0x4b]
movzx r8d, byte [rsp + 0x4a]
add edx, r8d
mov byte [rax + 2], dl
movzx edx, byte [rsp + 0x49]
movzx r8d, byte [rsp + 0x48]
add edx, r8d
mov byte [rax + 3], dl
movzx edx, byte [rsp + 0x47]
movzx r8d, byte [rsp + 0x46]
sub edx, r8d
mov byte [rax + 4], dl
movzx edx, byte [rsp + 0x45]
movzx r8d, byte [rsp + 0x44]
sub edx, r8d
mov byte [rax + 5], dl
movzx edx, byte [rsp + 0x43]
movzx r8d, byte [rsp + 0x42]
sub edx, r8d
mov byte [rax + 6], dl
movzx edx, byte [rsp + 0x41]
movzx r8d, byte [rsp + 0x40]
sub edx, r8d
mov byte [rax + 7], dl
mov qword [rsp + 0x50], 0
lea rdx, [rbx + 8]
xor ecx, ecx
jmp 0x1de586e44
mov byte [rsp + rcx + 0x50], bl
inc rcx
cmp rcx, rdx
jge 0x1de586e55
movzx ebx, byte [rax + rcx]
cmp rcx, 8
jb 0x1de586e3d
jmp 0x1de586e69
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov rax, rcx
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de586ca0
Function at 0x1de587320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x96c5991dd2305791
mov qword [rsp + 0x20], rdx
movabs rdx, 0x101010204020305
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1de587375
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x1a]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x1de5873aa
movzx edx, byte [rsp + rax + 0x10]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de5873f5
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de5873e9
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x1de587359
jmp 0x1de5873dd
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1de5873c3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1de5873b7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
nop dword [rax]
call fcn.1de49fa60
nop
int3
Function at 0x1de587420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5875f7
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov qword [rsp + 0x78], 0
movabs rdx, 0x36136774d99150c3
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1725191922005036
mov qword [rsp + 0x60], rdx
movzx edx, byte [rsp + 0x5a]
mov byte [rsp + 0x4f], dl
movzx r8d, byte [rsp + 0x62]
mov byte [rsp + 0x4e], r8b
movzx r9d, byte [rsp + 0x5d]
mov byte [rsp + 0x4d], r9b
movzx r10d, byte [rsp + 0x67]
mov byte [rsp + 0x4c], r10b
movzx r11d, byte [rsp + 0x59]
mov byte [rsp + 0x4b], r11b
movzx r12d, byte [rsp + 0x5b]
mov byte [rsp + 0x4a], r12b
movzx r13d, byte [rsp + 0x60]
mov byte [rsp + 0x49], r13b
movzx r15d, byte [rsp + 0x64]
mov byte [rsp + 0x48], r15b
movzx r13d, byte [rsp + 0x63]
mov byte [rsp + 0x47], r13b
movzx r13d, byte [rsp + 0x61]
mov byte [rsp + 0x46], r13b
movzx r13d, byte [rsp + 0x5f]
mov byte [rsp + 0x45], r13b
movzx r13d, byte [rsp + 0x65]
mov byte [rsp + 0x44], r13b
movzx r13d, byte [rsp + 0x58]
mov byte [rsp + 0x43], r13b
movzx r13d, byte [rsp + 0x5e]
mov byte [rsp + 0x42], r13b
movzx r13d, byte [rsp + 0x5c]
mov byte [rsp + 0x41], r13b
movzx r13d, byte [rsp + 0x66]
mov byte [rsp + 0x40], r13b
lea rax, [0x1de613a40]
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
mov esi, 8
call fcn.1de487660
movzx edx, byte [rsp + 0x4f]
movzx r8d, byte [rsp + 0x4e]
sub edx, r8d
mov byte [rax], dl
movzx edx, byte [rsp + 0x4d]
movzx r8d, byte [rsp + 0x4c]
add edx, r8d
mov byte [rax + 1], dl
movzx edx, byte [rsp + 0x4b]
movzx r8d, byte [rsp + 0x4a]
sub edx, r8d
mov byte [rax + 2], dl
movzx edx, byte [rsp + 0x49]
movzx r8d, byte [rsp + 0x48]
sub edx, r8d
mov byte [rax + 3], dl
movzx edx, byte [rsp + 0x47]
movzx r8d, byte [rsp + 0x46]
sub edx, r8d
mov byte [rax + 4], dl
movzx edx, byte [rsp + 0x45]
movzx r8d, byte [rsp + 0x44]
sub edx, r8d
mov byte [rax + 5], dl
movzx edx, byte [rsp + 0x43]
movzx r8d, byte [rsp + 0x42]
xor edx, r8d
mov byte [rax + 6], dl
movzx edx, byte [rsp + 0x41]
movzx r8d, byte [rsp + 0x40]
add edx, r8d
mov byte [rax + 7], dl
mov qword [rsp + 0x50], 0
lea rdx, [rbx + 8]
xor ecx, ecx
jmp 0x1de5875c4
mov byte [rsp + rcx + 0x50], bl
inc rcx
cmp rcx, rdx
jge 0x1de5875d5
movzx ebx, byte [rax + rcx]
cmp rcx, 8
jb 0x1de5875bd
jmp 0x1de5875e9
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov rax, rcx
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de587420
Function at 0x1de587d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xb927bec10484ec1e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x604050401060701
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1000403
xor eax, eax
nop
jmp 0x1de587de0
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x4e]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x1de587e15
movzx edx, byte [rsp + rax + 0x24]
lea rbx, [rax + 1]
cmp rbx, 0xc
jae 0x1de587e65
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de587e54
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x1de587dc2
jmp 0x1de587e48
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x1de587e2e
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x1de587e22
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xc
call fcn.1de49fa60
nop
int3

Function at 0x1de587e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de587f7f
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xcfb33193c667e243
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xd2968425
movabs rdx, 0x9010a0807080b05
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0b09010a080708
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9060b0303010407
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x1de587f00
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x1de587f3c
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x1de587f71
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1de587f65
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0xc
jb 0x1de587ee2
jmp 0x1de587f57
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xc
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x12
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de587e80
Function at 0x1de588ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de588bd3
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe933b0e1aa726525
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x9bad64a5
movabs rdx, 0x8050b0705000403
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8070b0a03080805
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de588b4b
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de588b8d
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0xe
jae 0x1de588bc5
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1de588bb4
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0xc
jb 0x1de588b31
jmp 0x1de588ba8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de588ae0

Function at 0x1de588be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de588cd3
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5f6b4b6f2032e46d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x426c185f6b4b6f20
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2080708050a0307
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7080801
xor eax, eax
jmp 0x1de588c4b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x1de588c8d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0xc
jae 0x1de588cc5
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1de588cb4
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0xb
jb 0x1de588c31
jmp 0x1de588ca8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xb
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de588be0