joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de57aba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x25ba17d978b4485a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2050103020502
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
nop
jmp 0x1de57ac00
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x1de57ac39
movzx edx, byte [rsp + rax + 0x26]
lea rbx, [rax + 1]
cmp rbx, 0xa
jae 0x1de57ac85
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57ac78
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x6a]
cmp rbx, 8
jb 0x1de57abe2
jmp 0x1de57ac6c
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1de57ac52
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1de57ac46
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xa
call fcn.1de49fa60
nop
int3

Function at 0x1de57aca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xc75ebfc0dff2d5d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x604020005070101
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x605
xor eax, eax
nop
jmp 0x1de57ad00
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x50]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x1de57ad35
movzx edx, byte [rsp + rax + 0x26]
lea rbx, [rax + 1]
cmp rbx, 0xa
jae 0x1de57ad85
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57ad74
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x1de57ace2
jmp 0x1de57ad68
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1de57ad4e
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1de57ad42
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xa
call fcn.1de49fa60
nop
int3
Function at 0x1de57ada0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x176a566cbfb05191
mov qword [rsp + 0x20], rdx
movabs rdx, 0x306030005070503
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1de57adf3
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x1de57ae2c
movzx edx, byte [rsp + rax + 0x10]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de57ae77
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57ae6b
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x17]
cmp rbx, 8
jb 0x1de57add9
jmp 0x1de57ae5f
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1de57ae45
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1de57ae39
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
nop
call fcn.1de49fa60
nop
int3

Function at 0x1de57aea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xf678d765fc78292d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6070201030201
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1050707
xor eax, eax
nop
jmp 0x1de57af00
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x1de57af39
movzx edx, byte [rsp + rax + 0x24]
lea rbx, [rax + 1]
cmp rbx, 0xc
jae 0x1de57af85
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57af78
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 3]
cmp rbx, 8
jb 0x1de57aee2
jmp 0x1de57af6c
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x1de57af52
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x1de57af46
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xc
call fcn.1de49fa60
nop
int3
Function at 0x1de57b380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xd8d9d34373434b43
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x200050500060106
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x70601
xor eax, eax
nop
jmp 0x1de57b3e0
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0xa]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x1de57b415
movzx edx, byte [rsp + rax + 0x24]
lea rbx, [rax + 1]
cmp rbx, 0xc
jae 0x1de57b465
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57b454
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x1de57b3c2
jmp 0x1de57b448
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x1de57b42e
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x1de57b422
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xc
call fcn.1de49fa60
nop
int3

Function at 0x1de57b680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xf69c141e9abdc05b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x102000605010405
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x301
xor eax, eax
nop
jmp 0x1de57b6e0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 2]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x1de57b715
movzx edx, byte [rsp + rax + 0x26]
lea rbx, [rax + 1]
cmp rbx, 0xa
jae 0x1de57b765
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57b754
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x1de57b6c2
jmp 0x1de57b748
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1de57b72e
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1de57b722
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xa
call fcn.1de49fa60
nop
int3
Function at 0x1de57b980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x690251a0b18244b7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x602070406060702
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1de57b9d3
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x1de57ba0c
movzx edx, byte [rsp + rax + 0x10]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de57ba57
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57ba4b
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x10]
cmp rbx, 8
jb 0x1de57b9b9
jmp 0x1de57ba3f
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1de57ba25
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1de57ba19
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
nop
call fcn.1de49fa60
nop
int3

Function at 0x1de57c140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x1271e52c81e373b1
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x500050204030302
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1070704
xor eax, eax
nop
jmp 0x1de57c1a0
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x10]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x1de57c1d5
movzx edx, byte [rsp + rax + 0x24]
lea rbx, [rax + 1]
cmp rbx, 0xc
jae 0x1de57c225
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57c214
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x1de57c182
jmp 0x1de57c208
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x1de57c1ee
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x1de57c1e2
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xc
call fcn.1de49fa60
nop
int3
Function at 0x1de57c380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xe5b92051acf47f00
mov qword [rsp + 0x20], rdx
movabs rdx, 0x307030701010003
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1de57c3d3
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x1de57c40c
movzx edx, byte [rsp + rax + 0x10]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de57c457
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57c44b
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x10]
cmp rbx, 8
jb 0x1de57c3b9
jmp 0x1de57c43f
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1de57c425
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1de57c419
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
nop
call fcn.1de49fa60
nop
int3

Function at 0x1de57d2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xbdce474d4d321dc
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x706000306060602
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1070003
xor eax, eax
nop
jmp 0x1de57d320
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x1de57d359
movzx edx, byte [rsp + rax + 0x24]
lea rbx, [rax + 1]
cmp rbx, 0xc
jae 0x1de57d3a5
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57d398
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x35]
cmp rbx, 8
jb 0x1de57d302
jmp 0x1de57d38c
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x1de57d372
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x1de57d366
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xc
call fcn.1de49fa60
nop
int3
Function at 0x1de57d920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x9a44aadec29f30dd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7070103000203
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1de57d975
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x2f]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x1de57d9aa
movzx edx, byte [rsp + rax + 0x10]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de57d9f5
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57d9e9
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x1de57d959
jmp 0x1de57d9dd
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1de57d9c3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1de57d9b7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
nop dword [rax]
call fcn.1de49fa60
nop
int3

Function at 0x1de57f020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x60dcfc18e095189a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x401040703060204
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1de57f073
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x33]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x1de57f0ac
movzx edx, byte [rsp + rax + 0x10]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de57f0f7
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57f0eb
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x33]
cmp rbx, 8
jb 0x1de57f059
jmp 0x1de57f0df
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1de57f0c5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1de57f0b9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
nop
call fcn.1de49fa60
nop
int3
Function at 0x1de57f680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xafd598997643e742
mov qword [rsp + 0x20], rdx
movabs rdx, 0x200060104070100
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1de57f6d5
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x50]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x1de57f70a
movzx edx, byte [rsp + rax + 0x10]
lea rbx, [rax + 1]
cmp rbx, 8
jae 0x1de57f755
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de57f749
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x1de57f6b9
jmp 0x1de57f73d
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1de57f723
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1de57f717
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov rax, rbx
mov ecx, 8
nop dword [rax]
call fcn.1de49fa60
nop
int3
Function at 0x1de57f820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de57f9f7
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov qword [rsp + 0x78], 0
movabs rdx, 0x45a248a1a544f1d7
mov qword [rsp + 0x58], rdx
movabs rdx, 0x25d629a5c1ba8a3a
mov qword [rsp + 0x60], rdx
movzx edx, byte [rsp + 0x62]
mov byte [rsp + 0x4f], dl
movzx r8d, byte [rsp + 0x65]
mov byte [rsp + 0x4e], r8b
movzx r9d, byte [rsp + 0x67]
mov byte [rsp + 0x4d], r9b
movzx r10d, byte [rsp + 0x63]
mov byte [rsp + 0x4c], r10b
movzx r11d, byte [rsp + 0x5d]
mov byte [rsp + 0x4b], r11b
movzx r12d, byte [rsp + 0x59]
mov byte [rsp + 0x4a], r12b
movzx r13d, byte [rsp + 0x60]
mov byte [rsp + 0x49], r13b
movzx r15d, byte [rsp + 0x61]
mov byte [rsp + 0x48], r15b
movzx r13d, byte [rsp + 0x58]
mov byte [rsp + 0x47], r13b
movzx r13d, byte [rsp + 0x5f]
mov byte [rsp + 0x46], r13b
movzx r13d, byte [rsp + 0x5e]
mov byte [rsp + 0x45], r13b
movzx r13d, byte [rsp + 0x5a]
mov byte [rsp + 0x44], r13b
movzx r13d, byte [rsp + 0x5b]
mov byte [rsp + 0x43], r13b
movzx r13d, byte [rsp + 0x5c]
mov byte [rsp + 0x42], r13b
movzx r13d, byte [rsp + 0x66]
mov byte [rsp + 0x41], r13b
movzx r13d, byte [rsp + 0x64]
mov byte [rsp + 0x40], r13b
lea rax, [0x1de613a40]
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
mov esi, 8
call fcn.1de487660
movzx edx, byte [rsp + 0x4f]
movzx r8d, byte [rsp + 0x4e]
sub edx, r8d
mov byte [rax], dl
movzx edx, byte [rsp + 0x4d]
movzx r8d, byte [rsp + 0x4c]
sub edx, r8d
mov byte [rax + 1], dl
movzx edx, byte [rsp + 0x4b]
movzx r8d, byte [rsp + 0x4a]
add edx, r8d
mov byte [rax + 2], dl
movzx edx, byte [rsp + 0x49]
movzx r8d, byte [rsp + 0x48]
add edx, r8d
mov byte [rax + 3], dl
movzx edx, byte [rsp + 0x47]
movzx r8d, byte [rsp + 0x46]
xor edx, r8d
mov byte [rax + 4], dl
movzx edx, byte [rsp + 0x45]
movzx r8d, byte [rsp + 0x44]
sub edx, r8d
mov byte [rax + 5], dl
movzx edx, byte [rsp + 0x43]
movzx r8d, byte [rsp + 0x42]
add edx, r8d
mov byte [rax + 6], dl
movzx edx, byte [rsp + 0x41]
movzx r8d, byte [rsp + 0x40]
add edx, r8d
mov byte [rax + 7], dl
mov qword [rsp + 0x50], 0
lea rdx, [rbx + 8]
xor ecx, ecx
jmp 0x1de57f9c4
mov byte [rsp + rcx + 0x50], bl
inc rcx
cmp rcx, rdx
jge 0x1de57f9d5
movzx ebx, byte [rax + rcx]
cmp rcx, 8
jb 0x1de57f9bd
jmp 0x1de57f9e9
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov rax, rcx
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de57f820
Function at 0x1de581aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xc5230208c89de8a2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x400060407050405
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x202
xor eax, eax
nop
jmp 0x1de581b00
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x34]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x1de581b35
movzx edx, byte [rsp + rax + 0x26]
lea rbx, [rax + 1]
cmp rbx, 0xa
jae 0x1de581b85
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1de581b74
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x1de581ae2
jmp 0x1de581b68
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1de581b4e
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1de581b42
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.1de49fa60
mov eax, esi
mov ecx, 8
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rbx
mov ecx, 0xa
call fcn.1de49fa60
nop
int3
Function at 0x1de582d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de582ed7
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov qword [rsp + 0x78], 0
movabs rdx, 0xbf16ae5f4368e0c7
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5fafdc0a07b162c2
mov qword [rsp + 0x60], rdx
movzx edx, byte [rsp + 0x65]
mov byte [rsp + 0x4f], dl
movzx r8d, byte [rsp + 0x60]
mov byte [rsp + 0x4e], r8b
movzx r9d, byte [rsp + 0x5f]
mov byte [rsp + 0x4d], r9b
movzx r10d, byte [rsp + 0x58]
mov byte [rsp + 0x4c], r10b
movzx r11d, byte [rsp + 0x5d]
mov byte [rsp + 0x4b], r11b
movzx r12d, byte [rsp + 0x62]
mov byte [rsp + 0x4a], r12b
movzx r13d, byte [rsp + 0x5e]
mov byte [rsp + 0x49], r13b
movzx r15d, byte [rsp + 0x61]
mov byte [rsp + 0x48], r15b
movzx r13d, byte [rsp + 0x67]
mov byte [rsp + 0x47], r13b
movzx r13d, byte [rsp + 0x5c]
mov byte [rsp + 0x46], r13b
movzx r13d, byte [rsp + 0x66]
mov byte [rsp + 0x45], r13b
movzx r13d, byte [rsp + 0x5b]
mov byte [rsp + 0x44], r13b
movzx r13d, byte [rsp + 0x63]
mov byte [rsp + 0x43], r13b
movzx r13d, byte [rsp + 0x59]
mov byte [rsp + 0x42], r13b
movzx r13d, byte [rsp + 0x64]
mov byte [rsp + 0x41], r13b
movzx r13d, byte [rsp + 0x5a]
mov byte [rsp + 0x40], r13b
lea rax, [0x1de613a40]
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
mov esi, 8
call fcn.1de487660
movzx edx, byte [rsp + 0x4f]
movzx r8d, byte [rsp + 0x4e]
add edx, r8d
mov byte [rax], dl
movzx edx, byte [rsp + 0x4d]
movzx r8d, byte [rsp + 0x4c]
xor edx, r8d
mov byte [rax + 1], dl
movzx edx, byte [rsp + 0x4b]
movzx r8d, byte [rsp + 0x4a]
add edx, r8d
mov byte [rax + 2], dl
movzx edx, byte [rsp + 0x49]
movzx r8d, byte [rsp + 0x48]
add edx, r8d
mov byte [rax + 3], dl
movzx edx, byte [rsp + 0x47]
movzx r8d, byte [rsp + 0x46]
sub edx, r8d
mov byte [rax + 4], dl
movzx edx, byte [rsp + 0x45]
movzx r8d, byte [rsp + 0x44]
add edx, r8d
mov byte [rax + 5], dl
movzx edx, byte [rsp + 0x43]
movzx r8d, byte [rsp + 0x42]
add edx, r8d
mov byte [rax + 6], dl
movzx edx, byte [rsp + 0x41]
movzx r8d, byte [rsp + 0x40]
add edx, r8d
mov byte [rax + 7], dl
mov qword [rsp + 0x50], 0
lea rdx, [rbx + 8]
xor ecx, ecx
jmp 0x1de582ea4
mov byte [rsp + rcx + 0x50], bl
inc rcx
cmp rcx, rdx
jge 0x1de582eb5
movzx ebx, byte [rax + rcx]
cmp rcx, 8
jb 0x1de582e9d
jmp 0x1de582ec9
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov rax, rcx
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de582d00