joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de4f8cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4f8e29
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x2a20fef50166e730
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe90a6a89ac2e0b20
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7740a23e90a6a89
mov qword [rsp + 0x28], rdx
movabs rdx, 0xdbf66920cf1ef577
mov qword [rsp + 0x30], rdx
movabs rdx, 0x302006633266311e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20276593e6e42a65
mov qword [rsp + 0x40], rdx
movabs rdx, 0x26151b130c262128
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2a050f261f270d01
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1511002303180b0e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d0a0e0901251a07
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2518171c1016042a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1c1f0c0613212a26
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x1de4f8dad
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x79]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x79]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x30
jge 0x1de4f8de8
movzx edx, byte [rsp + rax + 0x48]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x30
jae 0x1de4f8e1b
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x1de4f8e0f
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x2c
jb 0x1de4f8d90
jmp 0x1de4f8e03
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x2c
call fcn.1de48b520
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x2c
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x2c
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x30
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4f8cc0

Function at 0x1de4fdda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4fde7f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xc200647a0f666572
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xe7
movabs rdx, 0x408030805060305
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7030505
xor eax, eax
jmp 0x1de4fde04
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x48]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x48]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x1de4fde3b
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x1de4fde71
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1de4fde65
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x1de4fdde7
jmp 0x1de4fde56
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 9
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4fdda0
Function at 0x1de4ff700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4ff849
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x41d164d26874b4ac
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd5d1db49bc41d164
mov qword [rsp + 0x22], rdx
movabs rdx, 0xcf6533f061d376c7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1ed445645c0f4228
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6e3b69079603beda
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa0d0c120d1e1820
mov qword [rsp + 0x42], rdx
movabs rdx, 0x620151500010a0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf1d231a060e1c0b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b0d0b080b171121
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a151f2311140c04
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1de4ff7cf
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x26
jge 0x1de4ff808
movzx edx, byte [rsp + rax + 0x42]
lea rsi, [rax + 1]
nop
cmp rsi, 0x26
jae 0x1de4ff83b
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x1de4ff82f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x25
jb 0x1de4ff7b2
jmp 0x1de4ff823
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x25
call fcn.1de48b520
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x25
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x25
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x26
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4ff700

Function at 0x1de500da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de500ebf
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x544f574b3a136e2c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4c1c283d3b544f57
mov qword [rsp + 0x22], rdx
movabs rdx, 0x26654773024dfd41
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x140714030e100b0a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x8000e0f060f0e02
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb0b0f04120800
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0d020903050f08
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de500e40
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x1de500e7c
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x1e
jae 0x1de500eb1
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1de500ea5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 0x15
jb 0x1de500e25
jmp 0x1de500e97
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x15
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1e
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de500da0
Function at 0x1de502100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de50223f
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xac6646f70cd65a3
mov qword [rsp + 0x18], rdx
movabs rdx, 0xeb472011276cc8c8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7220d575287aeb47
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9fc4cebe66b40d9e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1b020611081c0f0e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x120a1b020611081c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x71a1707120a131d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x312060012110a17
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf03090918160f0c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de5021c0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x1de5021fc
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
cmp rsi, 0x22
jae 0x1de502231
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x1de502225
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x1e
jb 0x1de5021a3
jmp 0x1de502217
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1e
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x22
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de502100

Function at 0x1de504a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de504bd3
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xa3563216c662972
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd10a3563216c6629
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd21d46791626f426
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20283430200ff264
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe4674041d92020d5
mov qword [rsp + 0x32], rdx
movabs rdx, 0x8190c1504071207
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x8081904011d0819
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0a120b01201c15
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6161e1e20150417
mov qword [rsp + 0x50], rdx
movabs rdx, 0x91310080f1a0115
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1de504b4c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x26
jge 0x1de504b8d
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
nop dword [rax + rax]
cmp rsi, 0x26
jae 0x1de504bc5
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x1de504bb4
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 0x21
jb 0x1de504b32
jmp 0x1de504ba8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
call fcn.1de48b520
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x21
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x21
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x26
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de504a80
Function at 0x1de505660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5057a9
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x646f29656c736175
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6d5b646f29656c73
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7e3120677c785c74
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6e76720048786e70
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x467a6e4472a1666f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x8111e160b131615
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1001200c08111e16
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb11051919110017
mov qword [rsp + 0x48], rdx
movabs rdx, 0x12061e090d181613
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c21082106020107
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1de50572f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x24
jge 0x1de505768
movzx edx, byte [rsp + rax + 0x3c]
lea rsi, [rax + 1]
nop
cmp rsi, 0x24
jae 0x1de50579b
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x1de50578f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x22
jb 0x1de505712
jmp 0x1de505783
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x22
call fcn.1de48b520
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x22
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x22
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x24
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de505660

Function at 0x1de505c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de505d8b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x8e7463ccf4e76572
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x568e7463ccf4e765
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf71a499265bff464
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30a10090404040d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100d0202030a1009
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0f0b04100f070b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de505d13
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x1de505d4a
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x1de505d7d
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1de505d71
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x1de505cf6
jmp 0x1de505d65
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x11
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x14
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de505c80
Function at 0x1de505ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de505ff8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x2ec863edf0184a3f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4c154b65bd633f56
mov qword [rsp + 0x24], rdx
movabs rdx, 0x496e4c154b65bd63
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3c632e0972f2293e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1613160e16041314
mov qword [rsp + 0x36], rdx
movabs rdx, 0x3061613160e1604
mov qword [rsp + 0x38], rdx
movabs rdx, 0x17190d120309030b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x900190f19040f06
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120a020d0b0d0100
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de505f80
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x43]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x43]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x22
jge 0x1de505fb7
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
cmp rsi, 0x22
jae 0x1de505fea
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1de505fde
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x1de505f63
jmp 0x1de505fd2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1a
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x22
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de505ec0
Function at 0x1de507820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x1de5079e6
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0xc0b75a956c666572
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x666fac49b41a637b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc3c472e7666fac49
mov qword [rsp + 0x28], rdx
movabs rdx, 0x560fe92874c66588
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6420bb514c59c9d4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6f742072aacc20bd
mov qword [rsp + 0x40], rdx
movabs rdx, 0x724da0c7dde5c74a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x657532610873b361
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb181e0b2c312f37
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2010180d32362026
mov qword [rsp + 0x60], rdx
movabs rdx, 0x4100a261c392e32
mov qword [rsp + 0x68], rdx
movabs rdx, 0xb2d2f0d080b2113
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1c19360c1b363014
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2431072023073b1a
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2d1d0c0536051d1a
mov qword [rsp + 0x88], rdx
movabs rdx, 0x273b203516122606
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x1de507960
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x61]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x40
jge 0x1de50799c
movzx edx, byte [rsp + rax + 0x58]
lea rsi, [rax + 1]
cmp rsi, 0x40
jae 0x1de5079d5
movzx esi, byte [rsp + rax + 0x59]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3c
jae 0x1de5079c9
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x61]
cmp rsi, 0x3c
jb 0x1de507943
jmp 0x1de5079bd
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x3c
call fcn.1de48b520
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x3c
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x3c
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x40
nop dword [rax]
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de507820
Function at 0x1de509aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de509c09
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x68812d924935614d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6c6163206d85b04e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x426c6163206d85b0
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9aa272997834444b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20bb8a967f75619d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x726f96a9725f9c78
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1f1d15172526091e
mov qword [rsp + 0x44], rdx
movabs rdx, 0x26220b2119182310
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1d0a042826220b21
mov qword [rsp + 0x50], rdx
movabs rdx, 0x516282806140213
mov qword [rsp + 0x58], rdx
movabs rdx, 0x21811221e1c0719
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1223071809102206
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x1de509b8a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x2c
jge 0x1de509bc8
movzx edx, byte [rsp + rax + 0x44]
lea rsi, [rax + 1]
cmp rsi, 0x2c
jae 0x1de509bfb
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x1de509bef
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
nop
cmp rsi, 0x29
jb 0x1de509b70
jmp 0x1de509be3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x29
call fcn.1de48b520
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x29
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x29
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x2c
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de509aa0

Function at 0x1de50cbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de50cc9f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x65ec3bd6becd1807
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x6e
movabs rdx, 0x502030005040601
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x30505
xor eax, eax
jmp 0x1de50cc24
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x1de50cc5b
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x1de50cc91
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1de50cc85
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x1de50cc07
jmp 0x1de50cc76
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 9
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de50cbc0
Function at 0x1de50dee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de50dfff
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xf262f965056665ec
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb65ef262f9650566
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6540ba54076775dc
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0d060c06030709
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80305090005080d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x503080305090005
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa09050d0d10060c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de50df80
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x1de50dfbc
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x1de50dff1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1de50dfe5
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6a]
cmp rsi, 0x12
jb 0x1de50df65
jmp 0x1de50dfd7
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x12
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1a
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de50dee0

Function at 0x1de5142c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5143bf
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7cfd806503fafd52
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x868804f5ea03657c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc07050301060d0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90b0c0705030106
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30a020c0d0a0e0a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de514341
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x1de51437d
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x1de5143b1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1de5143a5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0xf
jb 0x1de514327
jmp 0x1de514398
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xf
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x12
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5142c0
Function at 0x1de5143e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5144d3
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x48d8bfd7456765ab
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb0cfcd1c9548d8bf
mov qword [rsp + 0x20], rdx
movabs rdx, 0x900070000070708
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50b0c0004060a08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de514452
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x1de51448e
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x1de5144c5
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1de5144b5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0xd
jb 0x1de514438
jmp 0x1de5144a9
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xd
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x10
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5143e0

Function at 0x1de5144e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5145df
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd456ebd353320852
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57d442447c5ad456
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1070505080b0c02
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90b080401070505
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0c0b0a0b0c070c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de514561
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x14
jge 0x1de51459d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x1de5145d1
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x1de5145c5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7b]
cmp rsi, 0xe
jb 0x1de514547
jmp 0x1de5145b8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xe
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x14
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5144e0