joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de5988a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de59899f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x69767265c1256553
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x87d602c5176c41b1
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8030f0a0b0d0a0b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2020d0d08030f0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc020b0e0c090a0b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de598924
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x14
jge 0x1de59895b
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x1de598991
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1de598985
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x1de598907
jmp 0x1de598976
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x10
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x14
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5988a0

Function at 0x1de5997c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5998f8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x9ab172b5968cf691
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa7bd745d9a8c8099
mov qword [rsp + 0x20], rdx
movabs rdx, 0xcfa863dfa7bd745d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x749e99cc6ee88fb8
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1616090e0b120219
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1150c0a1616090e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12181514031306
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1816091003070b15
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9060f0804131a18
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de599880
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x24
jge 0x1de5998b7
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x24
jae 0x1de5998ea
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x1de5998de
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1c
jb 0x1de599863
jmp 0x1de5998d2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1c
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x24
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de5997c0
Function at 0x1de59b7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de59b8f3
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xec8b627470e29802
mov qword [rsp + 0x19], rdx
movabs rdx, 0xec8b627470e298
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1e63936a010c656c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1008000710070507
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1060e080c091008
mov qword [rsp + 0x30], rdx
movabs rdx, 0x601000c080e0b02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de59b870
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x56]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x1de59b8ad
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
nop
cmp rsi, 0x16
jae 0x1de59b8e5
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1de59b8d4
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x56]
cmp rsi, 0x11
jb 0x1de59b856
jmp 0x1de59b8c8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x11
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x16
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de59b7e0

Function at 0x1de59c560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de59c66b
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x69b44fe2476de247
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd61dc9e6a269b44f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65749ae56972ba74
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb050a120e06080a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40a0e00010b0b05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1211090e040c0500
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de59c5f3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x1de59c62a
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x1de59c65d
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1de59c651
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x1de59c5d6
jmp 0x1de59c645
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x15
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x16
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de59c560
Function at 0x1de59d8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de59d9a9
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x35236c651957613c
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x4f2e
movabs rdx, 0x800020309030600
mov qword [rsp + 0x22], rdx
movabs rdx, 0x607060109010800
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x1de59d92a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 7]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de59d968
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x1de59d99b
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x1de59d98f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 7]
nop
cmp rsi, 0xa
jb 0x1de59d910
jmp 0x1de59d983
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xa
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de59d8c0

Function at 0x1de59e440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de59e53f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xacfc65d36121231a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9078451318c9acfc
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7000a000d060407
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x600040807000a00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x104020906060407
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de59e4c4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x1de59e4fb
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x1de59e531
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x1de59e525
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x1de59e4a7
jmp 0x1de59e516
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xe
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x14
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de59e440
Function at 0x1de5a02e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5a03ff
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6f726571e465aecf
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3233706c6568ac90
mov qword [rsp + 0x24], rdx
movabs rdx, 0x729584738da96e93
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1216160313040400
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1002160112130112
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x908170210021601
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1615090308060806
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de5a0380
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x32]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x1de5a03bc
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x1de5a03f1
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1de5a03e5
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x32]
cmp rsi, 0x18
jb 0x1de5a0365
jmp 0x1de5a03d7
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x18
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1c
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5a02e0

Function at 0x1de5a0d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5a0e5f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x747fba97708e7b44
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x659264c2ac486574
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb040503060a0506
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa060b040503060a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20d060b010a0a04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de5a0de4
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x1de5a0e1b
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x1de5a0e51
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1de5a0e45
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x1de5a0dc7
jmp 0x1de5a0e36
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xf
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x12
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5a0d60
Function at 0x1de5a33a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5a3493
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7478a8b0b09f6946
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9de291b6f2e6f674
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb090c040e080a0d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x502030b0d0d0e0a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de5a3412
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x1de5a344e
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x1de5a3485
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1de5a3475
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
cmp rsi, 0xf
jb 0x1de5a33f8
jmp 0x1de5a3469
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xf
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x10
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5a33a0

Function at 0x1de5a4ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5a4dbf
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x768488bb9e9f76a7
mov qword [rsp + 0x19], rdx
movabs rdx, 0x83b6636c729f7276
mov qword [rsp + 0x20], rdx
movabs rdx, 0x74ba756f9fd6627a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x211001210060b01
mov qword [rsp + 0x30], rdx
movabs rdx, 0x409061106030902
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50d150f020f09
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0e041500090812
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de5a4d42
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x1de5a4d79
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x1de5a4db1
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1de5a4da5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x1de5a4d25
jmp 0x1de5a4d94
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x17
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x20
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5a4ca0
Function at 0x1de5a4f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5a4fff
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x15153d13cd0c6ff8
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x576802cbf31b1415
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa070b010d0301
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70208010805000a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x406010c01030809
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de5a4f81
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x16
jge 0x1de5a4fbd
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x1de5a4ff1
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1de5a4fe5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
cmp rsi, 0xf
jb 0x1de5a4f67
jmp 0x1de5a4fd8
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xf
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x16
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5a4f00

Function at 0x1de5a5780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5a58bf
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6f3a1b6f2760243e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1465f40b63dd656c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9241465f40b63dd
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6f256e2e22cf6666
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0315110c020f00
mov qword [rsp + 0x36], rdx
movabs rdx, 0x18000d0315110c02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10050a1006181003
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5010f0211151405
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0501161415110d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de5a5840
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 2]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x1de5a587c
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
cmp rsi, 0x22
jae 0x1de5a58b1
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1de5a58a5
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 2]
cmp rsi, 0x1a
jb 0x1de5a5823
jmp 0x1de5a5897
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1a
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x22
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5a5780
Function at 0x1de5a6500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5a65ff
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf528fb88447413e6
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9cfae5ff08f528fb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70b0c0c06080109
mov qword [rsp + 0x26], rdx
movabs rdx, 0x800070b0c0c0608
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5000c0a00040507
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de5a6581
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x1de5a65bd
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x1de5a65f1
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1de5a65e5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
cmp rsi, 0xd
jb 0x1de5a6567
jmp 0x1de5a65d8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xd
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x12
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5a6500

Function at 0x1de5a7be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5a7cf3
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xd96978614de4a8b0
mov qword [rsp + 0x30], rdx
movabs rdx, 0x73a2946f0e109975
mov qword [rsp + 0x38], rdx
movabs rdx, 0x74bb756f43a86fb4
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12010b0a000d090a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x10160b0702101202
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0a120709090e16
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x1de5a7c70
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5c]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x1de5a7cad
movzx edx, byte [rsp + rax + 0x18]
lea rsi, [rax + 1]
nop
cmp rsi, 0x18
jae 0x1de5a7ce5
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1de5a7cd4
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5c]
cmp rsi, 0x18
jb 0x1de5a7c56
jmp 0x1de5a7cc8
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x18
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x18
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x18
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5a7be0
Function at 0x1de5a9500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5a95ff
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xed633872fc744547
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x73999c3d547309ed
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80b0d03050c0101
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x703080b0d03050c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0c0c080501010c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de5a9581
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x1de5a95bd
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x1de5a95f1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1de5a95e5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x57]
cmp rsi, 0xf
jb 0x1de5a9567
jmp 0x1de5a95d8
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xf
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x12
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5a9500

Function at 0x1de5a9b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5a9cb3
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9303937553ddea47
mov qword [rsp + 0x19], rdx
movabs rdx, 0x74656c706d064386
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6974656c706d0643
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa50e6a98ef53aa6f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7050a0a180a1512
mov qword [rsp + 0x32], rdx
movabs rdx, 0x202071208050616
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x507150715170202
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1401150614031402
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de5a9c2e
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x1de5a9c6d
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x1e
jae 0x1de5a9ca5
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1de5a9c94
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0x19
jb 0x1de5a9c14
jmp 0x1de5a9c88
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1e
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5a9b80