joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de4e0180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4e029f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x39d4357c9436e482
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8f34333919325b8c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x35bf8a44250b7e31
mov qword [rsp + 0x28], rdx
movabs rdx, 0x121401111606140b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x406130612140607
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1303040013091212
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0815160b080311
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de4e0222
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x39]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x39]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x20
jge 0x1de4e0259
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x1de4e0291
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1de4e0285
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x1de4e0205
jmp 0x1de4e0274
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x18
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x20
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4e0180

Function at 0x1de4e0ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4e0e13
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x18ddfc1aec01a9d1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf338360b19383232
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8504f338360b1938
mov qword [rsp + 0x24], rdx
movabs rdx, 0x35a536f43436c930
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1806030b00070301
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1118060c0b110407
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb1605101118060c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x204010c13010f16
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de4e0d8e
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x1de4e0dcd
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x1c
jae 0x1de4e0e05
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1de4e0df4
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x1a
jb 0x1de4e0d74
jmp 0x1de4e0de8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1c
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4e0ce0
Function at 0x1de4e12c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4e13f3
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x3716383938101327
mov qword [rsp + 0x34], rdx
movabs rdx, 0x36353820341718f8
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x382a1d3436353820
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c32062337341e33
mov qword [rsp + 0x48], rdx
movabs rdx, 0x609090108150007
mov qword [rsp + 0x18], rdx
movabs rdx, 0x211011512160612
mov qword [rsp + 0x20], rdx
movabs rdx, 0x91b161502110115
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa011118070c0a19
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x1de4e136e
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xd]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x1de4e13ad
movzx edx, byte [rsp + rax + 0x18]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x1c
jae 0x1de4e13e5
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x1de4e13d4
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xd]
cmp rsi, 0x1c
jb 0x1de4e1354
jmp 0x1de4e13c8
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x1c
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1c
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1c
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4e12c0

Function at 0x1de4e1400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4e1538
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x346966394e453e3d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3d573e39824e3731
mov qword [rsp + 0x24], rdx
movabs rdx, 0x314c74393d573e39
mov qword [rsp + 0x28], rdx
movabs rdx, 0x414b3b537d335c35
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110a110e101a0001
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70005170d070310
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0e05181b111712
mov qword [rsp + 0x48], rdx
movabs rdx, 0x150b1718120f1a19
mov qword [rsp + 0x50], rdx
movabs rdx, 0x307020115100615
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1de4e14c0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x12]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x12]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x28
jge 0x1de4e14f7
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x28
jae 0x1de4e152a
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x1de4e151e
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x1de4e14a3
jmp 0x1de4e1512
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.1de48b520
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1c
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x28
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de4e1400
Function at 0x1de4e1560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4e1698
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x35338c6937344359
mov qword [rsp + 0x19], rdx
movabs rdx, 0x685e777041405648
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa75367383f685e77
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5d626c3335395651
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1409010a0d0f1b0d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x150c1409010a0d0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x16051b0f0e0b0000
mov qword [rsp + 0x40], rdx
movabs rdx, 0x912000b080f1010
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160d1a0415131c12
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de4e1620
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x22
jge 0x1de4e1657
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
cmp rsi, 0x22
jae 0x1de4e168a
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x1de4e167e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1d
jb 0x1de4e1603
jmp 0x1de4e1672
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1d
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x22
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de4e1560

Function at 0x1de4e16c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4e17f8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x3250332a38bd32d9
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc932cabfc55b31cd
mov qword [rsp + 0x22], rdx
movabs rdx, 0xbd3e37543935c932
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa79f3635dec93931
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1c1c0c0304041d16
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1806090f0a071502
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3121814180803
mov qword [rsp + 0x48], rdx
movabs rdx, 0x90c181d03180f0a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x80b0d0007190c04
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1de4e1780
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x28
jge 0x1de4e17b7
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x28
jae 0x1de4e17ea
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x1de4e17de
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x1de4e1763
jmp 0x1de4e17d2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.1de48b520
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1e
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x28
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de4e16c0
Function at 0x1de4e1820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4e195f
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x36b6b0383ec9afa8
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa33631a53132b296
mov qword [rsp + 0x21], rdx
movabs rdx, 0x3140b0a4c0ce26a3
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc3d9f738b0b338c8
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11161d171e151c1d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9141c05071a0c0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc130115021e0203
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10110f060c1217
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130800010605191a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1de4e18e0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x1de4e191c
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x28
jae 0x1de4e1951
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x1de4e1945
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0x1f
jb 0x1de4e18c3
jmp 0x1de4e1937
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.1de48b520
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1f
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x28
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4e1820
Function at 0x1de4f1d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x1de4f1f1f
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0xdda36d5fe36e6f11
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9c526c698ea8c9ca
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc8a82075c76d9572
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x72c26643db05ccdf
mov qword [rsp + 0x36], rdx
movabs rdx, 0x84d068abc55c6ea6
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x999879b8729f207d
mov qword [rsp + 0x46], rdx
movabs rdx, 0x7365c0bff176204f
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x29272f170d041307
mov qword [rsp + 0x56], rdx
movabs rdx, 0x200e29272f170d04
mov qword [rsp + 0x58], rdx
movabs rdx, 0x82f1e130b182830
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1e270f2e2c140322
mov qword [rsp + 0x68], rdx
movabs rdx, 0xa162f3334070011
mov qword [rsp + 0x70], rdx
movabs rdx, 0x11081b062a302619
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2f352a1e2d1c0613
mov qword [rsp + 0x80], rdx
movabs rdx, 0xd09092d282d230b
mov qword [rsp + 0x88], rdx
movabs rdx, 0x28222524081e1a08
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x1de4f1ea0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x42
jge 0x1de4f1ed7
movzx edx, byte [rsp + rax + 0x56]
lea rsi, [rax + 1]
cmp rsi, 0x42
jae 0x1de4f1f11
movzx esi, byte [rsp + rax + 0x57]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x38
jae 0x1de4f1f05
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x38
jb 0x1de4f1e83
jmp 0x1de4f1ef8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x38
call fcn.1de48b520
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x38
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x38
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x42
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4f1d60

Function at 0x1de4f2200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4f22df
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x77817c287d736e7f
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x6e
movabs rdx, 0x2070405020306
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1030406
xor eax, eax
jmp 0x1de4f2264
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 1]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 1]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x1de4f229b
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x1de4f22d1
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1de4f22c5
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x1de4f2247
jmp 0x1de4f22b6
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 9
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4f2200
Function at 0x1de4f2e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4f2f73
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x53717278868d6197
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x33a6785371727886
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4000a0308020903
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9040a0809060400
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de4f2ef2
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x20]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de4f2f2e
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x1de4f2f65
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1de4f2f55
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x20]
cmp rsi, 0xb
jb 0x1de4f2ed8
jmp 0x1de4f2f49
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xb
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4f2e80

Function at 0x1de4f5fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4f6093
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1a], 0xa056947
mov word [rsp + 0x1e], 0x4119
movabs rdx, 0x40304040205
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de4f6017
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 8
jge 0x1de4f604e
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de4f6085
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 6
jae 0x1de4f6075
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 6
jb 0x1de4f5ffa
jmp 0x1de4f6069
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 6
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 6
call fcn.1de49fa60
mov eax, edi
mov ecx, 6
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4f5fc0
Function at 0x1de4f60a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4f617f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xcd1bc61bd76debd9
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x34
movabs rdx, 0x300000005060701
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4010600
xor eax, eax
jmp 0x1de4f6101
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x45]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x1de4f613d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x1de4f6171
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1de4f6165
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x45]
cmp rsi, 9
jb 0x1de4f60e7
jmp 0x1de4f6158
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 9
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4f60a0

Function at 0x1de4f62a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4f6375
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1a], 0xedecee5e
mov word [rsp + 0x1e], 0x4eec
movabs rdx, 0x402030104000205
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de4f62f4
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 8
jge 0x1de4f6330
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de4f6367
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 6
jae 0x1de4f635b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 6
jb 0x1de4f62da
jmp 0x1de4f634f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 6
nop dword [rax]
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 6
call fcn.1de49fa60
mov eax, edi
mov ecx, 6
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4f62a0
Function at 0x1de4f7c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4f7d0d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x60365d1f6e692e01
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x322002427460365d
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc04000700060b0a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x507070606090c04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de4f7c95
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x1de4f7ccc
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x1de4f7cff
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1de4f7cf3
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x1de4f7c78
jmp 0x1de4f7ce7
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xd
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4f7c20

Function at 0x1de4f7dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4f7ec7
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movzx edx, byte [rax + 0x14]
movzx esi, word [rax + 0x32]
and esi, 0x7fff
test si, si
je 0x1de4f7e1d
movabs rdi, 0xafcba8227b411d94
mov qword [rsp + 0x2c], rdi
mov dword [rsp + 0x34], 0x209227ed
movabs rdi, 0xdba5dd4d383568fb
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x28], 0x10b219cd
xor ecx, ecx
jmp 0x1de4f7e44
xor eax, eax
xor ebx, ebx
mov rcx, rbx
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
movzx edi, byte [rsp + rcx + 0x2c]
movzx r8d, byte [rsp + rcx + 0x20]
xor r8d, edi
mov byte [rsp + rcx + 0x20], r8b
inc rcx
cmp rcx, 0xc
jl 0x1de4f7e2e
mov qword [rsp + 0x68], rax
mov byte [rsp + 0x1d], dl
mov word [rsp + 0x1e], si
lea rax, [rsp + 0x38]
lea rbx, [rsp + 0x20]
mov ecx, 0xc
call fcn.1de48b520
movzx edx, byte [rsp + 0x1d]
test dl, 1
mov edx, 0x38
mov esi, 0x48
cmovne rdx, rsi
mov rsi, qword [rsp + 0x68]
movzx eax, word [rsi + 0x30]
movzx edi, word [rsp + 0x1e]
add edi, eax
add rdx, rsi
movzx ecx, di
cmp rax, rcx
ja 0x1de4f7ec1
sub rcx, rax
mov rbx, rcx
neg rcx
shl rax, 3
sar rcx, 0x3f
and rax, rcx
add rax, rdx
mov rcx, rbx
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
call fcn.1de49fba0
nop
mov qword [rsp + 8], rax
call fcn.1de49d360
mov rax, qword [rsp + 8]
jmp fcn.1de4f7dc0
Function at 0x1de4f8b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4f8ca9
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0xe9e2ca89d5c76500
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x63900b8d20e9e2ca
mov qword [rsp + 0x24], rdx
movabs rdx, 0xee1f7448f0046153
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa86678955bcede66
mov qword [rsp + 0x34], rdx
movabs rdx, 0xec879c2e7485636e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x13111c1a0b030205
mov qword [rsp + 0x44], rdx
movabs rdx, 0xf221f1f13111c1a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1716231c19130406
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd240f1114180910
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7240f0f16070307
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf210406241c1000
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1407211a060a0406
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x1de4f8c2d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x34
jge 0x1de4f8c68
movzx edx, byte [rsp + rax + 0x44]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x34
jae 0x1de4f8c9b
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x1de4f8c8f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x25
jb 0x1de4f8c10
jmp 0x1de4f8c83
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x25
call fcn.1de48b520
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x25
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x25
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x34
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4f8b40