joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de4c9d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c9df3
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1d], 0xd6cbc654
mov byte [rsp + 0x21], 0xbe
mov dword [rsp + 0x22], 0x1040303
mov word [rsp + 0x26], 0x202
xor eax, eax
jmp 0x1de4c9d72
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 6
jge 0x1de4c9dae
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 6
jae 0x1de4c9de5
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 5
jae 0x1de4c9dd5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 5
jb 0x1de4c9d58
jmp 0x1de4c9dc9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 5
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 5
call fcn.1de49fa60
mov eax, edi
mov ecx, 5
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 6
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c9d20

Function at 0x1de4c9e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c9ecd
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1d], 0xbd7861b2
mov byte [rsp + 0x21], 0x99
mov dword [rsp + 0x22], 0x2030002
mov word [rsp + 0x26], 0x204
xor eax, eax
jmp 0x1de4c9e55
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 6
jge 0x1de4c9e8c
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 6
jae 0x1de4c9ebf
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 5
jae 0x1de4c9eb3
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 5
jb 0x1de4c9e38
jmp 0x1de4c9ea7
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 5
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 5
call fcn.1de49fa60
mov eax, edi
mov ecx, 5
call fcn.1de49fa60
mov rax, rsi
mov ecx, 6
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c9e00
Function at 0x1de4caa40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4cab15
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x19], 0x68828c54
mov dword [rsp + 0x1c], 0x79787568
movabs rdx, 0x601050205050105
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de4caa98
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 8
jge 0x1de4caacf
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de4cab07
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 7
jae 0x1de4caafb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 7
jb 0x1de4caa7b
jmp 0x1de4caaef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 7
nop dword [rax + rax]
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 7
call fcn.1de49fa60
mov eax, edi
mov ecx, 7
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4caa40

Function at 0x1de4ccde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4cceff
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xe76c3fcf9158c82a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xbecedbdcc97299e7
mov qword [rsp + 0x22], rdx
movabs rdx, 0xbf2047ae21db63c8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc05070214000815
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb03120d1400110f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x80e0b16150a0b03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130d0a01070c0416
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de4cce80
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x77]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x1de4ccebc
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x1e
jae 0x1de4ccef1
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1de4ccee5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x77]
cmp rsi, 0x17
jb 0x1de4cce65
jmp 0x1de4cced7
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x17
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1e
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4ccde0
Function at 0x1de4ccf20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4cd03f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xee3f9b91a4e86f4e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf49ef913ae0163ee
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa09fb96f505f650c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf150702160a0415
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2141604050e0a06
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9030a030d030304
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20b0c0c1402040e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de4ccfc2
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x1de4ccff9
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x1de4cd031
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1de4cd025
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x1de4ccfa5
jmp 0x1de4cd014
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x17
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x20
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4ccf20

Function at 0x1de4cd060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4cd15f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd81f3309652e4703
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x330b34436261f1fb
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf02040107000c0c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70906000f020401
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10d070508050e06
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de4cd0e1
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x14
jge 0x1de4cd11d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x1de4cd151
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1de4cd145
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x10
jb 0x1de4cd0c7
jmp 0x1de4cd138
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x10
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x14
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4cd060
Function at 0x1de4cd180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4cd2e9
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x65c75f14c70479b1
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x372565c75f14c704
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6041d26b974a31a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6f325f65cdfd8372
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x74030c6f611c02cd
mov qword [rsp + 0x36], rdx
movabs rdx, 0x13040103141d1a10
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x30013040103141d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb102015140b040f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x201d1b0e141406
mov qword [rsp + 0x50], rdx
movabs rdx, 0x80a0d0a081c1b1c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x300020618111f09
mov qword [rsp + 0x60], rdx
movabs rdx, 0x150f0f1509010810
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x1de4cd26d
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x32
jge 0x1de4cd2a8
movzx edx, byte [rsp + rax + 0x3e]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x32
jae 0x1de4cd2db
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x1de4cd2cf
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x22
jb 0x1de4cd250
jmp 0x1de4cd2c3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x22
call fcn.1de48b520
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x22
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x22
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x32
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4cd180

Function at 0x1de4cf720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4cf7ed
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1d], 0xee65543f
mov byte [rsp + 0x21], 0x39
mov dword [rsp + 0x22], 0x4040003
mov word [rsp + 0x26], 0
xor eax, eax
jmp 0x1de4cf775
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 6
jge 0x1de4cf7ac
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 6
jae 0x1de4cf7df
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 5
jae 0x1de4cf7d3
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 5
jb 0x1de4cf758
jmp 0x1de4cf7c7
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 5
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 5
call fcn.1de49fa60
mov eax, edi
mov ecx, 5
call fcn.1de49fa60
mov rax, rsi
mov ecx, 6
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4cf720
Function at 0x1de4cf800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4cf8f3
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc3b444c4a9bf6f0e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb30645c3b444c4a9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x302080204060300
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30a0707090a0302
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de4cf872
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de4cf8ae
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x1de4cf8e5
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1de4cf8d5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
cmp rsi, 0xb
jb 0x1de4cf858
jmp 0x1de4cf8c9
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xb
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4cf800

Function at 0x1de4d0780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4d0849
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
mov word [rsp + 0x1e], 0x9cbd
mov word [rsp + 0x1c], 0
mov byte [rsp + 0x1c], 1
xor eax, eax
jmp 0x1de4d07cc
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 2
jge 0x1de4d0808
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
nop dword [rax + rax]
cmp rsi, 2
jae 0x1de4d083b
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 2
jae 0x1de4d082f
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 2
jb 0x1de4d07af
jmp 0x1de4d0823
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 2
call fcn.1de48b520
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov eax, esi
mov ecx, 2
call fcn.1de49fa60
mov eax, edi
mov ecx, 2
call fcn.1de49fa60
mov rax, rsi
mov ecx, 2
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4d0780
Function at 0x1de4d0860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4d0933
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x22], 0x6d079a07
mov word [rsp + 0x26], 0xdc04
mov dword [rsp + 0x1c], 0x2040401
mov word [rsp + 0x20], 0x500
xor eax, eax
jmp 0x1de4d08b7
movzx r9d, byte [rsp + rsi + 0x22]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x22], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x22], dl
add rax, 2
cmp rax, 6
jge 0x1de4d08ee
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
cmp rsi, 6
jae 0x1de4d0925
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 6
jae 0x1de4d0915
movzx r8d, byte [rsp + rdi + 0x22]
sub r8d, edx
cmp rsi, 6
jb 0x1de4d089a
jmp 0x1de4d0909
xor eax, eax
lea rbx, [rsp + 0x22]
mov ecx, 6
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 6
call fcn.1de49fa60
mov eax, edi
mov ecx, 6
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 6
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4d0860

Function at 0x1de4d0940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4d0a0d
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1d], 0x57365f46
mov byte [rsp + 0x21], 0x66
mov dword [rsp + 0x22], 0x1040200
mov word [rsp + 0x26], 0x302
xor eax, eax
jmp 0x1de4d0995
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x13]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 6
jge 0x1de4d09cc
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 6
jae 0x1de4d09ff
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 5
jae 0x1de4d09f3
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 5
jb 0x1de4d0978
jmp 0x1de4d09e7
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 5
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 5
call fcn.1de49fa60
mov eax, edi
mov ecx, 5
call fcn.1de49fa60
mov rax, rsi
mov ecx, 6
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4d0940
Function at 0x1de4d6680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1de4d6813
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x6e203a6f6f4e4e62
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1907c272de646162
mov qword [rsp + 0x25], rdx
movabs rdx, 0x20321d2a32577419
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2c687574542c2d72
mov qword [rsp + 0x34], rdx
movabs rdx, 0x4700746e9e6f3378
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe3614840e86d4a76
mov qword [rsp + 0x44], rdx
movabs rdx, 0x17070f262614131f
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1908182b17070f26
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2015250b250d0203
mov qword [rsp + 0x58], rdx
movabs rdx, 0x22010f1e1c1d112a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1a2e2a1a2c0e1a01
mov qword [rsp + 0x68], rdx
movabs rdx, 0x282e1a27082c1126
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1a2503280b030f12
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x1de4d6787
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x16]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x34
jge 0x1de4d67c8
movzx edx, byte [rsp + rax + 0x4c]
lea rsi, [rax + 1]
cmp rsi, 0x34
jae 0x1de4d6805
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x1de4d67f5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x16]
nop dword [rax + rax]
cmp rsi, 0x2f
jb 0x1de4d676d
jmp 0x1de4d67e9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2f
call fcn.1de48b520
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2f
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x2f
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x34
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4d6680
Function at 0x1de4d6820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x1de4d69bf
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x7720e507ffd77562
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbe9715b1b7743172
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd57e64656e727574
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4112cc4584945911
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4f66f13df5cd1a05
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x4affc0725793797c
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2929271704181a0e
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1e0c0b1627292e02
mov qword [rsp + 0x52], rdx
movabs rdx, 0x191727210d091e0c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2802190d2a1f2e24
mov qword [rsp + 0x60], rdx
movabs rdx, 0x232f20280d0f1b1e
mov qword [rsp + 0x68], rdx
movabs rdx, 0xb0f221d0e190203
mov qword [rsp + 0x70], rdx
movabs rdx, 0x172d0f2a231c2405
mov qword [rsp + 0x78], rdx
movabs rdx, 0x292a23232e251e1a
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x1de4d6939
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x3e
jge 0x1de4d6975
movzx edx, byte [rsp + rax + 0x4a]
lea rsi, [rax + 1]
cmp rsi, 0x3e
jae 0x1de4d69b1
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x1de4d69a5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x40]
cmp rsi, 0x30
jb 0x1de4d691f
jmp 0x1de4d6996
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x30
call fcn.1de48b520
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x30
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x30
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x3e
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4d6820
Function at 0x1de4da220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4da333
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x2041366cedc73c69
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe12041366cedc73c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2f4a7ace21387426
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf02100d060c0609
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1060f02100d060c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0f100805031003
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de4da2b0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x19]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x1de4da2ed
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
nop
cmp rsi, 0x12
jae 0x1de4da325
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1de4da314
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x19]
cmp rsi, 0x11
jb 0x1de4da296
jmp 0x1de4da308
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x11
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x12
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4da220

Function at 0x1de4ddc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4ddd1f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x53439cdc9d0c9c9
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x35cd316f
movabs rdx, 0x4070808070a01
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x3020707
xor eax, eax
jmp 0x1de4ddca7
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x1de4ddcde
movzx edx, byte [rsp + rax + 0x18]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x1de4ddd11
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1de4ddd05
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x1de4ddc8a
jmp 0x1de4ddcf9
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xc
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4ddc40
Function at 0x1de4ded80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4dee9f
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xcd30d335640abf59
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x58a39cd30d33564
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc8d76dd132f5c832
mov qword [rsp + 0x26], rdx
movabs rdx, 0x91100000210020d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa010d0c0301000f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7010a010d0c0301
mov qword [rsp + 0x38], rdx
movabs rdx, 0x707110c05021012
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de4dee22
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x1de4dee59
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x1de4dee91
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1de4dee85
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x1de4dee05
jmp 0x1de4dee74
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x13
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1a
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4ded80

Function at 0x1de4dfb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4dfc9f
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x383267c0fad64a6e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x643737c7c4d73832
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3532520e377d5fcd
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10008120f040013
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x500100d080d0003
mov qword [rsp + 0x36], rdx
movabs rdx, 0x90a0500100d080d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40e0d02081305
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de4dfc22
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1a
jge 0x1de4dfc59
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x1de4dfc91
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x1de4dfc85
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x1de4dfc05
jmp 0x1de4dfc74
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x16
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1a
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4dfb80