joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de5b5260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5b534d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x959364d6bf726849
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x407309e546959364
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0c06000a000607
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa04090c03040003
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de5b52d5
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x1de5b530c
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x1de5b533f
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1de5b5333
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x1de5b52b8
jmp 0x1de5b5327
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xd
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x10
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5b5260

Function at 0x1de5b55c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5b56b3
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x583e6b4661312c53
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x5d504240
movabs rdx, 0x900010b08070a08
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2060b030b060004
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de5b562b
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x1de5b566d
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0x10
jae 0x1de5b56a5
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1de5b5694
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 0xc
jb 0x1de5b5611
jmp 0x1de5b5688
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x10
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5b55c0
Function at 0x1de5b5ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5b5d89
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5f64617374726962
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x6c79434e
movabs rdx, 0xa0409070b080006
mov qword [rsp + 0x28], rdx
movabs rdx, 0x309080b0809000b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de5b5d0e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x10]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x1de5b5d48
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x10
jae 0x1de5b5d7b
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1de5b5d6f
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x1de5b5cf1
jmp 0x1de5b5d63
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xc
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x10
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5b5ca0

Function at 0x1de5b5da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5b5e93
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd96c2289c7d16956
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xdf6546d96c2289c7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x702020a07080a04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x305050705050702
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de5b5e12
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de5b5e4e
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x1de5b5e85
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1de5b5e75
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 0xb
jb 0x1de5b5df8
jmp 0x1de5b5e69
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xb
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5b5da0
Function at 0x1de5b63a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5b649f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xef6c53d274e64056
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc345c8e3654ed272
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40c09050c020f02
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10d040c09050c02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70d010901010a09
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de5b6424
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x1de5b645b
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x1de5b6491
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1de5b6485
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x1de5b6407
jmp 0x1de5b6476
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x10
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x12
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5b63a0

Function at 0x1de5bde00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5bdf13
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xf630b3cdca74d40f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd069ccbff630b3cd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5710c4e49cc64ebd
mov qword [rsp + 0x28], rdx
movabs rdx, 0x106050310120b04
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7080f0006090101
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0f0c0809081110
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de5bde90
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x1de5bdecd
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
nop
cmp rsi, 0x18
jae 0x1de5bdf05
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1de5bdef4
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0x14
jb 0x1de5bde76
jmp 0x1de5bdee8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x14
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x18
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5bde00
Function at 0x1de5bf340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5bf43f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd7729bc57ac36555
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc578fd14ecfed772
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80d030b02050009
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb070a09080d030b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70a05080504020b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de5bf3c4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x1de5bf3fb
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x1de5bf431
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x1de5bf425
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x1de5bf3a7
jmp 0x1de5bf416
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xe
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x14
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5bf340

Function at 0x1de5c0a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5c0b49
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x436b44219dc8e8f7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x26652a9630051ead
mov qword [rsp + 0x24], rdx
movabs rdx, 0x32f1fe6e3a2e63de
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1001060c030f0804
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100c0f0f1001060c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6020b040d1002
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0609130f101701
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1212161512000a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de5c0ad1
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x24
jge 0x1de5c0b08
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x24
jae 0x1de5c0b3b
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1de5c0b2f
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x1de5c0ab4
jmp 0x1de5c0b23
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x18
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x24
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5c0a20
Function at 0x1de5c0b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5c0c98
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xf769ecdc757479cd
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe7ef66f32cec27e4
mov qword [rsp + 0x20], rdx
movabs rdx, 0xfd2a0376e7ef66f3
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7468e7e900664249
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90b13121a0d0815
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe15180b090b1312
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd11040f19010e13
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9070c050c120a19
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a1a081700000508
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de5c0c20
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x24
jge 0x1de5c0c57
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x24
jae 0x1de5c0c8a
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x1de5c0c7e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1c
jb 0x1de5c0c03
jmp 0x1de5c0c72
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1c
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x24
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de5c0b60

Function at 0x1de5c0da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5c0ebf
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x459aec70b0cd6529
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb958a3496e459aec
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xec806ef2c0636976
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb110c1302140009
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x110602000c050c05
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb05110602000c05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3100a0b06090600
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de5c0e40
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x1de5c0e7c
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x1de5c0eb1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1de5c0ea5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0x15
jb 0x1de5c0e25
jmp 0x1de5c0e97
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x15
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1a
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5c0da0
Function at 0x1de5c4260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5c4393
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x53dbfee27584e8c9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe9bceef9f853ea0a
mov qword [rsp + 0x27], rdx
movabs rdx, 0xf3e9bceef9f853ea
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5d7265f00082db6b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1409080206180115
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90d0605130d150c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc11100108120e
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd040f0b08100c10
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de5c430e
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x20
jge 0x1de5c434d
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x20
jae 0x1de5c4385
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1de5c4374
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0x19
jb 0x1de5c42f4
jmp 0x1de5c4368
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x20
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5c4260

Function at 0x1de5c4f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5c5049
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x556e692947202e28
mov qword [rsp + 0x19], rdx
movabs rdx, 0x46496f556e692947
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x904000201030a07
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2030409
xor eax, eax
jmp 0x1de5c4fce
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x1de5c5008
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0xc
jae 0x1de5c503b
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1de5c502f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x1de5c4fb1
jmp 0x1de5c5023
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xb
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5c4f60
Function at 0x1de5c59e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5c5adf
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa75449eb4774a045
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2ac0afecf3cba49d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0c01040f0e000b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10a0d0e0b0c0104
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90b080701000c0d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de5c5a61
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x14
jge 0x1de5c5a9d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x1de5c5ad1
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1de5c5ac5
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0x10
jb 0x1de5c5a47
jmp 0x1de5c5ab8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x10
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x14
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5c59e0

Function at 0x1de5c5ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5c5cbf
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6fe89f8a2b39f565
mov qword [rsp + 0x18], rdx
movabs rdx, 0x508505657277c5ef
mov qword [rsp + 0x20], rdx
movabs rdx, 0x376917365e99b72
mov qword [rsp + 0x28], rdx
movabs rdx, 0x901050217040309
mov qword [rsp + 0x30], rdx
movabs rdx, 0x111600150e170305
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12060a0205170001
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1615080d02170311
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de5c5c40
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x51]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x1de5c5c7c
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x1de5c5cb1
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1de5c5ca5
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x51]
cmp rsi, 0x18
jb 0x1de5c5c25
jmp 0x1de5c5c97
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x18
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x20
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5c5ba0
Function at 0x1de5c6060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5c615f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x16dc31dd69c702c4
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xda1ccf3d73374616
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40608090c050509
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70e090b04060809
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9000109020e020d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de5c60e1
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x1de5c611d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x1de5c6151
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1de5c6145
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0xf
jb 0x1de5c60c7
jmp 0x1de5c6138
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xf
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x14
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5c6060

Function at 0x1de5c6220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5c633f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xdee438743565d23e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8536fb22bbbedee4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6043a6c423f6e32
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7130807010d1405
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0d131013101001
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8090c15060d03
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0e15100a050c15
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de5c62c0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x1de5c62fc
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x1de5c6331
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x1de5c6325
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0x16
jb 0x1de5c62a5
jmp 0x1de5c6317
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x16
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x20
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5c6220
Function at 0x1de5c6360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5c647f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x45f9cf75a77345c5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6db86ff3e4b16e45
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd63a26ca874b088
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50003160d010305
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf000b00120a1600
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x140b03060f000b00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x903041216100d03
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de5c6400
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x61]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x1de5c643c
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x1de5c6471
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1de5c6465
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x61]
cmp rsi, 0x17
jb 0x1de5c63e5
jmp 0x1de5c6457
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x17
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1c
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5c6360

Function at 0x1de5c76a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5c7793
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7264607d6951726e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x857d5b6e5e726460
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc050a080402040c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30a0b0b0a000c05
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de5c7712
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de5c774e
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x1de5c7785
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1de5c7775
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
cmp rsi, 0xd
jb 0x1de5c76f8
jmp 0x1de5c7769
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xd
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5c76a0