joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de5499c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1de549b53
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x64b1fa9d05a261c5
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xada8617ba8209d74
mov qword [rsp + 0x27], rdx
movabs rdx, 0x50ada8617ba8209d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf722cdf42b87f0f5
mov qword [rsp + 0x30], rdx
movabs rdx, 0x83c5d28dca6eef08
mov qword [rsp + 0x38], rdx
movabs rdx, 0xfd25203af5aaa998
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11090c220c151724
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d211a160f032828
mov qword [rsp + 0x50], rdx
movabs rdx, 0x161c04121e18191c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5001f201c170f24
mov qword [rsp + 0x60], rdx
movabs rdx, 0x20f160613220228
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2023031e1e060017
mov qword [rsp + 0x70], rdx
movabs rdx, 0x90e0004030b0712
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x1de549ac7
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x38
jge 0x1de549b08
movzx edx, byte [rsp + rax + 0x48]
lea rsi, [rax + 1]
cmp rsi, 0x38
jae 0x1de549b45
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x1de549b35
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
nop dword [rax + rax]
cmp rsi, 0x29
jb 0x1de549aad
jmp 0x1de549b29
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x29
call fcn.1de48b520
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x29
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x29
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x38
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5499c0
Function at 0x1de54df40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de54e093
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x5f0af9cbb8b12073
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1513c5f66b650640
mov qword [rsp + 0x20], rdx
movabs rdx, 0xccb0db369a5b401
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9e0058c11d6c62e0
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0712010e1b1d18
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1c1f15180f1c0416
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80c1f070c11020c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0f0900140c1f06
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1510141715091406
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2050117101e031c
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1de54e00c
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x30
jge 0x1de54e04d
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
nop dword [rax + rax]
cmp rsi, 0x30
jae 0x1de54e085
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x1de54e074
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 0x20
jb 0x1de54dff2
jmp 0x1de54e068
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.1de48b520
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x20
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x30
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de54df40
Function at 0x1de552ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de552e49
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x632d6f5c5f6a7203
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6f414b6457636b4c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x69775b8b75420af2
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x44493a55764d652e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x74317007fa207443
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x40a091b16141a1d
mov qword [rsp + 0x44], rdx
movabs rdx, 0x170c2021040a091b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2121e261c000d23
mov qword [rsp + 0x50], rdx
movabs rdx, 0x141f1d1c1d211a1c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x18101c241a151c18
mov qword [rsp + 0x60], rdx
movabs rdx, 0x3040d060e181e19
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1402110d1c080a0b
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x1de552dca
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1c]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x34
jge 0x1de552e08
movzx edx, byte [rsp + rax + 0x44]
lea rsi, [rax + 1]
cmp rsi, 0x34
jae 0x1de552e3b
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x1de552e2f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1c]
nop
cmp rsi, 0x28
jb 0x1de552db0
jmp 0x1de552e23
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x28
call fcn.1de48b520
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x28
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x28
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x34
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de552ce0

Function at 0x1de553b00
Capabilities:
Encode data using xor

Disassembly:
mov rbx, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x20]
test rdx, 0xf
jne 0x1de553b6b
mov rax, 0
movdqu xmm0, xmmword [rsi + rax]
movdqu xmm1, xmmword [rcx + rax]
pxor xmm0, xmm1
movdqu xmmword [rbx + rax], xmm0
add rax, 0x10
cmp rdx, rax
jne 0x1de553b24
ret
sub rdx, 1
mov dil, byte [rsi + rdx]
mov al, byte [rcx + rdx]
xor dil, al
mov byte [rbx + rdx], dil
test rdx, 7
jne 0x1de553b41
cmp rdx, 0
je 0x1de553b8d
test rdx, 0xf
je 0x1de553b1d
test rdx, 7
jne 0x1de553b41
sub rdx, 8
mov rdi, qword [rsi + rdx]
mov rax, qword [rcx + rdx]
xor rdi, rax
mov qword [rbx + rdx], rdi
cmp rdx, 0x10
jge 0x1de553b1d
ret
Function at 0x1de554420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de55455f
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x222f6f680915051e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x71116ef6211ce365
mov qword [rsp + 0x27], rdx
movabs rdx, 0xf1eafaf43f71116e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x202c7769ee967965
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1b0b001001070a09
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe010e021b0b0010
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13000403121b041a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170b140103110f0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a1212100e180c11
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1de5544e0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x1de55451c
movzx edx, byte [rsp + rax + 0x3c]
lea rsi, [rax + 1]
cmp rsi, 0x24
jae 0x1de554551
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x1de554545
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0x1d
jb 0x1de5544c3
jmp 0x1de554537
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.1de48b520
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1d
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x24
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de554420

Function at 0x1de558980
Capabilities:
Decrypt data using aes via x86 extensions

Disassembly:
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 0x10]
mov rdx, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x20]
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rbx]
add rax, 0x10
pxor xmm0, xmm1
sub rcx, 0xc
je 0x1de5589bf
jb 0x1de5589d4
movups xmm1, xmmword [rax]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesdec xmm0, xmm1
add rax, 0x20
movups xmm1, xmmword [rax]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesdec xmm0, xmm1
add rax, 0x20
movups xmm1, xmmword [rax]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x20]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x30]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x40]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x50]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x60]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x70]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x80]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x90]
aesdeclast xmm0, xmm1
movups xmmword [rdx], xmm0
ret
Function at 0x1de558a40
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 0x10]
mov rbx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x20]
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
add rbx, 0x10
pxor xmm4, xmm4
cmp ecx, 0xc
je 0x1de558b10
jb 0x1de558b6f
movups xmm2, xmmword [rax + 0x10]
movups xmmword [rbx], xmm2
add rbx, 0x10
aeskeygenassist xmm1, xmm2, 1
call fcn.1de558920
aeskeygenassist xmm1, xmm0, 1
call fcn.1de558940
aeskeygenassist xmm1, xmm2, 2
call fcn.1de558920
aeskeygenassist xmm1, xmm0, 2
call fcn.1de558940
aeskeygenassist xmm1, xmm2, 4
call fcn.1de558920
aeskeygenassist xmm1, xmm0, 4
call fcn.1de558940
aeskeygenassist xmm1, xmm2, 8
call fcn.1de558920
aeskeygenassist xmm1, xmm0, 8
call fcn.1de558940
aeskeygenassist xmm1, xmm2, 0x10
call fcn.1de558920
aeskeygenassist xmm1, xmm0, 0x10
call fcn.1de558940
aeskeygenassist xmm1, xmm2, 0x20
call fcn.1de558920
aeskeygenassist xmm1, xmm0, 0x20
call fcn.1de558940
aeskeygenassist xmm1, xmm2, 0x40
call fcn.1de558920
jmp 0x1de558bdd
movq xmm2, qword [rax + 0x10]
aeskeygenassist xmm1, xmm2, 1
call fcn.1de558880
aeskeygenassist xmm1, xmm2, 2
call fcn.1de5588e0
aeskeygenassist xmm1, xmm2, 4
call fcn.1de558880
aeskeygenassist xmm1, xmm2, 8
call fcn.1de5588e0
aeskeygenassist xmm1, xmm2, 0x10
call fcn.1de558880
aeskeygenassist xmm1, xmm2, 0x20
call fcn.1de5588e0
aeskeygenassist xmm1, xmm2, 0x40
call fcn.1de558880
aeskeygenassist xmm1, xmm2, 0x80
call fcn.1de5588e0
jmp 0x1de558bdd
aeskeygenassist xmm1, xmm0, 1
call fcn.1de558840
aeskeygenassist xmm1, xmm0, 2
call fcn.1de558840
aeskeygenassist xmm1, xmm0, 4
call fcn.1de558840
aeskeygenassist xmm1, xmm0, 8
call fcn.1de558840
aeskeygenassist xmm1, xmm0, 0x10
call fcn.1de558840
aeskeygenassist xmm1, xmm0, 0x20
call fcn.1de558840
aeskeygenassist xmm1, xmm0, 0x40
call fcn.1de558840
aeskeygenassist xmm1, xmm0, 0x80
call fcn.1de558840
aeskeygenassist xmm1, xmm0, 0x1b
call fcn.1de558840
aeskeygenassist xmm1, xmm0, 0x36
call fcn.1de558840
sub rbx, 0x10
movups xmm1, xmmword [rbx]
movups xmmword [rdx], xmm1
dec rcx
movups xmm1, xmmword [rbx - 0x10]
aesimc xmm0, xmm1
movups xmmword [rdx + 0x10], xmm0
sub rbx, 0x10
add rdx, 0x10
dec rcx
jne 0x1de558bea
movups xmm0, xmmword [rbx - 0x10]
movups xmmword [rdx + 0x10], xmm0
ret
Function at 0x1de55c5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de55c675
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1a], 0x65e57931
mov word [rsp + 0x1e], 0x4e10
movabs rdx, 0x400040400050502
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de55c5f4
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 8
jge 0x1de55c630
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de55c667
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 6
jae 0x1de55c65b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 6
jb 0x1de55c5da
jmp 0x1de55c64f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 6
nop dword [rax]
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 6
call fcn.1de49fa60
mov eax, edi
mov ecx, 6
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de55c5a0

Function at 0x1de55ca00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de55cad5
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x19], 0xb14c9e98
mov dword [rsp + 0x1c], 0x52ad9cb1
movabs rdx, 0x501000405030203
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de55ca58
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 8
jge 0x1de55ca8f
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de55cac7
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 7
jae 0x1de55cabb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 7
jb 0x1de55ca3b
jmp 0x1de55caaf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 7
nop dword [rax + rax]
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 7
call fcn.1de49fa60
mov eax, edi
mov ecx, 7
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de55ca00
Function at 0x1de55d1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de55d29f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2af32b05652e372f
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x4f
movabs rdx, 0x600010606010802
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5070405
xor eax, eax
jmp 0x1de55d224
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x1de55d25b
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x1de55d291
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1de55d285
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x1de55d207
jmp 0x1de55d276
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 9
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de55d1c0

Function at 0x1de55d2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de55d3a9
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x4e53c2b9f461fc24
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x99f1
movabs rdx, 0x409030009050709
mov qword [rsp + 0x22], rdx
movabs rdx, 0x808070501090409
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x1de55d32a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de55d368
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x1de55d39b
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x1de55d38f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
nop
cmp rsi, 0xa
jb 0x1de55d310
jmp 0x1de55d383
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xa
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de55d2c0
Function at 0x1de55dc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de55dd7f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x1c74a06564a8dc52
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2d6f1dbb332b2e6d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x501020c07060502
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5020501020c0706
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0b090d070c0a0f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de55dd04
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x1de55dd3b
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x1de55dd71
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1de55dd65
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x1de55dce7
jmp 0x1de55dd56
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x10
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x12
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de55dc80

Function at 0x1de55e9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de55eabf
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x20fd696c61ed0a69
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1865060a7bf46c20
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6080b0b0c090c08
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0606080b0b0c09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10e0e0a02060a0e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de55ea44
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x1de55ea7b
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x1de55eab1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1de55eaa5
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x1de55ea27
jmp 0x1de55ea96
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xf
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x12
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de55e9c0
Function at 0x1de55eae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de55ebeb
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc30014062042392d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x56c3001406204239
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf5fd446220d94f72
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1040f0401060b00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf050e0800071008
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70a0f020e0f000e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de55eb73
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x43]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x43]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x1de55ebaa
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x1de55ebdd
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1de55ebd1
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x1de55eb56
jmp 0x1de55ebc5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x11
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x18
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de55eae0

Function at 0x1de562400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5624d5
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1a], 0x647b7600
mov word [rsp + 0x1e], 0xf6f1
movabs rdx, 0x404040201040500
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de562454
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 8
jge 0x1de562490
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de5624c7
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 6
jae 0x1de5624bb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
cmp rsi, 6
jb 0x1de56243a
jmp 0x1de5624af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 6
nop dword [rax]
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 6
call fcn.1de49fa60
mov eax, edi
mov ecx, 6
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de562400
Function at 0x1de565e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de565f1f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x742f6b3a43583865
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x30
movabs rdx, 0x300050302050001
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 7
xor eax, eax
jmp 0x1de565ea3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x1de565eda
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x1de565f11
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1de565f05
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x1de565e86
jmp 0x1de565ef5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 9
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xa
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de565e40

Function at 0x1de566600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de56670b
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xe663b0c478bd6ebc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd7e7d0fae663b0c4
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd1d0676e746ca070
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x812020f120f0712
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90408130c0d0812
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa12050b130b0200
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de566693
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x1de5666ca
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x1de5666fd
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1de5666f1
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x1de566676
jmp 0x1de5666e5
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x14
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x16
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de566600