joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de5aab60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5aac98
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x656b753e3b74636d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7377646f4c465f60
mov qword [rsp + 0x22], rdx
movabs rdx, 0x69447377646f4c46
mov qword [rsp + 0x24], rdx
movabs rdx, 0x866b676f74104d72
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10414130b0a0414
mov qword [rsp + 0x34], rdx
movabs rdx, 0x303090601041413
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9030001180a000a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb050d080b010619
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5030c0d080a1705
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de5aac20
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x24
jge 0x1de5aac57
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x24
jae 0x1de5aac8a
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1de5aac7e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x1de5aac03
jmp 0x1de5aac72
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1a
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x24
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de5aab60

Function at 0x1de5aacc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5aadb3
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4a613b3b55746504
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x573f293e
movabs rdx, 0x6060a0003080403
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70709000503070a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de5aad2b
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x1de5aad6d
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0x10
jae 0x1de5aada5
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1de5aad94
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0xc
jb 0x1de5aad11
jmp 0x1de5aad88
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x10
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5aacc0
Function at 0x1de5aadc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5aaee9
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xad4472b0b7746535
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7272c8d0dad5504e
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb449f213547272c8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x73ed67b07537c761
mov qword [rsp + 0x32], rdx
movabs rdx, 0x410141707031900
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x190316110b100d06
mov qword [rsp + 0x42], rdx
movabs rdx, 0xc0b161414081903
mov qword [rsp + 0x48], rdx
movabs rdx, 0x190d1917120a041b
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de5aae71
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x1de5aaea8
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
cmp rsi, 0x1e
jae 0x1de5aaedb
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x1de5aaecf
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x1de5aae54
jmp 0x1de5aaec3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1d
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1e
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5aadc0

Function at 0x1de5ac3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5ac4f3
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x310e6c2e3d744d2d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5065310e6c2e3d74
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2e1726294e2b7455
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10f110710100f04
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa04060a010f1107
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe100c0300000407
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de5ac470
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x1de5ac4ad
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
nop
cmp rsi, 0x14
jae 0x1de5ac4e5
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1de5ac4d4
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
cmp rsi, 0x12
jb 0x1de5ac456
jmp 0x1de5ac4c8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x12
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x14
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5ac3e0
Function at 0x1de5ac500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5ac653
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x6c7d6c6f6b617569
mov qword [rsp + 0x18], rdx
movabs rdx, 0xebae6ee174619c65
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb56fbd7c6f888565
mov qword [rsp + 0x28], rdx
movabs rdx, 0x579a6d58b78a6dbe
mov qword [rsp + 0x30], rdx
movabs rdx, 0x618091b0c0f011e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1117110611151800
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b1b0f0911020e0c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140117120c091a1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x110d07010e061c09
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7101803071e011c
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1de5ac5cc
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x30
jge 0x1de5ac60d
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
nop dword [rax + rax]
cmp rsi, 0x30
jae 0x1de5ac645
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x1de5ac634
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0x20
jb 0x1de5ac5b2
jmp 0x1de5ac628
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.1de48b520
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x20
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x30
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5ac500

Function at 0x1de5ae0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5ae17f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x9d096946f763b720
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x72c6
movabs rdx, 0x800070607010900
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1000803
xor eax, eax
jmp 0x1de5ae106
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x1de5ae13d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x1de5ae171
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x1de5ae165
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x1de5ae0e9
jmp 0x1de5ae158
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xa
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5ae0a0
Function at 0x1de5ae1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5ae293
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x879eeb130d0e09a5
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x65630e75
movabs rdx, 0x301040602070000
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x504090900020301
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de5ae20b
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de5ae24d
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0xe
jae 0x1de5ae285
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1de5ae274
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
cmp rsi, 0xc
jb 0x1de5ae1f1
jmp 0x1de5ae268
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5ae1a0

Function at 0x1de5ae740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5ae829
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf8ee0546650cd94d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x57fd31f8ee054665
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x508090607060601
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1060208
xor eax, eax
jmp 0x1de5ae7ae
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x1de5ae7e8
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0xc
jae 0x1de5ae81b
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1de5ae80f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x1de5ae791
jmp 0x1de5ae803
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xb
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5ae740
Function at 0x1de5aea20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5aeb2b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa7874269a5b6054d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6fbe65a7874269a5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x72af17ecf3f3b9b9
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10030e0f0d031010
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60f070e10030e0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9110109020c0b03
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de5aeab3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x1de5aeaea
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x1de5aeb1d
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1de5aeb11
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x1de5aea96
jmp 0x1de5aeb05
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x13
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x14
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5aea20

Function at 0x1de5af680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5af79f
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xff16076526c5ac5b
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf46fb994ff160765
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x644939fb6934a965
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8090605010610
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7090910000b0902
mov qword [rsp + 0x34], rdx
movabs rdx, 0x605070807090910
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7030e110d030202
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de5af722
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x71]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x1de5af759
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x1de5af791
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1de5af785
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x1de5af705
jmp 0x1de5af774
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x14
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1c
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5af680
Function at 0x1de5b0440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5b0569
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x7a884979748a9c7f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6e5669a569688150
mov qword [rsp + 0x27], rdx
movabs rdx, 0x4a6e5669a5696881
mov qword [rsp + 0x28], rdx
movabs rdx, 0x888e8fb66792aa96
mov qword [rsp + 0x30], rdx
movabs rdx, 0x81508000e0a0202
mov qword [rsp + 0x38], rdx
movabs rdx, 0x160c141217030a0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x218010814071603
mov qword [rsp + 0x48], rdx
movabs rdx, 0x111061307090608
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de5b04f1
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0xd]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x1de5b0528
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x1de5b055b
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1de5b054f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x1de5b04d4
jmp 0x1de5b0543
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x19
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x20
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5b0440

Function at 0x1de5b1400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5b14e9
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6b9eef79aa736552
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xa98d
movabs rdx, 0x506090506070304
mov qword [rsp + 0x22], rdx
movabs rdx, 0x807070409040506
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x1de5b146d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x1de5b14a8
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0xe
jae 0x1de5b14db
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x1de5b14cf
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x1de5b1450
jmp 0x1de5b14c3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xa
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5b1400
Function at 0x1de5b2060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5b217f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x75d1ced0447465e5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x72e844e83c443ad0
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5bc7cbc66f582c2a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0e101117121400
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90c171111161004
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x15050408090c1711
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12170c060e08160e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de5b2100
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x79]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x1de5b213c
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x1de5b2171
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1de5b2165
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x79]
cmp rsi, 0x18
jb 0x1de5b20e5
jmp 0x1de5b2157
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x18
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1c
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5b2060

Function at 0x1de5b2ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5b2e33
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x43cf6ca6c9c2c629
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2a2f43cf6ca6c9c2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4ea3a569ace16c18
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc2c74769660474a0
mov qword [rsp + 0x30], rdx
movabs rdx, 0xaddf64e037d86fb1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x61c081c1e171e14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x181710100009001d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d1a201e200c101e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x200c210d04030219
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf1801010012010a
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1de5b2dac
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x28
jge 0x1de5b2ded
movzx edx, byte [rsp + rax + 0x40]
lea rsi, [rax + 1]
nop dword [rax + rax]
cmp rsi, 0x28
jae 0x1de5b2e25
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x1de5b2e14
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
cmp rsi, 0x22
jb 0x1de5b2d92
jmp 0x1de5b2e08
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x22
call fcn.1de48b520
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x22
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x22
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x28
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5b2ce0
Function at 0x1de5b3760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5b387f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x1f146d244ef765c3
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6ed523cdb406c71f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65b95b19d5a80364
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x415080d06141213
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa06000a020c1307
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb0811110a06000a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80a00110d040910
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de5b3800
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x1de5b383c
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x1de5b3871
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1de5b3865
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 0x17
jb 0x1de5b37e5
jmp 0x1de5b3857
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x17
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1c
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5b3760

Function at 0x1de5b3c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5b3d53
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x656cb1a2d93cd231
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xcfcb12e568b7e7ce
mov qword [rsp + 0x22], rdx
movabs rdx, 0xbf28d562cfcb12e5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x73fb574db1df611b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1703091906161a10
mov qword [rsp + 0x36], rdx
movabs rdx, 0x16140d040103000e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1a0916140d040103
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20412050819180d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110805180d0c0211
mov qword [rsp + 0x50], rdx
movabs rdx, 0x160a0f040e111301
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1de5b3ccc
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x2a
jge 0x1de5b3d0d
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
nop dword [rax + rax]
cmp rsi, 0x2a
jae 0x1de5b3d45
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x1de5b3d34
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x72]
cmp rsi, 0x1c
jb 0x1de5b3cb2
jmp 0x1de5b3d28
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.1de48b520
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x2a
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de5b3c00