joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de4ba620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4ba6e9
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
mov word [rsp + 0x1e], 0xb9da
mov word [rsp + 0x1c], 0
mov byte [rsp + 0x1d], 1
xor eax, eax
jmp 0x1de4ba66c
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 2
jge 0x1de4ba6a8
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
nop dword [rax + rax]
cmp rsi, 2
jae 0x1de4ba6db
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 2
jae 0x1de4ba6cf
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 2
jb 0x1de4ba64f
jmp 0x1de4ba6c3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 2
call fcn.1de48b520
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov eax, esi
mov ecx, 2
call fcn.1de49fa60
mov eax, edi
mov ecx, 2
call fcn.1de49fa60
mov rax, rsi
mov ecx, 2
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4ba620

Function at 0x1de4ba860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4ba926
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
mov word [rsp + 0x1e], 0x6453
mov word [rsp + 0x1c], 0
xor eax, eax
jmp 0x1de4ba8a4
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 2
jge 0x1de4ba8e2
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
cmp rsi, 2
jae 0x1de4ba915
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 2
jae 0x1de4ba909
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
cmp rsi, 2
jb 0x1de4ba88a
nop
jmp 0x1de4ba8fd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 2
call fcn.1de48b520
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov eax, esi
mov ecx, 2
call fcn.1de49fa60
mov eax, edi
mov ecx, 2
call fcn.1de49fa60
mov rax, rsi
mov ecx, 2
nop dword [rax]
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4ba860

Function at 0x1de4baa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4baabf
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
mov word [rsp + 0x1e], 0x66dc
mov word [rsp + 0x1c], 0
xor eax, eax
jmp 0x1de4baa47
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 2
jge 0x1de4baa7e
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
cmp rsi, 2
jae 0x1de4baab1
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 2
jae 0x1de4baaa5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 2
jb 0x1de4baa2a
jmp 0x1de4baa99
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 2
call fcn.1de48b520
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov eax, esi
mov ecx, 2
call fcn.1de49fa60
mov eax, edi
mov ecx, 2
call fcn.1de49fa60
mov rax, rsi
mov ecx, 2
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4baa00
Function at 0x1de4bc280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4bc35f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov dword [rsp + 0x1f], 0xcc818561
mov dword [rsp + 0x22], 0x697e61cc
movabs rdx, 0x105000003030303
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x302
xor eax, eax
jmp 0x1de4bc2e0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x1de4bc31c
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x1de4bc351
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 7
jae 0x1de4bc345
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x23]
cmp rsi, 7
jb 0x1de4bc2c2
jmp 0x1de4bc337
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 7
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 7
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 7
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xa
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4bc280

Function at 0x1de4bd980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4bda69
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2fb2252b723a35c1
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xec37
movabs rdx, 0x202010701060805
mov qword [rsp + 0x22], rdx
movabs rdx, 0x407000900090202
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x1de4bd9ea
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de4bda28
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x1de4bda5b
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x1de4bda4f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2f]
nop
cmp rsi, 0xa
jb 0x1de4bd9d0
jmp 0x1de4bda43
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xa
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4bd980
Function at 0x1de4beae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4bebb8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7c8fb98f848e9744
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x602020506010704
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6010703
xor eax, eax
jmp 0x1de4beb40
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x1de4beb77
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x1de4bebaa
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1de4beb9e
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x1de4beb22
jmp 0x1de4beb92
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.1de49fa60
mov eax, edi
mov ecx, 8
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de4beae0

Function at 0x1de4bf720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4bf7f5
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x19], 0x6eb7b197
mov dword [rsp + 0x1c], 0xa5d8af6e
movabs rdx, 0x6060206050401
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de4bf775
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 8
jge 0x1de4bf7b1
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de4bf7e7
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 7
jae 0x1de4bf7db
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 7
jb 0x1de4bf75b
jmp 0x1de4bf7cf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 7
nop dword [rax]
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 7
call fcn.1de49fa60
mov eax, edi
mov ecx, 7
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4bf720
Function at 0x1de4bfba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4bfc7f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xd4d56b4514d545d7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x302040106070401
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x200
xor eax, eax
nop
jmp 0x1de4bfc00
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x1de4bfc3c
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x1de4bfc71
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1de4bfc65
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6f]
cmp rsi, 8
jb 0x1de4bfbe2
jmp 0x1de4bfc57
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 8
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xa
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4bfba0

Function at 0x1de4c13c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c149f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x53ea53556142614a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x602010407050101
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6010507
xor eax, eax
jmp 0x1de4c1420
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x1de4c145c
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x1de4c1491
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1de4c1485
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 8
jb 0x1de4c1402
jmp 0x1de4c1477
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 8
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xc
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4c13c0
Function at 0x1de4c14c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c1595
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1a], 0xc693f84b
mov word [rsp + 0x1e], 0x98a4
movabs rdx, 0x405020401020403
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de4c1514
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 8
jge 0x1de4c1550
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de4c1587
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 6
jae 0x1de4c157b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 6
jb 0x1de4c14fa
jmp 0x1de4c156f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 6
nop dword [rax]
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 6
call fcn.1de49fa60
mov eax, edi
mov ecx, 6
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c14c0

Function at 0x1de4c2aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c2b6d
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1d], 0x6661654c
mov byte [rsp + 0x21], 0x60
mov dword [rsp + 0x22], 0x2010303
mov word [rsp + 0x26], 0x403
xor eax, eax
jmp 0x1de4c2af5
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0xd]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 6
jge 0x1de4c2b2c
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 6
jae 0x1de4c2b5f
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 5
jae 0x1de4c2b53
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 5
jb 0x1de4c2ad8
jmp 0x1de4c2b47
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 5
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 5
call fcn.1de49fa60
mov eax, edi
mov ecx, 5
call fcn.1de49fa60
mov rax, rsi
mov ecx, 6
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c2aa0
Function at 0x1de4c3580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c3655
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x19], 0x61a3e4f8
mov dword [rsp + 0x1c], 0x9990861
movabs rdx, 0x205010004060205
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de4c35d8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 8
jge 0x1de4c360f
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de4c3647
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 7
jae 0x1de4c363b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 7
jb 0x1de4c35bb
jmp 0x1de4c362f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 7
nop dword [rax + rax]
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 7
call fcn.1de49fa60
mov eax, edi
mov ecx, 7
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c3580

Function at 0x1de4c46a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c478d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x55697e696d7b425c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65765b737b7d435f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x307010007010d0d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x20b07030300050a
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de4c4715
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x1de4c474c
movzx edx, byte [rsp + rax + 0x18]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x1de4c477f
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1de4c4773
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
cmp rsi, 0x10
jb 0x1de4c46f8
jmp 0x1de4c4767
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x10
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x10
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c46a0
Function at 0x1de4c4ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c4f95
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x19], 0x6e9eb54d
mov dword [rsp + 0x1c], 0xa79e306e
movabs rdx, 0x106060604060205
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de4c4f18
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 8
jge 0x1de4c4f4f
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de4c4f87
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 7
jae 0x1de4c4f7b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 7
jb 0x1de4c4efb
jmp 0x1de4c4f6f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 7
nop dword [rax + rax]
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 7
call fcn.1de49fa60
mov eax, edi
mov ecx, 7
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c4ec0

Function at 0x1de4c4fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c507f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xa96561887162bfc0
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x90
movabs rdx, 0x704010103000007
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x801
xor eax, eax
jmp 0x1de4c5003
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x1de4c503a
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x1de4c5071
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1de4c5065
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x1de4c4fe6
jmp 0x1de4c5055
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop dword [rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 9
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xa
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de4c4fa0
Function at 0x1de4c50a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c518d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x48601a694b4161cc
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x544f0f48601a694b
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa05020705000808
mov qword [rsp + 0x28], rdx
movabs rdx, 0x906080800030a03
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de4c5115
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x1de4c514c
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x1de4c517f
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1de4c5173
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x1de4c50f8
jmp 0x1de4c5167
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xb
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x10
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c50a0

Function at 0x1de4c5f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c5fe9
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7265f6878e81fe
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x1669
movabs rdx, 0x2030403030209
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70901070002
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x1de4c5f6a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de4c5fa8
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x1de4c5fdb
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x1de4c5fcf
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
nop
cmp rsi, 0xa
jb 0x1de4c5f50
jmp 0x1de4c5fc3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xa
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c5f00
Function at 0x1de4c6000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c60ed
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc7babedf5f64d856
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xef3169c7babedf5f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x409070405090006
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa06010905040409
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1de4c6075
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x1de4c60ac
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x1de4c60df
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1de4c60d3
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x1de4c6058
jmp 0x1de4c60c7
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.1de48b520
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xb
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c6000

Function at 0x1de4c7d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c7e53
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1a], 0x616a76da
mov word [rsp + 0x1e], 0x22d8
movabs rdx, 0x105000504050104
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de4c7dd7
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 8
jge 0x1de4c7e0e
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de4c7e45
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 6
jae 0x1de4c7e35
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 6
jb 0x1de4c7dba
jmp 0x1de4c7e29
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 6
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 6
call fcn.1de49fa60
mov eax, edi
mov ecx, 6
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c7d80
Function at 0x1de4c8260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c8349
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x12680a8a8c119353
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xa7a4
movabs rdx, 0x801020701080309
mov qword [rsp + 0x22], rdx
movabs rdx, 0x909040905030801
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x1de4c82ca
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x1de4c8308
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x1de4c833b
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x1de4c832f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
nop
cmp rsi, 0xa
jb 0x1de4c82b0
jmp 0x1de4c8323
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.1de48b520
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.1de49fa60
mov eax, edi
mov ecx, 0xa
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0xe
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c8260

Function at 0x1de4c93e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de4c94b3
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1a], 0x69726477
mov word [rsp + 0x1e], 0x535f
movabs rdx, 0x4040400010504
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x1de4c9437
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 8
jge 0x1de4c946e
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x1de4c94a5
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 6
jae 0x1de4c9495
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 6
jb 0x1de4c941a
jmp 0x1de4c9489
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 6
call fcn.1de48b520
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 6
call fcn.1de49fa60
mov eax, edi
mov ecx, 6
nop dword [rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 8
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de4c93e0