joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1de58ae80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de58af9f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x445f0765112b4d43
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x646fdd0d01445f07
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3b3f532c7453c665
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2090803080a0e08
mov qword [rsp + 0x34], rdx
movabs rdx, 0x905030e12080802
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x130a03090905030e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x808130213110814
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de58af22
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1c
jge 0x1de58af59
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x1de58af91
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1de58af85
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x1de58af05
jmp 0x1de58af74
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x15
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1c
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de58ae80

Function at 0x1de58afc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de58b113
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xc785daedd6d74dc2
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc0495f65b71faace
mov qword [rsp + 0x21], rdx
movabs rdx, 0xbf78724cb4c0495f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd77451fbdc5465e1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1715110b05171a13
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1c0f1a1511181302
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x5041c0f1a151118
mov qword [rsp + 0x40], rdx
movabs rdx, 0x810100615070b0a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb0018190b060b07
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1800031814090808
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1de58b08c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x76]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x1de58b0cd
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
nop dword [rax + rax]
cmp rsi, 0x2a
jae 0x1de58b105
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x1de58b0f4
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x76]
cmp rsi, 0x1d
jb 0x1de58b072
jmp 0x1de58b0e8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.1de48b520
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x2a
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de58afc0
Function at 0x1de58b120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de58b278
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x5f745f7ca369ae8d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x76a95f745f7ca369
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5e678df35f8b4e3a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7c77706574a0677e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x798ab86b53b86eba
mov qword [rsp + 0x38], rdx
movabs rdx, 0x21508051a04070a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1302100505101410
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb030510120c1917
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b011f01171e0614
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf05100b041f1118
mov qword [rsp + 0x60], rdx
movabs rdx, 0x201c00210e201f1f
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x1de58b200
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x30
jge 0x1de58b237
movzx edx, byte [rsp + rax + 0x40]
lea rsi, [rax + 1]
cmp rsi, 0x30
jae 0x1de58b26a
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x1de58b25e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x22
jb 0x1de58b1e2
jmp 0x1de58b252
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x22
call fcn.1de48b520
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x22
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x22
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x30
call fcn.1de49fa60
nop
call fcn.1de49d360
nop dword [rax]
jmp fcn.1de58b120

Function at 0x1de58b2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de58b3ab
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xfce035a3ad5fb2d2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3535fce035a3ad5f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb11a4532b84e6957
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6110705010c100c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80d0005030c0910
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40d070c03100c0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de58b333
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x1de58b36a
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x1de58b39d
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1de58b391
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x1de58b316
jmp 0x1de58b385
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x12
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x18
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de58b2a0
Function at 0x1de58c5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de58c6ff
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xf523f7136e201343
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3a453e55f523f713
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x46674266d16f4950
mov qword [rsp + 0x24], rdx
movabs rdx, 0x11020113090f0504
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x11110d1307060409
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb06060411110d13
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4050c0709080a0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de58c682
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x1de58c6b9
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x1de58c6f1
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1de58c6e5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x1de58c665
jmp 0x1de58c6d4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x14
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1c
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de58c5e0

Function at 0x1de58c720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de58c83f
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x544954406830685b
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc644404b54495440
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7055003972571a27
mov qword [rsp + 0x24], rdx
movabs rdx, 0x100a0c0d040d0b04
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80c02040711120e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x9120d06080c0204
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4040703100012
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de58c7c2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x1de58c7f9
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x1de58c831
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1de58c825
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x1de58c7a5
jmp 0x1de58c814
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x14
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1c
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de58c720
Function at 0x1de58c860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de58c973
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xb6c5b4c5c6006c43
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2776b6c5b4c5c600
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6508c4c0fdba2b26
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa020b0d0b090c10
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50a06040a020b0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x203070f0b0c0e09
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de58c8f0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x1de58c92d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
nop
cmp rsi, 0x14
jae 0x1de58c965
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1de58c954
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
cmp rsi, 0x12
jb 0x1de58c8d6
jmp 0x1de58c948
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x12
nop dword [rax + rax]
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x14
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de58c860

Function at 0x1de58eea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de58efab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x3b3c4a74e320f843
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3a6c3b3c4a74e320
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe736536e38423a54
mov qword [rsp + 0x38], rdx
movabs rdx, 0x307060201061107
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb07030706020106
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa1003090c0b0d05
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x1de58ef33
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x1de58ef6a
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x1de58ef9d
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1de58ef91
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x1de58ef16
jmp 0x1de58ef85
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x12
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x12
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de58eea0
Function at 0x1de590b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de590cbf
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xd435631ce80265e8
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2b6336482da4fdac
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa61a2b6336482da4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x37ac4c9247490430
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x709070814170d16
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0c0d1807090708
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60d1911100c0712
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1009080b00190300
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2060f13031804
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de590c40
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x1de590c7c
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x24
jae 0x1de590cb1
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1de590ca5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0x1a
jb 0x1de590c23
jmp 0x1de590c97
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1a
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x24
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de590b80

Function at 0x1de590dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de590ee9
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9c75b09c90748e47
mov qword [rsp + 0x36], rdx
movabs rdx, 0x72b28d6571877983
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x708072b28d657187
mov qword [rsp + 0x40], rdx
movabs rdx, 0x72656e804f626f6f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1010405140b0b04
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3120e0704100404
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0d03120e070410
mov qword [rsp + 0x26], rdx
movabs rdx, 0x801010716100e09
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x1de590e71
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1a
jge 0x1de590ea8
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x1de590edb
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1de590ecf
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x1a
jb 0x1de590e54
jmp 0x1de590ec3
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1a
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1a
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de590dc0
Function at 0x1de593680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5937bf
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x9d1fe23261029c27
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9679742372d7dd65
mov qword [rsp + 0x23], rdx
movabs rdx, 0x119679742372d7dd
mov qword [rsp + 0x24], rdx
movabs rdx, 0xae0174acaa7229f3
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0218140a0f0a0f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x120515010c021814
mov qword [rsp + 0x38], rdx
movabs rdx, 0x17040c15090710
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11514180906110f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1214180a10181115
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de593740
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x1de59377c
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x24
jae 0x1de5937b1
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1de5937a5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0x19
jb 0x1de593723
jmp 0x1de593797
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x19
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x24
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de593680

Function at 0x1de593d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de593e2b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xc5110d7570e32dd0
mov qword [rsp + 0x19], rdx
movabs rdx, 0x63c5110d7570e32d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x226469c4c6fb1fc6
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0506020305000d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9090b0007090a05
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd010c010a0a0710
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de593db3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x1de593dea
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x1de593e1d
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1de593e11
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x1de593d96
jmp 0x1de593e05
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x11
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x16
call fcn.1de49fa60
nop
call fcn.1de49d360
jmp fcn.1de593d20
Function at 0x1de5946c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de5947bf
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa26f02f3030af293
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xfffd060d0013fc0c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x902070f030d0004
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10e050f0c0a0902
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0b04080c0b0809
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1de594741
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x1de59477d
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x1de5947b1
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1de5947a5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x10
jb 0x1de594727
jmp 0x1de594798
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.1de48b520
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x10
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x16
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de5946c0

Function at 0x1de594c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de594d3f
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x965263d446581f0
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8220697f0965263d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57aea1a5a26e0288
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7050b0a0c0f11
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100d0c120712100b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1000410100d0c12
mov qword [rsp + 0x38], rdx
movabs rdx, 0x801011012080312
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1de594cc2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x1de594cf9
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x1de594d31
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1de594d25
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x1de594ca5
jmp 0x1de594d14
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.1de48b520
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x14
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x1c
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de594c20
Function at 0x1de596f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de59705f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x5e1b7265ab9825df
mov qword [rsp + 0x19], rdx
movabs rdx, 0xee37d4820f21e5e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1f0f203ee363fcdb
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc09140610030703
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100a0e12160915
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb16070f02011510
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc130107080d0d01
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1de596fe2
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x1de597019
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x1de597051
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1de597045
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x1de596fc5
jmp 0x1de597034
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.1de48b520
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
nop dword [rax + rax]
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x17
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x20
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de596f40

Function at 0x1de597d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1de597e5f
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x52d7496da9319cd9
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xeae678db62237431
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7037eae678db6223
mov qword [rsp + 0x26], rdx
movabs rdx, 0xdb656e77b6a26f74
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0500030315040d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4070b0500030315
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140b011000150a15
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0205060f0d1910
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40c01190e0a0408
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1de597de0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x1de597e1c
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
cmp rsi, 0x22
jae 0x1de597e51
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1de597e45
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x73]
cmp rsi, 0x1a
jb 0x1de597dc3
jmp 0x1de597e37
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.1de48b520
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
nop
call fcn.1de49fa60
mov eax, edi
mov ecx, 0x1a
call fcn.1de49fa60
mov rax, rsi
mov ecx, 0x22
call fcn.1de49fa60
nop
nop
call fcn.1de49d360
jmp fcn.1de597d20