joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0de13c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0de1567
push rbp
mov rbp, rsp
sub rsp, 0x98
movabs rdx, 0xe67463d26c79a4a3
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa691c0de0ee67463
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xecd8131e4dd3f37d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x73c867e2f43d1c0a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xbb6ed220efc96693
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6f2067757320d9e2
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x7cb8819c122a2067
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1604192f1f0a3110
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x2634080410240804
mov qword [rsp + 0x56], rdx
movabs rdx, 0x2d07263408041024
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd0b192a201d2832
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1d322a33131e0724
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe190f0920001332
mov qword [rsp + 0x70], rdx
movabs rdx, 0x18010b2610220214
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1210310d12222018
mov qword [rsp + 0x80], rdx
movabs rdx, 0xc28251b04153315
mov qword [rsp + 0x88], rdx
movabs rdx, 0x30112a1728251412
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x1c0de1503
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x46]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x46]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x4a
jge 0x1c0de1530
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x35
jae 0x1c0de155a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x35
jb 0x1c0de14e6
jmp 0x1c0de154e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x35
nop dword [rax]
call fcn.1c0d542a0
add rsp, 0x98
pop rbp
ret
mov eax, esi
mov ecx, 0x35
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x35
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0de13c0
Function at 0x1c0de17c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0de1947
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x8ebcd698016611e0
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2b0148c0756ceb8b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6207c1436692b01
mov qword [rsp + 0x26], rdx
movabs rdx, 0x332ad6592a361a6c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe51e7475c4ef9746
mov qword [rsp + 0x36], rdx
movabs rdx, 0x73c243019562caca
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x270e0e211a150e04
mov qword [rsp + 0x46], rdx
movabs rdx, 0x10d270e0e211a15
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2b261c0e2919242b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d0c081b241f0627
mov qword [rsp + 0x58], rdx
movabs rdx, 0x313192c07050018
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f1e09032420111c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2a2c1b2a0f030309
mov qword [rsp + 0x70], rdx
movabs rdx, 0x211d180019170412
mov qword [rsp + 0x78], rdx
movabs rdx, 0x5271807251e082b
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x1c0de18e0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x42
jge 0x1c0de1912
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2e
jae 0x1c0de193a
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0x2e
jb 0x1c0de18c2
jmp 0x1c0de192e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2e
nop
call fcn.1c0d542a0
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2e
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x2e
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0de17c0
Function at 0x1c0de1960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0de1b08
push rbp
mov rbp, rsp
sub rsp, 0xa0
movabs rdx, 0x682d637b6a6b5e72
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7240650e5d227262
mov qword [rsp + 0x24], rdx
movabs rdx, 0x96896661562e7240
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6b61754d3d747b2e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x8e206e73986e7980
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x86832d816c744269
mov qword [rsp + 0x42], rdx
movabs rdx, 0x707d61889269749b
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x728f4496696f1e8b
mov qword [rsp + 0x52], rdx
movabs rdx, 0x213b2e280e2c2517
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x1d262b131508213b
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf142d3c1d343a1e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x18021e153631372a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1b0c270c33320813
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2a311e0718171f06
mov qword [rsp + 0x80], rdx
movabs rdx, 0x222e141c041c1e0a
mov qword [rsp + 0x88], rdx
movabs rdx, 0x2736311a0731031b
mov qword [rsp + 0x90], rdx
movabs rdx, 0x3219010b221f031c
mov qword [rsp + 0x98], rdx
xor eax, eax
jmp 0x1c0de1aa3
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x44]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x46
jge 0x1c0de1ad5
movzx edx, byte [rsp + rax + 0x5a]
movzx esi, byte [rsp + rax + 0x5b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3e
jae 0x1c0de1afb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x44]
cmp rsi, 0x3e
jb 0x1c0de1a89
jmp 0x1c0de1aef
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x3e
call fcn.1c0d542a0
add rsp, 0xa0
pop rbp
ret
mov eax, esi
mov ecx, 0x3e
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x3e
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0de1960
Function at 0x1c0de1c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0de1da0
push rbp
mov rbp, rsp
sub rsp, 0xc8
movabs rdx, 0x410cf2740aef2b31
mov qword [rsp + 0x19], rdx
movabs rdx, 0x761686a74c3651c
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1e40b8706c076168
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65c769296e07736e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4d24c2e24d7627fd
mov qword [rsp + 0x36], rdx
movabs rdx, 0x56fb656f64207418
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x3cc07d671e26f6e
mov qword [rsp + 0x46], rdx
movabs rdx, 0x6fb61318e70112eb
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x670984000f61cf63
mov qword [rsp + 0x56], rdx
movabs rdx, 0x2ab8740656667044
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x432b1322332f082f
mov qword [rsp + 0x66], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x1c0f333c2]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.1c0d667ac
mov rbp, qword [rbp]
xor eax, eax
jmp 0x1c0de1d40
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x62
jge 0x1c0de1d6d
movzx edx, byte [rsp + rax + 0x66]
movzx esi, byte [rsp + rax + 0x67]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x4d
jae 0x1c0de1d93
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x4d
jb 0x1c0de1d22
jmp 0x1c0de1d87
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x4d
call fcn.1c0d542a0
add rsp, 0xc8
pop rbp
ret
mov eax, esi
mov ecx, 0x4d
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x4d
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0de1c40
Function at 0x1c0de3120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0de320c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2e74637f646d5072
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x562e74637f646d50
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5065727e59376c6a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3090b0d0404010e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10203090b0d0404
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50101050c100403
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0de31aa
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x1c0de31dc
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0de31ff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x13]
cmp rsi, 0x11
jb 0x1c0de3190
jmp 0x1c0de31f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0de3120
Function at 0x1c0de4f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0de504a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2e7499979e66c1d3
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x9e9e562e7499979e
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf661a1969c2eab32
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf0f0f0f120f0f0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x12100a0301011200
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50409010e0f000c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0de4fed
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x1c0de501a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1c0de503d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x1c0de4fd0
jmp 0x1c0de5031
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x13
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0de4f60
Function at 0x1c0de5540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0de5648
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xc3b8b217ae6da273
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xbd14113c2d0bd1fc
mov qword [rsp + 0x24], rdx
movabs rdx, 0x207463b2bd14113c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xbebd65c0ac2eb5fa
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa040615090c0108
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0c070e0d140e17
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11a0a1b180f1709
mov qword [rsp + 0x48], rdx
movabs rdx, 0x41b05031710140e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0de55eb
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x20
jge 0x1c0de5618
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x1c0de563b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x1c0de55ce
jmp 0x1c0de562f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1c
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0de5540

Function at 0x1c0de6140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0de622a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2e74f5d8b11a7472
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20d72e74f5d8b11a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6d2a6ccec5cf756c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20c0e050301040d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x803020c0e050301
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x509020401080310
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x1c0de61cd
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x5f]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x5f]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x1c0de61fa
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1c0de621d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x1c0de61b0
jmp 0x1c0de6211
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x12
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0de6140
Function at 0x1c0de6f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0de706a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2e9c8565a7660c80
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb493652e9c8565a7
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb86574c588be6575
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30105000d080d05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3000f0a0e050a03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1090a060f120d0d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0de700d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x1c0de703a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1c0de705d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x1c0de6ff0
jmp 0x1c0de7051
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x13
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0de6f80

Function at 0x1c0de8000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0de80bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4b879762974b2e74
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x203d
movabs rdx, 0x607050405030406
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3030606
xor eax, eax
jmp 0x1c0de8060
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x1c0de808d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x1c0de80b0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x1c0de8043
jmp 0x1c0de80a4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xa
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0de8000
Function at 0x1c0de9ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0de9d9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65ba8f958dbd059d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x63a8aa692065ba8f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x209c49e261c988eb
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2110f13030d1302
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb11041212030a0e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe0102060b110412
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50013020206000e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0de9d40
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x1c0de9d6d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1c0de9d90
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x1c0de9d1f
jmp 0x1c0de9d84
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x15
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0de9ca0

Function at 0x1c0dea2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dea3c8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x74c99aa378a980b2
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x76a57da38620aec5
mov qword [rsp + 0x23], rdx
movabs rdx, 0x8176a57da38620ae
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8ca395d220658e76
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10110009050d180b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x216090d080d0601
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x170415040216090d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10e090901120c00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0dea36b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x1c0dea398
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1c0dea3bb
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x1c0dea34e
jmp 0x1c0dea3af
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x19
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dea2c0
Function at 0x1c0deab80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0deac47
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3233567161765522
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6569645b
movabs rdx, 0x500050801000005
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4010b0b0a040500
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0deabe8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x1c0deac17
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x1c0deac3a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x1c0deabcb
jmp 0x1c0deac2e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0deab80

Function at 0x1c0deb060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0deb13d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x11c3fb16d8672f12
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x76651f6c248dff11
mov qword [rsp + 0x26], rdx
movabs rdx, 0x903090e0800070a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6030903090e0800
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4090503030e010c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0deb0e0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x1c0deb10d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1c0deb130
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x1c0deb0c2
jmp 0x1c0deb124
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xf
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0deb060
Function at 0x1c0deb160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0deb232
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4a6d63625d30654e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x42633464624a6d63
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7000a020409080b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3020b050c05050a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0deb1cc
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x1c0deb1fe
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1c0deb225
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0xd
jb 0x1c0deb1b2
jmp 0x1c0deb215
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xd
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0deb160

Function at 0x1c0df4d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0df4e68
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6641206874d45753
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5fdb53ebe3d9513c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x649d5fdb53ebe3d9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4719c054e1c3d661
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1309190118021708
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10e0e17170f0215
mov qword [rsp + 0x40], rdx
movabs rdx, 0x180b100c14141508
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130b191501190a08
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0df4e0b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x1c0df4e38
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1c0df4e5b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x1c0df4dee
jmp 0x1c0df4e4f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1a
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0df4d60
Function at 0x1c0df61e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0df62ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xabc0c567b972b950
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x736e0c85b020abc0
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1d551fd0d9647261
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd09130513141207
mov qword [rsp + 0x30], rdx
movabs rdx, 0x91405140b0b0a11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x91401031514060b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0df626d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x42]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x42]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x1c0df629a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x1c0df62bd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x1c0df6250
jmp 0x1c0df62b1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x16
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0df61e0

Function at 0x1c0df6b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0df6bea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xcbbbc77274b666d9
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x21ba3bbe53cbbbc7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x86c5c9541f64bb61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa02050b0a0c0c01
mov qword [rsp + 0x32], rdx
movabs rdx, 0x714010906060a02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x13120e00100e0e0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0df6b8d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x1c0df6bba
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1c0df6bdd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x1c0df6b70
jmp 0x1c0df6bd1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x15
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0df6b00