joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0e137c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e13887
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe045610653d165dc
mov qword [rsp + 0x19], rdx
movabs rdx, 0x37643de045610653
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4080200070a0200
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x602080a
xor eax, eax
jmp 0x1c0e13828
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x1c0e13857
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x1c0e1387a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x1c0e1380b
jmp 0x1c0e1386e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e137c0

Function at 0x1c0e1a900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e1aa47
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xad63287032f94075
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1f51ad63287032f9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xea496956e753e4ea
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2acb6f081e005ae0
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2082716ff272522d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2190a121818200d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd1f02190a121818
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1607140d0918111d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x191f141a0b031612
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8191b0708152019
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1108101d0d050c13
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe18010803080d10
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x1c0e1a9e7
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x5c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x5c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x32
jge 0x1c0e1aa17
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x1c0e1aa3a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x22
jb 0x1c0e1a9ca
jmp 0x1c0e1aa2e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x22
call fcn.1c0d542a0
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x22
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e1a900
Function at 0x1c0e1ace0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e1adac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe1bde3b1f972a4b0
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x65ffc3e1bde3b1f9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x609070501040507
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x606000803060609
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e1ad4f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x1c0e1ad7c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0e1ad9f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x1c0e1ad32
jmp 0x1c0e1ad93
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e1ace0

Function at 0x1c0e1c3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e1c4cc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x869b916ea135db78
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6c6f7078746e9cae
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6c6c6f7078746e9c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7a8bd88ec29b662e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1413170717011614
mov qword [rsp + 0x34], rdx
movabs rdx, 0x130009080506030d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x20c070713000908
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140315160d180709
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e1c468
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x1c0e1c49c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x1c0e1c4bf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x19
jb 0x1c0e1c44e
jmp 0x1c0e1c4b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x19
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e1c3c0
Function at 0x1c0e1c640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e1c767
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x19a86673c7901275
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6589ff85a1a06f6c
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa1839f5ffbd48e23
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6e6fdc5408656e6e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100d0110130d0c04
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc1d1c0615010e02
mov qword [rsp + 0x44], rdx
movabs rdx, 0x7031b070c1d1c06
mov qword [rsp + 0x48], rdx
movabs rdx, 0x31410171611151b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d1b0d13121b131d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20d0a0c1115070b
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1c0e1c709
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x2c
jge 0x1c0e1c737
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x1c0e1c75a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x20
jb 0x1c0e1c6ec
jmp 0x1c0e1c74e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.1c0d542a0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x20
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e1c640

Function at 0x1c0e1c920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e1ca47
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x19a86673c7901275
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6589ff85a1a06f6c
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa1839f5ffbd48e23
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6e6fdc5408656e6e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100d0110130d0c04
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc1d1c0615010e02
mov qword [rsp + 0x44], rdx
movabs rdx, 0x7031b070c1d1c06
mov qword [rsp + 0x48], rdx
movabs rdx, 0x31410171611151b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d1b0d13121b131d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20d0a0c1115070b
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1c0e1c9e9
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x2c
jge 0x1c0e1ca17
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x1c0e1ca3a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x20
jb 0x1c0e1c9cc
jmp 0x1c0e1ca2e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.1c0d542a0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x20
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e1c920
Function at 0x1c0e1cac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e1cb87
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2088b3d480927369
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x68949fb2
movabs rdx, 0x805090403010408
mov qword [rsp + 0x28], rdx
movabs rdx, 0x805040609090a02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e1cb28
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x1c0e1cb57
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x1c0e1cb7a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x1c0e1cb0b
jmp 0x1c0e1cb6e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e1cac0
Function at 0x1c0e2a820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e2a958
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xeb209405fa7b71f1
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7284bf72eb209405
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9d03b697610cf971
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656c706df37b1b67
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb41e6223f1001d3a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x50c02160e131320
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x201d11131e032011
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1041f201d1113
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50a11220e10000d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x230712020e161317
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7051509091d231c
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1c0e2a8f8
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x2c
jge 0x1c0e2a928
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x1c0e2a94b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x24
jb 0x1c0e2a8db
jmp 0x1c0e2a93f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x24
call fcn.1c0d542a0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x24
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop dword [rax]
jmp fcn.1c0e2a820

Function at 0x1c0e2c640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e2c72a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3798abe5059eee30
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xee3798abe5059eee
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x58a7f390439b9feb
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80b0b060a09090d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2040f09080b0b06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x401030e06090506
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e2c6cd
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x1c0e2c6fa
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0e2c71d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x1c0e2c6b0
jmp 0x1c0e2c711
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e2c640
Function at 0x1c0e2c940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e2ca2a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3717f0c8691031c4
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8f3717f0c8691031
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xffbf029a63f1cc39
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2100408100b050f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd03020000060210
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20a0d04030a030e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e2c9cd
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x1c0e2c9fa
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0e2ca1d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x1c0e2c9b0
jmp 0x1c0e2ca11
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e2c940

Function at 0x1c0e2cc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e2cd2a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x375d7f745f8d7f30
mov qword [rsp + 0x19], rdx
movabs rdx, 0x85375d7f745f8d7f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x68505aa06c48618a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9030408040e0210
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd010b0309040903
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5020906050c010f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e2cccd
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x1c0e2ccfa
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0e2cd1d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x1c0e2ccb0
jmp 0x1c0e2cd11
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e2cc40
Function at 0x1c0e2cd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e2ce2c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x148635e2e12c0a8c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x38148635e2e12c0a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xefaee8a8e4056139
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40f020e070c07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x603010d0e0f0004
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100b0f02010e0304
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e2cdca
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x1c0e2cdfc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0e2ce1f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
cmp rsi, 0x11
jb 0x1c0e2cdb0
jmp 0x1c0e2ce13
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e2cd40

Function at 0x1c0e2d2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e2d407
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x21948d20a1a99566
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x736f6297ded46fdc
mov qword [rsp + 0x25], rdx
movabs rdx, 0x86ee37a13a6c273
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4ad39471c5d6b7a1
mov qword [rsp + 0x34], rdx
movabs rdx, 0x71d13101207141d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x506190c0b161a16
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1a07121e0506190c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x308171c07011e07
mov qword [rsp + 0x50], rdx
movabs rdx, 0x160e0c1d1b110a0c
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc03031318170214
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1c0e2d3a9
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x2c
jge 0x1c0e2d3d7
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x1c0e2d3fa
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1f
jb 0x1c0e2d38c
jmp 0x1c0e2d3ee
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1f
call fcn.1c0d542a0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1f
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e2d2e0
Function at 0x1c0e2e6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e2e78a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x91a43f55527c7d6c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8b91a43f55527c7d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7392689663878d77
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa020e09010f0806
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3090a020e09010f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd07090b04030508
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e2e72d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 8]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 8]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x1c0e2e75a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0e2e77d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x1c0e2e710
jmp 0x1c0e2e771
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e2e6a0

Function at 0x1c0e2e7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e2e88c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x493475203a0ff736
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb76e493475203a0f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7265647210340891
mov qword [rsp + 0x22], rdx
movabs rdx, 0x109010d0d070d0a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60b0a020b0109
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20d0201090c0d07
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e2e82a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x26]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x1c0e2e85c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1c0e2e87f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x26]
cmp rsi, 0x12
jb 0x1c0e2e810
jmp 0x1c0e2e873
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x12
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e2e7a0
Function at 0x1c0e2e8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e2e9ac
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x4369e41d3af57a6c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8d252025cfe469e9
mov qword [rsp + 0x23], rdx
movabs rdx, 0x8c3e0f2238d2520
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6518e4c7729b6646
mov qword [rsp + 0x30], rdx
movabs rdx, 0x17051215071a1a02
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0f130c0408111a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x190c0f1b021a1005
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb040c15140a0c11
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e2e948
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x1c0e2e97c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x1c0e2e99f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0x1d
jb 0x1c0e2e92e
jmp 0x1c0e2e993
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1d
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e2e8a0

Function at 0x1c0e2e9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e2eaaa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xbd85692016775a93
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x68bd85692016775a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6564a2639db49d6c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x60b0308030c0b0e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0e0e0c060b0308
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa000103030c070a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e2ea4d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x1c0e2ea7a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0e2ea9d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x1c0e2ea30
jmp 0x1c0e2ea91
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e2e9c0
Function at 0x1c0e31680
Capabilities:
Hash data using fnv

Disassembly:
test byte [rax], al
mov rcx, rbx
and ebx, 0x7f
shl rbx, 5
lea rdx, [rax + rbx]
xor eax, eax
jmp 0x1c0e31697
inc rax
cmp rax, 4
jge 0x1c0e316af
lea rbx, [rdx + rax*8]
mov rbx, qword [rbx]
cmp rbx, rcx
jne 0x1c0e31694
mov eax, 1
ret
xor eax, eax
movabs rbx, 0xcbf29ce484222325
jmp 0x1c0e316c0
inc rax
cmp rax, 4
jge 0x1c0e316ce
mov rsi, qword [rdx + rax*8]
xor edi, edi
jmp 0x1c0e316f7
and ebx, 3
lea rdx, [rdx + rbx*8]
xchg qword [rdx], rcx
xor eax, eax
ret
movzx r8d, sil
xor rbx, r8
inc rdi
shr rsi, 8
movabs r8, 0x100000001b3
imul rbx, r8
cmp rdi, 8
jl 0x1c0e316db
jmp 0x1c0e316bd

Function at 0x1c0e31ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e31ddd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x208891b490646e69
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xda8c7fa3427478af
mov qword [rsp + 0x24], rdx
movabs rdx, 0x98a0cd9ec46e7933
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8050910030d0414
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1405040615091602
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x17130b0f14050406
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0c10170e09150b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e31d80
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x1c0e31dad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1c0e31dd0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x1c0e31d5f
jmp 0x1c0e31dc4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x18
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e31ce0