joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0dbf620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dbf6f8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe8e3f53b616823ea
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x1dfb736d
movabs rdx, 0xb01000009070705
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4040b0100000907
mov qword [rsp + 0x28], rdx
movabs rdx, 0x505000a070a0506
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0dbf694
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x1c0dbf6c8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1c0dbf6eb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
nop
cmp rsi, 0xc
jb 0x1c0dbf67a
jmp 0x1c0dbf6df
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop dword [rax]
jmp fcn.1c0dbf620

Function at 0x1c0dc0780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dc0838
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9777060662a9b60b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x204050702020100
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 5
xor eax, eax
jmp 0x1c0dc07d5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x1c0dc0808
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1c0dc082b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
nop
cmp rsi, 8
jb 0x1c0dc07bb
jmp 0x1c0dc081f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
mov eax, edi
mov ecx, 8
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop dword [rax]
jmp fcn.1c0dc0780

Function at 0x1c0dc08e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dc0992
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x276c69563bed6154
mov qword [rsp + 0x20], rdx
movabs rdx, 0x307060706020206
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x1c0dc0931
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x43]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x43]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x1c0dc095e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1c0dc0985
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x1c0dc0914
jmp 0x1c0dc0975
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.1c0d542a0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 8
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dc08e0
Function at 0x1c0dc14e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dc15ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd86f575f03bdb942
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xdf6f7246
movabs rdx, 0x20508050503010b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70303050803070b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0dc1545
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x80]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x1c0dc157c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x1c0dc159f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x80]
cmp rsi, 0xc
jb 0x1c0dc152b
jmp 0x1c0dc1593
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dc14e0

Function at 0x1c0dc2bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dc2cbd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2f9e9f83c594d1ac
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x67b75f9a6574a32f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x749e696fa35fe4a1
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100f140d0e001207
mov qword [rsp + 0x32], rdx
movabs rdx, 0x14030f0708070f12
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x15061501020e1403
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5140b0412100407
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0dc2c60
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 9]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 9]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x1c0dc2c8d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1c0dc2cb0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x1c0dc2c3f
jmp 0x1c0dc2ca4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x17
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0dc2bc0
Function at 0x1c0dc3500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dc35fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x19fa5ed16568d24f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe7536b70e019fa5e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe36ecccdee27a1c5
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80a07080a140f0e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10b1212010a0d0e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa01140c010b1212
mov qword [rsp + 0x40], rdx
movabs rdx, 0x810040105040611
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0dc35a0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x1c0dc35cd
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1c0dc35f0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x1c0dc357f
jmp 0x1c0dc35e4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x15
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0dc3500

Function at 0x1c0dc4e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dc4f12
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x74810aff1a666f39
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2e657474810aff1a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x404000000030a0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5000a030a030506
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0dc4eac
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x1c0dc4ede
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0dc4f05
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
cmp rsi, 0xb
jb 0x1c0dc4e92
jmp 0x1c0dc4ef5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dc4e40
Function at 0x1c0dc88a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dc898a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x94f24893d9747962
mov qword [rsp + 0x19], rdx
movabs rdx, 0x74873a9765874194
mov qword [rsp + 0x20], rdx
movabs rdx, 0xaa8185e0b6566f6f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1105120612060313
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0813150309070b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1406151404091416
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0dc892d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x1c0dc895a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1c0dc897d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x1c0dc8910
jmp 0x1c0dc8971
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x17
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dc88a0

Function at 0x1c0dcb980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0dcbab5
push rbp
mov rbp, rsp
sub rsp, 0xa8
movabs rdx, 0x90c6e8eb85c38bc0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1f61f0e514b16920
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2966c180b1ba0b55
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x943e056cda6e6faf
mov qword [rsp + 0x34], rdx
movabs rdx, 0x87d33012292c42fe
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x209041fc2f87cdaf
mov qword [rsp + 0x44], rdx
movabs rdx, 0x98099261c5e01962
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x102d0128030d0c2c
mov qword [rsp + 0x54], rdx
lea rdi, [rsp + 0x58]
lea rsi, [0x1c0f31c18]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.1c0d667ba
mov rbp, qword [rbp]
xor eax, eax
jmp 0x1c0dcba54
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x54
jge 0x1c0dcba82
movzx edx, byte [rsp + rax + 0x54]
movzx esi, byte [rsp + rax + 0x55]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x38
jae 0x1c0dcbaa8
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x38
jb 0x1c0dcba37
nop
jmp 0x1c0dcba9c
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x38
call fcn.1c0d542a0
add rsp, 0xa8
pop rbp
ret
mov eax, esi
mov ecx, 0x38
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x38
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dcb980
Function at 0x1c0dcbac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dcbbe7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x7763a74ce420f62
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x75cd0085a7a5766e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa083a1a8fae480d4
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6574ca5403616572
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100d0110130d0c04
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc1d1c0615010e02
mov qword [rsp + 0x44], rdx
movabs rdx, 0x7031b070c1d1c06
mov qword [rsp + 0x48], rdx
movabs rdx, 0x31410171611151b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d1b0d13121b131d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20d0a0c1115070b
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1c0dcbb89
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x2c
jge 0x1c0dcbbb7
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x1c0dcbbda
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x20
jb 0x1c0dcbb6c
jmp 0x1c0dcbbce
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.1c0d542a0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x20
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dcbac0

Function at 0x1c0dcd300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dcd41a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x4953545d6aef7549
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2b183a474fd16e1d
mov qword [rsp + 0x27], rdx
movabs rdx, 0x20531b196f2b183a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6746eef9356f3174
mov qword [rsp + 0x34], rdx
movabs rdx, 0x40303160e1a1a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x413041a00040303
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5080a051612110c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe08160713071b0b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x120f0c0719051802
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1c0dcd3b7
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x24
jge 0x1c0dcd3e9
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x1c0dcd40d
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x1d
jb 0x1c0dcd39d
jmp 0x1c0dcd401
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.1c0d542a0
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1d
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop
jmp fcn.1c0dcd300
Function at 0x1c0dcd440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0dcd5e8
push rbp
mov rbp, rsp
sub rsp, 0xa0
movabs rdx, 0xd95316f69b7d6df
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc22772116969950d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e6e8304696c99fc
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x32b0eaec07243af2
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80026108fe8324fa
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x46e4df03146e6503
mov qword [rsp + 0x42], rdx
movabs rdx, 0xa76e75d8042065f2
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2a0d1d1500272006
mov qword [rsp + 0x52], rdx
movabs rdx, 0xa2619020d26000e
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x13182e13051c0a26
mov qword [rsp + 0x60], rdx
movabs rdx, 0x60e250b09362619
mov qword [rsp + 0x68], rdx
movabs rdx, 0xf360a230d181e19
mov qword [rsp + 0x70], rdx
movabs rdx, 0x3314092210092f00
mov qword [rsp + 0x78], rdx
movabs rdx, 0x102d1a10071d2c17
mov qword [rsp + 0x80], rdx
movabs rdx, 0x3221290e27271f07
mov qword [rsp + 0x88], rdx
movabs rdx, 0x12d2a2b331b1f32
mov qword [rsp + 0x90], rdx
movabs rdx, 0x1a2b32150820060e
mov qword [rsp + 0x98], rdx
xor eax, eax
jmp 0x1c0dcd583
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x4e
jge 0x1c0dcd5b5
movzx edx, byte [rsp + rax + 0x52]
movzx esi, byte [rsp + rax + 0x53]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x1c0dcd5db
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x37
jb 0x1c0dcd569
jmp 0x1c0dcd5cf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x37
call fcn.1c0d542a0
add rsp, 0xa0
pop rbp
ret
mov eax, esi
mov ecx, 0x37
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x37
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dcd440
Function at 0x1c0ddaac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0ddabec
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xbf20c199d174bd91
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x619a7ec7bf20c199
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa57570757611e6b4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6ec464205a94a5bc
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6ea695b698abc827
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x11141a1d0c050d1d
mov qword [rsp + 0x42], rdx
movabs rdx, 0xc1e04200c0e1114
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1504210007041303
mov qword [rsp + 0x50], rdx
movabs rdx, 0x131f0108171e220d
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd0116100a1a0908
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1c0ddab86
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x26
jge 0x1c0ddabbc
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x24
jae 0x1c0ddabdf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5b]
cmp rsi, 0x24
jb 0x1c0ddab6c
jmp 0x1c0ddabd3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x24
call fcn.1c0d542a0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x24
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0ddaac0

Function at 0x1c0ddac00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0ddacea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7463f6e0d365e375
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x61d62064f37463f6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6257f86f204c75ce
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1413030d0d0f110b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4010d01120b1108
mov qword [rsp + 0x38], rdx
movabs rdx, 0x51408130f080413
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0ddac8d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x5f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x5f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x1c0ddacba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1c0ddacdd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x1c0ddac70
jmp 0x1c0ddacd1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x15
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0ddac00
Function at 0x1c0ddb4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0ddb5e7
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x3a5ff8666c289172
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x616ea7e7746e2120
mov qword [rsp + 0x25], rdx
movabs rdx, 0x7272eee16c616ea7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd476adcceeda809f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6874046d13fd690a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xfb65126e2920d9eb
mov qword [rsp + 0x42], rdx
movabs rdx, 0xc061704060d041d
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x22061d0211161c19
mov qword [rsp + 0x52], rdx
movabs rdx, 0x1518222601172206
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f011a1211261d05
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc202a051f0d2525
mov qword [rsp + 0x68], rdx
movabs rdx, 0x122811170917092c
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x1c0ddb587
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x5e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x2e
jge 0x1c0ddb5b7
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2d
jae 0x1c0ddb5da
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x2d
jb 0x1c0ddb56a
jmp 0x1c0ddb5ce
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2d
call fcn.1c0d542a0
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x2d
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0ddb4a0

Function at 0x1c0ddb720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0ddb7e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3a74c065b8161cca
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x16
movabs rdx, 0x802050300020105
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 2
xor eax, eax
nop
jmp 0x1c0ddb780
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x1c0ddb7b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1c0ddb7d7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5f]
cmp rsi, 9
jb 0x1c0ddb762
jmp 0x1c0ddb7cb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.1c0d66180
mov eax, edi
mov ecx, 9
nop
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0ddb720
Function at 0x1c0ddd020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0ddd10c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3a7476bfbfc97172
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x203a7476bfbfc971
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x86977bcd5396763
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb020c0e0a100b0e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x110040f0b020c0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0201030d050d04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0ddd0aa
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x1c0ddd0dc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0ddd0ff
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6c]
cmp rsi, 0x11
jb 0x1c0ddd090
jmp 0x1c0ddd0f3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0ddd020

Function at 0x1c0dde260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dde37a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x3a74869e80cd8e72
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9d6f20b4e48c5520
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6c9e769769209d6f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x96935877758d8f69
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf0f0f0b120c1701
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x14040a1204020f0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf1405191d030902
mov qword [rsp + 0x48], rdx
movabs rdx, 0x31a0a1c18021b1c
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa1d021c0c02041d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1c0dde317
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x26
jge 0x1c0dde349
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x1c0dde36d
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0x1e
jb 0x1c0dde2fd
jmp 0x1c0dde361
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.1c0d542a0
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1e
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop
jmp fcn.1c0dde260