joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0e4fce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xfb83796e149b611
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3020307060401
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x500
xor eax, eax
jmp 0x1c0e4fd34
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x1c0e4fd68
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e4fda5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x72]
nop dword [rax + rax]
cmp rbx, 8
jb 0x1c0e4fd1a
jmp 0x1c0e4fd97
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1c0e4fd81
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1c0e4fd75
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
nop
int3

Function at 0x1c0e52d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xc39677c42331b03c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x206040202000602
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1c0e52d4f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x7d]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x1c0e52d7a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e52db5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x1c0e52d33
jmp 0x1c0e52da9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1c0e52d93
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1c0e52d87
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.1c0d66180
nop
int3
Function at 0x1c0e55680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e55752
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xac4c8b627c457fc2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6c6ca6ac4c8b627c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x607040303080007
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x205030600010607
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e556ec
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x1c0e5571e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0e55745
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0xb
jb 0x1c0e556d2
jmp 0x1c0e55735
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e55680
Function at 0x1c0e59340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e5943b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xacb0e064ea697542
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x73b9e0dbcf308e75
mov qword [rsp + 0x26], rdx
movabs rdx, 0xbdf76fa0700d7263
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x505160c0a0e0512
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0b0e0317140616
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x120c0d0b0e031714
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0b09120d050703
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e593d9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x56]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1a
jge 0x1c0e5940b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1c0e5942e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x56]
cmp rsi, 0x18
jb 0x1c0e593bf
jmp 0x1c0e59422
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x18
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0e59340

Function at 0x1c0e5a4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e5a5dd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa8e37265d51f2f22
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf2ee3e9643ea8e3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcb0469c7376ee412
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1512060a0b00070b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa0d0c140a0f030a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70e0a0d0c140a0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc02080612150111
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0e5a580
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x1c0e5a5ad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x1c0e5a5d0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x1c0e5a55f
jmp 0x1c0e5a5c4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x16
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e5a4e0
Function at 0x1c0e5ae20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e5af1b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x52696e6576798343
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8d875c5d60745269
mov qword [rsp + 0x22], rdx
movabs rdx, 0x73846986575a7045
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x130c0f140d050c01
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb1412130c141509
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x15150f0613060b14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110a020207150e10
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e5aeb9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x1c0e5aeeb
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x1c0e5af0e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0x16
jb 0x1c0e5ae9f
jmp 0x1c0e5af02
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x16
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0e5ae20

Function at 0x1c0e5b7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e5b88a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x71481d749679e37c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0721b0f71481d74
mov qword [rsp + 0x20], rdx
movabs rdx, 0xef130d191fb6f12
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30f06000c010b0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60e100000001312
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30509080e110f00
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0e5b82d
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x1c0e5b85a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1c0e5b87d
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x1c0e5b810
jmp 0x1c0e5b871
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x14
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e5b7a0
Function at 0x1c0e5c4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e5c58c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3d3eebf7b6cbfae
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x6469c768
movabs rdx, 0x401090706020003
mov qword [rsp + 0x28], rdx
movabs rdx, 0x600060500060909
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e5c525
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x65]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x1c0e5c55c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x1c0e5c57f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x65]
cmp rsi, 0xc
jb 0x1c0e5c50b
jmp 0x1c0e5c573
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e5c4c0

Function at 0x1c0e5c5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e5c68a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6465e261f0dbd747
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x72b7e9f2536465e2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5f65766e49e6dde0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x114130905020b00
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0f0e12010e0114
mov qword [rsp + 0x38], rdx
movabs rdx, 0x312090d01090b0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0e5c62d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x1c0e5c65a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1c0e5c67d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x1c0e5c610
jmp 0x1c0e5c671
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x15
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e5c5a0
Function at 0x1c0e5c6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e5c7c7
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xb21dce430924270b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x94a4b6544c81dd7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20cad685094a4b65
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6ce9280fe2234383
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1402000818091011
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1909120205031606
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x317190912020503
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1311100a030f1a12
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1210041907120201
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe13001004100d12
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1c0e5c769
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x2a
jge 0x1c0e5c797
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x1c0e5c7ba
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x1c0e5c74c
jmp 0x1c0e5c7ae
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.1c0d542a0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1c
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e5c6a0

Function at 0x1c0e5cb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e5cc5d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x26752efbf7434e0d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x726373f846327469
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7026726373f84632
mov qword [rsp + 0x24], rdx
movabs rdx, 0x31f66f2f4b512308
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc050b1800031214
mov qword [rsp + 0x34], rdx
movabs rdx, 0x31912040c050b18
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70207100a040404
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110001600051214
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0104140a0b1315
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e5cc00
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x1c0e5cc2d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1c0e5cc50
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x1c0e5cbdd
jmp 0x1c0e5cc44
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1a
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e5cb40
Function at 0x1c0e5d780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e5d85d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7275f0d2120e6547
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf9ed6e72efcb7972
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40b0a0e020b0403
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90b040b0a0e020b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x908080902040d05
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0e5d800
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x1c0e5d82d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1c0e5d850
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x1c0e5d7e2
jmp 0x1c0e5d844
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xf
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e5d780

Function at 0x1c0e60920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e609f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x160543c51625114f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x57721c10c56e1605
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2030903070a0903
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x60204060b010203
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x1c0e6098c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x1c0e609be
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x1c0e609e5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 0xe
jb 0x1c0e60972
jmp 0x1c0e609d5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xe
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e60920
Function at 0x1c0e62600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e626dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c7b95c851869c52
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7f7871768c5b6e80
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0e01040c0a050e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2060b0e01040c0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0d040407080108
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0e62680
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 8]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 8]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x1c0e626ad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1c0e626d0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x1c0e62662
jmp 0x1c0e626c4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x10
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e62600

Function at 0x1c0e66680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e6677d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x64f5698febe6feb0
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8337a30c64f5698f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20729fca1e6e49f8
mov qword [rsp + 0x24], rdx
movabs rdx, 0x11131010090b030a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb100803090c0601
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb0f110b100803
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0802040f0b13
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0e66720
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x1c0e6674d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1c0e66770
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x1c0e666ff
jmp 0x1c0e66764
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x14
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e66680
Function at 0x1c0e667a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e6688a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x646e33427472373c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x19646e3342747237
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xdff63015dfb37435
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90c0e0f10000b0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x800090c0e0f1000
mov qword [rsp + 0x30], rdx
movabs rdx, 0x901050b0e0d04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e6682d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x44]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x44]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x1c0e6685a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0e6687d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x1c0e66810
jmp 0x1c0e66871
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e667a0

Function at 0x1c0e678a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e679a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x698073628aa25343
mov qword [rsp + 0x38], rdx
movabs rdx, 0x665a7d7277439781
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9568879b8561ae69
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7963967471886ea3
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b080b1c08130215
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1709150e1d0d0104
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1803051a110e080b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x140d030e0206171d
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e6794b
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 + 0x10]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
cmp rax, 0x20
jge 0x1c0e67978
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x1c0e6799b
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x20
jb 0x1c0e6792e
jmp 0x1c0e6798f
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x20
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x20
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e678a0
Function at 0x1c0e691a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e6928c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7460223741273a47
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5173366574602237
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1d65d9730afc6464
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0b010106010b0e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2040e090f0b0101
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1301051109130111
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x1c0e6922a
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x1c0e6925c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1c0e6927f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0x14
jb 0x1c0e69210
jmp 0x1c0e69273
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x14
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e691a0

Function at 0x1c0e6baa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e6bb9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7e7a8e86996d7243
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x85854b6760687148
mov qword [rsp + 0x24], rdx
movabs rdx, 0x625b687370694453
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x40b0d0e080f0305
mov qword [rsp + 0x34], rdx
movabs rdx, 0x60b05070317060b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x16060205060b0507
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0911060b0c1204
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e6bb39
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1c
jge 0x1c0e6bb6b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1c0e6bb8e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0x18
jb 0x1c0e6bb1f
jmp 0x1c0e6bb82
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x18
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0e6baa0