joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1d21cdf
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xf2
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x5cb35ffb]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21d0b
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d21cea
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21d1c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x51
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x439034d7]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21d46
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d21d25
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21d57
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x6b
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x24dad98d]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21d81
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d21d60
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21d92
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x72
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x19bbce3f]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21dbc
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d21d9b
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21dcd
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xdf
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x63e7fe22]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21df9
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 3
jl 0x1d21dd8
mov byte [esi + 3], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21e0a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x41
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x50424327]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21e34
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d21e13
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21e45
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x61
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0xd99c7c]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21e6f
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d21e4e
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d21e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xa1
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0xea4c448]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21eac
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d21e8b
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21ebd
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x23
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x1034b460]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21ee7
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d21ec6
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21ef8
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xc5
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x253fb515]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21f24
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d21f03
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21f35
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x2e
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x21548aa9]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21f5f
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d21f3e
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21f70
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x21
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x4bd414f1]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21f9a
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x22
jl 0x1d21f79
mov byte [esi + 0x22], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21fab
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x41
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x476e8141]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d21fd5
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x4d
jl 0x1d21fb4
mov byte [esi + 0x4d], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d21fe6
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xa0
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x22e16139]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22012
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d21ff1
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d22023
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x10
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x22d79d2a]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d2204d
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x2b
jl 0x1d2202c
mov byte [esi + 0x2b], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d2205e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xd2
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x6bfeb8]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d2208a
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d22069
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d2209b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xb9
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x502e9ee]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d220c7
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 7
jl 0x1d220a6
mov byte [esi + 7], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d220d8
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xfb
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x19c5e0a1]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22104
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x11
jl 0x1d220e3
mov byte [esi + 0x11], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22115
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x25
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0xbd18333]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d2213f
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x10
jl 0x1d2211e
mov byte [esi + 0x10], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22150
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xfe
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x384d78a9]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d2217c
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 5
jl 0x1d2215b
mov byte [esi + 5], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d2218d
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x52
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x348f3a4e]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d221b7
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xf
jl 0x1d22196
mov byte [esi + 0xf], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d221c8
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xa3
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x4d60225e]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d221f4
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 6
jl 0x1d221d3
mov byte [esi + 6], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22205
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0x9c
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x288d35e3]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22231
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 5
jl 0x1d22210
mov byte [esi + 5], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22242
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x42
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x4a886bfc]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d2226c
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xb
jl 0x1d2224b
mov byte [esi + 0xb], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d2227d
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x63
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x20173b08]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d222a7
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 6
jl 0x1d22286
mov byte [esi + 6], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d222b8
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x6f
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x7aa769b9]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d222e2
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d222c1
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d222f3
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x1e
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x632d2c28]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d2231d
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xb
jl 0x1d222fc
mov byte [esi + 0xb], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d2232e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x39
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x5bf7902c]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22358
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xf
jl 0x1d22337
mov byte [esi + 0xf], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d22369
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x7a
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x926a33f]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22393
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 6
jl 0x1d22372
mov byte [esi + 6], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d223a4
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 7
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x23702ce1]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d223ce
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d223ad
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d223df
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xdd
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x22aacd3f]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d2240b
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xf
jl 0x1d223ea
mov byte [esi + 0xf], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d2241c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x11
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x78e18003]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22446
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 5
jl 0x1d22425
mov byte [esi + 5], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22457
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xe5
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x4d5ebf2f]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22483
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 5
jl 0x1d22462
mov byte [esi + 5], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22494
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x4d
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x1092def5]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d224be
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 6
jl 0x1d2249d
mov byte [esi + 6], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d224cf
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x56
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x4af35a32]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d224f9
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xb
jl 0x1d224d8
mov byte [esi + 0xb], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d2250a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x1a
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x7af9140d]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22534
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 5
jl 0x1d22513
mov byte [esi + 5], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22545
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xf0
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x20115f6b]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22571
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 6
jl 0x1d22550
mov byte [esi + 6], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22582
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xd5
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x406ec87b]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d225ae
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xb
jl 0x1d2258d
mov byte [esi + 0xb], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d225bf
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x68
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x7242ba66]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d225e9
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x63
jl 0x1d225c8
mov byte [esi + 0x63], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d225fa
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xe2
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x5bd8d4fa]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22626
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d22605
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22672
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xd8
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x4390f02d]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d2269e
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xb
jl 0x1d2267d
mov byte [esi + 0xb], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d226af
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xdd
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x3390d9b2]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d226db
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xf
jl 0x1d226ba
mov byte [esi + 0xf], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d226b0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xdd
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x3390d9b2]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d226db
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xf
jl 0x1d226ba
mov byte [esi + 0xf], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d226ec
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xa0
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x363a25d0]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22718
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x4d
jl 0x1d226f7
mov byte [esi + 0x4d], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22729
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xf8
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x70c117ea]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22755
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d22734
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22c4c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x40
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x509ebe13]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22c76
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xb
jl 0x1d22c55
mov byte [esi + 0xb], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22c87
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x2d
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x2d381597]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22cb1
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x11
jl 0x1d22c90
mov byte [esi + 0x11], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22cc2
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xcd
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x65487d50]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22cee
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 9
jl 0x1d22ccd
mov byte [esi + 9], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22cff
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xbd
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x26d19c66]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22d2b
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 7
jl 0x1d22d0a
mov byte [esi + 7], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d22d3c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x63
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x2b9f6ecb]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22d66
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 9
jl 0x1d22d45
mov byte [esi + 9], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22d77
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xf9
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x6f055f4e]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22da3
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 9
jl 0x1d22d82
mov byte [esi + 9], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22db4
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0x99
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x481e1ffc]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22de0
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 9
jl 0x1d22dbf
mov byte [esi + 9], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22df1
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x31
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x3cc1148b]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22e1b
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 5
jl 0x1d22dfa
mov byte [esi + 5], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d22e2c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x53
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x2beef2ca]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d22e56
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 5
jl 0x1d22e35
mov byte [esi + 5], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d2335d
Capabilities:
Open clipboard
Write clipboard data

Disassembly:
call fcn.01d0795a
test eax, eax
je 0x1d23369
mov eax, dword [eax + 0x20]
push eax
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
jne 0x1d23379
xor al, al
ret 4
call dword [sym.imp.USER32.dll_EmptyClipboard]
test eax, eax
jne 0x1d2338b
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x1d23374
push ebx
push esi
push dword [esp + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
jne 0x1d233b5
xor bl, bl
call dword [sym.imp.USER32.dll_CloseClipboard]
pop esi
mov al, bl
pop ebx
jmp 0x1d23376
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push dword [esp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
xor ebx, ebx
push esi
inc ebx
push ebx
call dword [sym.imp.USER32.dll_SetClipboardData]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1d233a9
Function at 0x1d233db
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa0
push ebx
push esi
push edi
lea eax, [ebp - 0xa0]
push eax
mov ebx, ecx
mov dword [ebp - 0xa0], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
movzx eax, word [ebp - 0x98]
movzx ecx, word [ebp - 0x9c]
mov esi, dword [ebp + 8]
shl eax, 0x10
or eax, ecx
mov dword [esi], eax
lea ecx, [esi + 4]
xor eax, eax
mov edi, ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0xc
push ecx
mov ecx, ebx
stosd dword es:[edi], eax
call fcn.01d22ff1
movzx eax, ax
add eax, 3
shr eax, 2
movzx eax, ax
mov dword [ebp - 0xc], 0x1d66730
mov dword [ebp - 8], 0x1d66734
mov dword [ebp - 4], 0x1d66738
cmp eax, 3
jae 0x1d23480
push 3
pop ecx
sub ecx, eax
lea ebx, [esi + eax*4 + 4]
movzx eax, cx
lea edi, [ebp - 0xc]
mov dword [ebp + 8], eax
xor esi, esi
push esi
push esi
push esi
push esi
push ebx
push esi
push esi
push dword [edi]
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
add ebx, 4
add edi, 4
dec dword [ebp + 8]
jne 0x1d23466
pop edi
pop esi
pop ebx
leave
ret 4