joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0d8b120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d8b206
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x10934e2646e16f6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc2a6f209b5740109
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0b0c090a040700
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6000d010c0b0c09
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa01070509010c0b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0d8b1a0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x1c0d8b1d2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x1c0d8b1f7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0xe
jb 0x1c0d8b182
jmp 0x1c0d8b1eb
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xe
nop
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d8b120

Function at 0x1c0d8b220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d8b2ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4e491f3a60535f42
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x57656c69464e491f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x701060202000205
mov qword [rsp + 0x28], rdx
movabs rdx, 0x103060702040402
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0d8b28f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x1c0d8b2bc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1c0d8b2df
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x1c0d8b272
jmp 0x1c0d8b2d3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xd
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d8b220
Function at 0x1c0d8dda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d8de86
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5067054333413d47
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3b506d2138443956
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe08020f0c08030f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0b0a0905020e08
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe01040a0b090902
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0d8de20
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 5]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x1c0d8de52
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1c0d8de77
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 5]
cmp rsi, 0x10
jb 0x1c0d8de02
jmp 0x1c0d8de6b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x10
nop
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d8dda0

Function at 0x1c0d8dea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d8df6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8a9515ae5074b884
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9c20bb72ab648a95
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0906060c0c050c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7000b040c010c05
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0d8df0f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x1c0d8df3c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x1c0d8df5f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x1c0d8def2
jmp 0x1c0d8df53
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xe
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d8dea0
Function at 0x1c0d8e240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d8e35d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xca866575517a7e86
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xefa87ab2956f439a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x93efa87ab2956f43
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb15cb061a49ab291
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x614001716000b18
mov qword [rsp + 0x36], rdx
movabs rdx, 0x106061400171600
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0c0b1817080d0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2010d130c120c0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110e18100711130c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0d8e300
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x1c0d8e32d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1c0d8e350
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x1c0d8e2dd
jmp 0x1c0d8e344
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x19
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0d8e240

Function at 0x1c0d8e980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d8eab8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x40c7bb6915696ec7
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf740c7bb6915696e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9b68e4e6b7aad999
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc8d674f79364f331
mov qword [rsp + 0x30], rdx
movabs rdx, 0xef73694213827546
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1d07100e1c181915
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1520120d1115091d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x142008000b051517
mov qword [rsp + 0x50], rdx
movabs rdx, 0x15001906030d0910
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa1b0718140d0d0c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1107121b0c19181b
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x1c0d8ea55
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x30
jge 0x1c0d8ea88
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x1c0d8eaab
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
nop
cmp rsi, 0x21
jb 0x1c0d8ea3b
jmp 0x1c0d8ea9f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.1c0d542a0
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x21
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop dword [rax]
jmp fcn.1c0d8e980
Function at 0x1c0d8fd80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d8fe4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x736e6f364e57d9c9
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xc1d2d2b2
movabs rdx, 0x408000b0402040b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90101030a020408
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0d8fde5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x1c0d8fe1c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x1c0d8fe3f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
cmp rsi, 0xc
jb 0x1c0d8fdcb
jmp 0x1c0d8fe33
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d8fd80

Function at 0x1c0d919a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d91a6c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4cb861831972a3bf
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6b806f4cb8618319
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x601030109000303
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6010409
xor eax, eax
jmp 0x1c0d91a05
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x1c0d91a3c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x1c0d91a5f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0xb
jb 0x1c0d919eb
jmp 0x1c0d91a53
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d919a0

Function at 0x1c0d92580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d92638
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x28bfd27065afa2c4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x507060706020100
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x506
xor eax, eax
jmp 0x1c0d925d5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x1c0d92608
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1c0d9262b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
nop
cmp rsi, 8
jb 0x1c0d925bb
jmp 0x1c0d9261f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
mov eax, edi
mov ecx, 8
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop dword [rax]
jmp fcn.1c0d92580
Function at 0x1c0d92660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d9274c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x706572395e444347
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x535a507470657239
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7372785a617e676f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110913011102040e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x3100e1301051109
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa040313110e0d03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0d926ea
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x1c0d9271c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1c0d9273f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0x14
jb 0x1c0d926d0
jmp 0x1c0d92733
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x14
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d92660

Function at 0x1c0d93640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d93712
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x928b5e77659d6e69
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x546f7b6d6c928b5e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x602040c05000a04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x601020905080706
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0d936ac
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x1c0d936de
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1c0d93705
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0xd
jb 0x1c0d93692
jmp 0x1c0d936f5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xd
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d93640
Function at 0x1c0d94120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d941d2
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x27746309e341142b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x304040300070100
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x1c0d9416e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x1c0d941a2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1c0d941c5
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 8
jb 0x1c0d94154
nop
jmp 0x1c0d941b9
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.1c0d542a0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
mov eax, edi
mov ecx, 8
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d94120

Function at 0x1c0d941e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d942ac
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x617663658866dd57
mov qword [rsp + 0x19], rdx
movabs rdx, 0x93a56d6176636588
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7020a0909090901
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8030108
xor eax, eax
jmp 0x1c0d94245
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x1c0d9427c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x1c0d9429f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0xb
jb 0x1c0d9422b
jmp 0x1c0d94293
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d941e0

Function at 0x1c0d945e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d946b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x634b1de947193463
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2a3b6b634b1de947
mov qword [rsp + 0x22], rdx
movabs rdx, 0x502040406030205
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa04040409010502
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0d9464c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x1c0d9467e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0d946a5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0xb
jb 0x1c0d94632
jmp 0x1c0d94695
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d945e0
Function at 0x1c0d946c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d9478c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x62edeff472ee6569
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x65f661ff7962edef
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb040a0a02050900
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa06090909030a00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0d9472f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x1c0d9475c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1c0d9477f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x1c0d94712
jmp 0x1c0d94773
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xd
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d946c0

Function at 0x1c0d950e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d951ac
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb1b5e76f38bdb5bd
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xbec2
movabs rdx, 0x202000003000809
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1050006070202
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x1c0d95144
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x1c0d9517c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x1c0d9519f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
cmp rsi, 0xa
jb 0x1c0d9512a
jmp 0x1c0d95193
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xa
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d950e0
Function at 0x1c0d97060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d9713d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74208cbfd49e6081
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20c08f796c8f9174
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb020004000d040b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4030303010b0b02
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0508040b090202
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0d970e0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x1c0d9710d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1c0d97130
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x1c0d970c2
jmp 0x1c0d97124
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xf
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0d97060

Function at 0x1c0da2060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0da21c6
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x90], xmm15
movups xmmword [rsp + 0xa0], xmm15
movabs rdx, 0xbd3f0e2a7126b700
mov qword [rsp + 0x34], rdx
movabs rdx, 0x87aa2334155161e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x4c762d4193703bc1
mov qword [rsp + 0x44], rdx
movabs rdx, 0x90a7d4cb2120c1a
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x100d0110130d0c04
mov qword [rsp + 0x54], rdx
movabs rdx, 0xc1d1c0615010e02
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x7031b070c1d1c06
mov qword [rsp + 0x60], rdx
movabs rdx, 0x31410171611151b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d1b0d13121b131d
mov qword [rsp + 0x70], rdx
movabs rdx, 0x20d0a0c1115070b
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x1c0da2140
movzx r8d, byte [rsp + rbx + 0x34]
sub r8d, edx
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x34], dl
lea edx, [rdi - 0xe]
mov byte [rsp + rbx + 0x34], dl
add rax, 2
nop
cmp rax, 0x2c
jge 0x1c0da216b
movzx edx, byte [rsp + rax + 0x54]
movzx ebx, byte [rsp + rax + 0x55]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0x20
jae 0x1c0da21b9
movzx edi, byte [rsp + rsi + 0x34]
sub edi, edx
cmp rbx, 0x20
jb 0x1c0da2123
jmp 0x1c0da21ad
movups xmmword [rsp + 0x14], xmm15
movups xmmword [rsp + 0x24], xmm15
xor eax, eax
jmp 0x1c0da2187
movzx ecx, byte [rsp + rax + 0x34]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 0x20
jl 0x1c0da217b
movups xmm0, xmmword [rsp + 0x14]
movups xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [rsp + 0x24]
movups xmmword [rsp + 0xa0], xmm0
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, ebx
mov ecx, 0x20
call fcn.1c0d66180
mov eax, esi
mov ecx, 0x20
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0da2060
Function at 0x1c0da51a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0da528a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x38cbc03059836acc
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6c38cbc03059836a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd77ccb38555635bb
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10020b0c03050909
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe0c01080b0f1002
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100b080805010006
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0da522d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x7a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x7a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x1c0da525a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0da527d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x1c0da5210
jmp 0x1c0da5271
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0da51a0

Function at 0x1c0da6cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0da6ddd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3531a49bf0fba29b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x88491ee4fe9a32f1
mov qword [rsp + 0x24], rdx
movabs rdx, 0x97788491ee4fe9a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x35149ba43436119c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0e080c130b0210
mov qword [rsp + 0x36], rdx
movabs rdx, 0x11180f0e080c130b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80f0004120803
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16050c010d0a0216
mov qword [rsp + 0x48], rdx
movabs rdx, 0x180b0a1113131017
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0da6d80
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x49]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x1c0da6dad
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1c0da6dd0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x1c0da6d5d
jmp 0x1c0da6dc4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1a
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0da6cc0