joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0e34260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0e343d2
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x3afec96a98746fd8
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x61db613afec96a98
mov qword [rsp + 0x20], rdx
movabs rdx, 0xad20bfaa20ea756c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xfb74c26efb652067
mov qword [rsp + 0x30], rdx
movabs rdx, 0xdda4e25c17dc10cb
mov qword [rsp + 0x38], rdx
movabs rdx, 0x75eeb86453a3206e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5d3a6c9f41c47353
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8252b2c131f1a12
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d0d292b2d040316
mov qword [rsp + 0x58], rdx
movabs rdx, 0x62825262d03021e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x8321c0520220918
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1413000028023226
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1b2f26032c251f1e
mov qword [rsp + 0x78], rdx
movabs rdx, 0x100521032f1f0f13
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x1c0e3436d
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x38
jge 0x1c0e3439f
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x33
jae 0x1c0e343c5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0x33
jb 0x1c0e34353
jmp 0x1c0e343b9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x33
call fcn.1c0d542a0
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x33
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x33
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e34260
Function at 0x1c0e343e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e34527
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x9189756265045967
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x78de3f7920918975
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb57bab657468ddaa
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x66a39ed44259814a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x4f9f6fa8743c7593
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x121b1913140e2301
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1d0b1f23121b1913
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa1a1b1f060e1417
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd19070f15132313
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd1b091b24092114
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2181a1b18021617
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2121211b181d121a
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x1c0e344c7
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x34
jge 0x1c0e344f7
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x1c0e3451a
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x25
jb 0x1c0e344aa
jmp 0x1c0e3450e
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x25
call fcn.1c0d542a0
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x25
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e343e0

Function at 0x1c0e34b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e34c06
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f74a861cce4614a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x49ad6573
movabs rdx, 0xa05020a00050b
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x30a0b0a
xor eax, eax
jmp 0x1c0e34ba0
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x1c0e34bd2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1c0e34bf7
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
cmp rsi, 0xc
jb 0x1c0e34b84
jmp 0x1c0e34beb
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
nop
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e34b40
Function at 0x1c0e356c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e357dd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xbb648a7b61e56669
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa1f0f4b0d5d08686
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1663a1f0f4b0d5d0
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6e33bb5fdab1206f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa05070c01090804
mov qword [rsp + 0x36], rdx
movabs rdx, 0x14100a05070c0109
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7170e07020c110b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100910150d110907
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50f0c110b051716
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e35780
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x1c0e357ad
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1c0e357d0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x1c0e3575d
jmp 0x1c0e357c4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1a
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e356c0

Function at 0x1c0e359e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e35aa6
push rbp
mov rbp, rsp
sub rsp, 0x20
lea rax, [0x1c0ecf500]
call fcn.1c0d1bcc0
movabs rcx, 0x3281b692778a806b
mov qword [rax], rcx
mov dword [rax + 8], 0x6c906eb5
movabs rcx, 0x805090403010408
mov qword [rsp + 0x10], rcx
movabs rcx, 0x805040609090a02
mov qword [rsp + 0x18], rcx
xor ecx, ecx
jmp 0x1c0e35a4e
movzx r9d, byte [rsi + rax]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rax + rdi], dl
lea edx, [r8 - 0xe]
mov byte [rax + rsi], dl
add rcx, 2
cmp rcx, 0x10
jge 0x1c0e35a7a
movzx edx, byte [rsp + rcx + 0x10]
movzx esi, byte [rsp + rcx + 0x11]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0xc
jae 0x1c0e35a94
movzx r8d, byte [rdi + rax]
sub r8d, edx
cmp rsi, 0xc
jb 0x1c0e35a34
jmp 0x1c0e35a88
mov ebx, 0xc
mov rcx, rbx
add rsp, 0x20
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e359e0
Function at 0x1c0e35f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e35fe6
push rbp
mov rbp, rsp
sub rsp, 0x20
lea rax, [0x1c0ecf500]
call fcn.1c0d1bcc0
movabs rcx, 0x6854070bfefa0d9c
mov qword [rax], rcx
mov dword [rax + 8], 0x6c7ff224
movabs rcx, 0x90a0b080a08
mov qword [rsp + 0x10], rcx
movabs rcx, 0x203050904010008
mov qword [rsp + 0x18], rcx
xor ecx, ecx
jmp 0x1c0e35f8e
movzx r9d, byte [rsi + rax]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rax + rdi], dl
lea edx, [r8 + 0x76]
mov byte [rax + rsi], dl
add rcx, 2
cmp rcx, 0x10
jge 0x1c0e35fba
movzx edx, byte [rsp + rcx + 0x10]
movzx esi, byte [rsp + rcx + 0x11]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0xc
jae 0x1c0e35fd4
movzx r8d, byte [rdi + rax]
sub r8d, edx
cmp rsi, 0xc
jb 0x1c0e35f74
jmp 0x1c0e35fc8
mov ebx, 0xc
mov rcx, rbx
add rsp, 0x20
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e35f20

Function at 0x1c0e365c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e3669d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8dad8baea287b6a7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6490627bc26e6163
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0100030d0c04
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5010e02000d0100
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7030b070c0d0c06
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0e36640
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x1c0e3666d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1c0e36690
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x1c0e36622
jmp 0x1c0e36684
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x10
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e365c0
Function at 0x1c0e367e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e3689d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4d926273659c70a0
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x45
movabs rdx, 0x505060100040102
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x60402
xor eax, eax
nop
jmp 0x1c0e36840
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x1c0e3686d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1c0e36890
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x1c0e36822
jmp 0x1c0e36884
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.1c0d66180
mov eax, edi
mov ecx, 9
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e367e0

Function at 0x1c0e37280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e37347
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc4f2d67e62c68052
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x534f
movabs rdx, 0x2070504060003
mov qword [rsp + 0x22], rdx
movabs rdx, 0x306010701070002
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x1c0e372e7
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x1c0e37317
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x1c0e3733a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x1c0e372ca
jmp 0x1c0e3732e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xa
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e37280
Function at 0x1c0e39440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e39548
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9aa7b9656df020f3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf80043f066f3489c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa473f80043f066f3
mov qword [rsp + 0x28], rdx
movabs rdx, 0x64b676a1d973c672
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110c0f1509070c0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x150118060a110e0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20d080f150d1600
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1515160500110d13
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e394eb
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x1c0e39518
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1c0e3953b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x1c0e394ce
jmp 0x1c0e3952f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1a
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e39440

Function at 0x1c0e39c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e39d4a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6f0c0caf206c0f6e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8b6f0c0caf206c0f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x151b612d20090272
mov qword [rsp + 0x26], rdx
movabs rdx, 0x100d0b100a0b080b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x405100d0b100a0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd010f06050d0e05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e39ced
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x1c0e39d1a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0e39d3d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x1c0e39cd0
jmp 0x1c0e39d31
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e39c60
Function at 0x1c0e3a440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e3a52c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xec65f66d6f82fb7a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x34b4fbec65f66d6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xefa5657c67657378
mov qword [rsp + 0x28], rdx
movabs rdx, 0x11050f020b110209
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1107080a11040a0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf04021209010211
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0e3a4ca
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x1c0e3a4fc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1c0e3a51f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0x13
jb 0x1c0e3a4b0
jmp 0x1c0e3a513
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x13
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e3a440

Function at 0x1c0e3a540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e3a648
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x321f72c621736597
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb8132d67881e6c20
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe9dd161720d1282c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa1216000e150314
mov qword [rsp + 0x36], rdx
movabs rdx, 0x14150a1216000e15
mov qword [rsp + 0x38], rdx
movabs rdx, 0x160d040a0d150f04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x131017061514100b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd00061507111314
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e3a5eb
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x1c0e3a618
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1c0e3a63b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x1c0e3a5ce
jmp 0x1c0e3a62f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x18
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e3a540
Function at 0x1c0e3c100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0e3c25a
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x6574dec5726168f0
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x676e69c4d3e1d794
mov qword [rsp + 0x23], rdx
movabs rdx, 0x657601656f676e69
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe41aa76d20972865
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10c8bada397975e7
mov qword [rsp + 0x38], rdx
movabs rdx, 0x295a35736820be41
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2108132216221c20
mov qword [rsp + 0x48], rdx
movabs rdx, 0x22290a1d25051b28
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c2000280c231c09
mov qword [rsp + 0x58], rdx
movabs rdx, 0x251b241c25090426
mov qword [rsp + 0x60], rdx
movabs rdx, 0x241b0512102b1f1b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x25210b1b29132816
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2425051a1c172217
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x1c0e3c1f8
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x38
jge 0x1c0e3c22a
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x1c0e3c24d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 0x2d
jb 0x1c0e3c1de
jmp 0x1c0e3c241
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2d
call fcn.1c0d542a0
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x2d
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop
jmp fcn.1c0e3c100
Function at 0x1c0e3c280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e3c3cc
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x18085bcb43f06847
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbd4f3b6518085bcb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8d6b6e61225b0261
mov qword [rsp + 0x26], rdx
movabs rdx, 0x241e738137275652
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0d5a643d656346
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1304090007121918
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x10b130409000712
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c0c050e030b2313
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b1013002123231a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x4220917100c010c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x10160a0d0f061f02
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf22101a06000b04
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x1c0e3c364
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x32
jge 0x1c0e3c39c
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x24
jae 0x1c0e3c3bf
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xf]
cmp rsi, 0x24
jb 0x1c0e3c34a
jmp 0x1c0e3c3b3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x24
call fcn.1c0d542a0
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x24
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e3c280

Function at 0x1c0e3c3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e3c492
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x3180697435e97551
mov qword [rsp + 0x20], rdx
movabs rdx, 0x307060706020206
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x1c0e3c431
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x43]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x43]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x1c0e3c45e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1c0e3c485
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x1c0e3c414
jmp 0x1c0e3c475
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.1c0d542a0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 8
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e3c3e0
Function at 0x1c0e3e840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e3e90c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x13b7be5f740213cb
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xb3637468
movabs rdx, 0x6040705060400
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60201050b050006
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e3e8a5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x1c0e3e8dc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x1c0e3e8ff
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 0xc
jb 0x1c0e3e88b
jmp 0x1c0e3e8f3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e3e840

Function at 0x1c0e3f460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e3f56c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65eb66f704f16f80
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5d20f66f1fb020eb
mov qword [rsp + 0x23], rdx
movabs rdx, 0x725d20f66f1fb020
mov qword [rsp + 0x24], rdx
movabs rdx, 0xeb90cde465f30c53
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x17060b1310150304
mov qword [rsp + 0x34], rdx
movabs rdx, 0x13020a1206060d00
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa120d0513020a12
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa160f0a0d150818
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e3f508
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x1c0e3f53c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x1c0e3f55f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0x19
jb 0x1c0e3f4ee
jmp 0x1c0e3f553
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x19
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e3f460