joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0e83040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8313b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x537936dbddeb744e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x666e4976653ec678
mov qword [rsp + 0x22], rdx
movabs rdx, 0xeb9c2fe0dc6f726f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x81316170a02090a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x214141715121309
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x403080c03050214
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150809120c151508
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e830d9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x1c0e8310b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1c0e8312e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
cmp rsi, 0x18
jb 0x1c0e830bf
jmp 0x1c0e83122
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x18
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0e83040

Function at 0x1c0e83880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8397d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd396f652d1e91c52
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf0632ed396f652d1
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x830fb61786ea869
mov qword [rsp + 0x24], rdx
movabs rdx, 0x110c0107070e1202
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x51008070501020a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x306040605100807
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa04070c1108070c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0e83920
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x74]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x74]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x1c0e8394d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1c0e83970
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x1c0e838ff
jmp 0x1c0e83964
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x13
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e83880
Function at 0x1c0e83e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0e83fbd
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x86503975528dfa83
mov qword [rsp + 0x19], rdx
movabs rdx, 0x90cc736d614e5561
mov qword [rsp + 0x21], rdx
movabs rdx, 0x7669828784655290
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4ed399d650746d7c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x69a95f8762426dab
mov qword [rsp + 0x38], rdx
movabs rdx, 0x508974aa62539129
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2b272a22222e011d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5030d0923211803
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2213041b1c01222d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f27210f02281c09
mov qword [rsp + 0x60], rdx
movabs rdx, 0x8002b1d04140912
mov qword [rsp + 0x68], rdx
movabs rdx, 0x142b0e0d0e121d25
mov qword [rsp + 0x70], rdx
movabs rdx, 0x251201011f170705
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x1c0e83f60
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x38
jge 0x1c0e83f8d
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x1c0e83fb0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x2f
jb 0x1c0e83f3e
jmp 0x1c0e83fa4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2f
call fcn.1c0d542a0
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x2f
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e83e60

Function at 0x1c0e85360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8542c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6af87f266547d992
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9163dd6af87f2665
mov qword [rsp + 0x22], rdx
movabs rdx, 0x105000604060408
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6010806060a0105
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e853cf
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x1c0e853fc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0e8541f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x1c0e853b2
jmp 0x1c0e85413
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e85360
Function at 0x1c0e85e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e85efb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xdca29e6d6d91dbb0
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xfa9a73a1dca29e6d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc8cf9a7908a5646f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10120b1200130e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10804120607110a
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf06010804120607
mov qword [rsp + 0x38], rdx
movabs rdx, 0x402050e02080604
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0e85e99
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x1c0e85ecb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1c0e85eee
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4a]
cmp rsi, 0x14
jb 0x1c0e85e7f
jmp 0x1c0e85ee2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x14
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0e85e00

Function at 0x1c0e860c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e861ac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa9b5da9f74746583
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7f91a9b5da9f7474
mov qword [rsp + 0x30], rdx
movabs rdx, 0x84896d61aea97389
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100a100c000d0d06
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x309100a100c000d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1104040708110508
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x1c0e8614a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x44]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x1c0e8617c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1c0e8619f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x44]
cmp rsi, 0x12
jb 0x1c0e86130
jmp 0x1c0e86193
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x12
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e860c0
Function at 0x1c0e861c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e862aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c7564140274fb47
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x82b346d86c756414
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa8056656d3a4e65
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4120e0b08080308
mov qword [rsp + 0x18], rdx
movabs rdx, 0x411130a04120e0b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x13010b13080e0413
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x1c0e8624d
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x14
jge 0x1c0e8627a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1c0e8629d
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0x14
jb 0x1c0e86230
jmp 0x1c0e86291
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x14
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e861c0

Function at 0x1c0e868e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e86a0c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xbbd4fa237573bbb1
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x65edccba68bbd4fa
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8f124365e74b34fb
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc769bc32dbe238dc
mov qword [rsp + 0x30], rdx
movabs rdx, 0x736eadbe7435d0d0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1916061f0b08050d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80f171401182113
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a0b1d0810150621
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe0f1e172209040a
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf19001e0a161c07
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1c0e869a6
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x28
jge 0x1c0e869dc
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x1c0e869ff
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x70]
cmp rsi, 0x25
jb 0x1c0e8698c
jmp 0x1c0e869f3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.1c0d542a0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x25
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e868e0
Function at 0x1c0e87880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e87988
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1403441d15e30bf3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x643318f662ffe56c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1e7213a7643318f6
mov qword [rsp + 0x28], rdx
movabs rdx, 0xffb512936d61b41d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x180e060b101b110b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x118130d0009041a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x19010e1103140c15
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40e0702060c1b0a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e8792b
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x20
jge 0x1c0e87958
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x1c0e8797b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x1c0e8790e
jmp 0x1c0e8796f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1c
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e87880

Function at 0x1c0e89600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e89708
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2a8cad30d874cd53
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65da69376544bc51
mov qword [rsp + 0x21], rdx
movabs rdx, 0xee694cb7913ea865
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd16cbf2fc5d44474
mov qword [rsp + 0x30], rdx
movabs rdx, 0x121c091b1e041606
mov qword [rsp + 0x38], rdx
movabs rdx, 0x131e06070510110e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe010c091c0e0616
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30306090608191a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e896ab
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x45]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x45]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x1c0e896d8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x1c0e896fb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1f
jb 0x1c0e8968e
jmp 0x1c0e896ef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1f
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e89600
Function at 0x1c0e89b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e89c9d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xb706c6d1c1746553
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x87d9ebc79af274ea
mov qword [rsp + 0x23], rdx
movabs rdx, 0xae87d9ebc79af274
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2b73a1dd9dbfc75a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x130614070311140a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x417130f13061407
mov qword [rsp + 0x38], rdx
movabs rdx, 0x160e05030b120b18
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1005180e1318040c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130d08150c180f18
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e89c40
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x3b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x3b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x1c0e89c6d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1c0e89c90
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x1c0e89c1d
jmp 0x1c0e89c84
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x19
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e89b80

Function at 0x1c0e8b380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8b48c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd269a7b5b6a365c7
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7463c0a428c374b6
mov qword [rsp + 0x23], rdx
movabs rdx, 0x207463c0a428c374
mov qword [rsp + 0x24], rdx
movabs rdx, 0x577286cffd7244a1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8001108000b0d11
mov qword [rsp + 0x34], rdx
movabs rdx, 0x210020d07041415
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x2030d030210020d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16050a0200150c10
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e8b428
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x1c0e8b45c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x1c0e8b47f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6f]
cmp rsi, 0x19
jb 0x1c0e8b40e
jmp 0x1c0e8b473
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x19
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e8b380
Function at 0x1c0e8be20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8beec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x684169576c5c573b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6845552b35684169
mov qword [rsp + 0x22], rdx
movabs rdx, 0x201010800090a06
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0a0c0307090201
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e8be8f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x1c0e8bebc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1c0e8bedf
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x1c0e8be72
jmp 0x1c0e8bed3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xd
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e8be20

Function at 0x1c0e8c180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8c288
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x25c81fbdfa88d1b5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x27c2d6c7c90e54c6
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd9c886b3256cb0ed
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2111015070a12
mov qword [rsp + 0x36], rdx
movabs rdx, 0x110f000211101507
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa070a1314031708
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa15040e050b110d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60c1213010b1614
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e8c22b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x39]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x39]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x1c0e8c258
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1c0e8c27b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x1c0e8c20e
jmp 0x1c0e8c26f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x18
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e8c180
Function at 0x1c0e8d6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8d792
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x1174632e493cf9ec
mov qword [rsp + 0x20], rdx
movabs rdx, 0x702040104010400
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x1c0e8d72e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x1c0e8d762
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1c0e8d785
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 8
jb 0x1c0e8d714
nop
jmp 0x1c0e8d779
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.1c0d542a0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
mov eax, edi
mov ecx, 8
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e8d6e0

Function at 0x1c0e8dea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8df6c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3144244353411505
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x2675
movabs rdx, 0x509060405010601
mov qword [rsp + 0x22], rdx
movabs rdx, 0x707000707090509
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x1c0e8df04
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x1c0e8df3c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x1c0e8df5f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0xa
jb 0x1c0e8deea
jmp 0x1c0e8df53
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xa
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e8dea0

Function at 0x1c0e8ea40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8eb12
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfe8510df6afe6457
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd2e36f6d65fe8510
mov qword [rsp + 0x22], rdx
movabs rdx, 0x204030601060506
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0506010c070204
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e8eaac
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x1c0e8eade
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1c0e8eb05
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0xd
jb 0x1c0e8ea92
jmp 0x1c0e8eaf5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xd
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e8ea40
Function at 0x1c0e8eb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8ec0c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x79720734324a544c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3779720734324a54
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e386b0254723a06
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd050903020f0a05
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x50d050903020f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x409040a00080304
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e8ebaa
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x1c0e8ebdc
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0e8ebff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
cmp rsi, 0x11
jb 0x1c0e8eb90
jmp 0x1c0e8ebf3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e8eb20

Function at 0x1c0e8fd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8fe1d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74208cbfd49e6081
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20c08f796c8f9174
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb020004000d040b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4030303010b0b02
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0508040b090202
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0e8fdc0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x1c0e8fded
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1c0e8fe10
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x1c0e8fda2
jmp 0x1c0e8fe04
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xf
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e8fd40