joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0d78a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d78b3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x70759472a994969d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe2aa7320a565a470
mov qword [rsp + 0x26], rdx
movabs rdx, 0x848e8963e19b8641
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0f02110a16120f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x50e0103100d15
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x11600050e010310
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14060d1016101008
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0d78ad9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x1c0d78b0b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1c0d78b2e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 0x17
jb 0x1c0d78abf
jmp 0x1c0d78b22
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x17
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0d78a40

Function at 0x1c0d7a700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d7a838
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x42cd746f44b61701
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xcfd99c087842cd74
mov qword [rsp + 0x20], rdx
movabs rdx, 0x33dc8c72d8ae73d0
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20b67261692f7b59
mov qword [rsp + 0x30], rdx
movabs rdx, 0x796c99ca9902de27
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1d0d031314070117
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6151412160c131e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1722160b070c1f09
mov qword [rsp + 0x50], rdx
movabs rdx, 0x210a130620101416
mov qword [rsp + 0x58], rdx
movabs rdx, 0x9130d180716201b
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf1f200a02010f00
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x1c0d7a7d5
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x30
jge 0x1c0d7a808
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x1c0d7a82b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
nop
cmp rsi, 0x25
jb 0x1c0d7a7bb
jmp 0x1c0d7a81f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.1c0d542a0
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x25
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop dword [rax]
jmp fcn.1c0d7a700
Function at 0x1c0d7a860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0d7a9d2
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0xeca8bff237be4b61
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x43aa15dabe20da27
mov qword [rsp + 0x25], rdx
movabs rdx, 0x96cb6e699f6c6e43
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8c41e67117207090
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6c9fd36dae5ea8d1
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x73396972d0198d6e
mov qword [rsp + 0x44], rdx
movabs rdx, 0x9220f0c1e1d0d27
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x41f2d2703031d20
mov qword [rsp + 0x54], rdx
movabs rdx, 0x151c0c08041f2d27
mov qword [rsp + 0x58], rdx
movabs rdx, 0x221a202420290703
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb0c1e1d06222917
mov qword [rsp + 0x68], rdx
movabs rdx, 0x60515112715032a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x3161f0e02020428
mov qword [rsp + 0x78], rdx
movabs rdx, 0x11220182521231b
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x1c0d7a96d
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x3c
jge 0x1c0d7a99f
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x1c0d7a9c5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 0x2f
jb 0x1c0d7a953
jmp 0x1c0d7a9b9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2f
call fcn.1c0d542a0
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x2f
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d7a860

Function at 0x1c0d7b380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d7b466
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xab6eb06b596f1f74
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1fa44ff129bab6e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50305040701050b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90b050305040701
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10d040a0c050805
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x1c0d7b400
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x1c0d7b432
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x1c0d7b457
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0xe
jb 0x1c0d7b3e2
jmp 0x1c0d7b44b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xe
nop
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d7b380
Function at 0x1c0d7b760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d7b85b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x666ff7697445313d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x625f666ff7697445
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x641e74702032535a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90005070c100d10
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10c09090b070b0c
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa0d010c09090b07
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa09080b0c091002
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0d7b7f9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x1c0d7b82b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1c0d7b84e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 0x12
jb 0x1c0d7b7df
jmp 0x1c0d7b842
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x12
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0d7b760

Function at 0x1c0d7c360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d7c45d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x36b726f656b7560
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x506e535c7366036b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6b6c615e23606148
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80b12080d0a070e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1501071100130313
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x302011515010711
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15120e0110110a0e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0d7c400
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x1c0d7c42d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x1c0d7c450
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x16
jb 0x1c0d7c3df
jmp 0x1c0d7c444
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x16
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0d7c360
Function at 0x1c0d7c480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d7c58c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7029611620106f11
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2866c31edb8912c2
mov qword [rsp + 0x23], rdx
movabs rdx, 0xbb79b965712866c3
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6db8cc732d73b46e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x13100a160f0b130a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1a1802141b08130d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120810000a1b0c18
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd060204090f0607
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0d7c528
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x1c0d7c55c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x1c0d7c57f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
cmp rsi, 0x1d
jb 0x1c0d7c50e
jmp 0x1c0d7c573
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1d
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d7c480

Function at 0x1c0d7cf00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d7cfec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x207d9580b6b67d7c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8b207d9580b6b67d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x65946261bd69a28a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0a020f02030a09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40301080c030a0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc060a0204000505
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0d7cf8a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x1c0d7cfbc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0d7cfdf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0x11
jb 0x1c0d7cf70
jmp 0x1c0d7cfd3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d7cf00
Function at 0x1c0d7dfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d7e0db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6146c080b7ad4363
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x929d8b866c926146
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8d9ab7465c2b691
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1015130305131413
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd150a100c080215
mov qword [rsp + 0x38], rdx
movabs rdx, 0x412120e0a060f06
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14130614050b1401
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0d7e079
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x1c0d7e0ab
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x1c0d7e0ce
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0x16
jb 0x1c0d7e05f
jmp 0x1c0d7e0c2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x16
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0d7dfe0

Function at 0x1c0d7fba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d7fc9b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6fa97c65748e7992
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6365dbd8746fa97c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8b768aa18ec78ac4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x130a000f0a0d1111
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60d060e10090a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x120a00060d060e10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x51412010014020d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0d7fc39
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1a
jge 0x1c0d7fc6b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1c0d7fc8e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0x15
jb 0x1c0d7fc1f
jmp 0x1c0d7fc82
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x15
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0d7fba0
Function at 0x1c0d81d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0d81edd
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xbb50b38365746e43
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xcb732073e1640374
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd6192bcb732073e1
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xdf68d25336f2eb63
mov qword [rsp + 0x32], rdx
movabs rdx, 0x72d49c6f20c801df
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x64e78006f9747398
mov qword [rsp + 0x42], rdx
movabs rdx, 0x6261f111717271b
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x715060523120626
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1209071811071d0d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x12041d001429091b
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf1d1109200b1a04
mov qword [rsp + 0x68], rdx
movabs rdx, 0x231c111a16102128
mov qword [rsp + 0x70], rdx
movabs rdx, 0x92609051f16101c
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x1c0d81e80
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x36
jge 0x1c0d81ead
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x1c0d81ed0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x2b
jb 0x1c0d81e5e
jmp 0x1c0d81ec4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2b
call fcn.1c0d542a0
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2b
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x2b
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0d81d80

Function at 0x1c0d82cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d82d9d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x20689ff5732c0b4a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf0296076f7e9420
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd000800040b090e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x205090c0d000800
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20809010c0e050c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0d82d40
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x1c0d82d6d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1c0d82d90
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x1c0d82d22
jmp 0x1c0d82d84
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xf
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0d82cc0
Function at 0x1c0d838e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d839ec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6c6f156fcfce72ba
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20da6514dacc64cb
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb5dc86d120da6514
mov qword [rsp + 0x28], rdx
movabs rdx, 0x646568dc45276561
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1508181013170b16
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0a1105120a1711
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5170c020805030e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1100030b05021316
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0d83988
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x20
jge 0x1c0d839bc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x1c0d839df
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
cmp rsi, 0x1c
jb 0x1c0d8396e
jmp 0x1c0d839d3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1c
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d838e0

Function at 0x1c0d83a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d83add
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x81ac3da7d16f6f3b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9d8fdf8e759e81ac
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6070508080a0d04
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0a0b0406070508
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7000d0404000300
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0d83a80
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x1c0d83aad
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x1c0d83ad0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x1c0d83a62
jmp 0x1c0d83ac4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xe
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0d83a00
Function at 0x1c0d84920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d849f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfd52330afd790c5f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5012dfd52330afd
mov qword [rsp + 0x22], rdx
movabs rdx, 0x401060a0700080a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x707060a09030401
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0d8498c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x1c0d849be
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0d849e5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0xb
jb 0x1c0d84972
jmp 0x1c0d849d5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d84920

Function at 0x1c0d85740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d8580c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2e02ffeaf6657275
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6c7ffd2e02ffeaf6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x801030606080501
mov qword [rsp + 0x28], rdx
movabs rdx, 0x404050801030905
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0d857af
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x1c0d857dc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0d857ff
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x1c0d85792
jmp 0x1c0d857f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d85740
Function at 0x1c0d86ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d86dac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6653325b5e336552
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4465556653325b5e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70a03050a0a0406
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2020208060a0202
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0d86d4f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x1b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x1b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x1c0d86d7c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0d86d9f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x1c0d86d32
jmp 0x1c0d86d93
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0d86ce0

Function at 0x1c0d89240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0d892fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x16f56c02630d1438
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7830
movabs rdx, 0x404000208010406
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x706
xor eax, eax
jmp 0x1c0d892a0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x1c0d892cd
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x1c0d892f0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x1c0d89282
jmp 0x1c0d892e4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xa
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0d89240