joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1d151cb
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0x85
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0xfb0029a]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d151f7
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 7
jl 0x1d151d6
mov byte [esi + 7], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d15208
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x77
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x6c5a0e8c]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d15232
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x1a
jl 0x1d15211
mov byte [esi + 0x1a], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d15243
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xd3
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x2e6eaa8e]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1526f
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d1524e
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d15280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x17
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x4bae70bb]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d152aa
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x1e
jl 0x1d15289
mov byte [esi + 0x1e], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d152bb
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x11
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x44f324e6]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d152e5
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d152c4
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d152f6
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xc8
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x7d0efd3d]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d15322
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x1e
jl 0x1d15301
mov byte [esi + 0x1e], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d15333
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x5d
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x6c8e7856]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1535d
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d1533c
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d1536e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0x86
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x13e6977]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1539a
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x1e
jl 0x1d15379
mov byte [esi + 0x1e], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d153ab
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x7f
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x135d21de]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d153d5
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d153b4
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d153e6
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x13
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x67147e7e]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d15410
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x1e
jl 0x1d153ef
mov byte [esi + 0x1e], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d15421
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0x89
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x6cbb5799]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1544d
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d1542c
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1545e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xe5
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x1998b3cd]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1548a
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x18
jl 0x1d15469
mov byte [esi + 0x18], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1549b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xb2
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x169e1eca]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d154c7
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d154a6
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d154d8
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xb3
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x6430a19b]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d15504
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d154e3
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d15515
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xea
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x22a1e158]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d15541
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 4
jl 0x1d15520
mov byte [esi + 4], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d1c0fb
Capabilities:
Terminate thread

Disassembly:
push esi
mov esi, ecx
lea eax, [esi + 0x138]
test eax, eax
je 0x1d1c110
lea eax, [esi + 0x1cc]
jmp 0x1d1c112
xor eax, eax
mov ecx, dword [esi + 0x1894]
cmp ecx, eax
je 0x1d1c162
mov eax, dword [esi + 0x18ac]
test eax, eax
je 0x1d1c12d
add eax, 0x94
jmp 0x1d1c12f
xor eax, eax
cmp ecx, eax
jne 0x1d1c13b
mov ecx, esi
pop esi
jmp fcn.01d1a5fc
test ecx, ecx
jne 0x1d1c143
xor eax, eax
jmp 0x1d1c158
push 0x8020100
mov eax, ecx
mov ecx, dword [eax]
push 0x1d64678
push eax
call dword [ecx + 4]
add esp, 0xc
push eax
mov ecx, esi
call fcn.01d1bff4
pop esi
ret
call fcn.01d0795a
push 0
push 0
push 0x10
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_PostMessageA]
pop esi
ret
Function at 0x1d1f291
Capabilities:
Create thread

Disassembly:
mov eax, 0x1d593eb
call fcn.01d55708
sub esp, 0x1c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push dword [ebp + 8]
mov esi, ecx
mov dword [ebp - 0x14], esi
call fcn.01d1d565
xor ebx, ebx
push ebx
push 0x1d864ac
push 0x1d86494
push ebx
push dword [ebp + 8]
call sub.MSVCR100.dll___RTDynamicCast
add esp, 0x14
mov edi, eax
mov dword [ebp + 8], edi
cmp dword [esi + 0x18ac], ebx
je 0x1d1f328
mov ecx, esi
call fcn.01d1a72f
mov eax, dword [esi + 0x18dc]
cmp eax, dword [edi + 0x28]
je 0x1d1f4af
mov ecx, esi
call fcn.01d1c9c7
mov ecx, dword [esi + 0x18ac]
push 1
call fcn.01d04e80
mov eax, dword [esi + 0x18ac]
push ebx
push ebx
push 0x1009
push dword [eax + 0x27c]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [edi + 0x28]
mov dword [esi + 0x18dc], eax
jmp 0x1d1f4af
push 0x75c
mov dword [ebp - 4], ebx
call sub.mfc100.dll_Ordinal_1294
pop ecx
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x1d1f34b
push esi
mov ecx, eax
call fcn.01d059eb
jmp 0x1d1f34d
xor eax, eax
mov byte [ebp - 4], bl
mov dword [esi + 0x18ac], eax
cmp eax, ebx
jne 0x1d1f361
xor eax, eax
jmp 0x1d1f4b5
call fcn.01d0795a
mov ecx, dword [esi + 0x18ac]
mov edx, dword [ecx]
push eax
push 0x188
call dword [edx + 0x168]
push 0x64
call sub.mfc100.dll_Ordinal_1294
pop ecx
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 2
cmp eax, ebx
je 0x1d1f3ab
mov edx, dword [esi + 0x18ac]
cmp edx, ebx
je 0x1d1f39f
add edx, 0x98
jmp 0x1d1f3a1
xor edx, edx
push edx
mov ecx, eax
call fcn.01d3f47d
jmp 0x1d1f3ad
xor eax, eax
push 0x1d89258
mov dword [esi + 0x18b0], eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ebx
push ebx
push dword [esi + 0x18b0]
push 0x1d166b6
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
or dword [ebp - 4], 0xffffffff
mov dword [esi + 0x38c0], eax
jmp 0x1d1f421
mov ecx, esi
cmp dword [esi + 0x18ac], ebx
jne 0x1d1f43c
push 0x20
push 0x1d64e34
call fcn.01d16273
jmp 0x1d1f35a
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov dword [esi + 0x18dc], eax
call fcn.01d1a72f
mov ecx, esi
call fcn.01d1c9c7
mov ecx, dword [esi + 0x18ac]
push 1
call fcn.01d04e80
mov eax, dword [esi + 0x18ac]
push ebx
push ebx
push 0x1009
push dword [eax + 0x27c]
call dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [ebp - 0x28]
push eax
push dword [esi + 0x20]
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
mov ecx, esi
push eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x28]
push eax
call fcn.01d182ea
mov ecx, esi
call fcn.01d162f4
mov eax, dword [esi + 0x18ac]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4
Function at 0x1d1f9da
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x70
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x435c8c8]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fa04
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xa
jl 0x1d1f9e3
mov byte [esi + 0xa], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fa15
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x4d
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x8578ac]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fa3f
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d1fa1e
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fa50
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x78
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x3ef743c]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fa7a
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 7
jl 0x1d1fa59
mov byte [esi + 7], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fa8b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x6e
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x331a54e7]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fab5
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xe
jl 0x1d1fa94
mov byte [esi + 0xe], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fac6
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0x99
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x5140e29c]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1faf2
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 9
jl 0x1d1fad1
mov byte [esi + 9], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fb03
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x76
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x1a680bd0]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fb2d
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x14
jl 0x1d1fb0c
mov byte [esi + 0x14], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fb3e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x43
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x1206b3fe]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fb68
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x14
jl 0x1d1fb47
mov byte [esi + 0x14], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d1fb79
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xb5
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x6dc6b3c]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fba5
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 6
jl 0x1d1fb84
mov byte [esi + 6], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fbb6
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xdc
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x335e974e]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fbe2
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 9
jl 0x1d1fbc1
mov byte [esi + 9], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fbf3
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x42
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x1ba34367]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fc1d
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 9
jl 0x1d1fbfc
mov byte [esi + 9], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fc2e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xbc
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x4be4d94d]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fc5a
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 9
jl 0x1d1fc39
mov byte [esi + 9], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fc6b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0x9f
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x1098ca24]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fc97
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xd
jl 0x1d1fc76
mov byte [esi + 0xd], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fca8
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 2
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x6adbbced]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fcd2
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xf
jl 0x1d1fcb1
mov byte [esi + 0xf], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fce3
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xd3
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x3e140235]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fd0f
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 6
jl 0x1d1fcee
mov byte [esi + 6], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d1fd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x16
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x9746354]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fd4a
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d1fd29
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fd5b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x21
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x8bec7e0]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fd85
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 9
jl 0x1d1fd64
mov byte [esi + 9], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fd96
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xc8
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x2f8d2d72]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fdc2
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xb
jl 0x1d1fda1
mov byte [esi + 0xb], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fdd3
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xfb
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x29b008ca]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fdff
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d1fdde
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fe10
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0xc
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x6c46b892]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fe3a
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 9
jl 0x1d1fe19
mov byte [esi + 9], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fe4b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x59
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x2d579691]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1fe75
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xf
jl 0x1d1fe54
mov byte [esi + 0xf], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fe86
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xa5
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x1e4e9547]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1feb2
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xf
jl 0x1d1fe91
mov byte [esi + 0xf], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d1fec3
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x11
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x79bd5633]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1feed
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xb
jl 0x1d1fecc
mov byte [esi + 0xb], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1fefe
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xb2
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x59ea2482]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1ff2a
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xd
jl 0x1d1ff09
mov byte [esi + 0xd], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1ff3b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x13
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0xa40c06a]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1ff65
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d1ff44
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1ff76
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0x8e
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x3d40207]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1ffa2
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 5
jl 0x1d1ff81
mov byte [esi + 5], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1ffb3
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x7d
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x269b1d65]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d1ffdd
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x1c
jl 0x1d1ffbc
mov byte [esi + 0x1c], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d1ffee
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x77
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x747729b5]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d20018
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 4
jl 0x1d1fff7
mov byte [esi + 4], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d2002a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xca
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x376722fe]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d20055
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0xf
jl 0x1d20034
mov byte [esi + 0xf], 0
mov eax, esi
pop esi
pop ebx
ret 4
Function at 0x1d20067
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0x8d
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0xeaf3ae1]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d20092
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x18
jl 0x1d20071
mov byte [esi + 0x18], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d20119
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0x98
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x772456a2]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d20145
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 9
jl 0x1d20124
mov byte [esi + 9], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d20156
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x2d
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x2162371d]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d20180
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x14
jl 0x1d2015f
mov byte [esi + 0x14], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d20191
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 9
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x75596a70]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d201bb
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 4
jl 0x1d2019a
mov byte [esi + 4], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d201cc
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 8
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x56c4ebef]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d201f6
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 5
jl 0x1d201d5
mov byte [esi + 5], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d20207
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
push 0x31
mov esi, ecx
pop ebx
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx + 0x6849a664]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d20231
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 0x21
jl 0x1d20210
mov byte [esi + 0x21], 0
mov eax, esi
pop esi
pop ebx
ret 4

Function at 0x1d20242
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
push esi
mov esi, ecx
mov ebx, 0xc2
xor edx, edx
mov eax, dword [esp + 0xc]
mov al, byte [eax + edx - 0x2a78b18e]
xor al, bl
inc ebx
and ebx, 0x800000ff
mov byte [edx + esi], al
jns 0x1d2026e
dec ebx
or ebx, 0xffffff00
inc ebx
inc edx
cmp edx, 8
jl 0x1d2024d
mov byte [esi + 8], 0
mov eax, esi
pop esi
pop ebx
ret 4