joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0da78e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0da79fd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x210597349a6b1334
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xdd2aae3487383831
mov qword [rsp + 0x23], rdx
movabs rdx, 0x24aab0a531dd2aae
mov qword [rsp + 0x28], rdx
movabs rdx, 0x35bc82aa3fc58135
mov qword [rsp + 0x30], rdx
movabs rdx, 0x306071a16030b0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0e050101020b07
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0712080d031405
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a130b03061b1911
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe170502120b1218
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1c0da79a0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x1c0da79cd
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x1c0da79f0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x1c0da797d
jmp 0x1c0da79e4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.1c0d542a0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1d
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0da78e0

Function at 0x1c0da88a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0da89d8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x529ac833d537abc1
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6139ad529ac833d5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3436343b3bbf306c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4ec2cc311dc5c136
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd432e5c5521639cd
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1d18001618220f00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1d200b2001110600
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a0b140a18080605
mov qword [rsp + 0x50], rdx
movabs rdx, 0x70e150b0f1e1901
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e051a060d070f16
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1a1a03141f0f0e1b
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x1c0da8978
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x30
jge 0x1c0da89a8
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x1c0da89cb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x23
jb 0x1c0da895b
jmp 0x1c0da89bf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x23
call fcn.1c0d542a0
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x23
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop dword [rax]
jmp fcn.1c0da88a0
Function at 0x1c0da9760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0da9898
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x307a8f32933131f4
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x316d247234ad307a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6932acc3953536f7
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7feb38810086d082
mov qword [rsp + 0x30], rdx
movabs rdx, 0x73ba762e70c63873
mov qword [rsp + 0x38], rdx
movabs rdx, 0x111c220308200e00
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe21250a21132403
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8001708000b2415
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e201e0512061523
mov qword [rsp + 0x58], rdx
movabs rdx, 0x181a161d0c111911
mov qword [rsp + 0x60], rdx
movabs rdx, 0x308221e0c062115
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x1c0da9835
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x30
jge 0x1c0da9868
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x1c0da988b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
nop
cmp rsi, 0x26
jb 0x1c0da981b
jmp 0x1c0da987f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
call fcn.1c0d542a0
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x26
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop dword [rax]
jmp fcn.1c0da9760

Function at 0x1c0da98c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0da99e7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xbe3531c331c43535
mov qword [rsp + 0x42], rdx
movabs rdx, 0xb66930974f32be35
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3831d6c2dd37cde7
mov qword [rsp + 0x50], rdx
movabs rdx, 0x39cdcf34b1387c31
mov qword [rsp + 0x58], rdx
movabs rdx, 0xeadddad9b7d7b2df
mov qword [rsp + 0x60], rdx
movabs rdx, 0x190b0924231e0a0b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20131d0d2217190b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x412191f09091122
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1b0c21242321070d
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa020f1b250e091c
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x1c0da9989
movzx r9d, byte [rsp + rsi + 0x42]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x42], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x42], dl
add rax, 2
cmp rax, 0x26
jge 0x1c0da99b7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x26
jae 0x1c0da99da
movzx r8d, byte [rsp + rdi + 0x42]
sub r8d, edx
cmp rsi, 0x26
jb 0x1c0da996c
jmp 0x1c0da99ce
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x26
call fcn.1c0d542a0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x26
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0da98c0
Function at 0x1c0daaa60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0daabba
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x758ce7347d36a7ee
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x56fae69e99ec3157
mov qword [rsp + 0x27], rdx
movabs rdx, 0x3156fae69e99ec31
mov qword [rsp + 0x28], rdx
movabs rdx, 0x86348a33909e388a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x318dcf83028f7d22
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5084f581eb37abb2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c0c052624221306
mov qword [rsp + 0x48], rdx
movabs rdx, 0x518220c0d1d0100
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa1b0d1f0b190e0b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x161e181b0b132126
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1b1d0b1a0b0b1411
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1f2827251d1f0313
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1070f261d162208
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x1c0daab58
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x38
jge 0x1c0daab8a
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x1c0daabad
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0x29
jb 0x1c0daab3e
jmp 0x1c0daaba1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x29
call fcn.1c0d542a0
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x29
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop
jmp fcn.1c0daaa60
Function at 0x1c0db1360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0db148c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6e006fd24675c6d6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x646578696e006fd2
mov qword [rsp + 0x20], rdx
movabs rdx, 0xcf6c6c7263673436
mov qword [rsp + 0x28], rdx
movabs rdx, 0x54fb68c3dd3e9e15
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf61511b220fed1f8
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1c0700182116131b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x131d042213201d17
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10181801011a1c23
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e062018000e0010
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1b00141700150e21
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x1c0db1426
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x28
jge 0x1c0db145c
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x24
jae 0x1c0db147f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0x24
jb 0x1c0db140c
jmp 0x1c0db1473
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x24
call fcn.1c0d542a0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x24
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0db1360
Function at 0x1c0db2fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0db30a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5a723558697c7f30
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x657fc25e7e4b4638
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10703060702030d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0b040a07060107
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0709030f0c0f0e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0db3040
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x1c0db3072
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1c0db3097
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0x10
jb 0x1c0db3022
jmp 0x1c0db308b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x10
nop
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0db2fc0

Function at 0x1c0db30c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x1c0db3247
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0xc476b71b63727c9b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7469e6ca8393694c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8774c97b1f8db120
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xba043db79a9c6f8e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7461b053209d106d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x9ae87f53c6699020
mov qword [rsp + 0x42], rdx
movabs rdx, 0x22210e0825242d14
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x171d240107212221
mov qword [rsp + 0x50], rdx
movabs rdx, 0x160c130813130f2f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2d07150422012201
mov qword [rsp + 0x60], rdx
movabs rdx, 0x22232b01180b1b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d0a120a2e151e21
mov qword [rsp + 0x70], rdx
movabs rdx, 0x52b0d1f0d2e1a00
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1c2d0b0f2e041129
mov qword [rsp + 0x80], rdx
movabs rdx, 0x150d21161a23050d
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x1c0db31e2
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x46
jge 0x1c0db320f
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x1c0db323a
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x30
jb 0x1c0db31c5
jmp 0x1c0db322e
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x30
nop dword [rax + rax]
call fcn.1c0d542a0
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x30
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x30
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0db30c0
Function at 0x1c0db3a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0db3b3d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xdbc129e773e961b8
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x4f
movabs rdx, 0x80205060005
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7060204
xor eax, eax
nop
jmp 0x1c0db3ae0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x1c0db3b0d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1c0db3b30
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x1c0db3ac2
jmp 0x1c0db3b24
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.1c0d66180
mov eax, edi
mov ecx, 9
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0db3a80

Function at 0x1c0db3c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0db3d3d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x62652b655d723647
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x30
movabs rdx, 0x605050601000608
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
nop
jmp 0x1c0db3ce0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x1c0db3d0d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1c0db3d30
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x1c0db3cc2
jmp 0x1c0db3d24
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.1c0d66180
mov eax, edi
mov ecx, 9
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0db3c80
Function at 0x1c0db5820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0db5947
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xf77fa79d7079e8f7
mov qword [rsp + 0x19], rdx
movabs rdx, 0x617668aa9eb6a0b6
mov qword [rsp + 0x21], rdx
movabs rdx, 0xfd10e7bc5c617668
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa8659c8e20b44d65
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x112130717061a05
mov qword [rsp + 0x36], rdx
movabs rdx, 0x918121300131406
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1706091812130013
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb000019010b0713
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40816170d130c12
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc11040a090c101c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1c0db58e9
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x2a
jge 0x1c0db5917
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x1c0db593a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1d
jb 0x1c0db58cc
jmp 0x1c0db592e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.1c0d542a0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1d
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0db5820

Function at 0x1c0db6000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0db60cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9b8194bb7281686b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8b94699b8194bb72
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa02000404040706
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x605090006040a02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0db606f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x1c0db609c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0db60bf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x1c0db6052
jmp 0x1c0db60b3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0db6000
Function at 0x1c0db78e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0db79dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x61b36ea090b4f89f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x65afb75f6e61b36e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x73e59d106cc662e6
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2110f13030d1302
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb11041212030a0e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe0102060b110412
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50013020206000e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0db7980
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x1c0db79ad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1c0db79d0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x1c0db795f
jmp 0x1c0db79c4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x15
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0db78e0

Function at 0x1c0dbbd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dbbdf8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xaa155f12c379cf15
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x407040304030601
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4000706
xor eax, eax
jmp 0x1c0dbbd96
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x45]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x1c0dbbdc8
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1c0dbbdeb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x45]
cmp rsi, 8
jb 0x1c0dbbd7c
jmp 0x1c0dbbddf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
mov eax, edi
mov ecx, 8
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop dword [rax]
jmp fcn.1c0dbbd40
Function at 0x1c0dbd000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dbd0d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3f6961193bf247c8
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6e2b093f6961193b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x809090008090402
mov qword [rsp + 0x28], rdx
movabs rdx, 0x301070207040108
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0dbd06c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x1c0dbd09e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0dbd0c5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0xb
jb 0x1c0dbd052
jmp 0x1c0dbd0b5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dbd000

Function at 0x1c0dbe100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dbe1cc
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xfb828e6964f4fa79
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf3dffbfb828e6964
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80a090605060900
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5010207
xor eax, eax
jmp 0x1c0dbe165
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x1c0dbe19c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x1c0dbe1bf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0xb
jb 0x1c0dbe14b
jmp 0x1c0dbe1b3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dbe100
Function at 0x1c0dbe5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dbe6dd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x133a382d3c0350db
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc301453505f133a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3e6e4a6d485a3e75
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf130d0b07150200
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5030c000602130a
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0405030c000602
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1061500060b0d10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0dbe680
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x1c0dbe6ad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x1c0dbe6d0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x1c0dbe65f
jmp 0x1c0dbe6c4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x16
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0dbe5e0

Function at 0x1c0dbed40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dbee0c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x73c065301b646c04
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6e611773c065301b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x804060600000306
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 3
xor eax, eax
jmp 0x1c0dbeda5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x1c0dbeddc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x1c0dbedff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0xb
jb 0x1c0dbed8b
jmp 0x1c0dbedf3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dbed40