joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0df77a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0df78ac
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9a6c617292b82c99
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x43fdcb4e72656d41
mov qword [rsp + 0x25], rdx
movabs rdx, 0x96ca6174b943fdcb
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x656d695406727d61
mov qword [rsp + 0x32], rdx
movabs rdx, 0x30d071314171714
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc001010100f0103
mov qword [rsp + 0x42], rdx
movabs rdx, 0xd10000018020c00
mov qword [rsp + 0x48], rdx
movabs rdx, 0x14000c171614130e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0df7848
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x1c0df787c
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x1c0df789f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x1d
jb 0x1c0df782e
jmp 0x1c0df7893
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1d
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0df77a0

Function at 0x1c0df8280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0df837d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7163f066de1a619d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x266eeb02537163f0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf26d69362eba511c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x100f0900070e0d03
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x902020a070e140d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x110c0902020a070e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20d100510070e0d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0df8320
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x1c0df834d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1c0df8370
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x1c0df82ff
jmp 0x1c0df8364
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x15
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0df8280
Function at 0x1c0dfad60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dfae4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7484205461746c8d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x646ee77484205461
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65aaa2547aef1ae7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60e0c0b080e0e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x410001100100006
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100e040d06100e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0dfaded
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x1c0dfae1a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1c0dfae3d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x1c0dfadd0
jmp 0x1c0dfae31
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x13
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dfad60

Function at 0x1c0dfbb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dfbbfd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xacc4946c926e0f42
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd2f6ef745320fc73
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb86dbfa2d364729e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1514151001011409
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10151301150f0d15
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x103060510151301
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1707130f0505170e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0dfbba0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x1c0dfbbcd
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1c0dfbbf0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x1c0dfbb7f
jmp 0x1c0dfbbe4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x18
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0dfbb00
Function at 0x1c0dfc560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dfc67a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xd398a8ebb9e76f8d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20745c61bbb5bc87
mov qword [rsp + 0x27], rdx
movabs rdx, 0x64a078745320745c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xef9f0ef020af7217
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0704151a170902
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x12061c190a070415
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0a0b0804041715
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b000d0503131c1b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x309150819031304
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1c0dfc617
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x24
jge 0x1c0dfc649
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x1c0dfc66d
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
cmp rsi, 0x1d
jb 0x1c0dfc5fd
jmp 0x1c0dfc661
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.1c0d542a0
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1d
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop
jmp fcn.1c0dfc560

Function at 0x1c0dfd660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dfd75b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdd6e25db3725c22d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x16e223281bdd6e25
mov qword [rsp + 0x22], rdx
movabs rdx, 0x266b9c920e75e61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70f030b0113000c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2011308120a0a04
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x30f111105020201
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5110509090e140a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0dfd6f9
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x1c0dfd72b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1c0dfd74e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0x15
jb 0x1c0dfd6df
jmp 0x1c0dfd742
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x15
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0dfd660
Function at 0x1c0dfdde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dfdeca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x933f828c73e1bb72
mov qword [rsp + 0x18], rdx
movabs rdx, 0xae3e933f828c73e1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8f6d695faa64e27f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd060408000e0109
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30507110a020d06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60901060a06010b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0dfde6d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x1c0dfde9a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1c0dfdebd
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x1c0dfde50
jmp 0x1c0dfdeb1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x12
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dfdde0

Function at 0x1c0dfe340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0dfe42c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd090b29c6e69a9c7
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xadb4a6d090b29c6e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x329091a69596c350
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf080709010a1207
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4110900090c0d10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb060b0509120f0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0dfe3ca
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x1c0dfe3fc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1c0dfe41f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0x13
jb 0x1c0dfe3b0
jmp 0x1c0dfe413
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x13
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0dfe340
Function at 0x1c0e02240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e0233d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x706f727597977dc4
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6422cea38227d670
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd6cac23620f3c5cd
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1313151003020113
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1300140909020911
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc080d080111090a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0f0b010f0c0a16
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e022e0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x1c0e0230d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1c0e02330
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x1c0e022bf
jmp 0x1c0e02324
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x17
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e02240

Function at 0x1c0e02360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e0244c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e20dd53201bc147
mov qword [rsp + 0x19], rdx
movabs rdx, 0x646e20dd53201bc1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe9cdd192a4c9c814
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe0f060105050602
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20d0b0209020e0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0d0d0a100c0d0d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e023ea
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x1c0e0241c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0e0243f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6b]
cmp rsi, 0x11
jb 0x1c0e023d0
jmp 0x1c0e02433
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e02360
Function at 0x1c0e03fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e040bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x20fa6fff5b0eb489
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa76e1f742520fa6f
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd6d966c0d64722e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x310011408000c04
mov qword [rsp + 0x34], rdx
movabs rdx, 0x60010100a041100
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x810141406001010
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60d100202121102
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e04060
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x6d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x6d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x1c0e0408d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1c0e040b0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x1c0e0403f
jmp 0x1c0e040a4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x15
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e03fc0
Function at 0x1c0e09020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e0912c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xf511e72d2cf43032
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x29301bf53154f612
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1029301bf53154f6
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd40c00041d5a2130
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9050212030b0d17
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc100d050c18090f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x608180f0f0f0d10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1415121612071615
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e090c8
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x20
jge 0x1c0e090fc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x1c0e0911f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x19
jb 0x1c0e090ae
jmp 0x1c0e09113
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x19
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e09020
Function at 0x1c0e097c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e0987d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3049446c3a755d67
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x30
movabs rdx, 0x505060100040102
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x60402
xor eax, eax
nop
jmp 0x1c0e09820
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x1c0e0984d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1c0e09870
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x1c0e09802
jmp 0x1c0e09864
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.1c0d66180
mov eax, edi
mov ecx, 9
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e097c0

Function at 0x1c0e0eba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e0ec8a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x94e5899fb76e7973
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6e9320876f968a94
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb5948ecebea07020
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1105120612060313
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0813150309070b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1406151404091416
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0e0ec2d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x1c0e0ec5a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1c0e0ec7d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x1c0e0ec10
jmp 0x1c0e0ec71
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x17
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e0eba0
Function at 0x1c0e0f8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x6d270452b37aeffe
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5010003050404
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5010602
xor eax, eax
jmp 0x1c0e0f8f7
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0xe]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x1c0e0f928
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e0f965
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x1c0e0f8db
jmp 0x1c0e0f957
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x1c0e0f941
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x1c0e0f935
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
nop
int3

Function at 0x1c0e10400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e104e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2a63685c67654f4f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x514758333b64402a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70006030b040d00
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa00070006030b04
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80a0e0104040c0d
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0e10480
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 2]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x1c0e104b2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1c0e104d7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 2]
cmp rsi, 0xf
jb 0x1c0e10462
jmp 0x1c0e104cb
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xf
nop
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e10400
Function at 0x1c0e12840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e12912
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1f6c691a45041ac8
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x573a091f6c691a45
mov qword [rsp + 0x20], rdx
movabs rdx, 0x809090008090402
mov qword [rsp + 0x28], rdx
movabs rdx, 0x301070207040108
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e128ac
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x1c0e128de
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0e12905
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0xb
jb 0x1c0e12892
jmp 0x1c0e128f5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e12840

Function at 0x1c0e12c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e12d5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x756b206f7ba4e207
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7463fe402424756b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2b0c836e45778d01
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf150f1010020f03
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb03010502030313
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x20813050b030105
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100a090e00100a14
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e12d00
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x1c0e12d2d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x1c0e12d50
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x16
jb 0x1c0e12cdf
jmp 0x1c0e12d44
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x16
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e12c60