joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0e6bda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e6be6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x45ddcab947e13344
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x57be3e45ddcab947
mov qword [rsp + 0x20], rdx
movabs rdx, 0x303070501050804
mov qword [rsp + 0x28], rdx
movabs rdx, 0x502020809060403
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e6be0f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x5f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x5f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x1c0e6be3c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1c0e6be5f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x1c0e6bdf2
jmp 0x1c0e6be53
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e6bda0

Function at 0x1c0e6c2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e6c3bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6f615e74652e6544
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x343f4d61364e486f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x562649196f537426
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0d0a11160d0614
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0b0f15080e1302
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x9050f0b0f15080e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe150b0b0813020e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e6c359
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x1c0e6c38b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1c0e6c3ae
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x17
jb 0x1c0e6c33f
jmp 0x1c0e6c3a2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x17
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0e6c2c0
Function at 0x1c0e6c3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e6c4c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6f6fef0c040f6511
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1b6fac74b7e2436f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20e0a0e04040a06
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x604020e0a0e0404
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50300090506000c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0e6c460
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x1c0e6c492
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1c0e6c4b7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4b]
cmp rsi, 0xf
jb 0x1c0e6c442
jmp 0x1c0e6c4ab
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xf
nop
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e6c3e0

Function at 0x1c0e6c740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e6c848
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e45514b95e27845
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xab65f9136f72fd88
mov qword [rsp + 0x23], rdx
movabs rdx, 0x74ab65f9136f72fd
mov qword [rsp + 0x24], rdx
movabs rdx, 0x84f41a6e696a0b53
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x41808050f0f0203
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1718090d13050405
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc1605121718090d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17020f1213170208
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e6c7eb
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x1c0e6c818
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1c0e6c83b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x1c0e6c7ce
jmp 0x1c0e6c82f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x19
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e6c740
Function at 0x1c0e6d2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e6d386
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd7c93b26d66e69e4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc2a8bd756ccbc3b6
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0408000e05040d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70d0d0408000e05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60e050e030a090f
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0e6d320
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x1c0e6d352
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1c0e6d377
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7c]
cmp rsi, 0x10
jb 0x1c0e6d302
jmp 0x1c0e6d36b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x10
nop
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e6d2a0

Function at 0x1c0e6d6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e6d78c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1878654ee263b3a4
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x57e0205cab187865
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10302090003080b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb03020309030a07
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e6d72f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x1c0e6d75c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1c0e6d77f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x1c0e6d712
jmp 0x1c0e6d773
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xd
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e6d6c0
Function at 0x1c0e706c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e707bd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x65a07a8b877a5775
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa86e65a07a8b877a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe482788d9db9a654
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd04090310050605
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x11040d0f01000e02
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb0c11040d0f0100
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3050c0b0b041011
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0e70760
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x1c0e7078d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1c0e707b0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x1c0e7073f
jmp 0x1c0e707a4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x12
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e706c0

Function at 0x1c0e70ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e70fc8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9c60c4a6e67465da
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x38a6e6585eca89c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd8653f6263e0ebca
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x140f000f110e1206
mov qword [rsp + 0x36], rdx
movabs rdx, 0x120e140f000f110e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1600100306030516
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110d070f0d0e0504
mov qword [rsp + 0x48], rdx
movabs rdx, 0x71008060908030a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e70f6b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x22
jge 0x1c0e70f98
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1c0e70fbb
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x1c0e70f4e
jmp 0x1c0e70faf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x17
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e70ec0
Function at 0x1c0e71b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e71c4c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5aaa3694674af0f
mov qword [rsp + 0x19], rdx
movabs rdx, 0xaae07905aaa36946
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x106000900000607
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x50a0000
xor eax, eax
jmp 0x1c0e71be5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x1c0e71c1c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x1c0e71c3f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0xb
jb 0x1c0e71bcb
jmp 0x1c0e71c33
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xb
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e71b80

Function at 0x1c0e72da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e72e9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8fa69ebf9e7466a9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa08661bf65706950
mov qword [rsp + 0x26], rdx
movabs rdx, 0x88b0b1a3669c6575
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1304060c0e050013
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc01070e01031503
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x13060c01070e0103
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140f171610121612
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e72e40
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x1c0e72e6d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1c0e72e90
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x1c0e72e1f
jmp 0x1c0e72e84
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x18
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e72da0
Function at 0x1c0e73920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e73a3a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6563abf38d742691
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x728a2d650ec37398
mov qword [rsp + 0x26], rdx
movabs rdx, 0xddbf7f6465c1728a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8a367c77539ba61
mov qword [rsp + 0x34], rdx
movabs rdx, 0x40104180d101803
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x130b151d04010418
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0b0a050a0e0a18
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1010141c0315171a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5050015040e1308
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1c0e739d7
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x24
jge 0x1c0e73a09
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x1c0e73a2d
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
cmp rsi, 0x1e
jb 0x1c0e739bd
jmp 0x1c0e73a21
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.1c0d542a0
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1e
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop
jmp fcn.1c0e73920

Function at 0x1c0e743c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e744ac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74866f7ec7c6af47
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5074866f7ec7c6af
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6c8b93854e68cf61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2011003010a0e03
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60102011003010a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa020f06020e040d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e7444a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x1c0e7447c
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1c0e7449f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x11
jb 0x1c0e74430
jmp 0x1c0e74493
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x11
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e743c0
Function at 0x1c0e784c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e7857d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4772366c4363304a
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x38
movabs rdx, 0x107010508000703
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x708
xor eax, eax
nop
jmp 0x1c0e78520
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x1c0e7854d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1c0e78570
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x1c0e78502
jmp 0x1c0e78564
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.1c0d542a0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.1c0d66180
mov eax, edi
mov ecx, 9
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e784c0

Function at 0x1c0e7cf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e7d046
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6f446cca44f1c515
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb89bd6be27ac65d3
mov qword [rsp + 0x22], rdx
movabs rdx, 0x704080d0d0b0b02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2020408040704
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe000c020f0a0801
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x1c0e7cfe0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x1c0e7d012
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1c0e7d037
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
cmp rsi, 0x10
jb 0x1c0e7cfc2
jmp 0x1c0e7d02b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x10
nop
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e7cf60
Function at 0x1c0e7d920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e7da0c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xac656cddaabe9253
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xae03ac656cddaabe
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x997392ae753787a9
mov qword [rsp + 0x24], rdx
movabs rdx, 0x70a030b0a020c0a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8020411070a030b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf01021102110e09
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e7d9aa
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x1c0e7d9dc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1c0e7d9ff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4d]
cmp rsi, 0x12
jb 0x1c0e7d990
jmp 0x1c0e7d9f3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x12
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e7d920

Function at 0x1c0e7db20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e7dc28
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xe34607694662ee53
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6940ed04e1d4666e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6e6f6940ed04e1d4
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65fb5fc3cbc7fa6f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6180e0a18021714
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1814140e12021216
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0e0206010b0715
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa12160c020d0513
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1c0e7dbcb
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x1c0e7dbf8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1c0e7dc1b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x1c0e7dbae
jmp 0x1c0e7dc0f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.1c0d542a0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x1a
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e7db20
Function at 0x1c0e7f880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e7f952
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2ef9b4252126f754
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xec730569312ef9b4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x304050201010601
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0802060c070304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e7f8ec
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x33]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x1c0e7f91e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1c0e7f945
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x33]
cmp rsi, 0xd
jb 0x1c0e7f8d2
jmp 0x1c0e7f935
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xd
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e7f880

Function at 0x1c0e822a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e82367
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xcd69dd7335367212
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x30bf69a9
movabs rdx, 0xa00080b00020703
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x507070b08020a00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e82308
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x1c0e82337
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x1c0e8235a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x1c0e822eb
jmp 0x1c0e8234e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e822a0
Function at 0x1c0e82620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e8271b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x749c746547cde3ee
mov qword [rsp + 0x19], rdx
movabs rdx, 0x668ac2cd69749c74
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbe6f8ff7876db36f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1060e0900001101
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1106070a120b0002
mov qword [rsp + 0x36], rdx
movabs rdx, 0x14061106070a120b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6020e0711000910
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0e826b9
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x44]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1a
jge 0x1c0e826eb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1c0e8270e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x44]
cmp rsi, 0x15
jb 0x1c0e8269f
jmp 0x1c0e82702
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x15
call fcn.1c0d66180
nop
nop dword [rax + rax]
call fcn.1c0d63ee0
jmp fcn.1c0e82620

Function at 0x1c0e82f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e83028
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe79f8f20f510e97
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc3ad616d12010a6e
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa7c3ad616d12010a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xee73fb630a72503a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1404160a0f04
mov qword [rsp + 0x32], rdx
movabs rdx, 0x100a140118001114
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x5041003030e100a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7050a0911030b01
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1c0e82fcb
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x1c0e82ff8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1c0e8301b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x1c0e82fae
jmp 0x1c0e8300f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.1c0d542a0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x19
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e82f20