joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1c0e3f580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e3f66c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb1c4bb57b31e6573
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x73eeb1c4bb57b31e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xaf6ec40e067cc5cb
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf110c060a050f04
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd1111080f110c06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70b0e0b020b1103
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1c0e3f60a
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x1c0e3f63c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1c0e3f65f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
cmp rsi, 0x12
jb 0x1c0e3f5f0
jmp 0x1c0e3f653
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.1c0d542a0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x12
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
jmp fcn.1c0e3f580

Function at 0x1c0e40f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e41038
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd15e74e5862527e1
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x2b28326f
movabs rdx, 0x4030a01000b0600
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90b04030a01000b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x903020604090703
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1c0e40fd4
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x1c0e41008
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1c0e4102b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
nop
cmp rsi, 0xc
jb 0x1c0e40fba
jmp 0x1c0e4101f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.1c0d542a0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.1c0d66180
mov eax, edi
mov ecx, 0xc
call fcn.1c0d66180
nop
call fcn.1c0d63ee0
nop dword [rax]
jmp fcn.1c0e40f60
Function at 0x1c0e453c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1c0e454bd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfa0f611a0cf5c169
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x88beb1fa0f611a0c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa597690163752074
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7080a11040a0f11
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x402120901021111
mov qword [rsp + 0x36], rdx
movabs rdx, 0x30f040212090102
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc120609120a0904
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1c0e45460
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x1c0e4548d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1c0e454b0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x1c0e4543f
jmp 0x1c0e454a4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.1c0d542a0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.1c0d66180
mov eax, edi
mov ecx, 0x13
call fcn.1c0d66180
nop
nop dword [rax]
call fcn.1c0d63ee0
jmp fcn.1c0e453c0

Function at 0x1c0e46e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xc45e44227f25b28e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x506020107060407
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x703
xor eax, eax
jmp 0x1c0e46eb6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x35]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x1c0e46ee2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e46f25
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x1c0e46e9a
nop
jmp 0x1c0e46f16
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1c0e46f00
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x1c0e46eef
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
nop
int3
Function at 0x1c0e482c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x2fe3bdd4f899dbac
mov qword [rsp + 0x18], rax
movabs rax, 0x2a387ebfa88f2b26
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x22]
movzx ecx, byte [rsp + 0x21]
xor eax, ecx
movzx ecx, byte [rsp + 0x26]
movzx edx, byte [rsp + 0x1e]
add ecx, edx
movzx edx, byte [rsp + 0x24]
movzx ebx, byte [rsp + 0x1a]
add edx, ebx
movzx ebx, byte [rsp + 0x20]
movzx esi, byte [rsp + 0x18]
sub ebx, esi
movzx esi, byte [rsp + 0x1b]
movzx edi, byte [rsp + 0x25]
add esi, edi
movzx edi, byte [rsp + 0x23]
movzx r8d, byte [rsp + 0x1f]
add edi, r8d
movzx r8d, byte [rsp + 0x1d]
movzx r9d, byte [rsp + 0x27]
add r8d, r9d
movzx r9d, byte [rsp + 0x1c]
movzx r10d, byte [rsp + 0x19]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x1c0e483a6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x1c0e4839a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x1c0e48d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x7aa737448b5f88e1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x106000005030104
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x203
xor eax, eax
jmp 0x1c0e48d74
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x1c0e48da8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e48de5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x5f]
nop dword [rax + rax]
cmp rbx, 8
jb 0x1c0e48d5a
jmp 0x1c0e48dd7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1c0e48dc1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1c0e48db5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
nop
int3
Function at 0x1c0e49d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x975df59131e787cf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4050302000001
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x201
xor eax, eax
jmp 0x1c0e49d76
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x22]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x1c0e49da2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e49de5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x1c0e49d5a
nop
jmp 0x1c0e49dd6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1c0e49dc0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x1c0e49daf
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
nop
int3

Function at 0x1c0e4a300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x351bf65f0b60dd35
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x700060105010301
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4040300
xor eax, eax
jmp 0x1c0e4a357
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x75]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x75]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x1c0e4a388
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e4a3c5
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x1c0e4a33b
jmp 0x1c0e4a3b7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x1c0e4a3a1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x1c0e4a395
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
nop
int3
Function at 0x1c0e4ab00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x45e1c2112d5291dc
mov qword [rsp + 0x18], rax
movabs rax, 0xb9387bb467f96b3c
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x1b]
sub eax, ecx
movzx ecx, byte [rsp + 0x27]
movzx edx, byte [rsp + 0x19]
add ecx, edx
movzx edx, byte [rsp + 0x25]
movzx ebx, byte [rsp + 0x1f]
add edx, ebx
movzx ebx, byte [rsp + 0x1e]
movzx esi, byte [rsp + 0x1c]
add ebx, esi
movzx esi, byte [rsp + 0x20]
movzx edi, byte [rsp + 0x18]
xor esi, edi
movzx edi, byte [rsp + 0x23]
movzx r8d, byte [rsp + 0x1a]
add edi, r8d
movzx r8d, byte [rsp + 0x1d]
movzx r9d, byte [rsp + 0x26]
add r8d, r9d
movzx r9d, byte [rsp + 0x22]
movzx r10d, byte [rsp + 0x21]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x1c0e4abe6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x1c0e4abda
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x1c0e4c060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x1d7c835c6e21b657
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x407020303070504
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2010005
xor eax, eax
jmp 0x1c0e4c0b7
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x5a]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x5a]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x1c0e4c0e8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e4c125
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x1c0e4c09b
jmp 0x1c0e4c117
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x1c0e4c101
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x1c0e4c0f5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
nop
int3
Function at 0x1c0e4c140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x4d371a9168314cdd
mov qword [rsp + 0x18], rax
movabs rax, 0xce8ca333d92a6b7b
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x1e]
xor eax, ecx
movzx ecx, byte [rsp + 0x20]
movzx edx, byte [rsp + 0x1d]
sub ecx, edx
movzx edx, byte [rsp + 0x22]
movzx ebx, byte [rsp + 0x1b]
add edx, ebx
movzx ebx, byte [rsp + 0x19]
movzx esi, byte [rsp + 0x25]
sub ebx, esi
movzx esi, byte [rsp + 0x1f]
movzx edi, byte [rsp + 0x1c]
add esi, edi
movzx edi, byte [rsp + 0x18]
movzx r8d, byte [rsp + 0x24]
sub edi, r8d
movzx r8d, byte [rsp + 0x21]
movzx r9d, byte [rsp + 0x23]
add r8d, r9d
movzx r9d, byte [rsp + 0x1a]
movzx r10d, byte [rsp + 0x27]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x1c0e4c226
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x1c0e4c21a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x1c0e4ca80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3e7828f593fab807
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x305070207050705
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x50505
xor eax, eax
jmp 0x1c0e4cad5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x1c0e4cb08
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e4cb45
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x52]
nop dword [rax]
cmp rbx, 8
jb 0x1c0e4cabb
jmp 0x1c0e4cb37
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x1c0e4cb21
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x1c0e4cb15
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
nop
int3
Function at 0x1c0e4cb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xd046e4c6ae505e7b
mov qword [rsp + 0x18], rax
movabs rax, 0x987b7f108e28e715
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x18]
movzx ecx, byte [rsp + 0x22]
add eax, ecx
movzx ecx, byte [rsp + 0x24]
movzx edx, byte [rsp + 0x23]
sub ecx, edx
movzx edx, byte [rsp + 0x1a]
movzx ebx, byte [rsp + 0x21]
sub edx, ebx
movzx ebx, byte [rsp + 0x20]
movzx esi, byte [rsp + 0x27]
sub ebx, esi
movzx esi, byte [rsp + 0x26]
movzx edi, byte [rsp + 0x1b]
sub esi, edi
movzx edi, byte [rsp + 0x1f]
movzx r8d, byte [rsp + 0x19]
sub edi, r8d
movzx r8d, byte [rsp + 0x25]
movzx r9d, byte [rsp + 0x1d]
xor r8d, r9d
movzx r9d, byte [rsp + 0x1c]
movzx r10d, byte [rsp + 0x1e]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x1c0e4cc46
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x1c0e4cc3a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x1c0e4d6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x5b72447326e0bfe
mov qword [rsp + 0x18], rax
movabs rax, 0x939ba4c77db32919
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x19]
xor eax, ecx
movzx ecx, byte [rsp + 0x22]
movzx edx, byte [rsp + 0x1e]
add ecx, edx
movzx edx, byte [rsp + 0x1b]
movzx ebx, byte [rsp + 0x1d]
add edx, ebx
movzx ebx, byte [rsp + 0x24]
movzx esi, byte [rsp + 0x23]
add ebx, esi
movzx esi, byte [rsp + 0x20]
movzx edi, byte [rsp + 0x27]
add esi, edi
movzx edi, byte [rsp + 0x18]
movzx r8d, byte [rsp + 0x1c]
add edi, r8d
movzx r8d, byte [rsp + 0x1a]
movzx r9d, byte [rsp + 0x1f]
add r8d, r9d
movzx r9d, byte [rsp + 0x21]
movzx r10d, byte [rsp + 0x25]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x1c0e4d7a6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x1c0e4d79a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x1c0e4dde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x22799624baf63b9b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x401010503050705
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1c0e4de2f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x2c]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x1c0e4de5a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e4de95
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x1c0e4de13
jmp 0x1c0e4de89
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1c0e4de73
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1c0e4de67
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.1c0d66180
nop
int3

Function at 0x1c0e4ea20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x696b5f8670edb3b6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x107030607020305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x706
xor eax, eax
jmp 0x1c0e4ea74
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x1c0e4eaa8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e4eae5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x2f]
nop dword [rax + rax]
cmp rbx, 8
jb 0x1c0e4ea5a
jmp 0x1c0e4ead7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1c0e4eac1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x1c0e4eab5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
nop
int3
Function at 0x1c0e4eb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xb6455b256adb6121
mov qword [rsp + 0x18], rax
movabs rax, 0x4a9b7a83e0969d67
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1a]
movzx ecx, byte [rsp + 0x1d]
xor eax, ecx
movzx ecx, byte [rsp + 0x22]
movzx edx, byte [rsp + 0x23]
sub ecx, edx
movzx edx, byte [rsp + 0x24]
movzx ebx, byte [rsp + 0x25]
sub edx, ebx
movzx ebx, byte [rsp + 0x20]
movzx esi, byte [rsp + 0x26]
add ebx, esi
movzx esi, byte [rsp + 0x1e]
movzx edi, byte [rsp + 0x1c]
sub esi, edi
movzx edi, byte [rsp + 0x19]
movzx r8d, byte [rsp + 0x21]
sub edi, r8d
movzx r8d, byte [rsp + 0x18]
movzx r9d, byte [rsp + 0x1b]
sub r8d, r9d
movzx r9d, byte [rsp + 0x1f]
movzx r10d, byte [rsp + 0x27]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x1c0e4ebe6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x1c0e4ebda
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x1c0e4f560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x7397452d0ab13567
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2030001050705
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 2
xor eax, eax
jmp 0x1c0e4f5b6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x19]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x19]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x1c0e4f5e2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e4f625
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x1c0e4f59a
nop
jmp 0x1c0e4f616
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1c0e4f600
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x1c0e4f5ef
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
nop
int3
Function at 0x1c0e4f7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x2ea947bce92d68a3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x206060404060606
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x1c0e4f80f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x22]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x1c0e4f83a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e4f875
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x1c0e4f7f3
jmp 0x1c0e4f869
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x1c0e4f853
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x1c0e4f847
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.1c0d66180
nop
int3

Function at 0x1c0e4f8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xff733a1fa2b73afd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2050204010306
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 7
xor eax, eax
jmp 0x1c0e4f8f6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x5c]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x1c0e4f922
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x1c0e4f965
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x1c0e4f8da
nop
jmp 0x1c0e4f956
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x1c0e4f940
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x1c0e4f92f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.1c0d66180
mov eax, esi
mov ecx, 8
call fcn.1c0d66180
nop
int3