joyce8/EMBER2024-capa huggingface dataset:
Function at 0x3822e7bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822e7cbd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd8b14070bbca453e
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x423d20fc20d8b140
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3e0231732827e220
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2100608070e0606
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd0f0e0912050713
mov qword [rsp + 0x27], rdx
movabs rdx, 0x814000e0d0f0e09
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xb01070c10070307
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x3822e7c60
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 0x55]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 0x55]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x3822e7c8d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x3822e7cb0
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x3822e7c3f
jmp 0x3822e7ca4
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.3822a6820
mov eax, edi
mov ecx, 0x15
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.3822e7bc0

Function at 0x3822ea3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822ea4ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x57486e7520495820
mov qword [rsp + 0x33], rdx
movabs rdx, 0x466c48222257486e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x556f6f5d7077205e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140d0d111108090c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x14070b110c060a02
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa100c010f100712
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x3822ea46d
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 + 0x2e]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 + 0x2e]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jge 0x3822ea49a
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x3822ea4bd
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x3822ea450
jmp 0x3822ea4b1
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.382294b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.3822a6820
mov eax, edi
mov ecx, 0x15
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822ea3e0
Function at 0x3822ec9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822ecac7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x666d7a657329654a
mov qword [rsp + 0x49], rdx
movabs rdx, 0x2066796f1e6c5e5e
mov qword [rsp + 0x51], rdx
movabs rdx, 0x725e286255736e20
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2088757963302f79
mov qword [rsp + 0x60], rdx
movabs rdx, 0x813140811091a0a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x190d0a0811060a15
mov qword [rsp + 0x27], rdx
movabs rdx, 0x70d190d0a081106
mov qword [rsp + 0x29], rdx
movabs rdx, 0x90a1209121712
mov qword [rsp + 0x31], rdx
movabs rdx, 0x30b1a1c1d000b0c
mov qword [rsp + 0x39], rdx
movabs rdx, 0x1c190605181c0208
mov qword [rsp + 0x41], rdx
xor eax, eax
jmp 0x3822eca69
movzx r9d, byte [rsp + rsi + 0x49]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x49], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x49], dl
add rax, 2
cmp rax, 0x2a
jge 0x3822eca97
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x3822ecaba
movzx r8d, byte [rsp + rdi + 0x49]
sub r8d, edx
cmp rsi, 0x1f
jb 0x3822eca4c
jmp 0x3822ecaae
xor eax, eax
lea rbx, [rsp + 0x49]
mov ecx, 0x1f
call fcn.382294b80
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.3822a6820
mov eax, edi
mov ecx, 0x1f
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822ec9a0

Function at 0x3822edaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x3822edc12
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x5b74636508799972
mov qword [rsp + 0x5b], rdx
movabs rdx, 0xea895135544d5b20
mov qword [rsp + 0x63], rdx
movabs rdx, 0x585c625d73ea8951
mov qword [rsp + 0x68], rdx
movabs rdx, 0xf3d656926931c06
mov qword [rsp + 0x70], rdx
movabs rdx, 0x6845650269866920
mov qword [rsp + 0x78], rdx
movabs rdx, 0x78656f560d207c2d
mov qword [rsp + 0x80], rdx
movabs rdx, 0x7232a1a1301260b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x16200e1f1b261217
mov qword [rsp + 0x25], rdx
movabs rdx, 0x211c152928151620
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1f121c2829180210
mov qword [rsp + 0x33], rdx
movabs rdx, 0x23090c18260a0c14
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xc181316250c1d1d
mov qword [rsp + 0x43], rdx
movabs rdx, 0xa1b180329141c21
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x200f28011d111f0d
mov qword [rsp + 0x53], rdx
xor eax, eax
jmp 0x3822edbad
movzx r9d, byte [rsp + rsi + 0x5b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x5b], dl
mov byte [rsp + rsi + 0x5b], r8b
add rax, 2
cmp rax, 0x3e
jge 0x3822edbdf
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x3822edc05
movzx r8d, byte [rsp + rdi + 0x5b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x2d
jb 0x3822edb93
jmp 0x3822edbf9
xor eax, eax
lea rbx, [rsp + 0x5b]
mov ecx, 0x2d
call fcn.382294b80
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.3822a6820
mov eax, edi
mov ecx, 0x2d
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822edaa0
Function at 0x3822f6de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x3822f6f35
push rbp
mov rbp, rsp
sub rsp, 0xa8
movabs rdx, 0x3a4d5165fd2f645f
mov qword [rsp + 0x6d], rdx
movabs rdx, 0xf253ea6c38445f20
mov qword [rsp + 0x75], rdx
movabs rdx, 0x816050f253ea6c38
mov qword [rsp + 0x78], rdx
movabs rdx, 0x7465f967da657516
mov qword [rsp + 0x80], rdx
movabs rdx, 0x6a406b61096e072b
mov qword [rsp + 0x88], rdx
movabs rdx, 0x92201d50f45e766e
mov qword [rsp + 0x90], rdx
movabs rdx, 0x73865e0485219e6
mov qword [rsp + 0x98], rdx
movabs rdx, 0x4074156eedd71721
mov qword [rsp + 0xa0], rdx
lea rdi, [rsp + 0x1d]
lea rsi, [0x3823faf90]
nop word [rax + rax]
nop word [rax + rax]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.3822a6e3a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x3822f6ed4
movzx r9d, byte [rsp + rsi + 0x6d]
sub r9d, edx
lea edx, [r9 + 0x5f]
mov byte [rsp + rdi + 0x6d], dl
lea edx, [r8 + 0x5f]
mov byte [rsp + rsi + 0x6d], dl
add rax, 2
cmp rax, 0x50
jge 0x3822f6f02
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3b
jae 0x3822f6f28
movzx r8d, byte [rsp + rdi + 0x6d]
sub r8d, edx
cmp rsi, 0x3b
jb 0x3822f6eb7
nop
jmp 0x3822f6f1c
xor eax, eax
lea rbx, [rsp + 0x6d]
mov ecx, 0x3b
call fcn.382294b80
add rsp, 0xa8
pop rbp
ret
mov eax, esi
mov ecx, 0x3b
call fcn.3822a6820
mov eax, edi
mov ecx, 0x3b
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822f6de0

Function at 0x3822f9f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822fa027
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x83786f617ea0619d
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x659c2c83
movabs rdx, 0x8050606020308
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x508020005090700
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x3822f9fc8
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 1]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 1]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x10
jge 0x3822f9ff7
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x3822fa01a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x3822f9fab
jmp 0x3822fa00e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.3822a6820
mov eax, edi
mov ecx, 0xb
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822f9f60
Function at 0x3822fc6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822fc7bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe3ae85e60646e1a
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x5e5364730a0e3ae8
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6a72655e685a3f6f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc060b0708040605
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x11010c030e130014
mov qword [rsp + 0x27], rdx
movabs rdx, 0x110090511010c03
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xa0009010c0f0408
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x3822fc760
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 0x22]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x3822fc78d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x3822fc7b0
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x3822fc73f
jmp 0x3822fc7a4
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.3822a6820
mov eax, edi
mov ecx, 0x15
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.3822fc6c0

Function at 0x3822fcc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822fcd27
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7e77757172308081
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x7474707e
movabs rdx, 0x5070502050404
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa08040107050005
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x3822fccc8
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x3822fccf7
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x3822fcd1a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x3822fccab
jmp 0x3822fcd0e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.3822a6820
mov eax, edi
mov ecx, 0xb
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822fcc60
Function at 0x38230a900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38230a9ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd00d2e85d6c174cd
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc835d00d2e85d6c1
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe3ca5b2e37c66a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1090a0f0b0e0602
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x100f0f0401090a0f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x90309020b0b0007
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x38230a98d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x38230a9ba
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x38230a9dd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x38230a970
jmp 0x38230a9d1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.382294b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.3822a6820
mov eax, edi
mov ecx, 0x12
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.38230a900

Function at 0x38230cdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38230ce92
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf7699c72f676a361
mov qword [rsp + 0x29], rdx
movabs rdx, 0x5b6f9c9e9afe91f7
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70a030a0e010e09
mov qword [rsp + 0x19], rdx
movabs rdx, 0x70c01080b050a07
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x38230ce2c
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x38230ce5e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x38230ce85
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0xf
jb 0x38230ce12
jmp 0x38230ce75
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.3822a6820
mov eax, edi
mov ecx, 0xf
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.38230cdc0
Function at 0x38230f040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38230f13b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x69d7fa66e6e0e256
mov qword [rsp + 0x35], rdx
movabs rdx, 0xe74f2069d7fa66e6
mov qword [rsp + 0x38], rdx
movabs rdx, 0xcec6747a61e5e1d9
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1207000c020f0e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd0e090005031105
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1060d0e09000503
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa0b090f00070311
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x38230f0d9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x38230f10b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x38230f12e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x73]
cmp rsi, 0x13
jb 0x38230f0bf
jmp 0x38230f122
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.382294b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.3822a6820
mov eax, edi
mov ecx, 0x13
call fcn.3822a6820
nop
nop dword [rax + rax]
call fcn.3822a4520
jmp fcn.38230f040

Function at 0x382310040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38231014c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x203ac9b6b3a9a369
mov qword [rsp + 0x36], rdx
movabs rdx, 0x74a28d657580ba72
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x818e74a28d657580
mov qword [rsp + 0x40], rdx
movabs rdx, 0x726fa9ca69a5637b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x161409050e031704
mov qword [rsp + 0x18], rdx
movabs rdx, 0x100f01140d170214
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1205110a140e100f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x11030f0604120409
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x3823100e8
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1e
jge 0x38231011c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x38231013f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0x1a
jb 0x3823100ce
jmp 0x382310133
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.3822a6820
mov eax, edi
mov ecx, 0x1a
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382310040
Function at 0x3823151c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3823152ac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x42662f48e03e1069
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x723e42662f48e03e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3c00766f6d113f20
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0c100301040c10
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2080c0c10030104
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x507110405100c0b
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x38231524a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x38231527c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x38231529f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 0x12
jb 0x382315230
jmp 0x382315293
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.382294b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.3822a6820
mov eax, edi
mov ecx, 0x12
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3823151c0

Function at 0x382317680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38231774c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xbf69beb66120b4a9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7972c0226317bf69
mov qword [rsp + 0x30], rdx
movabs rdx, 0x501010004050707
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8000b08070a0501
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x3823176ef
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x65]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x65]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x38231771c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x38231773f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x3823176d2
jmp 0x382317733
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.3822a6820
mov eax, edi
mov ecx, 0xe
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382317680
Function at 0x382318760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382318846
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x20eca4ab65eb2aad
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x64de746cffa720ec
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50c010402050509
mov qword [rsp + 0x18], rdx
movabs rdx, 0x408050c01040205
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x605080805000506
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x3823187e0
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x382318812
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x382318837
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
cmp rsi, 0xe
jb 0x3823187c2
jmp 0x38231882b
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.3822a6820
mov eax, edi
mov ecx, 0xe
nop
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382318760

Function at 0x382318860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3823189ac
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x71606bc22055bb63
mov qword [rsp + 0x52], rdx
movabs rdx, 0x732767cc63127160
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc47850766ea7a420
mov qword [rsp + 0x60], rdx
movabs rdx, 0x704f6d98689e7a3e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x658186892f632a20
mov qword [rsp + 0x70], rdx
movabs rdx, 0x5230c180f040a15
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x210710152402180a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x141b01182216140a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x25061b1a0b201818
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1a1223131d0f1616
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1c241716101f181d
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2506181517082214
mov qword [rsp + 0x4a], rdx
xor eax, eax
jmp 0x382318944
movzx r9d, byte [rsp + rsi + 0x52]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rdi + 0x52], dl
mov byte [rsp + rsi + 0x52], r8b
add rax, 2
cmp rax, 0x38
jge 0x38231897c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x26
jae 0x38231899f
movzx r8d, byte [rsp + rdi + 0x52]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x43]
cmp rsi, 0x26
jb 0x38231892a
jmp 0x382318993
xor eax, eax
lea rbx, [rsp + 0x52]
mov ecx, 0x26
call fcn.382294b80
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.3822a6820
mov eax, edi
mov ecx, 0x26
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382318860
Function at 0x38231bde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38231bee8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x796e666d476f2b48
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x1e4220fe72e81564
mov qword [rsp + 0x43], rdx
movabs rdx, 0x2843733a6c1e4220
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5565487352102067
mov qword [rsp + 0x50], rdx
movabs rdx, 0x309000a11140c03
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1a111c0e18031c01
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1c05090e03171813
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x8180b15010f13
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x38231be8b
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
cmp rax, 0x20
jge 0x38231beb8
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x38231bedb
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x38231be6e
jmp 0x38231becf
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.382294b80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.3822a6820
mov eax, edi
mov ecx, 0x1d
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.38231bde0

Function at 0x382323c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382323d1a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7450257c616d751b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x6f8275711b7a6b6a
mov qword [rsp + 0x46], rdx
movabs rdx, 0x6e516f8275711b7a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6b62124273825061
mov qword [rsp + 0x50], rdx
movabs rdx, 0x180e040a040e020c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x10114150504180e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1305020810050906
mov qword [rsp + 0x26], rdx
movabs rdx, 0x16050b0f0f0c0008
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x404171205030901
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x382323cb7
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x26
jge 0x382323ce9
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x382323d0d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0x1a
jb 0x382323c9d
jmp 0x382323d01
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.382294b80
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.3822a6820
mov eax, edi
mov ecx, 0x1a
call fcn.3822a6820
nop
call fcn.3822a4520
nop
jmp fcn.382323c00