joyce8/EMBER2024-capa huggingface dataset:
Function at 0x38232b180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38232b23e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69bdb401a9b6bc7a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x36cc9b5
movabs rdx, 0xb01080003050204
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x9060102
xor eax, eax
jmp 0x38232b1e1
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x38232b20e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x38232b231
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x38232b1c4
jmp 0x38232b225
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.382294b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.3822a6820
mov eax, edi
mov ecx, 0xc
call fcn.3822a6820
nop
nop
call fcn.3822a4520
jmp fcn.38232b180

Function at 0x38232ddc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38232debd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe665fd2bcfff3743
mov qword [rsp + 0x35], rdx
movabs rdx, 0xfa1089e665fd2bcf
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1c9aab74e7910f08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x804010811030404
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8110e05100b0d05
mov qword [rsp + 0x21], rdx
movabs rdx, 0x801020308110e05
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc0709010b0a1204
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x38232de60
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x38232de8d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x38232deb0
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x38232de3f
jmp 0x38232dea4
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.382294b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.3822a6820
mov eax, edi
mov ecx, 0x13
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.38232ddc0
Function at 0x38232ffe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38233010c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x43640f071572c12c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc18334669d7413df
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc8c77413c2f2bd99
mov qword [rsp + 0x58], rdx
movabs rdx, 0x69d7240e53322c74
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1a140e0d14121908
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x161d1f03011e0013
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4161d1f03011e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x110d0f1e011a1701
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10090d1e0b1c0511
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11c1d0301030919
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x3823300a6
movzx r9d, byte [rsp + rsi + 0x48]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x48], dl
mov byte [rsp + rsi + 0x48], r8b
add rax, 2
cmp rax, 0x2a
jge 0x3823300dc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x3823300ff
movzx r8d, byte [rsp + rdi + 0x48]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0x20
jb 0x38233008c
jmp 0x3823300f3
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.382294b80
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.3822a6820
mov eax, edi
mov ecx, 0x20
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.38232ffe0

Function at 0x382330120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382330228
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8c656ba68bb98b43
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x6369a89796439d74
mov qword [rsp + 0x44], rdx
movabs rdx, 0x8b618c956369a897
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6d5c8b926e915875
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd14091b14071405
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x216021403180f0b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x213031104150214
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf1001190c1b1a15
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x3823301cb
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
cmp rax, 0x20
jge 0x3823301f8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x38233021b
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x3823301ae
jmp 0x38233020f
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.382294b80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.3822a6820
mov eax, edi
mov ecx, 0x1c
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382330120
Function at 0x382330560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38233065d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc3c739c7ced75043
mov qword [rsp + 0x38], rdx
movabs rdx, 0x63a51b69d8723cc6
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc7bed4a7e4e47446
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4140e0405060709
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x70b100b030d0801
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2120313070b100b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1406081604161517
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x382330600
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x38233062d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x382330650
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x3823305df
jmp 0x382330644
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.3822a6820
mov eax, edi
mov ecx, 0x18
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.382330560

Function at 0x382330ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382330bbd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3e3404420f154940
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x443c3ef0093e3404
mov qword [rsp + 0x30], rdx
movabs rdx, 0x300070202080509
mov qword [rsp + 0x19], rdx
movabs rdx, 0x90c030007020208
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x60805040a0a0b01
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x382330b60
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x382330b8d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x382330bb0
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x382330b42
jmp 0x382330ba4
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.3822a6820
mov eax, edi
mov ecx, 0xd
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.382330ae0
Function at 0x382330d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382330e1a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x697245d7b33f65db
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7969743add43f6eb
mov qword [rsp + 0x48], rdx
movabs rdx, 0x61c3e4650b6163f4
mov qword [rsp + 0x50], rdx
movabs rdx, 0x79cadd6c57dc5c16
mov qword [rsp + 0x58], rdx
movabs rdx, 0x13081b16090f131d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1916041e1b101308
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10031519050018
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1d100c0516190902
mov qword [rsp + 0x30], rdx
movabs rdx, 0x51d091a0910080b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x382330db7
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x26
jge 0x382330de9
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x382330e0d
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0x20
jb 0x382330d9d
jmp 0x382330e01
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.382294b80
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x20
call fcn.3822a6820
mov eax, edi
mov ecx, 0x20
call fcn.3822a6820
nop
call fcn.3822a4520
nop
jmp fcn.382330d00

Function at 0x382332900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3823329c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x13a2156573b378fc
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x4ef1fe13
movabs rdx, 0x802080a06000601
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x207050901080802
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x382332968
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x6d]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x6d]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x382332997
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x3823329ba
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x38233294b
jmp 0x3823329ae
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.3822a6820
mov eax, edi
mov ecx, 0xb
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382332900
Function at 0x382332d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382332e0c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xbeb0e1a46165acf1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb06cbeb0e1a46165
mov qword [rsp + 0x30], rdx
movabs rdx, 0x573cd39c70a5d0dc
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60e10040a0e050b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x50704060e1004
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb050c090f050107
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x382332daa
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x14
jge 0x382332ddc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x382332dff
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
cmp rsi, 0x12
jb 0x382332d90
jmp 0x382332df3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.382294b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.3822a6820
mov eax, edi
mov ecx, 0x12
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382332d20

Function at 0x382334100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3823341fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x263f4f7439232f0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4f1f4c53654c6c44
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4c3d3af5703d6e53
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa050c1417120706
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x11501060d171615
mov qword [rsp + 0x24], rdx
movabs rdx, 0x306161201150106
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20008070f0c0e00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x382334199
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1c
jge 0x3823341cb
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x3823341ee
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0x18
jb 0x38233417f
jmp 0x3823341e2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.3822a6820
mov eax, edi
mov ecx, 0x18
call fcn.3822a6820
nop
nop dword [rax + rax]
call fcn.3822a4520
jmp fcn.382334100
Function at 0x382334fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382335092
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2c496590ae766536
mov qword [rsp + 0x29], rdx
movabs rdx, 0x286f21402dd7fa2c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40e0308090b0408
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc030308070a000b
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x38233502c
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x38233505e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x382335085
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0xf
jb 0x382335012
jmp 0x382335075
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.3822a6820
mov eax, edi
mov ecx, 0xf
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382334fc0

Function at 0x382336440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382336526
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x47735c5e61675646
mov qword [rsp + 0x31], rdx
movabs rdx, 0x656c45777f4f6747
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0c070b0a08030b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5010b0c070b0a08
mov qword [rsp + 0x21], rdx
movabs rdx, 0x7040a010c010206
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x3823364c0
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xc]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x3823364f2
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x382336517
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xc]
cmp rsi, 0xf
jb 0x3823364a2
jmp 0x38233650b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.382294b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.3822a6820
mov eax, edi
mov ecx, 0xf
nop
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382336440
Function at 0x3823372a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382337386
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe948c86f43e0e247
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4fec5f4a47d76d74
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0e090d09010b05
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x102050f0d0e090d
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa05070907060a0c
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x382337320
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x382337352
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x382337377
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0x10
jb 0x382337302
jmp 0x38233736b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.382294b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.3822a6820
mov eax, edi
mov ecx, 0x10
nop
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3823372a0

Function at 0x382338fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3823390aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x41ac1afa46996504
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6972744a41ac1afa
mov qword [rsp + 0x38], rdx
movabs rdx, 0x577845dbe7017559
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8000c1008100f0f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6000010020c0800
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe060e05100c04
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x38233904d
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x7e]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x7e]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x16
jge 0x38233907a
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x38233909d
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x382339030
jmp 0x382339091
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.382294b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.3822a6820
mov eax, edi
mov ecx, 0x14
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382338fc0
Function at 0x3823398a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38233996c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7585c6725074f1f5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2095657287637585
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9010705060c0d08
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x60c000d00080501
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x38233990f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x38233993c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x38233995f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x3823398f2
jmp 0x382339953
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.3822a6820
mov eax, edi
mov ecx, 0xe
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3823398a0

Function at 0x38233bc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38233bdb8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6997360bf24b6e16
mov qword [rsp + 0x47], rdx
movabs rdx, 0xf26997360bf24b6e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x72683c63d572fd19
mov qword [rsp + 0x50], rdx
movabs rdx, 0xfc95bb36417261f0
mov qword [rsp + 0x58], rdx
movabs rdx, 0x741eed28de4de2e4
mov qword [rsp + 0x60], rdx
movabs rdx, 0x13051a1716031b18
mov qword [rsp + 0x19], rdx
movabs rdx, 0x20a0802040e1e0c
mov qword [rsp + 0x21], rdx
movabs rdx, 0x190c1511051f020a
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc0e13031a021c0c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x31617091f131b06
mov qword [rsp + 0x37], rdx
movabs rdx, 0x1e02001b1d161513
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x38233bd55
movzx r9d, byte [rsp + rsi + 0x47]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x19]
mov byte [rsp + rdi + 0x47], dl
mov byte [rsp + rsi + 0x47], r8b
add rax, 2
cmp rax, 0x2e
jge 0x38233bd88
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x38233bdab
movzx r8d, byte [rsp + rdi + 0x47]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x19]
nop
cmp rsi, 0x21
jb 0x38233bd3b
jmp 0x38233bd9f
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.382294b80
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.3822a6820
mov eax, edi
mov ecx, 0x21
call fcn.3822a6820
nop
call fcn.3822a4520
nop dword [rax]
jmp fcn.38233bc80
Function at 0x38233bde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38233be9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd56c6946b21b33d4
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x98
movabs rdx, 0x300070100080002
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x703
xor eax, eax
nop
jmp 0x38233be40
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x38233be6d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x38233be90
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x38233be22
jmp 0x38233be84
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.382294b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.3822a6820
mov eax, edi
mov ecx, 9
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.38233bde0

Function at 0x38233fb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38233fc12
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65b79cb561a76eb5
mov qword [rsp + 0x29], rdx
movabs rdx, 0xbd0037e866f1ae65
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6000e0d090b060c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x80400050e020b09
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x38233fbac
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x38233fbde
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x38233fc05
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
cmp rsi, 0xf
jb 0x38233fb92
jmp 0x38233fbf5
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.3822a6820
mov eax, edi
mov ecx, 0xf
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.38233fb40
Function at 0x382340b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382340bfd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xaf6f43a0ba8fdc57
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1341d16f7eaf6f43
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa08080c0b02030b
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa010a08080c0b02
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa07070803080401
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x382340ba0
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x382340bcd
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x382340bf0
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x382340b82
jmp 0x382340be4
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.3822a6820
mov eax, edi
mov ecx, 0xd
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.382340b20

Function at 0x3823437e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382343898
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc87463cfd371ec48
mov qword [rsp + 0x28], rdx
movabs rdx, 0x103020001020401
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x2070203
xor eax, eax
jmp 0x382343839
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x382343868
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x38234388b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x38234381c
jmp 0x38234387f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.382294b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.3822a6820
mov eax, edi
mov ecx, 8
call fcn.3822a6820
nop
call fcn.3822a4520
nop dword [rax]
jmp fcn.3823437e0