joyce8/EMBER2024-capa huggingface dataset:
Function at 0x3822c7b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822c7c5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2e1bcfd8707beb50
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x45dd5bed2e1bcfd8
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5cdd76796cf86772
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0a07000b09060b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20b080406051312
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1211020e120a020b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe12110b0107
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x3822c7c00
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x3822c7c2d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x3822c7c50
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x14
jb 0x3822c7bdf
jmp 0x3822c7c44
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.3822a6820
mov eax, edi
mov ecx, 0x14
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.3822c7b60

Function at 0x3822c7c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822c7d38
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x63e870707ce57445
mov qword [rsp + 0x28], rdx
movabs rdx, 0x606040203020304
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x4020202
xor eax, eax
jmp 0x3822c7cd9
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x3822c7d08
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x3822c7d2b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x3822c7cbc
jmp 0x3822c7d1f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.382294b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.3822a6820
mov eax, edi
mov ecx, 8
call fcn.3822a6820
nop
call fcn.3822a4520
nop dword [rax]
jmp fcn.3822c7c80
Function at 0x3822c81c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822c8278
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x40411947524af447
mov qword [rsp + 0x28], rdx
movabs rdx, 0x607020403000301
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x500
xor eax, eax
jmp 0x3822c8215
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x3822c8248
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x3822c826b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
nop
cmp rsi, 8
jb 0x3822c81fb
jmp 0x3822c825f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.382294b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.3822a6820
mov eax, edi
mov ecx, 8
call fcn.3822a6820
nop
call fcn.3822a4520
nop dword [rax]
jmp fcn.3822c81c0

Function at 0x3822c8880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822c8966
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7a6b6f5f67769069
mov qword [rsp + 0x30], rdx
movabs rdx, 0x69966e53516e8676
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10f090c01090e08
mov qword [rsp + 0x18], rdx
movabs rdx, 0x10d0207080a0b00
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7050f04030e0306
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x3822c8900
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x3822c8932
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x3822c8957
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
cmp rsi, 0x10
jb 0x3822c88e2
jmp 0x3822c894b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.382294b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.3822a6820
mov eax, edi
mov ecx, 0x10
nop
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822c8880
Function at 0x3822caa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822caac6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x618c615661857493
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x77
movabs rdx, 0x80608020206
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x4000106
xor eax, eax
nop
jmp 0x3822caa60
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x17]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x3822caa92
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x3822caab7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x17]
cmp rsi, 9
jb 0x3822caa42
jmp 0x3822caaab
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.382294b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.3822a6820
mov eax, edi
mov ecx, 9
nop
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822caa00

Function at 0x3822cb6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822cb7bd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x69fafaf16e7d9ef9
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x247502a09e69fafa
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5010609050c0403
mov qword [rsp + 0x19], rdx
movabs rdx, 0x80605010609050c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1060a0502010400
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x3822cb760
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 + 0x7a]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 + 0x7a]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x3822cb78d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x3822cb7b0
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x3822cb742
jmp 0x3822cb7a4
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.3822a6820
mov eax, edi
mov ecx, 0xd
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.3822cb6e0
Function at 0x3822cb7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822cb8bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x63fb2b076df99891
mov qword [rsp + 0x30], rdx
movabs rdx, 0x35ba69737275065f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50903050209020f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x601050903050209
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6040e00000e0304
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x3822cb860
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x79]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x79]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x3822cb88d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x3822cb8b0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x3822cb842
jmp 0x3822cb8a4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.382294b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.3822a6820
mov eax, edi
mov ecx, 0x10
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.3822cb7e0

Function at 0x3822cce00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822ccec6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5ff0382e5f7765d6
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xfb0b0e5f
movabs rdx, 0x90a0405090a0605
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x8000000
xor eax, eax
jmp 0x3822cce60
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x3822cce92
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x3822cceb7
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0xb
jb 0x3822cce44
jmp 0x3822cceab
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.382294b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.3822a6820
mov eax, edi
mov ecx, 0xb
nop
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822cce00
Function at 0x3822cd260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822cd31d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6c0e29945feb6c1d
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x63c5
movabs rdx, 0x600000204020805
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x504
xor eax, eax
jmp 0x3822cd2c0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x3822cd2ed
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x3822cd310
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x3822cd2a2
jmp 0x3822cd304
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.382294b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.3822a6820
mov eax, edi
mov ecx, 0xa
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.3822cd260

Function at 0x3822cd3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822cd486
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6d9b1ee4aea1ec4f
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x63eb
movabs rdx, 0x504050108050105
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x3060205
xor eax, eax
jmp 0x3822cd420
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x3822cd452
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x3822cd477
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
cmp rsi, 0xa
jb 0x3822cd403
jmp 0x3822cd46b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.382294b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.3822a6820
mov eax, edi
mov ecx, 0xa
nop
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822cd3c0

Function at 0x3822cd4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822cd56c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x737265e2fa7b7d7c
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xe661e973
movabs rdx, 0x3080302080a0001
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa0100020304020a
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x3822cd505
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x3822cd53c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x3822cd55f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 0xb
jb 0x3822cd4eb
jmp 0x3822cd553
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.3822a6820
mov eax, edi
mov ecx, 0xb
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822cd4a0
Function at 0x3822ce520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822ce606
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb39583c16cac9e50
mov qword [rsp + 0x31], rdx
movabs rdx, 0xc69b866c6894fab3
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc020e0d06070708
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6090c020e0d0607
mov qword [rsp + 0x21], rdx
movabs rdx, 0x908050c0d010104
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x3822ce5a0
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x39]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x3822ce5d2
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x3822ce5f7
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x39]
cmp rsi, 0xf
jb 0x3822ce582
jmp 0x3822ce5eb
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.382294b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.3822a6820
mov eax, edi
mov ecx, 0xf
nop
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822ce520

Function at 0x3822cfd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822cfe12
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x6867616e9d826b9c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x100020300000303
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x3822cfdae
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1e]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x3822cfde2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x3822cfe05
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1e]
cmp rsi, 8
jb 0x3822cfd94
nop
jmp 0x3822cfdf9
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.382294b80
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.3822a6820
mov eax, edi
mov ecx, 8
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822cfd60
Function at 0x3822d2120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822d221b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6ef5a1cdc7e5ccd6
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc2bec5db6ef5a1cd
mov qword [rsp + 0x38], rdx
movabs rdx, 0x726f8361bacfa1bf
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10e000c0c04090a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x80f060d01020c03
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe11010d080f060d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80c0b0c0f050401
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x3822d21b9
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x3822d21eb
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x3822d220e
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
cmp rsi, 0x14
jb 0x3822d219f
jmp 0x3822d2202
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.382294b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.3822a6820
mov eax, edi
mov ecx, 0x14
call fcn.3822a6820
nop
nop dword [rax + rax]
call fcn.3822a4520
jmp fcn.3822d2120

Function at 0x3822d22c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822d238c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6e5d43e9e8d1f54a
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6c6f5c74
movabs rdx, 0x203020604090101
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x404060403040203
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x3822d2325
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x3822d235c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x3822d237f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
cmp rsi, 0xc
jb 0x3822d230b
jmp 0x3822d2373
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.3822a6820
mov eax, edi
mov ecx, 0xc
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822d22c0
Function at 0x3822d23a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822d249b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5f976164b8c16f4c
mov qword [rsp + 0x39], rdx
movabs rdx, 0x45c15c6506fb1b5f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6eb020adc9f3af78
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4100c080a0d1412
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd12020210101112
mov qword [rsp + 0x27], rdx
movabs rdx, 0x8060d1202021010
mov qword [rsp + 0x29], rdx
movabs rdx, 0x60c0c0910150313
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x3822d2439
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1a
jge 0x3822d246b
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x3822d248e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x17
jb 0x3822d241f
jmp 0x3822d2482
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.3822a6820
mov eax, edi
mov ecx, 0x17
call fcn.3822a6820
nop
nop dword [rax + rax]
call fcn.3822a4520
jmp fcn.3822d23a0

Function at 0x3822d24c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822d25bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2972322a63ad6fc0
mov qword [rsp + 0x39], rdx
movabs rdx, 0x31bffcf682f0c729
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0ebc36f15c6a9b7
mov qword [rsp + 0x48], rdx
movabs rdx, 0x100012040f0e0b0e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd0a0511040c0212
mov qword [rsp + 0x25], rdx
movabs rdx, 0x7080d070d0a0511
mov qword [rsp + 0x29], rdx
movabs rdx, 0x11140916150b040d
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x3822d2560
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x45]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x45]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x3822d258d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x3822d25b0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x3822d253f
jmp 0x3822d25a4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.3822a6820
mov eax, edi
mov ecx, 0x17
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.3822d24c0
Function at 0x3822d3be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822d3cb8
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7c7d68727968877f
mov qword [rsp + 0x31], rdx
movabs rdx, 0xa86aa26381799e7c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc080a070601010c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3090d0c0c080a07
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa0605060d000e
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x3822d3c59
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
mov byte [rsp + rdi + 0x31], r9b
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x14
jge 0x3822d3c88
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x3822d3cab
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
nop
cmp rsi, 0xf
jb 0x3822d3c42
jmp 0x3822d3c9f
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.382294b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.3822a6820
mov eax, edi
mov ecx, 0xf
call fcn.3822a6820
nop
call fcn.3822a4520
nop dword [rax]
jmp fcn.3822d3be0

Function at 0x3822d4300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822d4427
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xd1d3d96570c61450
mov qword [rsp + 0x44], rdx
movabs rdx, 0xd7bccb28b4b32d64
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xd344cb36d7bccb28
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7fade0db5fba1e2e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1b06151514020c1b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x90b1a0e05130d01
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0c090b1a0e0513
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc190e0d120f1010
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x190b0e0a1a0d1816
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa1115100d0f0702
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x3822d43c9
movzx r9d, byte [rsp + rsi + 0x44]
sub r9d, edx
lea edx, [r9 - 0x45]
mov byte [rsp + rdi + 0x44], dl
lea edx, [r8 - 0x45]
mov byte [rsp + rsi + 0x44], dl
add rax, 2
cmp rax, 0x2a
jge 0x3822d43f7
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x3822d441a
movzx r8d, byte [rsp + rdi + 0x44]
sub r8d, edx
cmp rsi, 0x1c
jb 0x3822d43ac
jmp 0x3822d440e
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.382294b80
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.3822a6820
mov eax, edi
mov ecx, 0x1c
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3822d4300
Function at 0x3822e5880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822e597b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x655265440ef772e2
mov qword [rsp + 0x38], rdx
movabs rdx, 0x63453b040e64654d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xded906665027203b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x705150c0706100e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x13130b1516151203
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4151600030d0317
mov qword [rsp + 0x28], rdx
movabs rdx, 0x120d0d02080c160c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x3822e5919
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 8]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x20
jge 0x3822e594b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x3822e596e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 8]
cmp rsi, 0x18
jb 0x3822e58ff
jmp 0x3822e5962
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.3822a6820
mov eax, edi
mov ecx, 0x18
call fcn.3822a6820
nop
nop dword [rax + rax]
call fcn.3822a4520
jmp fcn.3822e5880

Function at 0x3822e6780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3822e687d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x23fbcf70d0ff2219
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x610f20c02523fbcf
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70650468cd65cd64
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd021112110b0607
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20011050b02080d
mov qword [rsp + 0x27], rdx
movabs rdx, 0x609010b02001105
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xd0302070b0e1009
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x3822e6820
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x3822e684d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x3822e6870
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x3822e67ff
jmp 0x3822e6864
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.3822a6820
mov eax, edi
mov ecx, 0x15
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.3822e6780