joyce8/EMBER2024-capa huggingface dataset:
Function at 0x382362b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382362c5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xbbb271207db46f74
mov qword [rsp + 0x39], rdx
movabs rdx, 0x64a4618f6d206fbb
mov qword [rsp + 0x40], rdx
movabs rdx, 0x656da890a0db7261
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2070d05050a0508
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1300130b14061103
mov qword [rsp + 0x25], rdx
movabs rdx, 0x140302141300130b
mov qword [rsp + 0x29], rdx
movabs rdx, 0x6140b050706120d
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x382362c00
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x382362c2d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x382362c50
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x382362bdf
jmp 0x382362c44
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.3822a6820
mov eax, edi
mov ecx, 0x17
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.382362b60

Function at 0x3823654a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38236559d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2ec975af718e6514
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xc66e61d6532ec975
mov qword [rsp + 0x40], rdx
movabs rdx, 0xecbd015e0c01b329
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1111130c12071014
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf070f0d111003
mov qword [rsp + 0x25], rdx
movabs rdx, 0x200060d0411000f
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x91202140f0e0d07
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x382365540
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x38236556d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x382365590
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x38236551f
jmp 0x382365584
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.3822a6820
mov eax, edi
mov ecx, 0x15
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.3823654a0
Function at 0x3823658a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38236598c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf165a76ec2ea6f05
mov qword [rsp + 0x33], rdx
movabs rdx, 0xfee2ff6cebf165a7
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe26d5df0ee64726a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x210050c0d1003
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa0b0911140c0c12
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1112080a120a0705
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x38236592a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x60]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x38236595c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x38236597f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x60]
cmp rsi, 0x15
jb 0x382365910
jmp 0x382365973
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.382294b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.3822a6820
mov eax, edi
mov ecx, 0x15
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.3823658a0

Function at 0x382366dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382366ec8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x42a0e7e0ce77904e
mov qword [rsp + 0x37], rdx
movabs rdx, 0x6ec0915320f56ef3
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xc16ec0915320f56e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x529ef25497a7d161
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd051012010e0307
mov qword [rsp + 0x19], rdx
movabs rdx, 0x160a120d12061418
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1041607070d160a
mov qword [rsp + 0x27], rdx
movabs rdx, 0x10a101617131008
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x382366e6b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1e
jge 0x382366e98
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x382366ebb
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x382366e4e
jmp 0x382366eaf
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.3822a6820
mov eax, edi
mov ecx, 0x19
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382366dc0
Function at 0x382366ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382366fec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x766e060cb1756f0d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb77459b5c59e4369
mov qword [rsp + 0x46], rdx
movabs rdx, 0x715db77459b5c59e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x739269eeaeca720b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x120d110c0d101914
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1410040d18000b05
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30f0d1016100918
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x12150b120a141812
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x382366f88
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x20
jge 0x382366fbc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x382366fdf
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x72]
cmp rsi, 0x1a
jb 0x382366f6e
jmp 0x382366fd3
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.382294b80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.3822a6820
mov eax, edi
mov ecx, 0x1a
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382366ee0

Function at 0x382368d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382368e3d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc3be0d6f22ac144e
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x116ea97453c3be0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc46d99170f72050a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2070a060f100612
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x10e010e02050e06
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc120c05110d010e
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x14030e1207011410
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x382368de0
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x382368e0d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x382368e30
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x382368dbf
jmp 0x382368e24
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.3822a6820
mov eax, edi
mov ecx, 0x15
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.382368d40
Function at 0x38236e500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38236e5fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xda68e861d7f49473
mov qword [rsp + 0x39], rdx
movabs rdx, 0xe42df3e26fe053da
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9f725130e36170c2
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1613120d08070c06
mov qword [rsp + 0x19], rdx
movabs rdx, 0x71303030b131413
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6010e09060f1614
mov qword [rsp + 0x29], rdx
movabs rdx, 0x120c050201071302
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x38236e5a0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x57]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x57]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x38236e5cd
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x38236e5f0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x38236e57f
jmp 0x38236e5e4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.3822a6820
mov eax, edi
mov ecx, 0x17
call fcn.3822a6820
nop
nop dword [rax]
call fcn.3822a4520
jmp fcn.38236e500

Function at 0x382373080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382373152
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6e0f03721370e9a9
mov qword [rsp + 0x29], rdx
movabs rdx, 0x660065b6c2e2c56e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30a0d0306030a05
mov qword [rsp + 0x19], rdx
movabs rdx, 0x809080b060601
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x3823730ec
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x38237311e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x382373145
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 0xf
jb 0x3823730d2
jmp 0x382373135
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.3822a6820
mov eax, edi
mov ecx, 0xf
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382373080
Function at 0x382373160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38237324c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xee5070676b6fc5ec
mov qword [rsp + 0x33], rdx
movabs rdx, 0x65e7d0d247ee5070
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0c3ce6c6127b267
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80b040a01071309
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4120a090a080b
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb00140e0f0b0700
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x3823731ea
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x79]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x38237321c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x38237323f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x79]
cmp rsi, 0x15
jb 0x3823731d0
jmp 0x382373233
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.382294b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.3822a6820
mov eax, edi
mov ecx, 0x15
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382373160

Function at 0x382373a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382373ad2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb172a9276e2d704f
mov qword [rsp + 0x29], rdx
movabs rdx, 0x4865a1935464efb1
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b040402080e04
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7050708020c0e07
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x382373a6c
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x382373a9e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x382373ac5
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0xf
jb 0x382373a52
jmp 0x382373ab5
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.3822a6820
mov eax, edi
mov ecx, 0xf
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382373a00
Function at 0x382373ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382373bcc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x48fdfefa72eb75f3
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xfe3c48fdfefa72eb
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7375743f2a534d12
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9060b0805050e0e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x20d000509060b08
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60d050a07090704
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x382373b6a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x14
jge 0x382373b9c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x382373bbf
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x12
jb 0x382373b50
jmp 0x382373bb3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.382294b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.3822a6820
mov eax, edi
mov ecx, 0x12
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382373ae0

Function at 0x382374880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38237494c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x76c0cb74ccf5170f
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x57136e95
movabs rdx, 0x602080503030105
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10a050003020800
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x3823748e5
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x38237491c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x38237493f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0xc
jb 0x3823748cb
jmp 0x382374933
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.382294b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.3822a6820
mov eax, edi
mov ecx, 0xc
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382374880
Function at 0x382375ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382375dfa
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6b06c6f56b0f1c2
mov qword [rsp + 0x43], rdx
movabs rdx, 0xe1de7270b8985865
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x196e6fbc74e1de72
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe2bf6c64846174d6
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6090b1c180a0a0e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc010b0106150609
mov qword [rsp + 0x23], rdx
movabs rdx, 0xe0a0c1114071614
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x718010e021b140b
mov qword [rsp + 0x33], rdx
movabs rdx, 0xe160e0f070a1500
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x382375d97
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x26
jge 0x382375dc9
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x382375ded
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7c]
cmp rsi, 0x1d
jb 0x382375d7d
jmp 0x382375de1
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.382294b80
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.3822a6820
mov eax, edi
mov ecx, 0x1d
call fcn.3822a6820
nop
call fcn.3822a4520
nop
jmp fcn.382375ce0

Function at 0x382375e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382375f58
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xa820e01856e91d3b
mov qword [rsp + 0x47], rdx
movabs rdx, 0xc9a820e01856e91d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3e2ecb3b65a41008
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe4264db56d75e6dc
mov qword [rsp + 0x58], rdx
movabs rdx, 0xcf5426696f74746e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1b020e001f021510
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x71812180b0d0b07
mov qword [rsp + 0x25], rdx
movabs rdx, 0x21e071812180b0d
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd0912101108050f
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x4110f0806171201
mov qword [rsp + 0x37], rdx
movabs rdx, 0x1e0a00001b20181f
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x382375ef5
movzx r9d, byte [rsp + rsi + 0x47]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x47], dl
mov byte [rsp + rsi + 0x47], r8b
add rax, 2
cmp rax, 0x2a
jge 0x382375f28
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x382375f4b
movzx r8d, byte [rsp + rdi + 0x47]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
nop
cmp rsi, 0x21
jb 0x382375edb
jmp 0x382375f3f
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.382294b80
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.3822a6820
mov eax, edi
mov ecx, 0x21
call fcn.3822a6820
nop
call fcn.3822a4520
nop dword [rax]
jmp fcn.382375e20
Function at 0x3823789a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382378a9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x654508ee20655c36
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x5546146c69546545
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4339456c4f743c65
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4140b0a0311070b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x107130c0d050414
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0d0d110107130c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10d081504080001
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x382378a39
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x382378a6b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x382378a8e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0x16
jb 0x382378a1f
jmp 0x382378a82
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.382294b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.3822a6820
mov eax, edi
mov ecx, 0x16
call fcn.3822a6820
nop
nop dword [rax + rax]
call fcn.3822a4520
jmp fcn.3823789a0

Function at 0x382378ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x382378bac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4579b7ab74f7b6be
mov qword [rsp + 0x31], rdx
movabs rdx, 0xe0bb6fe90d766e45
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6bc41e6ca1b3a765
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120e140a15110d10
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5050a0214040010
mov qword [rsp + 0x21], rdx
movabs rdx, 0x12100a040b0a0201
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x382378b4a
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x56]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x18
jge 0x382378b7c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x382378b9f
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x56]
cmp rsi, 0x17
jb 0x382378b30
jmp 0x382378b93
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.382294b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.3822a6820
mov eax, edi
mov ecx, 0x17
call fcn.3822a6820
nop
call fcn.3822a4520
jmp fcn.382378ac0
Function at 0x38237dcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38237ddf8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x74bd656b78ef6e75
mov qword [rsp + 0x46], rdx
movabs rdx, 0xf1c874bd656b78ef
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb16def0441a972a3
mov qword [rsp + 0x50], rdx
movabs rdx, 0x46bde47090e9e82e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x203a72c7fbfdcbbb
mov qword [rsp + 0x60], rdx
movabs rdx, 0xa171e0d09190d18
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x190d1b150c0e0f13
mov qword [rsp + 0x22], rdx
movabs rdx, 0x21c090e190d1b15
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1d02130e15180c0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf141c0614151a04
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0a110208150d13
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x38237dd98
movzx r9d, byte [rsp + rsi + 0x46]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x46], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x46], dl
add rax, 2
cmp rax, 0x2c
jge 0x38237ddc8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x38237ddeb
movzx r8d, byte [rsp + rdi + 0x46]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x22
jb 0x38237dd7b
jmp 0x38237dddf
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.382294b80
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.3822a6820
mov eax, edi
mov ecx, 0x22
call fcn.3822a6820
nop
call fcn.3822a4520
nop dword [rax]
jmp fcn.38237dcc0

Function at 0x38237f060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x38237f198
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xe0366e5ee423e53e
mov qword [rsp + 0x47], rdx
movabs rdx, 0x66e0366e5ee423e5
mov qword [rsp + 0x48], rdx
movabs rdx, 0x70c8506e32061b3b
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe9446458c4720b73
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc6162ee1b4e36c01
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1107001f1d0e0403
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1b0715140f171100
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1204190b191c1b07
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1912180117170e04
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x90004060b201b07
mov qword [rsp + 0x37], rdx
movabs rdx, 0x2010a18151c0c1e
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x38237f135
movzx r9d, byte [rsp + rsi + 0x47]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xf]
mov byte [rsp + rdi + 0x47], dl
mov byte [rsp + rsi + 0x47], r8b
add rax, 2
cmp rax, 0x2e
jge 0x38237f168
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x38237f18b
movzx r8d, byte [rsp + rdi + 0x47]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xf]
nop
cmp rsi, 0x21
jb 0x38237f11b
jmp 0x38237f17f
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.382294b80
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.3822a6820
mov eax, edi
mov ecx, 0x21
call fcn.3822a6820
nop
call fcn.3822a4520
nop dword [rax]
jmp fcn.38237f060