joyce8/EMBER2024-capa huggingface dataset:
Function at 0x361f4bdc0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f4be8a
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rax
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0
call sym.internal_bytealg.IndexByteString.abi0
xorps xmm15, xmm15
mov r14, qword [0x3621f97a8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
jne 0x361f4be6f
mov rcx, qword [rsp + 0x60]
lea rdx, [rcx + 1]
mov qword [rsp + 0x40], rdx
lea rax, [0x362090f40]
xor ebx, ebx
mov rcx, rdx
call sym.runtime.makeslice
mov rbx, qword [rsp + 0x60]
mov rcx, rax
xor edi, edi
mov rsi, qword [rsp + 0x40]
mov rax, qword [rsp + 0x58]
nop dword [rax]
call sym.syscall.aPGpOg5doZgc
inc rbx
cmp rcx, rbx
jae 0x361f4be5e
mov edi, 1
lea rsi, [0x362090f40]
call sym.runtime.growslice
mov word [rax + rbx*2 - 2], 0
xor edi, edi
xor esi, esi
add rsp, 0x48
pop rbp
ret
xor eax, eax
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x3620d6958]
lea rsi, [0x3620d65e8]
add rsp, 0x48
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.syscall.PG4lQAC

Function at 0x361f52560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f5268c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x58b20d316f56b841
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9eec0f70cd654520
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0bfdbb721e1bc19
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x656c370cfabad6c8
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1c06051818021b10
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd1817001a051213
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1d0418190d181700
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d1b1714090b041b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b010e061112010b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x610160f07141516
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x361f52626
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2c
jge 0x361f5265c
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x361f5267f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
cmp rsi, 0x20
jb 0x361f5260c
jmp 0x361f52673
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call sym.runtime.slicebytetostring
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x20
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func23
Function at 0x361f526a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f527a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x19c74f572fff46f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x18e04fef161f2ef
mov qword [rsp + 0x25], rdx
movabs rdx, 0x2030692079018e04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xbdef65ee7902f188
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd130e130f190f15
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x80b15161b1b0918
mov qword [rsp + 0x42], rdx
movabs rdx, 0xe09070c1616080b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1704010204061c09
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x361f5274b
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x361f52778
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x361f5279b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x361f5272e
jmp 0x361f5278f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call sym.runtime.slicebytetostring
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x1d
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func24

Function at 0x361f53400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f534ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x63644358610d5f15
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6f71656063644358
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656f6f725e607065
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50407020f000801
mov qword [rsp + 0x32], rdx
movabs rdx, 0x12040e0e0e040504
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb05010d01051004
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x361f5348d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x361f534ba
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x361f534dd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x361f53470
jmp 0x361f534d1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call sym.runtime.slicebytetostring
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x14
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func30
Function at 0x361f53ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f53fcc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6f6974d36fc6706f
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc3396f6974d36fc6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x64a36cc165bc6176
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc02080203040a02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd0c04080d0c0c02
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0c0e080903100d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x361f53f6a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6b]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x361f53f9c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x361f53fbf
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6b]
cmp rsi, 0x12
jb 0x361f53f50
jmp 0x361f53fb3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call sym.runtime.slicebytetostring
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x12
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func34

Function at 0x361f53fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f540cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc241384544f26f39
mov qword [rsp + 0x18], rdx
movabs rdx, 0x704bc241384544f2
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe36570734e2c6ffb
mov qword [rsp + 0x22], rdx
movabs rdx, 0x304060a070f08
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70c050a08110003
mov qword [rsp + 0x30], rdx
movabs rdx, 0x81102110d050d02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x361f5406a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x361f5409c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x361f540bf
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0x12
jb 0x361f54050
jmp 0x361f540b3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call sym.runtime.slicebytetostring
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x12
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func35
Function at 0x361f56ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f56faa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc23841203073da42
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xbb5bcac238412030
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe32d64ead9197876
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0a0307000d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe080e0509090911
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110f010706070d12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x361f56f4d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x361f56f7a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x361f56f9d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x361f56f30
jmp 0x361f56f91
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call sym.runtime.slicebytetostring
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x13
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func46

Function at 0x361f58c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f58ce6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x726905ae61f2a5af
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf1bef45a41b37269
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb09080005090d01
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9050b0908000509
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0c0a040d020109
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x361f58c80
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x56]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x361f58cb2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x361f58cd7
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x56]
cmp rsi, 0xe
jb 0x361f58c62
jmp 0x361f58ccb
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call sym.runtime.slicebytetostring
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0xe
nop
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func59
Function at 0x361f59900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f59a27
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x20f2506ed0c16163
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7da72c5863e720f2
mov qword [rsp + 0x20], rdx
movabs rdx, 0xda7ee3956e8454e6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6465f4dde373dc97
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe872fc06a4050de5
mov qword [rsp + 0x38], rdx
movabs rdx, 0x210e020b0a200d03
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf25051e141f021a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x220c061b14232025
mov qword [rsp + 0x50], rdx
movabs rdx, 0x190a221f121e0813
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1715151610162319
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x361f599c9
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x28
jge 0x361f599f7
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x26
jae 0x361f59a1a
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x26
jb 0x361f599ac
jmp 0x361f59a0e
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
call sym.runtime.slicebytetostring
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x26
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func68

Function at 0x361f5d720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f5d80c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x906e8ca2a09faca3
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xdc7420906e8ca2a0
mov qword [rsp + 0x22], rdx
movabs rdx, 0xce656c69d593e4e5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc000b0c1204030e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x902010104050c00
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0203040b070a0b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x361f5d7aa
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x47]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x361f5d7dc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x361f5d7ff
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x47]
cmp rsi, 0x13
jb 0x361f5d790
jmp 0x361f5d7f3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call sym.runtime.slicebytetostring
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x13
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func76
Function at 0x361f6e8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f6e9d8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x79766126d009a461
mov qword [rsp + 0x18], rdx
movabs rdx, 0x722079766126d009
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb9fb1319d620e52a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xff2ad3333320bcc9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x65638e2ab21c3974
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20f111000021f16
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe1f120417060316
mov qword [rsp + 0x42], rdx
movabs rdx, 0xd1e16041c0a0e1f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0b0f01101e1e17
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc150b0c0b1d180e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x319191306061b0f
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x361f6e978
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x2e
jge 0x361f6e9a8
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x361f6e9cb
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x22
jb 0x361f6e95b
jmp 0x361f6e9bf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x22
call sym.runtime.slicebytetostring
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x22
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
nop dword [rax]
jmp sym.syscall.glob..func139

Function at 0x361f70580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f70647
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2dbcfcfa6ef6313d
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6c6cff2e
movabs rdx, 0x407020205010602
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x901020009090407
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x361f705e8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x361f70617
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x361f7063a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x361f705cb
jmp 0x361f7062e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call sym.runtime.slicebytetostring
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0xc
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func152
Function at 0x361f710c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f7118c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f11a118daca6573
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa91ebe6f11a118da
mov qword [rsp + 0x22], rdx
movabs rdx, 0x808060a02070805
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x503090406020808
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x361f7112f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x361f7115c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x361f7117f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x361f71112
jmp 0x361f71173
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call sym.runtime.slicebytetostring
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0xb
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func156

Function at 0x361f748e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f749e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xae65b543c51bda8c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x156974376543658f
mov qword [rsp + 0x24], rdx
movabs rdx, 0xfa61636915697437
mov qword [rsp + 0x28], rdx
movabs rdx, 0x98401274886ffc7d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1b08191b1b0f1714
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1501051903000c1a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x21a0c03170f1307
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1908031302021b14
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x361f7498b
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x20
jge 0x361f749b8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x361f749db
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x361f7496e
jmp 0x361f749cf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call sym.runtime.slicebytetostring
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x1c
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func178
Function at 0x361f75de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f75ebd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb97c70d8c372f019
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65c3a8b3cbb97c70
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70106070b0b0303
mov qword [rsp + 0x26], rdx
movabs rdx, 0x409070106070b0b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0808010a000107
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x361f75e60
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x361f75e8d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x361f75eb0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x361f75e42
jmp 0x361f75ea4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call sym.runtime.slicebytetostring
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0xd
call sym.runtime.panicIndex
nop
nop dword [rax]
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func183

Function at 0x361f773a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f77466
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb4cab5b8b08e6e17
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x5798
movabs rdx, 0x704000005060006
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2030805
xor eax, eax
jmp 0x361f77400
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x361f77432
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x361f77457
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0xa
jb 0x361f773e3
jmp 0x361f7744b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call sym.runtime.slicebytetostring
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0xa
nop
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func187
Function at 0x361f78b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f78c1b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa15265c561aa94c7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x946ca15265c561aa
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5767a2be0595c64d
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf040d070d0b060b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1070e060c09090b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x201070e060c09
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0f0f01020c06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x361f78bb9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x361f78beb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x361f78c0e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0x12
jb 0x361f78b9f
jmp 0x361f78c02
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call sym.runtime.slicebytetostring
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x12
call sym.runtime.panicIndex
nop
nop dword [rax + rax]
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func195

Function at 0x361f7a300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x361f7a3d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x63a872508578ddc3
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc2731f63a8725085
mov qword [rsp + 0x20], rdx
movabs rdx, 0x203010108060006
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30803080a060206
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x361f7a36c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x361f7a39e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x361f7a3c5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
cmp rsi, 0xb
jb 0x361f7a352
jmp 0x361f7a3b5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call sym.runtime.slicebytetostring
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0xb
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.syscall.glob..func207