joyce8/EMBER2024-capa huggingface dataset:
Function at 0x362021c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x362021cec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3b27647908fc0647
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x46653b27647908fc
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9200ee0ec13ae69
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf0d070e030e0701
mov qword [rsp + 0x30], rdx
movabs rdx, 0x311020b100f040d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0c060b0b020d02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x362021c8a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x362021cbc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x362021cdf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0x12
jb 0x362021c70
jmp 0x362021cd3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call sym.runtime.slicebytetostring
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x12
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.DZ5sDLk.glob..func27

Function at 0x362021d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x362021dd2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x50707865dbe5dbde
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5700c47461507078
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3010a010a050b00
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1050a050a020b02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x362021d6c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x362021d9e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x362021dc5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3c]
cmp rsi, 0xd
jb 0x362021d52
jmp 0x362021db5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call sym.runtime.slicebytetostring
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0xd
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.DZ5sDLk.glob..func28
Function at 0x362022c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x362022d7d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x56f726690774d73d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x49faa5a00a6f316e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x446f49faa5a00a6f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe9380a2f314826fd
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x180c051501160b19
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf1103000018180c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1217060e0e17060d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd000b1213070e00
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1617161609190917
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x362022d20
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x362022d4d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x362022d70
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x362022cfd
jmp 0x362022d64
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call sym.runtime.slicebytetostring
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x1a
call sym.runtime.panicIndex
nop
nop dword [rax]
call sym.runtime.morestack_noctxt.abi0
jmp sym.DZ5sDLk.glob..func36

Function at 0x362024780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x36202487b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe38fb29dc2539f67
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x997a9f8769766ee3
mov qword [rsp + 0x24], rdx
movabs rdx, 0x74956f8f84789a8f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50303070c040610
mov qword [rsp + 0x34], rdx
movabs rdx, 0x70313070b0d15
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd01050e00070313
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1105160c02120f0d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x362024819
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x36202484b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x36202486e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0x17
jb 0x3620247ff
jmp 0x362024862
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call sym.runtime.slicebytetostring
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x17
call sym.runtime.panicIndex
nop
nop dword [rax + rax]
call sym.runtime.morestack_noctxt.abi0
jmp sym.DZ5sDLk.glob..func44
Function at 0x362027aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x362027b67
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8b7588708125716e
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6584777d
movabs rdx, 0x807070901060509
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa02090102030807
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x362027b08
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x362027b37
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x362027b5a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x362027aeb
jmp 0x362027b4e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call sym.runtime.slicebytetostring
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0xc
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.i89q93Hl.glob..func3

Function at 0x362034e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x362034ebd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x30746c6b786d3676
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x8069
movabs rdx, 0x401090305000705
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x207
xor eax, eax
jmp 0x362034e60
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x362034e8d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x362034eb0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x362034e42
jmp 0x362034ea4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call sym.runtime.slicebytetostring
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0xa
call sym.runtime.panicIndex
nop
nop dword [rax]
call sym.runtime.morestack_noctxt.abi0
jmp sym.aLKBJ0IgJDOe.glob..func2
Function at 0x3620364c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3620365e7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x9c6e72917482a093
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xcd9a69a1d6e9dead
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa120e83cae88cacd
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa2b3e8bbcb61ffbf
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2121118180a1414
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x10131400040a1b17
mov qword [rsp + 0x44], rdx
movabs rdx, 0x9041a0910131400
mov qword [rsp + 0x48], rdx
movabs rdx, 0x81c0b1c0f07040f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc090e0402011e16
mov qword [rsp + 0x58], rdx
movabs rdx, 0x111a0b00131d1b17
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x362036589
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x2c
jge 0x3620365b7
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x3620365da
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1f
jb 0x36203656c
jmp 0x3620365ce
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1f
call sym.runtime.slicebytetostring
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x1f
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.aLKBJ0IgJDOe.glob..func6

Function at 0x36203f280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x36203f3ac
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x5e206d61746e7667
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x745454715e206d61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6d6f9b8043677365
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x65646b197c26790c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x362f626d75722072
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe1a161e12101500
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1c1714231c050e1a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13191e0c0a140801
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10091518111a0b01
mov qword [rsp + 0x58], rdx
movabs rdx, 0x22150707221a0f23
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x36203f346
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x26
jge 0x36203f37c
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x24
jae 0x36203f39f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
cmp rsi, 0x24
jb 0x36203f32c
jmp 0x36203f393
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x24
call sym.runtime.slicebytetostring
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x24
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.el3OCIFAMk.glob..func3
Function at 0x362041360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x36204144a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4636c79733b54a41
mov qword [rsp + 0x19], rdx
movabs rdx, 0x384636c79733b54a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xda3bb5eeb5423aaa
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc07090000020204
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd10050a0e010c07
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0c0504020f0f04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x3620413ed
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x36204141a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x36204143d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x3620413d0
jmp 0x362041431
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call sym.runtime.slicebytetostring
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x11
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.el3OCIFAMk._erta2Xgq_.g5OXPd.func2

Function at 0x3620420e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3620421cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x377e35ccd9da6f43
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa7377e35ccd9da6f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6669fd163cb6111
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10d000d0e061009
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x203010d010d000d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x804060b090e0809
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x36204216a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x36204219c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x3620421bf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4e]
cmp rsi, 0x11
jb 0x362042150
jmp 0x3620421b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call sym.runtime.slicebytetostring
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x11
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.el3OCIFAMk._erta2Xgq_.aEwySOw.func5
Function at 0x362044020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x3620441c8
push rbp
mov rbp, rsp
sub rsp, 0xa0
movabs rdx, 0x414213075f132e25
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf14f1cfc66ea4142
mov qword [rsp + 0x22], rdx
movabs rdx, 0x72c3721e756165a4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x114850e272751d22
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf3767e5064675214
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x66077498224408b4
mov qword [rsp + 0x42], rdx
movabs rdx, 0x89e9653e171c1772
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1b0c04303014051c
mov qword [rsp + 0x52], rdx
movabs rdx, 0x2113104351f2823
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x110d0d2132080211
mov qword [rsp + 0x60], rdx
movabs rdx, 0x112a301f01250322
mov qword [rsp + 0x68], rdx
movabs rdx, 0x31270a322c05231e
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1b0a34252c2f0e29
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1321225170e2611
mov qword [rsp + 0x80], rdx
movabs rdx, 0x211c12110b30041f
mov qword [rsp + 0x88], rdx
movabs rdx, 0x261a0b0c23291227
mov qword [rsp + 0x90], rdx
movabs rdx, 0x160e071d2a2623
mov qword [rsp + 0x98], rdx
xor eax, eax
jmp 0x362044163
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x4e
jge 0x362044195
movzx edx, byte [rsp + rax + 0x52]
movzx esi, byte [rsp + rax + 0x53]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x36
jae 0x3620441bb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0x36
jb 0x362044149
jmp 0x3620441af
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x36
call sym.runtime.slicebytetostring
add rsp, 0xa0
pop rbp
ret
mov eax, esi
mov ecx, 0x36
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x36
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.nlmFhkTEY.glob..func2
Function at 0x3620441e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x3620443aa
push rbp
mov rbp, rsp
sub rsp, 0xb0
movabs rdx, 0x25692e54d82ebf62
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x205c246666662569
mov qword [rsp + 0x24], rdx
movabs rdx, 0xad46646765726555
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb654d708e491813
mov qword [rsp + 0x34], rdx
movabs rdx, 0x65706f8073635369
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x772bc9405e74dd0d
mov qword [rsp + 0x44], rdx
movabs rdx, 0x61db746f48402b61
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x15d865291e4f7390
mov qword [rsp + 0x54], rdx
movabs rdx, 0x642223a201567500
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x430c401f3e271915
mov qword [rsp + 0x64], rdx
movabs rdx, 0x262a3436073a1844
mov qword [rsp + 0x6c], rdx
movabs rdx, 0x130012b262a3436
mov qword [rsp + 0x70], rdx
movabs rdx, 0x190316413e15222f
mov qword [rsp + 0x78], rdx
movabs rdx, 0x3943393e2239342f
mov qword [rsp + 0x80], rdx
movabs rdx, 0x23a221d3d142c3c
mov qword [rsp + 0x88], rdx
movabs rdx, 0x380b430f3e0c310b
mov qword [rsp + 0x90], rdx
movabs rdx, 0x2904071b31071730
mov qword [rsp + 0x98], rdx
movabs rdx, 0xb201236302f122b
mov qword [rsp + 0xa0], rdx
movabs rdx, 0xa2f42263a061630
mov qword [rsp + 0xa8], rdx
xor eax, eax
jmp 0x36204434a
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x7c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x4c
jge 0x362044377
movzx edx, byte [rsp + rax + 0x64]
movzx esi, byte [rsp + rax + 0x65]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x46
jae 0x36204439d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x46
jb 0x36204432d
jmp 0x362044391
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x46
call sym.runtime.slicebytetostring
add rsp, 0xb0
pop rbp
ret
mov eax, esi
mov ecx, 0x46
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x46
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.nlmFhkTEY.glob..func3

Function at 0x362045940
Capabilities:
Encode data using xor

Disassembly:
mov rbx, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x20]
test rdx, 0xf
jne 0x3620459ab
mov rax, 0
movdqu xmm0, xmmword [rsi + rax]
movdqu xmm1, xmmword [rcx + rax]
pxor xmm0, xmm1
movdqu xmmword [rbx + rax], xmm0
add rax, 0x10
cmp rdx, rax
jne 0x362045964
ret
sub rdx, 1
mov dil, byte [rsi + rdx]
mov al, byte [rcx + rdx]
xor dil, al
mov byte [rbx + rdx], dil
test rdx, 7
jne 0x362045981
cmp rdx, 0
je 0x3620459cd
test rdx, 0xf
je 0x36204595d
test rdx, 7
jne 0x362045981
sub rdx, 8
mov rdi, qword [rsi + rdx]
mov rax, qword [rcx + rdx]
xor rdi, rax
mov qword [rbx + rdx], rdi
cmp rdx, 0x10
jge 0x36204595d
ret
Function at 0x362048400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x36204854c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xe3f079721dc66962
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfbb54b5169f061ea
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1afbb54b5169f061
mov qword [rsp + 0x26], rdx
movabs rdx, 0x28c9e06f9f66f865
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc66962072c362ae9
mov qword [rsp + 0x36], rdx
movabs rdx, 0x15651965746e1820
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x221728160c0d060f
mov qword [rsp + 0x46], rdx
movabs rdx, 0x70a0a0e28202203
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x326070a0a0e2820
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1418081c1a192622
mov qword [rsp + 0x58], rdx
movabs rdx, 0x12280a100f031122
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1d02261806220f06
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x3620484e4
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x20]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x2a
jge 0x36204851c
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x29
jae 0x36204853f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x20]
cmp rsi, 0x29
jb 0x3620484ca
jmp 0x362048533
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x29
call sym.runtime.slicebytetostring
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x29
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.G5SjkH5zDta.glob..func1
Function at 0x36204bc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x36204bd4c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x4a9f7671a1975f63
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x727d9f83734a9f76
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4b5e7d6617a1783a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x726592aa7562605d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6755705f67579e21
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x22081e0212060914
mov qword [rsp + 0x42], rdx
movabs rdx, 0x24110a240f0a2208
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb02091d1a11190b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x70f200603071215
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2312100e0f0e1e0e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f0b012109160f13
mov qword [rsp + 0x68], rdx
movabs rdx, 0x504060310120b07
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x36204bce4
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x36
jge 0x36204bd1c
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x36204bd3f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0x25
jb 0x36204bcca
jmp 0x36204bd33
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x25
call sym.runtime.slicebytetostring
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x25
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.f4SgyaLf._q8LIulYn8_.CryptBlocks.func3
Function at 0x36205c1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x36205c2f8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x198ae3747079b7ab
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb365198ae3747079
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6765b1796e699199
mov qword [rsp + 0x26], rdx
movabs rdx, 0x72bd664b8357ad64
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7f8fe3d6cf166f13
mov qword [rsp + 0x36], rdx
movabs rdx, 0x111a1d071c1c181f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1c1c0501051d0f1e
mov qword [rsp + 0x46], rdx
movabs rdx, 0x160b1c1c0501051d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10070910001d1113
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe2106140f151d00
mov qword [rsp + 0x58], rdx
movabs rdx, 0x9180a0120091309
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x36205c295
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2a
jge 0x36205c2c8
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x36205c2eb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
nop
cmp rsi, 0x22
jb 0x36205c27b
jmp 0x36205c2df
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x22
call sym.runtime.slicebytetostring
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call sym.runtime.panicIndex
mov eax, edi
mov ecx, 0x22
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt.abi0
nop dword [rax]
jmp sym.h8aLZh._aATHFhQjONiV_.Decrypt.func3

Function at 0x36205d440
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 0x10]
mov rdx, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x20]
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rbx]
add rax, 0x10
pxor xmm0, xmm1
sub rcx, 0xc
je 0x36205d47f
jb 0x36205d494
movups xmm1, xmmword [rax]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesenc xmm0, xmm1
add rax, 0x20
movups xmm1, xmmword [rax]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesenc xmm0, xmm1
add rax, 0x20
movups xmm1, xmmword [rax]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x20]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x30]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x40]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x50]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x60]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x70]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x80]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x90]
aesenclast xmm0, xmm1
movups xmmword [rdx], xmm0
ret