joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5008d0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x5009a3
sub esp, 0x30
mov dword [esp + 0x15], 0x725a6748
mov dword [esp + 0x18], 0x53593572
mov dword [esp + 0x1c], 0x37690767
lea edi, [esp + 0x20]
lea esi, [0x61a918]
call fcn.00461e68
xor eax, eax
jmp 0x500928
movzx edi, byte [esp + ebx + 0x15]
lea edx, [edi + edx - 1]
mov byte [esp + ebp + 0x15], dl
xchg esi, eax
mov byte [esp + ebx + 0x15], al
xchg esi, eax
add eax, 2
cmp eax, 0x10
jge 0x50095a
movzx edx, byte [esp + eax + 0x20]
movzx ebx, byte [esp + eax + 0x21]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 0xb
jae 0x500996
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x15]
lea esi, [esi + edx - 1]
cmp ebx, 0xb
jb 0x500912
jmp 0x50098a
mov dword [esp], 0
lea eax, [esp + 0x15]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
call fcn.0044d8f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
add esp, 0x30
ret
mov eax, ebx
mov ecx, 0xb
call fcn.00461830
mov eax, ebp
mov ecx, 0xb
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.005008d0

Function at 0x501a70
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x501b53
sub esp, 0x20
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], 0x830b7f8a
mov dword [esp + 0x1c], 0x7b79f00d
mov dword [esp + 8], 0x5060103
mov dword [esp + 0xc], 0x7050402
xor eax, eax
jmp 0x501ad1
movzx edi, byte [esp + ebx + 0x18]
lea edx, [edi + edx - 0x32]
mov byte [esp + ebp + 0x18], dl
xchg esi, eax
mov byte [esp + ebx + 0x18], al
xchg esi, eax
add eax, 2
cmp eax, 8
jge 0x501b03
movzx edx, byte [esp + eax + 8]
movzx ebx, byte [esp + eax + 9]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x501b46
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x18]
lea esi, [esi + edx - 0x32]
cmp ebx, 8
jb 0x501abb
jmp 0x501b3a
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
xor eax, eax
jmp 0x501b21
movzx ecx, byte [esp + eax + 0x18]
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 8
jl 0x501b17
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.00501a70
Function at 0x502520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x50263f
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
lea edi, [esp + 0x14]
lea esi, [0x5e5493]
call fcn.00461e68
mov dword [esp + 0xb], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
movzx eax, byte [esp + 0x23]
movzx ecx, byte [esp + 0x20]
add eax, ecx
movzx ecx, byte [esp + 0x1e]
movzx edx, byte [esp + 0x19]
add ecx, edx
movzx edx, byte [esp + 0x16]
movzx ebx, byte [esp + 0x21]
add edx, ebx
movzx ebx, byte [esp + 0x17]
movzx ebp, byte [esp + 0x15]
add ebx, ebp
movzx ebp, byte [esp + 0x1f]
movzx esi, byte [esp + 0x1d]
add ebp, esi
movzx esi, byte [esp + 0x22]
movzx edi, byte [esp + 0x1b]
xor esi, edi
xchg esi, eax
mov byte [esp + 2], al
xchg esi, eax
movzx edi, byte [esp + 0x18]
movzx esi, byte [esp + 0x1c]
sub edi, esi
movzx esi, byte [esp + 0x14]
xchg esi, eax
mov byte [esp + 1], al
xchg esi, eax
movzx esi, byte [esp + 0x1a]
mov byte [esp + 0xb], al
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
mov byte [esp + 0xe], bl
xchg ebp, eax
mov byte [esp + 0xf], al
xchg ebp, eax
movzx eax, byte [esp + 2]
mov byte [esp + 0x10], al
xchg edi, eax
mov byte [esp + 0x11], al
xchg edi, eax
movzx eax, byte [esp + 1]
add eax, esi
mov byte [esp + 0x12], al
mov dword [esp + 3], 0
mov dword [esp + 7], 0
xor eax, eax
jmp 0x502626
movzx ecx, byte [esp + eax + 0xb]
mov byte [esp + eax + 3], cl
inc eax
cmp eax, 8
jl 0x50261c
mov eax, dword [esp + 3]
mov ecx, dword [esp + 7]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
call fcn.004603c0
jmp fcn.00502520

Function at 0x502820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x50290b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0x39acbe4a
mov dword [esp + 0x16], 0x9dec4aa1
mov dword [esp + 0x1a], 0x6050504
mov dword [esp + 0x1c], 0x30605
mov dword [esp + 0x20], 0x7070307
xor eax, eax
jmp 0x502889
movzx edi, byte [esp + ebx + 0x12]
lea edx, [edi + edx + 0x65]
mov byte [esp + ebp + 0x12], dl
xchg esi, eax
mov byte [esp + ebx + 0x12], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x5028bb
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x5028fe
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
lea esi, [esi + edx + 0x65]
cmp ebx, 8
jb 0x502873
jmp 0x5028f2
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x5028d9
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x5028cf
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.00502820
Function at 0x502e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x502f23
sub esp, 0x20
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], 0xe97f29b0
mov dword [esp + 0x1c], 0xb7526114
mov dword [esp + 8], 0x7070705
mov dword [esp + 0xc], 0x6060504
xor eax, eax
jmp 0x502ea1
movzx edi, byte [esp + ebx + 0x18]
lea edx, [edi + edx + 0x6e]
mov byte [esp + ebp + 0x18], dl
xchg esi, eax
mov byte [esp + ebx + 0x18], al
xchg esi, eax
add eax, 2
cmp eax, 8
jge 0x502ed3
movzx edx, byte [esp + eax + 8]
movzx ebx, byte [esp + eax + 9]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x502f16
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x18]
lea esi, [esi + edx + 0x6e]
cmp ebx, 8
jb 0x502e8b
jmp 0x502f0a
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
xor eax, eax
jmp 0x502ef1
movzx ecx, byte [esp + eax + 0x18]
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 8
jl 0x502ee7
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.00502e40

Function at 0x5036f0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x5037db
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0x9b1eef7
mov dword [esp + 0x16], 0x7a08de2e
mov dword [esp + 0x1a], 0x10600
mov dword [esp + 0x1c], 0x1010001
mov dword [esp + 0x20], 0x5000102
xor eax, eax
jmp 0x503759
movzx edi, byte [esp + ebx + 0x12]
lea edx, [edi + edx - 0x65]
mov byte [esp + ebp + 0x12], dl
xchg esi, eax
mov byte [esp + ebx + 0x12], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x50378b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x5037ce
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
lea esi, [esi + edx - 0x65]
cmp ebx, 8
jb 0x503743
jmp 0x5037c2
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x5037a9
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x50379f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.005036f0
Function at 0x503a70
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x503b5b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0xf8f0b4cf
mov dword [esp + 0x16], 0xc7f49092
mov dword [esp + 0x1a], 0x60300
mov dword [esp + 0x1c], 0x5040006
mov dword [esp + 0x20], 0x2000505
xor eax, eax
jmp 0x503ad9
movzx edi, byte [esp + ebx + 0x12]
lea edx, [edi + edx - 0x4d]
mov byte [esp + ebp + 0x12], dl
xchg esi, eax
mov byte [esp + ebx + 0x12], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x503b0b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x503b4e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
lea esi, [esi + edx - 0x4d]
cmp ebx, 8
jb 0x503ac3
jmp 0x503b42
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x503b29
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x503b1f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.00503a70

Function at 0x503cb0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x503d9b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0x577b5b3
mov dword [esp + 0x16], 0xb621a7b9
mov dword [esp + 0x1a], 0x7060104
mov dword [esp + 0x1c], 0x1070706
mov dword [esp + 0x20], 0x2030302
xor eax, eax
jmp 0x503d1b
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi - 0x5b]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi - 0x5b]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x503d4b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x503d8e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x503d03
jmp 0x503d82
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x503d69
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x503d5f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.00503cb0
Function at 0x504fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x50508b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0x73ed18c5
mov dword [esp + 0x16], 0x783260e2
mov dword [esp + 0x1a], 0x2060702
mov dword [esp + 0x1c], 0x4050206
mov dword [esp + 0x20], 0x7000600
xor eax, eax
jmp 0x505009
movzx edi, byte [esp + ebx + 0x12]
lea edx, [edi + edx - 0x22]
mov byte [esp + ebp + 0x12], dl
xchg esi, eax
mov byte [esp + ebx + 0x12], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x50503b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x50507e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
lea esi, [esi + edx - 0x22]
cmp ebx, 8
jb 0x504ff3
jmp 0x505072
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x505059
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x50504f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.00504fa0

Function at 0x507e90
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x507f7b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0x24076aa0
mov dword [esp + 0x16], 0xf2d5e4b0
mov dword [esp + 0x1a], 0x7010701
mov dword [esp + 0x1c], 0x3070701
mov dword [esp + 0x20], 0x40206
xor eax, eax
jmp 0x507efb
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi - 0x20]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi - 0x20]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x507f2b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x507f6e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x507ee3
jmp 0x507f62
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x507f49
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x507f3f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.00507e90
Function at 0x508a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x508b4b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0xfee7389f
mov dword [esp + 0x16], 0x8415f495
mov dword [esp + 0x1a], 0x4070402
mov dword [esp + 0x1c], 0x2050407
mov dword [esp + 0x20], 0x7040107
xor eax, eax
jmp 0x508acb
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi - 0x44]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi - 0x44]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x508afb
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x508b3e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x508ab3
jmp 0x508b32
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x508b19
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x508b0f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.00508a60

Function at 0x508fb0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x509092
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x10], 0x166478e6
mov dword [esp + 0x14], 0x55e7b41d
lea edi, [esp + 0x18]
lea esi, [0x61a4a4]
call fcn.00461e72
xor eax, eax
jmp 0x509010
movzx edi, byte [esp + ebx + 0x10]
lea edx, [edi + edx + 0x40]
mov byte [esp + ebp + 0x10], dl
xchg esi, eax
mov byte [esp + ebx + 0x10], al
xchg esi, eax
add eax, 2
cmp eax, 0xc
jge 0x509042
movzx edx, byte [esp + eax + 0x18]
movzx ebx, byte [esp + eax + 0x19]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x509085
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x10]
lea esi, [esi + edx + 0x40]
cmp ebx, 8
jb 0x508ffa
jmp 0x509079
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
xor eax, eax
jmp 0x509060
movzx ecx, byte [esp + eax + 0x10]
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 8
jl 0x509056
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.00508fb0
Function at 0x509a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x509b6b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0x139a0c7f
mov dword [esp + 0x16], 0x74d6562b
mov dword [esp + 0x1a], 0x2020404
mov dword [esp + 0x1c], 0x10202
mov dword [esp + 0x20], 0x3060207
xor eax, eax
jmp 0x509aeb
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi - 0x60]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi - 0x60]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x509b1b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x509b5e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x509ad3
jmp 0x509b52
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x509b39
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x509b2f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.00509a80

Function at 0x509fd0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x50a0ef
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
lea edi, [esp + 0x14]
lea esi, [0x5e5523]
call fcn.00461e68
mov dword [esp + 0xb], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
movzx eax, byte [esp + 0x22]
movzx ecx, byte [esp + 0x21]
add eax, ecx
movzx ecx, byte [esp + 0x18]
movzx edx, byte [esp + 0x1d]
sub ecx, edx
movzx edx, byte [esp + 0x17]
movzx ebx, byte [esp + 0x15]
add edx, ebx
movzx ebx, byte [esp + 0x1f]
movzx ebp, byte [esp + 0x1b]
add ebx, ebp
movzx ebp, byte [esp + 0x16]
movzx esi, byte [esp + 0x1c]
sub ebp, esi
movzx esi, byte [esp + 0x19]
movzx edi, byte [esp + 0x23]
sub esi, edi
xchg esi, eax
mov byte [esp + 2], al
xchg esi, eax
movzx edi, byte [esp + 0x14]
movzx esi, byte [esp + 0x20]
add esi, edi
movzx edi, byte [esp + 0x1e]
xchg edi, eax
mov byte [esp + 1], al
xchg edi, eax
movzx edi, byte [esp + 0x1a]
mov byte [esp + 0xb], al
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
mov byte [esp + 0xe], bl
xchg ebp, eax
mov byte [esp + 0xf], al
xchg ebp, eax
movzx eax, byte [esp + 2]
mov byte [esp + 0x10], al
xchg esi, eax
mov byte [esp + 0x11], al
xchg esi, eax
movzx eax, byte [esp + 1]
xor eax, edi
mov byte [esp + 0x12], al
mov dword [esp + 3], 0
mov dword [esp + 7], 0
xor eax, eax
jmp 0x50a0d6
movzx ecx, byte [esp + eax + 0xb]
mov byte [esp + eax + 3], cl
inc eax
cmp eax, 8
jl 0x50a0cc
mov eax, dword [esp + 3]
mov ecx, dword [esp + 7]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
call fcn.004603c0
jmp fcn.00509fd0
Function at 0x50b640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x50b72b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0xf266f1e0
mov dword [esp + 0x16], 0x35561593
mov dword [esp + 0x1a], 0x7060303
mov dword [esp + 0x1c], 0x1030706
mov dword [esp + 0x20], 0x6070000
xor eax, eax
jmp 0x50b6ab
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi - 0x54]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi - 0x54]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x50b6db
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x50b71e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x50b693
jmp 0x50b712
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x50b6f9
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x50b6ef
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.00461830
mov eax, ebp
mov ecx, 8
call fcn.00461830
nop
call fcn.004603c0
jmp fcn.0050b640

Function at 0x50b9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x71469c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x50badf
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
lea edi, [esp + 0x14]
lea esi, [0x5e5553]
call fcn.00461e68
mov dword [esp + 0xb], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
movzx eax, byte [esp + 0x18]
movzx ecx, byte [esp + 0x19]
add eax, ecx
movzx ecx, byte [esp + 0x1a]
movzx edx, byte [esp + 0x16]
sub ecx, edx
movzx edx, byte [esp + 0x1b]
movzx ebx, byte [esp + 0x23]
add edx, ebx
movzx ebx, byte [esp + 0x1c]
movzx ebp, byte [esp + 0x20]
sub ebx, ebp
movzx ebp, byte [esp + 0x22]
movzx esi, byte [esp + 0x17]
sub ebp, esi
movzx esi, byte [esp + 0x1d]
movzx edi, byte [esp + 0x1e]
add esi, edi
xchg esi, eax
mov byte [esp + 2], al
xchg esi, eax
movzx edi, byte [esp + 0x1f]
movzx esi, byte [esp + 0x21]
xor edi, esi
movzx esi, byte [esp + 0x15]
xchg esi, eax
mov byte [esp + 1], al
xchg esi, eax
movzx esi, byte [esp + 0x14]
mov byte [esp + 0xb], al
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
mov byte [esp + 0xe], bl
xchg ebp, eax
mov byte [esp + 0xf], al
xchg ebp, eax
movzx eax, byte [esp + 2]
mov byte [esp + 0x10], al
xchg edi, eax
mov byte [esp + 0x11], al
xchg edi, eax
movzx eax, byte [esp + 1]
sub eax, esi
mov byte [esp + 0x12], al
mov dword [esp + 3], 0
mov dword [esp + 7], 0
xor eax, eax
jmp 0x50bac6
movzx ecx, byte [esp + eax + 0xb]
mov byte [esp + eax + 3], cl
inc eax
cmp eax, 8
jl 0x50babc
mov eax, dword [esp + 3]
mov ecx, dword [esp + 7]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
call fcn.004603c0
jmp fcn.0050b9c0