joyce8/EMBER2024-capa huggingface dataset:
Function at 0x412f73
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
lea eax, [ebp - 0x30]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 4
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x18]
mov dword [esp + 0x10], edx
mov edx, dword [ebp - 0x1c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x1001
mov dword [esp + 4], 0xffff
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_setsockopt]
call eax
sub esp, 0x14
test eax, eax
jns 0x41301e
mov eax, dword [ebp - 0x2c]
mov dword [esp], eax
call fcn.006b8d37
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.006b8dc5
mov edx, dword [ebp - 0x30]
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], str.setsockopt___to_constrain_send_buffer_to__d_bytes_failed:__s
mov dword [esp + 0xc], str.set_constrained_socket_buffers
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp], 4
call fcn.006bf072
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x18]
mov dword [esp + 0x10], edx
mov edx, dword [ebp - 0x1c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x1002
mov dword [esp + 4], 0xffff
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_setsockopt]
call eax
sub esp, 0x14
test eax, eax
jns 0x4130a0
mov eax, dword [ebp - 0x2c]
mov dword [esp], eax
call fcn.006b8d37
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.006b8dc5
mov edx, dword [ebp - 0x30]
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], str.setsockopt___to_constrain_recv_buffer_to__d_bytes_failed:__s
mov dword [esp + 0xc], str.set_constrained_socket_buffers
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp], 4
call fcn.006bf072
nop
mov eax, dword [ebp - 0xc]
xor eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x4130b1
call sub.libssp_0.dll___stack_chk_fail
leave
ret
Function at 0x43a21a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
call fcn.0043a1e0
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
jmp 0x43a2c3
call fcn.0043a1e0
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x50]
test ax, ax
jne 0x43a2b8
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0xc8]
and eax, 0x20
test al, al
je 0x43a2b8
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x20]
cmp al, 4
jne 0x43a2b8
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 0xe
je 0x43a2b8
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xb0]
test eax, eax
je 0x43a2b8
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xb0]
mov eax, dword [eax]
cmp eax, 3
jne 0x43a2b8
mov dword [esp], 1
call fcn.0043a2f2
mov eax, 1
jmp 0x43a2e0
mov dword [ebp - 0x10], 0
add dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x14]
jl 0x43a241
mov dword [esp], 0
call fcn.0043a2f2
mov eax, 0
mov ecx, dword [ebp - 0xc]
xor ecx, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x43a2f0
call sub.libssp_0.dll___stack_chk_fail
leave
ret

Function at 0x43c0ce
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, edx
mov byte [ebp - 0x20], al
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x18], 0
call fcn.0043a1a6
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x1c], 0
je 0x43c196
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x68]
add eax, 1
mov dword [ebp - 0x18], eax
jmp 0x43c196
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x50]
test ax, ax
jne 0x43c18b
cmp byte [ebp - 0x20], 0
je 0x43c15d
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 6
je 0x43c17e
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 7
je 0x43c17e
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 8
je 0x43c17e
jmp 0x43c192
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x20]
cmp al, 4
jne 0x43c18e
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 0x10
je 0x43c17e
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 0x11
jne 0x43c191
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00438459
jmp 0x43c1aa
nop
jmp 0x43c192
nop
jmp 0x43c192
nop
add dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 4]
cmp dword [ebp - 0x18], eax
jl 0x43c116
mov eax, 0
mov ecx, dword [ebp - 0xc]
xor ecx, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x43c1ba
call sub.libssp_0.dll___stack_chk_fail
leave
ret
Function at 0x43c1bc
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x18], 0
call fcn.0043a1a6
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x1c], 0
je 0x43c247
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x68]
add eax, 1
mov dword [ebp - 0x18], eax
jmp 0x43c247
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x50]
test ax, ax
jne 0x43c234
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x20]
cmp al, 4
jne 0x43c234
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 0x12
je 0x43c23a
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 0x13
je 0x43c23a
add dword [ebp - 0x18], 1
jmp 0x43c247
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00438459
jmp 0x43c257
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 4]
cmp dword [ebp - 0x18], eax
jl 0x43c1f5
mov eax, 0
mov ecx, dword [ebp - 0xc]
xor ecx, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x43c267
call sub.libssp_0.dll___stack_chk_fail
leave
ret

Function at 0x44559d
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x20], eax
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004447d5
mov byte [ebp - 0xd], al
jmp 0x44560d
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 8]
movsx edx, byte [ebp - 0xd]
shl edx, 2
add eax, edx
mov eax, dword [eax]
test eax, eax
je 0x445603
movsx eax, byte [ebp - 0xd]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.0044471c
cmp dword [ebp - 0x20], eax
ja 0x445603
movzx eax, byte [ebp - 0xd]
jmp 0x445629
movzx eax, byte [ebp - 0xd]
add eax, 1
mov byte [ebp - 0xd], al
movsx edx, byte [ebp - 0xd]
mov eax, dword [ebp - 0x1c]
movzx eax, byte [eax + 0xc]
movsx eax, al
sub eax, 1
cmp edx, eax
jl 0x4455d0
mov eax, dword [ebp - 0x1c]
movzx eax, byte [eax + 0xc]
mov ecx, dword [ebp - 0xc]
xor ecx, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x445639
call sub.libssp_0.dll___stack_chk_fail
leave
ret
Function at 0x4487da
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, edx
mov word [ebp - 0x20], ax
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
cmp word [ebp - 0x20], 0xfffc
seta al
movzx eax, al
test eax, eax
je 0x44884b
mov dword [esp], str.src_core_or_circuitpadding.c
call fcn.006c14d2
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], str.__num_states___CIRCPAD_MAX_MACHINE_STATES_
mov dword [esp + 8], str.circpad_machine_states_init
mov dword [esp + 4], 0x96f
mov dword [esp], eax
call fcn.006c12a3
mov eax, 1
jmp 0x448850
mov eax, 0
test al, al
je 0x44885a
mov word [ebp - 0x20], 0xfffc
mov eax, dword [ebp - 0x1c]
movzx edx, word [ebp - 0x20]
mov word [eax + 0x20], dx
movzx eax, word [ebp - 0x20]
imul eax, eax, 0x398
mov dword [esp], eax
call fcn.006c514f
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x1c], edx
mov word [ebp - 0x12], 0
jmp 0x4488c7
mov dword [ebp - 0x10], 0
jmp 0x4488b6
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax + 0x1c]
movzx eax, word [ebp - 0x12]
imul eax, eax, 0x398
add eax, edx
mov edx, dword [ebp - 0x10]
add edx, 0x1b8
mov word [eax + edx*2 + 0xc], 0xfffe
add dword [ebp - 0x10], 1
cmp dword [ebp - 0x10], 6
jle 0x448890
movzx eax, word [ebp - 0x12]
add eax, 1
mov word [ebp - 0x12], ax
movzx eax, word [ebp - 0x12]
cmp ax, word [ebp - 0x20]
jb 0x448887
nop
mov eax, dword [ebp - 0xc]
xor eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x4488e2
call sub.libssp_0.dll___stack_chk_fail
leave
ret

Function at 0x44e9c8
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x1c], 0
call fcn.0043a1a6
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
jmp 0x44ea51
call fcn.0043a1a6
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x50]
test ax, ax
jne 0x44ea4c
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x20]
cmp al, 4
je 0x44ea4c
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 5
je 0x44ea34
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 0xd
jne 0x44ea4c
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 4
jbe 0x44ea4c
add dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 0
jmp 0x44ea4d
nop
add dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x14]
jl 0x44e9f3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc]
xor ecx, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x44ea6c
call sub.libssp_0.dll___stack_chk_fail
leave
ret
Function at 0x451bf0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x1c], 0
mov eax, dword [0x7ca564]
test eax, eax
je 0x451c17
mov eax, 1
jmp 0x451c8d
call fcn.0043a1a6
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
jmp 0x451c7b
call fcn.0043a1a6
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x50]
test ax, ax
jne 0x451c70
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 4
jbe 0x451c70
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x21]
cmp al, 0x15
jne 0x451c70
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x20]
cmp al, 4
jne 0x451c70
add dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 0
add dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x14]
jl 0x451c2b
cmp dword [ebp - 0x1c], 3
setg al
movzx eax, al
mov ecx, dword [ebp - 0xc]
xor ecx, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x451c9d
call sub.libssp_0.dll___stack_chk_fail
leave
ret
Function at 0x4593e9
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x64
mov eax, dword [ebp + 8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x40], eax
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
cmp dword [ebp - 0x40], 1
jne 0x459522
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x25], 0x313a3a
mov dword [ebp - 0x21], 0x30306366
mov dword [ebp - 0x1d], 0x6165643a
mov dword [ebp - 0x19], 0x65623a64
mov dword [ebp - 0x15], 0x343a6665
mov dword [ebp - 0x11], 0x3a646164
mov byte [ebp - 0xd], 0
mov word [ebp - 0x38], 0
mov word [ebp - 0x36], 1
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
test eax, eax
je 0x459480
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov dword [esp], eax
call fcn.00438459
mov eax, dword [eax + 0xec]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov word [ebp - 0x36], ax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x88]
test eax, eax
je 0x45949e
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x88]
movzx eax, word [eax + 0x20]
mov word [ebp - 0x38], ax
movzx ecx, word [ebp - 0x38]
movzx edx, word [ebp - 0x36]
mov eax, dword [ebp - 0x30]
movzx eax, ax
mov ebx, dword [ebp - 0x30]
shr ebx, 0x10
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], edx
lea edx, [ebp - 0x25]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
lea eax, [ebp - 0x21]
mov dword [esp + 8], eax
mov dword [esp + 4], str.PROXY_TCP6__s:_x:_x__s__d__d_r_n
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.006c33ae
mov ebx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov edx, dword [ebp - 0x34]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0045791c
lea eax, [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0
jmp 0x459523
nop
mov eax, dword [ebp - 0xc]
xor eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x459533
call sub.libssp_0.dll___stack_chk_fail
add esp, 0x64
pop ebx
pop ebp
ret
Function at 0x45e696
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + 0xe4]
lea ecx, [eax + 1]
mov edx, dword [ebp - 0x1c]
mov word [edx + 0xe4], cx
mov word [ebp - 0x16], ax
add dword [ebp - 0x10], 1
cmp dword [ebp - 0x10], 0x10000
jbe 0x45e70e
mov dword [esp + 0x10], str.No_unused_stream_IDs._Failing.
mov dword [esp + 0xc], str.get_unique_stream_id_by_circ
mov dword [esp + 4], 0x100
mov dword [esp + 8], 0
mov dword [esp], 4
call fcn.006bf072
mov eax, 0
jmp 0x45e76f
cmp word [ebp - 0x16], 0
jne 0x45e717
jmp 0x45e6b3
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x90]
mov dword [ebp - 0x14], eax
jmp 0x45e743
mov eax, dword [ebp - 0x14]
movzx eax, word [eax + 0x94]
cmp word [ebp - 0x16], ax
jne 0x45e73a
jmp 0x45e6b3
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x45e725
movzx edx, word [ebp - 0x16]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x94]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00458d71
test eax, eax
je 0x45e76b
jmp 0x45e6b3
movzx eax, word [ebp - 0x16]
mov ecx, dword [ebp - 0xc]
xor ecx, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x45e77f
call sub.libssp_0.dll___stack_chk_fail
leave
ret
Function at 0x47303c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, edx
mov word [ebp - 0x20], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
jmp 0x473130
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0xc]
test ax, ax
jne 0x4730c0
mov dword [esp + 0x10], str.Policy_contains_an_AF_UNSPEC_address__which_only_matches_other_AF_UNSPEC_addresses.
mov dword [esp + 0xc], str.compare_known_tor_addr_to_addr_policy
mov dword [esp + 4], 0x1000
mov dword [esp + 8], 0
mov dword [esp], 4
call fcn.006bf072
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 8]
movzx eax, al
mov edx, dword [ebp - 0x10]
add edx, 0xc
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.006b3b6f
test eax, eax
jne 0x473125
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x20]
cmp word [ebp - 0x20], ax
jb 0x473125
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x22]
cmp word [ebp - 0x20], ax
ja 0x473125
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 4]
and eax, 3
cmp al, 1
jne 0x47311e
mov eax, 0
jmp 0x473141
mov eax, 0xffffffff
jmp 0x473141
mov dword [ebp - 0x10], 0
add dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x14]
jl 0x473076
mov eax, 0
mov ecx, dword [ebp - 0xc]
xor ecx, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x473151
call sub.libssp_0.dll___stack_chk_fail
leave
ret
Function at 0x473153
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
jmp 0x47327c
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0xc]
test ax, ax
jne 0x4731dc
mov dword [esp + 0x10], str.Policy_contains_an_AF_UNSPEC_address__which_only_matches_other_AF_UNSPEC_addresses.
mov dword [esp + 0xc], str.compare_known_tor_addr_to_addr_policy_noport
mov dword [esp + 4], 0x1000
mov dword [esp + 8], 0
mov dword [esp], 4
call fcn.006bf072
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 8]
movzx eax, al
mov edx, dword [ebp - 0x10]
add edx, 0xc
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov eax, dword [ebp - 0x2c]
mov dword [esp], eax
call fcn.006b3b6f
test eax, eax
jne 0x473271
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x20]
cmp ax, 1
ja 0x473253
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x22]
cmp ax, 0xffff
jne 0x473253
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 4]
and eax, 3
cmp al, 1
jne 0x47323f
cmp dword [ebp - 0x1c], 0
setne al
movzx eax, al
jmp 0x473292
cmp dword [ebp - 0x20], 0
je 0x47324c
mov eax, 2
jmp 0x473292
mov eax, 0xffffffff
jmp 0x473292
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 4]
and eax, 3
cmp al, 2
jne 0x47326a
mov dword [ebp - 0x1c], 1
jmp 0x473271
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x10], 0
add dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x14]
jl 0x473192
cmp dword [ebp - 0x1c], 0
setne al
movzx eax, al
mov ecx, dword [ebp - 0xc]
xor ecx, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x4732a2
call sub.libssp_0.dll___stack_chk_fail
leave
ret
Function at 0x4732a4
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [ebp + 8]
mov word [ebp - 0x2c], ax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
jmp 0x4733aa
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0xc]
test ax, ax
jne 0x47332e
mov dword [esp + 0x10], str.Policy_contains_an_AF_UNSPEC_address__which_only_matches_other_AF_UNSPEC_addresses.
mov dword [esp + 0xc], str.compare_unknown_tor_addr_to_addr_policy
mov dword [esp + 4], 0x1000
mov dword [esp + 8], 0
mov dword [esp], 4
call fcn.006bf072
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x20]
cmp word [ebp - 0x2c], ax
jb 0x47339f
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x22]
cmp word [ebp - 0x2c], ax
ja 0x47339f
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 8]
test al, al
jne 0x473381
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 4]
and eax, 3
cmp al, 1
jne 0x47336d
cmp dword [ebp - 0x1c], 0
setne al
movzx eax, al
jmp 0x4733c0
cmp dword [ebp - 0x20], 0
je 0x47337a
mov eax, 2
jmp 0x4733c0
mov eax, 0xffffffff
jmp 0x4733c0
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 4]
and eax, 3
cmp al, 2
jne 0x473398
mov dword [ebp - 0x1c], 1
jmp 0x47339f
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x10], 0
add dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x14]
jl 0x4732e4
cmp dword [ebp - 0x1c], 0
setne al
movzx eax, al
mov ecx, dword [ebp - 0xc]
xor ecx, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x4733d0
call sub.libssp_0.dll___stack_chk_fail
leave
ret
Function at 0x474f45
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, edx
mov word [ebp - 0x20], ax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
cmp dword [ebp - 0x1c], 0
jne 0x474f78
mov eax, dword [ebp - 0x24]
jmp 0x475056
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
jmp 0x475047
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 4]
and eax, 3
cmp al, 1
jne 0x474fdb
mov eax, dword [ebp - 0x10]
add eax, 0xc
mov dword [esp], eax
call fcn.0046f42a
cmp word [ebp - 0x20], ax
je 0x474fd4
mov eax, dword [ebp - 0x10]
add eax, 0xc
mov dword [esp], eax
call fcn.0046f42a
test ax, ax
jne 0x474fdb
mov eax, 0
jmp 0x475056
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 4]
and eax, 3
cmp al, 2
jne 0x47503c
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x20]
cmp ax, 1
ja 0x47503c
mov eax, dword [ebp - 0x10]
movzx eax, word [eax + 0x22]
cmp ax, 0xffff
jne 0x47503c
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 8]
test al, al
jne 0x47503c
mov eax, dword [ebp - 0x10]
add eax, 0xc
mov dword [esp], eax
call fcn.0046f42a
cmp word [ebp - 0x20], ax
je 0x475035
mov eax, dword [ebp - 0x10]
add eax, 0xc
mov dword [esp], eax
call fcn.0046f42a
test ax, ax
jne 0x47503c
mov eax, 1
jmp 0x475056
mov dword [ebp - 0x10], 0
add dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x14]
jl 0x474f8d
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
xor ecx, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x475066
call sub.libssp_0.dll___stack_chk_fail
leave
ret