joyce8/EMBER2024-capa huggingface dataset:
Function at 0x422bb0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x422d20
sub esp, 0x1c
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00420c60
mov eax, dword [esp + 4]
test eax, eax
je 0x422d09
mov dword [esp + 0xc], eax
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0x18]
nop
inc dword [edx + 0x7c]
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x14], ecx
mov dword [esp], eax
call fcn.0041eea0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xc]
sub eax, dword [ecx + 0xc]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x24]
movzx ebx, byte [edx + 6]
mov byte [esp + 0xb], bl
lea ebp, [ecx + 0x48]
mov dword [esp + 0x18], ebp
nop
mov dword [esp], ebp
call fcn.00408810
mov eax, dword [esp + 0xc]
lea ecx, [eax + 0x4c]
movzx edx, byte [esp + 0xb]
mov ebx, dword [esp + 0x10]
jmp 0x422c47
mov ecx, ebp
mov ebp, dword [ecx]
test ebp, ebp
je 0x422cad
movzx esi, word [ebp + 4]
cmp esi, ebx
jne 0x422c5c
cmp byte [ebp + 6], dl
je 0x422c67
cmp esi, ebx
ja 0x422cad
jne 0x422c45
cmp byte [ebp + 6], dl
jbe 0x422c45
jmp 0x422cad
nop
nop
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00408a10
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x7c]
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x422ca4
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x422ca4
mov dword [eax + 8], 0xfffffade
mov byte [esp + 0x28], 0
add esp, 0x1c
ret
mov edx, dword [esp + 0x24]
mov word [edx + 4], bx
mov ebx, dword [ecx]
mov dword [edx], ebx
mov dword [ecx], edx
mov dword [esp], eax
call fcn.00422ab0
nop
nop
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00408a10
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x7c]
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x422d00
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x422d00
mov dword [eax + 8], 0xfffffade
mov byte [esp + 0x28], 1
add esp, 0x1c
ret
lea eax, [0x5d26cc]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.0042ee20
nop
call fcn.00450c10
jmp fcn.00422bb0
Function at 0x4231a0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4232bc
sub esp, 0x14
mov eax, dword [esp + 0x18]
movzx ecx, byte [eax + 6]
cmp cl, 1
je 0x423235
cmp cl, 2
je 0x4231dd
cmp cl, 3
jne 0x4232a5
mov byte [eax + 8], 1
jmp 0x4232a1
mov ecx, dword [eax + 8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 4], ecx
call fcn.00427a00
nop
lea eax, [0x6ba6b8]
mov dword [esp], eax
call fcn.00408810
nop
mov eax, dword [0x6ba684]
sub eax, dword [0x6ba668]
mov dword [0x6ba684], eax
mov eax, dword [0x6ba674]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0x6ba674], ecx
nop
lea eax, [0x6ba6b8]
mov dword [esp], eax
call fcn.00408a10
jmp 0x4232a1
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov ebp, dword [eax + 0x14]
mov esi, dword [esp + 0x1c]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00411c70
nop
lea eax, [0x6ba6b8]
mov dword [esp], eax
call fcn.00408810
nop
mov eax, dword [0x6ba65c]
sub eax, dword [0x6ba640]
mov dword [0x6ba65c], eax
mov eax, dword [0x6ba64c]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0x6ba64c], ecx
nop
nop
lea eax, [0x6ba6b8]
mov dword [esp], eax
call fcn.00408a10
add esp, 0x14
ret
lea eax, [0x5cf3e2]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.0042ee20
nop
call fcn.00450c10
jmp fcn.004231a0
Function at 0x444c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x444da7
sub esp, 0x10
mov ecx, dword [esp + 0x18]
test ecx, ecx
jbe 0x444d9d
mov edx, dword [esp + 0x14]
movzx ebx, byte [edx]
test ebx, ebx
jne 0x444c7c
movzx ebp, byte [esp + 0x28]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x444c7c
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov byte [esp + 0x38], 0
add esp, 0x10
ret
test ebx, 0x80
je 0x444c8f
xor eax, eax
xor ebx, ebx
xor ebp, ebp
jmp 0x444d72
mov eax, 1
mov ebp, ebx
and ebx, 1
neg ebx
shr ebp, 1
xor ebx, ebp
mov ebp, dword [esp + 0x24]
add dword [ebp], ebx
cmp ecx, eax
jb 0x444d64
sub ecx, eax
mov ebx, dword [esp + 0x1c]
sub ebx, eax
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and eax, ebx
lea ebx, [edx + eax]
test ecx, ecx
jbe 0x444d5b
movzx edx, byte [edx + eax]
test edx, 0x80
je 0x444ce6
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
xor eax, eax
xor edx, edx
xor esi, esi
jmp 0x444d2f
mov eax, 1
cmp eax, ecx
ja 0x444d1d
mov esi, dword [esp + 0x20]
add dword [esi], edx
sub ebp, eax
mov edx, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, eax
add ebx, ebp
mov dword [esp + 0x2c], ebx
sub ecx, eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], edx
mov byte [esp + 0x38], 1
add esp, 0x10
ret
call fcn.00452110
lea esi, [ecx + 7]
mov ecx, dword [esp + 8]
mov eax, ebp
mov ebp, dword [esp + 0xc]
cmp eax, ecx
jae 0x444d56
movzx edi, byte [eax + ebx]
lea ebp, [eax + 1]
mov eax, edi
and edi, 0x7f
mov ecx, esi
shl edi, cl
or edx, edi
test al, 0x80
jne 0x444d22
mov ecx, dword [esp + 8]
mov eax, ebp
mov ebp, dword [esp + 0xc]
jmp 0x444ceb
call fcn.004520b0
xor eax, eax
mov ecx, eax
call fcn.004520a0
call fcn.00452110
lea ebp, [ecx + 7]
mov ecx, dword [esp + 0x18]
mov eax, edi
cmp ecx, eax
jbe 0x444d98
movzx esi, byte [eax + edx]
lea edi, [eax + 1]
mov eax, esi
and esi, 0x7f
mov ecx, ebp
shl esi, cl
or ebx, esi
test al, 0x80
jne 0x444d69
mov ecx, dword [esp + 0x18]
mov eax, edi
jmp 0x444c94
call fcn.004520b0
xor eax, eax
mov ecx, eax
call fcn.004520a0
nop
call fcn.00450c10
jmp fcn.00444c20
Function at 0x448ce0
Capabilities:
Access peb ldr_data

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x448de0
sub esp, 0x28
mov eax, dword [esp + 0x2c]
mov dword [eax + 0x8c], 0
mov dword [eax + 0x90], 0
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x18]
mov ecx, dword [ecx + 0x58]
mov dword [eax + 0x94], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
call fcn.00449570
mov eax, dword [esp + 4]
mov dword [esp + 0x14], eax
lea ecx, [0x5ae920]
mov dword [esp], ecx
call fcn.0040a590
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x14]
inc ecx
mov dword [eax], ecx
lea ecx, [0x6ba750]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.004485b0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x50]
mov ecx, dword [ecx + 0x54]
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
mov byte [esp], 0xd
mov dword [esp + 4], 2
lea eax, [esp + 0x18]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004479d0
add esp, 0x28
ret
call fcn.00450c10
jmp fcn.00448ce0

Function at 0x44aa20
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x44aabf
sub esp, 0x30
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov dword [esp + 8], ecx
mov dword [esp + 4], 0
lea edi, [esp + 0xc]
xor eax, eax
call fcn.00452227
lea ecx, [0x44aad0]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 8]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0xc]
mov dword [esp], ecx
call fcn.00450b00
mov ecx, dword [esp + 4]
mov dword [esp + 0x44], ecx
add esp, 0x30
ret
call fcn.00450c10
jmp fcn.0044aa20
Function at 0x451ed0
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
movd xmm0, dword [esp + 8]
pinsrw xmm0, ebx, 4
pshufhw xmm0, xmm0, 0
movdqa xmm1, xmm0
pxor xmm0, xmmword [0x6d6580]
aesenc xmm0, xmm0
cmp ebx, 0x10
jb 0x45069b
je 0x4506ee
cmp ebx, 0x20
jbe 0x4506f4
cmp ebx, 0x40
jbe 0x45073a
jmp 0x4507db
test ebx, ebx
je 0x4506e4
add eax, 0x10
test ax, 0xff0
je 0x4506d0
movdqu xmm1, xmmword [eax - 0x10]
add ebx, ebx
pand xmm1, xmmword [ebx*8 + 0x5fb640]
pxor xmm1, xmm0
aesenc xmm1, xmm1
aesenc xmm1, xmm1
aesenc xmm1, xmm1
movd dword [edx], xmm1
ret
movdqu xmm1, xmmword [eax + ebx - 0x20]
add ebx, ebx
pshufb xmm1, xmmword [ebx*8 + 0x5fb740]
jmp 0x4506b8
aesenc xmm0, xmm0
movd dword [edx], xmm0
ret
movdqu xmm1, xmmword [eax]
jmp 0x4506b8
pxor xmm1, xmmword [0x6d6590]
aesenc xmm1, xmm1
movdqu xmm2, xmmword [eax]
movdqu xmm3, xmmword [eax + ebx - 0x10]
pxor xmm2, xmm0
pxor xmm3, xmm1
aesenc xmm2, xmm2
aesenc xmm3, xmm3
aesenc xmm2, xmm2
aesenc xmm3, xmm3
aesenc xmm2, xmm2
aesenc xmm3, xmm3
pxor xmm2, xmm3
movd dword [edx], xmm2
ret
movdqa xmm2, xmm1
movdqa xmm3, xmm1
pxor xmm1, xmmword [0x6d6590]
pxor xmm2, xmmword [0x6d65a0]
pxor xmm3, xmmword [0x6d65b0]
aesenc xmm1, xmm1
aesenc xmm2, xmm2
aesenc xmm3, xmm3
movdqu xmm4, xmmword [eax]
movdqu xmm5, xmmword [eax + 0x10]
movdqu xmm6, xmmword [eax + ebx - 0x20]
movdqu xmm7, xmmword [eax + ebx - 0x10]
pxor xmm4, xmm0
pxor xmm5, xmm1
pxor xmm6, xmm2
pxor xmm7, xmm3
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
pxor xmm4, xmm6
pxor xmm5, xmm7
pxor xmm4, xmm5
movd dword [edx], xmm4
ret
movdqa xmm2, xmm1
movdqa xmm3, xmm1
pxor xmm1, xmmword [0x6d6590]
pxor xmm2, xmmword [0x6d65a0]
pxor xmm3, xmmword [0x6d65b0]
aesenc xmm1, xmm1
aesenc xmm2, xmm2
aesenc xmm3, xmm3
movdqu xmm4, xmmword [eax + ebx - 0x40]
movdqu xmm5, xmmword [eax + ebx - 0x30]
movdqu xmm6, xmmword [eax + ebx - 0x20]
movdqu xmm7, xmmword [eax + ebx - 0x10]
aesenc xmm4, xmm0
aesenc xmm5, xmm1
aesenc xmm6, xmm2
aesenc xmm7, xmm3
dec ebx
shr ebx, 6
movdqu xmm0, xmmword [eax]
movdqu xmm1, xmmword [eax + 0x10]
movdqu xmm2, xmmword [eax + 0x20]
movdqu xmm3, xmmword [eax + 0x30]
aesenc xmm4, xmm0
aesenc xmm5, xmm1
aesenc xmm6, xmm2
aesenc xmm7, xmm3
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
add eax, 0x40
dec ebx
jne 0x45083a
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
pxor xmm4, xmm6
pxor xmm5, xmm7
pxor xmm4, xmm5
movd dword [edx], xmm4
ret
cmp byte [0x6d606d], 0
je 0x451eea
mov eax, dword [esp + 4]
mov ebx, dword [esp + 0xc]
lea edx, [esp + 0x10]
jmp 0x450660
jmp fcn.00407310
Function at 0x451ef0
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4028fe
sub esp, 0x10
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00407310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1c], eax
add esp, 0x10
ret
call fcn.00450c10
jmp 0x4028c0
cmp byte [0x6d606d], 0
je 0x451f0b
mov eax, dword [esp + 4]
mov ebx, dword [eax + 4]
mov eax, dword [eax]
lea edx, [esp + 0xc]
jmp 0x450660
jmp 0x4028c0
Function at 0x45e0b0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45e1aa
sub esp, 0x28
mov dword [esp + 0x16], 0x9f6dcd8f
mov dword [esp + 0x1a], 0x8461b46e
mov dword [esp + 0x1e], 0x5070103
mov dword [esp + 0x20], 0x3010507
mov dword [esp + 0x24], 0x5000701
xor eax, eax
jmp 0x45e10d
movzx edi, byte [esp + ebx + 0x16]
sub edi, edx
lea edx, [edi - 0x19]
mov byte [esp + ebp + 0x16], dl
lea edx, [esi - 0x19]
mov byte [esp + ebx + 0x16], dl
add eax, 2
cmp eax, 0xa
jge 0x45e14b
jae 0x45e19f
movzx edx, byte [esp + eax + 0x1e]
lea ebx, [eax + 1]
cmp ebx, 0xa
jae 0x45e193
movzx ebx, byte [esp + eax + 0x1f]
mov ebp, edx
xor edx, ebx
add edx, eax
xchg ebp, eax
movzx eax, al
xchg ebp, eax
cmp ebp, 8
jae 0x45e187
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x16]
sub esi, edx
cmp ebx, 8
jb 0x45e0f5
jmp 0x45e17b
mov dword [esp], 0
lea eax, [esp + 0x16]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00441fd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], ecx
add esp, 0x28
ret
mov eax, ebx
mov ecx, 8
call fcn.004520a0
mov eax, ebp
mov ecx, 8
call fcn.004520a0
mov eax, ebx
mov ecx, 0xa
call fcn.004520a0
mov ecx, 0xa
call fcn.004520a0
nop
call fcn.00450c10
jmp fcn.0045e0b0

Function at 0x45fb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45fc7a
sub esp, 0x28
mov dword [esp + 0x16], 0xdb11c13c
mov dword [esp + 0x1a], 0x33cfcc6c
mov dword [esp + 0x1e], 0x3020007
mov dword [esp + 0x20], 0x3000302
mov dword [esp + 0x24], 0x1070506
xor eax, eax
jmp 0x45fbdb
movzx edi, byte [esp + ebx + 0x16]
lea edx, [edi + edx - 0x6c]
mov byte [esp + ebp + 0x16], dl
xchg esi, eax
mov byte [esp + ebx + 0x16], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x45fc1b
jae 0x45fc6f
movzx edx, byte [esp + eax + 0x1e]
lea ebx, [eax + 1]
cmp ebx, 0xa
jae 0x45fc63
movzx ebx, byte [esp + eax + 0x1f]
mov ebp, edx
xor edx, ebx
add edx, eax
xchg ebp, eax
movzx eax, al
xchg ebp, eax
cmp ebp, 8
jae 0x45fc57
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x16]
lea esi, [esi + edx - 0x6c]
cmp ebx, 8
jb 0x45fbc5
jmp 0x45fc4b
mov dword [esp], 0
lea eax, [esp + 0x16]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00441fd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], ecx
add esp, 0x28
ret
mov eax, ebx
mov ecx, 8
call fcn.004520a0
mov eax, ebp
mov ecx, 8
call fcn.004520a0
mov eax, ebx
mov ecx, 0xa
call fcn.004520a0
mov ecx, 0xa
call fcn.004520a0
nop
call fcn.00450c10
jmp fcn.0045fb80
Function at 0x460bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x460cb1
sub esp, 0x28
mov dword [esp + 0x14], 0x6da788a6
mov dword [esp + 0x18], 0x698657a9
lea edi, [esp + 0x1c]
lea esi, [0x5f972c]
call fcn.00452722
xor eax, eax
jmp 0x460c12
movzx edi, byte [esp + ebx + 0x14]
lea edx, [edi + edx - 0x1d]
mov byte [esp + ebp + 0x14], dl
xchg esi, eax
mov byte [esp + ebx + 0x14], al
xchg esi, eax
add eax, 2
cmp eax, 0xc
jge 0x460c52
jae 0x460ca6
movzx edx, byte [esp + eax + 0x1c]
lea ebx, [eax + 1]
cmp ebx, 0xc
jae 0x460c9a
movzx ebx, byte [esp + eax + 0x1d]
mov ebp, edx
xor edx, ebx
add edx, eax
xchg ebp, eax
movzx eax, al
xchg ebp, eax
cmp ebp, 8
jae 0x460c8e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x14]
lea esi, [esi + edx - 0x1d]
cmp ebx, 8
jb 0x460bfc
jmp 0x460c82
mov dword [esp], 0
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00441fd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], ecx
add esp, 0x28
ret
mov eax, ebx
mov ecx, 8
call fcn.004520a0
mov eax, ebp
mov ecx, 8
call fcn.004520a0
mov eax, ebx
mov ecx, 0xc
call fcn.004520a0
mov ecx, 0xc
call fcn.004520a0
nop
call fcn.00450c10
jmp fcn.00460bc0

Function at 0x462260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x46235a
sub esp, 0x28
mov dword [esp + 0x16], 0xd93161d8
mov dword [esp + 0x1a], 0xd1ba61e4
mov dword [esp + 0x1e], 0x2020604
mov dword [esp + 0x20], 0x3070202
mov dword [esp + 0x24], 0x2000400
xor eax, eax
jmp 0x4622bb
movzx edi, byte [esp + ebx + 0x16]
lea edx, [edi + edx - 0x78]
mov byte [esp + ebp + 0x16], dl
xchg esi, eax
mov byte [esp + ebx + 0x16], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x4622fb
jae 0x46234f
movzx edx, byte [esp + eax + 0x1e]
lea ebx, [eax + 1]
cmp ebx, 0xa
jae 0x462343
movzx ebx, byte [esp + eax + 0x1f]
mov ebp, edx
xor edx, ebx
add edx, eax
xchg ebp, eax
movzx eax, al
xchg ebp, eax
cmp ebp, 8
jae 0x462337
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x16]
lea esi, [esi + edx - 0x78]
cmp ebx, 8
jb 0x4622a5
jmp 0x46232b
mov dword [esp], 0
lea eax, [esp + 0x16]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00441fd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], ecx
add esp, 0x28
ret
mov eax, ebx
mov ecx, 8
call fcn.004520a0
mov eax, ebp
mov ecx, 8
call fcn.004520a0
mov eax, ebx
mov ecx, 0xa
call fcn.004520a0
mov ecx, 0xa
call fcn.004520a0
nop
call fcn.00450c10
jmp fcn.00462260
Function at 0x464910
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x464a11
sub esp, 0x2c
mov dword [esp + 0x14], 0x23d88d4f
mov dword [esp + 0x16], 0xffd823d8
mov dword [esp + 0x1a], 0x296924dc
mov dword [esp + 0x1e], 0x2020504
lea edi, [esp + 0x20]
lea esi, [0x5f982c]
call fcn.00452722
xor eax, eax
jmp 0x464974
movzx edi, byte [esp + ebx + 0x14]
sub edi, edx
lea edx, [edi + 0x52]
mov byte [esp + ebp + 0x14], dl
lea edx, [esi + 0x52]
mov byte [esp + ebx + 0x14], dl
add eax, 2
cmp eax, 0xe
jge 0x4649b2
jae 0x464a06
movzx edx, byte [esp + eax + 0x1e]
lea ebx, [eax + 1]
cmp ebx, 0xe
jae 0x4649fa
movzx ebx, byte [esp + eax + 0x1f]
mov ebp, edx
xor edx, ebx
add edx, eax
xchg ebp, eax
movzx eax, al
xchg ebp, eax
cmp ebp, 0xa
jae 0x4649ee
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x14]
sub esi, edx
cmp ebx, 0xa
jb 0x46495c
jmp 0x4649e2
mov dword [esp], 0
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.00441fd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
add esp, 0x2c
ret
mov eax, ebx
mov ecx, 0xa
call fcn.004520a0
mov eax, ebp
mov ecx, 0xa
call fcn.004520a0
mov eax, ebx
mov ecx, 0xe
call fcn.004520a0
mov ecx, 0xe
call fcn.004520a0
nop
call fcn.00450c10
jmp fcn.00464910

Function at 0x464ef0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x464fe8
sub esp, 0x30
lea edi, [esp + 0x16]
lea esi, [0x5ce964]
call fcn.00452722
mov dword [esp + 0x22], 0x40a0306
lea edi, [esp + 0x24]
lea esi, [0x5f983a]
call fcn.00452722
xor eax, eax
jmp 0x464f4b
movzx edi, byte [esp + ebx + 0x16]
sub edi, edx
lea edx, [edi - 0x21]
mov byte [esp + ebp + 0x16], dl
lea edx, [esi - 0x21]
mov byte [esp + ebx + 0x16], dl
add eax, 2
cmp eax, 0xe
jge 0x464f89
jae 0x464fdd
movzx edx, byte [esp + eax + 0x22]
lea ebx, [eax + 1]
cmp ebx, 0xe
jae 0x464fd1
movzx ebx, byte [esp + eax + 0x23]
mov ebp, edx
xor edx, ebx
add edx, eax
xchg ebp, eax
movzx eax, al
xchg ebp, eax
cmp ebp, 0xc
jae 0x464fc5
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x16]
sub esi, edx
cmp ebx, 0xc
jb 0x464f33
jmp 0x464fb9
mov dword [esp], 0
lea eax, [esp + 0x16]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xc
call fcn.00441fd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
add esp, 0x30
ret
mov eax, ebx
mov ecx, 0xc
call fcn.004520a0
mov eax, ebp
mov ecx, 0xc
call fcn.004520a0
mov eax, ebx
mov ecx, 0xe
call fcn.004520a0
mov ecx, 0xe
call fcn.004520a0
nop
call fcn.00450c10
jmp fcn.00464ef0
Function at 0x465310
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x46540a
sub esp, 0x28
mov dword [esp + 0x16], 0x675a7c60
mov dword [esp + 0x1a], 0x82705f6f
mov dword [esp + 0x1e], 0x1040607
mov dword [esp + 0x20], 0x20104
mov dword [esp + 0x24], 0x1020206
xor eax, eax
jmp 0x46536b
movzx edi, byte [esp + ebx + 0x16]
lea edx, [edi + edx - 0x10]
mov byte [esp + ebp + 0x16], dl
xchg esi, eax
mov byte [esp + ebx + 0x16], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x4653ab
jae 0x4653ff
movzx edx, byte [esp + eax + 0x1e]
lea ebx, [eax + 1]
cmp ebx, 0xa
jae 0x4653f3
movzx ebx, byte [esp + eax + 0x1f]
mov ebp, edx
xor edx, ebx
add edx, eax
xchg ebp, eax
movzx eax, al
xchg ebp, eax
cmp ebp, 8
jae 0x4653e7
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x16]
lea esi, [esi + edx - 0x10]
cmp ebx, 8
jb 0x465355
jmp 0x4653db
mov dword [esp], 0
lea eax, [esp + 0x16]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00441fd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], ecx
add esp, 0x28
ret
mov eax, ebx
mov ecx, 8
call fcn.004520a0
mov eax, ebp
mov ecx, 8
call fcn.004520a0
mov eax, ebx
mov ecx, 0xa
call fcn.004520a0
mov ecx, 0xa
call fcn.004520a0
nop
call fcn.00450c10
jmp fcn.00465310

Function at 0x465a90
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x465b89
sub esp, 0x2c
mov dword [esp + 0x16], 0x1f231613
mov dword [esp + 0x18], 0xc3611f23
mov dword [esp + 0x1c], 0x7721d3b
lea edi, [esp + 0x20]
lea esi, [0x5f9744]
call fcn.00452722
xor eax, eax
jmp 0x465aec
movzx edi, byte [esp + ebx + 0x16]
sub edi, edx
lea edx, [edi + 0x5b]
mov byte [esp + ebp + 0x16], dl
lea edx, [esi + 0x5b]
mov byte [esp + ebx + 0x16], dl
add eax, 2
cmp eax, 0xc
jge 0x465b2a
jae 0x465b7e
movzx edx, byte [esp + eax + 0x20]
lea ebx, [eax + 1]
cmp ebx, 0xc
jae 0x465b72
movzx ebx, byte [esp + eax + 0x21]
mov ebp, edx
xor edx, ebx
add edx, eax
xchg ebp, eax
movzx eax, al
xchg ebp, eax
cmp ebp, 0xa
jae 0x465b66
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x16]
sub esi, edx
cmp ebx, 0xa
jb 0x465ad4
jmp 0x465b5a
mov dword [esp], 0
lea eax, [esp + 0x16]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.00441fd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
add esp, 0x2c
ret
mov eax, ebx
mov ecx, 0xa
call fcn.004520a0
mov eax, ebp
mov ecx, 0xa
call fcn.004520a0
mov eax, ebx
mov ecx, 0xc
call fcn.004520a0
mov ecx, 0xc
call fcn.004520a0
nop
call fcn.00450c10
jmp fcn.00465a90