joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40f6ca
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x43b050]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 0x10]
cmp edi, 0x10
je 0x40f624
cmp edi, 0xc
je 0x40f624
cmp edi, 8
je 0x40f624
mov dword [ebp + 0x10], 0x10
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
xor edx, edx
lea esi, [ecx - 8]
mov dword [ebx], edi
mov dword [ebp - 0x108], edx
test esi, esi
js 0x40f6aa
add esi, 8
shr esi, 3
lea ecx, [esi*8]
mov dword [ebp - 0x108], ecx
jmp 0x40f650
movzx edi, byte [eax + 1]
movzx ecx, byte [eax]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 2]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 3]
shl edi, 0x18
or ecx, edi
movzx edi, byte [eax + 5]
mov dword [ebp + edx*4 - 0x104], ecx
movzx ecx, byte [eax + 4]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 6]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 7]
shl edi, 0x18
or ecx, edi
mov dword [ebp + edx*4 - 0x100], ecx
add eax, 8
add edx, 2
dec esi
jne 0x40f650
mov ecx, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov esi, ecx
sub esi, dword [ebp - 0x108]
je 0x40f723
and ecx, 7
add eax, ecx
dec ecx
xor edi, edi
xor esi, esi
cmp ecx, 7
ja case.default.0x40f6c3
jmp dword [ecx*4 + 0x40f804]
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
or edi, ecx
movzx esi, byte [eax - 1]
dec eax
shl esi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or esi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or esi, ecx
movzx eax, byte [eax - 1]
or esi, eax
mov ecx, dword [ebp + 8]
mov dword [ebp + edx*4 - 0x100], edi
mov edi, dword [ebp + 0x10]
mov dword [ebp + edx*4 - 0x104], esi
lea eax, [ecx + 3]
cdq
and edx, 3
add eax, edx
lea edx, [edi + edi + 2]
sar eax, 2
mov ecx, 1
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], edx
mov dword [ebx + 4], 0xb7e15163
cmp edx, ecx
jle 0x40f762
nop
mov esi, dword [ebx + ecx*4]
sub esi, 0x61c88647
mov dword [ebx + ecx*4 + 4], esi
inc ecx
cmp ecx, edx
jl 0x40f750
cmp edx, eax
jg 0x40f768
mov edx, eax
lea ecx, [edx + edx*2]
xor edi, edi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x108], edi
test ecx, ecx
jle 0x40f7f4
mov dword [ebp - 0x10c], ecx
jmp 0x40f790
mov edx, dword [ebp - 0x108]
mov edx, dword [ebp + edx*4 - 0x104]
lea ecx, [eax + edi]
add ecx, dword [ebx + esi*4 + 4]
add edx, eax
rol ecx, 3
mov edi, ecx
mov dword [ebx + esi*4 + 4], ecx
lea ecx, [eax + edi]
and ecx, 0x1f
add edx, edi
rol edx, cl
mov ecx, dword [ebp - 0x108]
inc esi
mov dword [ebp + ecx*4 - 0x104], edx
mov eax, edx
cmp esi, dword [ebp - 0x110]
jl 0x40f7d3
xor esi, esi
inc ecx
mov dword [ebp - 0x108], ecx
cmp ecx, dword [ebp - 0x114]
jl 0x40f7ec
mov dword [ebp - 0x108], 0
dec dword [ebp - 0x10c]
jne 0x40f790
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0041ad7d
mov esp, ebp
pop ebp
ret
Function at 0x40f6d2
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x43b050]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 0x10]
cmp edi, 0x10
je 0x40f624
cmp edi, 0xc
je 0x40f624
cmp edi, 8
je 0x40f624
mov dword [ebp + 0x10], 0x10
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
xor edx, edx
lea esi, [ecx - 8]
mov dword [ebx], edi
mov dword [ebp - 0x108], edx
test esi, esi
js 0x40f6aa
add esi, 8
shr esi, 3
lea ecx, [esi*8]
mov dword [ebp - 0x108], ecx
jmp 0x40f650
movzx edi, byte [eax + 1]
movzx ecx, byte [eax]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 2]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 3]
shl edi, 0x18
or ecx, edi
movzx edi, byte [eax + 5]
mov dword [ebp + edx*4 - 0x104], ecx
movzx ecx, byte [eax + 4]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 6]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 7]
shl edi, 0x18
or ecx, edi
mov dword [ebp + edx*4 - 0x100], ecx
add eax, 8
add edx, 2
dec esi
jne 0x40f650
mov ecx, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov esi, ecx
sub esi, dword [ebp - 0x108]
je 0x40f723
and ecx, 7
add eax, ecx
dec ecx
xor edi, edi
xor esi, esi
cmp ecx, 7
ja case.default.0x40f6c3
jmp dword [ecx*4 + 0x40f804]
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
or edi, ecx
movzx esi, byte [eax - 1]
dec eax
shl esi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or esi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or esi, ecx
movzx eax, byte [eax - 1]
or esi, eax
mov ecx, dword [ebp + 8]
mov dword [ebp + edx*4 - 0x100], edi
mov edi, dword [ebp + 0x10]
mov dword [ebp + edx*4 - 0x104], esi
lea eax, [ecx + 3]
cdq
and edx, 3
add eax, edx
lea edx, [edi + edi + 2]
sar eax, 2
mov ecx, 1
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], edx
mov dword [ebx + 4], 0xb7e15163
cmp edx, ecx
jle 0x40f762
nop
mov esi, dword [ebx + ecx*4]
sub esi, 0x61c88647
mov dword [ebx + ecx*4 + 4], esi
inc ecx
cmp ecx, edx
jl 0x40f750
cmp edx, eax
jg 0x40f768
mov edx, eax
lea ecx, [edx + edx*2]
xor edi, edi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x108], edi
test ecx, ecx
jle 0x40f7f4
mov dword [ebp - 0x10c], ecx
jmp 0x40f790
mov edx, dword [ebp - 0x108]
mov edx, dword [ebp + edx*4 - 0x104]
lea ecx, [eax + edi]
add ecx, dword [ebx + esi*4 + 4]
add edx, eax
rol ecx, 3
mov edi, ecx
mov dword [ebx + esi*4 + 4], ecx
lea ecx, [eax + edi]
and ecx, 0x1f
add edx, edi
rol edx, cl
mov ecx, dword [ebp - 0x108]
inc esi
mov dword [ebp + ecx*4 - 0x104], edx
mov eax, edx
cmp esi, dword [ebp - 0x110]
jl 0x40f7d3
xor esi, esi
inc ecx
mov dword [ebp - 0x108], ecx
cmp ecx, dword [ebp - 0x114]
jl 0x40f7ec
mov dword [ebp - 0x108], 0
dec dword [ebp - 0x10c]
jne 0x40f790
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0041ad7d
mov esp, ebp
pop ebp
ret
Function at 0x40f6dc
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x43b050]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 0x10]
cmp edi, 0x10
je 0x40f624
cmp edi, 0xc
je 0x40f624
cmp edi, 8
je 0x40f624
mov dword [ebp + 0x10], 0x10
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
xor edx, edx
lea esi, [ecx - 8]
mov dword [ebx], edi
mov dword [ebp - 0x108], edx
test esi, esi
js 0x40f6aa
add esi, 8
shr esi, 3
lea ecx, [esi*8]
mov dword [ebp - 0x108], ecx
jmp 0x40f650
movzx edi, byte [eax + 1]
movzx ecx, byte [eax]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 2]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 3]
shl edi, 0x18
or ecx, edi
movzx edi, byte [eax + 5]
mov dword [ebp + edx*4 - 0x104], ecx
movzx ecx, byte [eax + 4]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 6]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 7]
shl edi, 0x18
or ecx, edi
mov dword [ebp + edx*4 - 0x100], ecx
add eax, 8
add edx, 2
dec esi
jne 0x40f650
mov ecx, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov esi, ecx
sub esi, dword [ebp - 0x108]
je 0x40f723
and ecx, 7
add eax, ecx
dec ecx
xor edi, edi
xor esi, esi
cmp ecx, 7
ja case.default.0x40f6c3
jmp dword [ecx*4 + 0x40f804]
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
or edi, ecx
movzx esi, byte [eax - 1]
dec eax
shl esi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or esi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or esi, ecx
movzx eax, byte [eax - 1]
or esi, eax
mov ecx, dword [ebp + 8]
mov dword [ebp + edx*4 - 0x100], edi
mov edi, dword [ebp + 0x10]
mov dword [ebp + edx*4 - 0x104], esi
lea eax, [ecx + 3]
cdq
and edx, 3
add eax, edx
lea edx, [edi + edi + 2]
sar eax, 2
mov ecx, 1
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], edx
mov dword [ebx + 4], 0xb7e15163
cmp edx, ecx
jle 0x40f762
nop
mov esi, dword [ebx + ecx*4]
sub esi, 0x61c88647
mov dword [ebx + ecx*4 + 4], esi
inc ecx
cmp ecx, edx
jl 0x40f750
cmp edx, eax
jg 0x40f768
mov edx, eax
lea ecx, [edx + edx*2]
xor edi, edi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x108], edi
test ecx, ecx
jle 0x40f7f4
mov dword [ebp - 0x10c], ecx
jmp 0x40f790
mov edx, dword [ebp - 0x108]
mov edx, dword [ebp + edx*4 - 0x104]
lea ecx, [eax + edi]
add ecx, dword [ebx + esi*4 + 4]
add edx, eax
rol ecx, 3
mov edi, ecx
mov dword [ebx + esi*4 + 4], ecx
lea ecx, [eax + edi]
and ecx, 0x1f
add edx, edi
rol edx, cl
mov ecx, dword [ebp - 0x108]
inc esi
mov dword [ebp + ecx*4 - 0x104], edx
mov eax, edx
cmp esi, dword [ebp - 0x110]
jl 0x40f7d3
xor esi, esi
inc ecx
mov dword [ebp - 0x108], ecx
cmp ecx, dword [ebp - 0x114]
jl 0x40f7ec
mov dword [ebp - 0x108], 0
dec dword [ebp - 0x10c]
jne 0x40f790
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0041ad7d
mov esp, ebp
pop ebp
ret
Function at 0x40f6e6
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x43b050]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 0x10]
cmp edi, 0x10
je 0x40f624
cmp edi, 0xc
je 0x40f624
cmp edi, 8
je 0x40f624
mov dword [ebp + 0x10], 0x10
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
xor edx, edx
lea esi, [ecx - 8]
mov dword [ebx], edi
mov dword [ebp - 0x108], edx
test esi, esi
js 0x40f6aa
add esi, 8
shr esi, 3
lea ecx, [esi*8]
mov dword [ebp - 0x108], ecx
jmp 0x40f650
movzx edi, byte [eax + 1]
movzx ecx, byte [eax]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 2]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 3]
shl edi, 0x18
or ecx, edi
movzx edi, byte [eax + 5]
mov dword [ebp + edx*4 - 0x104], ecx
movzx ecx, byte [eax + 4]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 6]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 7]
shl edi, 0x18
or ecx, edi
mov dword [ebp + edx*4 - 0x100], ecx
add eax, 8
add edx, 2
dec esi
jne 0x40f650
mov ecx, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov esi, ecx
sub esi, dword [ebp - 0x108]
je 0x40f723
and ecx, 7
add eax, ecx
dec ecx
xor edi, edi
xor esi, esi
cmp ecx, 7
ja case.default.0x40f6c3
jmp dword [ecx*4 + 0x40f804]
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
or edi, ecx
movzx esi, byte [eax - 1]
dec eax
shl esi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or esi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or esi, ecx
movzx eax, byte [eax - 1]
or esi, eax
mov ecx, dword [ebp + 8]
mov dword [ebp + edx*4 - 0x100], edi
mov edi, dword [ebp + 0x10]
mov dword [ebp + edx*4 - 0x104], esi
lea eax, [ecx + 3]
cdq
and edx, 3
add eax, edx
lea edx, [edi + edi + 2]
sar eax, 2
mov ecx, 1
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], edx
mov dword [ebx + 4], 0xb7e15163
cmp edx, ecx
jle 0x40f762
nop
mov esi, dword [ebx + ecx*4]
sub esi, 0x61c88647
mov dword [ebx + ecx*4 + 4], esi
inc ecx
cmp ecx, edx
jl 0x40f750
cmp edx, eax
jg 0x40f768
mov edx, eax
lea ecx, [edx + edx*2]
xor edi, edi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x108], edi
test ecx, ecx
jle 0x40f7f4
mov dword [ebp - 0x10c], ecx
jmp 0x40f790
mov edx, dword [ebp - 0x108]
mov edx, dword [ebp + edx*4 - 0x104]
lea ecx, [eax + edi]
add ecx, dword [ebx + esi*4 + 4]
add edx, eax
rol ecx, 3
mov edi, ecx
mov dword [ebx + esi*4 + 4], ecx
lea ecx, [eax + edi]
and ecx, 0x1f
add edx, edi
rol edx, cl
mov ecx, dword [ebp - 0x108]
inc esi
mov dword [ebp + ecx*4 - 0x104], edx
mov eax, edx
cmp esi, dword [ebp - 0x110]
jl 0x40f7d3
xor esi, esi
inc ecx
mov dword [ebp - 0x108], ecx
cmp ecx, dword [ebp - 0x114]
jl 0x40f7ec
mov dword [ebp - 0x108], 0
dec dword [ebp - 0x10c]
jne 0x40f790
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0041ad7d
mov esp, ebp
pop ebp
ret
Function at 0x40f6ed
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x43b050]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 0x10]
cmp edi, 0x10
je 0x40f624
cmp edi, 0xc
je 0x40f624
cmp edi, 8
je 0x40f624
mov dword [ebp + 0x10], 0x10
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
xor edx, edx
lea esi, [ecx - 8]
mov dword [ebx], edi
mov dword [ebp - 0x108], edx
test esi, esi
js 0x40f6aa
add esi, 8
shr esi, 3
lea ecx, [esi*8]
mov dword [ebp - 0x108], ecx
jmp 0x40f650
movzx edi, byte [eax + 1]
movzx ecx, byte [eax]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 2]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 3]
shl edi, 0x18
or ecx, edi
movzx edi, byte [eax + 5]
mov dword [ebp + edx*4 - 0x104], ecx
movzx ecx, byte [eax + 4]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 6]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 7]
shl edi, 0x18
or ecx, edi
mov dword [ebp + edx*4 - 0x100], ecx
add eax, 8
add edx, 2
dec esi
jne 0x40f650
mov ecx, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov esi, ecx
sub esi, dword [ebp - 0x108]
je 0x40f723
and ecx, 7
add eax, ecx
dec ecx
xor edi, edi
xor esi, esi
cmp ecx, 7
ja case.default.0x40f6c3
jmp dword [ecx*4 + 0x40f804]
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
or edi, ecx
movzx esi, byte [eax - 1]
dec eax
shl esi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or esi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or esi, ecx
movzx eax, byte [eax - 1]
or esi, eax
mov ecx, dword [ebp + 8]
mov dword [ebp + edx*4 - 0x100], edi
mov edi, dword [ebp + 0x10]
mov dword [ebp + edx*4 - 0x104], esi
lea eax, [ecx + 3]
cdq
and edx, 3
add eax, edx
lea edx, [edi + edi + 2]
sar eax, 2
mov ecx, 1
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], edx
mov dword [ebx + 4], 0xb7e15163
cmp edx, ecx
jle 0x40f762
nop
mov esi, dword [ebx + ecx*4]
sub esi, 0x61c88647
mov dword [ebx + ecx*4 + 4], esi
inc ecx
cmp ecx, edx
jl 0x40f750
cmp edx, eax
jg 0x40f768
mov edx, eax
lea ecx, [edx + edx*2]
xor edi, edi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x108], edi
test ecx, ecx
jle 0x40f7f4
mov dword [ebp - 0x10c], ecx
jmp 0x40f790
mov edx, dword [ebp - 0x108]
mov edx, dword [ebp + edx*4 - 0x104]
lea ecx, [eax + edi]
add ecx, dword [ebx + esi*4 + 4]
add edx, eax
rol ecx, 3
mov edi, ecx
mov dword [ebx + esi*4 + 4], ecx
lea ecx, [eax + edi]
and ecx, 0x1f
add edx, edi
rol edx, cl
mov ecx, dword [ebp - 0x108]
inc esi
mov dword [ebp + ecx*4 - 0x104], edx
mov eax, edx
cmp esi, dword [ebp - 0x110]
jl 0x40f7d3
xor esi, esi
inc ecx
mov dword [ebp - 0x108], ecx
cmp ecx, dword [ebp - 0x114]
jl 0x40f7ec
mov dword [ebp - 0x108], 0
dec dword [ebp - 0x10c]
jne 0x40f790
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0041ad7d
mov esp, ebp
pop ebp
ret
Function at 0x40f6f5
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x43b050]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 0x10]
cmp edi, 0x10
je 0x40f624
cmp edi, 0xc
je 0x40f624
cmp edi, 8
je 0x40f624
mov dword [ebp + 0x10], 0x10
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
xor edx, edx
lea esi, [ecx - 8]
mov dword [ebx], edi
mov dword [ebp - 0x108], edx
test esi, esi
js 0x40f6aa
add esi, 8
shr esi, 3
lea ecx, [esi*8]
mov dword [ebp - 0x108], ecx
jmp 0x40f650
movzx edi, byte [eax + 1]
movzx ecx, byte [eax]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 2]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 3]
shl edi, 0x18
or ecx, edi
movzx edi, byte [eax + 5]
mov dword [ebp + edx*4 - 0x104], ecx
movzx ecx, byte [eax + 4]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 6]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 7]
shl edi, 0x18
or ecx, edi
mov dword [ebp + edx*4 - 0x100], ecx
add eax, 8
add edx, 2
dec esi
jne 0x40f650
mov ecx, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov esi, ecx
sub esi, dword [ebp - 0x108]
je 0x40f723
and ecx, 7
add eax, ecx
dec ecx
xor edi, edi
xor esi, esi
cmp ecx, 7
ja case.default.0x40f6c3
jmp dword [ecx*4 + 0x40f804]
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
or edi, ecx
movzx esi, byte [eax - 1]
dec eax
shl esi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or esi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or esi, ecx
movzx eax, byte [eax - 1]
or esi, eax
mov ecx, dword [ebp + 8]
mov dword [ebp + edx*4 - 0x100], edi
mov edi, dword [ebp + 0x10]
mov dword [ebp + edx*4 - 0x104], esi
lea eax, [ecx + 3]
cdq
and edx, 3
add eax, edx
lea edx, [edi + edi + 2]
sar eax, 2
mov ecx, 1
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], edx
mov dword [ebx + 4], 0xb7e15163
cmp edx, ecx
jle 0x40f762
nop
mov esi, dword [ebx + ecx*4]
sub esi, 0x61c88647
mov dword [ebx + ecx*4 + 4], esi
inc ecx
cmp ecx, edx
jl 0x40f750
cmp edx, eax
jg 0x40f768
mov edx, eax
lea ecx, [edx + edx*2]
xor edi, edi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x108], edi
test ecx, ecx
jle 0x40f7f4
mov dword [ebp - 0x10c], ecx
jmp 0x40f790
mov edx, dword [ebp - 0x108]
mov edx, dword [ebp + edx*4 - 0x104]
lea ecx, [eax + edi]
add ecx, dword [ebx + esi*4 + 4]
add edx, eax
rol ecx, 3
mov edi, ecx
mov dword [ebx + esi*4 + 4], ecx
lea ecx, [eax + edi]
and ecx, 0x1f
add edx, edi
rol edx, cl
mov ecx, dword [ebp - 0x108]
inc esi
mov dword [ebp + ecx*4 - 0x104], edx
mov eax, edx
cmp esi, dword [ebp - 0x110]
jl 0x40f7d3
xor esi, esi
inc ecx
mov dword [ebp - 0x108], ecx
cmp ecx, dword [ebp - 0x114]
jl 0x40f7ec
mov dword [ebp - 0x108], 0
dec dword [ebp - 0x10c]
jne 0x40f790
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0041ad7d
mov esp, ebp
pop ebp
ret
Function at 0x40f6ff
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x43b050]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 0x10]
cmp edi, 0x10
je 0x40f624
cmp edi, 0xc
je 0x40f624
cmp edi, 8
je 0x40f624
mov dword [ebp + 0x10], 0x10
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
xor edx, edx
lea esi, [ecx - 8]
mov dword [ebx], edi
mov dword [ebp - 0x108], edx
test esi, esi
js 0x40f6aa
add esi, 8
shr esi, 3
lea ecx, [esi*8]
mov dword [ebp - 0x108], ecx
jmp 0x40f650
movzx edi, byte [eax + 1]
movzx ecx, byte [eax]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 2]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 3]
shl edi, 0x18
or ecx, edi
movzx edi, byte [eax + 5]
mov dword [ebp + edx*4 - 0x104], ecx
movzx ecx, byte [eax + 4]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 6]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 7]
shl edi, 0x18
or ecx, edi
mov dword [ebp + edx*4 - 0x100], ecx
add eax, 8
add edx, 2
dec esi
jne 0x40f650
mov ecx, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov esi, ecx
sub esi, dword [ebp - 0x108]
je 0x40f723
and ecx, 7
add eax, ecx
dec ecx
xor edi, edi
xor esi, esi
cmp ecx, 7
ja case.default.0x40f6c3
jmp dword [ecx*4 + 0x40f804]
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
or edi, ecx
movzx esi, byte [eax - 1]
dec eax
shl esi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or esi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or esi, ecx
movzx eax, byte [eax - 1]
or esi, eax
mov ecx, dword [ebp + 8]
mov dword [ebp + edx*4 - 0x100], edi
mov edi, dword [ebp + 0x10]
mov dword [ebp + edx*4 - 0x104], esi
lea eax, [ecx + 3]
cdq
and edx, 3
add eax, edx
lea edx, [edi + edi + 2]
sar eax, 2
mov ecx, 1
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], edx
mov dword [ebx + 4], 0xb7e15163
cmp edx, ecx
jle 0x40f762
nop
mov esi, dword [ebx + ecx*4]
sub esi, 0x61c88647
mov dword [ebx + ecx*4 + 4], esi
inc ecx
cmp ecx, edx
jl 0x40f750
cmp edx, eax
jg 0x40f768
mov edx, eax
lea ecx, [edx + edx*2]
xor edi, edi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x108], edi
test ecx, ecx
jle 0x40f7f4
mov dword [ebp - 0x10c], ecx
jmp 0x40f790
mov edx, dword [ebp - 0x108]
mov edx, dword [ebp + edx*4 - 0x104]
lea ecx, [eax + edi]
add ecx, dword [ebx + esi*4 + 4]
add edx, eax
rol ecx, 3
mov edi, ecx
mov dword [ebx + esi*4 + 4], ecx
lea ecx, [eax + edi]
and ecx, 0x1f
add edx, edi
rol edx, cl
mov ecx, dword [ebp - 0x108]
inc esi
mov dword [ebp + ecx*4 - 0x104], edx
mov eax, edx
cmp esi, dword [ebp - 0x110]
jl 0x40f7d3
xor esi, esi
inc ecx
mov dword [ebp - 0x108], ecx
cmp ecx, dword [ebp - 0x114]
jl 0x40f7ec
mov dword [ebp - 0x108], 0
dec dword [ebp - 0x10c]
jne 0x40f790
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0041ad7d
mov esp, ebp
pop ebp
ret
Function at 0x40f709
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x43b050]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 0x10]
cmp edi, 0x10
je 0x40f624
cmp edi, 0xc
je 0x40f624
cmp edi, 8
je 0x40f624
mov dword [ebp + 0x10], 0x10
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
xor edx, edx
lea esi, [ecx - 8]
mov dword [ebx], edi
mov dword [ebp - 0x108], edx
test esi, esi
js 0x40f6aa
add esi, 8
shr esi, 3
lea ecx, [esi*8]
mov dword [ebp - 0x108], ecx
jmp 0x40f650
movzx edi, byte [eax + 1]
movzx ecx, byte [eax]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 2]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 3]
shl edi, 0x18
or ecx, edi
movzx edi, byte [eax + 5]
mov dword [ebp + edx*4 - 0x104], ecx
movzx ecx, byte [eax + 4]
shl edi, 8
or ecx, edi
movzx edi, byte [eax + 6]
shl edi, 0x10
or ecx, edi
movzx edi, byte [eax + 7]
shl edi, 0x18
or ecx, edi
mov dword [ebp + edx*4 - 0x100], ecx
add eax, 8
add edx, 2
dec esi
jne 0x40f650
mov ecx, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov esi, ecx
sub esi, dword [ebp - 0x108]
je 0x40f723
and ecx, 7
add eax, ecx
dec ecx
xor edi, edi
xor esi, esi
cmp ecx, 7
ja case.default.0x40f6c3
jmp dword [ecx*4 + 0x40f804]
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
or edi, ecx
movzx esi, byte [eax - 1]
dec eax
shl esi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or esi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or esi, ecx
movzx eax, byte [eax - 1]
or esi, eax
mov ecx, dword [ebp + 8]
mov dword [ebp + edx*4 - 0x100], edi
mov edi, dword [ebp + 0x10]
mov dword [ebp + edx*4 - 0x104], esi
lea eax, [ecx + 3]
cdq
and edx, 3
add eax, edx
lea edx, [edi + edi + 2]
sar eax, 2
mov ecx, 1
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], edx
mov dword [ebx + 4], 0xb7e15163
cmp edx, ecx
jle 0x40f762
nop
mov esi, dword [ebx + ecx*4]
sub esi, 0x61c88647
mov dword [ebx + ecx*4 + 4], esi
inc ecx
cmp ecx, edx
jl 0x40f750
cmp edx, eax
jg 0x40f768
mov edx, eax
lea ecx, [edx + edx*2]
xor edi, edi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x108], edi
test ecx, ecx
jle 0x40f7f4
mov dword [ebp - 0x10c], ecx
jmp 0x40f790
mov edx, dword [ebp - 0x108]
mov edx, dword [ebp + edx*4 - 0x104]
lea ecx, [eax + edi]
add ecx, dword [ebx + esi*4 + 4]
add edx, eax
rol ecx, 3
mov edi, ecx
mov dword [ebx + esi*4 + 4], ecx
lea ecx, [eax + edi]
and ecx, 0x1f
add edx, edi
rol edx, cl
mov ecx, dword [ebp - 0x108]
inc esi
mov dword [ebp + ecx*4 - 0x104], edx
mov eax, edx
cmp esi, dword [ebp - 0x110]
jl 0x40f7d3
xor esi, esi
inc ecx
mov dword [ebp - 0x108], ecx
cmp ecx, dword [ebp - 0x114]
jl 0x40f7ec
mov dword [ebp - 0x108], 0
dec dword [ebp - 0x10c]
jne 0x40f790
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0041ad7d
mov esp, ebp
pop ebp
ret