joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50bc64
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
push ebx
mov ebx, dword [ebp + 0x14]
push esi
push edi
cmp ebx, 0x10
je 0x50bba4
cmp ebx, 0xc
je 0x50bba4
cmp ebx, 8
mov eax, 0x10
cmovne ebx, eax
mov eax, dword [ebp + 8]
xor esi, esi
mov edx, dword [ebp + 0xc]
mov dword [ebp + 8], esi
lea edi, [eax + 4]
mov dword [eax], ebx
lea eax, [edx - 8]
mov dword [ebp + 0x14], edi
test eax, eax
js 0x50bc30
add eax, 8
shr eax, 3
mov dword [ebp - 4], eax
mov edi, eax
shl eax, 3
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0x10]
movzx ecx, byte [eax + 1]
movzx edx, byte [eax]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 2]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 3]
shl ecx, 0x18
or edx, ecx
movzx ecx, byte [eax + 5]
mov dword [ebp + esi*4 - 0x108], edx
movzx edx, byte [eax + 4]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 6]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 7]
shl ecx, 0x18
add eax, 8
or edx, ecx
mov dword [ebp + esi*4 - 0x104], edx
add esi, 2
sub edi, 1
jne 0x50bbd2
mov edi, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
jmp 0x50bc33
mov eax, dword [ebp + 0x10]
mov ecx, edx
sub ecx, dword [ebp + 8]
je 0x50bcab
mov ecx, edx
xor edi, edi
and ecx, 7
xor edx, edx
add eax, ecx
dec ecx
cmp ecx, 7
ja case.default.0x50bc4b
jmp dword [ecx*4 + 0x50bd54]
movzx edx, byte [eax - 1]
dec eax
shl edx, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
or edx, ecx
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx eax, byte [eax - 1]
or edi, eax
mov dword [ebp + esi*4 - 0x108], edi
mov edi, dword [ebp + 0x14]
mov dword [ebp + esi*4 - 0x104], edx
mov edx, dword [ebp + 0xc]
lea eax, [edx + 3]
mov dword [edi], 0xb7e15163
cdq
lea ebx, [ebx*2 + 2]
and edx, 3
mov ecx, 1
add edx, eax
sar edx, 2
mov dword [ebp - 8], edx
cmp ebx, ecx
jle 0x50bce1
mov eax, dword [edi + ecx*4 - 4]
sub eax, 0x61c88647
mov dword [edi + ecx*4], eax
inc ecx
cmp ecx, ebx
jl 0x50bcd0
cmp ebx, edx
mov eax, edx
cmovg eax, ebx
xor ecx, ecx
xor edx, edx
mov dword [ebp + 8], ecx
xor esi, esi
lea eax, [eax + eax*2]
mov dword [ebp + 0xc], eax
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp + 0xc], eax
jle 0x50bd4a
add esi, edx
add esi, dword [edi + ecx*4]
rol esi, 3
mov dword [edi + ecx*4], esi
xor edi, edi
lea ecx, [edx + esi]
add edx, esi
add edx, dword [ebp + eax*4 - 0x108]
rol edx, cl
mov ecx, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x108], edx
inc ecx
mov eax, dword [ebp + 8]
inc eax
cmp eax, ebx
cmovl edi, eax
xor eax, eax
cmp ecx, dword [ebp - 8]
mov dword [ebp + 8], edi
mov edi, dword [ebp + 0x14]
cmovl eax, ecx
sub dword [ebp + 0xc], 1
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], eax
jne 0x50bd01
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x50bc6e
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
push ebx
mov ebx, dword [ebp + 0x14]
push esi
push edi
cmp ebx, 0x10
je 0x50bba4
cmp ebx, 0xc
je 0x50bba4
cmp ebx, 8
mov eax, 0x10
cmovne ebx, eax
mov eax, dword [ebp + 8]
xor esi, esi
mov edx, dword [ebp + 0xc]
mov dword [ebp + 8], esi
lea edi, [eax + 4]
mov dword [eax], ebx
lea eax, [edx - 8]
mov dword [ebp + 0x14], edi
test eax, eax
js 0x50bc30
add eax, 8
shr eax, 3
mov dword [ebp - 4], eax
mov edi, eax
shl eax, 3
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0x10]
movzx ecx, byte [eax + 1]
movzx edx, byte [eax]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 2]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 3]
shl ecx, 0x18
or edx, ecx
movzx ecx, byte [eax + 5]
mov dword [ebp + esi*4 - 0x108], edx
movzx edx, byte [eax + 4]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 6]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 7]
shl ecx, 0x18
add eax, 8
or edx, ecx
mov dword [ebp + esi*4 - 0x104], edx
add esi, 2
sub edi, 1
jne 0x50bbd2
mov edi, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
jmp 0x50bc33
mov eax, dword [ebp + 0x10]
mov ecx, edx
sub ecx, dword [ebp + 8]
je 0x50bcab
mov ecx, edx
xor edi, edi
and ecx, 7
xor edx, edx
add eax, ecx
dec ecx
cmp ecx, 7
ja case.default.0x50bc4b
jmp dword [ecx*4 + 0x50bd54]
movzx edx, byte [eax - 1]
dec eax
shl edx, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
or edx, ecx
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx eax, byte [eax - 1]
or edi, eax
mov dword [ebp + esi*4 - 0x108], edi
mov edi, dword [ebp + 0x14]
mov dword [ebp + esi*4 - 0x104], edx
mov edx, dword [ebp + 0xc]
lea eax, [edx + 3]
mov dword [edi], 0xb7e15163
cdq
lea ebx, [ebx*2 + 2]
and edx, 3
mov ecx, 1
add edx, eax
sar edx, 2
mov dword [ebp - 8], edx
cmp ebx, ecx
jle 0x50bce1
mov eax, dword [edi + ecx*4 - 4]
sub eax, 0x61c88647
mov dword [edi + ecx*4], eax
inc ecx
cmp ecx, ebx
jl 0x50bcd0
cmp ebx, edx
mov eax, edx
cmovg eax, ebx
xor ecx, ecx
xor edx, edx
mov dword [ebp + 8], ecx
xor esi, esi
lea eax, [eax + eax*2]
mov dword [ebp + 0xc], eax
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp + 0xc], eax
jle 0x50bd4a
add esi, edx
add esi, dword [edi + ecx*4]
rol esi, 3
mov dword [edi + ecx*4], esi
xor edi, edi
lea ecx, [edx + esi]
add edx, esi
add edx, dword [ebp + eax*4 - 0x108]
rol edx, cl
mov ecx, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x108], edx
inc ecx
mov eax, dword [ebp + 8]
inc eax
cmp eax, ebx
cmovl edi, eax
xor eax, eax
cmp ecx, dword [ebp - 8]
mov dword [ebp + 8], edi
mov edi, dword [ebp + 0x14]
cmovl eax, ecx
sub dword [ebp + 0xc], 1
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], eax
jne 0x50bd01
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x50bc75
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
push ebx
mov ebx, dword [ebp + 0x14]
push esi
push edi
cmp ebx, 0x10
je 0x50bba4
cmp ebx, 0xc
je 0x50bba4
cmp ebx, 8
mov eax, 0x10
cmovne ebx, eax
mov eax, dword [ebp + 8]
xor esi, esi
mov edx, dword [ebp + 0xc]
mov dword [ebp + 8], esi
lea edi, [eax + 4]
mov dword [eax], ebx
lea eax, [edx - 8]
mov dword [ebp + 0x14], edi
test eax, eax
js 0x50bc30
add eax, 8
shr eax, 3
mov dword [ebp - 4], eax
mov edi, eax
shl eax, 3
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0x10]
movzx ecx, byte [eax + 1]
movzx edx, byte [eax]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 2]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 3]
shl ecx, 0x18
or edx, ecx
movzx ecx, byte [eax + 5]
mov dword [ebp + esi*4 - 0x108], edx
movzx edx, byte [eax + 4]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 6]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 7]
shl ecx, 0x18
add eax, 8
or edx, ecx
mov dword [ebp + esi*4 - 0x104], edx
add esi, 2
sub edi, 1
jne 0x50bbd2
mov edi, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
jmp 0x50bc33
mov eax, dword [ebp + 0x10]
mov ecx, edx
sub ecx, dword [ebp + 8]
je 0x50bcab
mov ecx, edx
xor edi, edi
and ecx, 7
xor edx, edx
add eax, ecx
dec ecx
cmp ecx, 7
ja case.default.0x50bc4b
jmp dword [ecx*4 + 0x50bd54]
movzx edx, byte [eax - 1]
dec eax
shl edx, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
or edx, ecx
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx eax, byte [eax - 1]
or edi, eax
mov dword [ebp + esi*4 - 0x108], edi
mov edi, dword [ebp + 0x14]
mov dword [ebp + esi*4 - 0x104], edx
mov edx, dword [ebp + 0xc]
lea eax, [edx + 3]
mov dword [edi], 0xb7e15163
cdq
lea ebx, [ebx*2 + 2]
and edx, 3
mov ecx, 1
add edx, eax
sar edx, 2
mov dword [ebp - 8], edx
cmp ebx, ecx
jle 0x50bce1
mov eax, dword [edi + ecx*4 - 4]
sub eax, 0x61c88647
mov dword [edi + ecx*4], eax
inc ecx
cmp ecx, ebx
jl 0x50bcd0
cmp ebx, edx
mov eax, edx
cmovg eax, ebx
xor ecx, ecx
xor edx, edx
mov dword [ebp + 8], ecx
xor esi, esi
lea eax, [eax + eax*2]
mov dword [ebp + 0xc], eax
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp + 0xc], eax
jle 0x50bd4a
add esi, edx
add esi, dword [edi + ecx*4]
rol esi, 3
mov dword [edi + ecx*4], esi
xor edi, edi
lea ecx, [edx + esi]
add edx, esi
add edx, dword [ebp + eax*4 - 0x108]
rol edx, cl
mov ecx, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x108], edx
inc ecx
mov eax, dword [ebp + 8]
inc eax
cmp eax, ebx
cmovl edi, eax
xor eax, eax
cmp ecx, dword [ebp - 8]
mov dword [ebp + 8], edi
mov edi, dword [ebp + 0x14]
cmovl eax, ecx
sub dword [ebp + 0xc], 1
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], eax
jne 0x50bd01
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x50bc7d
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
push ebx
mov ebx, dword [ebp + 0x14]
push esi
push edi
cmp ebx, 0x10
je 0x50bba4
cmp ebx, 0xc
je 0x50bba4
cmp ebx, 8
mov eax, 0x10
cmovne ebx, eax
mov eax, dword [ebp + 8]
xor esi, esi
mov edx, dword [ebp + 0xc]
mov dword [ebp + 8], esi
lea edi, [eax + 4]
mov dword [eax], ebx
lea eax, [edx - 8]
mov dword [ebp + 0x14], edi
test eax, eax
js 0x50bc30
add eax, 8
shr eax, 3
mov dword [ebp - 4], eax
mov edi, eax
shl eax, 3
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0x10]
movzx ecx, byte [eax + 1]
movzx edx, byte [eax]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 2]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 3]
shl ecx, 0x18
or edx, ecx
movzx ecx, byte [eax + 5]
mov dword [ebp + esi*4 - 0x108], edx
movzx edx, byte [eax + 4]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 6]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 7]
shl ecx, 0x18
add eax, 8
or edx, ecx
mov dword [ebp + esi*4 - 0x104], edx
add esi, 2
sub edi, 1
jne 0x50bbd2
mov edi, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
jmp 0x50bc33
mov eax, dword [ebp + 0x10]
mov ecx, edx
sub ecx, dword [ebp + 8]
je 0x50bcab
mov ecx, edx
xor edi, edi
and ecx, 7
xor edx, edx
add eax, ecx
dec ecx
cmp ecx, 7
ja case.default.0x50bc4b
jmp dword [ecx*4 + 0x50bd54]
movzx edx, byte [eax - 1]
dec eax
shl edx, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
or edx, ecx
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx eax, byte [eax - 1]
or edi, eax
mov dword [ebp + esi*4 - 0x108], edi
mov edi, dword [ebp + 0x14]
mov dword [ebp + esi*4 - 0x104], edx
mov edx, dword [ebp + 0xc]
lea eax, [edx + 3]
mov dword [edi], 0xb7e15163
cdq
lea ebx, [ebx*2 + 2]
and edx, 3
mov ecx, 1
add edx, eax
sar edx, 2
mov dword [ebp - 8], edx
cmp ebx, ecx
jle 0x50bce1
mov eax, dword [edi + ecx*4 - 4]
sub eax, 0x61c88647
mov dword [edi + ecx*4], eax
inc ecx
cmp ecx, ebx
jl 0x50bcd0
cmp ebx, edx
mov eax, edx
cmovg eax, ebx
xor ecx, ecx
xor edx, edx
mov dword [ebp + 8], ecx
xor esi, esi
lea eax, [eax + eax*2]
mov dword [ebp + 0xc], eax
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp + 0xc], eax
jle 0x50bd4a
add esi, edx
add esi, dword [edi + ecx*4]
rol esi, 3
mov dword [edi + ecx*4], esi
xor edi, edi
lea ecx, [edx + esi]
add edx, esi
add edx, dword [ebp + eax*4 - 0x108]
rol edx, cl
mov ecx, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x108], edx
inc ecx
mov eax, dword [ebp + 8]
inc eax
cmp eax, ebx
cmovl edi, eax
xor eax, eax
cmp ecx, dword [ebp - 8]
mov dword [ebp + 8], edi
mov edi, dword [ebp + 0x14]
cmovl eax, ecx
sub dword [ebp + 0xc], 1
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], eax
jne 0x50bd01
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x50bc87
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
push ebx
mov ebx, dword [ebp + 0x14]
push esi
push edi
cmp ebx, 0x10
je 0x50bba4
cmp ebx, 0xc
je 0x50bba4
cmp ebx, 8
mov eax, 0x10
cmovne ebx, eax
mov eax, dword [ebp + 8]
xor esi, esi
mov edx, dword [ebp + 0xc]
mov dword [ebp + 8], esi
lea edi, [eax + 4]
mov dword [eax], ebx
lea eax, [edx - 8]
mov dword [ebp + 0x14], edi
test eax, eax
js 0x50bc30
add eax, 8
shr eax, 3
mov dword [ebp - 4], eax
mov edi, eax
shl eax, 3
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0x10]
movzx ecx, byte [eax + 1]
movzx edx, byte [eax]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 2]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 3]
shl ecx, 0x18
or edx, ecx
movzx ecx, byte [eax + 5]
mov dword [ebp + esi*4 - 0x108], edx
movzx edx, byte [eax + 4]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 6]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 7]
shl ecx, 0x18
add eax, 8
or edx, ecx
mov dword [ebp + esi*4 - 0x104], edx
add esi, 2
sub edi, 1
jne 0x50bbd2
mov edi, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
jmp 0x50bc33
mov eax, dword [ebp + 0x10]
mov ecx, edx
sub ecx, dword [ebp + 8]
je 0x50bcab
mov ecx, edx
xor edi, edi
and ecx, 7
xor edx, edx
add eax, ecx
dec ecx
cmp ecx, 7
ja case.default.0x50bc4b
jmp dword [ecx*4 + 0x50bd54]
movzx edx, byte [eax - 1]
dec eax
shl edx, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
or edx, ecx
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx eax, byte [eax - 1]
or edi, eax
mov dword [ebp + esi*4 - 0x108], edi
mov edi, dword [ebp + 0x14]
mov dword [ebp + esi*4 - 0x104], edx
mov edx, dword [ebp + 0xc]
lea eax, [edx + 3]
mov dword [edi], 0xb7e15163
cdq
lea ebx, [ebx*2 + 2]
and edx, 3
mov ecx, 1
add edx, eax
sar edx, 2
mov dword [ebp - 8], edx
cmp ebx, ecx
jle 0x50bce1
mov eax, dword [edi + ecx*4 - 4]
sub eax, 0x61c88647
mov dword [edi + ecx*4], eax
inc ecx
cmp ecx, ebx
jl 0x50bcd0
cmp ebx, edx
mov eax, edx
cmovg eax, ebx
xor ecx, ecx
xor edx, edx
mov dword [ebp + 8], ecx
xor esi, esi
lea eax, [eax + eax*2]
mov dword [ebp + 0xc], eax
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp + 0xc], eax
jle 0x50bd4a
add esi, edx
add esi, dword [edi + ecx*4]
rol esi, 3
mov dword [edi + ecx*4], esi
xor edi, edi
lea ecx, [edx + esi]
add edx, esi
add edx, dword [ebp + eax*4 - 0x108]
rol edx, cl
mov ecx, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x108], edx
inc ecx
mov eax, dword [ebp + 8]
inc eax
cmp eax, ebx
cmovl edi, eax
xor eax, eax
cmp ecx, dword [ebp - 8]
mov dword [ebp + 8], edi
mov edi, dword [ebp + 0x14]
cmovl eax, ecx
sub dword [ebp + 0xc], 1
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], eax
jne 0x50bd01
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x50bc91
Capabilities:
Encrypt data using rc6

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
push ebx
mov ebx, dword [ebp + 0x14]
push esi
push edi
cmp ebx, 0x10
je 0x50bba4
cmp ebx, 0xc
je 0x50bba4
cmp ebx, 8
mov eax, 0x10
cmovne ebx, eax
mov eax, dword [ebp + 8]
xor esi, esi
mov edx, dword [ebp + 0xc]
mov dword [ebp + 8], esi
lea edi, [eax + 4]
mov dword [eax], ebx
lea eax, [edx - 8]
mov dword [ebp + 0x14], edi
test eax, eax
js 0x50bc30
add eax, 8
shr eax, 3
mov dword [ebp - 4], eax
mov edi, eax
shl eax, 3
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0x10]
movzx ecx, byte [eax + 1]
movzx edx, byte [eax]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 2]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 3]
shl ecx, 0x18
or edx, ecx
movzx ecx, byte [eax + 5]
mov dword [ebp + esi*4 - 0x108], edx
movzx edx, byte [eax + 4]
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax + 6]
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax + 7]
shl ecx, 0x18
add eax, 8
or edx, ecx
mov dword [ebp + esi*4 - 0x104], edx
add esi, 2
sub edi, 1
jne 0x50bbd2
mov edi, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
jmp 0x50bc33
mov eax, dword [ebp + 0x10]
mov ecx, edx
sub ecx, dword [ebp + 8]
je 0x50bcab
mov ecx, edx
xor edi, edi
and ecx, 7
xor edx, edx
add eax, ecx
dec ecx
cmp ecx, 7
ja case.default.0x50bc4b
jmp dword [ecx*4 + 0x50bd54]
movzx edx, byte [eax - 1]
dec eax
shl edx, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edx, ecx
movzx ecx, byte [eax - 1]
dec eax
or edx, ecx
movzx edi, byte [eax - 1]
dec eax
shl edi, 0x18
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [eax - 1]
dec eax
shl ecx, 8
or edi, ecx
movzx eax, byte [eax - 1]
or edi, eax
mov dword [ebp + esi*4 - 0x108], edi
mov edi, dword [ebp + 0x14]
mov dword [ebp + esi*4 - 0x104], edx
mov edx, dword [ebp + 0xc]
lea eax, [edx + 3]
mov dword [edi], 0xb7e15163
cdq
lea ebx, [ebx*2 + 2]
and edx, 3
mov ecx, 1
add edx, eax
sar edx, 2
mov dword [ebp - 8], edx
cmp ebx, ecx
jle 0x50bce1
mov eax, dword [edi + ecx*4 - 4]
sub eax, 0x61c88647
mov dword [edi + ecx*4], eax
inc ecx
cmp ecx, ebx
jl 0x50bcd0
cmp ebx, edx
mov eax, edx
cmovg eax, ebx
xor ecx, ecx
xor edx, edx
mov dword [ebp + 8], ecx
xor esi, esi
lea eax, [eax + eax*2]
mov dword [ebp + 0xc], eax
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp + 0xc], eax
jle 0x50bd4a
add esi, edx
add esi, dword [edi + ecx*4]
rol esi, 3
mov dword [edi + ecx*4], esi
xor edi, edi
lea ecx, [edx + esi]
add edx, esi
add edx, dword [ebp + eax*4 - 0x108]
rol edx, cl
mov ecx, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x108], edx
inc ecx
mov eax, dword [ebp + 8]
inc eax
cmp eax, ebx
cmovl edi, eax
xor eax, eax
cmp ecx, dword [ebp - 8]
mov dword [ebp + 8], edi
mov edi, dword [ebp + 0x14]
cmovl eax, ecx
sub dword [ebp + 0xc], 1
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], eax
jne 0x50bd01
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x50c860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [ebp + 0x18]
lea edx, [eax + 1]
mov dword [ebp - 4], 0
movzx ecx, byte [edx + 3]
movzx ebx, byte [eax]
movzx eax, byte [edx]
shl eax, 8
or ebx, eax
movzx eax, byte [edx + 1]
shl eax, 0x10
or ebx, eax
movzx eax, byte [edx + 2]
shl eax, 0x18
or ebx, eax
movzx eax, byte [edx + 4]
shl eax, 8
or ecx, eax
mov dword [ebp - 0xc], ebx
movzx eax, byte [edx + 5]
mov dword [ebp - 8], ecx
movzx ecx, byte [edx + 6]
mov edx, dword [ebp - 8]
shl ecx, 8
or ecx, eax
mov byte [ebp - 0x18], bl
mov eax, ebx
shl ecx, 0x10
shr eax, 8
or edx, ecx
mov byte [ebp - 0x17], al
mov eax, ebx
shr eax, 0x10
mov byte [ebp - 0x16], al
mov eax, ebx
shr eax, 0x18
mov byte [ebp - 0x15], al
mov eax, edx
shr eax, 8
mov byte [ebp - 0x13], al
mov eax, edx
shr eax, 0x10
mov byte [ebp - 0x12], al
mov eax, edx
shr eax, 0x18
mov edi, dword [ebp + 0x1c]
mov byte [ebp - 0x11], al
mov eax, dword [ebp + 0x10]
mov dword [ebp - 8], edx
mov esi, dword [edi]
mov byte [ebp - 0x14], dl
test eax, eax
je 0x50c9cb
mov edi, dword [ebp + 0xc]
sub dword [ebp + 8], edi
nop word [eax + eax]
dec eax
mov dword [ebp + 0x10], eax
test esi, esi
jne 0x50c96c
push dword [ebp + 0x14]
lea eax, [ebp - 0xc]
push eax
call fcn.0050c480
mov ebx, dword [ebp - 0xc]
add esp, 8
mov edx, dword [ebp - 8]
mov eax, ebx
shr eax, 8
mov ecx, dword [ebp - 4]
mov byte [ebp - 0x17], al
mov eax, ebx
shr eax, 0x10
mov byte [ebp - 0x16], al
mov eax, ebx
shr eax, 0x18
mov byte [ebp - 0x15], al
mov eax, edx
shr eax, 8
mov byte [ebp - 0x13], al
mov eax, edx
shr eax, 0x10
mov byte [ebp - 0x12], al
mov eax, edx
shr eax, 0x18
inc ecx
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x14], dl
mov byte [ebp - 0x11], al
mov dword [ebp - 4], ecx
jmp 0x50c96f
mov ecx, dword [ebp - 4]
mov eax, dword [ebp + 8]
mov al, byte [eax + edi]
xor al, byte [ebp + esi - 0x18]
inc esi
mov byte [edi], al
and esi, 7
mov eax, dword [ebp + 0x10]
inc edi
test eax, eax
jne 0x50c910
test ecx, ecx
je 0x50c9bf
mov edi, dword [ebp + 0x18]
mov eax, ebx
shr eax, 8
mov byte [edi], bl
mov byte [edi + 1], al
mov eax, ebx
shr eax, 0x10
mov byte [edi + 2], al
mov eax, edx
shr ebx, 0x18
mov byte [edi + 3], bl
shr eax, 8
mov byte [edi + 4], dl
mov byte [edi + 5], al
mov eax, edx
shr eax, 0x10
shr edx, 0x18
mov byte [edi + 6], al
mov byte [edi + 7], dl
mov eax, dword [ebp + 0x1c]
pop edi
mov dword [eax], esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [edi], esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x5119a0
Capabilities:
Hash data using sha256

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
push 0xe8
push 0
push esi
call fcn.00584f50
add esp, 0xc
mov dword [esi], 0xf3bcc908
mov dword [esi + 4], 0x6a09e667
mov dword [esi + 8], 0x84caa73b
mov dword [esi + 0xc], 0xbb67ae85
mov dword [esi + 0x10], 0xfe94f82b
mov dword [esi + 0x14], 0x3c6ef372
mov dword [esi + 0x18], 0x5f1d36f1
mov dword [esi + 0x1c], 0xa54ff53a
mov dword [esi + 0x20], 0xade682d1
mov dword [esi + 0x24], 0x510e527f
mov dword [esi + 0x28], 0x2b3e6c1f
mov dword [esi + 0x2c], 0x9b05688c
mov dword [esi + 0x30], 0xfb41bd6b
mov dword [esi + 0x34], 0x1f83d9ab
mov dword [esi + 0x38], 0x137e2179
mov dword [esi + 0x3c], 0x5be0cd19
pop esi
pop ebp
ret
Function at 0x5132d0
Capabilities:
Hash data using sha256

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
push 0x74
push 0
push esi
call fcn.00584f50
mov ecx, dword [ebp + 0xc]
add esp, 0xc
mov dword [esi], 0x6a09e667
mov dword [esi + 4], 0xbb67ae85
mov dword [esi + 8], 0x3c6ef372
mov dword [esi + 0xc], 0xa54ff53a
mov dword [esi + 0x10], 0x510e527f
mov dword [esi + 0x14], 0x9b05688c
mov dword [esi + 0x18], 0x1f83d9ab
mov dword [esi + 0x1c], 0x5be0cd19
mov eax, dword [ecx]
xor eax, 0x6a09e667
mov dword [esi], eax
mov eax, dword [ecx + 4]
xor eax, 0xbb67ae85
mov dword [esi + 4], eax
mov eax, dword [ecx + 8]
xor eax, 0x3c6ef372
mov dword [esi + 8], eax
mov eax, dword [ecx + 0xc]
xor eax, 0xa54ff53a
mov dword [esi + 0xc], eax
mov eax, dword [ecx + 0x10]
xor eax, 0x510e527f
mov dword [esi + 0x10], eax
mov eax, dword [ecx + 0x14]
xor eax, 0x9b05688c
mov dword [esi + 0x14], eax
mov eax, dword [ecx + 0x18]
xor eax, 0x1f83d9ab
mov dword [esi + 0x18], eax
mov eax, dword [ecx + 0x1c]
xor eax, 0x5be0cd19
mov dword [esi + 0x1c], eax
pop esi
pop ebp
ret