joyce8/EMBER2024-capa huggingface dataset:
Function at 0x8200aa
Capabilities:
Execute syscall

Disassembly:
btc eax, 0x88
neg ecx
pop eax
xor ecx, 0x4c137337
add ecx, eax
xor ebx, ecx
call fcn.0083b801
inc ecx
mov edi, 0xe20b28f
dec ecx
sub edi, 0x59907b9b
inc ecx
movsx edx, bh
inc ebx
mov ebx, dword [ebp + edi + 0x4b6fc90c]
movzx esi, dl
inc esp
sbb edi, edx
dec esi
lea ebp, [esi + ebp - 0xf0]
jbe 0xd208b2
mov edx, dword [edi]
mov ecx, 0xcb88c022
movzx eax, cl
lea edi, [eax + edi - 0x1e]
dec ecx
lea eax, [eax*8 - 0x1bd413cf]
xor edx, ebx
not cl
not eax
neg ax
rol edx, 3
shl ecx, 0x78
lea eax, [ecx + ecx*4 - 0x5cf24e7b]
inc edx
or eax, 0x33bc039e
call fcn.00bf1d18
dec ecx
not edi
xor ebx, ebp
dec ebx
not ebx
dec eax
lea eax, [edx + esi + 0x6c0c261b]
inc eax
movzx edi, dh
inc edx
lea ebx, [ebx + edi - 0x36ffab0a]
inc ebp
movsx esp, di
call fcn.00cc078e
xor ecx, ebx
mov dword [esp + eax], 0xbd020395
neg ecx
and dword [esp + eax*2], eax
not ecx
dec dword [esp + eax]
rol ax, 0xed
rol eax, 0x39
lea ecx, [eax + ecx + 0x61b89697]
jne 0x76caeb
syscall
call fcn.00892f40
mov eax, dword [0x3374331a]
adc eax, dword [eax - 0x5eec83c]
cli
fnstsw word [esi + 0x67]
loopne 0x8200e3
lahf
sti
dec esp
fstp xword [eax]
jl 0x820154
test al, 0x98
lahf
xchg ecx, eax
jp 0x8200c1
sub eax, dword [0x52d6a191]
cld
dec eax
je 0x8200e2
pop edi
loope 0x82014f
jae 0x8200ff
push ss
pop edi
stc
add eax, 0x614c79ca
sub dl, bh
invalid
clc
cmpsb byte [esi], byte es:[edi]
shr ecx, 0x68
jo 0x820156
jmp [eax - 0x54]
jb 0x7a941e
syscall
call fcn.0089014c
add dx, ax
ror dword [esp + ecx*2 - 0x196146c6], 0xa6
movsx eax, byte [esp + ecx*2 - 0x196146c6]
mov word [edi + ecx*2 - 0x196146c6], dx
ror cl, 0x41
mov dword [esp + ecx*2 - 0x19614762], ebp
ret

Function at 0x8204b1
Capabilities:
Encrypt data using speck

Disassembly:
jmp 0xbdf7d3
mov ecx, 0x499361b1
mov ecx, dword [ecx + esi - 0x499361b1]
add esi, 4
jmp 0x8d2377
jmp 0x719b63
xor ecx, ebx
rol ecx, 1
mov dword [esp], 0xba88040e
rol word [esp + 2], 1
call fcn.008ed49c

Function at 0x82c7be
Capabilities:
Encrypt data using speck

Disassembly:
xor ecx, ebx
shr word [esp + 5], 0xc4
sbb ecx, edx
xor ecx, 0x3d1ea713
mov dword [esp + 8], edx
pop edx
mov edx, 0xf980cbac
sub ecx, 0x94bcf70d
mov eax, edx
or edx, 0x5824c3c
shl dx, 0x67
bswap ecx
xor ebx, ecx
rol dword [esp + 1], 0xe4
sar al, 0xc2
adc ebp, ecx
pop edx
shr ax, 0xd
sal edx, 0x7b
pop ecx
jp fcn.008059a4

Function at 0x830bc8
Capabilities:
Encrypt data using speck

Disassembly:
not eax
rol ecx, 1
cwde
xchg dx, ax
mov dword [esp + edx*2 - 0x1fffe], eax
inc ecx
call fcn.0079fba7

Function at 0x83c614
Capabilities:
Authenticate hmac

Disassembly:
xor eax, edi
mov dword [esp], 0xb8063cae
inc edx
rol dword [esp + 0xc], 0x38
rol byte [esp + 4], 0x61
xor eax, 0x84884139
sal byte [esp + 3], 0xe5
sub byte [esp + 0xb], 0xbf
dec ecx
lea esp, [esp + 0x10]
jne 0x7bc1ec
mov edx, 0x98ae3899
xor edx, 0xe080971d
pop edi
Function at 0x8566ee
Capabilities:
Encrypt data using speck

Disassembly:
not cl
jg 0x8bf99c
mov eax, 0x6e1c2319
lea ecx, [eax - 0x7d540a00]
mov eax, dword [edi + eax - 0x6e1c2319]
bt ecx, ecx
movsx edx, cx
xchg ch, cl
lea edi, [edi + edx*2 - 0x322e]
xor eax, ebx
bswap eax
bts dx, dx
neg eax
lea eax, [edx + eax + 0x1d16ff75]
bts edx, ecx
shl cx, 0xab
setnp dl
not eax
call fcn.00c69d86

Function at 0x858bd3
Capabilities:
Encrypt data using speck

Disassembly:
neg ecx
sar dl, 0xa3
or ax, dx
sbb ecx, 0xdc0e2b0c
bswap ecx
mul eax
btr edx, edx
imul eax, edx
sbb ecx, 0xde9d7a8d
xor ebx, ecx
bswap eax
dec al
or edx, edx
adc esi, ecx
inc edx
neg eax
cbw
mov ecx, dword [ebp + edx*4 - 4]
sub dx, dx
mov eax, dword [edx + ebp + 4]
sub dl, dh
push edx
lea ebp, [ebp + edx*8 + 8]
pop edx
dec dl
jl 0xbfba66
sbb edx, 0xc4a4db0f
shl cl, 0xa5
xadd ax, cx
mov dword [esp + ecx*4 - 0x16940000], 0x28ae5780
neg edx
shr cl, 0x46
not eax
call fcn.00c29490
sub edi, 4
mov ecx, dword [edi]
xor ecx, ebx
lea edx, [edx*2 + 0x3fbb5d92]
bswap edx
not ecx
movzx eax, dx
sar eax, 0x54
jae 0x714ab0

Function at 0x858c19
Capabilities:
Encrypt data using speck

Disassembly:
mov dword [edx + ecx - 0x60850b07], eax
lea edi, [ecx + edi - 0x60850b0b]
lea eax, [ecx*4 + 0x6c1763a7]
mov edx, 0xb6b6ec9c
mov edx, dword [edi + ecx - 0x60850b07]
call fcn.007a776a

Function at 0x860892
Capabilities:
Execute syscall

Disassembly:
lea ecx, [eax + ecx + 0x1587b16c]
rol ax, 0xe3
mov dword [esp + eax*8 - 0x740], eax
xadd dl, ah
ror ecx, 1
sub word [esp + eax - 0x1e8], ax
xor ebx, ecx
add edi, ecx
mov ecx, edx
shr dl, 4
mov eax, esi
sal dl, cl
sal ecx, 0x46
lea esi, [esi + ecx - 0x466c0044]
shr dword [esp + ecx - 0x466c0040], 0x59
adc dx, word [esp + ecx - 0x466c003f]
mov dword [esi + ecx - 0x466c0040], eax
btc edx, edx
call fcn.00851444
syscall
call fcn.0072ecc3
mov eax, dword [ebp]
mov cl, byte [ebp + 4]
mov edx, 0x242a5104
lea ebp, [ebp + edx*2 - 0x4854a206]
ror edx, 0x5c
and edx, edx
sub dl, dh
shr eax, cl
movsx ecx, dx
mov dword [ebp + ecx*2 - 0x2064], eax
mov eax, edx
call fcn.00d1f6c7
lea edi, [edi + eax - 0x6e929623]
xor edx, ebx
bswap edx
xor al, ah
xor edx, 0x973ed5b8
dec edx
btr eax, eax
ror edx, 2
pop ecx
sub ecx, dword [esp + eax - 0x6e9096b1]
bswap edx
inc eax
xor ebx, edx
add ebp, edx
mov edx, 0x32224708
mov dword [esp + ecx - 0xa402], ebp
ret

Function at 0x863085
Capabilities:
Encrypt data using speck

Disassembly:
lea esp, [esp + 8]
je 0xc97346
jmp 0x7ab2bb

Function at 0x86450c
Capabilities:
Encrypt data using speck

Disassembly:
push 0xcbe3310
mov dword [esp + 0xc], 0x1526f71e
xor edx, 0x92bb0139
jmp 0xc87c4d
mov dword [esp + 4], 0xf29bbe36
inc ecx
jmp 0x7ae4d6
inc word [esp + 1]
dec eax
mov dword [esp + 4], 0xd5261b1f
push 0x4d94528b
lea esp, [esp + 0x18]
jne 0x8856c7
mov ecx, 0x83b770a9
movsx eax, cl
pop esi
Function at 0x86edf1
Capabilities:
Encode data using xor

Disassembly:
mov dword [esp], 0xc29bdc
call fcn.008ba99b
mov eax, 0x1eb31a2e
mov ecx, dword [esi + eax*2 - 0x3d66345c]
shl ax, 0xc
lea esi, [esi + eax - 0x1eb3dffc]
movsx edx, al
shr eax, 0xc9
div eax
xor ecx, ebx
shl dl, 3
shr edx, 0x2b
not ecx
adc dx, 0x3f14
xor ecx, 0xbbbeaf93
lea ecx, [ecx + eax*8 + 0x642de51d]
or dl, dh
mov ecx, es
sbb eax, 0xa642de5
salc
bswap ecx
xor ebx, ecx
sal ax, 9
adc ebp, ecx
btr eax, edx
lea eax, [eax*4 + 0x5b194d8d]
adc al, al
mov eax, dword [eax + edi - 0x5b19551a]
jle 0x878b6f
add byte [eax], al
xchg edi, eax
pop edi
mov dword ss:[esp + edi*4 - 0xfa1391], esp
xchg esp, eax
adc edi, dword [edx - 0x64]
add dword [edx - 0x20ce1a31], edx
push eax
jae 0x86ee33
popal
or dh, byte [ebp - 0x25]
mov al, 0x99
rcr byte [edx + 0x6e6a4f51], 1
push ecx
push ds
scasd eax, dword es:[edi]
jno 0x86ee5c
call 0xd1a5034c
push ss
cwde
cmp al, 0x88
mov bh, 0xd4
insb byte es:[edi], dx
push di
pop edi
jae 0x86ef09
rol byte [eax], 1
lds esi, [esi + 0xf]
dec eax
add esp, dword [eax - 0x67fc03dd]
sbb esi, dword [edx - 0x72a80be]
std
add dl, byte [esi]
sal ebx, 0xcb
invalid
push edx
mov edi, 0x9dd02ea9
cmp al, 0x65
jns 0x86ef10
sub al, 0xf0
insd dword es:[edi], dx
lea ebx, [esi]
add dword [eax], edi
xchg edi, eax
mov byte [0xaa19d44d], al
and esp, dword [eax + 0x6d]
add ebp, dword [esi - 7]
pop esp
xchg byte [esi + 0x347d061], al
add eax, 0xd56e818c
sub dword [edx - 0x3b0d15e7], 0xffffff91
invalid
xchg ecx, eax
push es
jecxz 0x86eeda
int3
push ds
mov dh, 0xdf
pop edi
imul esp, dword [ecx + ecx*4 + 0x6b], 0x2e5ff1ab
jg 0x86ef71
pop edi
jg 0x86ef71
rcl dword [eax], 0x11
pop eax
push edx
mov edi, 0xaf619fa9
jns 0x86ef25
test eax, 0x79af619f
cli
dec edx
mov byte [ebx + 0x7ca8c871], dh
jge 0x86ef1b
pop edx
insb byte es:[edi], dx
pushal
xor ebp, dword [eax - 0x258c1d31]
cwde
add dh, ch
mov dh, byte [edx]
mov esp, 0xf1a9d5fa
mov al, 0x63
imul esi, dword [edx + 0x4d], 0xfffffffa
push 0xd56af920
jne 0xcf196928
jne 0x86ef1c
jns 0x86eee3
fdivp st(7)
inc esp
xor byte [ebx + ebp*8], bl
iretd
bound edx, qword [edx]
and esi, esp
iretd
rol edx, 0xc
movsx ecx, dx
adc dl, byte [edi + edx*2 - 0x7e7dffc]
add edi, 6
lea ecx, [ecx*4 - 0x737dc76a]
bts cx, cx
rol ecx, cl
mov byte es:[eax + ecx*2 - 0x6b4640fc], dl
movsx eax, cl
shl ax, 0x48
jmp ebp

Function at 0x885342
Capabilities:
Encrypt data using speck

Disassembly:
push 0x1d0b4734
jmp 0x8856bf
mov dword [esp + 4], esi
lea esp, [esp + 4]
mov esi, 0xc5094cac
add si, si
movzx esi, byte [ecx]
push 0xaf8d5427
inc dword [esp]
inc dword [esp]
xor esi, edx
not dword [esp]
and esi, 0xff
mov esi, dword [esi*4 + 0x85c854]
ror dword [esp], 0xdd
jb 0x77c4c7
Function at 0x88935b
Capabilities:
Encrypt data using speck

Disassembly:
inc ecx
inc byte [esp + 5]
call fcn.007789bc
mov edx, 0xe1a485ad
lea ecx, [edx + edx*4 - 0x277c3bf5]
btr cx, cx
mov edx, dword [ebp + ecx - 0x40ba606c]
mov eax, ecx
neg ecx
mov eax, dword [ebp + eax - 0x40ba6068]
jne 0x8a8aa7
neg eax
bt ecx, edx
sal ecx, cl
sal cl, 0x61
lea eax, [eax + edx*4 - 0x165324dc]
ror eax, 3
not eax
sal ecx, 0x58
dec dl
ror eax, 2
neg eax
bswap ecx
sar edx, 0x5a
lea ecx, [edx + edx*8 + 0x169c5aa1]
xor ebx, eax
and dx, dx
adc esi, eax
movzx eax, cx
jmp esi
jae 0x785649
adc ebp, 3
sal ecx, cl
sub ecx, 0x60a2ba86
rol cl, 0x67
or edx, eax
movsx eax, cl
sal ecx, cl
adc ecx, ecx
not edx
xor ecx, 0x7a387dbe
setne al
mov dword [eax + ebp - 1], edx
lea edx, [ecx*8 - 0x6b74eb58]
cdq
push edx
lea edi, [edi + ecx*2 - 0x7470fb82]
adc edx, ecx
xor ecx, 0x8a95650e
bts cx, 0x38
mov eax, dword [eax + edi - 1]
xor eax, ebx
lea eax, [edx + eax + 0x1c071457]
pop ecx
bt dx, 0x1a
dec ecx
ror eax, 3
jmp 0x848a7b
Function at 0x88f566
Capabilities:
Encrypt data using speck

Disassembly:
lea ecx, [edx + ecx*8 + 0x52b81dae]
xor ebx, eax
bt dx, 0x24
xchg byte [esp + edx*2 - 0x2ad8], cl
adc ebp, eax
bts edx, ecx
btc cx, dx
jae 0x70c36d
mov dword [esp + edx*4 - 0xd5b0], ebp
ret
bt dx, 0x32
ror ax, 1
shl dl, 0xe1
not cl
xor ax, 0xff2e
push edx
not ax
xor ax, 0xa727
imul dx, word [esp + edx*2 - 0xe03]
dec ax
shl ecx, cl
adc dword [esp + edx - 0x310e], edx
rol ax, 1
xor bx, ax
lea edi, [edi + edx*8 - 0x18872]
not ecx
xor ecx, 0x6fb910a4
not word [esp + edx - 0x310d]
mov word [edi + edx*2 - 0x621c], ax
mov eax, dword [esi + edx*4 - 0xc438]
lea ecx, [ecx + edx*2 + 0x441d6d9a]
lea esi, [esi + edx*2 - 0x6218]
pop ecx
xor eax, ebx
sub edx, ecx
xchg cx, dx
bswap eax
js 0x869987
jnp 0xd01c5d
mov ecx, 0xce2b0781
movsx edx, cx
or cx, 0xe7b0
movzx eax, word [esi + edx*2 - 0xf02]
lea esi, [esi + edx*4 - 0x1e02]
xor ax, bx
jmp 0x7b4389
jnp 0x7f5dbe
mul cx
inc cx
add esp, 0x31428821
mov esp, 0xff19ed24
push esi
shl dword [esi - 9], cl
sti
inc esp
movsx eax, si
pop ebp
dec eax
arpl di, di
call fcn.00c48fb3
movzx edx, word [esp + ecx - 0x301c2dd8]
xor eax, ebx
xadd byte [esp + ecx*2 - 0x60385bae], ch
shl dx, 0x41
ror eax, 2
rol dword [esp + ecx - 0x301c00d8], cl
jae 0x8f81bb
neg dx
not eax
jp 0xd02d8b
lea edi, [eax + edi - 0x10a2e99e]
mov dword [esp + edx - 0x4c15a70f], 0xf28f30b0
mov ecx, dword [edx + edi - 0x4c15a70f]
jne 0x820462
int3
bt cx, 0x95
lea eax, [eax + ecx - 0x277798c9]
rol eax, 3
xor dword [esp + ecx - 0x301c00d8], ecx
dec ecx
neg dword [esp + ecx*2 - 0x603801ae]
bswap eax
add dword [esp + ecx - 0x301c00d7], 0x1603ea1f
jp 0x70f73d
syscall
call fcn.008f95ae
ret 0x482c
xor ecx, ebx
not dl
xor edx, 0x4bf6513
sub dword [esp + eax - 0x10a2e996], edx
not ecx
and edx, eax
inc ecx
sar ax, 0xe8
or eax, edx
lea edx, [eax + eax*2 - 0x77d52b64]
bswap ecx
setne dl
lea ecx, [ecx + eax - 0x87b4ac5]
jne 0x70b064
lea ecx, [ecx + ecx*4 - 0x644fd5f4]
inc eax
ror eax, 1
inc edx
xor ebx, eax
bt dx, cx
adc ebp, eax
ror dx, cl
btr edx, edx
jb fcn.008b5740
not eax
rol cl, 0xc7
inc ecx
inc eax
xadd dword [esp + ecx - 0x11000001], edx
bswap eax
setno cl
sub ecx, ecx
xor ebx, eax
and edx, 0x6e0c8791
adc ebp, eax
sub edx, 0xc69a850a
mov dword [esp + ecx], ebp
ret

Function at 0x89455a
Capabilities:
Encrypt data using speck

Disassembly:
mov dword [esp], 0x6b8e570f
add esi, 4
neg byte [esp + 2]
call fcn.00c57ac0
xchg edi, eax
lea edx, [ebp + ecx*2 + 0x1e357a0e]
mov ebp, eax
sub ecx, 0xf6ae0807
mov eax, ecx
jne 0x7504f6

Function at 0x8965d0
Capabilities:
Encode data using xor

Disassembly:
mov dword [esp + 0x14], 0xf9a26f83
mov ebx, dword [esp + 0x18]
push 0x9698d02e
call fcn.00bf3b0b
Function at 0x89cfc1
Capabilities:
Encrypt data using speck

Disassembly:
sar dword [esp + 0xc], 0x16
rol edx, 1
jmp 0xd66139
neg eax
inc ecx
xor ecx, 0xa8afa69f
push edx
cdq
dec eax
mov dword [esp + esi - 0x3a3c9ce7], ebp
dec eax
bswap edi
inc esi
xor dword [esp - 0x274], ecx
pop ebp
dec ebp
arpl cx, cx
inc eax
add bh, 0x20
inc eax
or dh, 0x2a
dec ebp
adc ebx, ecx
xadd di, dx
cdq
jle 0x906503
inc ecx
jmp ebx
inc ecx
movzx edi, word [ebp]
push 0x6e82be34
pop edx
dec ebp
lea ebp, [ebp + edx - 0x6e82be32]
mov ecx, edx
inc esp
movzx ecx, dx
dec ecx
lea esi, [ecx + edx + 0x522fce2b]
xor di, bp
shr edx, 0xdd
dec ecx
bts ecx, edx
ror di, 1
inc ecx
mov esp, 0x1791a9a2
dec esp
lea esi, [esi + esi*4 - 0x68d37efb]
sub di, 0x101
movzx ebx, cx
xor di, 0x80b4
dec esp
bts edx, esi
inc esp
movzx eax, cl
neg di
dec di
inc ecx
inc dh
call fcn.00843988
push ebp
movzx ebp, cl
dec esp
lea edi, [ecx*8 - 0x54fed4]
dec esi
lea ecx, [ecx + edi*2 - 0xfddf2ea]
inc edx
xor dword [esp + esi - 0x7934b018], edx
pop ebp
inc ecx
not esi
inc ecx
sal edi, 0xf4
inc ecx
not ah
dec eax
arpl dx, dx
dec esp
adc ebx, edx
inc cx
or ecx, edi
dec ebp
mov edx, dword [edx + ecx + 0x75c0aeb1]
inc bp
or esp, esp
jge 0xcb8bbb
jl fcn.00c25987
inc edx
mov dword [esp], 0x1f24e887
not edx
ror byte [esp + 3], 0xa5
xor ebx, edx
inc byte [esp + 6]
call fcn.00d075de
movsx edi, word [esp + edx*2 - 0x137]
inc bp
mov dword [edx + edx*8 - 0x4e8], esp
inc esp
movzx esp, cl
inc ecx
pop esp
inc eax
xor bh, 0x97
inc ebp
mov ecx, dword [ebp + edx - 0x9d]
inc ebp
mov esi, edi
dec ebp
lea ebp, [ebp + edx*4 - 0x270]
dec eax
lea esi, [edx*2 + 0x3a3c9bad]
dec eax
btc edx, edx
inc cx
btr esp, 0x8b
inc esp
xor ecx, ebp
inc ecx
shl eax, 0xe3
sub ecx, 0x310e6794
inc ecx
sbb ecx, 0xa1ab562d
bt eax, 0x17
inc ecx
movzx ebx, sp
inc ecx
ror ecx, 1
inc ecx
bswap ecx
inc ecx
ror ecx, 1
inc cx
ror edi, 0x28
jb 0x8fe62e

Function at 0x89e0ac
Capabilities:
Encrypt data using speck

Disassembly:
adc ebp, 4
xor edx, edx
mov dword [esp], 0x4f3f38bd
test ecx, ecx
jmp 0x82b697
jle 0x72688f
push ebx
mov ebx, 0xecb2a834
shr bx, 0x81
movzx ebx, byte [eax]
call fcn.008e974d
Function at 0x8a0d1f
Capabilities:
Execute syscall

Disassembly:
mov eax, 0x2b2c08ad
movzx ecx, ax
not edx
inc cx
mov dword [eax + ebp - 0x2b2c08ad], edx
mov edx, ecx
btr ecx, 0x38
mul ecx
lea edi, [ecx + edi - 0x8b2]
mov edx, dword [edi + ecx*2 - 0x115c]
add ax, ax
xor edx, ebx
xor edx, 0x4119f129
and al, ch
rol edx, 1
push ecx
lea eax, [eax + ecx*4 + 0x252f312e]
sal ecx, cl
dec edx
xor edx, 0x7906b1a3
xor ebx, edx
or cx, cx
and ax, word [esp + ecx*2 - 0x456ffff]
rol cl, 0xc1
adc esi, edx
shl ax, 0xab
mov dword [esp + ecx*2 - 0x4570000], esi
ret
add dl, 1
or dx, 0xfa1a
adc esi, eax
rol dx, 0xe9
sar edx, 0x10
mov word [esp + edx*2 + 1], dx
mov dword [esp + edx*2], esi
ret
neg edx
adc esi, 0
xor cl, bl
xor cl, 0x22
inc edx
jnp 0x85bf1e
push 0x8122a339
lea esp, [esp + 8]
je 0x765949
call fcn.00cd1eb1
int 0x2e
call fcn.007b8b8b
add ebp, edx
rol cl, 0x24
mov ecx, dword [eax + esi - 0x24a8b7d4]
mov eax, dword [eax + esi - 0x24a8b7d0]
call fcn.008b8f29
and dword [edi + 0x14f49516], 0xffffff83
cmpsb byte [esi], byte es:[edi]
ret 0xa99
call fcn.008993ec
mov eax, dword [ebp]
jmp 0x89452a
add cl, 0x31
btr edx, edx
sbb edx, 0xcbe2d9b
ror cl, 1
xor edx, edx
btc dx, dx
push edx
sbb cl, 0x95
xor bl, cl
add dl, dh
lea ecx, [esp + ecx + 4]
rol dword [esp + edx*8 - 8], 0xaa
sbb dx, 0x110e
mov dword [ecx + edx - 0xeef3], eax
mov ecx, dword [esi + edx - 0xeef3]
lea esi, [edx + esi - 0xeeef]
sar dword [esp + edx - 0xeef3], 0x19
push edx
ror dl, 2
xor ecx, ebx
xchg dword [esp + edx - 0xeef8], edx
movzx eax, dx
ror eax, 0x91
neg ecx
dec edx
sal edx, 1
rol ax, 0x8e
ror ecx, 1
xor word [esp + eax + 1], dx
lea ecx, [edx + ecx - 0x5376fada]
btc edx, 8
and edx, eax
not ecx
cdq
xor ebx, ecx
sal word [esp + edx*2 + 2], 0x82
cwde
sub edx, 0xc4b774a2
add ebp, ecx
shr byte [esp + edx*2 - 0x769116b8], 0xc1
rol dx, 0x43
mov dword [esp + edx - 0x3b485af4], ebp
ret 4
call fcn.008468f3
jmp 0x843672
shr dword [esp + 8], 0xfa
mov dword [ebp - 4], eax
jns 0xce88fd
jmp 0xc32b5c
rol word [esp + 1], 0x6a
mov dword [esp], eax
jb 0x87e66f
mov eax, dword [ebp]
add ebp, 4
mov ecx, 0xba9fc613
movzx edx, cx
sub dx, cx
push eax
popfd
movsx eax, cx
btc cx, cx
lea edi, [edx + edi - 4]
sal dx, 0x8b
mov eax, dword [edx + edi]
lea ecx, [ecx*8 + 0x202a56bf]
dec cx
xor eax, ebx
dec cx
btr edx, 0xb3
shl edx, 0x70
dec eax
push ecx
sal dl, 0x85
ror eax, 2
shl ecx, cl
rol dword [esp + edx], 0xe7
rol dl, 0xe7
neg eax
xor byte [esp + edx*4 + 1], dh
xor eax, 0x140a8689
btr ecx, 0xa0
shl byte [esp + edx], 0x45
xor ebx, eax
jmp 0x775102
lea esi, [esi + eax - 0x64a19137]
call fcn.007e49ae
mov edx, 0x24b17b31
mov eax, edx
mov ecx, eax
mov eax, dword [edi + eax*2 - 0x4962f662]
sub cx, dx
lea edi, [ecx + edi - 0x24b0fffc]
dec cl
bt ecx, ecx
sar edx, 0x3a
movzx ecx, byte [esi + edx*8 - 0x48]
jae 0x82b683
dec cl
mov dword [esp + ecx - 0xc2b3b12], esi
ret
push 0xdb3b4fa3
push 0xe70e0ab8
test ebx, ebx
push 0xd21a8132
push 0x97a735a9
lea esp, [esp + 0x1c]
je 0x846903
mov eax, 0xaf33f53e
mov eax, dword [ebp + ebx*4]
push 0xb80bea97
jmp 0x8b69fa
Function at 0x8a15a7
Capabilities:
Encrypt data using speck

Disassembly:
inc ecx
sal esi, 0x5d
inc ecx
xor ecx, 0xa8afa69f
inc dx
neg dword [esp + edi*2 - 0x3ff0]
cwd
dec edx
mov dword [esp + edi - 0x1ff7], ebp
inc edx
not dword [esp + edi*2 - 0x3ffa]
dec ecx
lea ebx, [esi + eax - 0x1bf341c4]
call fcn.007854b9
push 0xbb11e82e
inc ecx
mov ecx, 0xdf819117
and dl, bl
dec edx
lea esi, [ecx*8 + 0x43256a31]
inc esp
mov edi, dword [esp + 3]
not dl
mov ecx, esi
dec esp
lea esp, [esi + ecx*2 + 0x4635020c]
inc cx
mov dword [edx + ecx - 0x3f31f2e9], edx
inc cx
ror ecx, 0x87
sbb dword [esp + ecx - 0x3f31f2e7], 0xedac370e
inc ecx
shr edi, 0x93
inc edi
mov ecx, dword [edi + ebp - 0x1fff]
inc ecx
pop esp
dec esi
mov dword [esp + edi - 0x1fff], edi
inc dx
dec dword [esp + edi*2 - 0x3ffb]
dec edi
lea ebp, [edi + ebp - 0x1ffb]
inc ecx
push esp
inc bp
bt edi, edi
inc esi
xor dword [esp + edi*4 - 0x7ff2], edi
inc esp
xor ecx, ebp
mov eax, 0xf4995d0b
inc edx
dec dword [esp + edi - 0x1ff8]
inc ecx
sub ecx, 0xa1ab562d
inc sp
btc eax, esp
inc ebp
mov eax, edi
inc bp
sbb eax, edi
inc ecx
ror ecx, 1
inc esp
movsx esi, cl
mov edi, 0x7e8e4418
mul eax
inc ecx
bswap ecx
jb 0x8fd928
cbw
inc ecx
ror ecx, 1
inc dx
or eax, dword [esp + edi - 0x1ffa]
js 0x85c662
mov ecx, 0x142e781f
inc ecx
mov dword [edx + ecx*4 - 0x50b9e07c], eax
jns 0xc8dfca

Function at 0x8b1182
Capabilities:
Encrypt data using speck

Disassembly:
add dh, dh
rol dword [eax - 0x183ee63b], 1
add al, 0xd3
stc
call fcn.00c44185
call fcn.008c350f
jle 0x8b1122
invalid

Function at 0x8cc940
Capabilities:
Execute syscall

Disassembly:
lea esp, [esp + 0x14]
je 0xc1ba23
push edi

Function at 0x8cca92
Capabilities:
Encrypt data using speck

Disassembly:
rol byte [esp + ecx*8 - 0x2ffffc07], cl
mov dword [esp + ecx - 0x5ffff82], ecx
add ebp, edx
movzx edx, al
and dx, cx
cwde
pop eax
pop ecx
pop ecx
pop ecx
jno fcn.00d2e0bc
Function at 0x8d684e
Capabilities:
Authenticate hmac

Disassembly:
inc bp
and esi, eax
jle 0x86e86c
xor bp, ax
inc si
xadd dword [esp + esi*2 - 0x400001d], edi
inc ecx
movsx esi, ax
dec eax
lea eax, [esp + eax + 0x10]
sbb ebx, esi
inc edx
ror dword [esp + esi - 0x200000d], 0xf9
inc esi
mov dword [eax + esi*2 - 0x400002a], ecx
inc bp
and edi, eax
inc edi
mov ecx, dword [ebp + esi*2 - 0x400002a]
inc edx
mov dword [esp + esi - 0x200000f], 0xc0398424
dec edi
lea ebp, [ebp + esi*2 - 0x4000026]
inc ecx
push eax
inc esp
xor ecx, ebp
dec eax
or edi, 0xf8b00e0d
inc ecx
btc eax, 0x9d
dec esp
lea edi, [esi*4 - 0x576656ff]
inc ecx
rol ecx, 3
inc ecx
inc ecx
inc ecx
sub eax, 0x9d2f2f95
dec ebp
lea esp, [esi - 0x746f337c]
inc ecx
bswap ecx
inc ecx
sal eax, 0x9e
neg edi
inc ecx
not ecx
imul dx, bx
call fcn.00cca10b
dec edx
sub dword [esp + ecx - 0xb25ce2a], 0x4baa1db5
inc edx
and byte [esp + ecx - 0xb25ce30], bl
dec edx
mov ebp, dword [esp + ecx - 0xb25ce21]
inc ecx
add eax, 0x9c1a1582
inc ecx
movzx eax, sp
dec eax
arpl cx, cx
pop ebx
dec esp
adc ebx, ecx
inc eax
movsx edi, dh
dec esi
mov dword [esp + ecx - 0xb25ce31], ebx
ret 8
call fcn.008e37bd
sar ecx, 0xd0
sub ecx, dword [esp + ecx*8 + 4]
ror eax, 1
shl dl, 0x41
lea eax, [edx + eax - 0x45d5f217]
adc edx, edx
neg eax
neg word [esp + ecx - 0x607505db]
sbb eax, 0xce9e5ca3
rol dx, 0x61
mov dword [esp + ecx - 0x607505df], 0x9fa5859a
xor ebx, eax
sar ecx, cl
add ebp, eax
mov ax, word [esi + ecx*8]
rol word [esp + ecx*4 + 5], 0xef
jb 0xce1cba
mov dx, word [esi + ecx + 2]
bswap ecx
lea esi, [ecx + esi + 2]
jae 0x88d189
sub cl, al
xor edx, ebx
call fcn.008b7a7e
mov ebp, 0x45b18ea4
lea edx, [ebp*8 - 0x7858b044]
mov esp, esi
mov eax, 0x3588e320
xor dl, dl
cdq
pop ecx
jbe 0xc37085
mov eax, 0xd50598b2
inc esp
movzx esi, al
inc esp
mov ecx, eax
inc edi
mov ecx, dword [edx + esi*2 - 0x164]
jmp 0xcb57ae
pop edi
movsx esi, dx
sal dl, 0x83
pop eax
btc bp, si
pop edx
mov ebx, 0x2e0ad89f
btc si, si
pop ebp
ror si, 0x4f
sal si, 0xc1
jo 0xc3e4bd
popfd
bswap esi
call fcn.00c12b65
jmp 0xd1ac29
movzx ebx, ax
dec edi
lea edx, [edx + esi*8 - 0x58c]
inc esp
mov edi, ebx
inc ebx
movzx eax, word [ebp + esi*4 - 0x2c8]
inc ecx
mov eax, 0xf30aff95
inc ebp
sub dh, al
dec edi
lea ebp, [ebp + esi*4 - 0x72]
inc ecx
push edi
dec ecx
lea edi, [edi + 0x2d31612f]
xor ax, bp
inc edx
shr byte [esp + esi - 0x16], 0xc7
not ax
inc edx
xchg byte [esp + esi - 0x1b], bh
inc ecx
movsx edx, bh
inc ecx
bts esi, 0xb9
neg ax
rol ax, 1
push edx
dec eax
shr edi, 2
xor ax, 0xcc8f
jmp 0x76fb61

Function at 0x8e24b1
Capabilities:
Encrypt data using speck

Disassembly:
mov dword [esp + 4], 0x8bb36a09
lea esp, [esp + 4]
call fcn.007a92df