joyce8/EMBER2024-capa huggingface dataset:
Function at 0x558dbd
Capabilities:
Encrypt data using speck

Disassembly:
dec esi
mov dword [esp - 0x3b07], esi
inc esi
xor dword [esp - 0x1d830], edi
inc edx
neg byte [esp - 0x3b02]
inc ecx
shl esp, 0xe5
dec esp
mov ecx, dword [esp + ebx*8 - 0x3e198]
mov edx, 0x96b2061e
jbe 0x6e6dad
inc si
and dword [esp - 0x3b06fe], esi
dec ebp
arpl di, di
call fcn.00712e81
inc eax
inc ch
inc esp
xor cl, ch
dec eax
lea ebp, [esp + ebp + 0x18]

Function at 0x55aeb2
Capabilities:
Encrypt data using speck

Disassembly:
shl byte [esp + eax - 0x673adff8], 0x61
lea esi, [eax + esi - 0x673ae001]
setl dl
adc edx, eax
movzx edx, byte [esi + eax - 0x673ae000]
call fcn.00616f6b
syscall
inc ecx
push edx
pushfd
dec ecx
mov edx, 0x2939f52a
add dword [ebp + 0x10], edx
insb byte es:[edi], dx
inc cx
not edx
dec esp
mov edx, dword [esp + 8]
dec eax
mov dword [esp + 8], 0x122693c7
push dword [esp]
popfd
dec eax
lea esp, [esp + 8]
call fcn.00735f71

Function at 0x55af03
Capabilities:
Encrypt data using speck

Disassembly:
dec esp
mov ecx, dword [esp + eax - 0x3581]
sar bx, 0x41
je 0x648609
dec ebp
arpl di, di
dec esp
mov dword [esp + eax - 0x3599], ebp
dec ecx
adc edi, edi
shr al, 0x41
inc si
movzx edi, byte [eax + ebx - 0x354e]
inc edx
mov bl, byte [eax + ebx - 0x354c]
inc edx
add dword [esp + eax*2 + 8], eax
dec eax
mov dword [esp + eax*2 - 0x6a80], eax
rol word [esp + eax*2 - 0x6a7a], 0xe5
inc ecx
not bh
not bl
mov esi, 0x2093903
inc esp
and bh, bl
inc si
mov dword [eax + ebx - 0x354c], edi
dec eax
mov dword [esp + eax - 0x354c], edi
ret 0x18
inc esi
mov edi, dword [eax + edx - 0x4f1c]
dec esp
lea esi, [eax + 0x702314a7]
movzx edx, cl
inc ebp
xor edi, ecx
dec eax
lea esi, [edx + eax - 0x6d51b7d9]
push edx
not dword [esp + eax*2 - 0x9e36]
inc ecx
not edi
call fcn.006baaa0
dec eax
lea ecx, [ebx*4 + 0x648a74a2]
inc ecx
dec ebp
inc ecx
not ebp
dec ebp
lea esp, [edi + ebp*4 - 0x46e0265e]
dec esp
mov dword [esp + ebx*2 - 0x51357f8], ecx
inc esp
xor dword [esp + ebx - 0x289abf4], ebp
sal byte [esp + ebx*4 - 0xa26b006], 0x41
dec esp
mov ecx, dword [esp + ebx - 0x289abf4]
call fcn.0064cf82
jle 0x647435
mov ecx, 0xcd1f4f1c
dec ecx
sub edx, 4
movzx eax, cx
jmp 0x63a08c

Function at 0x55af6f
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
inc dl
and al, 0xab
mov dword [esp + ecx - 0x7b3600a0], eax
not dl
push ecx
rol dl, 1
xchg dword [esp + ecx - 0x7b3600a0], ecx
shr cl, 0x21
add ax, cx
inc dl
shl ecx, cl
xor bl, dl
call fcn.006f5b80
dec ecx
sub edx, 4
call fcn.006f0067
mov eax, dword [esp + 0xc]
call fcn.00711c9d
Function at 0x562173
Capabilities:
Encrypt data using speck

Disassembly:
pop eax
inc ecx
not esi
inc esp
movzx eax, ch
sbb bp, dx
jnp 0x7349a6
inc esp
xadd bl, ch
inc ecx
pop ecx
inc ecx
dec ebp
dec ebp
arpl si, si
dec ecx
adc edi, esi
inc ecx
mov eax, ebp
inc cx
and edx, ebp
dec eax
not ebx
dec esi
mov eax, dword [ecx + ebx + 0x375599aa]
inc esp
mov edi, eax
call fcn.006d6ef7
in al, 0xb7
cmp eax, 0xe491e929
dec eax
outsd dx, dword [esi]
xlatb
popfd
insd dword es:[edi], dx
add byte [ebp + edi*4 + 0x14a981d6], ch
lodsb al, byte [esi]
mov ebp, 0x44b9c9d6
lodsb al, byte [esi]
mov ebp, 0x4e165d6
lodsb al, byte [esi]
mov ebp, 0xf812e1d6
ja 0x709458
outsb dx, byte [esi]
loopne 0x7094e4
push ecx
invalid
dec ebx
cmpsd dword [esi], dword es:[edi]
pop edi
fst dword [edi - 0x1e83cb2a]
lodsd eax, dword [esi]
mov ebp, 0xd16cffd6
lodsd eax, dword [esi]
mov ebp, 0xcd383cd6
lodsd eax, dword [esi]
mov ebp, 0xfd187cd6
lodsd eax, dword [esi]
mov ebp, 0x250c04d6
stosb byte es:[edi], al
mov dword [0x50f6e06e], eax
invalid
inc ecx
bswap esi
dec eax
lea ebx, [ecx*2 + 0x281d5914]
sub bx, 0xd79e
inc ecx
push ecx
inc esp
xor dword [esp + ecx + 0x375599aa], esi
dec edx
jle 0x709466
inc ecx
mov edi, 0xcb10ec86
inc ecx
mov ebp, 0xd617e02a
inc ebp
mov esp, dword [edx - 4]
inc ebp
xor esp, ecx
call fcn.006be3b6

Function at 0x562184
Capabilities:
Encrypt data using speck

Disassembly:
add cx, 0xc308
xor bx, cx
neg al
mov word [edi + edx*2 - 0x8bd8], cx
setl dl
movsx ecx, al
mov eax, dword [esi + edx - 0x4506]
xor eax, ebx
ror eax, 3
call fcn.00560046

Function at 0x5632cd
Capabilities:
Encrypt data using speck

Disassembly:
call fcn.006bb558
call fcn.005ed70a

Function at 0x5632d7
Capabilities:
Encrypt data using speck

Disassembly:
shr ecx, cl
xor ebx, eax
xor dx, cx
adc ebp, eax
push edx
mov eax, dword [edi + ecx - 0x19a]
sar dword [esp + ecx*2 - 0x32c], cl
mov cl, byte [ecx + edi - 0x196]
mov dword [esp + edx*2 - 0x4cbcfe02], edx
lea edi, [edi + edx - 0x265e7f01]
shr eax, cl
mov byte [esp + edx - 0x265e7f01], dh
xor dl, dh
mov dword [edi + edx - 0x265e7f7c], eax
call fcn.0071f2d2

Function at 0x569394
Capabilities:
Encrypt data using speck

Disassembly:
inc ebp
mov eax, esi
dec edx
mov dword [esp - 0x6e3dca8b], ecx
inc ecx
sbb al, dh
jmp 0x55892e

Function at 0x5e77b1
Capabilities:
Encrypt data using speck

Disassembly:
bswap ecx
dec eax
mov dword [esp + esi*2 - 0x2a6f6400], 0xa61d3383
inc al
inc ecx
pop ebp
dec ebx
lea eax, [esp + 0x708e4d0f]
inc ecx
push ecx
inc esp
movsx esi, si
xor dword [esp + esi - 0x1537b200], ecx
movsx edx, si
inc eax
dec dh
inc ecx
pop ecx
inc esp
mov edi, ebp
dec eax
arpl cx, cx
mov ebx, ebp
cmovg ax, bx
js 0x63cbd3
stc
cmp esi, 0xf8e4e17
dec eax
add edi, ecx
call fcn.007174f3

Function at 0x5eaa1e
Capabilities:
Encrypt data using speck

Disassembly:
dec ebx
mov eax, dword [ebx]
dec edx
adc dword [esp + 8], 0x2ab6f0bd
dec edx
lea ebp, [ecx + eax + 0x4eb60aa1]
dec ebx
mov ebp, dword [ebx + 8]
call fcn.00640628
Function at 0x5eca22
Capabilities:
Encrypt data using speck

Disassembly:
dec edx
mov dword [esp + edi*8 - 0x3f838], 0x2c183320
inc eax
movzx ecx, dh
not edx
inc ecx
pop edi
movzx eax, cx
dec eax
lea ebp, [esi + 0x1b1ce0ad]
dec edx
jmp 0x616388

Function at 0x5ee307
Capabilities:
Encrypt data using speck

Disassembly:
add ebp, eax
lea esp, [esp + 0xc]
jmp 0x61aeaa

Function at 0x5f2185
Capabilities:
Encrypt data using speck

Disassembly:
shr ebx, 0x5e
dec esp
mov dword [esp + ebx + 5], ecx
dec edx
mov dword [esp + edi - 0xe], ebx
dec ecx
sbb esi, 0x66adff33
xor dword [esp + ebx + 5], eax
dec ecx
neg esi
inc ecx
bswap ebp
inc ecx
neg esi
dec esi
mov ecx, dword [esp + ebp - 0xe1358b3]
ja 0x6d6fca
dec eax
arpl ax, ax
inc ecx
dec esp
inc ebp
sub eax, eax
inc edx
movsx ebp, word [esp + eax + 3]
dec eax
adc edi, eax
dec edx
and dword [esp + eax*2], 0xff2f1489
dec edi
add eax, dword [edx + eax - 0xc]
inc ebp
xadd ch, ah
inc bp
sub esp, esp
dec edx
mov dword [esp + ebp - 0xe1358b9], 0x9e0c87b1
dec edi
lea edx, [edx + ebp - 0xe1358cd]
dec ebp
xor eax, ecx
dec ecx
dec eax
dec eax
lea ebx, [ebp*8 + 0x3036fb2e]
inc ecx
pop esi
dec ecx
neg eax
inc dx
ror dword [esp + ebp - 0xe1358c1], 0x41
inc cx
dec esp
dec ebp
add eax, esi
inc eax
movsx eax, ch
inc dx
shl dword [esp + ebp - 0xe1358bb], 0x2e
dec ecx
xor eax, 0x45227f07
inc ecx
xor ah, 0x28
inc ecx
inc dh
dec ecx
dec eax
dec ecx
neg eax
inc edx
movsx esi, byte [esp + ebp*8 - 0x709ac608]
dec edx
ror dword [esp + ebp*4 - 0x384d6304], 0xa1
dec ecx
ror eax, 1
inc edx
not byte [esp + ebp*8 - 0x709ac608]
call fcn.0074215c

Function at 0x5f42fc
Capabilities:
Encrypt data using speck

Disassembly:
inc eax
rol dh, 1
dec edx
mov dword [esp + edi*2 - 0x8000], ebp
dec edx
mov dword [esp + edi - 0x3ff0], ebp
dec esi
sub ebp, dword [esp + edi*4 - 0xffe3]
inc eax
not dh
shr dx, 0x6e
inc eax
sbb dh, dl
dec eax
add ebp, 0x98319b21
inc esp
xor cl, dh
sub al, 0x18
add ax, 0x6e1b
inc edx
sar dword [esp - 0x7ffa], 6
dec eax
lea esi, [esp + esi + 0x30]
shr ax, 0x22
dec ebp
mov esp, dword [edi + esi - 0x4000]
dec edi
mov dword [ebx + edi*8 - 0x20006], esp
ror bx, 0x4f
dec edi
lea ebx, [ebx + edi*2 - 0x8006]
jne 0x642c5a
Function at 0x5f4365
Capabilities:
Encrypt data using speck

Disassembly:
and cx, ax
add cl, byte [edx + ecx - 0x80000000]
mov edx, 0x1491ff87
and edx, 0xd48825b4
and eax, 0x92986119
lea edi, [edi + eax*4 - 0x4a618402]
js 0x6241da
mov dword [esp + eax - 0x12986100], 0x5d19aa92
mov word [edi + eax*4 - 0x4a618400], cx
movsx ecx, dl
jl 0x6f9454
lea esi, [esi + edx*2 - 0x29004b0c]
mov dword [esp + eax - 0x129860fc], ecx
sal ecx, cl
mov ecx, dword [eax + esi - 0x12986100]
xchg dl, al
or dl, dh
setae al
xor ecx, ebx
call fcn.007044e1
inc ecx
mov eax, 0x200479bd
dec edi
lea edx, [edx + eax - 0x200479c1]
dec ebx
lea edx, [eax + eax + 0x403c238e]
inc ebx
mov ebx, dword [edx + eax*2 - 0x4008f37a]
dec ebp
lea esp, [eax + edx*2 - 0x3ae784c4]
inc ebp
movsx esi, ah
jmp 0x712e96
mov ecx, dword [edi + ecx*4 - 0x6cc936bc]
jmp 0x713224
ror ebx, 1
dec ebx
xor ebx, 0x79a3c80d
inc bp
add esp, eax
inc ecx
push esp
rol ebx, 1
dec edx
shl dword [esp + eax - 0x200479bd], 0x7a
dec esi
mov dword [esp + eax*2 - 0x4008f37a], ecx
call fcn.0072367b
inc ecx
xor ebx, ecx
add dl, 0xb2
inc ecx
movzx eax, ax
dec ebx
jmp 0x6be72a
mov eax, 0x7d092906
mov edx, dword [edi + eax - 0x7d092902]
add eax, eax
call fcn.006bac06

Function at 0x5f95f2
Capabilities:
Encrypt data using speck

Disassembly:
dec eax
sar ebx, cl
mov dword [ebx + eax], ebp
inc edx
mov ecx, dword [ebx + edx - 5]
inc ecx
not bh
inc ecx
xadd ah, dl
inc ecx
sal esi, 0xae
inc ecx
xor ecx, ecx
dec eax
mov dword [esp + ebx], 0x3cbd0324
bswap ecx
rol ecx, 3
dec eax
add dword [esp + ebx + 7], edx
xor ecx, 0xab82de1c
movsx ebp, byte [esp + ebx*8 + 4]
neg ecx
dec ecx
add ebp, 0xc494a880
inc ecx
inc ecx
mov eax, ebp
inc cx
sal ebp, 0x22
dec esp
mov dword [esp + ebx + 8], ecx
inc dx
ror dword [esp - 0x107], 0xed
dec ecx
xadd esi, esi
xor dword [esp + ebx + 8], ecx
dec dword [esp + ebx*2 + 4]
inc esp
xchg dword [esp + ebx], esp
dec esp
mov ecx, dword [esp + ebx + 8]
dec esp
mov dword [esp + ebx*4 + 8], esp
dec eax
arpl cx, cx
inc ecx
sal al, 5
dec eax
adc edi, ecx
inc ecx
dec bh
dec edx
sub dword [esp - 0x3ce81d24], 0x3904e1a9
add bl, 0x87
dec ecx
mov ebx, dword [ebx + ebx*2 - 0x10a]
inc edx
mov dword [esp - 0x79d03a44], eax
inc ecx
neg dh
dec ecx
or ebp, dword [ebx + edx*4 - 0x14]
dec eax
shl eax, 0x78
inc esp
adc dword [esp + edx - 4], edi
inc esi
sbb edi, dword [esp - 0x3ce81d19]
dec eax
mov dword [edx + ebx - 8], ebp
dec ecx
ror eax, 0xf3
inc ecx
push edi
inc edi
movzx esi, byte [edx - 0x3ce81d2a]
inc edx
ror dword [esp - 0x3ce81d11], 0x37
dec edi
lea edx, [edx - 0x79d03a4e]
inc cx
rol ebp, 5
neg word [esp + edx + 6]
inc ebp
xor dh, cl
inc ecx
sub dh, 0x3c
inc esp
or ch, dl
inc dx
xchg dword [esp - 0x79d03a44], eax
dec edx
neg dword [esp - 0x3ce81d17]
inc ecx
neg dh
call fcn.00733430
Function at 0x5fa634
Capabilities:
Encrypt data using speck

Disassembly:
dec eax
mov dword [esp + esi*2 - 0x1fffe], edx
ror ebp, 3
sub word [esp + esi - 0xfffe], 0xc602
dec esi
lea eax, [esi + ebp*2 + 0x1e961c80]
lea ebp, [ebx + ebp + 0x3112a280]
inc esp
sbb edi, dword [esp + edx + 0x5a88692b]
neg ebp
sal eax, 0x34
pop ebx
not ebp
ror cl, 0x22
inc ecx
push ecx
call fcn.006f5841
call fcn.0055ca01
inc ebx
mov ebp, dword [edx - 0x40c]
inc cx
ror esp, 0xed
dec edi
lea edx, [edx - 0x814]
inc eax
movsx ebx, dh
inc ecx
xor ebp, ecx
inc ecx
movzx ecx, sp
inc esp
movzx ebp, si
neg ebp
dec ecx
rol eax, cl
inc cx
xadd eax, ebx
not ebp
rol ebp, 1
sal esi, cl
ror si, 0xcd
shr ebx, cl
lea ebp, [ebp + esi*2 - 0x5425c0e4]
inc ecx
shl esp, cl
inc ecx
push ecx
inc edx
xor dword [esp - 0x81000], ebp
inc sp
xchg ebx, esp
inc ecx
shl al, 4
inc ecx
pop ecx
dec eax
arpl bp, bp
dec eax
ror ecx, 0x4a
sal esi, 0x6d
dec eax
add edi, ebp
inc esp
and ah, bl
ror bx, 0x27
inc si
movzx edi, byte [esi + ebx - 0x75007ffa]
inc ecx
mov ch, byte [ebx + esi - 0x75007ff8]
mov eax, esi
inc esp
and bh, ch
ror bx, cl
inc ecx
movzx ebp, al
jno 0x74059c
inc ecx
not bh
inc ecx
add ah, 0x15
neg cx
inc di
mov dword [ebx - 0x4ff0d], edi
dec esp
lea esi, [eax + ebp*2 - 0x4e528ccd]
dec ebp
lea ebx, [ebx + esi - 0x75007ff8]
jmp edi

Function at 0x5fa78d
Capabilities:
Encode data using xor

Disassembly:
inc ecx
not esp
inc ecx
pop esi
inc ecx
rol al, 1
inc esp
mov esi, edx
ror word [esp + edx*2 - 0x1121], 0xc3
pop esi
inc ecx
not al
jae 0x64be4b
mov ebp, 0x91ba811d
inc eax
movsx ecx, ch
dec ebp
lea edx, [edx + ecx - 0x21]
call fcn.006d5ef0
dec ecx
mov eax, dword [ebx]
inc ecx
mov ebp, 0x6f8a100c
dec edi
mov esp, dword [ebx + ebp - 0x6f8a1004]
inc ebx
mov cl, byte [ebx + ebp - 0x6f8a0ffc]
inc ebp
movsx edi, ch
inc ebp
movzx eax, di
inc cx
dec ebp
dec edi
lea ebx, [edi + ebx - 2]
dec esp
shrd eax, esp, cl
inc ebp
mov esp, edi
inc ecx
push eax
inc ebp
or al, bh
dec ebx
mov dword [ebp + ebx - 0x6f8a100b], eax
inc cx
shr edi, 0x6e
dec edx
lea ecx, [0xe423829d]
dec esp
xadd ecx, ebp
dec edi
lea edx, [edx + ebp*2 + 0x37b8fa92]
inc edi
mov ebp, dword [edx + ebp*2 + 0x37b8fa96]
inc edx
movzx edx, byte [esp + edi + 1]
inc ebp
xor ebp, ecx
inc ecx
xor ebp, 0x3b13eaae
inc ecx
rol ebp, 3
inc dx
add dword [esp + edi + 4], 0xff41f61a
lds eax, [ecx - 0x3f]
call 0x41bbe9e4
rol ebp, 2
inc ecx
dec ebp
call fcn.00611167
inc ecx
dec al
call fcn.00644361

Function at 0x5febaa
Capabilities:
Encrypt data using speck

Disassembly:
adc ebp, edx
jmp 0x6e62d8
mov eax, 0xfc9ea696
inc edx
not edx
sal ax, 0x28
shr eax, 0xee
inc edx
neg edx
mov dword [esp + eax - 0x3f27a], eax
pop ecx
rol al, 0xc3
xor ebx, edx
lea eax, [eax + eax*2 + 0x3029b6a2]
shr eax, cl
ja 0x5f6be5
dec ecx
pop ecx
pop edx
jnp fcn.00566baa
Function at 0x5ffe9b
Capabilities:
Encrypt data using speck

Disassembly:
inc ebp
xor al, cl
pop edx
inc sp
sub esp, dword [esp + ecx*4 - 0x24296]
inc ecx
sbb al, 0x3c
inc edx
sar byte [esp + ebp - 0x462fff8f], 1
inc ecx
neg al
xor ecx, 0xe01bdd8c
dec esp
lea edi, [ecx + ecx + 0x6c269f9e]
inc ecx
rol al, 1
inc ecx
not al
inc cx
sar ebp, cl
inc bp
sbb esi, ebp
inc ecx
dec al
call fcn.006cf4e0
mov ecx, 0xc90b8037
dec esp
lea eax, [ecx + ecx*2 - 0x1b603e6a]
dec eax
or ecx, ecx
inc ecx
movzx edx, byte [edx - 1]
inc ecx
dec eax
inc ebp
mov ebp, eax
inc ecx
mov esi, 0x9f3ebb32
inc ecx
xor dl, cl
dec esi
lea ebp, [ecx + eax - 0x7e7ec64d]
inc ecx
movzx eax, ax
neg dl
inc dl
ror dl, 1
dec ecx
rol ebp, cl
inc sp
xadd ecx, esi
inc ecx
neg esi
inc dl
inc esp
xor cl, dl
dec eax
add edx, esp
dec eax
lea ebx, [eax*8 + 0x3017a931]
inc ebp
mov esp, esi
inc si
movzx eax, byte [edx + eax*2 - 0x7f848474]
jmp 0x5f0aa0

Function at 0x6061d8
Capabilities:
Encrypt data using speck

Disassembly:
mov dword [esp], 0xe555bdeb
call fcn.006484d5

Function at 0x609cc4
Capabilities:
Encode data using base64

Disassembly:
call fcn.006ddbfe
mov ecx, 0x65bf9597
mov eax, dword [edi + ecx - 0x65bf9597]
mov ecx, dword ss:[eax + ecx - 0x65bf9597]
mov eax, ecx
mov ecx, 0x5cab3318
lea edx, [ecx*4 - 0x2957fb7a]
mov edx, dword [edi + edx - 0x4954d0e2]
shl cl, 0x81
call fcn.005ef988

Function at 0x611409
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
sar ecx, 0x54
mov dword [esp + ecx*2], eax
lea edx, [edx + eax*2 - 0x28f08e6c]
neg edx
jmp 0x6229cd
ror edx, 1
sal dword [esp + eax*2 - 0x3d760002], 0x1b
xor ebx, edx
shl ax, 0x67
push ecx
adc ebp, edx
push ecx
mov eax, edi
and dword [esp + ecx*2 + 3], ecx
lea edi, [edi + ecx*4 - 4]
rol ecx, 0x6c
sbb cl, cl
not byte [esp + ecx*8 + 0xb]
mov dword [edi + ecx], eax
jbe 0x733c7d
mov word [edi], cx
mov ecx, dword [esp]
mov dword [esp + ecx - 0x5c100032], ebp
ret
pop edx
pop ecx
pop edx
jns fcn.00566baa
jmp 0x6d7f53
Function at 0x611e27
Capabilities:
Encrypt data using speck

Disassembly:
lea edx, [edx*4 - 0x6c43e869]
movzx eax, dx
push ebp
push ebx
jge 0x6e087a
mov eax, 0x791cfe1a
lea esi, [eax + esi - 0x791cfe1e]
mov ecx, 0x5a447b3
or eax, ecx
mov eax, dword [ecx + esi - 0x5a447b3]
call fcn.006fb867
call fcn.0061fef7
mov edx, 0xd6a45895
shr dx, 0x25
push edx
mov eax, dword [esi - 4]
movsx ecx, dx
xor eax, ebx
xor eax, 0x84b95621
add edx, dword [esp + ecx - 0x2c4]
jl 0x64daca
mov word [edi - 4], dx
adc edi, 0xfffffffc
mov edx, dword [esi - 6]
shr dword [esp + 4], 0xb
sub esi, 6
pop eax
add eax, 0x72264
jmp eax
dec esp
mov dword [esp + edx*4 - 0x13290], ecx
call fcn.006d9687
xor eax, ebx
xor cl, 0xb3
setnp dl
not eax
shl edx, 0x1c
neg eax
inc ecx
sub edx, edx
xor eax, 0xe4361fbf
rol eax, 2
jmp 0x5fe683
not eax
and ecx, 0x72af4398
sub ecx, ecx
ror eax, 2
xadd byte [esp + ecx*2 + 3], dl
and word [esp + ecx*8 + 2], cx
adc ecx, dword [esp + ecx]
bswap eax
call fcn.006d000f
push esi
jp 0x5f42cb
cld
add bl, ah
sbb dword [edi + 0x7cef6614], esp
jbe 0x64db29
mov eax, 0xa800500c
movzx ecx, al
movzx edx, ax
lea esi, [ecx + esi - 0x10]
dec ecx
call fcn.007468e5
mov ecx, 0xcab3cca7
inc esp
movzx edi, cl
inc ecx
mov eax, edi
dec ebx
mov edx, dword [ebx + edi*4 - 0x29c]
inc ebx
mov cl, byte [ebx + edi*4 - 0x294]
mov ebx, 0xfffffd6c
dec eax
shr edx, cl
inc ecx
mov esi, edi
inc esp
mov esp, eax
dec ebx
mov dword [ebx + edi*4 - 0x29a], edx
push esi
inc ecx
mov ebp, 0xaa0e2038
inc ecx
movsx ecx, di
inc ecx
mov esi, dword [edx + eax*2 - 0x152]
inc ecx
xor esi, ecx
dec esi
mov dword [esp + edi - 0xa7], ebp
inc cx
xchg esp, eax
mov ebp, 0x793442b8
dec esi
inc edx
rol dword [esp + edi - 0xa4], cl
call fcn.007347de
inc edi
mov dword [ebx + eax*2 - 0x70], edi
dec edx
mov dword [esp + eax - 0x38], edi
ret
mov ebp, edi
or edx, 0xef18498c
jg fcn.00704d70
mov ebx, ecx
mov edx, ebx
neg al
shl edx, 2
inc eax
mov eax, ebp
call fcn.005ea511

Function at 0x61390d
Capabilities:
Encrypt data using speck

Disassembly:
inc ebp
xor eax, ecx
inc cx
sub edi, 0x8d0f422b
or dword [ebx + 0xf], edx
add byte [ecx - 0x7f], al
lock sbb dword [edx], edi
test al, 0xcc
dec edx
add dword [esp + esi - 0x10], ebp
call fcn.005ea77c

Function at 0x61447e
Capabilities:
Encrypt data using speck

Disassembly:
dec ebp
sub esp, esp
inc eax
neg ch
inc cx
inc edi
inc eax
inc ch
call fcn.0071bd0a

Function at 0x616f29
Capabilities:
Encrypt data using speck

Disassembly:
inc edi
lea esp, [esp + edi + 0x1ed573fa]
dec eax
mov dword [esp + ecx - 0x2a9a1e33], edx
push ecx
inc ecx
not esp
inc ebp
movzx ebp, di
inc ecx
ror esp, 3
add cl, byte [esp + edx - 0x1e2c]
inc ecx
seto al
inc ecx
not esp
xor dword [esp + ecx - 0x2a9a1e2e], 0x562f0908
dec eax
sar dword [esp + edx - 0x1e33], cl
call fcn.0060f4ea
Function at 0x6198aa
Capabilities:
Encrypt data using speck

Disassembly:
dec ecx
add ebx, esp
dec edx
mov ebx, dword [ebp + edx - 0x34]
neg edx
dec ecx
xor ebx, ecx
dec eax
dec ebx
dec eax
neg ebx
inc ebp
mov esi, edi
dec eax
inc ebx
dec esi
lea edi, [esi*2 + 0x1c8ff32b]
dec eax
inc ebp
dec eax
xor ebx, 0x45227f07
sub dl, 0x15
add ax, 0x7a94
dec eax
dec ebx
inc cx
shr esp, 0x6a
call fcn.006e1619
push 0xa21a8ba5
pushfd
sub byte [esp + 4], 0xb4
mov dword [esp + 4], 0x1bff81a
add word [esp + 4], 0x6698
shl dword [esp + 4], 0xf0
mov dword [esp + 4], 0xa55657c9
push dword [esp]
popfd
lea esp, [esp + 4]
call fcn.006484d5

Function at 0x61991e
Capabilities:
Encrypt data using speck

Disassembly:
adc dx, 0xc308
and al, al
sal word [esp + ecx - 0x6b8effba], 0x62
xor bx, dx
jmp 0x73fab5
xchg ch, al
dec dx
sal ax, 0xed
rol dx, 1
mov dword [esp + ecx - 0x6b8effbb], eax
rol ax, 0xe8
jae 0x558dfd
mul ebp
lcall 0xc187, 0x3a22d6e0
ret

Function at 0x61d13c
Capabilities:
Encrypt data using speck

Disassembly:
dec edi
mov dword [eax + ebx - 0x823c], esi
inc ecx
push esp
inc edx
mov esi, dword [esp + eax*8 - 0x411dc]
dec eax
lea ebp, [esi*4 + 0x303c362a]
dec edi
lea edx, [edx + eax - 0x8240]
dec eax
lea ebx, [ebp*4 - 0x48e64a4c]
inc ecx
mov ecx, dword [edx + esi*2]
inc ecx
xor ecx, ecx
sub ecx, 0xd6b7dc15
inc eax
sal dh, 0xc2
dec esp
sbb eax, ebp
dec esi
mov dword [esp + eax + 0x303bb3f6], esp
neg ecx
call fcn.0063754f

Function at 0x61d724
Capabilities:
Encrypt data using speck

Disassembly:
inc edx
not byte [esp + 3]
call fcn.0073c618

Function at 0x61dfc8
Capabilities:
Encode data using xor

Disassembly:
inc esp
xor ah, cl
dec eax
neg dword [esp + ebp - 0xa21b]
neg edx
dec ecx
add ecx, esp
sal ecx, cl
lea edx, [edx + ebp + 0x471f48f7]
jne 0x60e49d
Function at 0x61e4d5
Capabilities:
Encrypt data using speck

Disassembly:
shr edx, 0xa1
sub cl, 0x14
not cl
inc dl
xor bl, cl
and edx, edx
lea ecx, [esp + ecx + 4]
shr edx, 2
mov byte [ecx], al
mov eax, dword [esi - 6]
add esi, 0xfffffffa
call fcn.006052ae
inc ecx
neg esp
inc ebp
mov esi, eax
inc ecx
dec esp
dec eax
inc dword [esp + ebp*2 - 0x78]
mov ecx, ebp
call fcn.00728916
dec eax
adc edi, esi
call fcn.007340d3
out dx, al
ror byte ss:[eax], cl
loope 0x61e537
cmp ch, dh
jle 0x61e555
js 0x61e510
out 0x7b, al
push ecx
xor bl, dl
inc ecx
cmp bh, byte [ecx - 0x64cf4063]
mov ecx, dword [edi]
popfd
mov edi, 0xf8b9b30
mov edx, dword [edi + 4]
add edi, 8
mov dword ss:[ecx], edx
mov edx, 0x1139110e
lea eax, [edx + edx*4 - 0x3be720f4]
lea esi, [esi + edx*2 - 0x22722220]
neg dl
mov edx, dword [esi + edx*2 - 0x227223e4]
shl al, 1
ja 0x6f0113
mov ah, 0x56
loopne 0x61e4f1
invalid
mov dh, 0x1b
inc ecx
mov ch, byte [ebx + 2]
inc eax
or bl, ch
mov esi, 0xa4a71186
inc esp
movzx esp, word [esp]
not bl
inc si
or esp, dword [esp - 0x40c6e]
dec edx
xor dword [esp - 0x91ae], 0xa81e509a
inc bx
mov dword [ebx - 0x1235a], ebx
inc esp
movzx ebp, si
dec edi
lea eax, [ebx - 0x246b6]
dec edi
mov dword [ebx - 0x246be], eax
inc dx
sbb dword [esp - 0x12359], 0xf4229be
mov dh, 0x9c
movsd dword es:[edi], dword fs:[esi]
fdiv st(6), st(0)
push edi
fisttp dword [edi - 0x73]
pushfd
sbb al, 0x4c
outsb dx, byte [esi]
invalid
xor dx, dx
adc ebp, ecx
lea esi, [edx + esi - 2]
inc dl
mov dx, word [edx + esi - 1]
dec ax
shr word [esp + 2], 0xe7
xor dx, bx
xor dx, 0x8c97
dec dx
neg ax
jne 0x7316ae
lodsb al, byte [esi]
jmp [edi]
xor edx, ebx
movzx ecx, ax
and cl, cl
xor edx, 0x3ca82f8a
jmp 0x7349e0
rol dx, 1
shr dword [esp], 0x2a
call fcn.006e9783
xor cl, bl
push 0xd0a6691d
mov edx, 0x723d2437
sal dx, 0xa8
xor cl, 0x92
ror edx, 0x4a
pop edx
sbb dl, 0xb9
sub cl, 0x1c
not cl
add dword [esp + edx*2 + 0x5eb32d3a], 0xf258591
jnp 0x601acf
push eax
sal byte [esp + eax - 0x1a3634a4], 1
rol edx, 1
add ax, ax
pop ecx
inc edx
sub cl, 5
js 0x637bda
cmovge ax, cx
neg edx
lea eax, [eax*4 - 0x5f09ee]
inc eax
shl ax, cl
ror edx, 1
inc edx
xor ecx, 0xf2b2a930
dec ecx
xor ebx, edx
call fcn.00747019
les esp, [eax]
ljmp 0x17b2

Function at 0x62570c
Capabilities:
Encrypt data using speck

Disassembly:
dec ecx
mov esi, dword [ebx]
mov edx, 0x69bb01b0
inc esi
mov esp, dword [edx + ebx - 0x69bb01a8]
inc esp
mov edi, edx
inc ebp
movzx eax, di
call fcn.006fb9ce
dec ecx
mov ebp, dword [ebx]
mov edx, 0x1b2e9083
inc ecx
movzx ecx, byte [edx + edx - 0x1b2e9084]
inc esp
movsx esi, dl
inc ecx
push esi
inc ecx
xor cl, cl
call fcn.005f67cf
inc esp
xchg esi, ebp
neg edx
dec eax
or dword [esp + esi*4 - 0x3d5d0], esi
lea edx, [esi + edx - 0x7a85829]
dec eax
xor eax, dword [esp + esi - 0xf574]
xor edx, 0x5595feab
or word [esp + eax*4 - 0x3d62b], ax
inc ecx
movzx ecx, ah
mov ebp, 0xd08ca43c
inc ecx
lea edx, [esi + edx + 0x37b30ca4]
dec esp
mov dword [esp + esi - 0xf574], ecx
xor dword [esp + esi*2 - 0x1eae8], edx
inc esp
movzx ecx, ax
inc ecx
pop ecx
dec eax
arpl dx, dx
inc ecx
dec ah
call fcn.0060985f