joyce8/EMBER2024-capa huggingface dataset:
Function at 0x799864
Capabilities:
Authenticate hmac
Encrypt data using speck

Disassembly:
push ecx
push edi
push ebp
pushfd
mov ebp, 0xa988b9b
movsx edi, bp
mov ebp, 0
shr edi, 0xaa
push edi
or edi, edi
mov dword [esp + edi - 0x3fffe2], edx
mov edx, edi
sbb edx, edx
push ebx
movzx ebx, di
sub dl, bl
mov dword [esp + edi - 0x3fffca], eax
btc edi, ebx
sal ebx, 0x9d
mov edi, dword [esp + edi*2 - 0x7fffb0]
lea edi, [edi + edx*2 + 0x472055d4]
not bl
sar dx, 0x6a
lea edx, [ebx - 0x1aecd3d7]
rol edi, 2
rol ebx, 0x5c
sbb edi, 0xd19b6497
inc dl
movzx eax, dx
cwde
rol edi, 1
add ax, dx
push esi
sar bx, 0x4e
mov dword [esp + edx - 0x25132d11], ebp
adc edx, eax
bts eax, 0xb0
adc edi, ebp
inc edx
mov dword [esp + edx - 0x2513875c], ecx
mov esi, esp
lea ebx, [edx + esi - 0x25138868]
xadd ax, dx
movzx ebp, al
mov esp, ebx

Function at 0x79d405
Capabilities:
Encrypt data using speck

Disassembly:
lea eax, [edx + eax - 0x1eb6fd82]
push edx
call fcn.0077c86a

Function at 0x7a1460
Capabilities:
Encrypt data using speck

Disassembly:
lea edi, [edi + eax*2 - 0x2afeccee]
xor edx, ebx
mov dword [esp + eax - 0x157f6679], 0x5e3d9318
shr ax, 1
sal eax, cl
lea edx, [ecx + edx + 0x24813466]
xor dword [esp + ecx*2 - 0x2aff4a62], ecx
setp cl
shl cl, 0xa5
bswap edx
or eax, eax
bt eax, ecx
lea edx, [eax + edx - 0x3c613cdf]
rol ecx, 0x9a
setb cl
and byte [esp + eax - 0x6677fffe], cl
not edx
jge 0x868024
xor ebx, edx
push eax
add ebp, edx
cwde
mov dword [esp + eax*4], ebp
ret 4
Function at 0x7a26c8
Capabilities:
Encrypt data using speck

Disassembly:
mov dword [esp + edx*2 - 0x10274544], 0xc5899214
mov esi, ecx
mov ecx, 0x2682f22a
call fcn.008d7b91

Function at 0x7a5e99
Capabilities:
Encrypt data using speck

Disassembly:
dec eax
dec dx
jl 0x81a15b
ror eax, 1
not edx
xadd dl, cl
lea ecx, [ecx - 0x416ba75f]
lea eax, [eax + edx - 0x6dcb4e65]
call fcn.00ba8150
mov ebx, dword [esp + ebx*4 - 0xdc]
ror eax, 0x85
pop eax
pop eax
pop eax
jb fcn.007e2cc2

Function at 0x7a5ee9
Capabilities:
Encrypt data using speck

Disassembly:
xadd eax, ecx
lea eax, [eax + ecx - 0x5770f25a]
inc edx
rol ax, 0x61
add cx, cx
xor edx, 0xb114651d
push eax
lea edx, [edx + ecx*4 + 0xa3dd4be]
dec al
xor ebx, edx
lea eax, [eax + eax*4 + 0x4fa03f80]
or eax, 0xdc33d8a5
sar al, 3
add ebp, edx
call fcn.0082226c
mov eax, 0x2e98fc2e
mov edx, dword [ebp + eax*2 - 0x5d31f85c]
mov ecx, dword [ebp + eax - 0x2e98fc2a]
lea ebp, [eax + ebp - 0x2e98fc2a]
neg eax
add edx, ecx
movsx ecx, ax
sub eax, eax
ror cx, 0x26
mov dword [ebp + eax*2], edx
bt eax, ecx
btc eax, eax
add cl, al
lea esi, [esi + eax - 5]
push ecx
mov edx, dword [ecx + esi - 0x4810]
xor edx, ebx
and ax, 0x8b32
bt ecx, 0xa7
neg ecx
not edx
sbb word [esp + eax*4 + 1], ax
inc edx
xor edx, 0x82057886
dec edx
mov byte [esp + eax*2 + 1], ch
not eax
pop eax
bswap edx
and ecx, 0x85b8c0ba
xor ebx, edx
sal cl, 0x42
not cx
call fcn.00795302
test si, 0xc298

Function at 0x7ac50b
Capabilities:
Encode data using base64
Encrypt data using speck
Parse credit card information

Disassembly:
mov dword [esp], 0x771b2910
push 0x42224a86
cmp esi, ecx
push 0xb0badc99
not byte [esp + 8]
lea esp, [esp + 0xc]
ja 0x846153
mov ecx, 0x6c236a3c
mov edx, esp
lea ecx, [ecx - 0x6c2369d0]
mov eax, 0x5c340183
shl eax, 0x73
jne 0xb72bb0
lea eax, [esi + eax*2 - 0x18300080]
jne 0xbdf537
ja 0x8b4139

Function at 0x7ad3a6
Capabilities:
Encrypt data using speck

Disassembly:
lea esp, [esp + 0x10]
je 0x7a1ee4

Function at 0x7bd804
Capabilities:
Encrypt data using speck

Disassembly:
lea esp, [esp + 8]
jne 0xc611ce

Function at 0x7c1601
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
shrd ax, dx, cl
mov ecx, 0x9bac12ae
call fcn.0076fe4d

Function at 0x7c6def
Capabilities:
Encrypt data using speck

Disassembly:
jmp 0x8ebab3
push ebp
push 0x6c11f689
pop ebp
push ecx
mov ecx, ebp
jmp 0xc4cce3
push ebp
mov dword [esp + ebp - 0x6c11f689], ebx
push edx
lea ecx, [ecx - 0xcd02def]
not ecx
jmp 0x88858e

Function at 0x7c8878
Capabilities:
Encode data using xor

Disassembly:
movzx cx, byte [ebp]
jmp 0x7762ce
mov edx, eax
btc eax, edx
mov al, byte [ebp + 2]
adc ebp, 1
sal dl, 0x81
adc cl, al
movzx eax, dl
mov word [ebp + eax*2 - 0xbc], cx
mov edx, dword [eax + edi - 0x5e]
jmp 0x8b436b
xor esi, eax
ror byte [esp + 4], 7
call fcn.00760a16
mov eax, 0xefa2ae2f
jmp 0x7122b5
Function at 0x7cef90
Capabilities:
Authenticate hmac
Encode data using xor

Disassembly:
lea esi, [esi + ecx*2 - 0x58a926c1]
mov dword [esp + ecx*2 - 0x58a926c2], 0xce19e723
cbw
mov dword [esp + ecx*2 - 0x58a926c6], ecx
xor dl, bl
xor dl, 0x91
not word [esp + ecx*2 - 0x58a926c6]
pop ecx
jmp 0x8dd06b
movsx edx, cl
xchg dl, cl
xor al, bl
call fcn.00c652aa
inc dl
xchg dword [esp + ecx*2 - 0x58a8d938], eax
dec ax
rol dl, 1
shl cx, 0x86
xchg dword [esp + ecx*2 - 0x58a84e00], eax
not ecx
xor dl, 9
xchg ecx, eax
shr eax, cl
neg ecx
ror dl, cl
pop ecx
push eax
ror ecx, cl
xor bl, dl
bt ecx, ecx
jb 0x749380
mov ecx, 0xc525fa2e
movzx eax, byte [ebp]
imul cx, cx
adc ebp, 0
jmp 0x7df939

Function at 0x7d0ba8
Capabilities:
Encode data using xor

Disassembly:
or ax, dx
ror ecx, 2
neg eax
xor ecx, 0x3f809788
call fcn.00b7f388
mov bl, 0xd9
pop ecx
insd dword es:[edi], dx
lea esp, [ecx]
leave
sub eax, 0x218a9108
push ecx
fucomp st(0)
xchg ecx, eax
mov ah, byte [ecx]
sar dword [ecx + 0x60], 1
xchg ecx, eax
mov ah, byte [ecx]
fnstcw word [0x218a9158]
loope 0x7d0bb0
adc byte [ecx + 0x4539218a], 0x30
xchg ecx, eax
mov ah, byte [ecx]
imul eax, dword [ecx + 0x218a91d0], 0x55223089
mov al, 0xc1
ljmp 0x3153
Function at 0x7d2aba
Capabilities:
Authenticate hmac

Disassembly:
xor eax, ebx
xor dx, dx
shr dl, 0x22
sal cx, 0x21
rol eax, 1
sub edx, ecx
xor eax, 0xe7a3ddb1
lea ecx, [ecx + 0x45101220]
ror dx, 0xc1
rol eax, 3
lea ecx, [ecx + ecx*2 - 0x31e4e000]
bt cx, cx
xchg ch, cl
xor eax, 0xeaa0d2bc
bt ecx, edx
setae dl
xor ebx, eax
btc dx, 0x14
not ecx
adc ebp, eax
jmp ebp
mov eax, 0xa42f7b31
rol eax, 0x62
mov eax, dword [ebp + ebx*4]
jae 0xb5d766
mov dword [esp], eax
jae 0x8c9c6b
mov edx, 0x7b078592
mov ecx, dword [edx + esi - 0x7b078596]
call fcn.00796e7d
mov edx, dword [esi]
mov ecx, 0xf3bfed97
mov eax, dword [esi + 4]
dec cx
add esi, 8
mov dword ss:[edx], eax
mov edx, ecx
bts edx, ecx
mov eax, dword [edi]
jae 0x8c946a
jae 0x7af410
mov edx, 0x293a0127
lea esi, [esi + edx*2 - 0x5274024f]
movsx ecx, dx
xor dl, dl
sub edx, 0x49867916
movzx eax, byte [esi + ecx - 0x127]
xor al, bl
and ecx, edx
add dl, 0x2f
adc al, 0x9a
shl ecx, cl
xor al, 0x3a
neg al
dec al
xor bl, al
add eax, esp
mov edx, dword [ecx + eax - 0x488]
lea ebp, [ebp + ecx*4 - 0x1224]
mov dword [ebp + ecx*2 - 0x910], edx
lea esi, [esi + ecx*2 - 0x914]
sub cx, 0x912e
mov eax, ecx
mov ecx, dword [ecx + esi - 0x735a]
dec eax
xor ecx, ebx
not ecx
movzx edx, al
bt eax, edx
lea ecx, [eax + ecx + 0x330f08ae]
xor ecx, 0x5f28e22f
xor dl, 0x2b
sbb ecx, 0xe2a092a3
mul eax
shr dx, 0x68
or edx, edx
neg ecx
btr edx, 0x1f
sbb al, dh
xor ebx, ecx
dec edx
add edi, ecx
jmp fcn.008c0304
sub dl, dh
adc edi, 3
ror edx, 0xbc
bts edx, 1
jb 0x70b585
mov esi, 0x1088920
inc esp
movzx edi, dh
inc ecx
mov ecx, dword [ecx + esi*2 - 0x2111240]
inc ebp
movzx ebp, di
inc ebp
movsx ebx, ch
inc esp
mov ch, byte [edi + esi - 0x1088921]
inc ebp
xor ch, ah
inc ebp
xchg edi, ebx
inc esp
movzx edx, dh
inc ecx
sub ch, 0x98
inc ecx
movzx eax, bl
dec ecx
lea ebp, [edi + esi*2 + 0xb821ca8]
inc ecx
xor ch, 0x9e
inc ecx
push edx
cdq
inc ecx
add ch, 0x23
dec eax
shl dword [esp + esi - 0x1088920], 2
inc ecx
neg ch
sub esi, 0xe3b3030f
inc ecx
mov eax, 0x12064591
inc ecx
not ch
inc edx
inc ebp
xor ah, ch
call fcn.007e3f06
dec ebx
push 0x2a867883
push 0xf923c397
lea esp, [esp + 8]
jne 0x7962ce
call fcn.008e6778

Function at 0x7d7819
Capabilities:
Encrypt data using speck

Disassembly:
bswap eax
mov dword [esp + ecx - 0x3f9fef90], ecx
shr dword [esp + ecx - 0x3f9fef8d], 0x1d
rol word [esp + edx - 0x3f9fef8a], 0xab
xor eax, 0xbb38768a
push ecx
pop ecx
dec eax
shr dx, 0x81
neg eax
mov dword [esp + edx - 0x3f9f77be], edx
shr ecx, 0x75
xor ebx, eax
add cl, byte [esp + edx - 0x3f9f77b7]
not edx
cmovb edx, ecx
add ebp, eax
pop ecx
pop eax
pop ecx
pop edx
pop edx
jmp fcn.007e2cc2

Function at 0x7d89a2
Capabilities:
Encrypt data using speck

Disassembly:
lea esp, [esp + 0x10]
je 0x895d9c
push 0xfd0e2322
shr word [esp + 1], 0xeb
mov dword [esp], ebx
Function at 0x7d8b55
Capabilities:
Encode data using base64
Encrypt data using speck
Parse credit card information

Disassembly:
ror eax, cl
xor ebx, edx
mov dword [esp + eax - 0x3010267d], 0xcbb2523a
push eax
add edi, edx
mov si, word [eax + esi - 0x3010267d]
dec al
seto al
xchg word [esp + eax - 0x301025f5], cx
pop edx
pop ecx
pop edx
pop edx
jno fcn.008001e8
push eax
neg ecx
add ecx, 0xb2ff53a
push eax
btr eax, 0xb2
ror ecx, 1
jmp 0x8534bf
not ax
xor ebx, ecx
add edi, ecx
inc word [esp + 9]
setno byte [esp]
movzx ecx, ax
mov eax, dword [esi + ecx - 0x183f]
push ecx
bt cx, cx
jae 0x843713

Function at 0x7d9fd0
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck

Disassembly:
inc bp
mov edx, dword [ecx]
dec eax
mov dword [esp], edx
pop ebp
dec eax
lea eax, [edx + ebp + 0x121f880f]
inc bp
mov ebp, dword [ecx + 2]
bt eax, eax
dec ecx
adc ecx, 2
mov ecx, eax
inc esp
movsx edi, ch
xor ax, dx
inc bp
adc edx, ebp
inc esp
movsx esi, dx
inc ecx
movzx esi, di
imul ax
inc di
mov dword [ecx + edi - 0x10], edx
dec esp
xadd edx, esi
dec eax
bts ebp, 0xbc
inc esp
mov ebx, ebp
dec edx
lea edi, [edi + edi*4 - 0x44]
inc cx
xadd esi, edx
inc ecx
mov esi, dword [edi + edi - 0x10]
inc ecx
sal dh, 0x44
ror cx, cl
inc esp
movsx edx, bp
inc ecx
xor esi, esp
inc cx
inc edx
dec esi
neg esi
dec esp
btr ebp, ebx
dec ebp
lea eax, [edi + ebp + 0x470befb7]
sbb ecx, 0xd0282e87
ror esi, 2
inc ebp
movzx ebp, al
xor esi, 0x500fda28
cbw
inc edx
lea esi, [esi + ebx - 0x1f27856e]
inc ecx
ror ebx, 0x9f
ror esi, 1
inc cx
nop
inc ecx
push esp
dec eax
dec edx
shr cx, 0x83
inc edx
xor dword [esp + edi - 0x10], esi
dec ecx
add edx, edi
dec ebp
add eax, edi
inc bp
sub ebx, eax
inc ecx
pop esp
inc ecx
btr edx, 1
inc ecx
push edi
dec eax
arpl si, si
dec eax
adc ebx, esi
dec esp
and eax, eax
inc dx
mov dword [esp + edi*2 - 0x20], eax
call fcn.007f2895

Function at 0x7dbc7e
Capabilities:
Encrypt data using speck

Disassembly:
adc ebp, eax
inc dx
mov dword [esp + ecx - 0xf0bbdb6], 0xc5122016
bt ecx, 0xd
movzx ecx, byte [edi + ecx*8 - 0x785dedf0]
adc edi, 0
movzx eax, dl
mov dword [esp + eax*2 - 0x170], 0xde03109f
xor cl, bl
sal edx, 0x91
xor dword [esp + eax - 0xb8], 0x4a30062e
inc cl
rol dl, 2
sub edx, dword [esp + eax*8 - 0x5f6]
shr byte [esp + edx*2 - 0x6782e1ae], 0xe4
rol cl, 1
xchg word [esp + edx*2 - 0x6782e1b5], dx
mov dword [esp + edx*2 - 0x678271a0], 0xb9257e1c
inc cl
shl byte [esp + edx - 0x33c138bd], 1
not edx
mov byte [esp + eax*2 - 0x16f], dl
rol cl, 1
neg eax
add byte [esp + 0xb], 0xb9
xor cl, 0x1f
xor bl, cl
sub esi, 2
mov word [esi], cx
pop edx
pop eax
pop edx
pop edx
pop ecx
jmp fcn.007e2cc2
Function at 0x7e2cd7
Capabilities:
Encrypt data using speck

Disassembly:
xor ecx, 0x8d9a2e8d
xor ebx, ecx
mov dword [esp + edx*4 - 0xc780000], eax
cdq
xadd ax, dx
adc edi, ecx
mov dl, byte [edx + ebp - 0x1d]
lea ecx, [eax + eax*4 - 0x3d449bf6]
ror ecx, cl
jae 0x712ae3
mov ecx, 0x96a3fdaa
lea eax, [ecx + 0x361ce394]
mov edx, 0x4a95fa2a
lea esi, [edx + esi - 0x4a95fa2e]
mov edx, dword [esi + edx - 0x4a95fa2a]
xor edx, ebx
bts eax, ecx
add eax, eax
bswap eax
sbb edx, 0x41698b3
push ecx
neg edx
xor ax, ax
lea edx, [edx + eax + 0x28e51486]
sbb word [esp + eax - 0x7cc9fffe], 0x9890
sal byte [esp + eax - 0x7cc9fffe], 0x67
sub eax, 0x9e8fe417
not edx
cwde
setg al
neg edx
inc word [esp + eax - 0x1b01]
not edx
xor ebx, edx
shl dword [esp + eax - 0x1b01], 0x5f
add edi, edx
bts cx, 0xb3
jb 0xb974e8
sal ecx, cl
xor cx, word [edx + ecx - 0x18000000]
mov edx, eax
cdq
mov word [esi - 2], cx
jmp 0xc6d1b3
mov edx, dword [ebp + eax*8 - 0xd808]
inc ax
sal cl, 0xc7
neg dword [esp + eax*4 - 0x6c08]
mov al, byte [ebp + eax*4 - 0x6c04]
pop ecx
bt cx, cx
lea ebp, [ebp + ecx - 0x7ffffffa]
setae cl
rol cl, cl
xchg ch, cl
mov byte es:[edx], al
jmp edi
mov eax, dword [ebp + 1]
xor eax, ebx
ror eax, 2
add edx, edx
xor eax, 0xd79c55b3
add dx, 0x4fad
mov ecx, 0xf812a88
not eax
sbb edx, edx
neg eax
imul dx, dx
xor ebx, eax
rol ecx, 0x1d
inc edx
add edi, eax
lea eax, [ecx*8 - 0xa457bd7]
sub eax, eax
movzx edx, byte [ebp + ecx - 0x1f0254c]
shl ax, 0x6c
neg eax
lea ebp, [ebp + ecx - 0x1f0254b]
sar cl, 0x41
xor dl, bl
xor dl, 0x11
push eax
not dl
sal word [esp + ecx*4 - 0x7c094a0], cl
neg dl
bts ecx, eax
inc al
rol dl, 1
cwde
btc ax, 0xf
setae byte [esp + ecx - 0x1f02529]
xor bl, dl
sub byte [esp + ecx - 0x1f02526], 0x94
lea edx, [esp + edx + 4]
pop ecx
mov ax, word [edx + eax*8 - 0x40008]
not ecx
lea edx, [ecx*8 + 0x6513558e]
mov word [edx + esi - 0x5135582], ax
lea esi, [esi + edx - 0x5135582]
adc ecx, ecx
movsx eax, cx
bswap ecx
jle fcn.0075bcd3

Function at 0x7e754d
Capabilities:
Encrypt data using speck

Disassembly:
ror eax, cl
inc edx
xor ebx, eax
xchg byte [esp + ecx - 0x5d0ba7fa], dh
mov dword [esp + ecx - 0x5d0ba801], edx
add ebp, eax
pop edx
pop ecx
jmp fcn.007e2cc2

Function at 0x7eeeb6
Capabilities:
Encrypt data using speck

Disassembly:
push edx
mov dword [esp], ebx
mov ebx, edx
bts edx, ebx
mov ebp, esi
call fcn.0078c8e1
dec edi
lea ecx, [ecx + edi - 4]
inc cx
imul edx
dec eax
sar eax, 4
idiv ax
inc edi
mov dword [ecx + edi*2], esi
dec eax
cwde
dec esp
lea eax, [eax*8 - 0x51416256]
inc ecx
and dh, bl
dec ecx
lea edi, [edi + edi - 4]
inc ecx
movsx ecx, bh
dec ecx
lea ebp, [edx - 0x50c3c6f1]
inc esi
mov edx, dword [edi + edi]
inc ebp
xor edx, esp
dec eax
mul ecx
inc eax
setae ch
dec ecx
dec ebx
inc ecx
neg edx
cwd
bts ebp, 0xa4
inc ecx
shl bh, 0x41
inc edi
lea edx, [edx + eax - 0x53f688cc]
inc ecx
rol bh, 0xa1
inc ecx
xor edx, 0xecaa8f99
inc ecx
push edi
sal ax, 0xcd
inc edi
lea edx, [edx + ebx*2 - 0x6a823b60]
dec esi
or dword [esp + edi*4], esp
inc esp
mov esi, ecx
inc esi
xor dword [esp + edi*2], edx
call fcn.008947fa
jb 0xb756a1
ror al, 1
inc al
xor bl, al
mov dword [esp], ebp
push edi
jmp 0x781f03
Function at 0x7f13de
Capabilities:
Encrypt data using speck

Disassembly:
lea esp, [esp + 4]
je 0x74ed46

Function at 0x7f8783
Capabilities:
Encrypt data using speck

Disassembly:
push eax
rol cx, 1
mov dword [esp + 4], eax
sar word [esp], 0x2b
xor bx, cx
sar eax, 0x7f
sbb esi, 1
bt edx, eax
bts dx, 0x9a
mov word [esi], cx
imul eax, dword [esp + 2]
pop eax
pop edx
jae fcn.007e2cc2
sbb edx, 0xec0f642c
and ecx, ecx
jne 0xbb5dd0
not edx
cwde
bt ax, cx
bswap edx
xor ebx, edx
add ebp, edx
mov dword [esp + ecx - 0x7fd8100], ebp
ret

Function at 0x7f9606
Capabilities:
Encrypt data using speck

Disassembly:
call fcn.008101ea
mov edx, dword [ebp]
jmp 0xc3ab29
add ebp, 4
xor edx, ebx
mov ecx, 0x350eeeaf
movsx eax, cl
lea edx, [edx + ecx*2 - 0x4a0eb6be]
inc eax
cmovg cx, ax
rol edx, 1
and eax, 0x38b4a3a8
bt eax, eax
dec al
xor edx, 0xc79f62aa
sar cl, 0x81
cbw
neg edx
or ecx, eax
xor ebx, edx
add esi, edx
sub eax, 0x7ca36f92
mov ecx, dword [edi + ecx*2 - 0x7b7dffbe]
mov dx, word [ecx]
call fcn.0088fa68
mov eax, 0xab2b6b7
movsx ebx, ax
mul ebx
mov esp, edi
mov esi, 0x1583b6b4
lea edi, [esi + edx*8 + 0x3d23f00b]
pop ebp
rol dl, 0x23
lea esi, [ebx*8 + 0x7c8f0eb1]
popfd
call fcn.0087a198

Function at 0x7fa5e8
Capabilities:
Encrypt data using speck

Disassembly:
adc ebp, 4
xor ecx, ebx
push 0xddbb8d90
jmp 0x83ecaa
ja 0x70adbe
xor ecx, 0xec03c402
call fcn.007b25f9
mov ecx, dword [esp]
xor eax, ebx
lea edx, [ecx + ecx - 0x4fff715d]
rol eax, 2
ror dx, 0xee
inc eax
lea ecx, [ecx*2 - 0x135d1b7b]
call fcn.0077046a

Function at 0x7fec68
Capabilities:
Encode data using xor

Disassembly:
ror cx, cl
movsx eax, cx
lea ebp, [ebp + eax*2 - 0x4190]
sar cl, 3
xor edx, ebx
inc edx
mov dword [esp + ecx*4 - 0x220883e4], ecx
xchg byte [esp + ecx*2 - 0x110441f2], cl
ror edx, 1
xor edx, 0x3e003702
sub edx, 0xc1846929
add byte [esp + ecx*4 - 0x220883e3], ch
xchg dword [esp + ecx*2 - 0x110441f2], ecx
mov word [esi + ecx - 0x42], cs
sti
out dx, al
xor cl, ah
ror edx, 1
add eax, eax
add dword [esp + ecx - 0x88240d9], eax
xor ebx, edx
xor ax, ax
call fcn.00bc7b05
adc edi, 4
mov eax, dword [esp]
pop eax
xor edx, ebx
bt ax, ax
ror cl, cl
rol edx, 1
lea edx, [ecx + edx - 0xd2b6edf]
add ecx, ecx
adc eax, eax
neg edx
not edx
shl eax, 0x73
dec edx
push eax
not edx
neg al
call fcn.00bc0a0e
call 0x900bf78d
and dword [edx - 0x778f8cbe], ebx
and edx, ecx
push esi
sbb esi, dword [eax - 0x78]
and dword [edx - 0x778f3c6e], esp
and dword [edx - 0x778f2c06], ebx
and edx, ebp
xchg byte [ebx + 0x1a218870], ah
adc ch, byte [ebx]
jo 0x7fec9f
and dword [edx - 0x778f5422], esi
and edx, esi
retf
Function at 0x7ff486
Capabilities:
Encrypt data using speck

Disassembly:
lea eax, [eax + ecx - 0x35a11f12]
rol eax, 2
lea eax, [eax + edx*2 + 0x6be89269]
mov dword [esp + edx - 0x175727], ecx
neg cx
xchg dword [esp + edx - 0x175727], edx
not eax
bswap eax
add cl, 0x8b
setns cl
xor dx, cx
xor ebx, eax
add ebp, eax
movzx ecx, byte [edi]
xor byte [esp + 3], 0x21
lea eax, [edx + edx + 0x3aab4d3f]
lea edi, [edi + eax*2 - 0x44be9779]
xor cl, bl
sal dword [esp + eax - 0x225f4bbd], 0x66
adc dword [esp + eax - 0x225f4bbd], eax
and edx, 0x619beba1
not cl
dec cl
ror cl, 1
neg byte [esp + eax - 0x225f4bbd]
adc cl, 0xbd
dec dword [esp + edx - 0x6199eb21]
sets byte [esp + edx - 0x6199eb21]
xor bl, cl
pop eax
add al, ah
adc ecx, esp
lea eax, [edx*2 - 0x67d991e3]
mov dx, word [eax + ecx - 0x5b5a445f]
or ax, ax
lea ecx, [eax + eax*4 - 0x446143d5]
lea esi, [esi + eax - 0x5b5a4461]
not ax
btc ax, 0xa6
and eax, eax
mov word [eax + esi - 0x5b5abbe0], dx
btr eax, 0x86
movsx edx, cl
jb fcn.007e2cc2

Function at 0x800d0b
Capabilities:
Encrypt data using speck

Disassembly:
push edx
mov eax, dword [edi]
add edi, 4
lea edx, [edx*2 - 0x3475affe]
btr ecx, 0xb1
xor eax, ebx
imul ecx, dword [esp]
neg eax
bts cx, 1
inc eax
btr ecx, 0x82
rol cl, 0xc5
call fcn.008a0af2
mov ecx, 0x5e2ac224
lea eax, [ecx*4 + 0x3aa3b8b0]
mov edx, dword [esi + ecx - 0x5e2ac224]
jmp 0xc7223e
rol al, 0x61
and ecx, eax
mov ecx, dword [esi + ecx*4 - 0x482afffc]
cbw
ror eax, 0xa
sal eax, 0x2d
not edx
dec eax
not ecx
or edx, ecx
movzx ecx, al
mov dword [esi + ecx*2 - 0x1fa], edx
cdq
imul eax, eax
inc edx
mov eax, dword [edi + ecx*2 - 0x1fe]
lea edi, [edi + ecx*2 - 0x1fa]
btc ecx, 1
lea ecx, [ecx + edx*4 + 0x15ad9cb1]
xor eax, ebx
rol cl, 0x64
dec eax
add edx, 0x89346f91
not eax
sbb ecx, 0xcf8b8115
lea edx, [edx + ecx*4 + 0x25b6f099]
shl dx, 0x44
bswap eax
xadd edx, ecx
push edx
and dl, dh
dec eax
imul dx, word [esp + edx*4 - 0x36555050]
xor byte [esp + edx - 0xd950224], ch
bswap eax
bt ecx, ecx
dec cx
not dx
xor ebx, eax
neg cx
not cl
bts ecx, edx
adc ebp, eax
mov edx, dword [esi + edx*2 - 0x1b2bfbb2]
shr byte [esp + 2], 0xe2
mov cl, byte [esi + 8]
je 0x7e498a
mov eax, dword [esp]
adc al, 0x87
shr edx, cl
sar ax, 0xe6
mov dword [eax + esi - 0xd25014a], edx
jae 0x799a7e
or al, al
adc ebp, 4
movsx ecx, ax
sub al, cl
xor edx, ebx
bts eax, eax
add eax, 0x3fbad68f
lea edx, [edx + eax - 0x55afe205]
bts eax, 0x94
shl cl, 0xc2
and ecx, eax
bswap edx
not cl
js 0x8aace0
Function at 0x800f65
Capabilities:
Encode data using xor

Disassembly:
cpuid
mov dword [esp], 0x41b2d705
jne 0xb92a43
sal word [esp], 0x82
sbb ebp, 7
mov dword [ebp + 0xc], eax
mov eax, dword [esp]
or eax, eax
and al, al
mov dword [ebp + eax - 0x41b25c0c], ebx
inc eax
rol eax, 0xaf
movsx ebx, word [esp + eax*2 - 0x5c1541b2]
mov dword [eax + ebp - 0x2e0aa0d5], ecx
bswap ebx
mov dword [ebp + eax*2 - 0x5c1541b2], edx
pop eax
pop ebx
mov esi, 0x5b58a3ea
lea esi, [esi + eax - 0x41b25c18]
xor al, 0x82
sete al
movsx ecx, ax
mov eax, dword [esi + eax - 0x41b25c00]
inc cx
call fcn.007cf709
fldcw word [ebx - 0x45]
das
mov cl, 0xde
stosd dword es:[edi], eax
cmpsd dword [esi], dword es:[edi]
loop 0xb92a7a
mov dh, 0xde
pop ebx
jae 0xb92ade
sal dword [esi + 0x2a5b8bde], cl
sal dword [esi - 0x35286c22], cl
sal dword [esi + 0x25f73de], cl
sal dword [esi - 0x6d40a422], cl
sal dword [esi - 0x65285422], cl
sal dword [esi + 0x50b283de], cl
pop ss
invalid
outsb dx, byte gs:[si]
xchg esp, eax
mov dh, 4
add byte [eax], al
add byte [0x8b052a1f], ch
cli
pushal
sub eax, 0x3eade485
mov word [edx], es
test dword [0x85028cbe], esi
js 0xb92b6b
mov cs, word [edx + eax + 0x1ee5bc85]
mov word [edx], es
test dword [eax], esp
jl 0xb92b51
mov word [edx], es
test dword [eax + 0x14], eax
outsb dx, byte [esi]
mov word [edx], es
test dword [eax + 0x28c9eec], esp
test dword [eax + 0x5ec13830], esi
aas
ret

Function at 0x800ffa
Capabilities:
Encrypt data using speck

Disassembly:
ror eax, 0xd2
ror ax, 0xee
xor ebx, ecx
shr dword [esp + edx - 0x3ffffcbc], 0x70
lea esi, [esi + edx*2 - 0x7ffff984]
mov dword [esi + edx*2 - 0x7ffff980], ecx
lea ecx, [eax + 0xa3fb4b3]
mov dword [esp + ecx*2 - 0xe2d6962], 0x5b2774af
adc ax, word [esp + edx*2 - 0x7ffff97e]
pop eax
pop edx
jns fcn.007e2cc2
mov ecx, 0x73281404
push ecx
mov edx, dword [edi + ecx - 0x73281404]
xchg word [esp + ecx - 0x73281403], cx
call fcn.00b31d65

Function at 0x805709
Capabilities:
Execute anti-debugging instructions

Disassembly:
mul dword [esp + edx - 0x20060008]
shr edx, 0x2b
lea ebp, [ebp + edx*4 + 1]
xor cl, bl
and dx, 0xca1b
xor cl, 0x2f
xchg byte [esp + edx*8 + 4], al
dec cl
bswap edx
rol edx, 0x69
rol cl, 1
cwde
push edx
sub cl, 0x10
mov dword [esp + edx*4 + 4], 0x42b22a3a

Function at 0x806beb
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Parse credit card information

Disassembly:
rol bl, 0x42
mov dword [esp + ecx - 0x100d97d], esi
mov dword [esp + ecx*8 - 0x806cbc4], edi
sal dword [esp + ecx*2 - 0x201b2fa], cl
xadd byte [esp + ecx - 0x100d97c], bh
lea edi, [ebx*4 + 0x7d0e9615]
lea edi, [esp + ecx*8 - 0x806cbe4]
movzx eax, cl
lea edx, [edi + ecx - 0x100da69]
push esi
rol bx, 0xa
inc ecx
mov esp, edx

Function at 0x80831b
Capabilities:
Encrypt data using speck

Disassembly:
sub edx, 0x6ea0213e
push eax
rol ax, 0xa5
shr word [esp + 1], 9
xor ebx, edx
sub ecx, dword [esp]
sub eax, dword [esp]
adc edi, edx
sub cl, 0x1d
movsx edx, cx
pop ecx
pop eax
pop ecx
ja fcn.008001e8

Function at 0x80bbd4
Capabilities:
Encode data using base64

Disassembly:
dec ecx
not ecx
lea ecx, [ecx + eax*8 - 0x6416c8b6]
rol dx, 0xc
shr al, 0xc4
bswap ecx
lea ecx, [ecx + edx + 0x759f0525]