joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b99f3
Capabilities:
Check http status code

Disassembly:
and byte [esi - 0x596f5978], 0x98
cmpsb byte [esi], byte es:[edi]
mov al, byte [0xb0a6a8a6]
cmpsb byte [esi], byte es:[edi]
mov eax, 0xc8a6c0a6
cmpsb byte [esi], byte es:[edi]
shl byte [esi - 0x591f5928], 1
call 0xf8f28ab8
cmpsb byte [esi], byte es:[edi]
add byte [edi - 0x58ef58f8], ah
sbb byte [edi - 0x58d758e0], ah
xor byte [edi - 0x58bf58c8], ah
dec eax
cmpsd dword [esi], dword es:[edi]
push eax
cmpsd dword [esi], dword es:[edi]
pop eax
cmpsd dword [esi], dword es:[edi]
pushal
cmpsd dword [esi], dword es:[edi]
push 0x78a770a7
cmpsd dword [esi], dword es:[edi]
and byte [edi - 0x586f5878], 0x98
cmpsd dword [esi], dword es:[edi]
mov al, byte [0xb0a7a8a7]
cmpsd dword [esi], dword es:[edi]
mov eax, 0xc8a7c0a7
cmpsd dword [esi], dword es:[edi]
shl byte [edi - 0x581f5828], 1
call 0xf8f38af9
cmpsd dword [esi], dword es:[edi]
add byte [eax - 0x57ef57f8], ch
sbb byte [eax - 0x57d757e0], ch
xor byte [eax - 0x57bf57c8], ch
dec eax
test al, 0x28
test al, 0x30
test al, 0x38
test al, 0x40
test al, 0x48
test al, 0x50
test al, 0x58
test al, 0x60
test al, 0x68
test al, 0x70
test al, 0x78
test al, 0x80
test al, 0x88
test al, 0x90
test al, 0x98
test al, 0xa0
test al, 0xa8
test al, 0xb0
test al, 0xb8
test al, 0xc0
test al, 0xc8
test al, 0xd0
test al, 0xd8
test al, 0xe0
test al, 0xe8
test al, 0xf0
test al, 0xf8
test al, 0
test eax, 0xa910a908
sbb byte [ecx - 0x56d756e0], ch
xor byte [ecx - 0x56bf56c8], ch
dec eax
test eax, 0xa958a950
pushal
test eax, 0xa970a968
js 0x4b9a5c
sub byte [ecx - 0x566f5678], 0x98
test eax, 0xa9a8a9a0
mov al, 0xa9
mov eax, 0xc8a9c0a9
test eax, 0xa9d8a9d0
loopne 0x4b9a76
call 0xf8f58b7b
test eax, 0xaa08aa00
adc byte [edx - 0x55df55e8], ch
sub byte [edx - 0x55c755d0], ch
inc eax
stosb byte es:[edi], al
dec eax
stosb byte es:[edi], al
push eax
stosb byte es:[edi], al
pop eax
stosb byte es:[edi], al
pushal
stosb byte es:[edi], al

Function at 0x4b9aed
Capabilities:
Check http status code

Disassembly:
push 0x78aa70aa
stosb byte es:[edi], al
sub byte [edx - 0x556f5578], 0x98
stosb byte es:[edi], al
mov al, byte [0xb0aaa8aa]
stosb byte es:[edi], al
mov eax, 0xc8aac0aa
stosb byte es:[edi], al
shr byte [edx - 0x551f5528], 1
call 0xf8f68bbc
stosb byte es:[edi], al
add byte [ebx - 0x54ef54f8], ch
sbb byte [ebx - 0x54d754e0], ch
xor byte [ebx - 0x54bf54c8], ch
push eax
stosd dword es:[edi], eax
pop eax
stosd dword es:[edi], eax
pushal
stosd dword es:[edi], eax
push 0x78ab70ab
stosd dword es:[edi], eax
sub byte [ebx - 0x546f5478], 0x98
stosd dword es:[edi], eax
mov al, byte [0xb0aba8ab]
stosd dword es:[edi], eax
mov eax, 0xc8abc0ab
stosd dword es:[edi], eax
shr byte [ebx - 0x541f5428], 1
call 0xf8f78bfb
stosd dword es:[edi], eax
Function at 0x4b9b51
Capabilities:
Check http status code

Disassembly:
add byte [eax + ecx + 0x18ac10ac], ch
lodsb al, byte [esi]
and byte [eax + ebp + 0x38ac30ac], ch
lodsb al, byte [esi]
inc eax
lodsb al, byte [esi]
dec eax
lodsb al, byte [esi]
push eax
lodsb al, byte [esi]
pop eax
lodsb al, byte [esi]
pushal
lodsb al, byte [esi]
push 0x78ac70ac
lodsb al, byte [esi]
sub byte [eax + edx*4 - 0x5f536754], 0xac
test al, 0xac
mov al, 0xac
mov eax, 0xc8acc0ac
lodsb al, byte [esi]
shr byte [eax - 0xf531754], 1
lodsb al, byte [esi]
clc
lodsb al, byte [esi]
add byte [ebp - 0x52ef52f8], ch
sbb byte [ebp - 0x52d752e0], ch
xor byte [ebp - 0x52bf52c8], ch
dec eax
lodsd eax, dword [esi]
push eax
lodsd eax, dword [esi]
pop eax
lodsd eax, dword [esi]
pushal
lodsd eax, dword [esi]
push 0x78ad70ad
lodsd eax, dword [esi]
sub byte [ebp - 0x526f5278], 0x98
lodsd eax, dword [esi]
mov al, byte [0xb0ada8ad]
lodsd eax, dword [esi]
mov eax, 0xc8adc0ad
lodsd eax, dword [esi]
shr byte [ebp - 0x521f5228], 1
call 0xf8f98c79
lodsd eax, dword [esi]
add byte [esi - 0x51ef51f8], ch
sbb byte [esi - 0x51d751e0], ch
Function at 0x4ba017
Capabilities:
Check http status code

Disassembly:
mov byte [esi - 0x51275140], ch
invalid
shr byte [esi - 0x510f5128], 8
scasd eax, dword es:[edi]
cmp byte [edi - 0x50af50c0], ch
pop eax
scasd eax, dword es:[edi]
pushal
scasd eax, dword es:[edi]
push 0x78af70af
scasd eax, dword es:[edi]
sub byte [edi - 0x506f5078], 0x98
scasd eax, dword es:[edi]
mov al, byte [0xb0afa8af]
scasd eax, dword es:[edi]
mov eax, 0xc8afc0af
scasd eax, dword es:[edi]
shr byte [edi - 0x501f5028], 1
call 0xf8fb908b
scasd eax, dword es:[edi]
add byte [eax + 0x1c8000d], dh
add byte [eax], al
add byte [eax - 0x5fef5ff8], ah
add al, cl
add dword [eax], eax
add byte [eax], al
mov al, byte [0xa010a008]
sbb byte [eax - 0x5fd75fe0], ah
xor byte [eax - 0x5fbf5fc8], ah
dec eax
mov al, byte [0xa058a050]
pushal
mov al, byte [0xa070a068]
mov al, byte [0xa068a060]
jo 0x4b9fa3
js 0x4b9fa5
and byte [eax - 0x5f6f5f78], 0xa0
mov al, byte [0xa0b0a0a8]
mov eax, 0xc8a0c0a0
mov al, byte [0xa0d8a0d0]
shl byte [eax - 0x5f1f5f28], 1
invalid
clc
mov al, byte [0xa108a100]
adc byte [ecx - 0x5edf5ee8], ah
sub byte [ecx - 0x5ec75ed0], ah
inc eax
mov eax, dword [0xa150a148]
pop eax
mov eax, dword [0xa168a160]
jo 0x4b9fe0
pushal
mov eax, dword [0xa170a168]
js 0x4b9fe2
and byte [ecx - 0x5e6f5e78], 0x98
mov eax, dword [0xa1a8a1a0]
mov al, 0xa1
mov eax, 0xc8a1c0a1
mov eax, dword [0xa1d8a1d0]
loopne 0x4b9ffc
call 0xf8ed9101
mov eax, dword [0xa200a1f8]
or byte [edx - 0x5ddf5df0], ah
sub byte [edx - 0x5dc75dd0], ah
inc eax
mov byte [0xa250a248], al
pop eax
mov byte [0xa270a260], al
js 0x4ba01f
mov eax, dword [0xa208a200]
adc byte [edx - 0x5dd75de0], ah
xor byte [edx - 0x5dbf5dc8], ah
dec eax
mov byte [0xa258a250], al
pushal
mov byte [0xa278a270], al
and byte [edx - 0x5d6f5d78], 0x98
mov byte [0xa2a8a2a0], al
mov al, 0xa2
mov eax, 0xc8a2c0a2
mov byte [0xa2d8a2d0], al
loopne 0x4ba039
call 0xf8ee913e
mov byte [0xa308a300], al
adc byte [ebx - 0x5cdf5ce8], ah
sub byte [ebx - 0x5cc75cd0], ah
inc eax
mov dword [0xa350a348], eax
dec eax
mov dword [0xa358a350], eax
pushal
mov dword [0xa370a368], eax
js 0x4ba060
and byte [ebx - 0x5c675c70], 0xa0
mov dword [0xa3b0a3a8], eax
mov eax, 0xc8a3c0a3
mov dword [0xa3d8a3d0], eax
loopne 0x4ba078
call 0xf8ef917d
mov dword [0xa408a400], eax
adc byte [eax + ebx + 0x28a420a4], ah
movsb byte es:[edi], byte [esi]
xor byte [eax + edi + 0x48a440a4], ah
movsb byte es:[edi], byte [esi]
push eax
movsb byte es:[edi], byte [esi]
pop eax
movsb byte es:[edi], byte [esi]
pushal
movsb byte es:[edi], byte [esi]
push 0x78a470a4
movsb byte es:[edi], byte [esi]
and byte [eax + ecx*4 - 0x675b6f5c], 0xa4
cwde
movsb byte es:[edi], byte [esi]
Function at 0x4ba05d
Capabilities:
Check http status code

Disassembly:
mov byte [esi - 0x51275140], ch
invalid
shr byte [esi - 0x510f5128], 8
scasd eax, dword es:[edi]
cmp byte [edi - 0x50af50c0], ch
pop eax
scasd eax, dword es:[edi]
pushal
scasd eax, dword es:[edi]
push 0x78af70af
scasd eax, dword es:[edi]
sub byte [edi - 0x506f5078], 0x98
scasd eax, dword es:[edi]
mov al, byte [0xb0afa8af]
scasd eax, dword es:[edi]
mov eax, 0xc8afc0af
scasd eax, dword es:[edi]
shr byte [edi - 0x501f5028], 1
call 0xf8fb908b
scasd eax, dword es:[edi]
add byte [eax + 0x1c8000d], dh
add byte [eax], al
add byte [eax - 0x5fef5ff8], ah
add al, cl
add dword [eax], eax
add byte [eax], al
mov al, byte [0xa010a008]
sbb byte [eax - 0x5fd75fe0], ah
xor byte [eax - 0x5fbf5fc8], ah
dec eax
mov al, byte [0xa058a050]
pushal
mov al, byte [0xa070a068]
mov al, byte [0xa068a060]
jo 0x4b9fa3
js 0x4b9fa5
and byte [eax - 0x5f6f5f78], 0xa0
mov al, byte [0xa0b0a0a8]
mov eax, 0xc8a0c0a0
mov al, byte [0xa0d8a0d0]
shl byte [eax - 0x5f1f5f28], 1
invalid
clc
mov al, byte [0xa108a100]
adc byte [ecx - 0x5edf5ee8], ah
sub byte [ecx - 0x5ec75ed0], ah
inc eax
mov eax, dword [0xa150a148]
pop eax
mov eax, dword [0xa168a160]
jo 0x4b9fe0
pushal
mov eax, dword [0xa170a168]
js 0x4b9fe2
and byte [ecx - 0x5e6f5e78], 0x98
mov eax, dword [0xa1a8a1a0]
mov al, 0xa1
mov eax, 0xc8a1c0a1
mov eax, dword [0xa1d8a1d0]
loopne 0x4b9ffc
call 0xf8ed9101
mov eax, dword [0xa200a1f8]
or byte [edx - 0x5ddf5df0], ah
sub byte [edx - 0x5dc75dd0], ah
inc eax
mov byte [0xa250a248], al
pop eax
mov byte [0xa270a260], al
js 0x4ba01f
mov eax, dword [0xa208a200]
adc byte [edx - 0x5dd75de0], ah
xor byte [edx - 0x5dbf5dc8], ah
dec eax
mov byte [0xa258a250], al
pushal
mov byte [0xa278a270], al
and byte [edx - 0x5d6f5d78], 0x98
mov byte [0xa2a8a2a0], al
mov al, 0xa2
mov eax, 0xc8a2c0a2
mov byte [0xa2d8a2d0], al
loopne 0x4ba039
call 0xf8ee913e
mov byte [0xa308a300], al
adc byte [ebx - 0x5cdf5ce8], ah
sub byte [ebx - 0x5cc75cd0], ah
inc eax
mov dword [0xa350a348], eax
dec eax
mov dword [0xa358a350], eax
pushal
mov dword [0xa370a368], eax
js 0x4ba060
and byte [ebx - 0x5c675c70], 0xa0
mov dword [0xa3b0a3a8], eax
mov eax, 0xc8a3c0a3
mov dword [0xa3d8a3d0], eax
loopne 0x4ba078
call 0xf8ef917d
mov dword [0xa408a400], eax
adc byte [eax + ebx + 0x28a420a4], ah
movsb byte es:[edi], byte [esi]
xor byte [eax + edi + 0x48a440a4], ah
movsb byte es:[edi], byte [esi]
push eax
movsb byte es:[edi], byte [esi]
pop eax
movsb byte es:[edi], byte [esi]
pushal
movsb byte es:[edi], byte [esi]
push 0x78a470a4
movsb byte es:[edi], byte [esi]
and byte [eax + ecx*4 - 0x675b6f5c], 0xa4
cwde
movsb byte es:[edi], byte [esi]
Function at 0x4ba0af
Capabilities:
Check http status code

Disassembly:
mov byte [esi - 0x51275140], ch
invalid
shr byte [esi - 0x510f5128], 8
scasd eax, dword es:[edi]
cmp byte [edi - 0x50af50c0], ch
pop eax
scasd eax, dword es:[edi]
pushal
scasd eax, dword es:[edi]
push 0x78af70af
scasd eax, dword es:[edi]
sub byte [edi - 0x506f5078], 0x98
scasd eax, dword es:[edi]
mov al, byte [0xb0afa8af]
scasd eax, dword es:[edi]
mov eax, 0xc8afc0af
scasd eax, dword es:[edi]
shr byte [edi - 0x501f5028], 1
call 0xf8fb908b
scasd eax, dword es:[edi]
add byte [eax + 0x1c8000d], dh
add byte [eax], al
add byte [eax - 0x5fef5ff8], ah
add al, cl
add dword [eax], eax
add byte [eax], al
mov al, byte [0xa010a008]
sbb byte [eax - 0x5fd75fe0], ah
xor byte [eax - 0x5fbf5fc8], ah
dec eax
mov al, byte [0xa058a050]
pushal
mov al, byte [0xa070a068]
mov al, byte [0xa068a060]
jo 0x4b9fa3
js 0x4b9fa5
and byte [eax - 0x5f6f5f78], 0xa0
mov al, byte [0xa0b0a0a8]
mov eax, 0xc8a0c0a0
mov al, byte [0xa0d8a0d0]
shl byte [eax - 0x5f1f5f28], 1
invalid
clc
mov al, byte [0xa108a100]
adc byte [ecx - 0x5edf5ee8], ah
sub byte [ecx - 0x5ec75ed0], ah
inc eax
mov eax, dword [0xa150a148]
pop eax
mov eax, dword [0xa168a160]
jo 0x4b9fe0
pushal
mov eax, dword [0xa170a168]
js 0x4b9fe2
and byte [ecx - 0x5e6f5e78], 0x98
mov eax, dword [0xa1a8a1a0]
mov al, 0xa1
mov eax, 0xc8a1c0a1
mov eax, dword [0xa1d8a1d0]
loopne 0x4b9ffc
call 0xf8ed9101
mov eax, dword [0xa200a1f8]
or byte [edx - 0x5ddf5df0], ah
sub byte [edx - 0x5dc75dd0], ah
inc eax
mov byte [0xa250a248], al
pop eax
mov byte [0xa270a260], al
js 0x4ba01f
mov eax, dword [0xa208a200]
adc byte [edx - 0x5dd75de0], ah
xor byte [edx - 0x5dbf5dc8], ah
dec eax
mov byte [0xa258a250], al
pushal
mov byte [0xa278a270], al
and byte [edx - 0x5d6f5d78], 0x98
mov byte [0xa2a8a2a0], al
mov al, 0xa2
mov eax, 0xc8a2c0a2
mov byte [0xa2d8a2d0], al
loopne 0x4ba039
call 0xf8ee913e
mov byte [0xa308a300], al
adc byte [ebx - 0x5cdf5ce8], ah
sub byte [ebx - 0x5cc75cd0], ah
inc eax
mov dword [0xa350a348], eax
dec eax
mov dword [0xa358a350], eax
pushal
mov dword [0xa370a368], eax
js 0x4ba060
and byte [ebx - 0x5c675c70], 0xa0
mov dword [0xa3b0a3a8], eax
mov eax, 0xc8a3c0a3
mov dword [0xa3d8a3d0], eax
loopne 0x4ba078
call 0xf8ef917d
mov dword [0xa408a400], eax
adc byte [eax + ebx + 0x28a420a4], ah
movsb byte es:[edi], byte [esi]
xor byte [eax + edi + 0x48a440a4], ah
movsb byte es:[edi], byte [esi]
push eax
movsb byte es:[edi], byte [esi]
pop eax
movsb byte es:[edi], byte [esi]
pushal
movsb byte es:[edi], byte [esi]
push 0x78a470a4
movsb byte es:[edi], byte [esi]
and byte [eax + ecx*4 - 0x675b6f5c], 0xa4
cwde
movsb byte es:[edi], byte [esi]
Function at 0x4ba101
Capabilities:
Check http status code

Disassembly:
cwde
movsb byte es:[edi], byte [esi]
mov al, byte [0xb0a4a8a4]
movsb byte es:[edi], byte [esi]
mov eax, 0xc8a4c0a4
movsb byte es:[edi], byte [esi]
shl byte [eax + ebx*8 - 0xf5b1f5c], 1
movsb byte es:[edi], byte [esi]
clc
movsb byte es:[edi], byte [esi]
add byte [ebp - 0x5aef5af8], ah
sbb byte [ebp - 0x5ad75ae0], ah
xor byte [ebp - 0x5abf5ac8], ah
dec eax
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
pop eax
movsd dword es:[edi], dword [esi]
pushal
movsd dword es:[edi], dword [esi]
push 0x78a570a5
movsd dword es:[edi], dword [esi]
and byte [ebp - 0x5a6f5a78], 0x98
movsd dword es:[edi], dword [esi]
mov al, byte [0xb0a5a8a5]
movsd dword es:[edi], dword [esi]
mov eax, 0xc8a5c0a5
movsd dword es:[edi], dword [esi]
shl byte [ebp - 0x5a1f5a28], 1
invalid

Function at 0x4ba312
Capabilities:
Check http status code
Encode data using xor

Disassembly:
lodsb al, byte [esi]
or byte [ebp - 0x52af52e0], ch
push 0xb0ad80ad
lodsd eax, dword [esi]
enter 0xffffffffffffe0ad, 0xffffffffffffffad
clc
lodsd eax, dword [esi]
xor byte [esi - 0x519f51b8], ch
nop
scasb al, byte es:[edi]
test al, 0xae
shr byte [esi - 0x50f75110], 0x20
scasd eax, dword es:[edi]
push eax
scasd eax, dword es:[edi]
scasb al, byte es:[edi]
or byte [edi - 0x50af50e0], ch
push 0x98af80af
scasd eax, dword es:[edi]
mov al, 0xaf
enter 0xffffffffffffe0af, 0xffffffffffffffaf
add al, dh
or eax, 0x2e800
add byte [eax], dl
mov al, byte [0xa040a028]
pop eax
mov al, byte [0xa088a070]
mov al, byte [0xe8a0d0a0]
mov al, byte [0xa118a100]
xor byte [ecx - 0x5e9f5eb8], ah
cwde
mov eax, dword [0xa1c8a1b0]
loopne 0x4ba296
mov al, byte [0xa0d0a0a0]
call 0x18eca386
mov eax, dword [0xa148a130]
pushal
mov eax, dword [0xa1b0a198]
enter 0xffffffffffffe0a1, 0xffffffffffffffa1
clc
mov eax, dword [0xa228a210]
inc eax
mov byte [0xa288a270], al
mov al, byte [0xd0a2b8a2]
mov byte [0xa300a2e8], al
xor byte [ebx - 0x5c9f5cb8], ah
js 0x4ba2b6
invalid
mov dword [0xa3a8a390], eax
shl byte [ebx - 0x5bf75c10], 0x20
movsb byte es:[edi], byte [esi]
cmp byte [eax + edx*2 - 0x7f5b975c], ah
movsb byte es:[edi], byte [esi]
mov al, 0xa4
enter 0xffffffffffffe0a4, 0xffffffffffffffa4
clc
movsb byte es:[edi], byte [esi]
adc byte [ebp - 0x5abf5ad8], ah
jo 0x4ba2dc
nop
mov dword [0xa3c0a3a8], eax
invalid
mov byte [ebp - 0x5a475a60], ah
shl byte [ebp - 0x59ff5a18], 1
inc eax
cmpsb byte [esi], byte es:[edi]
dec eax
cmpsb byte [esi], byte es:[edi]
push eax
cmpsb byte [esi], byte es:[edi]
pop eax
Function at 0x4ba34a
Capabilities:
Check http status code

Disassembly:
cmpsb byte [esi], byte es:[edi]
pushal
cmpsb byte [esi], byte es:[edi]
push 0x78a670a6
cmpsb byte [esi], byte es:[edi]
and byte [esi - 0x596f5978], 0x98
cmpsb byte [esi], byte es:[edi]
mov al, byte [0xb0a6a8a6]
cmpsb byte [esi], byte es:[edi]
mov eax, 0xc8a6c0a6
cmpsb byte [esi], byte es:[edi]
shl byte [esi - 0x591f5928], 1
call 0xf8f29418
cmpsb byte [esi], byte es:[edi]
add byte [edi - 0x58ef58f8], ah
sbb byte [edi - 0x58d758e0], ah
xor byte [edi - 0x58bf58c8], ah
dec eax
cmpsd dword [esi], dword es:[edi]
push eax
cmpsd dword [esi], dword es:[edi]
pop eax
cmpsd dword [esi], dword es:[edi]
pushal
cmpsd dword [esi], dword es:[edi]
push 0x78a770a7
cmpsd dword [esi], dword es:[edi]
and byte [edi - 0x586f5878], 0x98
cmpsd dword [esi], dword es:[edi]
mov al, byte [0xb0a7a8a7]
cmpsd dword [esi], dword es:[edi]
mov eax, 0xc8a7c0a7
cmpsd dword [esi], dword es:[edi]
shl byte [edi - 0x581f5828], 1
call 0xf8f39459
cmpsd dword [esi], dword es:[edi]

Function at 0x4ba3b3
Capabilities:
Check http status code

Disassembly:
add byte [eax - 0x57ef57f8], ch
sbb byte [eax - 0x57d757e0], ch
xor byte [eax - 0x57bf57c8], ch
dec eax
test al, 0x20
test al, 0x28
test al, 0x30
test al, 0x38
test al, 0x40
test al, 0x48
test al, 0x50
test al, 0x58
test al, 0x60
test al, 0x68
test al, 0x70
test al, 0x78
test al, 0x80
test al, 0x90
test al, 0x98
test al, 0xa0
test al, 0xa8
test al, 0xb0
test al, 0xb8
test al, 0xc0
test al, 0xc8
test al, 0xd0
test al, 0xd8
test al, 0xe0
test al, 0xe8
test al, 0xf0
test al, 0xf8
test al, 0
test eax, 0xa910a908
test eax, 0xa920a918
sub byte [ecx - 0x56c756d0], ch
inc eax
test eax, 0xa950a948
pop eax
test eax, 0xa968a960
jo 0x4ba3b8
js 0x4ba3ba
sub byte [ecx - 0x566f5678], 0x98
test eax, 0xa9a8a9a0
mov al, 0xa9
mov eax, 0xc8a9c0a9
test eax, 0xa9d8a9d0
loopne 0x4ba3d4
call 0xf8f594d9
test eax, 0xaa08aa00
adc byte [edx - 0x55df55e8], ch
sub byte [edx - 0x55c755d0], ch
inc eax
stosb byte es:[edi], al
dec eax
stosb byte es:[edi], al
push eax
stosb byte es:[edi], al
pop eax
stosb byte es:[edi], al
pushal
stosb byte es:[edi], al
push 0x78aa70aa
stosb byte es:[edi], al
sub byte [edx - 0x556f5578], 0x98
stosb byte es:[edi], al
mov al, byte [0xb0aaa8aa]
stosb byte es:[edi], al
mov eax, 0xc8aac0aa
stosb byte es:[edi], al
shr byte [edx - 0x551f5528], 1
call 0xf8f6951a
stosb byte es:[edi], al
add byte [ebx - 0x54ef54f8], ch
sbb byte [ebx - 0x54d754e0], ch
xor byte [ebx - 0x54bf54c8], ch
dec eax
stosd dword es:[edi], eax
push eax
stosd dword es:[edi], eax
pop eax
stosd dword es:[edi], eax
pushal
stosd dword es:[edi], eax
push 0x78ab70ab
stosd dword es:[edi], eax
sub byte [ebx - 0x546f5478], 0x98
stosd dword es:[edi], eax
invalid

Function at 0x4ba3f6
Capabilities:
Check http status code

Disassembly:
test al, 0x18
test eax, 0xa920a918
sub byte [ecx - 0x56c756d0], ch
inc eax
test eax, 0xa950a948
pop eax
test eax, 0xa968a960
jo 0x4ba3b8
Function at 0x4ba4fe
Capabilities:
Check http status code

Disassembly:
lodsd eax, dword [esi]
cmp byte [ebp - 0x52b752c0], ch
push eax
lodsd eax, dword [esi]
pop eax
lodsd eax, dword [esi]
pushal
lodsd eax, dword [esi]
push 0x78ad70ad
lodsd eax, dword [esi]
sub byte [ebp - 0x526f5278], 0x98
lodsd eax, dword [esi]
mov al, byte [0xb0ada8ad]
lodsd eax, dword [esi]
mov eax, 0xc8adc0ad
lodsd eax, dword [esi]
shr byte [ebp - 0x521f5228], 1
call 0xf8f995dd
lodsd eax, dword [esi]
add byte [esi - 0x51ef51f8], ch
sbb byte [esi - 0x51d751e0], ch
xor byte [esi - 0x51bf51c8], ch
dec eax
scasb al, byte es:[edi]
push eax
scasb al, byte es:[edi]
pop eax
scasb al, byte es:[edi]
pushal
scasb al, byte es:[edi]
push 0x78ae70ae
scasb al, byte es:[edi]
sub byte [esi - 0x516f5178], 0x98
scasb al, byte es:[edi]
mov al, byte [0xb0aea8ae]
scasb al, byte es:[edi]
mov eax, 0xc8aec0ae
scasb al, byte es:[edi]
shr byte [esi - 0x511f5128], 1
invalid

Function at 0x4ba608
Capabilities:
Check http status code
Encode data using xor

Disassembly:
mov byte [edi - 0x50675070], ch
mov al, byte [0xb0afa8af]
scasd eax, dword es:[edi]
mov eax, 0xc8afc0af
scasd eax, dword es:[edi]
shr byte [edi - 0x501f5028], 1
call 0xf8fb965d
scasd eax, dword es:[edi]
add byte [eax], al
add byte [eax], al
push cs
add ah, ch
add eax, dword [eax]
add byte [eax], al
mov al, byte [0xa010a008]
sbb byte [eax - 0x5fd75fe0], ah
xor byte [eax - 0x5fbf5fc8], ah
dec eax
mov al, byte [0xa060a050]
push 0x78a070a0
mov al, byte [0xa088a080]
nop
mov al, byte [0xa0a0a098]
test al, 0xa0
mov al, byte [0xa078a070]
and byte [eax - 0x5f6f5f78], 0x98
mov al, byte [0xa0a8a0a0]
mov al, 0xa0
mov eax, 0xc8a0c0a0
mov al, byte [0xa0d8a0d0]
loopne 0x4ba591
call 0xf8ec9696
mov al, byte [0xa108a100]
adc byte [ecx - 0x5edf5ee8], ah
sub byte [ecx - 0x5ec75ed0], ah
inc eax
mov eax, dword [0xa150a148]
pop eax
mov eax, dword [0xa168a160]
jo 0x4ba5b6
pushal
mov eax, dword [0xa170a168]
js 0x4ba5b8
and byte [ecx - 0x5e6f5e78], 0x98
mov eax, dword [0xa1a8a1a0]
mov al, 0xa1
mov eax, 0xc8a1c0a1
mov eax, dword [0xa1d8a1d0]
loopne 0x4ba5d2
call 0xf8ed96d7
mov eax, dword [0xa208a200]
adc byte [edx - 0x5ddf5de8], ah
xor byte [edx - 0x5dbf5dc8], ah
dec eax
mov byte [0xa258a250], al
pushal
mov byte [0xa270a268], al
and byte [edx - 0x5d6f5d78], 0x98
mov byte [0xa2a8a2a0], al
mov al, 0xa2
mov eax, 0xc8a2c0a2
mov byte [0xa2d8a2d0], al
loopne 0x4ba60f
call 0xf8ee9714
mov byte [0xa308a300], al
adc byte [ebx - 0x5cdf5ce8], ah
sub byte [ebx - 0x5cc75cd0], ah

Function at 0x4ba683
Capabilities:
Check http status code

Disassembly:
clc
mov eax, dword [0xa200a1f8]
or byte [edx - 0x5de75df0], ah
and byte [edx - 0x5dc75dd0], ah
inc eax
mov byte [0xa250a248], al
pop eax
mov byte [0xa268a260], al
jo 0x4ba5f5
inc eax
mov dword [0xa350a348], eax
pop eax
mov dword [0xa370a360], eax
js 0x4ba634
and byte [ebx - 0x5c6f5c78], 0x98
mov dword [0xa3a8a3a0], eax
mov al, 0xa3
shl byte [ebx - 0x5c2f5c38], 0xd8
mov dword [0xa3e8a3e0], eax
invalid
Function at 0x4ba934
Capabilities:
Check http status code

Disassembly:
scasb al, byte es:[edi]
push 0x78ae70ae
scasb al, byte es:[edi]
sub byte [esi - 0x516f5178], 0x98
scasb al, byte es:[edi]
mov al, byte [0xb0aea8ae]
scasb al, byte es:[edi]
mov eax, 0xc8aec0ae
scasb al, byte es:[edi]
shr byte [esi - 0x511f5128], 1
call 0xf8fa9a08
scasb al, byte es:[edi]
add byte [edi - 0x50ef50f8], ch
sbb byte [edi - 0x50d750e0], ch
xor byte [edi - 0x50bf50c8], ch
Function at 0x4bb0e8
Capabilities:
Check http status code

Disassembly:
lodsd eax, dword [esi]
pop eax
lodsd eax, dword [esi]
pushal
lodsd eax, dword [esi]
push 0x78ad70ad
lodsd eax, dword [esi]
sub byte [ebp - 0x526f5278], 0x98
lodsd eax, dword [esi]
mov al, byte [0xb0ada8ad]
lodsd eax, dword [esi]
mov eax, 0xc8adc0ad
lodsd eax, dword [esi]
shr byte [ebp - 0x521f5228], 1
call 0xf8f9a1bf

Function at 0x4bb239
Capabilities:
Check http status code

Disassembly:
mov al, byte [0xa078a070]
add byte [ecx - 0x5eef5ef8], ah
sbb byte [ecx - 0x5ed75ee0], ah
xor byte [ecx - 0x5ebf5ec8], ah
dec eax
mov eax, dword [0xa158a150]
pop eax
mov eax, dword [0xa168a160]
jo 0x4bb19c
or byte [ecx - 0x5ee75ef0], ah
and byte [ecx - 0x5ecf5ed8], ah
cmp byte [ecx - 0x5eb75ec0], ah
push eax
mov eax, dword [0xa160a158]
pop eax
invalid
pushal
invalid
push 0x78a170a1
mov eax, dword [0xa188a180]
nop
mov eax, dword [0xa1a0a198]
test al, 0xa1
js 0x4bb19e
and byte [ecx - 0x5e6f5e78], 0x98
mov eax, dword [0xa1a8a1a0]
mov al, 0xa1
mov eax, 0xc8a1c0a1
mov eax, dword [0xa1d8a1d0]
loopne 0x4bb1b8
call 0xf8eda2bd
mov eax, dword [0xa208a200]
adc byte [edx - 0x5ddf5de8], ah
sub byte [edx - 0x5dc75dd0], ah
inc eax
mov byte [0xa250a248], al
pop eax
mov byte [0xa268a260], al
mov byte [0xa210a208], al
sbb byte [edx - 0x5dd75de0], ah
xor byte [edx - 0x5dbf5dc8], ah
dec eax
mov byte [0xa258a250], al
pushal
mov byte [0xa270a268], al
jo 0x4bb1dd
mov byte [0xa278a270], al
jo 0x4bb1dd
js 0x4bb1df
and byte [edx - 0x5d675d70], 0xa0
mov byte [0xa2b0a2a8], al
mov eax, 0xc8a2c0a2
mov byte [0xa2d8a2d0], al
loopne 0x4bb1f7
call 0xf8eea2fc
mov byte [0xa308a300], al
adc byte [ebx - 0x5cdf5ce8], ah
sub byte [ebx - 0x5cc75cd0], ah
inc eax
mov dword [0xa350a348], eax
pop eax
mov dword [0xa368a360], eax
jo 0x4bb21c
js 0x4bb21e
and byte [ebx - 0x5c6f5c78], 0x98
mov dword [0xa3a8a3a0], eax
mov al, 0xa3
mov eax, 0xc8a3c0a3
mov dword [0xa3d8a3d0], eax
loopne 0x4bb238
call 0xf8efa33d
mov dword [0xa408a400], eax
adc byte [eax + ebx + 0x28a420a4], ah
movsb byte es:[edi], byte [esi]
xor byte [eax + edi + 0x48a440a4], ah
movsb byte es:[edi], byte [esi]
push eax
movsb byte es:[edi], byte [esi]
pop eax
movsb byte es:[edi], byte [esi]
pushal
movsb byte es:[edi], byte [esi]
push 0x78a470a4
movsb byte es:[edi], byte [esi]
and byte [eax + ecx*4 - 0x675b6f5c], 0xa4
mov al, byte [0xb0a4a8a4]
movsb byte es:[edi], byte [esi]
mov eax, 0xc8a4c0a4
movsb byte es:[edi], byte [esi]
shl byte [eax + ebx*8 - 0x175b1f5c], 1
movsb byte es:[edi], byte [esi]
invalid