joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1009d22f
Capabilities:
Encode data using xor

Disassembly:
call fcn.100877dc
or esp, esp
jb 0x1009d292
sbb eax, 0xfea5ae92
jnp 0x1009d273
xor byte [esp + edx + 0x55d8011b], 0xae
mov edx, dword [esp + edx + 0x55d80117]
xor byte [esp + 0x10], 0x3d
call fcn.10025178
add byte [eax], al
dec ecx
aas
aam 0x73
fbld tbyte [edx + 9]
or dword [ecx - 0x341d203], ecx
mov bh, 0x1f
mov ebp, edi
sub eax, 0x1fb7fcbe
xchg ebp, eax
pop ds
adc bh, byte gs:[ebp - 0xc5d3a36]
xor al, 0xd0
xor eax, 0x10efac41
popal
mov cl, 0x50
inc edi
push edx
salc
js 0x1009d298
invalid

Function at 0x1009e176
Capabilities:
Check http status code

Disassembly:
mov edi, dword [esp + 8]
jbe 0x100729c2
mov dh, 0x16
dec eax
mov edi, 0x5a4616e3
sbb byte [esp + ecx*2], dl
fild word [edi - 0x733fb7f4]
popal
and esp, edx
mov es, ebx
clc
enter 0xffffffffffffa2e0, 0xffffffffffffffe5
invalid

Function at 0x1009e8cc
Capabilities:
Check http status code

Disassembly:
not cl
jb 0x100d00ba
cmp cl, 0x32
mov ecx, dword [esp + 0x20]
call fcn.100a1674

Function at 0x1009eaaf
Capabilities:
Check http status code

Disassembly:
push 0x80adf3af
lea esp, [esp + 0x18]
jmp fcn.100eff85

Function at 0x1009ec2e
Capabilities:
Check http status code

Disassembly:
movsx ecx, word [esp + 0x18]
jle 0x100ab848
call fcn.100c57d7

Function at 0x1009ec39
Capabilities:
Check http status code

Disassembly:
push edx
push ebx
mov ebx, 0x4c802783
pushfd
add ebx, 0x1c3f5314
jno 0x100c6868
xor edx, 0x86095ba1
neg ebp
jb 0x10069722
ja 0x1009fd2a
mov edi, eax
jg 0x100b3f49
add edx, dword [esp + ebp + 0x10]
cmp dx, word [esp + ebp + 0x11]
setne byte [esp + edx + 0x596d6463]
call fcn.10025005
add ebx, ebx
cmp bl, bh
add ecx, 0xd78757ab
call fcn.1009dc3b
call fcn.10071f7c

Function at 0x1009f280
Capabilities:
Check http status code

Disassembly:
mov edi, dword [esp + 8]
sub word [esp + edi - 0xb3cd9e5], 0x4a2f
cmp di, 0x9623
jns 0x1008f8fe
cdq
mov ch, byte [eax - 4]
jae 0x1009f2f8
dec edi
ret
mov bh, 0xf1
mov edx, dword [ebp + esi*4 - 0x136ec]
mov esi, dword [ebp + esi*8 - 0x26dd4]
add ecx, ecx
mov cl, byte [ebp + ecx - 0x6a269b6e]
push 0x8ba3d90c
adc ebp, 5
inc dword [esp]
dec dword [esp]
mov dword [esp], 0x1c8aafab
shrd edx, esi, cl
push 0xd5b3df1c
mov dword [ebp], edx
call fcn.100b8136
out dx, al
pop edx
hlt

Function at 0x1009f876
Capabilities:
Check http status code

Disassembly:
shl edi, 0xef
mov edx, 0x5f153e12
mov esi, dword [esp + ecx - 0x1ffff0]
mov esi, dword [esi + ecx*2 - 0x400000]
lea edx, [edi + edx*8 - 0x404101f8]
mov dword [esp + edi - 0x1fffffe8], ecx
or dword [esp + ecx*4 - 0x7fffe8], ecx
test cl, dl
js 0x100b4f66
lea esi, [esi + 0xabe8502]
not di
jo 0x100d4503
mov dword [esp + 0x10], ecx
mov edi, ecx
js 0x100de9c2
add dword [esp + 0x10], 0x1165f
xor cx, di
jns 0x1008e1ae
mov word [esp + 0x14], bp
add dword [esp], 0x1a634
push 0x48813716
mov eax, 0xaf8fd298
xor byte [esp + eax + 0x50702d68], 0x80
jo 0x10087866
call fcn.100e1ada
Function at 0x100a07d8
Capabilities:
Check http status code

Disassembly:
dec eax
mov edi, dword [ebx]
movsx ecx, al
dec eax
cwde
dec eax
add eax, dword [ebx + eax + 8]
btr ecx, ecx
jae 0x100a02d4
adc ecx, ecx
add cl, byte [ecx + ebx + 0x10]
call fcn.100c5e36
call fcn.10060d83
lea esp, [esp + 8]
jmp fcn.100254eb
dec eax
mov dword [esp + 0x10], 0xb21dd11f
dec eax
shl dword [esp + 0x10], 0x39
not edx
neg byte [esp + 0x12]
ror byte [esp + 0x15], 0xa7
jnp 0x1007d19b
inc esp
and ebp, edx
call fcn.100bebca

Function at 0x100a156b
Capabilities:
Check http status code

Disassembly:
mov ebp, dword [esp + 0x14]
shr dword [esp + ebp*4 - 0x24], 0xfc
mov dword [esp + ebp*4 - 0x20], edi
seta byte [esp + 0x18]
add word [esp + 0x14], 0xf0b4
lea ebx, [ebx + ebp*8 + 0x17bd1b2f]
push ebx
jns 0x10083049
call fcn.1008a35f
mov esi, dword [esp + 0xc]
add dword [esp + 0x10], 0xfffb7d59
call fcn.10075ee7
push ebx
mov edx, 0x511d949f
movsx ebx, dx
jbe 0x10076d95
neg bl
xor edi, 0x403c5c97
mov dword [esp + edx - 0x511d947b], ebp
add dword [esp + edx - 0x511d949b], 0x9a5bb
lea edi, [ebx*4 - 0x47f0ae55]
neg di
test ebx, 0xfda5519a
setbe dl
cmp edi, dword [esp]
push ecx
add dword [esp + 0x1c], 0xfff4bd41
push ebx
mov dword [esp + 8], 0xd921a50b
call fcn.1005ca1c
mov dword [ebp], esi
push 0x280630a5
push 0x49bb39a5
push 0xf40391be
lea esp, [esp + 0xc]
jmp fcn.100eff85

Function at 0x100a2665
Capabilities:
Check http status code

Disassembly:
mov eax, esp
mov ecx, 0x6316c218
lea ecx, [ecx - 0x6316c1c8]
mov edx, 0x4611c93f
lea edx, [ebp + edx - 0x4611c9bf]
mov edi, 0x929d8ab2
inc di
and edx, 0xfffffffc
sal edi, 0x7f
xor edi, edi
shr edi, 0xa4
sbb edx, ecx
mov esp, edx
call fcn.1005eac9
lea esp, [esp + 0xc]
ja fcn.100a8de0
mov eax, 0x8c2f2a33
jmp 0x1008a769

Function at 0x100a2794
Capabilities:
Check http status code

Disassembly:
push edx
mov edx, dword [esp + 0xc]
xor dword [esp + edx + 0x5f4393e9], edx
not word [esp + edx + 0x5f4393e9]
push ebp
mov dword [esp + edx + 0x5f4393fd], edi
push 0xb3bd178c
and dl, 0x91
test word [esp + edx + 0x5f4393ff], dx
jb 0x100b527b
add dword [esp + 0xc], 0x11192
mov ebp, edx
add dword [esp + ebp + 0x5f439417], 0xeff2a6eb
lea edi, [edi + 1]
jbe 0x10026804
mov esi, ecx
mov esi, dword [esp + esi + 0x78581d66]
mov esi, dword [esi + ecx + 0x78581d62]
xor edx, dword [esp + edx + 0x785858f3]
test dx, 0x6439
mov dword [esp + edx + 0x78585e04], ecx
lea esi, [esi + ecx + 0x3e96086e]
mov dl, ch
setae byte [esp + edx + 0x78585d32]
add word [esp + ecx + 0x78581d76], dx
xor dword [esp + edx + 0x78585d22], 0x639ab20
and dl, byte [esp + ecx + 0x78581d76]
xchg dword [esp + ecx + 0x78581d7a], esi
mov ecx, dword [esp + ecx + 0x78581d6a]
jno 0x1006816c
call fcn.10084479
push ebx
call fcn.1009e842
call fcn.1006f429
not esi
jmp 0x1007fbda

Function at 0x100a2cf6
Capabilities:
Check http status code

Disassembly:
push edi
xor word [esp + 0x1c], 0x8cbe
mov edi, 0xe339a43c
mov ecx, 0x6494d6b9
mov ecx, dword [esp + edi + 0x1cc65be8]
Function at 0x100a38da
Capabilities:
Check http status code

Disassembly:
adc ecx, eax
jmp fcn.1006099d
call fcn.100d74ef
push 0x431ec70f
not dword [esp]
adc ebp, 3
shr byte [esp], 0x81
ja 0x100b529f
call fcn.100ee910
call fcn.1005ac29
lea esi, [ebp + ebp*4 + 0xa31e524]
mov esi, dword [esp + ebp*8 - 0x34]
xchg dword [esp + ebp*4 - 0x23], ebp
pop edx
mov ebp, dword [esp + edx*8 - 0x4c94]
mov edx, dword [esp + edx - 0x97d]
push 0x4998968a
lea esp, [esp + 0x20]
ret
je 0x100a388b
int3
jne 0x1005b77b
mov ecx, dword [ebp]
mov eax, 0x30ab4db3
btr eax, 0x2b
mov eax, dword [ebp + eax - 0x30ab45af]
jb 0x1009e10f
push ebp
cmp ebp, esi
and byte [0xa32f8863], dl
push es
in al, dx
lea edi, [eax + 0x64707579]
dec ebx
inc ecx
jg 0x100a389d
neg byte [ebp + 0x2d]
cmpsd dword [esi], dword es:[edi]
cmp dword [edx - 0x28], ebp
dec esp
ret
jl 0x1005a21f

Function at 0x100a43db
Capabilities:
Check http status code

Disassembly:
mov edi, dword [esp + 4]
neg cl
or ebx, 0xd07e9b5
call fcn.10080870
shr dword [esp + 0x20], 0xaf
sub word [esp + 0x20], dx
mov edx, dword [esp + 0x18]
and bp, 0x6a91
shr byte [esp + 0x20], 0x78
shl dword [esp + 0x2c], 0x25
sub dword [esp + 0x2c], 0xe1a9148a
mov ebp, dword [esp + 0xc]
cmp dword [esp + 0x20], 0x3c1dbf1b
not word [esp + 0x20]
call fcn.100be1eb
xor di, di
je 0x1008c162
Function at 0x100a5081
Capabilities:
Check http status code

Disassembly:
call fcn.100f30ea
jmp 0x10082704

Function at 0x100a50a6
Capabilities:
Check http status code

Disassembly:
push 0x39b96a28
dec eax
lea esp, [esp + 0x28]
jmp fcn.100345d9

Function at 0x100a5244
Capabilities:
Check http status code

Disassembly:
mov si, word [ecx + ebp - 0x1c9692e6]
mov dword [esp + ecx - 0x1c9692e6], ecx
shr cl, cl
mov cl, byte [ecx + ebp - 0x1c969201]
adc ebp, 1
jmp 0x100b2616
push 0xea2b2d8d
shr si, cl
mov word [ebp], si
jmp 0x100c2211
jmp 0x100627b3

Function at 0x100a5d93
Capabilities:
Check http status code

Disassembly:
test bl, 0x9d
add dword [esp], 0xfff42ed9
neg bl
jg 0x1003f7b7
test ebx, 0xb4b67139
mov dword [esp + ebx*2 + 4], ebx
mov edi, dword [esp + ebx]
mov edi, dword [edi + ebx]
jno 0x100e0512
jae 0x1007b32b
shr dword [esp + ebx*8 + 4], 0x6e
not bl
setae bl
not bl
lea edi, [edi + ebx + 0x17bd1aa1]
jne 0x1008b252
xor ebx, dword [esp + ebx - 0xfa]
call fcn.100a23ae

Function at 0x100a73ca
Capabilities:
Encode data using xor

Disassembly:
movsx esi, dx
mov dx, 0x8a86
mov edx, dword [esp + edx + 0x47cb7596]
mov edx, dword [edx]
lea esi, [esi + ebx*8 + 0x51099983]
call fcn.1008ad79
dec edi
jp 0x100a7464
or dword [ecx - 0x18], edx
xchg ebx, eax
cmp esi, edi
dec dword [edi + 0x7a]
jnp 0x100a73e2
clc
mov al, byte [0x11da6355]
stosb byte es:[edi], al
sub dword [edx + 0x2fc975da], esp
sbb al, 0xea
cmp dword [edx], edi
cmc
insb byte es:[edi], dx
mov edi, 0xcbb937da
pop esi
imul edx, dword [ecx - 0x4ca9465], 0x319c977a
fidiv dword [edi]
mov ecx, 0x91695ecb
wait
imul esi, dword [0x9c977afb], 0x31
mov byte [esi], al
fldenv [ebp - 0x28b702aa]
inc ebx
std
xor cl, dl
aaa
lodsd eax, dword [esi]
lea esp, [ebx - 0x26]
lea eax, [esi + 0x6c28fc32]
cld
ja 0x100a7416
xor bh, ah
sub byte [esp + edi*8 + 0x77], ch
out dx, eax
test edx, ecx
mov ebp, ebp
jae 0x100a742f
sal dword [edi - 0x5f], 0x9d
sbb al, byte [edx + 0x7a]
mov eax, dword [0x7a421a9d]
or eax, 0xfc89dd0c
cmp bh, dh
enter 0x7599, 0x70
add byte [esi + 0x4d], ah
or byte [edx - 0x531222f2], 0x50
cwde
loope 0x100a73df
push es
xor byte [eax], dl
sub ebx, dword [eax]
lodsd eax, dword [esi]
mov al, byte [0x5e52ce42]
ror dl, 0x85
pop esp
fild qword [edx + 0x16]
arpl word [eax], dx
jne 0x100a73fe
fsubp st(3)
cmp byte [ebx], 0x51
cld
bound edi, qword [ebp - 0x7490682b]
adc eax, 0xfcbe7cfc
in al, dx
mov dword [0xee81c957], eax
sub dword [ebx], esp
cmp dh, byte [ebp - 0x7f]
pop es
sub al, 0xeb
xchg ecx, ecx
idiv byte [ecx + 0x2ee4fc0b]
sbb byte [ecx + 0x1d5660f3], al
and cl, byte [0x4505bd6a]
mov dword [ecx], esp
add al, 0x6a
push 0x38
ja 0x100a7420
sbb eax, 0x66e66133
cmp esp, dword [ebx - 4]
push 0xffffffffffffff97
push ebp
push 0xffffffffffffff86
ljmp 0xe9ff

Function at 0x100a764e
Capabilities:
Check http status code

Disassembly:
and si, 0x8c23
xchg dword [esp + edx*2 - 0x76e17a02], edi
mov edx, dword [esp + edx - 0x3b70bcf7]
add dword [esp + esi - 0x692a8821], 0xeff51ed2
mov word [esp + esi - 0x692a8809], 0xa8b0
call fcn.100ae73b
neg dl
test edx, 0x2a370d11
mov dword [esp + edx - 0x3b70bcfb], edx
lea edi, [edi + edx - 0x7f40b568]
jle fcn.100eafea
jns 0x10055734
not al
call fcn.100c335f
Function at 0x100a770f
Capabilities:
Check http status code

Disassembly:
call fcn.100c5eee
mov ecx, 0xdd18c51b
mov eax, ecx
mov ecx, dword [ebp]
cwde
neg eax
mov ax, word [ebp + eax*8 - 0x1d724]
call fcn.100c9a52
not dword [esp + 0x11]
dec eax
lea esp, [esp + 0x18]
jmp fcn.100a49ac

Function at 0x100a79ad
Capabilities:
Check http status code

Disassembly:
mov dword [esp], 0xa3aed283
adc ebp, 2
jmp 0x100b984c

Function at 0x100a7efb
Capabilities:
Check http status code

Disassembly:
push edi
pushfd
mov edi, 0xe914d7bd
add dword [esp + 8], 0xa00fb
mov eax, 0xf0868b1a
or al, 0x1c
lea eax, [eax*2 + 0x2d2900]
or edi, edi

Function at 0x100a8aa8
Capabilities:
Check http status code

Disassembly:
mov dword [esp + 4], 0xffcd2ab5
lea esp, [esp + 4]
call fcn.10095d28
dec ebp
mov edx, dword [ebp]
call fcn.100900ab
cmpsd dword [esi], dword es:[edi]
xor eax, 0x4481d70f
add dword [esp], 0xfffd9b97

Function at 0x100a8b01
Capabilities:
Check http status code

Disassembly:
push 0xee917a22
call fcn.100b4cfe

Function at 0x100abf54
Capabilities:
Check http status code

Disassembly:
mov ebp, dword [esp + ebp*2 + 0x2a]
jo 0x100c57b4
mov word [esp + 0x24], 0xf93c
or word [esp + 0x18], 0xca4
push dword [esp + 0x28]

Function at 0x100ace72
Capabilities:
Check http status code

Disassembly:
je fcn.100a6919
call fcn.100bead7

Function at 0x100ace7d
Capabilities:
Check http status code

Disassembly:
mov dword [esp], 0xaf2e5bb7
div edi
jmp 0x100cbd5a
push 0xbd06f131
mov dword [ebp], edx
call fcn.1007cb13

Function at 0x100ad511
Capabilities:
Check http status code

Disassembly:
push edi
xchg dword [esp + 0x38], eax
mov ebx, dword [esp + ebp + 0x346a71d8]
jo 0x1008e612
add ebp, 0xe12ecab0
sub byte [esp + 0x1c], 0x35
jns 0x1005ae4b
mov edi, dword [esp + 0x28]
sub ebp, ebp
shl ebp, 0x7b
not word [esp + 0x24]
mov ebp, dword [esp + 0x34]
cmp word [esp + 0x24], 0x47af
mov byte [esp + 0x1c], pe_nt_image_headers32
push dword [esp + 0x2c]
popfd
lea esp, [esp + 0x38]
ret
Function at 0x100afcb7
Capabilities:
Check http status code

Disassembly:
ret
push ebx
mov ebx, 0x9e8caa33
push edi
mov edx, dword [esp + ebx + 0x617355e1]
stosb byte es:[edi], al
mov word [esi + 0x1c948b57], ds
loope 0x100afd18
jae 0x100afd26
mov edx, dword [edx + ebx + 0x617355cd]
mov edi, 0x95af3406
mov dword [esp + edi + 0x6a50cc0e], ebx
push ebx
shr dword [esp + edi + 0x6a50cc12], 0xae
jb 0x100f1857
adc dword [edx + 0x3b05bdca], edx
push ebx
ja 0x100afce8
xchg edx, eax
retf 0x5bd
test byte [esi + 0x2f], bh
cdq
inc ebp
pop ebp
pop ecx
mov eax, dword [0x5107c0e4]
add byte [ebx + 0x5f], 0xc1
mov ecx, 0x5c3b4026
jbe 0x100afcba
xor eax, 0xc653e8f4
aaa
and al, 0x31
mov eax, esp
salc
std
sub al, 0x24
jno 0x100afd0c
push ebx
invalid
aaa
aaa
xchg ebp, eax
push eax
cmp ebx, esp
ja 0x100afd40
sal byte [edi + 0x53ee592], 0x5c
pop esp
mov ecx, 0x74db9e50
pop esi
or byte [edx + edi - 0x29eb46f3], dl
dec eax
fnstenv [edi + 0xf]
leave
dec esp
hlt
mov ah, 0x99
add dh, byte [eax]
xchg ebx, eax
call 0xfc6e7b54
nop
movsb byte es:[edi], byte [esi]
xchg ecx, eax
aad 0x4b
dec ebx
lodsd eax, dword [esi]
retf 0x46d5
push edi
ja 0x1006864a
lea edx, [edx + ebx + 0x6d9f166e]
not bx
and word [esp + ebx + 0x6173aa38], 0xc900
push edx
jbe 0x100e1d1c
jle 0x100b9075

Function at 0x100b08b9
Capabilities:
Check http status code

Disassembly:
add ebp, 2
push 0x6f2fa898
not cl
mov dword [esp + 4], 0x660a05b6
rol word [esp], 0x81
call fcn.100b90d0
dec esp
mov ebx, dword [ebx]
mov edx, 0x62afce00
shr dl, 4
jnp 0x1008e212
mov edx, dword [ebx + edx - 0x62afcdf8]
call fcn.100eed2c

Function at 0x100b1f60
Capabilities:
Check http status code

Disassembly:
push edx
cmp dword [esp + 0x10], 0xb11fb71f

Function at 0x100b26f5
Capabilities:
Check http status code

Disassembly:
lea esp, [esp + 4]
ret
jae 0x10064755
pushfd
mov ebp, 0x1a8f8ca8
call fcn.1006e974
pushfd
add dword [esp + 4], 0xeffa91c4
call fcn.100aeb34
push ebp
mov eax, dword [esp + eax - 0xc294024]
mov eax, dword [eax + ebx*8 - 0x3b225f78]
jge 0x1002dfce
mov esi, 0x9cb9cdad
mov dword [esp + esi + 0x6346325f], esi
call fcn.100817c5
call 0x10056e03
mov edi, dword [esp + 4]
mov edi, dword [edi]
jb 0x10056df8
je 0x100cf249
pushfd
call fcn.100af0e7
add dword [esp + 4], 0xfffe50d4
mov edi, 0xba1b4b17
sub edi, edi
jae 0x10036668
lea edi, [edi - 0x6d446a5e]
add dword [esp], 0xeff0cc01
xchg dword [esp + 0xc], edi
push dword [esp + 8]
popfd
lea esp, [esp + 0xc]
ret

Function at 0x100b270a
Capabilities:
Check http status code

Disassembly:
mov ebx, dword [esp + ebx + 0x2c720008]
mov ebx, dword [ebx + esi + 0x140ae898]
add si, 0x3914
call fcn.100a206d
cmp dword [0x666cde8d], ecx
invalid
jge 0x1008d67e

Function at 0x100b2c08
Capabilities:
Check http status code

Disassembly:
add ebp, 2
mov dword [esp], 0x9d3e84b4
mov word [ebp], cx
push 0xa49384a6
lea esp, [esp + 8]
jmp fcn.100a8de0
Function at 0x100b4aa8
Capabilities:
Check http status code

Disassembly:
test ebx, ebx
push edi
push ebx
mov edx, dword [esp + ebx - 0x7121772d]
mov edx, dword [edx + ebx - 0x7121773d]
jo 0x100d9899
mov dword [esp + ebx - 0x7121772d], ebx
call fcn.10026e70
mov dword [ebp], esi
jmp 0x100c7660
lea esp, [esp + 4]
jmp fcn.100eff85
call fcn.1002559f
stosd dword es:[edi], eax
sbb eax, 0x2e6afa82
mov eax, dword [0x267a6c30]
push edx
add dl, byte [edi - 0x6be1a32b]
into
dec edi
xor eax, 0x2b2343c5
mov ch, 0x15
push eax
invalid

Function at 0x100b5381
Capabilities:
Check http status code

Disassembly:
push eax
push edx
pushfd
mov edx, 0x5791059f
call fcn.10074c42
lea eax, [eax + 0x708707a3]
not byte [esp + edi + 0x5450c28d]
mov edx, edi
cmp dword [esp + edi + 0x5450c28d], 0x4d96ca3e
jl 0x100b236d
pushfd
push esi
call fcn.1006dda7

Function at 0x100b751e
Capabilities:
Check http status code

Disassembly:
jbe 0x10038fd3
push ebx
push 0x5e8b1301
pushfd
mov ebx, dword [esp + 4]
mov dword [esp + ebx - 0x5e8b12e5], eax
neg dword [esp + ebx - 0x5e8b12fd]
push ebp
mov ebp, ebx
shl ebx, 0xd1
push edx
js 0x1009fd2e
mov edx, dword [esp + ebx*2 - 0x4c03fff4]
shl bx, 0x4d
add dword [esp + 0x1c], 0xffff8aa9
call fcn.100a5bd3

Function at 0x100b907f
Capabilities:
Check http status code
Encode data using xor

Disassembly:
push 0xef343a0d
call fcn.1002f651
lea edx, [esp + edx + 0x14]
mov byte [edx], al
jae 0x1009ce95

Function at 0x100b909f
Capabilities:
Check http status code

Disassembly:
push esi
call fcn.100afc94
mov bx, word [ebx]
jmp fcn.100a49ac

Function at 0x100b94e6
Capabilities:
Check http status code

Disassembly:
pushfd
and ecx, 0x33a9cb9b
push edi
cmp ecx, 0x7f074e0a
mov cx, 0x689c
lea esi, [esi - 0x43cff855]
lea ecx, [ecx*8 + 0x2c84699f]
push ebx
mov ebx, 0xc0324b28
je fcn.100a07a4
and ebx, ebx
xchg dword [esp + 0x1c], esi
mov ecx, dword [esp + 0x14]
jo 0x100a3cfc
call fcn.100c6835
mov dword [ebp - 4], ebx
jmp 0x100b4dfa

Function at 0x100b9f3c
Capabilities:
Check http status code

Disassembly:
shr cl, cl
xchg dword [esp + ecx + 0x28], eax
mov ecx, dword [esp + ecx*2 + 8]
shl edx, 0xb3
sub dx, word [esp + 0xc]
test word [esp + 0xc], dx
mov edx, dword [esp + 0x1c]
js 0x100e37e7
not dword [esp + 0x20]
shr byte [esp + 0xc], 0x33
sub dword [esp + 0x20], 0xbb75a96
test dword [esp + 0x20], 0xce17552b
push dword [esp + 0x24]
popfd
lea esp, [esp + 0x28]
ret

Function at 0x100ba6ba
Capabilities:
Check http status code

Disassembly:
pop esi
call fcn.1006baab
mov edi, 0xf38ab9b0
dec eax
mov edi, dword [ebx]
mov ecx, 0x748b9832
dec eax
shl ecx, 0x92

Function at 0x100ba77c
Capabilities:
Check http status code

Disassembly:
dec eax
lea esp, [esp + 0x18]
jmp fcn.100345d9
jmp 0x100bcda6
jmp 0x100b0358

Function at 0x100bb3eb
Capabilities:
Check http status code

Disassembly:
xor bx, bx
mov ebx, dword [esp + ebx + 0x3ad50010]
cmp dword [esp + 0x1c], 0xf7279f16
mov dword [esp + 0x1c], 0x48ce40e
jns 0x10071a42
and byte [esp + 0x1c], 0x84
test dword [esp + 0x1c], 0xc157995
not dword [esp + 0x1c]
push dword [esp + 0x20]
popfd
lea esp, [esp + 0x2c]
ret
jl 0x100968da
Function at 0x100bb4b5
Capabilities:
Check http status code

Disassembly:
shr ebp, 0x33
cmp word [esp + eax*4 + 0x57b8a774], bp
call fcn.100cf3d8

Function at 0x100bc749
Capabilities:
Check http status code

Disassembly:
mov byte [esp + 8], 0x24
jo 0x1005fc08
or byte [esp + 8], 0
sete byte [esp + 8]
mov dword [esp + 0x10], esi
call fcn.100e020c
mov ecx, 0x61bb9927
movsx esi, cl
add ecx, 0xbc3e9d05
sub cx, si
jl 0x1005fb31
and si, 0x1822
lea edi, [edi + ecx*4 - 0x77e8d813]
shr cx, cl
add dword [esp], 0x15c86
movsx cx, cl
shr si, 0x1c
xor esi, 0xfbbd1017
xor esi, 0x673dc322
mov dword [esp + esi + 0x637f2ce3], edi
xor cl, 0xb4
add cx, 0x1927
cmp ecx, 0x5488a3b3
push edx
mov edx, 0x67a5ab28
nop
mov edi, 0x7ca59083
jns fcn.1005bc36
or edi, 0xe4aca4b9
mov edi, dword [esp + edx - 0x67a5ab24]
mov edi, dword [edi + esi + 0x637f2ccb]
call fcn.100677ab
Function at 0x100bea94
Capabilities:
Check http status code

Disassembly:
lea esp, [esp + 0x1c]
jns fcn.100eff85

Function at 0x100bead7
Capabilities:
Check http status code

Disassembly:
je 0x100ca2fc
jae 0x1002d1e7

Function at 0x100bec42
Capabilities:
Check http status code

Disassembly:
inc cx
not ebx
dec eax
mov dword [esp], 0x148d703f
inc cx
not ebp
jmp 0x100a6340

Function at 0x100bf5a2
Capabilities:
Encode data using xor

Disassembly:
mov ebp, 0x792bd8e
cmp bp, 0x7500
jae 0x100bc667
popal
fisub dword [ebx]
xchg ebx, eax
and esp, dword [ebp - 0x60d4e920]
xor dword [ebx + 0x738a8c01], ecx
sub dword [ebx + edi - 0x1fcbc8f5], ebx
or esi, dword [edi]
xor al, 0xe0
xchg esi, eax
daa
sbb dword [ecx + 0x49], esi
cmp eax, 0x4119cc39
mov word [ecx + esi*4 + 0x42], gs
dec ecx
ja 0x100bf5c5
jo 0x100bf5db
jmp edi
out 0x71, eax
and al, 0x15
xor eax, 0xb25c6142
inc ecx
or esi, dword [ecx + 0x42]
dec ebx
sub al, 0x78
lea edi, [ecx - 0x6ebcf045]
adc byte [edx + 0x41], cl
fmul dword [ebx]
out 0xf2, al
not dword [eax + 0x55]
push eax
push ebp

Function at 0x100c140e
Capabilities:
Check http status code

Disassembly:
setbe dl
mov ecx, dword [esp + esi - 0x6eb55127]
mov ecx, dword [ecx + esi - 0x6eb55133]
mov edx, 0x863ad73a
mov dword [esp + esi - 0x6eb55127], esi
shl edx, 0xa1
add dword [esp + esi - 0x6eb55133], 0xb87fe
call fcn.10079045

Function at 0x100c183c
Capabilities:
Check http status code

Disassembly:
push ecx
mov dword [esp + 4], 0xeff4ceaf
lea esp, [esp + 4]
call fcn.100a5081
mov ebx, dword [ebx]
jmp 0x100d665f

Function at 0x100c1897
Capabilities:
Check http status code

Disassembly:
mov dword [esp + ecx + 0x67ed3ef4], ecx
setle cl
lea eax, [eax + 0x40b81c95]
neg ecx
add dword [esp + 0x10], 0x6d0b912a
xor byte [esp + 0x10], 0x10
not ecx
mov esi, eax
setns cl
add dword [esp + ecx + 0x67ed3f0b], 0xeff9dcdf
xor word [esp + ecx + 0x67ed3f0f], 0x9883
and dword [esp + ecx + 0x67ed3f0f], ecx
push 0xde1e5923
xor ecx, 0x87bdc5af
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0xc]
not dword [esp]
setge byte [esp + 0x14]
shl dword [esp + 0x14], 0x43
test byte [esp + 0x14], 0xf
je 0x100609de
push dword [esp + 0x20]
popfd
lea esp, [esp + 0x2c]
ret
Function at 0x100c335f
Capabilities:
Check http status code

Disassembly:
mov word [eax], dx
call fcn.100e0e12
lahf
dec esi
lea ecx, [ecx]
inc ecx
mov esi, 0xabad60b3
dec ecx
dec esi
inc sp
mov esi, dword [ebx]
inc ecx
mov ebp, 0x5d07ba1a
jge 0x100b7d9f
and dword [esp + 0xb], 0x6995f732
xor bl, al
shr dword [esp + 0x10], 0x93
dec byte [esp]
lea eax, [esp + eax + 0x14]
jb 0x100c949f
jg 0x10026d63
inc ecx
rol ch, 1
add dword [esp + 0xd], 0x9d9bc530
rol byte [esp + 0xc], 0x26
inc ecx
sbb ch, 0x24
push 0xd8ba9db8
jmp 0x100a4438
inc ecx
ror ch, 1
jmp 0x10029a6e
dec edx
lea ebx, [ebx + ebp - 0x5d07ba18]
inc cx
sar ebp, 0x46
inc ecx
inc ch
inc edi
movzx ebp, byte [eax + ebp - 0x5d07fee9]
dec ecx
adc eax, 1
push 0x8bbc1a
inc ebp
xor ch, cl
inc ecx
add ch, 0x8a
dec eax
and dword [esp], 0x18845abd
push 0xbaba4404
push 0x2cb1641c
inc ecx
neg ch
shl dword [esp + 0xd], 0x52
jp 0x1008e6b4
mov dword [esp], 0x869115bb
push 0xf42bf80f
neg al
add word [esp + 5], 0xa093
jnp 0x1002cb0c
stc
add dword [esp + edi - 0xc0628bf], 0x43234
test byte [ecx + eax*2], bh
xlatb
stc
xor al, 0x32
add al, 0
mov eax, dword [ebp + ecx*4 - 0x2c3bcf8]
call fcn.10071f38
jae 0x100c947f
mov dl, 0x3b
dec ebp
enter 0x128e, 0x62
popfd
stc
push 0x3a662e34
push edx
std
insb byte es:[edi], dx
in al, 0xf3
xchg byte [esi - 0x38fec910], bh
or byte [eax], dl
std
outsb dx, byte [esi]
pop esi
cmp bh, dh
out dx, eax
mov esi, 0xeb356bd7
out dx, eax
cli
push cs
xor eax, 0x12ece4c1
loop 0x100c947c
jl 0x100c94ab
lodsd eax, dword [esi]
xor al, 0xfb
invalid

Function at 0x100c5212
Capabilities:
Check http status code

Disassembly:
xor dl, bl
sal cl, 0xa4
sbb dl, 0xad
call fcn.1009010a

Function at 0x100c55ec
Capabilities:
Check http status code

Disassembly:
mov dword [esp + 0xc], ebx
shl dx, 0xa1
jbe fcn.100b8912
lea edi, [edi + ebx + 0x59070056]
jae 0x1009d03c

Function at 0x100c6740
Capabilities:
Check http status code

Disassembly:
jmp 0x100c7b3f
not eax
jmp 0x1005c5c7
mov esi, dword [esp + 0x18]
call fcn.100dc163
push 0x1ea4349f
jmp 0x100b20b9

Function at 0x100c847e
Capabilities:
Check http status code

Disassembly:
push 0x5227d06
not dl
mov dword [esp + 4], 0x5bbd05be
inc dl

Function at 0x100c9a52
Capabilities:
Check http status code

Disassembly:
mov dword [esp], 0xefb20793
call fcn.10063927

Function at 0x100ca86d
Capabilities:
Encode data using xor

Disassembly:
sbb al, 0x95
add dword [esi + 0x66], 0xffffff89
push esp
and eax, 0x68a1e900
add al, byte [eax]
pop ebp
push ebx
pushfd
mov ebx, 0xcb269e86
test bl, bl
jb fcn.10077cdf
and byte [edx - 0x2c], 0xfa
dec dword [edi]
xchg dword [ebp - 0x1f], ebx
clc
jmp ebx
ja 0x100589e0
jecxz 0x100ca847
xchg dh, dh
stosb byte es:[edi], al
xor esi, dword [ebp - 0x68]
out 0, al
jle 0x100ca878
xchg ebp, eax
sbb byte fs:[esi + esi*2], bh
mov edx, 0xd529d9fc
insd dword es:[edi], dx
sub ch, dh
sbb byte [ecx + 0x12], ah
pop esi
or al, 0x10
retf 0x737