joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1006baab
Capabilities:
Encode data using xor

Disassembly:
push edx
push ebp
xchg dword [esp + 0xc], esi
pushfd
mov ebp, 0xfc8f2523
mov edx, ebp
or edx, 0x5d9710a7
not edx
mov dword [esp + 0xc], esi
xor dx, 0x901d
push ebp
shr bp, 1
test dl, dl
jne 0x10090f91
aad 0x81
retf 0x10a7
add eax, 0x47e85fb9
les ebx, [edi - 0x69d2f9cd]
adc eax, 0x2d09fe94
sbb ah, byte [edx - 0x78]
lodsb al, byte [esi]
loop 0x1006bab8
sub al, 0x43
dec ebx
sbb ecx, 0x58
xor dword [ebx - 0x71], esp
mov bh, byte [0xfdd68306]
imul eax, dword [edx - 0x3a], 0x7896aedc
mov ecx, edx
fcmovnbe st(0), st(0)
std
shr byte [ebx + 0x29e1d5e2], cl
fld xword [ebx + 0x70d4eefa]
inc bx
mov dh, 0xf6
shl ecx, cl
test al, 0xa2
xor bl, byte [ecx]
popal
mov ah, byte [ecx + 0x50348207]
jno 0x1006bb9c
arpl word [edi - 0x51e34676], di
jnp 0x1006bb96
xor ecx, dword [edx + 0x24f8cf02]
ret
add eax, 0x78db01f7
pop eax
xor ebx, dword [eax + eax*2 - 0x1ea978b]
aad 0x5b
inc esi
jo 0x1006bb5c
test byte [0xa6070da4], ch
test dword [edi], eax
scasd eax, dword es:[edi]
cmp al, 0x7c
or ebp, ebx
inc eax
inc edx
lahf
out 0x40, al
clc
and al, 0xa1
rol dword [ebp + 0x35], 1
and dl, byte [edi - 0x5a496dba]
cmc
jg 0x1006bb1f
clc
mov dh, 0x93
pop ebx
out dx, eax
dec ebp
mov cl, bh
stc
stosd dword es:[edi], eax
jge 0x1006bc11
lodsd eax, dword [esi]
push es
fist word [esi - 0x42]
stc
lodsb al, byte [esi]
sbb byte [edi + 0x63f91031], bl
dec dword [edx]
test dword [ecx + ecx], edx
dec eax
xchg esp, eax
add dl, dl
mov al, byte gs:[0xe8bc83d1]
xor bl, byte [ecx + 0x45f3440]
push ecx
in eax, 0x61
push ecx
scasb al, byte es:[edi]
adc eax, 0xecec90d0
pop ecx
jae 0x1006bb5c
arpl word [edi - 0x57fba0f6], di
pop esp
fstp xword [ebx - 0x35]
popal
shl byte [edi - 0x7b], cl
sub dl, dh
or ecx, dword [esp + ecx*2]
clc
and byte [ebx - 0x4d], al
xchg dword [ebx - 0x2fd21bb8], ecx
lahf
pop es
fistp qword [eax + edi*2]
mov eax, dword [0x9c15f02d]
push eax
push ebp
arpl word [edi - 0x6e825076], di
mov edx, 0x81c1a440
rcl bl, cl
xchg esi, eax
mov dword [edx - 0x15], ebx
invalid
iretd
call 0x1005efca

Function at 0x1006c17a
Capabilities:
Check http status code

Disassembly:
mov ebp, 0xebb5388d
mov ebx, 0x2116f20d
add dword [esp + ebx - 0x2116f201], 0xeff2453e
shr si, 0x14
lea ebx, [esi + esi*2 - 0x177e69de]
mov edx, dword [esp + 0x24]
mov edx, dword [edx]
add bx, 0x2aa4

Function at 0x1006c68d
Capabilities:
Check http status code

Disassembly:
add dword [esp + 8], 0x47a4190a
setne byte [esp + 8]
shr word [esp + 8], 0x4e
mov esi, dword [esp + 8]
jne 0x10025033
call fcn.100f33ff
call fcn.1002c73b
add dword [esp + ebp*2 - 0x436fbf60], 0xffffbd6c
mov edx, 0xdd164c1a
add ebp, 0xe985aa36
not ebp
lea eax, [eax + 1]
ja fcn.10026e4f
or ebp, 0xdaa71820
jg 0x10066fd4
call fcn.1008e41f
Function at 0x1006cbef
Capabilities:
Check http status code

Disassembly:
or byte [esp + 0x10], 8
test esi, 0xb78fc23a
push ebp
jne 0x100b8d5a
lea ecx, [ecx]
mov ebp, 0x44b46798
lea ebp, [ebp + ebp - 0xfece7f0]
neg bp
or ebp, ebp
mov dword [esp + ebp - 0x797b18a8], eax
test bp, 0xd9b4
push ebp
not word [esp + ebp - 0x797b18c0]
push esi
add dword [esp + 8], 0x344cd
xchg esp, eax
sub al, 0x40
out 0x84, eax
xchg byte [esi - 0x7f], dl
inc esp
and al, 8
int 0x44
add eax, dword [eax]
mov esi, ebp
push esi
lea ebp, [esi + esi - 0x5fdfaaf3]
push ebp
mov eax, dword [esp + esi - 0x797b18bc]
add esi, 0x6b838b99
mov eax, dword [esp + eax - 0x797b18b0]
mov eax, dword [eax]
shl dword [esp + 4], 1
shr byte [esp + 4], 0x1b
sete byte [esp + 4]
cmp word [esp + 4], bp
lea eax, [eax - 0x50789f73]
mov dword [esp + 0x10], ebp
jbe 0x1003873b
mov dx, word [ebp]
mov eax, 0x9a0c619e
mov ax, word [ebp + 2]
mov ecx, 0xf1113f8b
add ecx, ecx
call fcn.100802a3
jge 0x1006cc0f
cmp al, 0x56
xchg edi, eax
pop ebp
xchg ebx, eax
and dword [edx], ecx
invalid
inc ebp
and ebx, ebp
jmp 0x100abafe
sbb al, 0x24
push ebx
mov ebx, 0x7cb1dd1e
pushfd
or bl, 0xa1
shr ebx, 0xbb
mov ebx, dword [esp + ebx - 0xb]
mov dword [esp + 4], ebx
push dword [esp]
popfd
mov dword [esp], ebp
push edi
mov edi, 0xc30224b1
not edi
call fcn.100d8c48
jne 0x10073bd0
jp 0x10073b60
cmp byte [ebp + 0x19], 0x8a
rol dl, 1
mov dl, 0xaa
out dx, al
adc ebp, dword [ecx - 0x20]
mov byte [0xedbf6220], al
mov dl, byte [eax + 0x5e]
out dx, al
mov ah, 0xfc
cmp eax, dword [edi]
adc dh, ah
cmc
dec edi
jne 0x10073b52
movsd dword es:[edi], dword [esi]
daa
mov cl, 0xeb
dec edi
sbb eax, 0x179d69c3
push ecx
jecxz 0x10073b89
imul ebx, ebx, 0x79
and eax, 0xd2920955
xor ecx, dword [ecx - 0x37]
mov ebp, 0xc7a55e3e
retf
shl ebp, 0x6e
xchg dword [esp + 0x28], eax
mov esi, dword [esp + 0xc]
not ebp
test dword [esp + ebp - 0x5e5cbff7], ebp
mov dword [esp + ebp - 0x5e5cbfeb], 0x2685da0d
jbe 0x10073b89
mov ebp, dword [esp + ebp - 0x5e5cbfe7]
jg 0x10081784
jmp 0x100e5adf
lea esp, [esp + 8]
jmp fcn.100eff85

Function at 0x1006cf69
Capabilities:
Encode data using xor

Disassembly:
dec eax
mov dword [esp], 0xee8e666
out 0xe8, al
push cs
call fcn.100bb6cf
xor cl, byte [edx - 0x4b]
mov ah, 0xf
add eax, 0xc7485241
inc esp
and al, 0
bnd jo 0x1006cf6e
dec esi
call fcn.100bb6cf

Function at 0x10073b3e
Capabilities:
Check http status code

Disassembly:
pushfd
mov esi, 0xcd967b03
xchg dword [esp + esi*2 + 0x64d30a0a], ecx
push ebp
call fcn.1006fb06

Function at 0x10074476
Capabilities:
Check http status code

Disassembly:
dec eax
lea esp, [esp + 0x10]
jmp fcn.100345d9
dec esp
mov dword [ebx], ebp
jmp 0x1002d211

Function at 0x10074a35
Capabilities:
Check http status code

Disassembly:
mov bp, 0x4ab1
not bp
mov ebp, dword [esp + ebp - 0xb542]
jae 0x100841b7
mov dword [esp], 0xa026de9f
add esi, 1
ror word [esp + 2], 0xa7
ror dword [esp], 0xf5
xor dl, bl
not word [esp + 2]
dec dl
shr word [esp + 1], 5
ror dl, 1
dec dl
rol dl, 1
not dword [esp]
not dword [esp]
inc dl
sal word [esp + 2], 0xce
push 0xa690b629
dec dword [esp + 1]
xor bl, dl
or dword [esp + 4], 0x40279102
ja 0x1006b2d4
Function at 0x10075d19
Capabilities:
Check http status code

Disassembly:
jo fcn.10036198
mov dword [esp + 8], ecx
jae 0x1007d23a
call fcn.100b8d50
lea ebp, [eax + ebp - 0x4236008]
sub al, ah
rol al, 0x82
xor al, al
lea edi, [edi + eax*2 - 0x846c001]
inc ax
or eax, 0x66038711
movzx eax, byte [edi + eax - 0x6623e711]
push 0x4891ad0c
xor al, bl
shr dword [esp], 0x4a
rol al, 1
call fcn.100c2d99
push 0x631b798e
mov eax, dword [ebp]
mov edx, dword [ebp + 4]
call fcn.100bfbb7
jge 0x10075d19
sub ebp, 0xa818a311
mov edx, dword [esp + edx - 0x54bc2181]
and di, 0x1890
call fcn.10092a4f

Function at 0x1007674b
Capabilities:
Check http status code

Disassembly:
mov edx, ebx
call fcn.100a73ca
mov eax, 0xefab89bf
mov ax, word [ebp]
add ebp, 2
mov edx, 0x570ad1a1
movzx edx, byte [edx + esi - 0x570ad1a1]
push 0xd401a9b5
jmp 0x10074a49

Function at 0x10076d75
Capabilities:
Check http status code

Disassembly:
test byte [esp + 0x10], 0x99
mov dword [esp + 0x10], edi
add dword [esp + 0x14], 0x5ae4
push ebp
mov ebx, dword [esp + 0x18]
mov ebx, dword [ebx]
and dword [esp + 0x14], 0xa3a77e0f

Function at 0x10077343
Capabilities:
Check http status code

Disassembly:
and edi, dword [esp + edi + 0x1cc65bec]
mov edi, dword [esp + 0xc]
call fcn.100cc4f7

Function at 0x1007a55d
Capabilities:
Check http status code

Disassembly:
jle 0x10096a6b
push esi
xchg dword [esp + ecx + 0x23ef5512], esi
mov ecx, dword [esp + ecx*2 + 0x47dea9e0]
call fcn.10039b59

Function at 0x1007a5c4
Capabilities:
Check http status code

Disassembly:
mov dword [esp + ebp - 0x5a634c5c], esi
jge 0x100e4990
mov ecx, 0x68da9a65
mov ecx, 0x66ea02e0
mov dword [edx], ecx
and esi, ebp
or word [esp + ebp - 0x5a634c68], 0xccbc
call fcn.100e0ee0
cdq
dec esp
pop es
test byte [ebx - 0xc3dbb4], cl
mov ecx, dword [esp + 0x3c]
invalid
je 0x100e49d0
xor byte [ebp + 0x4424648d], bl
pop edi
jmp fcn.1008b25b

Function at 0x1007cb13
Capabilities:
Check http status code

Disassembly:
mov dword [ebp + 4], eax
push 0x2da9e631
jmp fcn.100d3ec1

Function at 0x1007d18c
Capabilities:
Check http status code

Disassembly:
ja 0x100954a4
mov eax, 0xb2972fa8
dec eax
sal eax, 0x38
jle 0x100dc130
push dword [esp + 0x20]
popfd
lea esp, [esp + 0x2c]
ret

Function at 0x1007d72f
Capabilities:
Check http status code

Disassembly:
push esi
push edi
jle 0x10088eb0
cmp edx, ebx
lea ecx, [ecx - 0x43cff855]
cmovg ebx, esi
shl dword [esp + 0x24], 0x8e
sets bl
mov edi, dword [esp + 0x24]
mov dword [esp + edx - 0x4f88fff4], 0xa48edb17
movzx ebx, word [esp + edi - 0x4005fffc]
xchg dword [esp + edi - 0x4005ffcc], ecx
mov ebx, dword [esp + edi - 0x4005ffd8]
je 0x10006d34

Function at 0x1007ea27
Capabilities:
Check http status code

Disassembly:
call fcn.1007ca8d
mov dword [ecx], eax
lea esp, [esp + 0x10]
jmp fcn.100eff85

Function at 0x1007f4ea
Capabilities:
Check http status code

Disassembly:
not cl
mov edx, dword [esp + 0x1c]
test dword [esp + 0x1c], 0xa4a3a61c
jge 0x100b23de
Function at 0x1007f4fe
Capabilities:
Check http status code

Disassembly:
or di, di
lea edx, [edx - 0x764e7350]
or di, 0x9111
neg di
or edi, 0x7a99d90f
mov dword [esp + edi - 0x7ebff9cb], ebp
jns 0x100b911f
test ebp, 0x6a972734
xchg dword [esp + ebp - 0x7afbffd4], edx
mov ebp, dword [esp + edi - 0x7ebff9af]
mov edi, dword [esp + edi - 0x7ebff9c7]
lea esp, [esp + 0xc]
ret 4

Function at 0x1007f68b
Capabilities:
Check http status code

Disassembly:
ja 0x10081490
mov esi, dword [esp + 0x18]
not byte [esp + 0x20]
test word [esp + 0x20], 0x1b23
call fcn.1003a1a4

Function at 0x100802a3
Capabilities:
Check http status code

Disassembly:
mov cl, byte [ebp + 4]
mov dword [esp], 0xa48a3901
adc ebp, 3
shld dx, ax, cl
push 0x803e3c36
mov word [ebp], dx
lea esp, [esp + 8]
jmp fcn.100a8de0

Function at 0x10080ae8
Capabilities:
Execute syscall

Disassembly:
xchg dword [esp], esi
push edx
push 0x13035e0f
mov edx, 0x5739e092
pushfd
or dl, 0xb9
or dl, dl
mov edx, dword [esp + edx - 0x5739e0b3]
mov dword [esp + 8], esi
push ecx
not word [esp + 8]
push edx
mov ecx, 0x6e8c0a11
sub ecx, dword [esp + ecx - 0x6e8c0a05]
mov edx, ecx
add ecx, ecx
push edi
mov dword [esp + 0x10], ebx
not cl
mov edi, 0x6907a500
push ecx
test edi, edx
jne 0x100a3307
syscall
push edi
call fcn.100802cc
dec eax
mov dword [esp], 0x8ee88a83
call fcn.100bb6cf
xchg esi, eax
push ss
invalid
push ebx
call fcn.10075f2c
sti
jge 0x100a3348
inc ebx
xchg edi, eax
and al, byte [ebp + 0x1a4dc9bd]
insb byte es:[edi], dx
fucom st(5)
mov ebx, 0x5f8f8b01
push esi
xor dword [edi + 0x65], eax
xchg esi, eax
add byte [ebx + 0x1d], al
xor dword [esi + 0x66], 0xf
inc esp
jne 0x100a32d1
je 0x100a3357
and esi, edx
sal byte [ebp + 0x55], 0xd9
xchg edx, eax
and byte [esp + edi*2], dh
enter 0x2d8b, 0xffffffffffffffdf
mov ah, byte [0x3c76964c]
js 0x100a3393
dec edx
mov al, 0xfe
push ebx
and ebp, 0xffffffa1
inc edx
arpl sp, bx
movsb byte es:[edi], byte fs:[esi]
clc
xchg ecx, eax
arpl si, bx
arpl si, bx
sub edi, dword [ebx - 0x4b]
outsd dx, dword [esi]
or byte [esi + 0x4fc0b1fd], bl
sub dword [eax - 0x24], esp
daa
push ecx
lea esp, [ecx + 0x35]
das
push esi
push edx
adc eax, 0x46f94e45
cmpsb byte [esi], byte es:[edi]
mov dh, 0xa9
push ebx
sub eax, 0x8261bba0
jmp 0x100a33ea
xchg ebx, eax
mov al, 0x97
fsubr dword [esp + ebx*2 + 0x2368b07d]
push ebx
or al, 0xeb
push 0x68da9244
mov edx, 0x751391a3
int1
jg 0x100a3347
shl dword [ecx - 0x78], cl
inc edx
std
test byte [edi + 0x24fa3ecb], bl
xor dword [ebp + 0x707b69ba], 0x814c7d88
adc eax, 0xc20336a1
jo 0x100a3424
xor eax, esi
and al, 0x6c
pushal
iretd
das
push cs
push esi
test al, 0x54
sub edi, dword [ebp - 0x131852ad]
push 0xf0e716a0
invalid
and al, 0xf6
movsd dword es:[edi], dword [esi]
jbe 0x100a3487
or ah, bh
dec ebx
or eax, 0xade08c03
mov ecx, 0x40126296
mov bl, 0xa6
enter 0x541c, 0x58
pop ebp
jbe 0x100a33e7
adc dh, byte [edx]
mov al, byte [0xac0417a3]
add al, 0xfb
loopne 0x100a344b
invalid
invalid
stosb byte es:[edi], al
dec esi
invalid
dec edi
sub al, 0x48
jg 0x100a347f
invalid
Function at 0x10080c9b
Capabilities:
Check http status code

Disassembly:
add dword [esp], 0xabd06
push ebx
sub cx, cx
shr dword [esp + 0x10], 0xab
ja 0x10082fe7
add dword [esp + 8], 0x8b869
mov ebp, ecx
call fcn.100b43c9

Function at 0x10081c2b
Capabilities:
Check http status code

Disassembly:
jl 0x1008285c
bswap esi
not esi
mov dword [esp + esi - 0x20122856], eax
shr si, 0x76
lea esi, [esi + esi*4 - 0x2ba66a7a]
movzx esi, si
add dword [esp], 0xfff82180
push edi
mov edi, esi
mov eax, 0x8bc441f
push ebp
shr eax, 0xd4
lea eax, [edi*8 - 0x5d5432cf]
movsx di, al
mov eax, dword [esp + esi - 0x957e]
mov eax, dword [eax + esi*8 - 0x4ac30]
mov ebp, 0xc52b0414
mov dword [esp + ebp*2 + 0x75a9f7e0], ebp
jne 0x100b2f37
push ebx
mov ebx, ebp
call fcn.1002d9c7

Function at 0x10082709
Capabilities:
Check http status code

Disassembly:
mov edi, dword [esp + edi - 0x7b3f21c4]
ja fcn.10065a4c
jge 0x1007be0e
shr word [esp + 8], 0x61
mov dword [esp + 0x14], 0xd007780c
sub byte [esp + 0x10], 0x2d
call fcn.100ca90e
mov edx, dword [ebp]
mov ecx, 0x7a8a6ebe
bt ecx, 0xbe
mov cx, word [ecx + ebp - 0x7a8a6eba]
jb 0x100b2645
push 0xd28aeb1e
push 0x9e15663f
lea esp, [esp + 0xc]
jmp fcn.100eff85

Function at 0x10082f98
Capabilities:
Check http status code

Disassembly:
xchg dword [esp + ebp + 0x5f436c2d], edi
mov ebp, dword [esp + edx + 0x5f42950f]
not byte [esp + edx + 0x5f42951f]
add edx, 0xab8261bf
jno 0x100d9d63
shr edx, 0x32
mov edx, dword [esp + 0x14]
test byte [esp + 0x20], 0x9e
jb 0x10002722

Function at 0x1008303b
Capabilities:
Check http status code

Disassembly:
mov dword [esp + 8], 0xec86341e
test byte [esp + 8], 0x14
push esi

Function at 0x1008327e
Capabilities:
Check http status code

Disassembly:
jb 0x10079fc4
jb 0x1008f8fe
and bp, word [esp + 0x15]
mov byte [esp + 0x14], 0x35
lea edx, [edx + 0x18aa9388]
call fcn.1007a5c4
jae 0x100832cd
mov eax, 0xd5227cfa
mov dword [eax], ebx
inc esp
xor byte [edx + 0x3c], cl
push 0xfffffffffffffff9
mov eax, dword [0xc68c3656]
mov bh, 0x65
aaa
and al, 0x44
jmp 0x100832e7
or dl, byte [esi + 0x2c]
jle 0x100832b1
xchg ecx, eax
sub al, 0x62
cld
mov bl, byte [ecx + 9]
invalid
push eax
dec ecx
fnstsw word [edi - 0x13]
aas
invalid
mov edi, dword [esp + edi*8 - 0x59e6cf64]
shr word [esp + 0xc], 0x69
jns 0x100bf7f9
mov byte [esp + 0xc], 0xbb
test dword [esp + 0xc], 0x6c06908d
jle 0x1002d1da
je 0x1002d354
push dword [esp + 0x10]
popfd
lea esp, [esp + 0x18]
ret 4

Function at 0x10085be7
Capabilities:
Check http status code

Disassembly:
neg ecx
jmp 0x100b161d
or dword [esp + 0xc], 0x5f245a9d
jge 0x10066232

Function at 0x10085bf5
Capabilities:
Check http status code

Disassembly:
and ecx, 0x2dad2f1d
js 0x10099e94
mov edx, 0x15952588
jo 0x100e93ec
mov ebp, dword [esp + 0xc]
cmp dword [esp + ebp + 0x4675ecad], 0xf933230a
call fcn.1009a77a
push 0x19955f9b
neg edx
call 0x10064281

Function at 0x10086712
Capabilities:
Encode data using xor

Disassembly:
jns 0x1006c5fa
lea edx, [esi + edx*4 - 0x306cf155]
mov dword [esp + 0x1c], edx
mov dword [esp + edi - 0x358ab216], 0xbb95c698
lea ecx, [ecx + 0xd10bb2e]
sub edx, dword [esp + edi*2 - 0x6b156458]
and edi, edi
Function at 0x100871bb
Capabilities:
Check http status code

Disassembly:
cmp bp, 0x6e3f
lea edx, [edx + esi - 0x74282f7f]
jg 0x1008897a

Function at 0x10087e17
Capabilities:
Check http status code

Disassembly:
jne 0x100b9beb
lea ecx, [ecx + ecx*8 + 0x22bf4f1d]
add ecx, 0x2305c63c
setbe cl
add dword [esp + 0x10], 0x84ad
lea ecx, [ecx*4 + 0x76029117]
bswap ecx
mov eax, ecx
lea ecx, [ecx + ecx + 0x7b96a998]
mov eax, dword [esp + eax - 0x17911e3a]
mov eax, dword [eax]
shl ecx, cl
mov dword [esp + 0x10], ecx
add ecx, 0xe127a027
mov ecx, dword [esp + ecx - 0x6f8a601b]
push dword [esp + 8]
popfd
lea esp, [esp + 0x14]
ret

Function at 0x10087e1d
Capabilities:
Check http status code

Disassembly:
not bp
shl cl, cl
neg word [esp + ecx - 0x6e1b59f0]
sub dword [esp + ecx - 0x6e1b59f0], ebp
lea ecx, [ecx*4 - 0x35c5d355]
call fcn.10034743
cwde
sbb bh, byte [ebx + 0xd]
mov esp, 0xfef8c285
jns 0x10060384
xchg esi, eax
stosb byte es:[edi], al
shl byte [edi - 0x38], 1
inc ebp
retf
dec ecx
push 0xc
push 0x3d
iretd
mov edx, dword [esp + ecx - 0x6e1b5a1f]
neg ebp
mov edx, dword [esp + ecx - 0x6e1b5a23]
mov edx, dword [edx + ecx - 0x6e1b5a2f]
mov word [esp + ebp*2 + 0x12], cx
jle 0x1006034e

Function at 0x10087ebb
Capabilities:
Check http status code

Disassembly:
mov esi, dword [esp + esi*8 - 0x40a627f0]
mov dword [esp + 8], 0xffcdc36f
push dword [esp + 4]
popfd
lea esp, [esp + 8]
call fcn.10095d28
shl dx, 0xf4
lea ebp, [ebp + edx*4 - 0x61ffffff]
shl dl, 0x94
sub edx, 0xf933ddb4
jbe 0x1008af1d
Function at 0x1008c130
Capabilities:
Check http status code

Disassembly:
mov esi, dword [esp + esi - 0x736ee9de]
not cx
jo 0x10097e52
add ecx, 0xac292d04
not ecx
test cl, 0x95
jae 0x100b18c0
xchg dword [esp + ebx + 0x356fff76], edx
mov ebp, dword [esp + 0x14]
shr bl, 0x99
js 0x100e5002
cmp word [esp + ebx + 0x3570001c], bx
call fcn.10039600
mov ecx, dword [esp + 0x18]
call fcn.100decd9
jg 0x100e6839
shr dx, 0x55
mov ecx, 0xbf267085
xchg dword [esp + edx + 0x32f40014], eax
mov ecx, dword [esp + ecx + 0x40d98f8b]
and dx, word [esp + edx*2 + 0x65e80008]
add edx, 0xe607339e
add dword [esp + edx + 0x4ceccc62], 0x865f3
shr edx, 0x97
sub dword [esp + 8], 0x62a17a2e
call fcn.100623c5
mov esi, ebp
mov ecx, 0x3dbf1e9e
test ecx, ecx
not ebp
mov edi, dword [esp + esi - 0x736ee9e2]
mov edi, dword [edi + esi - 0x736ee9e6]
call fcn.100aa7d1
xchg esp, eax
cmp ch, byte [esi - 0x6f]
out dx, eax
in eax, 0x9d
jmp 0xf564811c

Function at 0x1008ca51
Capabilities:
Check http status code

Disassembly:
jae 0x100a51a0
or ecx, 0xe3039406
add ecx, esi
call fcn.1007407f

Function at 0x1008ca6d
Capabilities:
Check http status code

Disassembly:
or dword [ecx - 0x79], 1
add al, ch
invalid
ret
inc ebp
mov byte [ebp], bh
call fcn.100c5749
fcom dword [ebx - 0x74]
sal byte [ebp - 0x4d7c8982], 0
sub ebx, esi
js 0x1008ca52
lodsb al, byte [esi]
fild word [ebp - 0xf]
insw word es:[edi], dx
adc bh, byte [esi + 0x33]
out 0x38, eax
or al, 0x8c
invalid

Function at 0x1008ee59
Capabilities:
Check http status code

Disassembly:
xchg dword [esp + 0xc], eax
push ecx
mov ecx, 0x1cac07b8
pushfd
add dword [esp + ecx*2 - 0x39580f64], 0xfffeb617
neg cx
bswap ecx
setge cl
not ecx
jne 0x100b5403

Function at 0x10091429
Capabilities:
Check http status code

Disassembly:
ja fcn.1002dbe5
lea eax, [ecx + esi*2 + 0x5c03fd04]
mov eax, dword [esp + ecx - 0x5c68fffc]
mov eax, dword [eax + ecx - 0x5c690000]
or si, 0x4730
and cl, 0x9c
jno 0x1007f48f
and si, 0xc2b6
shr ecx, 0x11
or cl, 0x21
lea eax, [eax + ecx + 0x541b7158]
mov esi, dword [esp + esi - 0x32fc4232]
lea esp, [esp + ecx - 0x2e2d]
ret
shl cx, 0x59
push esi
mov esi, 0xa47d09
add dword [esp + 4], 0x1e816
add dword [esp + 8], 0xfffbc334
neg ecx
nop
mov eax, 0xa2ed89c
sub esi, 0xcda82bae
cmp si, 0x7b81
jbe 0x1005c64a
Function at 0x1009241b
Capabilities:
Check http status code

Disassembly:
xor dword [esp + 0x14], 0x463a179d
lea edx, [edx + 1]
push ebp
je 0x100e3805
mov ebp, 0xc925efa1
movzx ebp, byte [esp + ebp + 0x36da1077]
mov dword [esp + 0x24], edx
mov dword [esp + 0x18], ebp
add bp, 0x3887
test ebp, ebp
movsx ebp, bp
jb fcn.100801be
neg word [esp + 0x18]
add dword [esp + 0xc], 0xfffa28b3
not ebp
shl byte [esp + ebp*2 + 0x7152], 0xe1
mov edx, dword [esp + ebp + 0x38b5]
add dword [esp + ebp*2 + 0x7156], 0xeffd2d97
shr ebp, 0x6a
mov edx, dword [esp + 0xc]
mov edx, dword [edx]
jb 0x1005addb
call fcn.10072cd1
mov dword [esp + 0x14], 0x28805a88
jl 0x100291e2
lea eax, [eax - 0x3ffb6ff1]
je 0x1007f3a0
not si
mov dword [esp + edi - 0x171c9], edx
lea esi, [edi + edx*2 - 0x8f9a164]
or di, word [esp + 0x1c]
call fcn.1005e1a3

Function at 0x10092a4f
Capabilities:
Check http status code

Disassembly:
cmp edi, ebp
lea ebp, [ebp*8 - 0x2bdfe780]
jg 0x100e6dee
bswap ebp
jb 0x100d44a7
add dword [esp + edi - 0x54bc007c], 0xae97c
mov edi, dword [esp + 0x14]
add ebp, 0xc534e716
call fcn.10080158

Function at 0x10093db3
Capabilities:
Check http status code

Disassembly:
push 0xbe016583
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x24]
jo fcn.10087e1d
shr dword [esp + 0xc], 0xd1
neg dword [esp + 0x20]
mov edi, dword [esp + 0x18]
add dword [esp + 8], 0xeff1e591
not byte [esp + 0x10]
xor byte [esp + 0x10], 0x12
call fcn.10062ded

Function at 0x100959cc
Capabilities:
Check http status code

Disassembly:
xchg dword [esp + 0x18], ebx
mov ecx, dword [esp + 8]
jge 0x1008f26f
jl 0x1003502c
push 0x615b796
pushfd
add byte [esp + 4], 0x80
jbe 0x100917d8

Function at 0x1009807e
Capabilities:
Check http status code

Disassembly:
mov ecx, 0xe7978a28
jle 0x1002cbb6
add esi, esi
or dword [esp + 0x14], 0x21263dac
push esi
push ebx
mov ecx, dword [esp + 0xc]
xchg dword [esp + 0x34], ecx
mov esi, dword [esp + 0x10]
shr dword [esp + 0x1c], 0xd
or dword [esp + 0x1c], 0x349fd8b0
neg dword [esp + 0x1c]
mov ebx, dword [esp + 0x30]
mov ebx, dword [esp + ebx*4 - 0x62dafc70]
cmp dword [esp + 0x30], 0x2d99b305
call fcn.10084aaf
cmp al, 0x31
mov ebx, 0x7a2314c0
dec ebx
outsb dx, byte [esi]
out dx, al
popfd
jmp 0x10098131
loope 0x10098130
out 0x10, al
sahf
invalid
scasb al, byte es:[edi]
cmp eax, esp
fld dword [0xc4bd8de9]
xchg esp, eax
sbb al, byte [eax + 0x171031a7]
inc ebp
push ds
js 0x1009810b
sub ecx, dword [ebx + 0x5f8acd3f]
mov bh, 0x83
xchg byte [ebp - 0x21], bl
and byte es:[ebp + 0x7c111989], ah
mov ecx, 0x3b8ac7f8
das
inc ebx
invalid

Function at 0x1009a0d3
Capabilities:
Check http status code

Disassembly:
push 0x5ebad7b5
push 0x54344120
shl al, cl
jmp 0x1009a0c5
not byte [esp + 3]
call fcn.10099ceb
call fcn.100cad87
dec eax
mov ebx, dword [ebx]
jmp fcn.100a49ac

Function at 0x1009b9ae
Capabilities:
Check http status code

Disassembly:
mov esi, dword [esp + esi*8 - 0x1124fdc]
je 0x1006cbfb
call fcn.1002bc20