joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100cb3ba
Capabilities:
Check http status code

Disassembly:
popfd
lea esp, [esp + 0x2c]
ret
shr al, cl
mov word [ebp], ax
lea esp, [esp + 4]
jmp fcn.100eff85
lea edi, [edi + 1]
shl dword [esp + 0xc], 0x16
jae 0x100bb459
shr dword [esp + 0xc], 0x72
jbe 0x1005fbca
shr dword [esp + 0xc], 0xd6
sub dword [esp + 0xc], 0x312d719f
shl byte [esp + 0xc], 0x68
call fcn.100346e2
mov ecx, 0xa1353b88
lea eax, [ecx + ecx*4 + 0x4d9a0b14]
movzx ax, byte [ebp + eax - 0x73a434bc]
mov cl, byte [ebp + 2]
push 0xcab11724
sar dword [esp], 0x4f
adc ebp, 2
dec dword [esp]
jnp 0x100a3d3f

Function at 0x100cb483
Capabilities:
Check http status code

Disassembly:
dec edi
push 0x48a27c3f
rol edi, 3
push 0xf6af5db2
push 0x88af5ca7
add word [esp + 1], 0x5782
neg edi
dec word [esp + 2]
mov dword [esp + 0xc], 0x406f313
jno 0x100cf237
bswap edi
xor edi, 0x6299b721
push 0x8f27a8b5
call fcn.100bc0b6

Function at 0x100cbd68
Capabilities:
Check http status code

Disassembly:
inc sp
mov dword [ebx], edi
jmp 0x100de9ec
not byte [esp + 0xa]
push 0xa68a9304
dec eax
lea esp, [esp + 0x18]
jmp fcn.100a49ac

Function at 0x100ccab6
Capabilities:
Encode data using xor

Disassembly:
mov edi, eax
jle 0x1009d485
adc dword [edx - 0x39b3b6bb], ebx
fisttp word [ebx + 0x73]
mov eax, dword [0x4db927f2]
cmp eax, 0xbff88c2f
mov cl, byte [ebx + 0x58]
pop eax
mov edx, 0x9d7b91ee
xor ah, cl
xchg byte [edi + 0x25], ch
dec ebx
jns 0x100ccad3
insw word es:[edi], dx
cli
movsb byte es:[edi], byte [esi]
std
loopne 0x100ccae7
invalid
invalid

Function at 0x100cf265
Capabilities:
Check http status code

Disassembly:
mov dword [esp], 0x2d3af096
jp 0x1006830c

Function at 0x100cf3b2
Capabilities:
Check http status code

Disassembly:
or di, 0x810b
mov edi, dword [esp + edi*2 - 0x6d7f4f22]
add dword [esp + 0xc], 0x543b4
mov dword [esp + 8], 0x528efe9c
call fcn.100cb3ba

Function at 0x100cf3d8
Capabilities:
Check http status code

Disassembly:
mov eax, dword [esp + eax + 0x15ee29f8]
mov eax, dword [eax]
mov dword [esp + 0x1c], ebx
call fcn.100e28ef
dec eax
adc ebx, 3
inc cx
shld esi, esi, cl
push 0xc708e4bc
inc sp
mov dword [ebx], esi
dec eax
lea esp, [esp + 0x10]
jmp fcn.100345d9

Function at 0x100cfd8d
Capabilities:
Encode data using xor

Disassembly:
mov edx, dword [esp]
lea esp, [esp + 8]
ret 4
or bp, 0xc28f
and ebp, 0x5b1a179d
js 0x10097c8d
add dword [esp], 0x5d5a5
mov dword [esp + 8], ebp
neg dword [esp + 8]
add dword [esp + 4], 0x2d8f7
mov ecx, dword [esp]
mov ecx, dword [ecx]
and dword [esp + 8], 0x505822d
shr byte [esp + 8], 0x21
mov dword [esp], ebp
lea ecx, [ecx + 0x261b1ba3]
not word [esp]
sub dword [esp + 8], ebp
jge 0x100d4e25
test dword [esp], 0xe301a6ae
mov byte [esp], 0x3d
push edx
xchg dword [esp + 0x18], ecx
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 4]
jg 0x100ba9a4
pop edi
sub al, 0x64
wait
jmp [esi + esi + 0x28]
test word [esp + 8], di
setb byte [esp]
jne 0x10099e9f

Function at 0x100d25bd
Capabilities:
Check http status code

Disassembly:
movsx edx, dl
or dword [esp + edx*8], edx
xchg dword [esp + edx + 0x1b], ebx
mov edx, dword [esp + edx + 0x13]
call fcn.1008f252
Function at 0x100d398e
Capabilities:
Check http status code

Disassembly:
lea esp, [esp + 8]
jmp fcn.100eff85

Function at 0x100d44f9
Capabilities:
Check http status code

Disassembly:
mov esi, 0x48a61f18
add esi, 0x18145d05
add dword [esp + 4], 0xfff6954f
mov esi, 0x482d0f89
mov dword [esp + esi - 0x482d0f89], esi
add dword [esp + esi - 0x482d0f89], esi
neg dword [esp + esi - 0x482d0f89]
jge 0x100af732
jbe 0x10062339
add dword [esp + 0x14], 0xeff76bae
mov word [esp + 0x10], bp
mov ebp, dword [esp + 0x1c]
shr dword [esp + 0x10], 0x53
add dword [esp + 0x20], 0xeff2cea8
call fcn.100ed9e7
mov ebp, 0x42078187
mov ch, 0xd
iretd
call fcn.100d8857
xchg dword [esp + 0x1c], ebp
mov edx, dword [esp + 0xc]
mov edi, dword [esp + 0x10]
add dword [esp], 0x4d841
call fcn.10093c87
push 0x4084b1ad
jl 0x100d025c
mov esi, dword [esp + esi - 0x482d0f81]
mov esi, dword [esi]
mov dword [esp + 8], 0xee80530b
call fcn.1009c4e0
test al, 0xb3
xchg esp, eax
lodsd eax, dword [esi]
call fcn.1006937c
mov edi, 0x4d39b385
lea edi, [edi*2 + 0x73966087]
jmp fcn.1008abf6
add ebx, 0x190ec62c
mov eax, dword [esp + ebp - 0x5e8b12ed]
lea edx, [ebp*8 + 0x6380d88d]
setle byte [esp + edx - 0x57d97081]
mov eax, dword [esp + ebp - 0x5e8b12dd]
mov eax, dword [eax + ebx - 0x3f10c62c]
test dword [esp + ebx - 0x3f10c618], 0x93ab1a9f
call fcn.100af0a4
mov dword [esp + 0x14], ebp
je 0x100d5768
xchg dword [esp + 0x1c], esi
mov ebp, dword [esp + 0xc]
call fcn.100602e1
mov dword [esp + 0x10], esi
js 0x1006c3eb
jbe 0x1008eb5a

Function at 0x100d4723
Capabilities:
Check http status code

Disassembly:
dec eax
adc ebx, 1
inc eax
shr dh, cl
push 0x8890d989
jmp 0x100d929e
jbe 0x1005a1d6
push ecx
pushfd
mov ecx, 0x528f1b82
lea ecx, [ecx + ecx*4 - 0x79e69577]
mov dword [esp + 8], 0xeff5f58d
mov ecx, dword [esp + ecx - 0x22e4f40f]
call fcn.100e9130
mov esi, 0x4051220
inc eax
and dh, dh
movzx si, byte [ebx + esi*2 - 0x80a2440]
mov ecx, 0xa50b8b1b
sub ecx, 0xd693b896
dec eax
lea ecx, [ecx + ecx - 0x696046dc]
mov cl, byte [ebx + 2]
jle 0x100a6792
cmp ecx, dword [esi]
jbe 0x100d4761
pop esi
mov ecx, 0xda942258
aas
mov eax, ds
mov edx, 0x185cd6da
sbb al, 0xb5
outsd dx, dword [esi]
invalid
fcmovbe st(0), st(6)
pop esp
sbb byte [esi*4 - 0x379b0f91], bl
mov bh, 0x81
cld
mov al, 0xd
adc byte [eax], al
out 0xd8, eax
dec edi
out dx, eax
cmp cl, dl
scasd eax, dword es:[edi]
rcr dword [edi], 1
cwde
and al, 0xf
test dword [edi + 0x4109a77f], ecx
sahf
adc eax, 0xb0ae871d
push cs
adc byte [ebx], ch
xor eax, 0xa203ec33
les ebp, [eax - 0x34b67a6d]
jnp 0x100d47bd
sub ebx, ecx
or cl, byte [edx - 0x6a]
sal byte [esi + 0xebb291b], cl
adc al, dl
cmpsd dword [esi], dword es:[edi]
ret 0x1c93
int3

Function at 0x100d575f
Capabilities:
Check http status code

Disassembly:
cmp dword [esp + 0xc], 0x9e966829
push esi

Function at 0x100d5778
Capabilities:
Check http status code

Disassembly:
bswap ebx
call fcn.1006ba83
add dword [esp + 4], 0xfff7a936
xor ebx, ebx
shr byte [esp + 0x10], 0xcf
add dword [esp], 0xeff98915
call fcn.100b515a
neg ebx
lea ebx, [ebx + esi*8 + 0x4a9b760b]
lea edx, [edx + 0xd10bb2e]
not esi
jne 0x100ae32c
Function at 0x100d65ac
Capabilities:
Check http status code

Disassembly:
push ecx
mov dword [esp + 8], 0xeff6f73a
lea esp, [esp + 8]
call fcn.100a5081

Function at 0x100d7810
Capabilities:
Check http status code

Disassembly:
inc ecx
not edi
js 0x100d9e5e

Function at 0x100d97b4
Capabilities:
Check http status code

Disassembly:
mov dword [edx], ecx
push 0x379b5200
push 0x55185a18
dec eax
lea esp, [esp + 0x10]
jmp fcn.100345d9
and esi, dword [edi - 0x1c]
xchg ecx, eax
mov dword [0x20ad90bf], eax
jecxz 0x100d976b
and al, 0x3e
popaw
popal
lodsd eax, dword [esi]
xor dword [edx + 0x38], ecx
xor dword [eax], 0x96f47b3c
hlt
lea ecx, [ecx*4 + 0x4943b99]
push ecx
nop
call fcn.1006aa45
inc esi
mov dl, 0xbd
mov ebp, dword [ebx + 0x509b9f9e]
sub byte [edi - 0xaba0ac2], al
stc
jp 0x100d975c
jne 0x100d9774
out 0x7f, al
test byte [eax + ebx + 0x57], ah
pushal
add al, 0x80
out 0xc9, al
scasd eax, dword es:[edi]
xor dword [ebx], ebp
mov esp, dword [ecx + 0x2620dc6a]
popfd
movsd dword es:[di], dword [si]
out 0xb1, eax
mov edx, 0xd1e304c2
pushfd
cmc
xor ch, byte [ebx]
mov esi, dword [edx - 0x3b4cd362]
xor dword [eax], ebx
cmp al, 0xf9
inc esp
cmp eax, dword [eax + 0x65e46a2e]
xchg esp, eax
mov ebp, ecx
cld
pop ebx
pop esp
cmp dword [ebx], ebp
mov eax, esp
inc ebx
fild word [edi + eax*8 - 0x3c]
sbb eax, 0x366241da
mov al, 0x33
sub eax, 0xd3616bef
cmpsb byte [esi], byte es:[edi]
imul eax, ebp, 0x2f
inc ebx
pop ds
xchg esi, eax
push ecx
cmp dl, ah
mov esp, 0x6d1a93
adc edx, 0xc24d50b6
inc edi
sldt word [ebp - 0x1f]
lahf
stosb byte es:[edi], al
pop es
in eax, 0x48
xor al, byte [ecx]
enter 0x6b5f, 0xffffffffffffffcf
dec eax
add ebx, 0xc
jmp 0x1003a579

Function at 0x100d9b35
Capabilities:
Check http status code

Disassembly:
mov edx, dword [esp + 0x10]
push ecx
mov ecx, 0xe2bf493e
pushfd
add ecx, 0x19b4513f
jle 0x1005d065

Function at 0x100d9e50
Capabilities:
Check http status code

Disassembly:
call fcn.10067ab3
shr word [esp + 6], 0x4c
adc ebp, 2
call fcn.100a92de
push edi
pushfd
call fcn.100847db
test dword [esp + 0x24], 0xf8b692a4
jne 0x10029e0f
jnp 0x1007978f
mov ecx, 0xd0b04719
push esp
or al, 0xeb
xchg dword [esi + 0x2a], eax
pop esp
and byte [esp + eax - 0x63], dl
fisttp dword [esp + ecx + 0x36]
fsub st(2), st(0)
je 0x100d9eae
mov dword [edx - 0x43], 0x45054863
scasb al, byte es:[edi]
mul byte [edi - 0x13]
retf
pop edx
invalid

Function at 0x100db9b9
Capabilities:
Check http status code

Disassembly:
mov dword [ebx], edx
push 0xa387dba3
dec eax
lea esp, [esp + 0x20]
jmp fcn.100a49ac

Function at 0x100dbacc
Capabilities:
Check http status code

Disassembly:
dec eax
mov dword [ebx], edi
not byte [esp + 0x18]
dec eax
lea esp, [esp + 0x28]
jmp fcn.100345d9
Function at 0x100dd159
Capabilities:
Check http status code

Disassembly:
cmp word [esp + 0x14], 0x5bb4
call fcn.100e4a0e
lea esp, [esp + 8]
jmp fcn.100a8de0
dec dword [esp]
or edi, ecx
push 0xf9321c24
jmp 0x100ae6ee
jmp 0x100bd7eb
mov dword [ebp], edi
push 0x16a0a0aa
call fcn.1007e27b
jmp 0x1008f188
lea ebx, [ebx - 0x5c624d52]
and byte [esp + 0x14], 0x20
not dword [esp + 0x14]
jg 0x100802f4
js 0x100a9df0
hlt

Function at 0x100ddc4f
Capabilities:
Check http status code

Disassembly:
dec eax
adc ebx, 3
inc ebp
or esp, ebp
jmp fcn.100d9e0e
inc esp
mov esp, dword [ebx]
inc ecx
mov ebp, 0xe39a6598
dec esp
mov dword [esp], ebp
inc cx
neg ebp
inc esp
mov ebp, dword [ebx + 4]
jb 0x100effc9
jb 0x10081022

Function at 0x100de8c7
Capabilities:
Check http status code

Disassembly:
call fcn.100d9e1a
jmp fcn.100c5720

Function at 0x100e0e12
Capabilities:
Check http status code

Disassembly:
lea esp, [esp + 0x18]
jno fcn.100a8de0

Function at 0x100e0ee0
Capabilities:
Check http status code

Disassembly:
not esi
push 0x2dac4e16
call fcn.100d4eb0
int3
mov edi, edx
or ebp, dword [esp + ebp - 0x5a634c58]
shl dword [esp + 0x28], 0x28
jbe 0x1009ab59
mov edx, dword [esp + 0x44]
mov ebp, dword [esp + 0x30]
js 0x10062766
or esi, dword [esp + esi - 0x50214858]
call fcn.10087c03

Function at 0x100e1ada
Capabilities:
Check http status code

Disassembly:
mov eax, dword [esp + 8]
mov eax, dword [eax + ebx*2 + 0x7ba9feb4]
cmp bp, word [esp + ebx*2 + 0x7ba9fed0]
not word [esp + ebx*2 + 0x7ba9fed0]
mov dword [esp + ebx*2 + 0x7ba9febc], ebp
bswap ebx
not word [esp + ebx + 0x59ffd446]
lea eax, [eax - 0x1641aef]
bswap ebx

Function at 0x100e1b2b
Capabilities:
Check http status code

Disassembly:
not word [esp + 7]
lea esp, [esp + 0xc]
jmp fcn.100eff85

Function at 0x100e1d8a
Capabilities:
Check http status code

Disassembly:
mov word [ebp], cx
lea esp, [esp + 0x18]
jmp fcn.100a8de0
or cx, dx
push 0x3fb2e312
jmp 0x10099bd8
not cx
not dx
ror dword [esp + 8], 0xf
mov dword [esp], 0x2c835739
jb 0x100cc6df
call fcn.1002e370
popal
inc eax
add ch, ch
xchg ebx, eax
arpl word [edi], ax
ljmp 0x356b

Function at 0x100e26da
Capabilities:
Check http status code

Disassembly:
dec eax
mov dword [esp + 0x10], 0x161a7612
jmp 0x100c0010

Function at 0x100e285f
Capabilities:
Check http status code

Disassembly:
push 0x43a69c85
rol di, 1
dec eax
mov dword [esp + 8], 0xb93cca3a
ror dword [esp + 9], 0x56
shr word [esp + 0x12], 0xae
not di
sub word [esp + 0xd], 0xa88e
rol di, 1
inc dword [esp + 1]
sal word [esp + 0x13], 0xa1
neg word [esp + 0xa]
inc di
shl dword [esp + 0xf], 0xc
not di
jp 0x100d46f6
jmp 0x10075cb5

Function at 0x100e2b1a
Capabilities:
Check http status code

Disassembly:
add dword [esp + 8], 0xfffe02fd
mov dword [esp + 0x14], esi
and bp, bp
jg 0x100ead2f
lea ebp, [ebp*2 + 0x5e049d8b]
jl 0x100d7c55
jo 0x1002c163
push dword [esp + 0xc]
popfd

Function at 0x100e40b1
Capabilities:
Check http status code

Disassembly:
dec eax
adc ebx, 0x10
push 0x370cb918
dec ecx
mov dword [edx], ecx
dec eax
lea esp, [esp + 0x10]
jmp fcn.100345d9
dec eax
mov dword [esp], 0x132c5211
jno 0x100b5dfe
Function at 0x100e49b3
Capabilities:
Check http status code

Disassembly:
push 0x1998240b
dec eax
lea esp, [esp + 0x28]
jmp fcn.100a49ac

Function at 0x100e49e1
Capabilities:
Check http status code

Disassembly:
add dword [esp], 0xffff6579
and dword [esp + edx + 0x785858ef], edx
push ebp
jae 0x100a279d
mov edx, 0x1eb1f539
inc esp
movsx ebp, dx
dec esp
mov ebp, dword [edx + ebx - 0x1eb1f539]
push edx
call fcn.100d58fc

Function at 0x100e4f50
Capabilities:
Check http status code

Disassembly:
add byte [esp + 4], 0xb3
add dword [esp], 0xdaa3b12c
seto cl
add byte [esp + 4], 4
lea ebp, [ebp + ecx - 0x62f22373]
or word [esp], cx
mov word [esp + 4], 0x802f
add ecx, ecx
shr byte [esp + 4], 0xd7
jns 0x10079763
sub ebp, 2
push 0x6404619f
jmp 0x10083bf0
mov word [esp], bp
add dword [esp + 8], 0xfff8e57b
not dword [esp]
lea esi, [esi + 1]
movzx ebp, word [esp]
xor ebp, dword [esp + ebp - 0xfff1]
add dword [esp + ebp - 0x42080000], 0x3616c61c
push ebx
jge 0x100ad9ce
mov word [ebp], dx
lea esp, [esp + 4]
jmp fcn.100ea0c0
call fcn.10036ec0
call fcn.10065a77
add dword [esp], 0xfffeae4e
mov ebp, dword [esp + ecx*2 - 0x61322f7e]
xor dword [esp + ebp - 0x309917bd], 0x55a9c724
jbe 0x10078aa7
or dword [esp + ebp - 0x309917bd], 0xe1b45b82
mov ebp, dword [esp + ebp*2 - 0x61322f82]
mov ebp, dword [ebp + ecx - 0x309917c1]
mov dword [esp + ecx*2 - 0x61322f82], ecx
bswap ecx
ja 0x10058be9
mov ecx, 0x5882380b
not ecx
call fcn.100b903e

Function at 0x100e6b07
Capabilities:
Check http status code

Disassembly:
inc ecx
not dl
push 0x67b92614
inc sp
mov dword [ebx], edx
dec eax
lea esp, [esp + 0x20]
jmp fcn.100345d9
jmp 0x100b2710

Function at 0x100e6b53
Capabilities:
Check http status code

Disassembly:
cmp byte [esp + ecx - 0x2a0501bb], dl
jne 0x100edf61
push 0xbda95123
dec dl
jmp 0x100c4983
inc dword [esp + 2]
sal byte [esp + 7], 0x85
rol dl, 1
rol byte [esp + 3], 0x86
call fcn.1008dc39
push esi
sub byte [esp + esi + 0x6aa98059], 0x37
neg si
jae 0x100631ef
add dword [esp + 4], 0x36624
sub si, si
movsx esi, word [esp + esi + 0x6aaa0010]
mov eax, edx
movzx edx, dl
mov ebx, dword [esp + eax - 0x6a75fff4]
mov eax, dword [esp + edx]
mov eax, dword [eax + ebx*2 - 0x540a0272]
movzx ebx, word [esp + ebx - 0x2a05012d]
mov dword [esp + edx*2], ecx
sub cl, ch
test dword [esp + ebx*4 - 0x4e4], ecx
mov byte [esp + ebx - 0x12d], 0x83
lea eax, [eax + ecx*2 + 0xe789180]
setb byte [esp + edx*2]
sub ecx, ebx
cmp byte [esp + edx*4], 0x8e
js fcn.100a2255
setbe byte [esp + edx*2]
or ebx, dword [esp + ecx - 0x2a050081]
and edx, 0xff893f38
xchg dword [esp + ebx - 0x2a05019f], eax
mov ebx, dword [esp + ebx - 0x2a0501b7]
shl byte [esp + edx + 0xc], 0x27
or word [esp + ecx*2 - 0x540a011a], 0xb41e
shr edx, cl
call fcn.100b17f2
jmp 0x100a0a4f

Function at 0x100e6c51
Capabilities:
Check http status code

Disassembly:
sbb ebp, 2
mov word [ebp], dx
lea esp, [esp + 0xc]
jmp fcn.100254eb
ja 0x1002a9d5
jp 0x100cba4d
Function at 0x100e7e77
Capabilities:
Encode data using xor

Disassembly:
not cl
sar esi, 0x9f
neg cl
ror si, 0x2b
jae 0x100d3e0d
lea esi, [esi + 0xd10bb2e]
call fcn.1002563a
scasb al, byte es:[edi]
pop ebp
pop ebp
jmp 0x100d9666
lodsd eax, dword [esi]
push esi
pop ebp
fidiv dword [esi]
add al, 0xed
pop ecx
xor bl, ah
push ebx
mov edx, 0xb08ab0a8
sbb ebx, dword [ecx]
fdivp st(3)
cmp bh, byte [ecx - 0x5787d377]
jl 0x100d9648
xlatb
outsb dx, byte [esi]
mov al, byte [0x51ec97e3]
sbb dword [0x77b844da], ebx
fiadd dword [eax + edi*4 + 0x77]
enter 0xffffffffffff8fb7, 0x4b
aad 0x27
pop edx
pop ds
mov edi, 0xee8ac8ab
dec esi
push ebx
fisub dword [edx + ecx*2]
scasd eax, dword es:[edi]
ficom dword [edi + 0x20acb111]
sahf
fcom dword [0xcfc8833b]
jne 0x100d9641
lcall 0x7f85, 0x60e272c5
test dword [ecx - 0x112b96ef], ecx
pop ds
imul ebx, dword [edi + ebx*2 + 0x65], 0xf3f6c98c
push edx
and byte [ecx], bh
add al, byte [eax + 0x59]
sub bl, byte [esi]
and eax, dword [eax + 0x331743c4]
fdiv dword [ebp - 0x43]
lcall 0xf1ab, 0x395e983b
rol esp, 0xa4
jo 0x100d9713
push esp
pop ss
cmc
insd dword es:[edi], dx
xlatb
xor al, 0x8d
xor al, 0x4e
or ch, bl
bswap esi
loopne 0x100d96c8
popfd
xor eax, dword es:[esi - 0x565c10fc]
out 0xef, al
invalid
loop 0x100d96c8
out dx, al
pushfd
outsd dx, dword [esi]
adc al, 0x66
push ds
je 0x100d971d
mov edi, ebx
pop ds
fidiv word [esi]
jl 0x100d96be
jl 0x100d96be
mov word [esi], cs
jge 0x100d9705
xchg edi, eax
and ebx, eax
inc edx
mov ecx, 0x8cb9c320
push eax
add al, 0x2c
fisttp dword [ebp - 0xcd8ea48]
or al, 0x2d
sub cl, byte [edx + 0x4d36502]
mov dl, 0xb7
je 0x100d96c0
loop 0x100d9775
sub ah, ch
les eax, [edx + 0x5c]
mov eax, 0x8d4f3b26
cmp edi, dword [esi - 0x55f6e8d0]
iretd
xchg esi, eax
sal byte [ebx], cl
xlatb
sub al, 0xd6
push esp
invalid
inc sp
add edi, esi
call fcn.100d6461
mov esi, 0x3903f41e
lea edi, [edi + esi*2 - 0x7207e83d]
movzx ecx, si
movzx ecx, byte [esi + edi - 0x3903f41e]
btc si, si
xor cl, bl
jmp 0x100d960e

Function at 0x100e918d
Capabilities:
Check http status code

Disassembly:
neg di
or di, di
movzx edi, di
mov dword [esp + 0xc], ebx
lea edi, [edi + edi*4 - 0x46d398d5]
add byte [esp + 0x10], 0x15
push edx
xchg dword [esp + 0x40], edx
mov edi, dword [esp + 0x34]
jl 0x100889b9
shr dword [esp + 0x14], 0x97
add dword [esp + 0x1c], 0xeff6614d
add dword [esp + 0x10], 0xfff9980c
cmp byte [esp + 0x14], 0xb3
js 0x1009344a
add dword [esp + 4], 0xeff37b82
mov ebp, dword [esp + 0x24]
or dword [esp + 0x28], 0xd62a859d
jo 0x100ec147

Function at 0x100ea624
Capabilities:
Check http status code

Disassembly:
dec esp
mov ebp, dword [ebx]
inc cx
sal ebx, 0xcc
inc cx
sal ebx, 0x6d
inc ebp
add bl, byte [ebp]
jmp 0x100796ec
jo 0x100c9340
inc ebp
xor dl, cl
inc ecx
rol dl, 1
inc eax
dec dh
inc ecx
add dl, 0x13
dec eax
mov dword [esp + esi - 0x494088d7], esi
shr byte [esp + esi - 0x494088d2], 0xc4
inc ecx
not dl
rol dword [esp + esi - 0x494088d6], 0x45
inc ecx
sbb dl, 5
sar si, 0x4d
xor si, word [esp + esi - 0x4940fff9]
dec eax
shr esi, 7
inc ecx
not dl
inc ecx
neg dl
rol esi, 6
inc ebp
xor cl, dl
call fcn.100ddd28
jmp fcn.10038fec
Function at 0x100ea9e3
Capabilities:
Check http status code

Disassembly:
mov dword [esp + 4], 0xffcdaaf4
lea esp, [esp + 4]
call fcn.10095d28

Function at 0x100eacc0
Capabilities:
Check http status code

Disassembly:
shr cx, 1
rcr eax, cl
jmp fcn.100aa838

Function at 0x100eb76f
Capabilities:
Check http status code

Disassembly:
neg word [esp + 0x14]
mov edx, dword [esp + 0x14]
add dword [esp + edx*8 - 0x7188c7d0], 0x8b1d9
and edx, dword [esp + edx*8 - 0x7188c7d4]
xchg dword [esp + edx - 0xe3118e1], ebx
mov edx, dword [esp + edx - 0xe3118f9]
xor dword [esp + 0x14], 0xd9193919
neg word [esp + 0x14]
call fcn.1009bc40
jne 0x100b816a
mov eax, 0xd7166d20
cwde
cbw
mov edx, dword [ebp + eax*4 - 0x80]
not al
cbw
mov eax, dword [edx + eax*2 - 0x1ffbe]
mov dword [ebp], eax
push 0xb4a2da92
lea esp, [esp + 4]
jmp fcn.100eff85

Function at 0x100ee4d6
Capabilities:
Check http status code

Disassembly:
jne 0x100e2b47
call fcn.100286e5
lea esp, [esp + 0x14]
ret
push 0x29855a24
lea esi, [esi + 1]
push ecx
js 0x100a2282
mov ecx, 0xf29a123e
jl 0x1002689e
call fcn.1007ea27

Function at 0x100ee4f5
Capabilities:
Check http status code

Disassembly:
pushfd
add byte [esp + 8], 7
push ebp
mov dword [esp + 0xc], 0xffc9dc7a
push dword [esp + 4]
popfd
lea esp, [esp + 0xc]
call fcn.10095d28

Function at 0x100ef3ca
Capabilities:
Encode data using xor

Disassembly:
ja 0x10074493
push esp
lodsb al, byte [esi]
invalid

Function at 0x100effcf
Capabilities:
Check http status code

Disassembly:
pushfd
add dword [esp + 4], 0xeff42832
mov dword [esp + 4], 0xeff7dd81
push dword [esp]
popfd
lea esp, [esp + 4]
call fcn.100a5081
lea edx, [esi*4 - 0x61ce2549]
shl dword [esp + 0x18], 0x78
mov eax, dword [esp + 0x14]
mov eax, dword [eax + edi*4 - 0x5c794]
call fcn.100d58f6
push 0x66183387
push 0x2d1c4720

Function at 0x100f1a6e
Capabilities:
Check http status code
Encode data using xor

Disassembly:
shl word [esp + 0x10], 0x42
je 0x1008396e
lea edx, [edx - 0x6df2b256]
push ebx
or di, di
call fcn.1002e822
test si, 0x451b
jne 0x100358ce
xor word [esp], 0xab8e
xor dl, byte [esp]
neg edx
mov edx, dword [esp + 0x10]
mov edx, dword [edx]
shl di, 0x53
or byte [esp], 0x22
add byte [esp], 7
mov dword [esp + 0x10], edi
jge 0x1002f30c
mov ebp, dword [esp + edx + 0x78581d72]
mov dword [esp + 0x10], esi
seta dl
jb 0x100a1669
jge 0x100a8da0
xor dx, 0x4520
not dword [esp + edx + 0x785858eb]
and edx, edx
call fcn.100e49e1
js 0x100e9608
lea esi, [ebx*2 - 0x2254c3f7]
lea ecx, [ecx + esi + 0x6d4ea325]
and dword [esp + ebx + 0x60a42957], 0xa1b06e13
call fcn.100352e0
neg dword [esp + 4]
ja 0x100e2239
call fcn.100e2230

Function at 0x100f3a6a
Capabilities:
Encode data using xor

Disassembly:
mov dword [esp + 0x1c], esi
sub esi, esi
lea ecx, [ecx + esi - 0x43cff855]
push edx
Function at 0x101059a5
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [ebp + eax - 0x4aac1dee]
mov ecx, 0x8635a5a5
mov ecx, dword [ebp + 8]
jp 0x10172e1a
jle 0x101115bd
cmc
adc al, 0x80
lea edi, [ebp - 0x51f9a510]
or byte [ebp + 0x65af0bd], 0xae
loope 0x10105a30
mov esp, 0x8d08a082
scasb al, byte es:[edi]
sbb eax, 0x54ddb8e
cmp al, 0x7b
rol byte [ebx + 0x47], 0x8c
jnp 0x10105a3e
out 0x25, eax
adc eax, 0xd8a2a429
add eax, 0x25920ebf
stosb byte es:[edi], al
invalid
sub ah, 0x2a
jb 0x101059c3
xchg esi, eax
cmp dword [edi], esp
dec ebx
mov cl, 0xd8
div dword [esi]
mov edi, dword [esi]
pushfd
xor byte [edi + 0x6e], dl
fsub qword [ebx + 0xb5aa64a]
clc
cmpsb byte [esi], byte es:[edi]
pop edx
or edi, eax
xor dword [ebx], 0x933f7521
pop es
and al, 0xb
xor al, byte [ebx - 0x28]
loope 0x10105a6e
inc ebx
fsub st(1)
sub al, 0xf4
leave
mov esp, 0x9ed23006
stc
out 0xa6, al
fucomi st(3)
dec esi
mov ebx, 0x684c873e
loope 0x10105a2a
hlt
xchg edi, eax
push edx
and esp, ecx
je 0x10105a1a
add dword [eax + 0x63], edi
pop esi
or al, 0x3d
bound edx, qword [ebx + ebx + 0x4ed81]
add byte [eax], al
mov dword [esp], 0x62009397
adc ebp, 3
call fcn.10174e30
xor ecx, ebx
call fcn.101156a3
push 0x5e36aa8b
sal byte [esp + 2], 6
adc ebp, 5
mov byte [eax], dl
call fcn.100fcf2e
sbb dword [eax + ebx*4], 0xffffff9d
mov esp, 0xe15a75f4
out 0x61, al
mov ecx, dword [esi - 0x4f78da60]
or al, 0x92
retf 0xe52c

Function at 0x1011e5fc
Capabilities:
Encode data using xor

Disassembly:
mov dword [esp + 8], 0x4c109503
bswap ecx
call fcn.1016bf3d
dec esp
mov dword [esp], edx
jae 0x1016e8e2
dec esp
mov edx, dword [ebx]
dec eax
mov dword [esp], 0x402fc4bb
add word [esp + 2], 0x328d
jnp 0x10146ee3
neg ecx
jmp 0x100f91c0
dec eax
adc ebx, 8
shl word [esp + 4], 0xcb
jae 0x1011469f
popfd
call fcn.10112354
mov byte [0x78027610], al
pushal
and al, 0x89
ret

Function at 0x10127bc1
Capabilities:
Encode data using xor

Disassembly:
lea esp, [esp + 0x14]
jne 0x1011eef0
Function at 0x10138bf2
Capabilities:
Encode data using xor

Disassembly:
mov dword [esp + 0x14], 0xefed214e
mov ebp, dword [esp + edi - 0x4385ddba]
xor di, di
call int.101467cf
dec eax
mov dword [ebx], esi
jmp 0x1013a9eb
not eax
mov eax, dword [eax + edi - 0x256a]
push 0x38353a98
push 0x130999a3
call fcn.10169b74
mov dword [esp], 0x2cbfec19
add ebp, 2
shl al, cl
call fcn.10119562
call fcn.10105d29
shl byte [ecx + eax*4 - 0x625c4ebd], cl
pop ss
lodsd eax, dword [esi]
lodsd eax, dword [esi]
mov eax, dword [0xc8768c84]
pop ebx
invalid
popal
stosd dword es:[edi], eax
int1
pop ebx
inc ebp
out dx, eax
fisttp qword [edi + 0x7b]
leave
ja 0x10138b14
sub eax, 0x556fe58f
xlatb
mov eax, 0xf832da95
cwde
mov edi, dword [ebp]
jmp 0x10142423
arpl dx, dx
imul ebp, edx, 0xffffff80
jb 0x10138c17
fidivr word [ecx + 0x41]
xor eax, 0xb56b8230
scasb al, byte es:[edi]
mov al, byte [ebx - 7]
cmpsb byte gs:[esi], byte es:[edi]
enter 0x51d, 0x38
in eax, 0xb0
jmp 0x10138b6b
push ebp
pushfd
or di, 0xc4ba
mov ebp, edi
jae 0x100f66db
pushfd
div byte [edi]
sbb eax, 0x99d2b80b
cdq
xor dword [edi*8 + 0x2f36bc10], esp
jnp 0x10138ba5
pop ds
mov edx, 0xeda57151
in eax, dx
call [edi + edx*4 - 0x61]
sub cl, byte [ebx + 0x27]
push 0x7e
push ecx
in eax, 0xee
loop 0x10138c08
invalid
dec eax
lea esp, [esp + 0x10]
jmp fcn.10139b8d
jmp 0x10106b54