joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140003802
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x65
mov byte [rsp + 0x22], 0x60
mov byte [rsp + 0x23], 0x65
mov byte [rsp + 0x24], 0x52
mov byte [rsp + 0x25], 0x5d
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x55
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x5d
mov byte [rsp + 0x2a], 0x60
mov byte [rsp + 0x2b], 0x54
mov byte [rsp + 0x2c], 0x5c
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x140598518], 0
jne 0x1400038a1
mov byte [0x140598532], 1
mov eax, 0
lea rcx, [0x140598520]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x14000387c
mov byte [0x140598518], 1
lea rcx, [0x1400017ed]
call fcn.1400014f0
lea rax, [0x140598520]
add rsp, 0x48
ret

Function at 0x1400038ae
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x5e
mov byte [rsp + 0x22], 0x52
mov byte [rsp + 0x23], 0x5d
mov byte [rsp + 0x24], 0x68
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x63
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x6a
mov byte [rsp + 0x2a], 0x65
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x64
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x1405983a8], 0
jne 0x14000394d
mov byte [0x1405983c2], 1
mov eax, 0
lea rcx, [0x1405983b0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003928
mov byte [0x1405983a8], 1
lea rcx, [0x14000190d]
call fcn.1400014f0
lea rax, [0x1405983b0]
add rsp, 0x48
ret

Function at 0x14000395a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x5e
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x5a
mov byte [rsp + 0x29], 0x64
mov byte [rsp + 0x2a], 0x60
mov byte [rsp + 0x2b], 0x57
mov byte [rsp + 0x2c], 0x65
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x140597f08], 0
jne 0x1400039f9
mov byte [0x140597f22], 1
mov eax, 0
lea rcx, [0x140597f10]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x1400039d4
mov byte [0x140597f08], 1
lea rcx, [0x140001cb5]
call fcn.1400014f0
lea rax, [0x140597f10]
add rsp, 0x48
ret
Function at 0x140003a06
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x1e
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x54
mov byte [rsp + 0x2a], 0x66
mov byte [rsp + 0x2b], 0x63
mov byte [rsp + 0x2c], 0x56
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x140597ee0], 0
jne 0x140003aa5
mov byte [0x140597f02], 1
mov eax, 0
lea rcx, [0x140597ef0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003a80
mov byte [0x140597ee0], 1
lea rcx, [0x140001ccd]
call fcn.1400014f0
lea rax, [0x140597ef0]
add rsp, 0x48
ret

Function at 0x140003ab2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x54
mov byte [rsp + 0x26], 0x54
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x5f
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x63
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x140597de0], 0
jne 0x140003b51
mov byte [0x140597e02], 1
mov eax, 0
lea rcx, [0x140597df0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003b2c
mov byte [0x140597de0], 1
lea rcx, [0x140001d8d]
call fcn.1400014f0
lea rax, [0x140597df0]
add rsp, 0x48
ret

Function at 0x140003b5e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x65
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x65
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x5d
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x55
mov byte [rsp + 0x2c], 0x53
mov byte [rsp + 0x2d], 0x5d
mov byte [rsp + 0x2e], 0x60
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x5c
mov byte [rsp + 0x31], 0x1f
mov byte [rsp + 0x32], 0x54
mov byte [rsp + 0x33], 0x60
mov byte [rsp + 0x34], 0x5e
mov byte [rsp + 0x35], 0xf1
cmp byte [0x1405984f0], 0
jne 0x140003c11
mov byte [0x140598516], 1
mov eax, 0
lea rcx, [0x140598500]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140003bec
mov byte [0x1405984f0], 1
lea rcx, [0x140001805]
call fcn.1400014f0
lea rax, [0x140598500]
add rsp, 0x48
ret
Function at 0x140003c1e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5e
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x68
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x53
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x65
mov byte [rsp + 0x2f], 0x56
mov byte [rsp + 0x30], 0x64
mov byte [rsp + 0x31], 0x1f
mov byte [rsp + 0x32], 0x54
mov byte [rsp + 0x33], 0x60
mov byte [rsp + 0x34], 0x5e
mov byte [rsp + 0x35], 0xf1
cmp byte [0x140598388], 0
jne 0x140003cd1
mov byte [0x1405983a6], 1
mov eax, 0
lea rcx, [0x140598390]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140003cac
mov byte [0x140598388], 1
lea rcx, [0x140001925]
call fcn.1400014f0
lea rax, [0x140598390]
add rsp, 0x48
ret

Function at 0x140003cde
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5e
mov byte [rsp + 0x26], 0x54
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x57
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x56
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140598478], 0
jne 0x140003d73
mov byte [0x140598490], 1
mov eax, 0
lea rcx, [0x140598480]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003d4e
mov byte [0x140598478], 1
lea rcx, [0x140001865]
call fcn.1400014f0
lea rax, [0x140598480]
add rsp, 0x38
ret

Function at 0x140003d80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5f
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x63
mov byte [rsp + 0x28], 0x65
mov byte [rsp + 0x29], 0x60
mov byte [rsp + 0x2a], 0x5f
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140598290], 0
jne 0x140003e15
mov byte [0x1405982b0], 1
mov eax, 0
lea rcx, [0x1405982a0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003df0
mov byte [0x140598290], 1
lea rcx, [0x1400019e5]
call fcn.1400014f0
lea rax, [0x1405982a0]
add rsp, 0x38
ret
Function at 0x140003e22
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x4b
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x5d
mov byte [rsp + 0x29], 0x6a
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x1405981e0], 0
jne 0x140003eb7
mov byte [0x140598200], 1
mov eax, 0
lea rcx, [0x1405981f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003e92
mov byte [0x1405981e0], 1
lea rcx, [0x140001a75]
call fcn.1400014f0
lea rax, [0x1405981f0]
add rsp, 0x38
ret

Function at 0x140003ec4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x64
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x61
mov byte [rsp + 0x28], 0x59
mov byte [rsp + 0x29], 0x60
mov byte [rsp + 0x2a], 0x64
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x1405980e8], 0
jne 0x140003f59
mov byte [0x140598100], 1
mov eax, 0
lea rcx, [0x1405980f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003f34
mov byte [0x1405980e8], 1
lea rcx, [0x140001b35]
call fcn.1400014f0
lea rax, [0x1405980f0]
add rsp, 0x38
ret

Function at 0x140003f66
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x59
mov byte [rsp + 0x27], 0x5f
mov byte [rsp + 0x28], 0x5d
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x53
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140598048], 0
jne 0x140003ffb
mov byte [0x140598060], 1
mov eax, 0
lea rcx, [0x140598050]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003fd6
mov byte [0x140598048], 1
lea rcx, [0x140001bad]
call fcn.1400014f0
lea rax, [0x140598050]
add rsp, 0x38
ret
Function at 0x140004008
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x54
mov byte [rsp + 0x26], 0x5d
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x5e
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x67
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x5f
mov byte [rsp + 0x2d], 0x56
mov byte [rsp + 0x2e], 0x65
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140597f70], 0
jne 0x14000409d
mov byte [0x140597f90], 1
mov eax, 0
lea rcx, [0x140597f80]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140004078
mov byte [0x140597f70], 1
lea rcx, [0x140001c55]
call fcn.1400014f0
lea rax, [0x140597f80]
add rsp, 0x38
ret

Function at 0x1400040aa
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x65
mov byte [rsp + 0x22], 0x63
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x5f
mov byte [rsp + 0x25], 0x55
mov byte [rsp + 0x26], 0x5e
mov byte [rsp + 0x27], 0x5a
mov byte [rsp + 0x28], 0x54
mov byte [rsp + 0x29], 0x63
mov byte [rsp + 0x2a], 0x60
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140597e08], 0
jne 0x14000413f
mov byte [0x140597e20], 1
mov eax, 0
lea rcx, [0x140597e10]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x14000411a
mov byte [0x140597e08], 1
lea rcx, [0x140001d75]
call fcn.1400014f0
lea rax, [0x140597e10]
add rsp, 0x38
ret

Function at 0x14000414c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x67
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x63
mov byte [rsp + 0x24], 0x66
mov byte [rsp + 0x25], 0x64
mov byte [rsp + 0x26], 0x65
mov byte [rsp + 0x27], 0x60
mov byte [rsp + 0x28], 0x65
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x5d
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140597d88], 0
jne 0x1400041e1
mov byte [0x140597da0], 1
mov eax, 0
lea rcx, [0x140597d90]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x1400041bc
mov byte [0x140597d88], 1
lea rcx, [0x140001dd5]
call fcn.1400014f0
lea rax, [0x140597d90]
add rsp, 0x38
ret
Function at 0x1400041ee
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x53
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x65
mov byte [rsp + 0x28], 0x55
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x5f
mov byte [rsp + 0x2d], 0x55
mov byte [rsp + 0x2e], 0x56
mov byte [rsp + 0x2f], 0x63
mov byte [rsp + 0x30], 0x1f
mov byte [rsp + 0x31], 0x54
mov byte [rsp + 0x32], 0x60
mov byte [rsp + 0x33], 0x5e
mov byte [rsp + 0x34], 0xf1
cmp byte [0x140598430], 0
jne 0x14000429c
mov byte [0x140598455], 1
mov eax, 0
lea rcx, [0x140598440]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x15
jne 0x140004277
mov byte [0x140598430], 1
lea rcx, [0x140001895]
call fcn.1400014f0
lea rax, [0x140598440]
add rsp, 0x48
ret

Function at 0x1400042a8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x59
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x5e
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x1f
mov byte [rsp + 0x2a], 0x64
mov byte [rsp + 0x2b], 0x60
mov byte [rsp + 0x2c], 0x61
mov byte [rsp + 0x2d], 0x59
mov byte [rsp + 0x2e], 0x60
mov byte [rsp + 0x2f], 0x64
mov byte [rsp + 0x30], 0x1f
mov byte [rsp + 0x31], 0x54
mov byte [rsp + 0x32], 0x60
mov byte [rsp + 0x33], 0x5e
mov byte [rsp + 0x34], 0xf1
cmp byte [0x1405980a8], 0
jne 0x140004356
mov byte [0x1405980c5], 1
mov eax, 0
lea rcx, [0x1405980b0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x15
jne 0x140004331
mov byte [0x1405980a8], 1
lea rcx, [0x140001b65]
call fcn.1400014f0
lea rax, [0x1405980b0]
add rsp, 0x48
ret

Function at 0x140004362
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x61
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x5f
mov byte [rsp + 0x28], 0x55
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x64
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x66
mov byte [rsp + 0x2e], 0x63
mov byte [rsp + 0x2f], 0x5a
mov byte [rsp + 0x30], 0x65
mov byte [rsp + 0x31], 0x6a
mov byte [rsp + 0x32], 0x1f
mov byte [rsp + 0x33], 0x54
mov byte [rsp + 0x34], 0x60
mov byte [rsp + 0x35], 0x5e
mov byte [rsp + 0x36], 0xf1
cmp byte [0x140598340], 0
jne 0x14000441a
mov byte [0x140598367], 1
mov eax, 0
lea rcx, [0x140598350]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x17
jne 0x1400043f5
mov byte [0x140598340], 1
lea rcx, [0x140001955]
call fcn.1400014f0
lea rax, [0x140598350]
add rsp, 0x48
ret
Function at 0x140004426
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x66
mov byte [rsp + 0x26], 0x64
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x1f
mov byte [rsp + 0x29], 0x5c
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x64
mov byte [rsp + 0x2c], 0x61
mov byte [rsp + 0x2d], 0x56
mov byte [rsp + 0x2e], 0x63
mov byte [rsp + 0x2f], 0x64
mov byte [rsp + 0x30], 0x5c
mov byte [rsp + 0x31], 0x6a
mov byte [rsp + 0x32], 0x1f
mov byte [rsp + 0x33], 0x54
mov byte [rsp + 0x34], 0x60
mov byte [rsp + 0x35], 0x5e
mov byte [rsp + 0x36], 0xf1
cmp byte [0x140598160], 0
jne 0x1400044de
mov byte [0x140598187], 1
mov eax, 0
lea rcx, [0x140598170]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x17
jne 0x1400044b9
mov byte [0x140598160], 1
lea rcx, [0x140001ad5]
call fcn.1400014f0
lea rax, [0x140598170]
add rsp, 0x48
ret

Function at 0x1400044ea
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x61
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x5f
mov byte [rsp + 0x28], 0x55
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x64
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x66
mov byte [rsp + 0x2e], 0x63
mov byte [rsp + 0x2f], 0x5a
mov byte [rsp + 0x30], 0x65
mov byte [rsp + 0x31], 0x6a
mov byte [rsp + 0x32], 0x1f
mov byte [rsp + 0x33], 0x54
mov byte [rsp + 0x34], 0x60
mov byte [rsp + 0x35], 0x5e
mov byte [rsp + 0x36], 0xf1
cmp byte [0x140597ea8], 0
jne 0x1400045a2
mov byte [0x140597ec7], 1
mov eax, 0
lea rcx, [0x140597eb0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x17
jne 0x14000457d
mov byte [0x140597ea8], 1
lea rcx, [0x140001cfd]
call fcn.1400014f0
lea rax, [0x140597eb0]
add rsp, 0x48
ret

Function at 0x1400045ae
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x22], 0x11
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x5e
mov byte [rsp + 0x25], 0x64
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x60
mov byte [rsp + 0x29], 0x57
mov byte [rsp + 0x2a], 0x65
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140597f28], 0
jne 0x140004639
mov byte [0x140597f3e], 1
mov eax, 0
lea rcx, [0x140597f30]
movzx edx, byte [rsp + rax + 0x22]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xe
jne 0x140004614
mov byte [0x140597f28], 1
lea rcx, [0x140001c9d]
call fcn.1400014f0
lea rax, [0x140597f30]
add rsp, 0x38
ret
Function at 0x140004646
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x22], 0x11
mov byte [rsp + 0x23], 0x54
mov byte [rsp + 0x24], 0x54
mov byte [rsp + 0x25], 0x5d
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x5f
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140597dc8], 0
jne 0x1400046d1
mov byte [0x140597dde], 1
mov eax, 0
lea rcx, [0x140597dd0]
movzx edx, byte [rsp + rax + 0x22]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xe
jne 0x1400046ac
mov byte [0x140597dc8], 1
lea rcx, [0x140001da5]
call fcn.1400014f0
lea rax, [0x140597dd0]
add rsp, 0x38
ret

Function at 0x1400046de
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x65
mov byte [rsp + 0x26], 0x63
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x5f
mov byte [rsp + 0x29], 0x55
mov byte [rsp + 0x2a], 0x5e
mov byte [rsp + 0x2b], 0x5a
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x63
mov byte [rsp + 0x2e], 0x60
mov byte [rsp + 0x2f], 0x1f
mov byte [rsp + 0x30], 0x54
mov byte [rsp + 0x31], 0x60
mov byte [rsp + 0x32], 0x5e
mov byte [rsp + 0x33], 0xf1
cmp byte [0x140597e28], 0
jne 0x140004787
mov byte [0x140597e44], 1
mov eax, 0
lea rcx, [0x140597e30]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x14
jne 0x140004762
mov byte [0x140597e28], 1
lea rcx, [0x140001d5d]
call fcn.1400014f0
lea rax, [0x140597e30]
add rsp, 0x48
ret

Function at 0x140004794
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x67
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x63
mov byte [rsp + 0x28], 0x66
mov byte [rsp + 0x29], 0x64
mov byte [rsp + 0x2a], 0x65
mov byte [rsp + 0x2b], 0x60
mov byte [rsp + 0x2c], 0x65
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x5d
mov byte [rsp + 0x2f], 0x1f
mov byte [rsp + 0x30], 0x54
mov byte [rsp + 0x31], 0x60
mov byte [rsp + 0x32], 0x5e
mov byte [rsp + 0x33], 0xf1
cmp byte [0x140597da8], 0
jne 0x14000483d
mov byte [0x140597dc4], 1
mov eax, 0
lea rcx, [0x140597db0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x14
jne 0x140004818
mov byte [0x140597da8], 1
lea rcx, [0x140001dbd]
call fcn.1400014f0
lea rax, [0x140597db0]
add rsp, 0x48
ret
Function at 0x140004a68
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov word [rsp + 0x20], 0x3d
mov word [rsp + 0x22], 0x46
mov word [rsp + 0x24], 0x59
mov word [rsp + 0x26], 0x51
mov word [rsp + 0x28], 0x4d
mov word [rsp + 0x2a], 0x50
mov word [rsp + 0x2c], 0x53
mov word [rsp + 0x2e], 0x46
mov word [rsp + 0x30], 0x53
mov word [rsp + 0x32], 0xf
mov word [rsp + 0x34], 0x46
mov word [rsp + 0x36], 0x59
mov word [rsp + 0x38], 0x46
mov word [rsp + 0x3a], 0xe1
cmp byte [0x140597048], 0
jne 0x140004b10
mov byte [0x14059706c], 1
mov eax, 0
lea rcx, [0x140597050]
movzx edx, word [rsp + rax*2 + 0x20]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xe
jne 0x140004aea
mov byte [0x140597048], 1
lea rcx, [0x140001f7d]
call fcn.1400014f0
lea rax, [0x140597050]
add rsp, 0x48
ret
Function at 0x14000a660
Capabilities:
Parse pe header

Disassembly:
test rcx, rcx
je 0x14000a690
mov eax, 0
cmp word [rcx], 0x5a4d
jne 0x14000a68f
mov eax, dword [rcx + 0x3c]
cmp eax, 0x400
jg 0x14000a695
cdqe
add rax, rcx
cmp dword [rax], 0x4550
mov edx, 0
cmovne rax, rdx
ret
mov rax, rcx
jmp 0x14000a68f
mov eax, 0
jmp 0x14000a68f

Function at 0x14000ad10
Capabilities:
Execute syscall

Disassembly:
pop rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
sub rsp, 0x28
mov rcx, r10
call fcn.14000acc0
add rsp, 0x28
mov rcx, qword [rsp + 8]
mov rdx, qword [rsp + 0x10]
mov r8, qword [rsp + 0x18]
mov r9, qword [rsp + 0x20]
mov r10, rcx
syscall
ret

Function at 0x140014320
Capabilities:
Write file on windows

Disassembly:
push rsi
push rbx
sub rsp, 0x38
lea rax, [rsp + 0x58]
mov rbx, rcx
mov ecx, 2
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x28], rax
call fcn.14001ce60
mov r8d, 0x1b
mov edx, 1
lea rcx, str.Mingw_w64_runtime_failure:_n
mov r9, rax
call sub.msvcrt.dll_fwrite
mov rsi, qword [rsp + 0x28]
mov ecx, 2
call fcn.14001ce60
mov rdx, rbx
mov rcx, rax
mov r8, rsi
call sub.msvcrt.dll_vfprintf
call sub.msvcrt.dll_abort
nop
nop dword [rax]