joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140011218
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x68
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x78
mov byte [rsp + 0x32], 0x64
mov byte [rsp + 0x33], 0x64
mov byte [rsp + 0x34], 0x60
mov byte [rsp + 0x35], 0x63
mov byte [rsp + 0x36], 0x2a
mov byte [rsp + 0x37], 0x3f
mov byte [rsp + 0x38], 0x3f
mov byte [rsp + 0x39], 0x76
mov byte [rsp + 0x3a], 0x79
mov byte [rsp + 0x3b], 0x7c
mov byte [rsp + 0x3c], 0x75
mov byte [rsp + 0x3d], 0x63
mov byte [rsp + 0x3e], 0x3e
mov byte [rsp + 0x3f], 0x73
mov byte [rsp + 0x40], 0x71
mov byte [rsp + 0x41], 0x64
mov byte [rsp + 0x42], 0x72
mov byte [rsp + 0x43], 0x7f
mov byte [rsp + 0x44], 0x68
mov byte [rsp + 0x45], 0x3e
mov byte [rsp + 0x46], 0x7d
mov byte [rsp + 0x47], 0x7f
mov byte [rsp + 0x48], 0x75
mov byte [rsp + 0x49], 0x3f
mov byte [rsp + 0x4a], 0x67
mov byte [rsp + 0x4b], 0x61
mov byte [rsp + 0x4c], 0x75
mov byte [rsp + 0x4d], 0x73
mov byte [rsp + 0x4e], 0x77
mov byte [rsp + 0x4f], 0x64
mov byte [rsp + 0x50], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a63b0], eax
jle 0x140011333
lea rcx, [0x1401a63b0]
call fcn.1400c1360
cmp dword [0x1401a63b0], 0xffffffff
jne 0x140011333
lea rdx, [0x1401a63a8]
lea rcx, [rsp + 0x30]
call fcn.1400203f4
lea rcx, [0x14011062c]
call fcn.1400c16d0
nop
lea rcx, [0x1401a63b0]
call fcn.1400c12f4
nop
lea rax, [0x1401a63a8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x68
ret

Function at 0x14001134c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x47
mov byte [rsp + 0x32], 0x79
mov byte [rsp + 0x33], 0x62
mov byte [rsp + 0x34], 0x75
mov byte [rsp + 0x35], 0x63
mov byte [rsp + 0x36], 0x78
mov byte [rsp + 0x37], 0x71
mov byte [rsp + 0x38], 0x62
mov byte [rsp + 0x39], 0x7b
mov byte [rsp + 0x3a], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6540], eax
jle 0x1400113f9
lea rcx, [0x1401a6540]
call fcn.1400c1360
cmp dword [0x1401a6540], 0xffffffff
jne 0x1400113f9
lea rdx, [0x1401a6538]
lea rcx, [rsp + 0x30]
call fcn.14001fe28
lea rcx, [0x140110644]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6540]
call fcn.1400c12f4
nop
lea rax, [0x1401a6538]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x140011414
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x68
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x78
mov byte [rsp + 0x32], 0x64
mov byte [rsp + 0x33], 0x64
mov byte [rsp + 0x34], 0x60
mov byte [rsp + 0x35], 0x63
mov byte [rsp + 0x36], 0x2a
mov byte [rsp + 0x37], 0x3f
mov byte [rsp + 0x38], 0x3f
mov byte [rsp + 0x39], 0x76
mov byte [rsp + 0x3a], 0x79
mov byte [rsp + 0x3b], 0x7c
mov byte [rsp + 0x3c], 0x75
mov byte [rsp + 0x3d], 0x63
mov byte [rsp + 0x3e], 0x3e
mov byte [rsp + 0x3f], 0x7f
mov byte [rsp + 0x40], 0x76
mov byte [rsp + 0x41], 0x76
mov byte [rsp + 0x42], 0x63
mov byte [rsp + 0x43], 0x78
mov byte [rsp + 0x44], 0x7f
mov byte [rsp + 0x45], 0x62
mov byte [rsp + 0x46], 0x75
mov byte [rsp + 0x47], 0x3e
mov byte [rsp + 0x48], 0x73
mov byte [rsp + 0x49], 0x71
mov byte [rsp + 0x4a], 0x64
mov byte [rsp + 0x4b], 0x3f
mov byte [rsp + 0x4c], 0x48
mov byte [rsp + 0x4d], 0x53
mov byte [rsp + 0x4e], 0x52
mov byte [rsp + 0x4f], 0x25
mov byte [rsp + 0x50], 0x48
mov byte [rsp + 0x51], 0x51
mov byte [rsp + 0x52], 0x79
mov byte [rsp + 0x53], 0x5d
mov byte [rsp + 0x54], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a63c0], eax
jle 0x140011543
lea rcx, [0x1401a63c0]
call fcn.1400c1360
cmp dword [0x1401a63c0], 0xffffffff
jne 0x140011543
lea rdx, [0x1401a63b8]
lea rcx, [rsp + 0x30]
call fcn.1400204c8
lea rcx, [0x14011065c]
call fcn.1400c16d0
nop
lea rcx, [0x1401a63c0]
call fcn.1400c12f4
nop
lea rax, [0x1401a63b8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x68
ret

Function at 0x14001155c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x59
mov byte [rsp + 0x32], 0x7d
mov byte [rsp + 0x33], 0x60
mov byte [rsp + 0x34], 0x7f
mov byte [rsp + 0x35], 0x62
mov byte [rsp + 0x36], 0x64
mov byte [rsp + 0x37], 0x30
mov byte [rsp + 0x38], 0x42
mov byte [rsp + 0x39], 0x75
mov byte [rsp + 0x3a], 0x73
mov byte [rsp + 0x3b], 0x7f
mov byte [rsp + 0x3c], 0x7e
mov byte [rsp + 0x3d], 0x63
mov byte [rsp + 0x3e], 0x64
mov byte [rsp + 0x3f], 0x62
mov byte [rsp + 0x40], 0x65
mov byte [rsp + 0x41], 0x73
mov byte [rsp + 0x42], 0x64
mov byte [rsp + 0x43], 0x7f
mov byte [rsp + 0x44], 0x62
mov byte [rsp + 0x45], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6550], eax
jle 0x140011640
lea rcx, [0x1401a6550]
call fcn.1400c1360
cmp dword [0x1401a6550], 0xffffffff
jne 0x140011640
lea rdx, [0x1401a6548]
lea rcx, [rsp + 0x30]
call fcn.140020178
lea rcx, [0x140110674]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6550]
call fcn.1400c12f4
nop
lea rax, [0x1401a6548]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret
Function at 0x14001165c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x53
mov byte [rsp + 0x32], 0x2a
mov byte [rsp + 0x33], 0x4c
mov byte [rsp + 0x34], 0x47
mov byte [rsp + 0x35], 0x79
mov byte [rsp + 0x36], 0x7e
mov byte [rsp + 0x37], 0x74
mov byte [rsp + 0x38], 0x7f
mov byte [rsp + 0x39], 0x67
mov byte [rsp + 0x3a], 0x63
mov byte [rsp + 0x3b], 0x4c
mov byte [rsp + 0x3c], 0x44
mov byte [rsp + 0x3d], 0x75
mov byte [rsp + 0x3e], 0x7d
mov byte [rsp + 0x3f], 0x60
mov byte [rsp + 0x40], 0x4c
mov byte [rsp + 0x41], 0x73
mov byte [rsp + 0x42], 0x63
mov byte [rsp + 0x43], 0x22
mov byte [rsp + 0x44], 0x3e
mov byte [rsp + 0x45], 0x75
mov byte [rsp + 0x46], 0x68
mov byte [rsp + 0x47], 0x75
mov byte [rsp + 0x48], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a63d0], eax
jle 0x14001174f
lea rcx, [0x1401a63d0]
call fcn.1400c1360
cmp dword [0x1401a63d0], 0xffffffff
jne 0x14001174f
lea rdx, [0x1401a63c8]
lea rcx, [rsp + 0x30]
call fcn.14002024c
lea rcx, [0x14011068c]
call fcn.1400c16d0
nop
lea rcx, [0x1401a63d0]
call fcn.1400c12f4
nop
lea rax, [0x1401a63c8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret

Function at 0x140011768
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x43
mov byte [rsp + 0x32], 0x69
mov byte [rsp + 0x33], 0x63
mov byte [rsp + 0x34], 0x59
mov byte [rsp + 0x35], 0x7e
mov byte [rsp + 0x36], 0x63
mov byte [rsp + 0x37], 0x60
mov byte [rsp + 0x38], 0x75
mov byte [rsp + 0x39], 0x73
mov byte [rsp + 0x3a], 0x64
mov byte [rsp + 0x3b], 0x7f
mov byte [rsp + 0x3c], 0x62
mov byte [rsp + 0x3d], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6560], eax
jle 0x140011824
lea rcx, [0x1401a6560]
call fcn.1400c1360
cmp dword [0x1401a6560], 0xffffffff
jne 0x140011824
lea rdx, [0x1401a6558]
lea rcx, [rsp + 0x30]
call fcn.140020818
lea rcx, [0x1401106a4]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6560]
call fcn.1400c12f4
nop
lea rax, [0x1401a6558]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x140011840
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x68
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x29
mov byte [rsp + 0x32], 0x79
mov byte [rsp + 0x33], 0x7a
mov byte [rsp + 0x34], 0x54
mov byte [rsp + 0x35], 0x4a
mov byte [rsp + 0x36], 0x5a
mov byte [rsp + 0x37], 0x7f
mov byte [rsp + 0x38], 0x27
mov byte [rsp + 0x39], 0x52
mov byte [rsp + 0x3a], 0x74
mov byte [rsp + 0x3b], 0x5a
mov byte [rsp + 0x3c], 0x66
mov byte [rsp + 0x3d], 0x75
mov byte [rsp + 0x3e], 0x69
mov byte [rsp + 0x3f], 0x73
mov byte [rsp + 0x40], 0x46
mov byte [rsp + 0x41], 0x55
mov byte [rsp + 0x42], 0x28
mov byte [rsp + 0x43], 0x54
mov byte [rsp + 0x44], 0x5b
mov byte [rsp + 0x45], 0x75
mov byte [rsp + 0x46], 0x21
mov byte [rsp + 0x47], 0x54
mov byte [rsp + 0x48], 0x45
mov byte [rsp + 0x49], 0x22
mov byte [rsp + 0x4a], 0x51
mov byte [rsp + 0x4b], 0x67
mov byte [rsp + 0x4c], 0x66
mov byte [rsp + 0x4d], 0x66
mov byte [rsp + 0x4e], 0x25
mov byte [rsp + 0x4f], 0x45
mov byte [rsp + 0x50], 0x54
mov byte [rsp + 0x51], 0x41
mov byte [rsp + 0x52], 0x5c
mov byte [rsp + 0x53], 0x5f
mov byte [rsp + 0x54], 0x61
mov byte [rsp + 0x55], 0x7f
mov byte [rsp + 0x56], 0x7c
mov byte [rsp + 0x57], 0x64
mov byte [rsp + 0x58], 0x66
mov byte [rsp + 0x59], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a63e0], eax
jle 0x140011988
lea rcx, [0x1401a63e0]
call fcn.1400c1360
cmp dword [0x1401a63e0], 0xffffffff
jne 0x140011988
lea rdx, [0x1401a63d8]
lea rcx, [rsp + 0x30]
call fcn.14002059c
lea rcx, [0x1401106bc]
call fcn.1400c16d0
nop
lea rcx, [0x1401a63e0]
call fcn.1400c12f4
nop
lea rax, [0x1401a63d8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x68
ret

Function at 0x1400119a4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x58
mov byte [rsp + 0x32], 0x44
mov byte [rsp + 0x33], 0x44
mov byte [rsp + 0x34], 0x40
mov byte [rsp + 0x35], 0x30
mov byte [rsp + 0x36], 0x54
mov byte [rsp + 0x37], 0x75
mov byte [rsp + 0x38], 0x72
mov byte [rsp + 0x39], 0x65
mov byte [rsp + 0x3a], 0x77
mov byte [rsp + 0x3b], 0x77
mov byte [rsp + 0x3c], 0x75
mov byte [rsp + 0x3d], 0x62
mov byte [rsp + 0x3e], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6570], eax
jle 0x140011a65
lea rcx, [0x1401a6570]
call fcn.1400c1360
cmp dword [0x1401a6570], 0xffffffff
jne 0x140011a65
lea rdx, [0x1401a6568]
lea rcx, [rsp + 0x30]
call fcn.1400208ec
lea rcx, [0x1401106d4]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6570]
call fcn.1400c12f4
nop
lea rax, [0x1401a6568]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x140011ec0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x7b
mov byte [rsp + 0x32], 0x75
mov byte [rsp + 0x33], 0x62
mov byte [rsp + 0x34], 0x7e
mov byte [rsp + 0x35], 0x75
mov byte [rsp + 0x36], 0x7c
mov byte [rsp + 0x37], 0x23
mov byte [rsp + 0x38], 0x22
mov byte [rsp + 0x39], 0x3e
mov byte [rsp + 0x3a], 0x74
mov byte [rsp + 0x3b], 0x7c
mov byte [rsp + 0x3c], 0x7c
mov byte [rsp + 0x3d], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6670], eax
jle 0x140011f7c
lea rcx, [0x1401a6670]
call fcn.1400c1360
cmp dword [0x1401a6670], 0xffffffff
jne 0x140011f7c
lea rdx, [0x1401a6668]
lea rcx, [rsp + 0x30]
call fcn.140020818
lea rcx, [0x14011077c]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6670]
call fcn.1400c12f4
nop
lea rax, [0x1401a6668]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret

Function at 0x140011f98
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x7b
mov byte [rsp + 0x32], 0x75
mov byte [rsp + 0x33], 0x62
mov byte [rsp + 0x34], 0x7e
mov byte [rsp + 0x35], 0x75
mov byte [rsp + 0x36], 0x7c
mov byte [rsp + 0x37], 0x23
mov byte [rsp + 0x38], 0x22
mov byte [rsp + 0x39], 0x3e
mov byte [rsp + 0x3a], 0x74
mov byte [rsp + 0x3b], 0x7c
mov byte [rsp + 0x3c], 0x7c
mov byte [rsp + 0x3d], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6690], eax
jle 0x140012054
lea rcx, [0x1401a6690]
call fcn.1400c1360
cmp dword [0x1401a6690], 0xffffffff
jne 0x140012054
lea rdx, [0x1401a6688]
lea rcx, [rsp + 0x30]
call fcn.140020818
lea rcx, [0x140110794]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6690]
call fcn.1400c12f4
nop
lea rax, [0x1401a6688]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x140012128
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x7b
mov byte [rsp + 0x32], 0x75
mov byte [rsp + 0x33], 0x62
mov byte [rsp + 0x34], 0x7e
mov byte [rsp + 0x35], 0x75
mov byte [rsp + 0x36], 0x7c
mov byte [rsp + 0x37], 0x23
mov byte [rsp + 0x38], 0x22
mov byte [rsp + 0x39], 0x3e
mov byte [rsp + 0x3a], 0x74
mov byte [rsp + 0x3b], 0x7c
mov byte [rsp + 0x3c], 0x7c
mov byte [rsp + 0x3d], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6310], eax
jle 0x1400121e4
lea rcx, [0x1401a6310]
call fcn.1400c1360
cmp dword [0x1401a6310], 0xffffffff
jne 0x1400121e4
lea rdx, [0x1401a6308]
lea rcx, [rsp + 0x30]
call fcn.140020818
lea rcx, [0x1401107c4]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6310]
call fcn.1400c12f4
nop
lea rax, [0x1401a6308]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret

Function at 0x140012200
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x7b
mov byte [rsp + 0x32], 0x75
mov byte [rsp + 0x33], 0x62
mov byte [rsp + 0x34], 0x7e
mov byte [rsp + 0x35], 0x75
mov byte [rsp + 0x36], 0x7c
mov byte [rsp + 0x37], 0x23
mov byte [rsp + 0x38], 0x22
mov byte [rsp + 0x39], 0x3e
mov byte [rsp + 0x3a], 0x74
mov byte [rsp + 0x3b], 0x7c
mov byte [rsp + 0x3c], 0x7c
mov byte [rsp + 0x3d], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6410], eax
jle 0x1400122bc
lea rcx, [0x1401a6410]
call fcn.1400c1360
cmp dword [0x1401a6410], 0xffffffff
jne 0x1400122bc
lea rdx, [0x1401a6408]
lea rcx, [rsp + 0x30]
call fcn.140020818
lea rcx, [0x1401107dc]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6410]
call fcn.1400c12f4
nop
lea rax, [0x1401a6408]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x140012438
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x43
mov byte [rsp + 0x32], 0x69
mov byte [rsp + 0x33], 0x63
mov byte [rsp + 0x34], 0x51
mov byte [rsp + 0x35], 0x7e
mov byte [rsp + 0x36], 0x71
mov byte [rsp + 0x37], 0x7c
mov byte [rsp + 0x38], 0x69
mov byte [rsp + 0x39], 0x6a
mov byte [rsp + 0x3a], 0x75
mov byte [rsp + 0x3b], 0x62
mov byte [rsp + 0x3c], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a65d0], eax
jle 0x1400124ef
lea rcx, [0x1401a65d0]
call fcn.1400c1360
cmp dword [0x1401a65d0], 0xffffffff
jne 0x1400124ef
lea rdx, [0x1401a65c8]
lea rcx, [rsp + 0x30]
call fcn.140020744
lea rcx, [0x14011080c]
call fcn.1400c16d0
nop
lea rcx, [0x1401a65d0]
call fcn.1400c12f4
nop
lea rax, [0x1401a65c8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret

Function at 0x1400125c4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x40
mov byte [rsp + 0x32], 0x62
mov byte [rsp + 0x33], 0x7f
mov byte [rsp + 0x34], 0x73
mov byte [rsp + 0x35], 0x75
mov byte [rsp + 0x36], 0x63
mov byte [rsp + 0x37], 0x63
mov byte [rsp + 0x38], 0x30
mov byte [rsp + 0x39], 0x55
mov byte [rsp + 0x3a], 0x68
mov byte [rsp + 0x3b], 0x60
mov byte [rsp + 0x3c], 0x7c
mov byte [rsp + 0x3d], 0x7f
mov byte [rsp + 0x3e], 0x62
mov byte [rsp + 0x3f], 0x75
mov byte [rsp + 0x40], 0x62
mov byte [rsp + 0x41], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a65f0], eax
jle 0x140012694
lea rcx, [0x1401a65f0]
call fcn.1400c1360
cmp dword [0x1401a65f0], 0xffffffff
jne 0x140012694
lea rdx, [0x1401a65e8]
lea rcx, [rsp + 0x30]
call fcn.14001ffd0
lea rcx, [0x14011083c]
call fcn.1400c16d0
nop
lea rcx, [0x1401a65f0]
call fcn.1400c12f4
nop
lea rax, [0x1401a65e8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret
Function at 0x1400126b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x59
mov byte [rsp + 0x32], 0x7d
mov byte [rsp + 0x33], 0x7d
mov byte [rsp + 0x34], 0x65
mov byte [rsp + 0x35], 0x7e
mov byte [rsp + 0x36], 0x79
mov byte [rsp + 0x37], 0x64
mov byte [rsp + 0x38], 0x69
mov byte [rsp + 0x39], 0x54
mov byte [rsp + 0x3a], 0x75
mov byte [rsp + 0x3b], 0x72
mov byte [rsp + 0x3c], 0x65
mov byte [rsp + 0x3d], 0x77
mov byte [rsp + 0x3e], 0x77
mov byte [rsp + 0x3f], 0x75
mov byte [rsp + 0x40], 0x62
mov byte [rsp + 0x41], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6600], eax
jle 0x140012780
lea rcx, [0x1401a6600]
call fcn.1400c1360
cmp dword [0x1401a6600], 0xffffffff
jne 0x140012780
lea rdx, [0x1401a65f8]
lea rcx, [rsp + 0x30]
call fcn.14001ffd0
lea rcx, [0x140110854]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6600]
call fcn.1400c12f4
nop
lea rax, [0x1401a65f8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret

Function at 0x140012854
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x53
mov byte [rsp + 0x32], 0x78
mov byte [rsp + 0x33], 0x75
mov byte [rsp + 0x34], 0x71
mov byte [rsp + 0x35], 0x64
mov byte [rsp + 0x36], 0x30
mov byte [rsp + 0x37], 0x55
mov byte [rsp + 0x38], 0x7e
mov byte [rsp + 0x39], 0x77
mov byte [rsp + 0x3a], 0x79
mov byte [rsp + 0x3b], 0x7e
mov byte [rsp + 0x3c], 0x75
mov byte [rsp + 0x3d], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6620], eax
jle 0x140012910
lea rcx, [0x1401a6620]
call fcn.1400c1360
cmp dword [0x1401a6620], 0xffffffff
jne 0x140012910
lea rdx, [0x1401a6618]
lea rcx, [rsp + 0x30]
call fcn.140020818
lea rcx, [0x140110884]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6620]
call fcn.1400c12f4
nop
lea rax, [0x1401a6618]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x1400129e8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x42
mov byte [rsp + 0x32], 0x75
mov byte [rsp + 0x33], 0x63
mov byte [rsp + 0x34], 0x7f
mov byte [rsp + 0x35], 0x65
mov byte [rsp + 0x36], 0x62
mov byte [rsp + 0x37], 0x73
mov byte [rsp + 0x38], 0x75
mov byte [rsp + 0x39], 0x30
mov byte [rsp + 0x3a], 0x58
mov byte [rsp + 0x3b], 0x71
mov byte [rsp + 0x3c], 0x73
mov byte [rsp + 0x3d], 0x7b
mov byte [rsp + 0x3e], 0x75
mov byte [rsp + 0x3f], 0x62
mov byte [rsp + 0x40], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6640], eax
jle 0x140012ab3
lea rcx, [0x1401a6640]
call fcn.1400c1360
cmp dword [0x1401a6640], 0xffffffff
jne 0x140012ab3
lea rdx, [0x1401a6638]
lea rcx, [rsp + 0x30]
call fcn.14001fefc
lea rcx, [0x1401108b4]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6640]
call fcn.1400c12f4
nop
lea rax, [0x1401a6638]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret

Function at 0x140012acc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x52
mov byte [rsp + 0x32], 0x62
mov byte [rsp + 0x33], 0x65
mov byte [rsp + 0x34], 0x64
mov byte [rsp + 0x35], 0x75
mov byte [rsp + 0x36], 0x30
mov byte [rsp + 0x37], 0x43
mov byte [rsp + 0x38], 0x78
mov byte [rsp + 0x39], 0x71
mov byte [rsp + 0x3a], 0x62
mov byte [rsp + 0x3b], 0x7b
mov byte [rsp + 0x3c], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6650], eax
jle 0x140012b83
lea rcx, [0x1401a6650]
call fcn.1400c1360
cmp dword [0x1401a6650], 0xffffffff
jne 0x140012b83
lea rdx, [0x1401a6648]
lea rcx, [rsp + 0x30]
call fcn.140020744
lea rcx, [0x1401108cc]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6650]
call fcn.1400c12f4
nop
lea rax, [0x1401a6648]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret