joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140004588
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x58
mov byte [rsp + 0x22], 0x56
mov byte [rsp + 0x23], 0x44
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x4e
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x48
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x4e
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f5c48], 0
jne 0x14000462c
mov byte [0x1409f5c63], 1
mov eax, 0
lea rcx, [0x1409f5c50]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140004607
mov byte [0x1409f5c48], 1
lea rcx, [0x140001d45]
call fcn.1400014f0
lea rax, [0x1409f5c50]
add rsp, 0x48
ret

Function at 0x140004638
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x45
mov byte [rsp + 0x26], 0x58
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x4f
mov byte [rsp + 0x29], 0x4a
mov byte [rsp + 0x2a], 0x58
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x47
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f5a90], 0
jne 0x1400046dc
mov byte [0x1409f5ab3], 1
mov eax, 0
lea rcx, [0x1409f5aa0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400046b7
mov byte [0x1409f5a90], 1
lea rcx, [0x140001e95]
call fcn.1400014f0
lea rax, [0x1409f5aa0]
add rsp, 0x48
ret

Function at 0x1400046e8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x53
mov byte [rsp + 0x22], 0x44
mov byte [rsp + 0x23], 0x51
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x48
mov byte [rsp + 0x28], 0x46
mov byte [rsp + 0x29], 0x58
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x4c
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f5968], 0
jne 0x14000478c
mov byte [0x1409f5983], 1
mov eax, 0
lea rcx, [0x1409f5970]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140004767
mov byte [0x1409f5968], 1
lea rcx, [0x140001f85]
call fcn.1400014f0
lea rax, [0x1409f5970]
add rsp, 0x48
ret
Function at 0x140004798
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x5d
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x51
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x4f
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x50
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f5940], 0
jne 0x14000483c
mov byte [0x1409f5963], 1
mov eax, 0
lea rcx, [0x1409f5950]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140004817
mov byte [0x1409f5940], 1
lea rcx, [0x140001f9d]
call fcn.1400014f0
lea rax, [0x1409f5950]
add rsp, 0x48
ret

Function at 0x140004848
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x51
mov byte [rsp + 0x23], 0x57
mov byte [rsp + 0x24], 0x56
mov byte [rsp + 0x25], 0x48
mov byte [rsp + 0x26], 0x55
mov byte [rsp + 0x27], 0x59
mov byte [rsp + 0x28], 0x4c
mov byte [rsp + 0x29], 0x46
mov byte [rsp + 0x2a], 0x48
mov byte [rsp + 0x2b], 0x53
mov byte [rsp + 0x2c], 0x44
mov byte [rsp + 0x2d], 0x46
mov byte [rsp + 0x2e], 0x4e
mov byte [rsp + 0x2f], 0x11
mov byte [rsp + 0x30], 0x50
mov byte [rsp + 0x31], 0x4c
mov byte [rsp + 0x32], 0x46
mov byte [rsp + 0x33], 0x55
mov byte [rsp + 0x34], 0x52
mov byte [rsp + 0x35], 0x56
mov byte [rsp + 0x36], 0x52
mov byte [rsp + 0x37], 0x49
mov byte [rsp + 0x38], 0x57
mov byte [rsp + 0x39], 0x11
mov byte [rsp + 0x3a], 0x46
mov byte [rsp + 0x3b], 0x52
mov byte [rsp + 0x3c], 0x50
mov byte [rsp + 0x3d], 0xe3
cmp byte [0x1409f6278], 0
jne 0x140004923
mov byte [0x1409f629e], 1
mov eax, 0
lea rcx, [0x1409f6280]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x1e
jne 0x1400048fe
mov byte [0x1409f6278], 1
lea rcx, [0x1400018f5]
call fcn.1400014f0
lea rax, [0x1409f6280]
add rsp, 0x48
ret
Function at 0x140004930
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x58
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x50
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x51
mov byte [rsp + 0x25], 0x45
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x57
mov byte [rsp + 0x28], 0x10
mov byte [rsp + 0x29], 0x19
mov byte [rsp + 0x2a], 0x18
mov byte [rsp + 0x2b], 0x10
mov byte [rsp + 0x2c], 0x18
mov byte [rsp + 0x2d], 0x15
mov byte [rsp + 0x2e], 0x10
mov byte [rsp + 0x2f], 0x14
mov byte [rsp + 0x30], 0x13
mov byte [rsp + 0x31], 0x1b
mov byte [rsp + 0x32], 0x10
mov byte [rsp + 0x33], 0x16
mov byte [rsp + 0x34], 0x16
mov byte [rsp + 0x35], 0x11
mov byte [rsp + 0x36], 0x56
mov byte [rsp + 0x37], 0x48
mov byte [rsp + 0x38], 0x44
mov byte [rsp + 0x39], 0x55
mov byte [rsp + 0x3a], 0x46
mov byte [rsp + 0x3b], 0x4b
mov byte [rsp + 0x3c], 0x11
mov byte [rsp + 0x3d], 0x50
mov byte [rsp + 0x3e], 0x56
mov byte [rsp + 0x3f], 0x51
mov byte [rsp + 0x40], 0x11
mov byte [rsp + 0x41], 0x46
mov byte [rsp + 0x42], 0x52
mov byte [rsp + 0x43], 0x50
mov byte [rsp + 0x44], 0x50
mov byte [rsp + 0x45], 0x48
mov byte [rsp + 0x46], 0x51
mov byte [rsp + 0x47], 0x57
mov byte [rsp + 0x48], 0x56
mov byte [rsp + 0x49], 0xe3
cmp byte [0x1409f6210], 0
jne 0x140004a47
mov byte [0x1409f624a], 1
mov eax, 0
lea rcx, [0x1409f6220]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x2a
jne 0x140004a22
mov byte [0x1409f6210], 1
lea rcx, [0x140001925]
call fcn.1400014f0
lea rax, [0x1409f6220]
add rsp, 0x58
ret

Function at 0x140004a54
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x58
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x59
mov byte [rsp + 0x23], 0x52
mov byte [rsp + 0x24], 0x55
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x48
mov byte [rsp + 0x27], 0x5b
mov byte [rsp + 0x28], 0x10
mov byte [rsp + 0x29], 0x5a
mov byte [rsp + 0x2a], 0x4c
mov byte [rsp + 0x2b], 0x51
mov byte [rsp + 0x2c], 0x11
mov byte [rsp + 0x2d], 0x47
mov byte [rsp + 0x2e], 0x44
mov byte [rsp + 0x2f], 0x57
mov byte [rsp + 0x30], 0x44
mov byte [rsp + 0x31], 0x11
mov byte [rsp + 0x32], 0x50
mov byte [rsp + 0x33], 0x4c
mov byte [rsp + 0x34], 0x46
mov byte [rsp + 0x35], 0x55
mov byte [rsp + 0x36], 0x52
mov byte [rsp + 0x37], 0x56
mov byte [rsp + 0x38], 0x52
mov byte [rsp + 0x39], 0x49
mov byte [rsp + 0x3a], 0x57
mov byte [rsp + 0x3b], 0x11
mov byte [rsp + 0x3c], 0x46
mov byte [rsp + 0x3d], 0x52
mov byte [rsp + 0x3e], 0x50
mov byte [rsp + 0x3f], 3
mov byte [rsp + 0x40], 0xe3
cmp byte [0x1409f61a8], 0
jne 0x140004b3e
mov byte [0x1409f61e1], 1
mov eax, 0
lea rcx, [0x1409f61c0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x21
jne 0x140004b19
mov byte [0x1409f61a8], 1
lea rcx, [0x140001955]
call fcn.1400014f0
lea rax, [0x1409f61c0]
add rsp, 0x58
ret
Function at 0x140004b4a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x58
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x57
mov byte [rsp + 0x22], 0x48
mov byte [rsp + 0x23], 0x4f
mov byte [rsp + 0x24], 0x48
mov byte [rsp + 0x25], 0x46
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x50
mov byte [rsp + 0x28], 0x50
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x51
mov byte [rsp + 0x2b], 0x47
mov byte [rsp + 0x2c], 0x11
mov byte [rsp + 0x2d], 0x57
mov byte [rsp + 0x2e], 0x48
mov byte [rsp + 0x2f], 0x4f
mov byte [rsp + 0x30], 0x48
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0x48
mov byte [rsp + 0x33], 0x57
mov byte [rsp + 0x34], 0x55
mov byte [rsp + 0x35], 0x5c
mov byte [rsp + 0x36], 0x11
mov byte [rsp + 0x37], 0x50
mov byte [rsp + 0x38], 0x4c
mov byte [rsp + 0x39], 0x46
mov byte [rsp + 0x3a], 0x55
mov byte [rsp + 0x3b], 0x52
mov byte [rsp + 0x3c], 0x56
mov byte [rsp + 0x3d], 0x52
mov byte [rsp + 0x3e], 0x49
mov byte [rsp + 0x3f], 0x57
mov byte [rsp + 0x40], 0x11
mov byte [rsp + 0x41], 0x46
mov byte [rsp + 0x42], 0x52
mov byte [rsp + 0x43], 0x50
mov byte [rsp + 0x44], 0xe3
cmp byte [0x1409f6170], 0
jne 0x140004c48
mov byte [0x1409f61a5], 1
mov eax, 0
lea rcx, [0x1409f6180]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x25
jne 0x140004c23
mov byte [0x1409f6170], 1
lea rcx, [0x14000196d]
call fcn.1400014f0
lea rax, [0x1409f6180]
add rsp, 0x58
ret

Function at 0x140004c54
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x58
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x57
mov byte [rsp + 0x22], 0x48
mov byte [rsp + 0x23], 0x4f
mov byte [rsp + 0x24], 0x48
mov byte [rsp + 0x25], 0x46
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x50
mov byte [rsp + 0x28], 0x50
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x51
mov byte [rsp + 0x2b], 0x47
mov byte [rsp + 0x2c], 0x11
mov byte [rsp + 0x2d], 0x57
mov byte [rsp + 0x2e], 0x48
mov byte [rsp + 0x2f], 0x4f
mov byte [rsp + 0x30], 0x48
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0x48
mov byte [rsp + 0x33], 0x57
mov byte [rsp + 0x34], 0x55
mov byte [rsp + 0x35], 0x5c
mov byte [rsp + 0x36], 0x11
mov byte [rsp + 0x37], 0x50
mov byte [rsp + 0x38], 0x4c
mov byte [rsp + 0x39], 0x46
mov byte [rsp + 0x3a], 0x55
mov byte [rsp + 0x3b], 0x52
mov byte [rsp + 0x3c], 0x56
mov byte [rsp + 0x3d], 0x52
mov byte [rsp + 0x3e], 0x49
mov byte [rsp + 0x3f], 0x57
mov byte [rsp + 0x40], 0x11
mov byte [rsp + 0x41], 0x46
mov byte [rsp + 0x42], 0x52
mov byte [rsp + 0x43], 0x50
mov byte [rsp + 0x44], 0x11
mov byte [rsp + 0x45], 0x51
mov byte [rsp + 0x46], 0x56
mov byte [rsp + 0x47], 0x44
mov byte [rsp + 0x48], 0x57
mov byte [rsp + 0x49], 0x46
mov byte [rsp + 0x4a], 0x11
mov byte [rsp + 0x4b], 0x51
mov byte [rsp + 0x4c], 0x48
mov byte [rsp + 0x4d], 0x57
mov byte [rsp + 0x4e], 0xe3
cmp byte [0x1409f6130], 0
jne 0x140004d84
mov byte [0x1409f616f], 1
mov eax, 0
lea rcx, [0x1409f6140]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x2f
jne 0x140004d5f
mov byte [0x1409f6130], 1
lea rcx, [0x140001985]
call fcn.1400014f0
lea rax, [0x1409f6140]
add rsp, 0x58
ret
Function at 0x140004d90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x58
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x52
mov byte [rsp + 0x22], 0x46
mov byte [rsp + 0x23], 0x44
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x48
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x50
mov byte [rsp + 0x2a], 0x48
mov byte [rsp + 0x2b], 0x57
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x50
mov byte [rsp + 0x30], 0x4c
mov byte [rsp + 0x31], 0x46
mov byte [rsp + 0x32], 0x55
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x56
mov byte [rsp + 0x35], 0x52
mov byte [rsp + 0x36], 0x49
mov byte [rsp + 0x37], 0x57
mov byte [rsp + 0x38], 0x11
mov byte [rsp + 0x39], 0x46
mov byte [rsp + 0x3a], 0x52
mov byte [rsp + 0x3b], 0x50
mov byte [rsp + 0x3c], 0x11
mov byte [rsp + 0x3d], 0x51
mov byte [rsp + 0x3e], 0x56
mov byte [rsp + 0x3f], 0x44
mov byte [rsp + 0x40], 0x57
mov byte [rsp + 0x41], 0x46
mov byte [rsp + 0x42], 0x11
mov byte [rsp + 0x43], 0x51
mov byte [rsp + 0x44], 0x48
mov byte [rsp + 0x45], 0x57
mov byte [rsp + 0x46], 0xe3
cmp byte [0x1409f60d0], 0
jne 0x140004e98
mov byte [0x1409f6107], 1
mov eax, 0
lea rcx, [0x1409f60e0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x27
jne 0x140004e73
mov byte [0x1409f60d0], 1
lea rcx, [0x1400019b5]
call fcn.1400014f0
lea rax, [0x1409f60e0]
add rsp, 0x58
ret

Function at 0x1400050c4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x5a
mov byte [rsp + 0x25], 0x11
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x59
mov byte [rsp + 0x28], 0x44
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f6070], 0
jne 0x140005154
mov byte [0x1409f608f], 1
mov eax, 0
lea rcx, [0x1409f6080]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x14000512f
mov byte [0x1409f6070], 1
lea rcx, [0x1400019fd]
call fcn.1400014f0
lea rax, [0x1409f6080]
add rsp, 0x38
ret

Function at 0x140005160
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x56
mov byte [rsp + 0x23], 0x46
mov byte [rsp + 0x24], 0x44
mov byte [rsp + 0x25], 0x51
mov byte [rsp + 0x26], 0x4a
mov byte [rsp + 0x27], 0x58
mov byte [rsp + 0x28], 0x44
mov byte [rsp + 0x29], 0x55
mov byte [rsp + 0x2a], 0x47
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f6018], 0
jne 0x1400051f0
mov byte [0x1409f602f], 1
mov eax, 0
lea rcx, [0x1409f6020]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x1400051cb
mov byte [0x1409f6018], 1
lea rcx, [0x140001a45]
call fcn.1400014f0
lea rax, [0x1409f6020]
add rsp, 0x38
ret
Function at 0x1400051fc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x53
mov byte [rsp + 0x23], 0x46
mov byte [rsp + 0x24], 0x53
mov byte [rsp + 0x25], 0x55
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x57
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x46
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f5f98], 0
jne 0x14000528c
mov byte [0x1409f5faf], 1
mov eax, 0
lea rcx, [0x1409f5fa0]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x140005267
mov byte [0x1409f5f98], 1
lea rcx, [0x140001aa5]
call fcn.1400014f0
lea rax, [0x1409f5fa0]
add rsp, 0x38
ret

Function at 0x140005298
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x58
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x51
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x55
mov byte [rsp + 0x28], 0x57
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x51
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f5ed8], 0
jne 0x140005328
mov byte [0x1409f5eef], 1
mov eax, 0
lea rcx, [0x1409f5ee0]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x140005303
mov byte [0x1409f5ed8], 1
lea rcx, [0x140001b35]
call fcn.1400014f0
lea rax, [0x1409f5ee0]
add rsp, 0x38
ret

Function at 0x140005334
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x56
mov byte [rsp + 0x23], 0x58
mov byte [rsp + 0x24], 0x55
mov byte [rsp + 0x25], 0x49
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x4b
mov byte [rsp + 0x28], 0x44
mov byte [rsp + 0x29], 0x55
mov byte [rsp + 0x2a], 0x4e
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f5de8], 0
jne 0x1400053c4
mov byte [0x1409f5dff], 1
mov eax, 0
lea rcx, [0x1409f5df0]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x14000539f
mov byte [0x1409f5de8], 1
lea rcx, [0x140001bf5]
call fcn.1400014f0
lea rax, [0x1409f5df0]
add rsp, 0x38
ret
Function at 0x1400053d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x5a
mov byte [rsp + 0x25], 0x11
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x59
mov byte [rsp + 0x28], 0x4c
mov byte [rsp + 0x29], 0x55
mov byte [rsp + 0x2a], 0x44
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f5d90], 0
jne 0x140005460
mov byte [0x1409f5daf], 1
mov eax, 0
lea rcx, [0x1409f5da0]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x14000543b
mov byte [0x1409f5d90], 1
lea rcx, [0x140001c3d]
call fcn.1400014f0
lea rax, [0x1409f5da0]
add rsp, 0x38
ret

Function at 0x14000546c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x5a
mov byte [rsp + 0x25], 0x11
mov byte [rsp + 0x26], 3
mov byte [rsp + 0x27], 0x48
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x48
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f5d20], 0
jne 0x1400054fc
mov byte [0x1409f5d3f], 1
mov eax, 0
lea rcx, [0x1409f5d30]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x1400054d7
mov byte [0x1409f5d20], 1
lea rcx, [0x140001c9d]
call fcn.1400014f0
lea rax, [0x1409f5d30]
add rsp, 0x38
ret

Function at 0x140005508
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x50
mov byte [rsp + 0x23], 0x4c
mov byte [rsp + 0x24], 0x46
mov byte [rsp + 0x25], 0x55
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x49
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f5d08], 0
jne 0x140005598
mov byte [0x1409f5d1f], 1
mov eax, 0
lea rcx, [0x1409f5d10]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x140005573
mov byte [0x1409f5d08], 1
lea rcx, [0x140001cb5]
call fcn.1400014f0
lea rax, [0x1409f5d10]
add rsp, 0x38
ret
Function at 0x1400055a4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x4e
mov byte [rsp + 0x23], 0x44
mov byte [rsp + 0x24], 0x56
mov byte [rsp + 0x25], 0x53
mov byte [rsp + 0x26], 0x48
mov byte [rsp + 0x27], 0x55
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x4e
mov byte [rsp + 0x2a], 0x5c
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f5c88], 0
jne 0x140005634
mov byte [0x1409f5c9f], 1
mov eax, 0
lea rcx, [0x1409f5c90]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x14000560f
mov byte [0x1409f5c88], 1
lea rcx, [0x140001d15]
call fcn.1400014f0
lea rax, [0x1409f5c90]
add rsp, 0x38
ret

Function at 0x140005640
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x5a
mov byte [rsp + 0x25], 0x11
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x59
mov byte [rsp + 0x28], 0x4c
mov byte [rsp + 0x29], 0x55
mov byte [rsp + 0x2a], 0x44
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f5ad0], 0
jne 0x1400056d0
mov byte [0x1409f5aef], 1
mov eax, 0
lea rcx, [0x1409f5ae0]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x1400056ab
mov byte [0x1409f5ad0], 1
lea rcx, [0x140001e65]
call fcn.1400014f0
lea rax, [0x1409f5ae0]
add rsp, 0x38
ret

Function at 0x1400056dc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x45
mov byte [rsp + 0x23], 0x58
mov byte [rsp + 0x24], 0x4f
mov byte [rsp + 0x25], 0x4f
mov byte [rsp + 0x26], 0x4a
mov byte [rsp + 0x27], 0x58
mov byte [rsp + 0x28], 0x44
mov byte [rsp + 0x29], 0x55
mov byte [rsp + 0x2a], 0x47
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f5a70], 0
jne 0x14000576c
mov byte [0x1409f5a8f], 1
mov eax, 0
lea rcx, [0x1409f5a80]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x140005747
mov byte [0x1409f5a70], 1
lea rcx, [0x140001ead]
call fcn.1400014f0
lea rax, [0x1409f5a80]
add rsp, 0x38
ret