joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400033d4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x4b
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x50
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x11
mov byte [rsp + 0x2a], 0x56
mov byte [rsp + 0x2b], 0x52
mov byte [rsp + 0x2c], 0x53
mov byte [rsp + 0x2d], 0x4b
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], 0x56
mov byte [rsp + 0x30], 0x11
mov byte [rsp + 0x31], 0x46
mov byte [rsp + 0x32], 0x52
mov byte [rsp + 0x33], 0x50
mov byte [rsp + 0x34], 0xe3
cmp byte [0x1409f5b68], 0
jne 0x140003482
mov byte [0x1409f5b85], 1
mov eax, 0
lea rcx, [0x1409f5b70]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x15
jne 0x14000345d
mov byte [0x1409f5b68], 1
lea rcx, [0x140001ded]
call fcn.1400014f0
lea rax, [0x1409f5b70]
add rsp, 0x48
ret

Function at 0x14000348e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0xd
mov byte [rsp + 0x23], 0x11
mov byte [rsp + 0x24], 0x5a
mov byte [rsp + 0x25], 0x4c
mov byte [rsp + 0x26], 0x51
mov byte [rsp + 0x27], 0x47
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x5a
mov byte [rsp + 0x2a], 0x56
mov byte [rsp + 0x2b], 0x58
mov byte [rsp + 0x2c], 0x53
mov byte [rsp + 0x2d], 0x47
mov byte [rsp + 0x2e], 0x44
mov byte [rsp + 0x2f], 0x57
mov byte [rsp + 0x30], 0x48
mov byte [rsp + 0x31], 0x11
mov byte [rsp + 0x32], 0x50
mov byte [rsp + 0x33], 0x4c
mov byte [rsp + 0x34], 0x46
mov byte [rsp + 0x35], 0x55
mov byte [rsp + 0x36], 0x52
mov byte [rsp + 0x37], 0x56
mov byte [rsp + 0x38], 0x52
mov byte [rsp + 0x39], 0x49
mov byte [rsp + 0x3a], 0x57
mov byte [rsp + 0x3b], 0x11
mov byte [rsp + 0x3c], 0x46
mov byte [rsp + 0x3d], 0x52
mov byte [rsp + 0x3e], 0x50
mov byte [rsp + 0x3f], 0xe3
cmp byte [0x1409f64b0], 0
jne 0x140003573
mov byte [0x1409f64e0], 1
mov eax, 0
lea rcx, [0x1409f64c0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x20
jne 0x14000354e
mov byte [0x1409f64b0], 1
lea rcx, [0x1400017bd]
call fcn.1400014f0
lea rax, [0x1409f64c0]
add rsp, 0x48
ret
Function at 0x140003580
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x51
mov byte [rsp + 0x22], 0x57
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x48
mov byte [rsp + 0x25], 0x55
mov byte [rsp + 0x26], 0x59
mov byte [rsp + 0x27], 0x4c
mov byte [rsp + 0x28], 0x46
mov byte [rsp + 0x29], 0x48
mov byte [rsp + 0x2a], 0x53
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x4e
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x50
mov byte [rsp + 0x30], 0x4c
mov byte [rsp + 0x31], 0x46
mov byte [rsp + 0x32], 0x55
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x56
mov byte [rsp + 0x35], 0x52
mov byte [rsp + 0x36], 0x49
mov byte [rsp + 0x37], 0x57
mov byte [rsp + 0x38], 0x11
mov byte [rsp + 0x39], 0x46
mov byte [rsp + 0x3a], 0x52
mov byte [rsp + 0x3b], 0x50
mov byte [rsp + 0x3c], 0xe3
cmp byte [0x1409f6428], 0
jne 0x140003656
mov byte [0x1409f644d], 1
mov eax, 0
lea rcx, [0x1409f6430]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x1d
jne 0x140003631
mov byte [0x1409f6428], 1
lea rcx, [0x140001805]
call fcn.1400014f0
lea rax, [0x1409f6430]
add rsp, 0x48
ret

Function at 0x140003662
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x4c
mov byte [rsp + 0x23], 0x51
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x58
mov byte [rsp + 0x29], 0x53
mov byte [rsp + 0x2a], 0x47
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x48
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x50
mov byte [rsp + 0x30], 0x4c
mov byte [rsp + 0x31], 0x46
mov byte [rsp + 0x32], 0x55
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x56
mov byte [rsp + 0x35], 0x52
mov byte [rsp + 0x36], 0x49
mov byte [rsp + 0x37], 0x57
mov byte [rsp + 0x38], 0x11
mov byte [rsp + 0x39], 0x46
mov byte [rsp + 0x3a], 0x52
mov byte [rsp + 0x3b], 0x50
mov byte [rsp + 0x3c], 0xe3
cmp byte [0x1409f63b8], 0
jne 0x140003738
mov byte [0x1409f63dd], 1
mov eax, 0
lea rcx, [0x1409f63c0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x1d
jne 0x140003713
mov byte [0x1409f63b8], 1
lea rcx, [0x140001835]
call fcn.1400014f0
lea rax, [0x1409f63c0]
add rsp, 0x48
ret
Function at 0x140003744
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x4c
mov byte [rsp + 0x23], 0x51
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x58
mov byte [rsp + 0x29], 0x53
mov byte [rsp + 0x2a], 0x47
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x48
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x50
mov byte [rsp + 0x30], 0x4c
mov byte [rsp + 0x31], 0x46
mov byte [rsp + 0x32], 0x55
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x56
mov byte [rsp + 0x35], 0x52
mov byte [rsp + 0x36], 0x49
mov byte [rsp + 0x37], 0x57
mov byte [rsp + 0x38], 0x11
mov byte [rsp + 0x39], 0x46
mov byte [rsp + 0x3a], 0x52
mov byte [rsp + 0x3b], 0x50
mov byte [rsp + 0x3c], 0xe3
cmp byte [0x1409f6368], 0
jne 0x14000381a
mov byte [0x1409f638d], 1
mov eax, 0
lea rcx, [0x1409f6370]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x1d
jne 0x1400037f5
mov byte [0x1409f6368], 1
lea rcx, [0x140001865]
call fcn.1400014f0
lea rax, [0x1409f6370]
add rsp, 0x48
ret

Function at 0x140003826
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x52
mov byte [rsp + 0x22], 0x46
mov byte [rsp + 0x23], 0x44
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x48
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x50
mov byte [rsp + 0x2a], 0x48
mov byte [rsp + 0x2b], 0x57
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x50
mov byte [rsp + 0x30], 0x4c
mov byte [rsp + 0x31], 0x46
mov byte [rsp + 0x32], 0x55
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x56
mov byte [rsp + 0x35], 0x52
mov byte [rsp + 0x36], 0x49
mov byte [rsp + 0x37], 0x57
mov byte [rsp + 0x38], 0x11
mov byte [rsp + 0x39], 0x46
mov byte [rsp + 0x3a], 0x52
mov byte [rsp + 0x3b], 0x50
mov byte [rsp + 0x3c], 0xe3
cmp byte [0x1409f6108], 0
jne 0x1400038fc
mov byte [0x1409f612d], 1
mov eax, 0
lea rcx, [0x1409f6110]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x1d
jne 0x1400038d7
mov byte [0x1409f6108], 1
lea rcx, [0x14000199d]
call fcn.1400014f0
lea rax, [0x1409f6110]
add rsp, 0x48
ret
Function at 0x140003908
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x56
mov byte [rsp + 0x22], 0x54
mov byte [rsp + 0x23], 0x50
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x48
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x50
mov byte [rsp + 0x2a], 0x48
mov byte [rsp + 0x2b], 0x57
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x50
mov byte [rsp + 0x30], 0x4c
mov byte [rsp + 0x31], 0x46
mov byte [rsp + 0x32], 0x55
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x56
mov byte [rsp + 0x35], 0x52
mov byte [rsp + 0x36], 0x49
mov byte [rsp + 0x37], 0x57
mov byte [rsp + 0x38], 0x11
mov byte [rsp + 0x39], 0x46
mov byte [rsp + 0x3a], 0x52
mov byte [rsp + 0x3b], 0x50
mov byte [rsp + 0x3c], 0xe3
cmp byte [0x1409f60a8], 0
jne 0x1400039de
mov byte [0x1409f60cd], 1
mov eax, 0
lea rcx, [0x1409f60b0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x1d
jne 0x1400039b9
mov byte [0x1409f60a8], 1
lea rcx, [0x1400019cd]
call fcn.1400014f0
lea rax, [0x1409f60b0]
add rsp, 0x48
ret

Function at 0x1400039ea
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x58
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x57
mov byte [rsp + 0x22], 0x48
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x57
mov byte [rsp + 0x25], 3
mov byte [rsp + 0x26], 0x11
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x57
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x11
mov byte [rsp + 0x2d], 0x58
mov byte [rsp + 0x2e], 0x53
mov byte [rsp + 0x2f], 0x47
mov byte [rsp + 0x30], 0x44
mov byte [rsp + 0x31], 0x57
mov byte [rsp + 0x32], 0x48
mov byte [rsp + 0x33], 0x11
mov byte [rsp + 0x34], 0x50
mov byte [rsp + 0x35], 0x4c
mov byte [rsp + 0x36], 0x46
mov byte [rsp + 0x37], 0x55
mov byte [rsp + 0x38], 0x52
mov byte [rsp + 0x39], 0x56
mov byte [rsp + 0x3a], 0x52
mov byte [rsp + 0x3b], 0x49
mov byte [rsp + 0x3c], 0x57
mov byte [rsp + 0x3d], 0x11
mov byte [rsp + 0x3e], 0x46
mov byte [rsp + 0x3f], 0x52
mov byte [rsp + 0x40], 0x50
mov byte [rsp + 0x41], 0xe3
cmp byte [0x1409f63e0], 0
jne 0x140003ad9
mov byte [0x1409f6422], 1
mov eax, 0
lea rcx, [0x1409f6400]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x22
jne 0x140003ab4
mov byte [0x1409f63e0], 1
lea rcx, [0x14000181d]
call fcn.1400014f0
lea rax, [0x1409f6400]
add rsp, 0x58
ret
Function at 0x140003ae6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x58
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x57
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], 0x57
mov byte [rsp + 0x27], 0x11
mov byte [rsp + 0x28], 0x5a
mov byte [rsp + 0x29], 0x4c
mov byte [rsp + 0x2a], 0x51
mov byte [rsp + 0x2b], 0x47
mov byte [rsp + 0x2c], 0x52
mov byte [rsp + 0x2d], 0x5a
mov byte [rsp + 0x2e], 0x56
mov byte [rsp + 0x2f], 0x11
mov byte [rsp + 0x30], 0x46
mov byte [rsp + 0x31], 0x52
mov byte [rsp + 0x32], 0x50
mov byte [rsp + 0x33], 0xe3
cmp byte [0x1409f6390], 0
jne 0x140003b8f
mov byte [0x1409f63b4], 1
mov eax, 0
lea rcx, [0x1409f63a0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x14
jne 0x140003b6a
mov byte [0x1409f6390], 1
lea rcx, [0x14000184d]
call fcn.1400014f0
lea rax, [0x1409f63a0]
add rsp, 0x48
ret

Function at 0x140003b9c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x55
mov byte [rsp + 0x27], 0x48
mov byte [rsp + 0x28], 0x51
mov byte [rsp + 0x29], 0x47
mov byte [rsp + 0x2a], 0x50
mov byte [rsp + 0x2b], 0x4c
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x55
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], 0x11
mov byte [rsp + 0x30], 0x46
mov byte [rsp + 0x31], 0x52
mov byte [rsp + 0x32], 0x50
mov byte [rsp + 0x33], 0xe3
cmp byte [0x1409f5908], 0
jne 0x140003c45
mov byte [0x1409f5924], 1
mov eax, 0
lea rcx, [0x1409f5910]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x14
jne 0x140003c20
mov byte [0x1409f5908], 1
lea rcx, [0x140001fcd]
call fcn.1400014f0
lea rax, [0x1409f5910]
add rsp, 0x48
ret

Function at 0x140003c52
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x59
mov byte [rsp + 0x26], 0x4c
mov byte [rsp + 0x27], 0x55
mov byte [rsp + 0x28], 0x58
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x52
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x44
mov byte [rsp + 0x2e], 0x4f
mov byte [rsp + 0x2f], 0x11
mov byte [rsp + 0x30], 0x46
mov byte [rsp + 0x31], 0x52
mov byte [rsp + 0x32], 0x50
mov byte [rsp + 0x33], 0xe3
cmp byte [0x1409f5888], 0
jne 0x140003cfb
mov byte [0x1409f58a4], 1
mov eax, 0
lea rcx, [0x1409f5890]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x14
jne 0x140003cd6
mov byte [0x1409f5888], 1
lea rcx, [0x14000202d]
call fcn.1400014f0
lea rax, [0x1409f5890]
add rsp, 0x48
ret
Function at 0x140003d08
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x58
mov byte [rsp + 0x22], 0x53
mov byte [rsp + 0x23], 0x47
mov byte [rsp + 0x24], 0x44
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x48
mov byte [rsp + 0x27], 0x11
mov byte [rsp + 0x28], 0x50
mov byte [rsp + 0x29], 0x4c
mov byte [rsp + 0x2a], 0x46
mov byte [rsp + 0x2b], 0x55
mov byte [rsp + 0x2c], 0x52
mov byte [rsp + 0x2d], 0x56
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], 0x49
mov byte [rsp + 0x30], 0x57
mov byte [rsp + 0x31], 0x11
mov byte [rsp + 0x32], 0x46
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x50
mov byte [rsp + 0x35], 0xe3
cmp byte [0x1409f6348], 0
jne 0x140003dbb
mov byte [0x1409f6366], 1
mov eax, 0
lea rcx, [0x1409f6350]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140003d96
mov byte [0x1409f6348], 1
lea rcx, [0x14000187d]
call fcn.1400014f0
lea rax, [0x1409f6350]
add rsp, 0x48
ret

Function at 0x140003dc8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x58
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x56
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x57
mov byte [rsp + 0x28], 3
mov byte [rsp + 0x29], 0x11
mov byte [rsp + 0x2a], 0x5a
mov byte [rsp + 0x2b], 0x4c
mov byte [rsp + 0x2c], 0x51
mov byte [rsp + 0x2d], 0x47
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], 0x5a
mov byte [rsp + 0x30], 0x56
mov byte [rsp + 0x31], 0x11
mov byte [rsp + 0x32], 0x46
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x50
mov byte [rsp + 0x35], 0xe3
cmp byte [0x1409f62a0], 0
jne 0x140003e7b
mov byte [0x1409f62c6], 1
mov eax, 0
lea rcx, [0x1409f62b0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140003e56
mov byte [0x1409f62a0], 1
lea rcx, [0x1400018dd]
call fcn.1400014f0
lea rax, [0x1409f62b0]
add rsp, 0x48
ret

Function at 0x140003e88
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x56
mov byte [rsp + 0x23], 0x57
mov byte [rsp + 0x24], 0x44
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x11
mov byte [rsp + 0x28], 0x50
mov byte [rsp + 0x29], 0x4c
mov byte [rsp + 0x2a], 0x46
mov byte [rsp + 0x2b], 0x55
mov byte [rsp + 0x2c], 0x52
mov byte [rsp + 0x2d], 0x56
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], 0x49
mov byte [rsp + 0x30], 0x57
mov byte [rsp + 0x31], 0x11
mov byte [rsp + 0x32], 0x46
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x50
mov byte [rsp + 0x35], 0xe3
cmp byte [0x1409f6250], 0
jne 0x140003f3b
mov byte [0x1409f6276], 1
mov eax, 0
lea rcx, [0x1409f6260]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140003f16
mov byte [0x1409f6250], 1
lea rcx, [0x14000190d]
call fcn.1400014f0
lea rax, [0x1409f6260]
add rsp, 0x48
ret
Function at 0x140003f48
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x57
mov byte [rsp + 0x28], 0x44
mov byte [rsp + 0x29], 0x4f
mov byte [rsp + 0x2a], 0x44
mov byte [rsp + 0x2b], 0x47
mov byte [rsp + 0x2c], 0x45
mov byte [rsp + 0x2d], 0x4f
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x4e
mov byte [rsp + 0x31], 0x11
mov byte [rsp + 0x32], 0x46
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x50
mov byte [rsp + 0x35], 0xe3
cmp byte [0x1409f5fb0], 0
jne 0x140003ffb
mov byte [0x1409f5fd6], 1
mov eax, 0
lea rcx, [0x1409f5fc0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140003fd6
mov byte [0x1409f5fb0], 1
lea rcx, [0x140001a8d]
call fcn.1400014f0
lea rax, [0x1409f5fc0]
add rsp, 0x48
ret

Function at 0x140004008
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x4c
mov byte [rsp + 0x23], 0x51
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x58
mov byte [rsp + 0x29], 0x53
mov byte [rsp + 0x2a], 0x47
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x48
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f6320], 0
jne 0x1400040ac
mov byte [0x1409f6343], 1
mov eax, 0
lea rcx, [0x1409f6330]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140004087
mov byte [0x1409f6320], 1
lea rcx, [0x140001895]
call fcn.1400014f0
lea rax, [0x1409f6330]
add rsp, 0x48
ret

Function at 0x1400040b8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x46
mov byte [rsp + 0x27], 0x44
mov byte [rsp + 0x28], 0x51
mov byte [rsp + 0x29], 0x4a
mov byte [rsp + 0x2a], 0x58
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x47
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f5ff8], 0
jne 0x14000415c
mov byte [0x1409f6013], 1
mov eax, 0
lea rcx, [0x1409f6000]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140004137
mov byte [0x1409f5ff8], 1
lea rcx, [0x140001a5d]
call fcn.1400014f0
lea rax, [0x1409f6000]
add rsp, 0x48
ret
Function at 0x140004168
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x53
mov byte [rsp + 0x26], 0x46
mov byte [rsp + 0x27], 0x53
mov byte [rsp + 0x28], 0x55
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x48
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x57
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f5f70], 0
jne 0x14000420c
mov byte [0x1409f5f93], 1
mov eax, 0
lea rcx, [0x1409f5f80]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400041e7
mov byte [0x1409f5f70], 1
lea rcx, [0x140001abd]
call fcn.1400014f0
lea rax, [0x1409f5f80]
add rsp, 0x48
ret

Function at 0x140004218
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x58
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x11
mov byte [rsp + 0x28], 0x51
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x57
mov byte [rsp + 0x2c], 0x52
mov byte [rsp + 0x2d], 0x51
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f5eb8], 0
jne 0x1400042bc
mov byte [0x1409f5ed3], 1
mov eax, 0
lea rcx, [0x1409f5ec0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140004297
mov byte [0x1409f5eb8], 1
lea rcx, [0x140001b4d]
call fcn.1400014f0
lea rax, [0x1409f5ec0]
add rsp, 0x48
ret

Function at 0x1400042c8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x53
mov byte [rsp + 0x22], 0x44
mov byte [rsp + 0x23], 0x51
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x48
mov byte [rsp + 0x28], 0x46
mov byte [rsp + 0x29], 0x58
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x4c
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f5e28], 0
jne 0x14000436c
mov byte [0x1409f5e43], 1
mov eax, 0
lea rcx, [0x1409f5e30]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140004347
mov byte [0x1409f5e28], 1
lea rcx, [0x140001bc5]
call fcn.1400014f0
lea rax, [0x1409f5e30]
add rsp, 0x48
ret
Function at 0x140004378
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x58
mov byte [rsp + 0x27], 0x55
mov byte [rsp + 0x28], 0x49
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x4b
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x4e
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f5dc8], 0
jne 0x14000441c
mov byte [0x1409f5de3], 1
mov eax, 0
lea rcx, [0x1409f5dd0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400043f7
mov byte [0x1409f5dc8], 1
lea rcx, [0x140001c0d]
call fcn.1400014f0
lea rax, [0x1409f5dd0]
add rsp, 0x48
ret

Function at 0x140004428
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x50
mov byte [rsp + 0x26], 0x4c
mov byte [rsp + 0x27], 0x46
mov byte [rsp + 0x28], 0x55
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x56
mov byte [rsp + 0x2b], 0x52
mov byte [rsp + 0x2c], 0x49
mov byte [rsp + 0x2d], 0x57
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f5ce0], 0
jne 0x1400044cc
mov byte [0x1409f5d03], 1
mov eax, 0
lea rcx, [0x1409f5cf0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400044a7
mov byte [0x1409f5ce0], 1
lea rcx, [0x140001ccd]
call fcn.1400014f0
lea rax, [0x1409f5cf0]
add rsp, 0x48
ret

Function at 0x1400044d8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x4e
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x48
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x4e
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f5c68], 0
jne 0x14000457c
mov byte [0x1409f5c83], 1
mov eax, 0
lea rcx, [0x1409f5c70]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140004557
mov byte [0x1409f5c68], 1
lea rcx, [0x140001d2d]
call fcn.1400014f0
lea rax, [0x1409f5c70]
add rsp, 0x48
ret