joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400031d2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x66
mov byte [rsp + 0x26], 0x64
mov byte [rsp + 0x27], 0x1f
mov byte [rsp + 0x28], 0x5f
mov byte [rsp + 0x29], 0x60
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x65
mov byte [rsp + 0x2c], 0x60
mov byte [rsp + 0x2d], 0x5f
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x1409d1b38], 0
jne 0x140003276
mov byte [0x1409d1b53], 1
mov eax, 0
lea rcx, [0x1409d1b40]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003251
mov byte [0x1409d1b38], 1
lea rcx, [0x1400018a8]
call fcn.1400014f0
lea rax, [0x1409d1b40]
add rsp, 0x48
ret

Function at 0x140003282
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x61
mov byte [rsp + 0x22], 0x52
mov byte [rsp + 0x23], 0x5f
mov byte [rsp + 0x24], 0x55
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x64
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x54
mov byte [rsp + 0x29], 0x66
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x5a
mov byte [rsp + 0x2c], 0x65
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x1409d1aa8], 0
jne 0x140003326
mov byte [0x1409d1ac3], 1
mov eax, 0
lea rcx, [0x1409d1ab0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003301
mov byte [0x1409d1aa8], 1
lea rcx, [0x140001920]
call fcn.1400014f0
lea rax, [0x1409d1ab0]
add rsp, 0x48
ret

Function at 0x140003332
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x64
mov byte [rsp + 0x26], 0x66
mov byte [rsp + 0x27], 0x63
mov byte [rsp + 0x28], 0x57
mov byte [rsp + 0x29], 0x64
mov byte [rsp + 0x2a], 0x59
mov byte [rsp + 0x2b], 0x52
mov byte [rsp + 0x2c], 0x63
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x1409d1a48], 0
jne 0x1400033d6
mov byte [0x1409d1a63], 1
mov eax, 0
lea rcx, [0x1409d1a50]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400033b1
mov byte [0x1409d1a48], 1
lea rcx, [0x140001968]
call fcn.1400014f0
lea rax, [0x1409d1a50]
add rsp, 0x48
ret
Function at 0x1400033e2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5e
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x54
mov byte [rsp + 0x28], 0x63
mov byte [rsp + 0x29], 0x60
mov byte [rsp + 0x2a], 0x64
mov byte [rsp + 0x2b], 0x60
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x65
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x1409d1960], 0
jne 0x140003486
mov byte [0x1409d1983], 1
mov eax, 0
lea rcx, [0x1409d1970]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003461
mov byte [0x1409d1960], 1
lea rcx, [0x140001a28]
call fcn.1400014f0
lea rax, [0x1409d1970]
add rsp, 0x48
ret

Function at 0x140003492
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5c
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x61
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x64
mov byte [rsp + 0x2c], 0x5c
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x1409d18e8], 0
jne 0x140003536
mov byte [0x1409d1903], 1
mov eax, 0
lea rcx, [0x1409d18f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003511
mov byte [0x1409d18e8], 1
lea rcx, [0x140001a88]
call fcn.1400014f0
lea rax, [0x1409d18f0]
add rsp, 0x48
ret

Function at 0x140003542
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x66
mov byte [rsp + 0x22], 0x64
mov byte [rsp + 0x23], 0x52
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5c
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x61
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x64
mov byte [rsp + 0x2c], 0x5c
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x1409d18c8], 0
jne 0x1400035e6
mov byte [0x1409d18e3], 1
mov eax, 0
lea rcx, [0x1409d18d0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400035c1
mov byte [0x1409d18c8], 1
lea rcx, [0x140001aa0]
call fcn.1400014f0
lea rax, [0x1409d18d0]
add rsp, 0x48
ret
Function at 0x1400035f2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x53
mov byte [rsp + 0x26], 0x66
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x5d
mov byte [rsp + 0x29], 0x58
mov byte [rsp + 0x2a], 0x66
mov byte [rsp + 0x2b], 0x52
mov byte [rsp + 0x2c], 0x63
mov byte [rsp + 0x2d], 0x55
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x1409d1710], 0
jne 0x140003696
mov byte [0x1409d1733], 1
mov eax, 0
lea rcx, [0x1409d1720]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003671
mov byte [0x1409d1710], 1
lea rcx, [0x140001bf0]
call fcn.1400014f0
lea rax, [0x1409d1720]
add rsp, 0x48
ret

Function at 0x1400036a2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x61
mov byte [rsp + 0x22], 0x52
mov byte [rsp + 0x23], 0x5f
mov byte [rsp + 0x24], 0x55
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x64
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x54
mov byte [rsp + 0x29], 0x66
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x5a
mov byte [rsp + 0x2c], 0x65
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x1409d15c8], 0
jne 0x140003746
mov byte [0x1409d15e3], 1
mov eax, 0
lea rcx, [0x1409d15d0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003721
mov byte [0x1409d15c8], 1
lea rcx, [0x140001cf8]
call fcn.1400014f0
lea rax, [0x1409d15d0]
add rsp, 0x48
ret

Function at 0x140003752
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x6b
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x5f
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x5d
mov byte [rsp + 0x2b], 0x52
mov byte [rsp + 0x2c], 0x63
mov byte [rsp + 0x2d], 0x5e
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x1409d15a0], 0
jne 0x1400037f6
mov byte [0x1409d15c3], 1
mov eax, 0
lea rcx, [0x1409d15b0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400037d1
mov byte [0x1409d15a0], 1
lea rcx, [0x140001d10]
call fcn.1400014f0
lea rax, [0x1409d15b0]
add rsp, 0x48
ret
Function at 0x140003802
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x65
mov byte [rsp + 0x22], 0x60
mov byte [rsp + 0x23], 0x65
mov byte [rsp + 0x24], 0x52
mov byte [rsp + 0x25], 0x5d
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x55
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x5d
mov byte [rsp + 0x2a], 0x60
mov byte [rsp + 0x2b], 0x54
mov byte [rsp + 0x2c], 0x5c
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x1409d1c58], 0
jne 0x1400038a1
mov byte [0x1409d1c72], 1
mov eax, 0
lea rcx, [0x1409d1c60]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x14000387c
mov byte [0x1409d1c58], 1
lea rcx, [0x1400017d0]
call fcn.1400014f0
lea rax, [0x1409d1c60]
add rsp, 0x48
ret

Function at 0x1400038ae
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x5e
mov byte [rsp + 0x22], 0x52
mov byte [rsp + 0x23], 0x5d
mov byte [rsp + 0x24], 0x68
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x63
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x6a
mov byte [rsp + 0x2a], 0x65
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x64
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x1409d1ae8], 0
jne 0x14000394d
mov byte [0x1409d1b02], 1
mov eax, 0
lea rcx, [0x1409d1af0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003928
mov byte [0x1409d1ae8], 1
lea rcx, [0x1400018f0]
call fcn.1400014f0
lea rax, [0x1409d1af0]
add rsp, 0x48
ret

Function at 0x14000395a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x5e
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x5a
mov byte [rsp + 0x29], 0x64
mov byte [rsp + 0x2a], 0x60
mov byte [rsp + 0x2b], 0x57
mov byte [rsp + 0x2c], 0x65
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x1409d1648], 0
jne 0x1400039f9
mov byte [0x1409d1662], 1
mov eax, 0
lea rcx, [0x1409d1650]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x1400039d4
mov byte [0x1409d1648], 1
lea rcx, [0x140001c98]
call fcn.1400014f0
lea rax, [0x1409d1650]
add rsp, 0x48
ret
Function at 0x140003a06
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x1e
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x54
mov byte [rsp + 0x2a], 0x66
mov byte [rsp + 0x2b], 0x63
mov byte [rsp + 0x2c], 0x56
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x1409d1620], 0
jne 0x140003aa5
mov byte [0x1409d1642], 1
mov eax, 0
lea rcx, [0x1409d1630]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003a80
mov byte [0x1409d1620], 1
lea rcx, [0x140001cb0]
call fcn.1400014f0
lea rax, [0x1409d1630]
add rsp, 0x48
ret

Function at 0x140003ab2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x54
mov byte [rsp + 0x26], 0x54
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x5f
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x63
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x1409d1520], 0
jne 0x140003b51
mov byte [0x1409d1542], 1
mov eax, 0
lea rcx, [0x1409d1530]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003b2c
mov byte [0x1409d1520], 1
lea rcx, [0x140001d70]
call fcn.1400014f0
lea rax, [0x1409d1530]
add rsp, 0x48
ret

Function at 0x140003b5e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x65
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x65
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x5d
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x55
mov byte [rsp + 0x2c], 0x53
mov byte [rsp + 0x2d], 0x5d
mov byte [rsp + 0x2e], 0x60
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x5c
mov byte [rsp + 0x31], 0x1f
mov byte [rsp + 0x32], 0x54
mov byte [rsp + 0x33], 0x60
mov byte [rsp + 0x34], 0x5e
mov byte [rsp + 0x35], 0xf1
cmp byte [0x1409d1c30], 0
jne 0x140003c11
mov byte [0x1409d1c56], 1
mov eax, 0
lea rcx, [0x1409d1c40]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140003bec
mov byte [0x1409d1c30], 1
lea rcx, [0x1400017e8]
call fcn.1400014f0
lea rax, [0x1409d1c40]
add rsp, 0x48
ret
Function at 0x140003c1e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5e
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x68
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x53
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x65
mov byte [rsp + 0x2f], 0x56
mov byte [rsp + 0x30], 0x64
mov byte [rsp + 0x31], 0x1f
mov byte [rsp + 0x32], 0x54
mov byte [rsp + 0x33], 0x60
mov byte [rsp + 0x34], 0x5e
mov byte [rsp + 0x35], 0xf1
cmp byte [0x1409d1ac8], 0
jne 0x140003cd1
mov byte [0x1409d1ae6], 1
mov eax, 0
lea rcx, [0x1409d1ad0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140003cac
mov byte [0x1409d1ac8], 1
lea rcx, [0x140001908]
call fcn.1400014f0
lea rax, [0x1409d1ad0]
add rsp, 0x48
ret

Function at 0x140003cde
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5e
mov byte [rsp + 0x26], 0x54
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x57
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x56
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x1409d1bb8], 0
jne 0x140003d73
mov byte [0x1409d1bd0], 1
mov eax, 0
lea rcx, [0x1409d1bc0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003d4e
mov byte [0x1409d1bb8], 1
lea rcx, [0x140001848]
call fcn.1400014f0
lea rax, [0x1409d1bc0]
add rsp, 0x38
ret

Function at 0x140003d80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5f
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x63
mov byte [rsp + 0x28], 0x65
mov byte [rsp + 0x29], 0x60
mov byte [rsp + 0x2a], 0x5f
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x1409d19d0], 0
jne 0x140003e15
mov byte [0x1409d19f0], 1
mov eax, 0
lea rcx, [0x1409d19e0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003df0
mov byte [0x1409d19d0], 1
lea rcx, [0x1400019c8]
call fcn.1400014f0
lea rax, [0x1409d19e0]
add rsp, 0x38
ret
Function at 0x140003e22
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x4b
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x5d
mov byte [rsp + 0x29], 0x6a
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x1409d1920], 0
jne 0x140003eb7
mov byte [0x1409d1940], 1
mov eax, 0
lea rcx, [0x1409d1930]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003e92
mov byte [0x1409d1920], 1
lea rcx, [0x140001a58]
call fcn.1400014f0
lea rax, [0x1409d1930]
add rsp, 0x38
ret

Function at 0x140003ec4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x64
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x61
mov byte [rsp + 0x28], 0x59
mov byte [rsp + 0x29], 0x60
mov byte [rsp + 0x2a], 0x64
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x1409d1828], 0
jne 0x140003f59
mov byte [0x1409d1840], 1
mov eax, 0
lea rcx, [0x1409d1830]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003f34
mov byte [0x1409d1828], 1
lea rcx, [0x140001b18]
call fcn.1400014f0
lea rax, [0x1409d1830]
add rsp, 0x38
ret

Function at 0x140003f66
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x59
mov byte [rsp + 0x27], 0x5f
mov byte [rsp + 0x28], 0x5d
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x53
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x1409d1788], 0
jne 0x140003ffb
mov byte [0x1409d17a0], 1
mov eax, 0
lea rcx, [0x1409d1790]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003fd6
mov byte [0x1409d1788], 1
lea rcx, [0x140001b90]
call fcn.1400014f0
lea rax, [0x1409d1790]
add rsp, 0x38
ret
Function at 0x140004008
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x54
mov byte [rsp + 0x26], 0x5d
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x5e
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x67
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x5f
mov byte [rsp + 0x2d], 0x56
mov byte [rsp + 0x2e], 0x65
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x1409d16b0], 0
jne 0x14000409d
mov byte [0x1409d16d0], 1
mov eax, 0
lea rcx, [0x1409d16c0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140004078
mov byte [0x1409d16b0], 1
lea rcx, [0x140001c38]
call fcn.1400014f0
lea rax, [0x1409d16c0]
add rsp, 0x38
ret

Function at 0x1400040aa
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x65
mov byte [rsp + 0x22], 0x63
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x5f
mov byte [rsp + 0x25], 0x55
mov byte [rsp + 0x26], 0x5e
mov byte [rsp + 0x27], 0x5a
mov byte [rsp + 0x28], 0x54
mov byte [rsp + 0x29], 0x63
mov byte [rsp + 0x2a], 0x60
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x1409d1548], 0
jne 0x14000413f
mov byte [0x1409d1560], 1
mov eax, 0
lea rcx, [0x1409d1550]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x14000411a
mov byte [0x1409d1548], 1
lea rcx, [0x140001d58]
call fcn.1400014f0
lea rax, [0x1409d1550]
add rsp, 0x38
ret

Function at 0x14000414c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x67
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x63
mov byte [rsp + 0x24], 0x66
mov byte [rsp + 0x25], 0x64
mov byte [rsp + 0x26], 0x65
mov byte [rsp + 0x27], 0x60
mov byte [rsp + 0x28], 0x65
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x5d
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x1409d14c8], 0
jne 0x1400041e1
mov byte [0x1409d14e0], 1
mov eax, 0
lea rcx, [0x1409d14d0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x1400041bc
mov byte [0x1409d14c8], 1
lea rcx, [0x140001db8]
call fcn.1400014f0
lea rax, [0x1409d14d0]
add rsp, 0x38
ret