joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140061488
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbp, rcx
xor ebx, ebx
mov ecx, 0x361
mov dword [rsp + 0x20], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x140061533
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov edx, edi
mov rcx, rbp
mov dword [rsp + 0x28], 0x7369644e
mov dword [rsp + 0x2c], 0x65526649
mov dword [rsp + 0x30], 0x74736967
mov dword [rsp + 0x34], 0x72507265
mov dword [rsp + 0x38], 0x6469766f
mov dword [rsp + 0x3c], 0x7265
call fcn.140005ac8
cmp al, 1
jne 0x140061533
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x140061533
cmp eax, edi
jae 0x140061533
mov edx, eax
mov ecx, 0x376
call fcn.140029bac
mov edx, dword [rsp + 0x20]
mov ecx, 0x377
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret

Function at 0x140061554
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbp, rcx
xor ebx, ebx
mov ecx, 0x361
mov dword [rsp + 0x20], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x1400615ff
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov edx, edi
mov rcx, rbp
mov dword [rsp + 0x28], 0x7369644e
mov dword [rsp + 0x2c], 0x7465474d
mov dword [rsp + 0x30], 0x6c66664f
mov dword [rsp + 0x34], 0x4864616f
mov dword [rsp + 0x38], 0x6c646e61
mov dword [rsp + 0x3c], 0x737265
call fcn.140005ac8
cmp al, 1
jne 0x1400615ff
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x1400615ff
cmp eax, edi
jae 0x1400615ff
mov edx, eax
mov ecx, 0x382
call fcn.140029bac
mov edx, dword [rsp + 0x20]
mov ecx, 0x383
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret

Function at 0x140061620
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbp, rcx
xor ebx, ebx
mov ecx, 0x361
mov dword [rsp + 0x20], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x1400616cb
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov edx, edi
mov rcx, rbp
mov dword [rsp + 0x28], 0x7369644e
mov dword [rsp + 0x2c], 0x6765524d
mov dword [rsp + 0x30], 0x65747369
mov dword [rsp + 0x34], 0x6e694d72
mov dword [rsp + 0x38], 0x726f7069
mov dword [rsp + 0x3c], 0x74
call fcn.140005ac8
cmp al, 1
jne 0x1400616cb
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x1400616cb
cmp eax, edi
jae 0x1400616cb
mov edx, eax
mov ecx, 0x36d
call fcn.140029bac
mov edx, dword [rsp + 0x20]
mov ecx, 0x36e
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400616ec
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rbp - 8], rax
mov rsi, rcx
xor ebx, ebx
mov ecx, 0x361
mov dword [rbp - 0x30], ebx
mov edi, edx
call fcn.140029ab4
mov r14, rax
test rax, rax
je 0x1400617d6
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x28]
mov edx, edi
mov rcx, rsi
mov dword [rbp - 0x28], 0x7369644e
mov dword [rbp - 0x24], 0x6765524d
mov dword [rbp - 0x20], 0x65747369
mov dword [rbp - 0x1c], 0x6e694d72
mov dword [rbp - 0x18], 0x726f7069
mov dword [rbp - 0x14], 0x69724474
mov dword [rbp - 0x10], 0x726576
call fcn.140005ac8
cmp al, 1
jne 0x1400617a1
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x1400617d6
cmp eax, edi
jae 0x1400617d6
mov edx, eax
mov ecx, 0x36f
call fcn.140029bac
mov edx, dword [rbp - 0x30]
mov ecx, 0x370
add rdx, r14
call fcn.140029bac
mov bl, 1
jmp 0x1400617d6
mov r14d, 0x36d
mov ecx, r14d
call fcn.140029ab4
test eax, eax
jne 0x1400617c9
mov edx, edi
mov rcx, rsi
call fcn.140061620
mov ecx, r14d
call fcn.140029ab4
test eax, eax
je 0x1400617d6
mov r8d, eax
mov edx, edi
mov rcx, rsi
call fcn.1400617fc
mov al, bl
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14008c320
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret

Function at 0x1400618e4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbp, rcx
xor ebx, ebx
mov ecx, 0x361
mov dword [rsp + 0x20], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x14006198f
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov edx, edi
mov rcx, rbp
mov dword [rsp + 0x28], 0x7369644e
mov dword [rsp + 0x2c], 0x69676552
mov dword [rsp + 0x30], 0x72657473
mov dword [rsp + 0x34], 0x43696454
mov dword [rsp + 0x38], 0x426c6c61
mov dword [rsp + 0x3c], 0x6b6361
call fcn.140005ac8
cmp al, 1
jne 0x14006198f
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x14006198f
cmp eax, edi
jae 0x14006198f
mov edx, eax
mov ecx, 0x372
call fcn.140029bac
mov edx, dword [rsp + 0x20]
mov ecx, 0x373
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret
Function at 0x140061c38
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rsi, rcx
xor ebx, ebx
mov ecx, 0x361
mov dword [rsp + 0x20], ebx
mov edi, edx
call fcn.140029ab4
test rax, rax
je 0x140061cf7
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov edx, edi
mov rcx, rsi
mov dword [rsp + 0x28], 0x7369644e
mov dword [rsp + 0x2c], 0x56746547
mov dword [rsp + 0x30], 0x69737265
mov dword [rsp + 0x34], 0x6e6f
call fcn.140005ac8
cmp al, 1
jne 0x140061cf7
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x140061cf7
cmp eax, edi
jae 0x140061cf7
add eax, 5
cmp eax, edi
jae 0x140061cf7
mov ecx, 0x914
call fcn.140029ab4
cmp eax, 0x3fab
jae 0x140061ce6
mov eax, dword [rsp + 0x20]
mov ecx, 0x363
mov edx, dword [rax + rsi + 1]
call fcn.140029bac
mov bl, 1
jmp 0x140061cf7
mov ecx, dword [rsp + 0x20]
mov r8d, edi
mov rdx, rsi
call fcn.140061d18
mov bl, al
mov al, bl
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret

Function at 0x140067424
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x40
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rcx
xor ebx, ebx
mov ecx, 0x802
mov dword [rbp - 0x20], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x1400674f4
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x18]
mov edx, edi
mov rcx, r14
mov dword [rbp - 0x18], 0x496c6c44
mov dword [rbp - 0x14], 0x6974696e
mov dword [rbp - 0x10], 0x7a696c61
mov dword [rbp - 0xc], 0x65
call fcn.140005ac8
cmp al, 1
je 0x1400674cb
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x18]
mov edx, edi
mov rcx, r14
mov dword [rbp - 0x18], 0x49696454
mov dword [rbp - 0x14], 0x6974696e
mov dword [rbp - 0x10], 0x7a696c61
mov dword [rbp - 0xc], 0x65
call fcn.140005ac8
cmp al, 1
jne 0x1400674f4
mov eax, dword [rbp - 0x20]
test eax, eax
je 0x1400674f4
cmp eax, edi
jae 0x1400674f4
mov edx, eax
mov ecx, 0x804
call fcn.140029bac
mov edx, dword [rbp - 0x20]
mov ecx, 0x805
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x40
pop r14
pop rdi
pop rbp
ret
Function at 0x140067884
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rcx
xor ebx, ebx
mov ecx, 0x802
mov dword [rbp - 0x30], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x14006792d
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x28]
mov edx, edi
mov rcx, r14
mov dword [rbp - 0x28], 0x44696454
mov dword [rbp - 0x24], 0x67657265
mov dword [rbp - 0x20], 0x65747369
mov dword [rbp - 0x1c], 0x506e5072
mov dword [rbp - 0x18], 0x646e6148
mov qword [rbp - 0x14], 0x7372656c
call fcn.140005ac8
cmp al, 1
jne 0x14006792d
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x14006792d
cmp eax, edi
jae 0x14006792d
mov edx, eax
mov ecx, 0x80c
call fcn.140029bac
mov edx, dword [rbp - 0x30]
mov ecx, 0x80d
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14008c320
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret

Function at 0x140067df4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbp, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rsp + 0x20], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x140067e9f
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov edx, edi
mov rcx, rbp
mov dword [rsp + 0x28], 0x4464664b
mov dword [rsp + 0x2c], 0x74656c65
mov dword [rsp + 0x30], 0x6c614365
mov dword [rsp + 0x34], 0x74756f6c
mov dword [rsp + 0x38], 0x72746e45
mov dword [rsp + 0x3c], 0x79
call fcn.140005ac8
cmp al, 1
jne 0x140067e9f
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x140067e9f
cmp eax, edi
jae 0x140067e9f
mov edx, eax
mov ecx, 0x7de
call fcn.140029bac
mov edx, dword [rsp + 0x20]
mov ecx, 0x7df
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret
Function at 0x140067ec0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov r14, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rbp - 0x40], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x140067fc9
lea r9, [rbp - 0x40]
lea r8, [rbp - 0x38]
mov edx, edi
mov rcx, r14
mov dword [rbp - 0x38], 0x4464664b
mov dword [rbp - 0x34], 0x67657265
mov dword [rbp - 0x30], 0x65747369
mov dword [rbp - 0x2c], 0x79614c72
mov dword [rbp - 0x28], 0x68437265
mov dword [rbp - 0x24], 0x65676e61
mov dword [rbp - 0x20], 0x6c6c6143
mov qword [rbp - 0x1c], 0x6b636162
call fcn.140005ac8
cmp al, 1
je 0x140067fa0
lea r9, [rbp - 0x40]
lea r8, [rbp - 0x38]
mov edx, edi
mov rcx, r14
mov dword [rbp - 0x38], 0x4464664b
mov dword [rbp - 0x34], 0x67657265
mov dword [rbp - 0x30], 0x65747369
mov dword [rbp - 0x2c], 0x79614c72
mov dword [rbp - 0x28], 0x76457265
mov dword [rbp - 0x24], 0x4e746e65
mov dword [rbp - 0x20], 0x6669746f
mov dword [rbp - 0x1c], 0x79
call fcn.140005ac8
cmp al, 1
jne 0x140067fc9
mov eax, dword [rbp - 0x40]
test eax, eax
je 0x140067fc9
cmp eax, edi
jae 0x140067fc9
mov edx, eax
mov ecx, 0x7be
call fcn.140029bac
mov edx, dword [rbp - 0x40]
mov ecx, 0x7bf
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14008c320
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret

Function at 0x140067fec
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbp, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rsp + 0x20], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x14006808f
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov edx, edi
mov rcx, rbp
mov dword [rsp + 0x28], 0x4764664b
mov dword [rsp + 0x2c], 0x664f7465
mov dword [rsp + 0x30], 0x616f6c66
mov dword [rsp + 0x34], 0x6f704564
mov dword [rsp + 0x38], 0x6863
call fcn.140005ac8
cmp al, 1
jne 0x14006808f
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x14006808f
cmp eax, edi
jae 0x14006808f
mov edx, eax
mov ecx, 0x7b8
call fcn.140029bac
mov edx, dword [rsp + 0x20]
mov ecx, 0x7b9
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400680b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbp, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rsp + 0x20], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x14006814c
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov edx, edi
mov rcx, rbp
mov dword [rsp + 0x28], 0x4764664b
mov dword [rsp + 0x2c], 0x65527465
mov dword [rsp + 0x30], 0x6c614366
mov qword [rsp + 0x34], 0x74756f6c
call fcn.140005ac8
cmp al, 1
jne 0x14006814c
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x14006814c
cmp eax, edi
jae 0x14006814c
mov edx, eax
mov ecx, 0x7da
call fcn.140029bac
mov edx, dword [rsp + 0x20]
mov ecx, 0x7db
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret

Function at 0x14006816c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rbp - 0x30], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x14006826d
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x28]
mov edx, edi
mov rcx, r14
mov dword [rbp - 0x28], 0x5264664b
mov dword [rbp - 0x24], 0x73696765
mov dword [rbp - 0x20], 0x4c726574
mov dword [rbp - 0x1c], 0x72657961
mov dword [rbp - 0x18], 0x6e616843
mov dword [rbp - 0x14], 0x61436567
mov dword [rbp - 0x10], 0x61626c6c
mov dword [rbp - 0xc], 0x6b63
call fcn.140005ac8
cmp al, 1
je 0x140068244
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x28]
mov edx, edi
mov rcx, r14
mov dword [rbp - 0x28], 0x5264664b
mov dword [rbp - 0x24], 0x73696765
mov dword [rbp - 0x20], 0x4c726574
mov dword [rbp - 0x1c], 0x72657961
mov dword [rbp - 0x18], 0x6e657645
mov dword [rbp - 0x14], 0x746f4e74
mov dword [rbp - 0x10], 0x796669
call fcn.140005ac8
cmp al, 1
jne 0x14006826d
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x14006826d
cmp eax, edi
jae 0x14006826d
mov edx, eax
mov ecx, 0x7bc
call fcn.140029bac
mov edx, dword [rbp - 0x30]
mov ecx, 0x7bd
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14008c320
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
Function at 0x140068290
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rbp - 0x30], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x14006833f
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x28]
mov edx, edi
mov rcx, r14
mov dword [rbp - 0x28], 0x5564664b
mov dword [rbp - 0x24], 0x6765726e
mov dword [rbp - 0x20], 0x65747369
mov dword [rbp - 0x1c], 0x6c614372
mov dword [rbp - 0x18], 0x74756f6c
mov dword [rbp - 0x14], 0x72746e45
mov dword [rbp - 0x10], 0x79
call fcn.140005ac8
cmp al, 1
jne 0x14006833f
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x14006833f
cmp eax, edi
jae 0x14006833f
mov edx, eax
mov ecx, 0x7e0
call fcn.140029bac
mov edx, dword [rbp - 0x30]
mov ecx, 0x7e1
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14008c320
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret

Function at 0x14006858c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbp, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rsp + 0x20], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x14006862f
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov edx, edi
mov rcx, rbp
mov dword [rsp + 0x28], 0x52726d4e
mov dword [rsp + 0x2c], 0x73696765
mov dword [rsp + 0x30], 0x50726574
mov dword [rsp + 0x34], 0x69766f72
mov dword [rsp + 0x38], 0x726564
call fcn.140005ac8
cmp al, 1
jne 0x14006862f
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x14006862f
cmp eax, edi
jae 0x14006862f
mov edx, eax
mov ecx, 0x7d7
call fcn.140029bac
mov edx, dword [rsp + 0x20]
mov ecx, 0x7d8
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400689e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov r14, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rbp - 0x40], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x140068a9d
lea r9, [rbp - 0x40]
lea r8, [rbp - 0x38]
mov edx, edi
mov rcx, r14
mov dword [rbp - 0x38], 0x4469734e
mov dword [rbp - 0x34], 0x67657265
mov dword [rbp - 0x30], 0x65747369
mov dword [rbp - 0x2c], 0x61684372
mov dword [rbp - 0x28], 0x4e65676e
mov dword [rbp - 0x24], 0x6669746f
mov dword [rbp - 0x20], 0x74616369
mov dword [rbp - 0x1c], 0x456e6f69
mov dword [rbp - 0x18], 0x78
call fcn.140005ac8
cmp al, 1
jne 0x140068a9d
mov eax, dword [rbp - 0x40]
test eax, eax
je 0x140068a9d
cmp eax, edi
jae 0x140068a9d
mov edx, eax
mov ecx, 0x7c8
call fcn.140029bac
mov edx, dword [rbp - 0x40]
mov ecx, 0x7c9
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14008c320
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret

Function at 0x140068ac0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rbp - 0x30], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x140068b6f
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x28]
mov edx, edi
mov rcx, r14
mov dword [rbp - 0x28], 0x4469734e
mov dword [rbp - 0x24], 0x67657265
mov dword [rbp - 0x20], 0x65747369
mov dword [rbp - 0x1c], 0x67654c72
mov dword [rbp - 0x18], 0x48796361
mov dword [rbp - 0x14], 0x6c646e61
mov dword [rbp - 0x10], 0x7265
call fcn.140005ac8
cmp al, 1
jne 0x140068b6f
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x140068b6f
cmp eax, edi
jae 0x140068b6f
mov edx, eax
mov ecx, 0x7ce
call fcn.140029bac
mov edx, dword [rbp - 0x30]
mov ecx, 0x7cf
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14008c320
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
Function at 0x140068b94
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbp, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rsp + 0x20], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x140068c37
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov edx, edi
mov rcx, rbp
mov dword [rsp + 0x28], 0x4769734e
mov dword [rsp + 0x2c], 0x6f4d7465
mov dword [rsp + 0x30], 0x656c7564
mov dword [rsp + 0x34], 0x646e6148
mov dword [rsp + 0x38], 0x656c
call fcn.140005ac8
cmp al, 1
jne 0x140068c37
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x140068c37
cmp eax, edi
jae 0x140068c37
mov edx, eax
mov ecx, 0x7ca
call fcn.140029bac
mov edx, dword [rsp + 0x20]
mov ecx, 0x7cb
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret

Function at 0x140069254
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbp, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rsp + 0x20], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x1400692f7
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov edx, edi
mov rcx, rbp
mov dword [rsp + 0x28], 0x57746553
mov dword [rsp + 0x2c], 0x65447066
mov dword [rsp + 0x30], 0x65636976
mov dword [rsp + 0x34], 0x656a624f
mov dword [rsp + 0x38], 0x7463
call fcn.140005ac8
cmp al, 1
jne 0x1400692f7
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x1400692f7
cmp eax, edi
jae 0x1400692f7
mov edx, eax
mov ecx, 0x7d4
call fcn.140029bac
mov edx, dword [rsp + 0x20]
mov ecx, 0x7d5
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret

Function at 0x140069458
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rcx
xor ebx, ebx
mov ecx, 0x1a1
mov dword [rbp - 0x30], ebx
mov edi, edx
call fcn.140029ab4
mov rsi, rax
test rax, rax
je 0x140069508
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x28]
mov edx, edi
mov rcx, r14
mov dword [rbp - 0x28], 0x4e706657
mov dword [rbp - 0x24], 0x6e496c62
mov dword [rbp - 0x20], 0x69446f66
mov dword [rbp - 0x1c], 0x74617073
mov dword [rbp - 0x18], 0x61546863
mov dword [rbp - 0x14], 0x43656c62
mov qword [rbp - 0x10], 0x7261656c
call fcn.140005ac8
cmp al, 1
jne 0x140069508
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x140069508
cmp eax, edi
jae 0x140069508
mov edx, eax
mov ecx, 0x7b2
call fcn.140029bac
mov edx, dword [rbp - 0x30]
mov ecx, 0x7b3
add rdx, rsi
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14008c320
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret