joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10071d10
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d19a7
mov eax, dword fs:[0]
push eax
sub esp, 0x44
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 8]
lea esi, [edi + 4]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esi
test esi, esi
je 0x10071d5a
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, ebx
mov dword [ebp - 4], 0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10071d66
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [edi + 0x2c]
call fcn.1000c4f0
cmp dword [edi + 0x28], 0
mov eax, dword [ebp + 0x18]
mov dword [edi + 0x44], eax
mov eax, dword [ebp + 0x14]
mov dword [edi + 0x24], eax
jne 0x10071dd3
push 0x48
call fcn.10056980
mov ebx, eax
add esp, 4
mov dword [ebp - 0x38], ebx
mov byte [ebp - 4], 1
test ebx, ebx
je 0x10071dc7
push 0x48
push 0
push ebx
call fcn.10092e90
add esp, 0xc
mov ecx, ebx
push dword [ebp + 0x14]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.10070ca0
jmp 0x10071dc9
xor eax, eax
mov ebx, dword [ebp - 0x2c]
mov byte [ebp - 4], 0
mov dword [edi + 0x28], eax
xor eax, eax
mov dword [ebp - 0x18], 0
cmp dword [ebp + 0x10], eax
mov ecx, ebx
mov dword [ebp - 0x14], 7
sete al
lea edx, [ecx + 2]
lea eax, [eax*2 + 1]
mov dword [edi + 0x1c], eax
xor eax, eax
mov word [ebp - 0x28], ax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10071e00
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x28]
call fcn.1000c4f0
push 3
push 0x100e31fc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.1000dee0
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x10071e4f
mov eax, dword [ebp + 0x10]
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], eax
cmp dword [edi + 0x28], 0
je 0x10071e9e
mov eax, dword [edi]
mov ecx, edi
push 1
mov eax, dword [eax + 8]
call eax
test al, al
je 0x10071e9e
push 0x10
xor eax, eax
mov dword [ebp - 0x40], 0
push str._______log_start
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.1000c4f0
mov ecx, dword [edi + 0x28]
lea edx, [ebp - 0x50]
push edx
mov byte [ebp - 4], 3
mov eax, dword [ecx]
call dword [eax]
lea ecx, [ebp - 0x50]
call fcn.100081c0
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x10071ed4
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10071eca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10071f11
push edx
push ecx
call fcn.10064ae7
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
test esi, esi
je 0x10071ef3
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10064e61
mov esp, ebp
pop ebp
ret 0x14
call fcn.100963a9
int3
Function at 0x10072520
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d1aa8
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push esi
push edi
mov eax, dword [0x10102f10]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 8
mov dword [esi + 0x30], 0
mov dword [esi + 8], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0x201
mov dword [esi + 0x18], 6
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0xc], 0
call fcn.10056980
mov edi, eax
add esp, 4
test edi, edi
je 0x100725c3
xorps xmm0, xmm0
movq qword [edi], xmm0
push 1
mov dword [ebp - 4], 0
call fcn.1003bbe6
add esp, 4
mov dword [edi + 4], eax
jmp 0x100725c5
xor edi, edi
mov eax, dword [ebp + 8]
mov dword [esi + 0x30], edi
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], 0
mov ecx, dword [edi + 4]
mov dword [ebp - 4], 1
mov dword [ebp - 0x10], ecx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 2
push eax
call fcn.1001d170
add esp, 4
mov ecx, eax
mov edx, dword [eax]
push 0x20
call dword [edx + 0x30]
movzx edi, ax
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 4], 3
test ecx, ecx
je 0x10072625
mov eax, dword [ecx]
call dword [eax + 8]
test eax, eax
je 0x10072625
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
cmp dword [esi + 0x38], 0
mov dword [ebp - 4], 0xffffffff
mov word [esi + 0x40], di
jne 0x10072649
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0x10]
and eax, 0x13
or eax, 4
mov dword [esi + 0xc], eax
and ecx, eax
jne 0x1007266b
cmp byte [ebp + 0xc], 0
je 0x10072658
push esi
call fcn.1003be02
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
test cl, 4
je 0x10072677
mov esi, str.ios_base::badbit_set
jmp 0x10072687
test cl, 2
mov esi, str.ios_base::failbit_set
mov eax, str.ios_base::eofbit_set
cmove esi, eax
lea eax, [ebp - 0x1c]
push 1
push eax
call fcn.10020590
add esp, 8
lea ecx, [ebp - 0x30]
push eax
push esi
call fcn.1001de40
push 0x100f7470
lea eax, [ebp - 0x30]
push eax
call fcn.10091f6d
int3
Function at 0x1007598a
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateThread]
pop ebp
ret

Function at 0x1008a040
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x100e5c80]
lea eax, [ebp - 0x20]
push 0x1b
push eax
push 0x10115048
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x6e707347
mov dword [ebp - 0xc], 0x656f6a58
mov word [ebp - 8], 0x7870
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115048
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008a0f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6a686643
push eax
push 0x10115fe4
mov dword [ebp - 0xc], 0x6a62516f
mov word [ebp - 8], 0x756f
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115fe4
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008a190
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x100e5840]
lea eax, [ebp - 0x20]
push 0x1b
push eax
push 0x10115004
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x44667562
mov dword [ebp - 0xc], 0x66756f70
mov word [ebp - 8], 0x7579
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115004
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008a1f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x74706d44
push eax
push 0x10115e24
mov dword [ebp - 0x10], 0x6a6d4466
mov dword [ebp - 0xc], 0x62706371
mov word [ebp - 8], 0x6573
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115e24
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008a250
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x74706d44
push eax
push 0x1011632c
mov dword [ebp - 0x10], 0x66774666
mov dword [ebp - 0xc], 0x704d756f
mov word [ebp - 8], 0x68
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x1011632c
call fcn.10064e61
mov esp, ebp
pop ebp
ret
Function at 0x1008a350
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62557044
push eax
push 0x10116750
mov dword [ebp - 0x10], 0x664e6c74
mov dword [ebp - 0xc], 0x6673476e
mov word [ebp - 8], 0x66
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10116750
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008a3b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x756f7044
push eax
push 0x101164cc
mov dword [ebp - 0x10], 0x546d7073
mov dword [ebp - 0xc], 0x6a777366
mov word [ebp - 8], 0x6664
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101164cc
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008a540
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x7a717044
push eax
push 0x101157d4
mov dword [ebp - 0xc], 0x666d6a47
mov word [ebp - 8], 0x42
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101157d4
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008a590
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x7a717044
push eax
push 0x101157e0
mov dword [ebp - 0xc], 0x666d6a47
mov word [ebp - 8], 0x58
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101157e0
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008a690
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x62667344
push eax
push 0x10116094
mov dword [ebp - 0xc], 0x44456675
mov word [ebp - 8], 0x42
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10116094
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008a780
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62667344
push eax
push 0x10115168
mov dword [ebp - 0x10], 0x77466675
mov dword [ebp - 0xc], 0x42756f66
mov byte [ebp - 8], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115168
call fcn.10064e61
mov esp, ebp
pop ebp
ret
Function at 0x1008a7d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62667344
push eax
push 0x10115178
mov dword [ebp - 0x10], 0x77466675
mov dword [ebp - 0xc], 0x58756f66
mov byte [ebp - 8], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115178
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008aa00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62667344
push eax
push 0x10115284
mov dword [ebp - 0x10], 0x764e6675
mov dword [ebp - 0xc], 0x42796675
mov byte [ebp - 8], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115284
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008aa50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62667344
push eax
push 0x10115294
mov dword [ebp - 0x10], 0x764e6675
mov dword [ebp - 0xc], 0x58796675
mov byte [ebp - 8], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115294
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008aaa0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62667344
push eax
push 0x10116134
mov dword [ebp - 0x10], 0x62516675
mov dword [ebp - 0xc], 0x7575666d
mov word [ebp - 8], 0x66
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10116134
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008ab00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62667344
push eax
push 0x10115108
mov dword [ebp - 0x10], 0x73516675
mov dword [ebp - 0xc], 0x74666470
mov word [ebp - 8], 0x4274
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115108
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008ab60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62667344
push eax
push 0x10115118
mov dword [ebp - 0x10], 0x73516675
mov dword [ebp - 0xc], 0x74666470
mov word [ebp - 8], 0x5874
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115118
call fcn.10064e61
mov esp, ebp
pop ebp
ret
Function at 0x1008abc0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62667344
push eax
push 0x101160ac
mov dword [ebp - 0x10], 0x66536675
mov dword [ebp - 0xc], 0x68537564
mov word [ebp - 8], 0x6f
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101160ac
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008ac70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62667344
push eax
push 0x10116420
mov dword [ebp - 0x10], 0x66546675
mov dword [ebp - 0xc], 0x646a7773
mov word [ebp - 8], 0x4266
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10116420
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008acd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62667344
push eax
push 0x10116430
mov dword [ebp - 0x10], 0x66546675
mov dword [ebp - 0xc], 0x646a7773
mov word [ebp - 8], 0x5866
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10116430
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008add0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62667344
push eax
push 0x101151b0
mov dword [ebp - 0x10], 0x69556675
mov dword [ebp - 0xc], 0x65626673
mov byte [ebp - 8], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101151b0
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008af20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x58676645
push eax
push 0x10115fd4
mov dword [ebp - 0x10], 0x70656f6a
mov dword [ebp - 0xc], 0x70735178
mov word [ebp - 8], 0x4264
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115fd4
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008b0c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x666d6645
push eax
push 0x10116160
mov dword [ebp - 0x10], 0x63506675
mov dword [ebp - 0xc], 0x7564666b
mov byte [ebp - 8], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10116160
call fcn.10064e61
mov esp, ebp
pop ebp
ret
Function at 0x1008b110
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x666d6645
push eax
push 0x10116440
mov dword [ebp - 0x10], 0x66546675
mov dword [ebp - 0xc], 0x646a7773
mov word [ebp - 8], 0x66
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10116440
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008b2b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x78627345
push eax
push 0x10116040
mov dword [ebp - 0xc], 0x75796655
mov word [ebp - 8], 0x42
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10116040
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008b530
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x756a7946
push eax
push 0x10115c54
mov dword [ebp - 0xc], 0x66736955
mov word [ebp - 8], 0x6562
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115c54
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008b580
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x100e5ab0]
lea eax, [ebp - 0x20]
push 0x1a
push eax
push 0x101156fc
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x73755475
mov dword [ebp - 0xc], 0x74686f6a
mov word [ebp - 8], 0x42
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101156fc
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008b5e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x100e5ab0]
lea eax, [ebp - 0x20]
push 0x1a
push eax
push 0x101156e0
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x73755475
mov dword [ebp - 0xc], 0x74686f6a
mov word [ebp - 8], 0x58
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101156e0
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008b690
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x656f6a47
push eax
push 0x101153c4
mov dword [ebp - 0xc], 0x74706d44
mov word [ebp - 8], 0x66
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101153c4
call fcn.10064e61
mov esp, ebp
pop ebp
ret
Function at 0x1008b6e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x656f6a47
push eax
push 0x10115418
mov dword [ebp - 0x10], 0x74736a47
mov dword [ebp - 0xc], 0x6d6a4775
mov word [ebp - 8], 0x4266
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115418
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008b740
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x656f6a47
push eax
push 0x10115428
mov dword [ebp - 0x10], 0x74736a47
mov dword [ebp - 0xc], 0x6d6a4775
mov word [ebp - 8], 0x5866
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115428
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008b7a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x656f6a47
push eax
push 0x101153e0
mov dword [ebp - 0x10], 0x7579664f
mov dword [ebp - 0xc], 0x666d6a47
mov word [ebp - 8], 0x42
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101153e0
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008b800
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x656f6a47
push eax
push 0x101153d0
mov dword [ebp - 0x10], 0x7579664f
mov dword [ebp - 0xc], 0x666d6a47
mov word [ebp - 8], 0x58
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101153d0
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008b860
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x656f6a47
push eax
push 0x10115e74
mov dword [ebp - 0x10], 0x656f6a58
mov dword [ebp - 0xc], 0x79467870
mov word [ebp - 8], 0x58
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10115e74
call fcn.10064e61
mov esp, ebp
pop ebp
ret

Function at 0x1008bb00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10102f10]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x716a6548
push eax
push 0x101167f4
mov dword [ebp - 0x10], 0x5474766d
mov dword [ebp - 0xc], 0x75736275
mov word [ebp - 8], 0x7176
mov byte [ebp - 6], 0
call fcn.10092910
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101167f4
call fcn.10064e61
mov esp, ebp
pop ebp
ret