joyce8/EMBER2024-capa huggingface dataset:
Function at 0x101660b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6264704d
push eax
push 0x101ff38c
mov dword [ebp - 0xc], 0x6673476d
mov word [ebp - 8], 0x66
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ff38c
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166210
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x4271624e
push eax
push 0x101fef30
mov dword [ebp - 0xc], 0x704d656f
mov word [ebp - 8], 0x6562
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101fef30
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166270
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x5771624e
push eax
push 0x101ff8e8
mov dword [ebp - 0x10], 0x5078666a
mov dword [ebp - 0xc], 0x6d6a4767
mov word [ebp - 8], 0x66
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ff8e8
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166370
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x7665704e
push eax
push 0x101ff560
mov dword [ebp - 0x10], 0x3334666d
mov dword [ebp - 0xc], 0x74736a47
mov word [ebp - 8], 0x5875
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ff560
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101663d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x7665704e
push eax
push 0x101ff570
mov dword [ebp - 0x10], 0x3334666d
mov dword [ebp - 0xc], 0x7579664f
mov word [ebp - 8], 0x58
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ff570
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166570
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x5675664f
push eax
push 0x101fec34
mov dword [ebp - 0x10], 0x48736674
mov dword [ebp - 0xc], 0x6f4a7566
mov word [ebp - 8], 0x7067
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101fec34
call fcn.10158d02
mov esp, ebp
pop ebp
ret
Function at 0x10166670
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6f667150
push eax
push 0x101ffd14
mov dword [ebp - 0x10], 0x716a6d44
mov dword [ebp - 0xc], 0x73627063
mov word [ebp - 8], 0x65
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ffd14
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101666d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6f667150
push eax
push 0x101ff004
mov dword [ebp - 0xc], 0x6f667746
mov word [ebp - 8], 0x4275
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ff004
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166730
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6f667150
push eax
push 0x10200208
mov dword [ebp - 0x10], 0x6f667746
mov dword [ebp - 0xc], 0x68704d75
mov word [ebp - 8], 0x42
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200208
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166790
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6f667150
push eax
push 0x101ff010
mov dword [ebp - 0xc], 0x6f667746
mov word [ebp - 8], 0x5875
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ff010
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101668e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6f667150
push eax
push 0x10200274
mov dword [ebp - 0x10], 0x624e4454
mov dword [ebp - 0xc], 0x6668626f
mov word [ebp - 8], 0x4273
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200274
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166b70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6c666651
push eax
push 0x101ffdf8
mov dword [ebp - 0x10], 0x7474664e
mov dword [ebp - 0xc], 0x42666862
mov byte [ebp - 8], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ffdf8
call fcn.10158d02
mov esp, ebp
pop ebp
ret
Function at 0x10166c20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x64707351
push eax
push 0x101ffbfc
mov dword [ebp - 0x10], 0x34747466
mov dword [ebp - 0xc], 0x79664f33
mov word [ebp - 8], 0x5875
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ffbfc
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166ce0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x746a6253
push eax
push 0x101ff980
mov dword [ebp - 0x10], 0x64794666
mov dword [ebp - 0xc], 0x6a757166
mov word [ebp - 8], 0x6f70
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ff980
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166d40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x65626653
push eax
push 0x10200250
mov dword [ebp - 0x10], 0x6f667746
mov dword [ebp - 0xc], 0x68704d75
mov word [ebp - 8], 0x42
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200250
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166e90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x44686653
push eax
push 0x10200088
mov dword [ebp - 0x10], 0x75626673
mov dword [ebp - 0xc], 0x7a664c66
mov word [ebp - 8], 0x42
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200088
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166ef0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x44686653
push eax
push 0x102000cc
mov dword [ebp - 0x10], 0x75626673
mov dword [ebp - 0xc], 0x7a664c66
mov word [ebp - 8], 0x58
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x102000cc
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10166fa0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x46686653
push eax
push 0x10200308
mov dword [ebp - 0x10], 0x4c6e766f
mov dword [ebp - 0xc], 0x79467a66
mov word [ebp - 8], 0x42
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200308
call fcn.10158d02
mov esp, ebp
pop ebp
ret
Function at 0x10167000
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x46686653
push eax
push 0x102003ac
mov dword [ebp - 0x10], 0x4c6e766f
mov dword [ebp - 0xc], 0x79467a66
mov word [ebp - 8], 0x58
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x102003ac
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101670b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x46686653
push eax
push 0x102002f8
mov dword [ebp - 0x10], 0x576e766f
mov dword [ebp - 0xc], 0x66766d62
mov word [ebp - 8], 0x42
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x102002f8
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101671b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x50686653
push eax
push 0x102002e8
mov dword [ebp - 0x10], 0x4c6f6671
mov dword [ebp - 0xc], 0x79467a66
mov word [ebp - 8], 0x42
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x102002e8
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167210
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x50686653
push eax
push 0x10200134
mov dword [ebp - 0x10], 0x4c6f6671
mov dword [ebp - 0xc], 0x79467a66
mov word [ebp - 8], 0x58
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200134
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167360
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x54686653
push eax
push 0x102000dc
mov dword [ebp - 0x10], 0x62577566
mov dword [ebp - 0xc], 0x4666766d
mov word [ebp - 8], 0x4279
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x102000dc
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101673c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x54686653
push eax
push 0x1020038c
mov dword [ebp - 0x10], 0x62577566
mov dword [ebp - 0xc], 0x4666766d
mov word [ebp - 8], 0x5879
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x1020038c
call fcn.10158d02
mov esp, ebp
pop ebp
ret
Function at 0x10167420
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x56686653
push eax
push 0x102000ec
mov dword [ebp - 0x10], 0x62704d6f
mov dword [ebp - 0xc], 0x7a664c65
mov word [ebp - 8], 0x58
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x102000ec
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101675f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x666d6653
push eax
push 0x101ffef4
mov dword [ebp - 0xc], 0x45667462
mov word [ebp - 8], 0x44
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ffef4
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101676e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x66746653
push eax
push 0x101ff01c
mov dword [ebp - 0xc], 0x66774675
mov word [ebp - 8], 0x756f
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ff01c
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167740
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x566d7553
push eax
push 0x101ff990
mov dword [ebp - 0xc], 0x6f6a786f
mov word [ebp - 8], 0x65
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ff990
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101678f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x101c7650]
lea eax, [ebp - 0x20]
push 0x1b
push eax
push 0x10200404
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x704d7366
mov dword [ebp - 0xc], 0x6a756264
mov word [ebp - 8], 0x6f70
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200404
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167a60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x666d6654
push eax
push 0x101fff30
mov dword [ebp - 0x10], 0x63507564
mov dword [ebp - 0xc], 0x7564666b
mov byte [ebp - 8], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101fff30
call fcn.10158d02
mov esp, ebp
pop ebp
ret
Function at 0x10167ac0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x666d6654
push eax
push 0x10200010
mov dword [ebp - 0x10], 0x62517564
mov dword [ebp - 0xc], 0x7575666d
mov word [ebp - 8], 0x66
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200010
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167b70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x43756654
push eax
push 0x101fffb8
mov dword [ebp - 0xc], 0x6d70446c
mov word [ebp - 8], 0x7370
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101fffb8
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167bd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x45756654
push eax
push 0x101fff6c
mov dword [ebp - 0xc], 0x756a434a
mov word [ebp - 8], 0x74
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101fff6c
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167c20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x46756654
push eax
push 0x101ffbdc
mov dword [ebp - 0x10], 0x6750656f
mov dword [ebp - 0xc], 0x666d6a47
mov byte [ebp - 8], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ffbdc
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167d70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x47756654
push eax
push 0x101ff6b8
mov dword [ebp - 0x10], 0x51666d6a
mov dword [ebp - 0xc], 0x756f6a70
mov word [ebp - 8], 0x7366
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ff6b8
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167e20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x49756654
push eax
push 0x101ffa00
mov dword [ebp - 0x10], 0x6d656f62
mov dword [ebp - 0xc], 0x76704466
mov word [ebp - 8], 0x756f
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ffa00
call fcn.10158d02
mov esp, ebp
pop ebp
ret
Function at 0x10167e80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x4d756654
push eax
push 0x101ff540
mov dword [ebp - 0x10], 0x46757462
mov dword [ebp - 0xc], 0x73707373
mov byte [ebp - 8], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ff540
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167ee0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x101c7930]
lea eax, [ebp - 0x20]
push 0x1a
push eax
push 0x102001bc
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x7075716a
mov dword [ebp - 0xc], 0x64624573
mov word [ebp - 8], 0x6d
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x102001bc
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167f40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x101c7930]
lea eax, [ebp - 0x20]
push 0x1a
push eax
push 0x10200048
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x7075716a
mov dword [ebp - 0xc], 0x64625473
mov word [ebp - 8], 0x6d
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200048
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10167fa0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x54756654
push eax
push 0x101ffb98
mov dword [ebp - 0x10], 0x62496575
mov dword [ebp - 0xc], 0x666d656f
mov byte [ebp - 8], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ffb98
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10168000
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x55756654
push eax
push 0x101fffa8
mov dword [ebp - 0x10], 0x44757966
mov dword [ebp - 0xc], 0x73706d70
mov byte [ebp - 8], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101fffa8
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101680c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6d666954
push eax
push 0x10200468
mov dword [ebp - 0x10], 0x6679466d
mov dword [ebp - 0xc], 0x66757664
mov word [ebp - 8], 0x42
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200468
call fcn.10158d02
mov esp, ebp
pop ebp
ret
Function at 0x101681c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6d666954
push eax
push 0x10200458
mov dword [ebp - 0x10], 0x6679466d
mov dword [ebp - 0xc], 0x66757664
mov word [ebp - 8], 0x58
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200458
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10168220
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x78706954
push eax
push 0x101ffe84
mov dword [ebp - 0xc], 0x656f6a58
mov word [ebp - 8], 0x7870
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ffe84
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101682d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x73627554
push eax
push 0x10200284
mov dword [ebp - 0x10], 0x73665475
mov dword [ebp - 0xc], 0x66646a77
mov word [ebp - 8], 0x42
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200284
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x101683d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x66737554
push eax
push 0x10200020
mov dword [ebp - 0xc], 0x43696475
mov word [ebp - 8], 0x756d
mov byte [ebp - 6], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x10200020
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10168680
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6f567055
push eax
push 0x101ffc7c
mov dword [ebp - 0xc], 0x6570646a
mov word [ebp - 8], 0x66
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101ffc7c
call fcn.10158d02
mov esp, ebp
pop ebp
ret

Function at 0x10168980
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x101eff24]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x624e6f56
push eax
push 0x101fef3c
mov dword [ebp - 0x10], 0x656f4271
mov dword [ebp - 0xc], 0x6562704d
mov byte [ebp - 8], 0
call fcn.1016a640
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x101fef3c
call fcn.10158d02
mov esp, ebp
pop ebp
ret