joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140003a10
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x50
mov ebx, 0x12
mov dword [rbp - 0x30], 0x370030
mov dword [rbp - 0x2c], 0x4d0061
mov dword [rbp - 0x28], 0x400057
mov dword [rbp - 0x24], 0x5d0040
lea ecx, [rbx + 0x14]
mov dword [rbp - 0x20], 0x300040
mov dword [rbp - 0x1c], 0x300028
mov dword [rbp - 0x18], 0x220037
mov dword [rbp - 0x14], 0x4a002a
mov dword [rbp - 0x10], 0x180030
mov word [rbp - 0xc], bx
call fcn.140002534
lea r9, [rbp - 0x30]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 1]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140003a7b
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rbp
ret

Function at 0x140003a9c
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x40
mov ebx, 0x12
mov dword [rbp - 0x20], 0x73005e
mov dword [rbp - 0x1c], 0x660061
mov dword [rbp - 0x18], 0x7d0050
mov dword [rbp - 0x14], 0x66007d
lea ecx, [rbx + 0xc]
mov dword [rbp - 0x10], 0x620047
mov dword [rbp - 0xc], 0x7b0046
mov dword [rbp - 8], 0x77007f
mov word [rbp - 4], bx
call fcn.140002534
lea r9, [rbp - 0x20]
mov rdx, rax
sub r9, rax
lea r8d, [rbx - 3]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140003af9
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rbp
ret

Function at 0x140003b1c
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x70
mov ecx, 0x42
mov dword [rbp - 0x50], 0x570041
mov dword [rbp - 0x4c], 0x57005e
mov dword [rbp - 0x48], 0x460051
mov dword [rbp - 0x44], 0x380032
lea ebx, [rcx - 0x30]
mov dword [rbp - 0x40], 0x540032
mov word [rbp - 0x10], bx
mov dword [rbp - 0x3c], 0x5d0040
mov dword [rbp - 0x38], 0x32005f
mov dword [rbp - 0x34], 0x7c0053
mov dword [rbp - 0x30], 0x7b0066
mov dword [rbp - 0x2c], 0x620041
mov dword [rbp - 0x28], 0x65006b
mov dword [rbp - 0x24], 0x600073
mov dword [rbp - 0x20], 0x420077
mov dword [rbp - 0x1c], 0x7d0060
mov dword [rbp - 0x18], 0x670076
mov dword [rbp - 0x14], 0x660071
call fcn.140002534
lea r9, [rbp - 0x50]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 0xf]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140003bb8
mov rbx, qword [rsp + 0x80]
add rsp, 0x70
pop rbp
ret
Function at 0x140003bdc
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
mov ebx, 0x12
mov dword [rbp - 0x40], 0x570041
mov dword [rbp - 0x3c], 0x57005e
mov dword [rbp - 0x38], 0x460051
mov dword [rbp - 0x34], 0x380032
lea ecx, [rbx + 0x2a]
mov dword [rbp - 0x30], 0x540032
mov dword [rbp - 0x2c], 0x5d0040
mov dword [rbp - 0x28], 0x32005f
mov dword [rbp - 0x24], 0x7b0045
mov dword [rbp - 0x20], 0x21007c
mov dword [rbp - 0x1c], 0x4d0020
mov dword [rbp - 0x18], 0x600055
mov dword [rbp - 0x14], 0x67007d
mov dword [rbp - 0x10], 0x470062
mov dword [rbp - 0xc], 0x770061
mov dword [rbp - 8], 0x120060
call fcn.140002534
lea r9, [rbp - 0x40]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 0xc]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140003c6d
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rbp
ret

Function at 0x140003c90
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x70
mov ecx, 0x46
mov dword [rbp - 0x50], 0x570041
mov dword [rbp - 0x4c], 0x57005e
mov dword [rbp - 0x48], 0x460051
mov dword [rbp - 0x44], 0x380032
lea ebx, [rcx - 0x34]
mov dword [rbp - 0x40], 0x540032
mov word [rbp - 0xc], bx
mov dword [rbp - 0x3c], 0x5d0040
mov dword [rbp - 0x38], 0x32005f
mov dword [rbp - 0x34], 0x7b0045
mov dword [rbp - 0x30], 0x21007c
mov dword [rbp - 0x2c], 0x4d0020
mov dword [rbp - 0x28], 0x7d0051
mov dword [rbp - 0x24], 0x62007f
mov dword [rbp - 0x20], 0x660067
mov dword [rbp - 0x1c], 0x600077
mov dword [rbp - 0x18], 0x6b0041
mov dword [rbp - 0x14], 0x660061
mov dword [rbp - 0x10], 0x7f0077
call fcn.140002534
lea r9, [rbp - 0x50]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 0x11]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140003d33
mov rbx, qword [rsp + 0x80]
add rsp, 0x70
pop rbp
ret

Function at 0x140003d58
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x50
mov ebx, 0x12
mov dword [rbp - 0x30], 0x7c0053
mov dword [rbp - 0x2c], 0x7b0066
mov dword [rbp - 0x28], 0x7b0044
mov dword [rbp - 0x24], 0x670060
lea ecx, [rbx + 0x10]
mov dword [rbp - 0x20], 0x420061
mov dword [rbp - 0x1c], 0x7d0060
mov dword [rbp - 0x18], 0x670076
mov dword [rbp - 0x14], 0x660071
mov word [rbp - 0x10], bx
call fcn.140002534
lea r9, [rbp - 0x30]
mov rdx, rax
sub r9, rax
lea r8d, [rbx - 1]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140003dbc
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rbp
ret
Function at 0x140003ddc
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x40
mov ebx, 0x12
mov dword [rbp - 0x20], 0x670051
mov dword [rbp - 0x1c], 0x600060
mov dword [rbp - 0x18], 0x7c0077
mov dword [rbp - 0x14], 0x460066
lea ecx, [rbx + 0xe]
mov dword [rbp - 0x10], 0x7f007b
mov dword [rbp - 0xc], 0x480077
mov dword [rbp - 8], 0x7c007d
mov dword [rbp - 4], 0x120077
call fcn.140002534
lea r9, [rbp - 0x20]
mov rdx, rax
sub r9, rax
lea r8d, [rbx - 2]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140003e3c
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rbp
ret

Function at 0x140003e5c
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x40
mov ebx, 0x12
mov dword [rbp - 0x20], 0x7b0045
mov dword [rbp - 0x1c], 0x21007c
mov dword [rbp - 0x18], 0x4d0020
mov dword [rbp - 0x14], 0x600042
lea ecx, [rbx + 0xa]
mov dword [rbp - 0x10], 0x71007d
mov dword [rbp - 0xc], 0x610077
mov dword [rbp - 8], 0x120061
call fcn.140002534
lea r9, [rbp - 0x20]
mov rdx, rax
sub r9, rax
lea r8d, [rbx - 4]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140003eb5
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rbp
ret

Function at 0x140003ed8
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
mov ebx, 0x12
mov dword [rbp - 0x40], 0x570041
mov dword [rbp - 0x3c], 0x57005e
mov dword [rbp - 0x38], 0x460051
mov dword [rbp - 0x34], 0x380032
lea ecx, [rbx + 0x24]
mov dword [rbp - 0x30], 0x540032
mov dword [rbp - 0x2c], 0x5d0040
mov dword [rbp - 0x28], 0x32005f
mov dword [rbp - 0x24], 0x7b0045
mov dword [rbp - 0x20], 0x21007c
mov dword [rbp - 0x1c], 0x4d0020
mov dword [rbp - 0x18], 0x7d0044
mov dword [rbp - 0x14], 0x67007e
mov dword [rbp - 0x10], 0x77007f
mov word [rbp - 0xc], bx
call fcn.140002534
lea r9, [rbp - 0x40]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 9]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140003f5f
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rbp
ret
Function at 0x140003f80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
mov ecx, 0x7c
mov dword [rbp - 0x49], 0x570041
mov dword [rbp - 0x45], 0x57005e
mov dword [rbp - 0x41], 0x460051
mov dword [rbp - 0x3d], 0x380032
lea ebx, [rcx - 0x6a]
mov dword [rbp - 0x39], 0x540032
mov dword [rbp - 0x35], 0x5d0040
mov dword [rbp - 0x31], 0x32005f
mov dword [rbp - 0x2d], 0x7b0045
mov dword [rbp - 0x29], 0x21007c
mov dword [rbp - 0x25], 0x4d0020
mov dword [rbp - 0x21], 0x77005c
mov dword [rbp - 0x1d], 0x650066
mov dword [rbp - 0x19], 0x60007d
mov dword [rbp - 0x15], 0x530079
mov dword [rbp - 0x11], 0x730076
mov dword [rbp - 0xd], 0x660062
mov dword [rbp - 9], 0x600077
mov dword [rbp - 5], 0x450032
mov dword [rbp - 1], 0x57005a
mov dword [rbp + 3], 0x570040
mov dword [rbp + 7], 0x420032
mov dword [rbp + 0xb], 0x6b007a
mov dword [rbp + 0xf], 0x7b0061
mov dword [rbp + 0x13], 0x730071
mov dword [rbp + 0x17], 0x53007e
mov dword [rbp + 0x1b], 0x730076
mov dword [rbp + 0x1f], 0x660062
mov dword [rbp + 0x23], 0x600077
mov dword [rbp + 0x27], 0x46002f
mov dword [rbp + 0x2b], 0x470040
mov dword [rbp + 0x2f], 0x120057
call fcn.140002534
lea r9, [rbp - 0x49]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 0x2c]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140004097
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret

Function at 0x1400040d0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x40
mov ebx, 0x12
mov dword [rbp - 0x20], 0x730042
mov dword [rbp - 0x1c], 0x660060
mov dword [rbp - 0x18], 0x7d0051
mov dword [rbp - 0x14], 0x62007f
lea ecx, [rbx + 0xa]
mov dword [rbp - 0x10], 0x7c007d
mov dword [rbp - 0xc], 0x7c0077
mov dword [rbp - 8], 0x120066
call fcn.140002534
lea r9, [rbp - 0x20]
mov rdx, rax
sub r9, rax
lea r8d, [rbx - 4]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140004129
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rbp
ret
Function at 0x14000414c
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
mov ecx, 0x38
mov dword [rbp - 0x40], 0x570041
mov dword [rbp - 0x3c], 0x57005e
mov dword [rbp - 0x38], 0x460051
mov dword [rbp - 0x34], 0x380032
lea ebx, [rcx - 0x26]
mov dword [rbp - 0x30], 0x540032
mov dword [rbp - 0x2c], 0x5d0040
mov dword [rbp - 0x28], 0x32005f
mov dword [rbp - 0x24], 0x7b0045
mov dword [rbp - 0x20], 0x21007c
mov dword [rbp - 0x1c], 0x4d0020
mov dword [rbp - 0x18], 0x600042
mov dword [rbp - 0x14], 0x71007d
mov dword [rbp - 0x10], 0x610077
mov dword [rbp - 0xc], 0x120061
call fcn.140002534
lea r9, [rbp - 0x40]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 0xa]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x1400041d6
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rbp
ret

Function at 0x1400041f8
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x50
mov ebx, 0x12
mov dword [rbp - 0x30], 0x7b0045
mov dword [rbp - 0x2c], 0x21007c
mov dword [rbp - 0x28], 0x4d0020
mov dword [rbp - 0x24], 0x77005c
lea ecx, [rbx + 0x18]
mov dword [rbp - 0x20], 0x650066
mov dword [rbp - 0x1c], 0x60007d
mov dword [rbp - 0x18], 0x530079
mov dword [rbp - 0x14], 0x730076
mov dword [rbp - 0x10], 0x660062
mov dword [rbp - 0xc], 0x600077
mov word [rbp - 8], bx
call fcn.140002534
lea r9, [rbp - 0x30]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 3]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000426a
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rbp
ret

Function at 0x14000428c
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x70
mov ecx, 0x46
mov dword [rbp - 0x50], 0x570041
mov dword [rbp - 0x4c], 0x57005e
mov dword [rbp - 0x48], 0x460051
mov dword [rbp - 0x44], 0x380032
lea ebx, [rcx - 0x34]
mov dword [rbp - 0x40], 0x540032
mov word [rbp - 0xc], bx
mov dword [rbp - 0x3c], 0x5d0040
mov dword [rbp - 0x38], 0x32005f
mov dword [rbp - 0x34], 0x7b0045
mov dword [rbp - 0x30], 0x21007c
mov dword [rbp - 0x2c], 0x4d0020
mov dword [rbp - 0x28], 0x660041
mov dword [rbp - 0x24], 0x600073
mov dword [rbp - 0x20], 0x670066
mov dword [rbp - 0x1c], 0x510062
mov dword [rbp - 0x18], 0x7f007d
mov dword [rbp - 0x14], 0x73007f
mov dword [rbp - 0x10], 0x76007c
call fcn.140002534
lea r9, [rbp - 0x50]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 0x11]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000432f
mov rbx, qword [rsp + 0x80]
add rsp, 0x70
pop rbp
ret
Function at 0x140004354
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x60
mov ecx, 0x40
mov dword [rbp - 0x40], 0x570041
mov dword [rbp - 0x3c], 0x57005e
mov dword [rbp - 0x38], 0x460051
mov dword [rbp - 0x34], 0x380032
lea ebx, [rcx - 0x20]
mov dword [rbp - 0x30], 0x540032
lea edi, [rcx - 0x2e]
mov dword [rbp - 0x2c], 0x5d0040
mov dword [rbp - 0x28], 0x32005f
mov dword [rbp - 0x24], 0x7b0045
mov dword [rbp - 0x20], 0x21007c
mov dword [rbp - 0x1c], 0x4d0020
mov dword [rbp - 0x18], 0x610047
mov dword [rbp - 0x14], 0x600077
mov dword [rbp - 0x10], 0x710053
mov dword [rbp - 0xc], 0x7d0071
mov dword [rbp - 8], 0x7c0067
mov dword [rbp - 4], 0x120066
call fcn.140002534
lea r8, [rbp - 0x40]
mov rdx, rax
sub r8, rax
movzx ecx, word [r8 + rdx]
xor cx, di
mov word [rdx], cx
lea rdx, [rdx + 2]
sub rbx, 1
jne 0x1400043f0
mov rbx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x60
pop rbp
ret

Function at 0x140004418
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x40
mov ebx, 0x12
mov dword [rbp - 0x20], 0x41005d
mov dword [rbp - 0x1c], 0x600053
mov dword [rbp - 0x18], 0x7a0071
mov dword [rbp - 0x14], 0x66007b
lea ecx, [rbx + 0xc]
mov dword [rbp - 0x10], 0x710077
mov dword [rbp - 0xc], 0x670066
mov dword [rbp - 8], 0x770060
mov word [rbp - 4], bx
call fcn.140002534
lea r9, [rbp - 0x20]
mov rdx, rax
sub r9, rax
lea r8d, [rbx - 3]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140004475
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rbp
ret

Function at 0x140004498
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x50
mov ebx, 0x12
mov dword [rbp - 0x30], 0x7b0045
mov dword [rbp - 0x2c], 0x21007c
mov dword [rbp - 0x28], 0x4d0020
mov dword [rbp - 0x24], 0x7d0051
lea ecx, [rbx + 0x18]
mov dword [rbp - 0x20], 0x62007f
mov dword [rbp - 0x1c], 0x660067
mov dword [rbp - 0x18], 0x600077
mov dword [rbp - 0x14], 0x6b0041
mov dword [rbp - 0x10], 0x660061
mov dword [rbp - 0xc], 0x7f0077
mov word [rbp - 8], bx
call fcn.140002534
lea r9, [rbp - 0x30]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 3]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000450a
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rbp
ret
Function at 0x14000452c
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x50
mov ebx, 0x12
mov dword [rbp - 0x30], 0x7c0053
mov dword [rbp - 0x2c], 0x7b0066
mov dword [rbp - 0x28], 0x620041
mov dword [rbp - 0x24], 0x65006b
lea ecx, [rbx + 0x14]
mov dword [rbp - 0x20], 0x600073
mov dword [rbp - 0x1c], 0x420077
mov dword [rbp - 0x18], 0x7d0060
mov dword [rbp - 0x14], 0x670076
mov dword [rbp - 0x10], 0x660071
mov word [rbp - 0xc], bx
call fcn.140002534
lea r9, [rbp - 0x30]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 1]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140004597
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rbp
ret

Function at 0x1400045b8
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
mov ebx, 0x12
mov dword [rbp - 0x40], 0x570041
mov dword [rbp - 0x3c], 0x57005e
mov dword [rbp - 0x38], 0x460051
mov dword [rbp - 0x34], 0x380032
lea ecx, [rbx + 0x2c]
mov dword [rbp - 0x30], 0x540032
mov dword [rbp - 0x2c], 0x5d0040
mov dword [rbp - 0x28], 0x32005f
mov dword [rbp - 0x24], 0x7c0053
mov dword [rbp - 0x20], 0x7b0066
mov dword [rbp - 0x1c], 0x7b0044
mov dword [rbp - 0x18], 0x670060
mov dword [rbp - 0x14], 0x420061
mov dword [rbp - 0x10], 0x7d0060
mov dword [rbp - 0xc], 0x670076
mov dword [rbp - 8], 0x660071
mov word [rbp - 4], bx
call fcn.140002534
lea r9, [rbp - 0x40]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 0xd]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000464d
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rbp
ret

Function at 0x140004670
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x50
mov ebx, 0x12
mov dword [rbp - 0x30], 0x7d0044
mov dword [rbp - 0x2c], 0x67007e
mov dword [rbp - 0x28], 0x77007f
mov dword [rbp - 0x24], 0x770041
lea ecx, [rbx + 0x14]
mov dword [rbp - 0x20], 0x7b0060
mov dword [rbp - 0x1c], 0x7e0073
mov dword [rbp - 0x18], 0x67005c
mov dword [rbp - 0x14], 0x70007f
mov dword [rbp - 0x10], 0x600077
mov word [rbp - 0xc], bx
call fcn.140002534
lea r9, [rbp - 0x30]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 1]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x1400046db
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rbp
ret
Function at 0x1400046fc
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x50
mov ebx, 0x12
mov dword [rbp - 0x30], 0x7b0045
mov dword [rbp - 0x2c], 0x21007c
mov dword [rbp - 0x28], 0x4d0020
mov dword [rbp - 0x24], 0x7d005e
lea ecx, [rbx + 0x12]
mov dword [rbp - 0x20], 0x7b0075
mov dword [rbp - 0x1c], 0x730071
mov dword [rbp - 0x18], 0x56007e
mov dword [rbp - 0x14], 0x61007b
mov dword [rbp - 0x10], 0x120079
call fcn.140002534
lea r9, [rbp - 0x30]
mov rdx, rax
sub r9, rax
mov r8d, ebx
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140004762
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rbp
ret

Function at 0x140004784
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x70
mov ebx, 0x12
mov dword [rbp - 0x50], 0x570041
mov dword [rbp - 0x4c], 0x57005e
mov dword [rbp - 0x48], 0x460051
mov dword [rbp - 0x44], 0x380032
lea ecx, [rbx + 0x36]
mov dword [rbp - 0x40], 0x540032
mov dword [rbp - 0x3c], 0x5d0040
mov dword [rbp - 0x38], 0x32005f
mov dword [rbp - 0x34], 0x7b0045
mov dword [rbp - 0x30], 0x21007c
mov dword [rbp - 0x2c], 0x4d0020
mov dword [rbp - 0x28], 0x62005d
mov dword [rbp - 0x24], 0x600077
mov dword [rbp - 0x20], 0x660073
mov dword [rbp - 0x1c], 0x7c007b
mov dword [rbp - 0x18], 0x410075
mov dword [rbp - 0x14], 0x61006b
mov dword [rbp - 0x10], 0x770066
mov dword [rbp - 0xc], 0x12007f
call fcn.140002534
lea r9, [rbp - 0x50]
mov rdx, rax
sub r9, rax
lea r8d, [rbx + 0x12]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000482a
mov rbx, qword [rsp + 0x80]
add rsp, 0x70
pop rbp
ret

Function at 0x140004850
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x40
mov ebx, 0x12
mov dword [rbp - 0x20], 0x730030
mov dword [rbp - 0x1c], 0x710060
mov dword [rbp - 0x18], 0x4d007a
mov dword [rbp - 0x14], 0x6b0061
lea ecx, [rbx + 0xe]
mov dword [rbp - 0x10], 0x660061
mov dword [rbp - 0xc], 0x7f0077
mov dword [rbp - 8], 0x280030
mov dword [rbp - 4], 0x120030
call fcn.140002534
lea r9, [rbp - 0x20]
mov rdx, rax
sub r9, rax
lea r8d, [rbx - 2]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x1400048b0
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rbp
ret

Function at 0x1400048d0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x40
mov ecx, 0x20
mov dword [rbp - 0x20], 0x7b0045
mov dword [rbp - 0x1c], 0x21007c
mov dword [rbp - 0x18], 0x4d0020
mov dword [rbp - 0x14], 0x7c0042
lea ebx, [rcx - 0xe]
mov dword [rbp - 0x10], 0x570042
mov dword [rbp - 0xc], 0x66007c
mov dword [rbp - 8], 0x66007b
mov dword [rbp - 4], 0x12006b
call fcn.140002534
lea r9, [rbp - 0x20]
mov rdx, rax
sub r9, rax
lea r8d, [rbx - 2]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x140004930
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rbp
ret
Function at 0x140004950
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x40
mov ebx, 0x12
mov dword [rbp - 0x20], 0x7b0054
mov dword [rbp - 0x1c], 0x770060
mov dword [rbp - 0x18], 0x730065
mov dword [rbp - 0x14], 0x7e007e
lea ecx, [rbx + 0xe]
mov dword [rbp - 0x10], 0x600042
mov dword [rbp - 0xc], 0x76007d
mov dword [rbp - 8], 0x710067
mov dword [rbp - 4], 0x120066
call fcn.140002534
lea r9, [rbp - 0x20]
mov rdx, rax
sub r9, rax
lea r8d, [rbx - 2]
movzx ecx, word [r9 + rdx]
xor cx, bx
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x1400049b0
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rbp
ret

Function at 0x1400049d0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov ebx, 0x57
mov dword [rbp - 0x69], 0x570041
mov dword [rbp - 0x65], 0x57005e
mov dword [rbp - 0x61], 0x460051
mov dword [rbp - 0x5d], 0x380032
lea edi, [rbx - 0x45]
mov dword [rbp - 0x59], 0x540032
lea ecx, [rbx + 0x57]
mov word [rbp + 0x43], di
mov dword [rbp - 0x55], 0x5d0040
mov dword [rbp - 0x51], 0x32005f
mov dword [rbp - 0x4d], 0x7b0045
mov dword [rbp - 0x49], 0x21007c
mov dword [rbp - 0x45], 0x4d0020
mov dword [rbp - 0x41], 0x7c0042
mov dword [rbp - 0x3d], 0x570042
mov dword [rbp - 0x39], 0x66007c
mov dword [rbp - 0x35], 0x66007b
mov dword [rbp - 0x31], 0x32006b
mov dword [rbp - 0x2d], 0x5a0045
mov dword [rbp - 0x29], 0x400057
mov dword [rbp - 0x25], 0x320057
mov dword [rbp - 0x21], 0x7e0051
mov dword [rbp - 0x1d], 0x610073
mov dword [rbp - 0x19], 0x550061
mov dword [rbp - 0x15], 0x7b0067
mov dword [rbp - 0x11], 0x2f0076
mov dword [rbp - 0xd], 0x690030
mov dword [rbp - 9], 0x220027
mov dword [rbp - 5], 0x760076
mov dword [rbp - 1], 0x200027
mov dword [rbp + 3], 0x220021
mov dword [rbp + 7], 0x70003f
mov dword [rbp + 0xb], 0x2a0073
mov dword [rbp + 0xf], 0x3f0073
mov dword [rbp + 0x13], 0x230023
mov dword [rbp + 0x17], 0x230076
mov dword [rbp + 0x1b], 0x70003f
mov dword [rbp + 0x1f], 0x270074
mov dword [rbp + 0x23], 0x3f0076
mov dword [rbp + 0x27], 0x220022
mov dword [rbp + 0x2b], 0x220022
mov dword [rbp + 0x2f], 0x2a0074
mov dword [rbp + 0x33], 0x270022
mov dword [rbp + 0x37], 0x270074
mov dword [rbp + 0x3b], 0x220021
mov dword [rbp + 0x3f], 0x30006f
call fcn.140002534
lea r8, [rbp - 0x69]
mov rdx, rax
sub r8, rax
movzx ecx, word [r8 + rdx]
xor cx, di
mov word [rdx], cx
lea rdx, [rdx + 2]
sub rbx, 1
jne 0x140004b3a
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret