joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140002458
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x53
mov byte [rsp + 0x26], 0x46
mov byte [rsp + 0x27], 0x53
mov byte [rsp + 0x28], 0x55
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x48
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x57
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409eeb70], 0
jne 0x1400024fc
mov byte [0x1409eeb93], 1
mov eax, 0
lea rcx, [0x1409eeb80]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400024d7
mov byte [0x1409eeb70], 1
lea rcx, [0x140001711]
call fcn.1400014f0
lea rax, [0x1409eeb80]
add rsp, 0x48
ret

Function at 0x140002508
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x58
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x11
mov byte [rsp + 0x28], 0x51
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x57
mov byte [rsp + 0x2c], 0x52
mov byte [rsp + 0x2d], 0x51
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409eeab8], 0
jne 0x1400025ac
mov byte [0x1409eead3], 1
mov eax, 0
lea rcx, [0x1409eeac0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140002587
mov byte [0x1409eeab8], 1
lea rcx, [0x1400017a1]
call fcn.1400014f0
lea rax, [0x1409eeac0]
add rsp, 0x48
ret

Function at 0x1400025b8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x53
mov byte [rsp + 0x22], 0x44
mov byte [rsp + 0x23], 0x51
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x48
mov byte [rsp + 0x28], 0x46
mov byte [rsp + 0x29], 0x58
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x4c
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409eea28], 0
jne 0x14000265c
mov byte [0x1409eea43], 1
mov eax, 0
lea rcx, [0x1409eea30]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140002637
mov byte [0x1409eea28], 1
lea rcx, [0x140001819]
call fcn.1400014f0
lea rax, [0x1409eea30]
add rsp, 0x48
ret
Function at 0x140002668
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x58
mov byte [rsp + 0x27], 0x55
mov byte [rsp + 0x28], 0x49
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x4b
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x4e
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409ee9c8], 0
jne 0x14000270c
mov byte [0x1409ee9e3], 1
mov eax, 0
lea rcx, [0x1409ee9d0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400026e7
mov byte [0x1409ee9c8], 1
lea rcx, [0x140001861]
call fcn.1400014f0
lea rax, [0x1409ee9d0]
add rsp, 0x48
ret

Function at 0x140002718
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x4e
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x48
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x4e
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409ee8a8], 0
jne 0x1400027bc
mov byte [0x1409ee8c3], 1
mov eax, 0
lea rcx, [0x1409ee8b0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140002797
mov byte [0x1409ee8a8], 1
lea rcx, [0x140001951]
call fcn.1400014f0
lea rax, [0x1409ee8b0]
add rsp, 0x48
ret

Function at 0x1400027c8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x58
mov byte [rsp + 0x22], 0x56
mov byte [rsp + 0x23], 0x44
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x4e
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x48
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x4e
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409ee888], 0
jne 0x14000286c
mov byte [0x1409ee8a3], 1
mov eax, 0
lea rcx, [0x1409ee890]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140002847
mov byte [0x1409ee888], 1
lea rcx, [0x140001969]
call fcn.1400014f0
lea rax, [0x1409ee890]
add rsp, 0x48
ret
Function at 0x140002878
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x45
mov byte [rsp + 0x26], 0x58
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x4f
mov byte [rsp + 0x29], 0x4a
mov byte [rsp + 0x2a], 0x58
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x47
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409ee6d0], 0
jne 0x14000291c
mov byte [0x1409ee6f3], 1
mov eax, 0
lea rcx, [0x1409ee6e0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400028f7
mov byte [0x1409ee6d0], 1
lea rcx, [0x140001ab9]
call fcn.1400014f0
lea rax, [0x1409ee6e0]
add rsp, 0x48
ret

Function at 0x140002928
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x53
mov byte [rsp + 0x22], 0x44
mov byte [rsp + 0x23], 0x51
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x48
mov byte [rsp + 0x28], 0x46
mov byte [rsp + 0x29], 0x58
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x4c
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409ee588], 0
jne 0x1400029cc
mov byte [0x1409ee5a3], 1
mov eax, 0
lea rcx, [0x1409ee590]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400029a7
mov byte [0x1409ee588], 1
lea rcx, [0x140001bc1]
call fcn.1400014f0
lea rax, [0x1409ee590]
add rsp, 0x48
ret

Function at 0x1400029d8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x5d
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x51
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x4f
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x50
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409ee560], 0
jne 0x140002a7c
mov byte [0x1409ee583], 1
mov eax, 0
lea rcx, [0x1409ee570]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140002a57
mov byte [0x1409ee560], 1
lea rcx, [0x140001bd9]
call fcn.1400014f0
lea rax, [0x1409ee570]
add rsp, 0x48
ret
Function at 0x140002a88
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x57
mov byte [rsp + 0x22], 0x52
mov byte [rsp + 0x23], 0x57
mov byte [rsp + 0x24], 0x44
mov byte [rsp + 0x25], 0x4f
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x47
mov byte [rsp + 0x28], 0x45
mov byte [rsp + 0x29], 0x4f
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x46
mov byte [rsp + 0x2c], 0x4e
mov byte [rsp + 0x2d], 0x11
mov byte [rsp + 0x2e], 0x46
mov byte [rsp + 0x2f], 0x52
mov byte [rsp + 0x30], 0x50
mov byte [rsp + 0x31], 0xe3
cmp byte [0x1409eebd8], 0
jne 0x140002b27
mov byte [0x1409eebf2], 1
mov eax, 0
lea rcx, [0x1409eebe0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140002b02
mov byte [0x1409eebd8], 1
lea rcx, [0x1400016c9]
call fcn.1400014f0
lea rax, [0x1409eebe0]
add rsp, 0x48
ret

Function at 0x140002b34
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x50
mov byte [rsp + 0x22], 0x44
mov byte [rsp + 0x23], 0x4f
mov byte [rsp + 0x24], 0x5a
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], 0x55
mov byte [rsp + 0x27], 0x48
mov byte [rsp + 0x28], 0x45
mov byte [rsp + 0x29], 0x5c
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x48
mov byte [rsp + 0x2c], 0x56
mov byte [rsp + 0x2d], 0x11
mov byte [rsp + 0x2e], 0x46
mov byte [rsp + 0x2f], 0x52
mov byte [rsp + 0x30], 0x50
mov byte [rsp + 0x31], 0xe3
cmp byte [0x1409eea68], 0
jne 0x140002bd3
mov byte [0x1409eea82], 1
mov eax, 0
lea rcx, [0x1409eea70]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140002bae
mov byte [0x1409eea68], 1
lea rcx, [0x1400017e9]
call fcn.1400014f0
lea rax, [0x1409eea70]
add rsp, 0x48
ret

Function at 0x140002be0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x48
mov byte [rsp + 0x26], 0x50
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x4c
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x49
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x11
mov byte [rsp + 0x2e], 0x46
mov byte [rsp + 0x2f], 0x52
mov byte [rsp + 0x30], 0x50
mov byte [rsp + 0x31], 0xe3
cmp byte [0x1409ee608], 0
jne 0x140002c7f
mov byte [0x1409ee622], 1
mov eax, 0
lea rcx, [0x1409ee610]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140002c5a
mov byte [0x1409ee608], 1
lea rcx, [0x140001b61]
call fcn.1400014f0
lea rax, [0x1409ee610]
add rsp, 0x48
ret
Function at 0x140002c8c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x49
mov byte [rsp + 0x26], 0x10
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x46
mov byte [rsp + 0x2a], 0x58
mov byte [rsp + 0x2b], 0x55
mov byte [rsp + 0x2c], 0x48
mov byte [rsp + 0x2d], 0x11
mov byte [rsp + 0x2e], 0x46
mov byte [rsp + 0x2f], 0x52
mov byte [rsp + 0x30], 0x50
mov byte [rsp + 0x31], 0xe3
cmp byte [0x1409ee5e0], 0
jne 0x140002d2b
mov byte [0x1409ee602], 1
mov eax, 0
lea rcx, [0x1409ee5f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140002d06
mov byte [0x1409ee5e0], 1
lea rcx, [0x140001b79]
call fcn.1400014f0
lea rax, [0x1409ee5f0]
add rsp, 0x48
ret

Function at 0x140002d38
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x46
mov byte [rsp + 0x26], 0x46
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x51
mov byte [rsp + 0x2b], 0x48
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x11
mov byte [rsp + 0x2e], 0x46
mov byte [rsp + 0x2f], 0x52
mov byte [rsp + 0x30], 0x50
mov byte [rsp + 0x31], 0xe3
cmp byte [0x1409ee4e0], 0
jne 0x140002dd7
mov byte [0x1409ee502], 1
mov eax, 0
lea rcx, [0x1409ee4f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140002db2
mov byte [0x1409ee4e0], 1
lea rcx, [0x140001c39]
call fcn.1400014f0
lea rax, [0x1409ee4f0]
add rsp, 0x48
ret

Function at 0x140002de4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x57
mov byte [rsp + 0x28], 0x44
mov byte [rsp + 0x29], 0x4f
mov byte [rsp + 0x2a], 0x44
mov byte [rsp + 0x2b], 0x47
mov byte [rsp + 0x2c], 0x45
mov byte [rsp + 0x2d], 0x4f
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x4e
mov byte [rsp + 0x31], 0x11
mov byte [rsp + 0x32], 0x46
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x50
mov byte [rsp + 0x35], 0xe3
cmp byte [0x1409eebb0], 0
jne 0x140002e97
mov byte [0x1409eebd6], 1
mov eax, 0
lea rcx, [0x1409eebc0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140002e72
mov byte [0x1409eebb0], 1
lea rcx, [0x1400016e1]
call fcn.1400014f0
lea rax, [0x1409eebc0]
add rsp, 0x48
ret
Function at 0x140002ea4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x50
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x5a
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x48
mov byte [rsp + 0x2c], 0x45
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x57
mov byte [rsp + 0x2f], 0x48
mov byte [rsp + 0x30], 0x56
mov byte [rsp + 0x31], 0x11
mov byte [rsp + 0x32], 0x46
mov byte [rsp + 0x33], 0x52
mov byte [rsp + 0x34], 0x50
mov byte [rsp + 0x35], 0xe3
cmp byte [0x1409eea48], 0
jne 0x140002f57
mov byte [0x1409eea66], 1
mov eax, 0
lea rcx, [0x1409eea50]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140002f32
mov byte [0x1409eea48], 1
lea rcx, [0x140001801]
call fcn.1400014f0
lea rax, [0x1409eea50]
add rsp, 0x48
ret

Function at 0x140002f64
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x50
mov byte [rsp + 0x26], 0x46
mov byte [rsp + 0x27], 0x44
mov byte [rsp + 0x28], 0x49
mov byte [rsp + 0x29], 0x48
mov byte [rsp + 0x2a], 0x48
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409eeb38], 0
jne 0x140002ff9
mov byte [0x1409eeb50], 1
mov eax, 0
lea rcx, [0x1409eeb40]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140002fd4
mov byte [0x1409eeb38], 1
lea rcx, [0x140001741]
call fcn.1400014f0
lea rax, [0x1409eeb40]
add rsp, 0x38
ret

Function at 0x140003006
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x51
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x55
mov byte [rsp + 0x28], 0x57
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x51
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409ee950], 0
jne 0x14000309b
mov byte [0x1409ee970], 1
mov eax, 0
lea rcx, [0x1409ee960]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003076
mov byte [0x1409ee950], 1
lea rcx, [0x1400018c1]
call fcn.1400014f0
lea rax, [0x1409ee960]
add rsp, 0x38
ret
Function at 0x1400030a8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x5d
mov byte [rsp + 0x26], 0x4c
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x4f
mov byte [rsp + 0x29], 0x5c
mov byte [rsp + 0x2a], 0x44
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409ee8e0], 0
jne 0x14000313d
mov byte [0x1409ee900], 1
mov eax, 0
lea rcx, [0x1409ee8f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003118
mov byte [0x1409ee8e0], 1
lea rcx, [0x140001921]
call fcn.1400014f0
lea rax, [0x1409ee8f0]
add rsp, 0x38
ret

Function at 0x14000314a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x53
mov byte [rsp + 0x28], 0x4b
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x56
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409ee7e8], 0
jne 0x1400031df
mov byte [0x1409ee800], 1
mov eax, 0
lea rcx, [0x1409ee7f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x1400031ba
mov byte [0x1409ee7e8], 1
lea rcx, [0x1400019e1]
call fcn.1400014f0
lea rax, [0x1409ee7f0]
add rsp, 0x38
ret

Function at 0x1400031ec
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], 0x4b
mov byte [rsp + 0x27], 0x51
mov byte [rsp + 0x28], 0x4f
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x45
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409ee748], 0
jne 0x140003281
mov byte [0x1409ee760], 1
mov eax, 0
lea rcx, [0x1409ee750]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x14000325c
mov byte [0x1409ee748], 1
lea rcx, [0x140001a59]
call fcn.1400014f0
lea rax, [0x1409ee750]
add rsp, 0x38
ret
Function at 0x14000328e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x46
mov byte [rsp + 0x26], 0x4f
mov byte [rsp + 0x27], 0x44
mov byte [rsp + 0x28], 0x50
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x59
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x51
mov byte [rsp + 0x2d], 0x48
mov byte [rsp + 0x2e], 0x57
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409ee670], 0
jne 0x140003323
mov byte [0x1409ee690], 1
mov eax, 0
lea rcx, [0x1409ee680]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x1400032fe
mov byte [0x1409ee670], 1
lea rcx, [0x140001b01]
call fcn.1400014f0
lea rax, [0x1409ee680]
add rsp, 0x38
ret

Function at 0x140003330
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x57
mov byte [rsp + 0x22], 0x55
mov byte [rsp + 0x23], 0x48
mov byte [rsp + 0x24], 0x51
mov byte [rsp + 0x25], 0x47
mov byte [rsp + 0x26], 0x50
mov byte [rsp + 0x27], 0x4c
mov byte [rsp + 0x28], 0x46
mov byte [rsp + 0x29], 0x55
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409ee508], 0
jne 0x1400033c5
mov byte [0x1409ee520], 1
mov eax, 0
lea rcx, [0x1409ee510]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x1400033a0
mov byte [0x1409ee508], 1
lea rcx, [0x140001c21]
call fcn.1400014f0
lea rax, [0x1409ee510]
add rsp, 0x38
ret

Function at 0x1400033d2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x59
mov byte [rsp + 0x22], 0x4c
mov byte [rsp + 0x23], 0x55
mov byte [rsp + 0x24], 0x58
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x57
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x57
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x4f
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409ee488], 0
jne 0x140003467
mov byte [0x1409ee4a0], 1
mov eax, 0
lea rcx, [0x1409ee490]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003442
mov byte [0x1409ee488], 1
lea rcx, [0x140001c81]
call fcn.1400014f0
lea rax, [0x1409ee490]
add rsp, 0x38
ret