joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40afc0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x489020]
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x7a7d777d
mov ecx, dword [eax]
mov eax, dword [0x4a0470]
mov dword [ebp - 0xc], 0x6c71636b
mov word [ebp - 8], 0x6d69
mov byte [ebp - 6], 0x2e
cmp eax, dword [ecx + 4]
jle 0x40b043
push 0x4a0470
call fcn.00437b73
add esp, 4
cmp dword [0x4a0470], 0xffffffff
jne 0x40b043
lea eax, [ebp - 0x20]
mov ecx, 0x49e3d0
push eax
call fcn.00416dc0
push 0x477da0
call fcn.00437f9a
push 0x4a0470
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e3d0
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40b570
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x68786a7e
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5c4b7d7d
mov ecx, dword [eax]
mov eax, dword [0x49e908]
mov dword [ebp - 0xc], 0x4b4d4758
cmp eax, dword [ecx + 4]
jle 0x40b5f5
push 0x49e908
call fcn.00437b73
add esp, 4
cmp dword [0x49e908], 0xffffffff
jne 0x40b5f5
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477c50
movq qword [0x49f0e8], xmm0
mov dword [0x49f0f0], eax
mov byte [0x49f0f4], bl
call fcn.00437f9a
push 0x49e908
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f0e8
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40b6a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x415e4b7c
mov bl, 0x2e
mov dword [ebp - 0x10], 0x4b7d5a5c
mov ecx, dword [eax]
mov eax, dword [0x49e5cc]
mov dword [ebp - 0xc], 0x5c4b585c
cmp eax, dword [ecx + 4]
jle 0x40b725
push 0x49e5cc
call fcn.00437b73
add esp, 4
cmp dword [0x49e5cc], 0xffffffff
jne 0x40b725
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477c20
movq qword [0x49ed4c], xmm0
mov dword [0x49ed54], eax
mov byte [0x49ed58], bl
call fcn.00437f9a
push 0x49e5cc
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ed4c
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret
Function at 0x40bb70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7d786f7d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x47585c4b
mov ecx, dword [eax]
mov eax, dword [0x49e694]
mov word [ebp - 8], 0x4b4d
cmp eax, dword [ecx + 4]
jle 0x40bbf6
push 0x49e694
call fcn.00437b73
add esp, 4
cmp dword [0x49e694], 0xffffffff
jne 0x40bbf6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477b30
movq qword [0x49e348], xmm0
mov word [0x49e350], ax
mov byte [0x49e352], bl
call fcn.00437f9a
push 0x49e694
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e348
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40bd00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x4163467d
mov dword [ebp - 0xc], 0x415a4740
mov word [ebp - 8], 0x2e5c
mov ecx, dword [eax]
mov eax, dword [0x49e664]
cmp eax, dword [ecx + 4]
jle 0x40bd7d
push 0x49e664
call fcn.00437b73
add esp, 4
cmp dword [0x49e664], 0xffffffff
jne 0x40bd7d
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477ad0
movq qword [0x49e4ac], xmm0
mov word [0x49e4b4], ax
call fcn.00437f9a
push 0x49e664
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e4ac
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40be20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7d4d437d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x47585c4b
mov ecx, dword [eax]
mov eax, dword [0x49e378]
mov word [ebp - 8], 0x4b4d
cmp eax, dword [ecx + 4]
jle 0x40bea6
push 0x49e378
call fcn.00437b73
add esp, 4
cmp dword [0x49e378], 0xffffffff
jne 0x40bea6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477aa0
movq qword [0x49ee6c], xmm0
mov word [0x49ee74], ax
mov byte [0x49ee76], bl
call fcn.00437f9a
push 0x49e378
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ee6c
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40bfe0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x5e5a407d
mov dword [ebp - 0xc], 0x585c4b7d
mov dword [ebp - 8], 0x2e4b4d47
mov ecx, dword [eax]
mov eax, dword [0x49effc]
cmp eax, dword [ecx + 4]
jle 0x40c05c
push 0x49effc
call fcn.00437b73
add esp, 4
cmp dword [0x49effc], 0xffffffff
jne 0x40c05c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x477a50
movq qword [0x49e3c0], xmm0
mov dword [0x49e3c8], eax
call fcn.00437f9a
push 0x49effc
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e3c0
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret
Function at 0x40c070
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x465e415d
mov dword [ebp - 0xc], 0x5e5d5d41
mov word [ebp - 8], 0x2e5d
mov ecx, dword [eax]
mov eax, dword [0x49e820]
cmp eax, dword [ecx + 4]
jle 0x40c0ed
push 0x49e820
call fcn.00437b73
add esp, 4
cmp dword [0x49e820], 0xffffffff
jne 0x40c0ed
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477a30
movq qword [0x49ef6c], xmm0
mov word [0x49ef74], ax
call fcn.00437f9a
push 0x49e820
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ef6c
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40c970
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x7d627f7d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x6b787c6b
mov ecx, dword [eax]
mov eax, dword [0x49f128]
mov dword [ebp - 0xc], 0x6b696f7c
mov word [ebp - 8], 0x7a60
cmp eax, dword [ecx + 4]
jle 0x40ca05
push 0x49f128
call fcn.00437b73
add esp, 4
cmp dword [0x49f128], 0xffffffff
jne 0x40ca05
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49f028], eax
mov ax, word [ebp - 8]
push 0x477830
movq qword [0x49f020], xmm0
mov word [0x49f02c], ax
mov byte [0x49f02e], bl
call fcn.00437f9a
push 0x49f128
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f020
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40cc70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x694d585d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5c4b404b
mov ecx, dword [eax]
mov eax, dword [0x49e6e4]
mov dword [ebp - 0xc], 0x41664d47
mov word [ebp - 8], 0x5a5d
cmp eax, dword [ecx + 4]
jle 0x40cd05
push 0x49e6e4
call fcn.00437b73
add esp, 4
cmp dword [0x49e6e4], 0xffffffff
jne 0x40cd05
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a039c], eax
mov ax, word [ebp - 8]
push 0x477790
movq qword [0x4a0394], xmm0
mov word [0x4a03a0], ax
mov byte [0x4a03a2], bl
call fcn.00437f9a
push 0x49e6e4
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0394
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret
Function at 0x40cd20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7147595d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x5a424748
mov ecx, dword [eax]
mov eax, dword [0x49e624]
mov word [ebp - 8], 0x5c4b
cmp eax, dword [ecx + 4]
jle 0x40cda6
push 0x49e624
call fcn.00437b73
add esp, 4
cmp dword [0x49e624], 0xffffffff
jne 0x40cda6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477770
movq qword [0x4a04d4], xmm0
mov word [0x4a04dc], ax
mov byte [0x4a04de], bl
call fcn.00437f9a
push 0x49e624
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a04d4
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40cdc0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x7147595d
mov dword [ebp - 0xc], 0x585c4b5d
mov dword [ebp - 8], 0x2e4b4d47
mov ecx, dword [eax]
mov eax, dword [0x4a043c]
cmp eax, dword [ecx + 4]
jle 0x40ce3c
push 0x4a043c
call fcn.00437b73
add esp, 4
cmp dword [0x4a043c], 0xffffffff
jne 0x40ce3c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x477750
movq qword [0x49ef1c], xmm0
mov dword [0x49ef24], eax
call fcn.00437f9a
push 0x4a043c
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ef1c
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40d220
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x4d4f6c43
mov ecx, dword [eax]
mov eax, dword [0x49e7e0]
mov dword [ebp - 0xc], 0x7d5e5b45
mov word [ebp - 8], 0x4d58
cmp eax, dword [ecx + 4]
jle 0x40d2b5
push 0x49e7e0
call fcn.00437b73
add esp, 4
cmp dword [0x49e7e0], 0xffffffff
jne 0x40d2b5
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a02a4], eax
mov ax, word [ebp - 8]
push 0x477650
movq qword [0x4a029c], xmm0
mov word [0x4a02a8], ax
mov byte [0x4a02aa], bl
call fcn.00437f9a
push 0x49e7e0
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a029c
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret
Function at 0x40d2d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x415c6c43
mov ecx, dword [eax]
mov eax, dword [0x49ea08]
mov dword [ebp - 0xc], 0x7d5c4b45
mov word [ebp - 8], 0x4d58
cmp eax, dword [ecx + 4]
jle 0x40d365
push 0x49ea08
call fcn.00437b73
add esp, 4
cmp dword [0x49ea08], 0xffffffff
jne 0x40d365
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a05f4], eax
mov ax, word [ebp - 8]
push 0x477620
movq qword [0x4a05ec], xmm0
mov word [0x4a05f8], ax
mov byte [0x4a05fa], bl
call fcn.00437f9a
push 0x49ea08
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a05ec
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40d3e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x4f4b4b78
mov dword [ebp - 0x10], 0x41426d43
mov dword [ebp - 0xc], 0x587d4a5b
mov ecx, dword [eax]
mov eax, dword [0x49e2e4]
mov word [ebp - 8], 0x2e4d
cmp eax, dword [ecx + 4]
jle 0x40d46c
push 0x49e2e4
call fcn.00437b73
add esp, 4
cmp dword [0x49e2e4], 0xffffffff
jne 0x40d46c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0364], eax
mov ax, word [ebp - 8]
push 0x4775f0
movq qword [0x4a035c], xmm0
mov word [0x4a0368], ax
call fcn.00437f9a
push 0x49e2e4
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a035c
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40d510
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5e4b6a43
mov ecx, dword [eax]
mov eax, dword [0x49e448]
mov dword [ebp - 0xc], 0x7d574142
mov word [ebp - 8], 0x4d58
cmp eax, dword [ecx + 4]
jle 0x40d5a5
push 0x49e448
call fcn.00437b73
add esp, 4
cmp dword [0x49e448], 0xffffffff
jne 0x40d5a5
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49e8ac], eax
mov ax, word [ebp - 8]
push 0x477590
movq qword [0x49e8a4], xmm0
mov word [0x49e8b0], ax
mov byte [0x49e8b2], bl
call fcn.00437f9a
push 0x49e448
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e8a4
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret
Function at 0x40d5c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x494f404f
mov dword [ebp - 0xc], 0x587d5c4b
mov word [ebp - 8], 0x2e4d
mov ecx, dword [eax]
mov eax, dword [0x49e698]
cmp eax, dword [ecx + 4]
jle 0x40d64b
push 0x49e698
call fcn.00437b73
add esp, 4
cmp dword [0x49e698], 0xffffffff
jne 0x40d64b
movaps xmm0, xmmword [0x489560]
mov ax, word [ebp - 8]
movups xmmword [0x49f144], xmm0
push 0x477570
movq xmm0, qword [ebp - 0x10]
movq qword [0x49f154], xmm0
mov word [0x49f15c], ax
call fcn.00437f9a
push 0x49e698
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f144
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40d660
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x4f4b4b78
mov dword [ebp - 0x10], 0x5b416343
mov dword [ebp - 0xc], 0x587d5a40
mov ecx, dword [eax]
mov eax, dword [0x4a0410]
mov word [ebp - 8], 0x2e4d
cmp eax, dword [ecx + 4]
jle 0x40d6ec
push 0x4a0410
call fcn.00437b73
add esp, 4
cmp dword [0x4a0410], 0xffffffff
jne 0x40d6ec
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49e9b8], eax
mov ax, word [ebp - 8]
push 0x477550
movq qword [0x49e9b0], xmm0
mov word [0x49e9bc], ax
call fcn.00437f9a
push 0x4a0410
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e9b0
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40d700
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x4f4b4b78
mov dword [ebp - 0xc], 0x7d686043
mov dword [ebp - 8], 0x2e4d587d
mov ecx, dword [eax]
mov eax, dword [0x49e2d0]
cmp eax, dword [ecx + 4]
jle 0x40d77c
push 0x49e2d0
call fcn.00437b73
add esp, 4
cmp dword [0x49e2d0], 0xffffffff
jne 0x40d77c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x477530
movq qword [0x4a0504], xmm0
mov dword [0x4a050c], eax
call fcn.00437f9a
push 0x49e2d0
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0504
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret
Function at 0x40d790
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x7d6b7c43
mov ecx, dword [eax]
mov eax, dword [0x4a040c]
mov dword [ebp - 0xc], 0x4d587d7a
cmp eax, dword [ecx + 4]
jle 0x40d815
push 0x4a040c
call fcn.00437b73
add esp, 4
cmp dword [0x4a040c], 0xffffffff
jne 0x40d815
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477510
movq qword [0x4a04f4], xmm0
mov dword [0x4a04fc], eax
mov byte [0x4a0500], bl
call fcn.00437f9a
push 0x4a040c
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a04f4
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40dc30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7147595d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x4f4a5e5b
mov ecx, dword [eax]
mov eax, dword [0x49eecc]
mov word [ebp - 8], 0x4b5a
cmp eax, dword [ecx + 4]
jle 0x40dcb6
push 0x49eecc
call fcn.00437b73
add esp, 4
cmp dword [0x49eecc], 0xffffffff
jne 0x40dcb6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477430
movq qword [0x49ebd8], xmm0
mov word [0x49ebe0], ax
mov byte [0x49ebe2], bl
call fcn.00437f9a
push 0x49eecc
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ebd8
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40dcd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x6f627f7d
mov dword [ebp - 0x10], 0x5a404b49
mov dword [ebp - 0xc], 0x6a766d0a
mov ecx, dword [eax]
mov eax, dword [0x4a0348]
mov word [ebp - 8], 0x2e6c
cmp eax, dword [ecx + 4]
jle 0x40dd5c
push 0x4a0348
call fcn.00437b73
add esp, 4
cmp dword [0x4a0348], 0xffffffff
jne 0x40dd5c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49e708], eax
mov ax, word [ebp - 8]
push 0x477410
movq qword [0x49e700], xmm0
mov word [0x49e70c], ax
call fcn.00437f9a
push 0x4a0348
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e700
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret
Function at 0x40dd70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x6f7a6b63
mov dword [ebp - 0xc], 0x636f7c68
mov word [ebp - 8], 0x2e6b
mov ecx, dword [eax]
mov eax, dword [0x4a059c]
cmp eax, dword [ecx + 4]
jle 0x40ddfb
push 0x4a059c
call fcn.00437b73
add esp, 4
cmp dword [0x4a059c], 0xffffffff
jne 0x40ddfb
movaps xmm0, xmmword [0x4896d0]
mov ax, word [ebp - 8]
movups xmmword [0x4a0370], xmm0
push 0x4773f0
movq xmm0, qword [ebp - 0x10]
movq qword [0x4a0380], xmm0
mov word [0x4a0388], ax
call fcn.00437f9a
push 0x4a059c
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0370
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40e030
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x6f627f7d
mov dword [ebp - 0x10], 0x5a404b49
mov dword [ebp - 0xc], 0x617c7e0a
mov ecx, dword [eax]
mov eax, dword [0x4a0358]
mov word [ebp - 8], 0x2e6a
cmp eax, dword [ecx + 4]
jle 0x40e0bc
push 0x4a0358
call fcn.00437b73
add esp, 4
cmp dword [0x4a0358], 0xffffffff
jne 0x40e0bc
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49e570], eax
mov ax, word [ebp - 8]
push 0x477360
movq qword [0x49e568], xmm0
mov word [0x49e574], ax
call fcn.00437f9a
push 0x4a0358
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e568
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40e0d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x5a485d43
mov dword [ebp - 0x10], 0x425f5d4b
mov dword [ebp - 0xc], 0x617c7e0a
mov ecx, dword [eax]
mov eax, dword [0x4a0318]
mov word [ebp - 8], 0x2e6a
cmp eax, dword [ecx + 4]
jle 0x40e15c
push 0x4a0318
call fcn.00437b73
add esp, 4
cmp dword [0x4a0318], 0xffffffff
jne 0x40e15c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49e4a0], eax
mov ax, word [ebp - 8]
push 0x477340
movq qword [0x49e498], xmm0
mov word [0x49e4a4], ax
call fcn.00437f9a
push 0x4a0318
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e498
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret
Function at 0x40ec30
Capabilities:
Reference processor manufacturer constants

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x4b4d564b
mov dword [ebp - 0xc], 0x564b0042
mov word [ebp - 8], 0x2e4b
mov ecx, dword [eax]
mov eax, dword [0x49e370]
cmp eax, dword [ecx + 4]
jle 0x40ecad
push 0x49e370
call fcn.00437b73
add esp, 4
cmp dword [0x49e370], 0xffffffff
jne 0x40ecad
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477100
movq qword [0x49ea90], xmm0
mov word [0x49ea98], ax
call fcn.00437f9a
push 0x49e370
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ea90
xor ecx, ebp
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40f300
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x5b4f4d41
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5e5b415a
mov ecx, dword [eax]
mov eax, dword [0x49e634]
mov dword [ebp - 0xc], 0x4b005d4a
mov word [ebp - 8], 0x4b56
cmp eax, dword [ecx + 4]
jle 0x40f395
push 0x49e634
call fcn.00437b73
add esp, 4
cmp dword [0x49e634], 0xffffffff
jne 0x40f395
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0480], eax
mov ax, word [ebp - 8]
push 0x476f70
movq qword [0x4a0478], xmm0
mov word [0x4a0484], ax
mov byte [0x4a0486], bl
call fcn.00437f9a
push 0x49e634
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0478
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret

Function at 0x40f860
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4c425f5d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5d59415c
mov ecx, dword [eax]
mov eax, dword [0x49e2e8]
mov dword [ebp - 0xc], 0x4b005c4b
mov word [ebp - 8], 0x4b56
cmp eax, dword [ecx + 4]
jle 0x40f8f5
push 0x49e2e8
call fcn.00437b73
add esp, 4
cmp dword [0x49e2e8], 0xffffffff
jne 0x40f8f5
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49e2dc], eax
mov ax, word [ebp - 8]
push 0x476e40
movq qword [0x49e2d4], xmm0
mov word [0x49e2e0], ax
mov byte [0x49e2e2], bl
call fcn.00437f9a
push 0x49e2e8
call fcn.00437b29
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e2d4
xor ecx, ebp
pop ebx
call fcn.004379df
mov esp, ebp
pop ebp
ret