joyce8/EMBER2024-capa huggingface dataset:
Function at 0x408b20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x7d495d6b
mov dword [ebp - 0xc], 0x5c4b6546
mov dword [ebp - 8], 0x2e424b40
mov ecx, dword [eax]
mov eax, dword [0x49edfc]
cmp eax, dword [ecx + 4]
jle 0x408b9c
push 0x49edfc
call fcn.0043751a
add esp, 4
cmp dword [0x49edfc], 0xffffffff
jne 0x408b9c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x477d60
movq qword [0x49e668], xmm0
mov dword [0x49e670], eax
call fcn.00437941
push 0x49edfc
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e668
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x408bb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x7d716f68
mov bl, 0x2e
mov dword [ebp - 0x10], 0x4a4b464d
mov ecx, dword [eax]
mov eax, dword [0x49e674]
mov dword [ebp - 0xc], 0x5c4b425b
cmp eax, dword [ecx + 4]
jle 0x408c35
push 0x49e674
call fcn.0043751a
add esp, 4
cmp dword [0x49e674], 0xffffffff
jne 0x408c35
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477d40
movq qword [0x49e4d8], xmm0
mov dword [0x49e4e0], eax
mov byte [0x49e4e4], bl
call fcn.00437941
push 0x49e674
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e4d8
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x408e90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x636f6c63
mov dword [ebp - 0xc], 0x585c4b7d
mov dword [ebp - 8], 0x2e4b4d47
mov ecx, dword [eax]
mov eax, dword [0x49e8ec]
cmp eax, dword [ecx + 4]
jle 0x408f0c
push 0x49e8ec
call fcn.0043751a
add esp, 4
cmp dword [0x49e8ec], 0xffffffff
jne 0x408f0c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x477cb0
movq qword [0x49f578], xmm0
mov dword [0x49f580], eax
call fcn.00437941
push 0x49e8ec
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f578
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret
Function at 0x409070
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4b486f4d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x4f5c684b
mov ecx, dword [eax]
mov eax, dword [0x4a07f4]
mov dword [ebp - 0xc], 0x41594b43
mov word [ebp - 8], 0x455c
cmp eax, dword [ecx + 4]
jle 0x409113
push 0x4a07f4
call fcn.0043751a
add esp, 4
cmp dword [0x4a07f4], 0xffffffff
jne 0x409113
movaps xmm0, xmmword [0x4894e0]
mov eax, dword [ebp - 0xc]
movups xmmword [0x49e644], xmm0
mov dword [0x49e65c], eax
movq xmm0, qword [ebp - 0x14]
mov ax, word [ebp - 8]
push 0x477c40
movq qword [0x49e654], xmm0
mov word [0x49e660], ax
mov byte [0x49e662], bl
call fcn.00437941
push 0x4a07f4
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e644
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x4091c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x4f7a4d63
mov dword [ebp - 0x10], 0x4f63455d
mov dword [ebp - 0xc], 0x4b494f40
mov ecx, dword [eax]
mov eax, dword [0x49edc0]
mov word [ebp - 8], 0x2e5c
cmp eax, dword [ecx + 4]
jle 0x40924c
push 0x49edc0
call fcn.0043751a
add esp, 4
cmp dword [0x49edc0], 0xffffffff
jne 0x40924c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49eb6c], eax
mov ax, word [ebp - 8]
push 0x477c00
movq qword [0x49eb64], xmm0
mov word [0x49eb70], ax
call fcn.00437941
push 0x49edc0
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49eb64
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x409400
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x57544143
mov dword [ebp - 0x10], 0x4c415c5e
mov dword [ebp - 0xc], 0x5b454d4f
mov ecx, dword [eax]
mov eax, dword [0x49f2b0]
mov word [ebp - 8], 0x2e5e
cmp eax, dword [ecx + 4]
jle 0x40948c
push 0x49f2b0
call fcn.0043751a
add esp, 4
cmp dword [0x49f2b0], 0xffffffff
jne 0x40948c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a06d4], eax
mov ax, word [ebp - 8]
push 0x477b90
movq qword [0x4a06cc], xmm0
mov word [0x4a06d8], ax
call fcn.00437941
push 0x49f2b0
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a06cc
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret
Function at 0x4094a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x5a6a5d63
mov dword [ebp - 0xc], 0x5c4b7d5d
mov dword [ebp - 8], 0x2e5c4b58
mov ecx, dword [eax]
mov eax, dword [0x49e900]
cmp eax, dword [ecx + 4]
jle 0x40951c
push 0x49e900
call fcn.0043751a
add esp, 4
cmp dword [0x49e900], 0xffffffff
jne 0x40951c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x477b70
movq qword [0x4a0704], xmm0
mov dword [0x4a070c], eax
call fcn.00437941
push 0x49e900
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0704
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x409690
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x566b7d63
mov bl, 0x2e
mov dword [ebp - 0x10], 0x404f464d
mov ecx, dword [eax]
mov eax, dword [0x49f1f4]
mov dword [ebp - 0xc], 0x7d6b4b49
cmp eax, dword [ecx + 4]
jle 0x409715
push 0x49f1f4
call fcn.0043751a
add esp, 4
cmp dword [0x49f1f4], 0xffffffff
jne 0x409715
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477af0
movq qword [0x49e7d8], xmm0
mov dword [0x49e7e0], eax
mov byte [0x49e7e4], bl
call fcn.00437941
push 0x49f1f4
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e7d8
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x409730
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x566b7d63
mov bl, 0x2e
mov dword [ebp - 0x10], 0x404f464d
mov ecx, dword [eax]
mov eax, dword [0x49ed70]
mov dword [ebp - 0xc], 0x7d674b49
cmp eax, dword [ecx + 4]
jle 0x4097b5
push 0x49ed70
call fcn.0043751a
add esp, 4
cmp dword [0x49ed70], 0xffffffff
jne 0x4097b5
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477ad0
movq qword [0x49f1f8], xmm0
mov dword [0x49f200], eax
mov byte [0x49f204], bl
call fcn.00437941
push 0x49ed70
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f1f8
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret
Function at 0x4097d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x566b7d63
mov bl, 0x2e
mov dword [ebp - 0x10], 0x404f464d
mov ecx, dword [eax]
mov eax, dword [0x49e748]
mov dword [ebp - 0xc], 0x69634b49
mov word [ebp - 8], 0x7a63
cmp eax, dword [ecx + 4]
jle 0x409865
push 0x49e748
call fcn.0043751a
add esp, 4
cmp dword [0x49e748], 0xffffffff
jne 0x409865
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49ea10], eax
mov ax, word [ebp - 8]
push 0x477aa0
movq qword [0x49ea08], xmm0
mov word [0x49ea14], ax
mov byte [0x49ea16], bl
call fcn.00437941
push 0x49e748
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ea08
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x409880
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x566b7d63
mov dword [ebp - 0x10], 0x404f464d
mov dword [ebp - 0xc], 0x7a634b49
mov ecx, dword [eax]
mov eax, dword [0x49ec50]
mov word [ebp - 8], 0x2e6f
cmp eax, dword [ecx + 4]
jle 0x40990c
push 0x49ec50
call fcn.0043751a
add esp, 4
cmp dword [0x49ec50], 0xffffffff
jne 0x40990c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0788], eax
mov ax, word [ebp - 8]
push 0x477a80
movq qword [0x4a0780], xmm0
mov word [0x4a078c], ax
call fcn.00437941
push 0x49ec50
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0780
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x409920
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x566b7d63
mov bl, 0x2e
mov dword [ebp - 0x10], 0x404f464d
mov ecx, dword [eax]
mov eax, dword [0x49f080]
mov dword [ebp - 0xc], 0x6f7d4b49
cmp eax, dword [ecx + 4]
jle 0x4099a5
push 0x49f080
call fcn.0043751a
add esp, 4
cmp dword [0x49f080], 0xffffffff
jne 0x4099a5
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477a60
movq qword [0x49f130], xmm0
mov dword [0x49f138], eax
mov byte [0x49f13c], bl
call fcn.00437941
push 0x49f080
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f130
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret
Function at 0x4099c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x566b7d63
mov dword [ebp - 0x10], 0x404f464d
mov dword [ebp - 0xc], 0x7c7d4b49
mov ecx, dword [eax]
mov eax, dword [0x4a0638]
mov word [ebp - 8], 0x2e7d
cmp eax, dword [ecx + 4]
jle 0x409a4c
push 0x4a0638
call fcn.0043751a
add esp, 4
cmp dword [0x4a0638], 0xffffffff
jne 0x409a4c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a051c], eax
mov ax, word [ebp - 8]
push 0x477a40
movq qword [0x4a0514], xmm0
mov word [0x4a0520], ax
call fcn.00437941
push 0x4a0638
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0514
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x409b50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x62617d63
mov bl, 0x2e
mov dword [ebp - 0xc], 0x7a0a7e6f
mov ecx, dword [eax]
mov eax, dword [0x4a0404]
mov word [ebp - 8], 0x7d7e
cmp eax, dword [ecx + 4]
jle 0x409bd6
push 0x4a0404
call fcn.0043751a
add esp, 4
cmp dword [0x4a0404], 0xffffffff
jne 0x409bd6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x4779f0
movq qword [0x49f024], xmm0
mov word [0x49f02c], ax
mov byte [0x49f02e], bl
call fcn.00437941
push 0x4a0404
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f024
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x409bf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x62617d63
mov dword [ebp - 0x10], 0x7a0a7e6f
mov dword [ebp - 0xc], 0x636f7d7e
mov ecx, dword [eax]
mov eax, dword [0x49eed0]
mov word [ebp - 8], 0x2e6f
cmp eax, dword [ecx + 4]
jle 0x409c7c
push 0x49eed0
call fcn.0043751a
add esp, 4
cmp dword [0x49eed0], 0xffffffff
jne 0x409c7c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49f294], eax
mov ax, word [ebp - 8]
push 0x4779d0
movq qword [0x49f28c], xmm0
mov word [0x49f298], ax
call fcn.00437941
push 0x49eed0
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f28c
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret
Function at 0x409c90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x7f7d7d63
mov bl, 0x2e
mov dword [ebp - 0x10], 0x656c0a62
mov ecx, dword [eax]
mov eax, dword [0x49ea70]
mov dword [ebp - 0xc], 0x766b7e7b
mov word [ebp - 8], 0x6d6b
cmp eax, dword [ecx + 4]
jle 0x409d25
push 0x49ea70
call fcn.0043751a
add esp, 4
cmp dword [0x49ea70], 0xffffffff
jne 0x409d25
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49ef68], eax
mov ax, word [ebp - 8]
push 0x4779a0
movq qword [0x49ef60], xmm0
mov word [0x49ef6c], ax
mov byte [0x49ef6e], bl
call fcn.00437941
push 0x49ea70
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ef60
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x40a4c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x488ff0]
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x14], 0x637d6c7d
mov ecx, dword [eax]
mov eax, dword [0x49ee00]
mov dword [ebp - 0x10], 0x7a676061
mov dword [ebp - 0xc], 0x60677c61
mov word [ebp - 8], 0x2e69
cmp eax, dword [ecx + 4]
jle 0x40a546
push 0x49ee00
call fcn.0043751a
add esp, 4
cmp dword [0x49ee00], 0xffffffff
jne 0x40a546
lea eax, [ebp - 0x24]
mov ecx, 0x49e594
push eax
call fcn.00416a50
push 0x4777b0
call fcn.00437941
push 0x49ee00
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e594
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x40a560
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x488ff0]
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x7c6f667d
mov ecx, dword [eax]
mov eax, dword [0x49e434]
mov dword [ebp - 0xc], 0x67617e6b
mov word [ebp - 8], 0x7a60
mov byte [ebp - 6], 0x2e
cmp eax, dword [ecx + 4]
jle 0x40a5e3
push 0x49e434
call fcn.0043751a
add esp, 4
cmp dword [0x49e434], 0xffffffff
jne 0x40a5e3
lea eax, [ebp - 0x20]
mov ecx, 0x49e510
push eax
call fcn.00416940
push 0x477780
call fcn.00437941
push 0x49e434
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e510
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret
Function at 0x40a6a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x488ff0]
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x7a7d777d
mov ecx, dword [eax]
mov eax, dword [0x4a05bc]
mov dword [ebp - 0xc], 0x6c71636b
mov word [ebp - 8], 0x6d69
mov byte [ebp - 6], 0x2e
cmp eax, dword [ecx + 4]
jle 0x40a723
push 0x4a05bc
call fcn.0043751a
add esp, 4
cmp dword [0x4a05bc], 0xffffffff
jne 0x40a723
lea eax, [ebp - 0x20]
mov ecx, 0x49e498
push eax
call fcn.00416940
push 0x477730
call fcn.00437941
push 0x4a05bc
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e498
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x40ac50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x68786a7e
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5c4b7d7d
mov ecx, dword [eax]
mov eax, dword [0x49e9e8]
mov dword [ebp - 0xc], 0x4b4d4758
cmp eax, dword [ecx + 4]
jle 0x40acd5
push 0x49e9e8
call fcn.0043751a
add esp, 4
cmp dword [0x49e9e8], 0xffffffff
jne 0x40acd5
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x4775e0
movq qword [0x49f1b0], xmm0
mov dword [0x49f1b8], eax
mov byte [0x49f1bc], bl
call fcn.00437941
push 0x49e9e8
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f1b0
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x40ad80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x415e4b7c
mov bl, 0x2e
mov dword [ebp - 0x10], 0x4b7d5a5c
mov ecx, dword [eax]
mov eax, dword [0x49e690]
mov dword [ebp - 0xc], 0x5c4b585c
cmp eax, dword [ecx + 4]
jle 0x40ae05
push 0x49e690
call fcn.0043751a
add esp, 4
cmp dword [0x49e690], 0xffffffff
jne 0x40ae05
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x4775b0
movq qword [0x49ee30], xmm0
mov dword [0x49ee38], eax
mov byte [0x49ee3c], bl
call fcn.00437941
push 0x49e690
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ee30
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret
Function at 0x40b260
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7d786f7d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x47585c4b
mov ecx, dword [eax]
mov eax, dword [0x49e758]
mov word [ebp - 8], 0x4b4d
cmp eax, dword [ecx + 4]
jle 0x40b2e6
push 0x49e758
call fcn.0043751a
add esp, 4
cmp dword [0x49e758], 0xffffffff
jne 0x40b2e6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x4774c0
movq qword [0x49e410], xmm0
mov word [0x49e418], ax
mov byte [0x49e41a], bl
call fcn.00437941
push 0x49e758
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e410
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x40b3f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x4163467d
mov dword [ebp - 0xc], 0x415a4740
mov word [ebp - 8], 0x2e5c
mov ecx, dword [eax]
mov eax, dword [0x49e728]
cmp eax, dword [ecx + 4]
jle 0x40b46d
push 0x49e728
call fcn.0043751a
add esp, 4
cmp dword [0x49e728], 0xffffffff
jne 0x40b46d
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477460
movq qword [0x49e570], xmm0
mov word [0x49e578], ax
call fcn.00437941
push 0x49e728
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e570
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x40b510
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7d4d437d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x47585c4b
mov ecx, dword [eax]
mov eax, dword [0x49e440]
mov word [ebp - 8], 0x4b4d
cmp eax, dword [ecx + 4]
jle 0x40b596
push 0x49e440
call fcn.0043751a
add esp, 4
cmp dword [0x49e440], 0xffffffff
jne 0x40b596
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477430
movq qword [0x49ef4c], xmm0
mov word [0x49ef54], ax
mov byte [0x49ef56], bl
call fcn.00437941
push 0x49e440
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ef4c
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x40b6c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x5e5a407d
mov dword [ebp - 0xc], 0x585c4b7d
mov dword [ebp - 8], 0x2e4b4d47
mov ecx, dword [eax]
mov eax, dword [0x49f0c0]
cmp eax, dword [ecx + 4]
jle 0x40b73c
push 0x49f0c0
call fcn.0043751a
add esp, 4
cmp dword [0x49f0c0], 0xffffffff
jne 0x40b73c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x4773e0
movq qword [0x49e488], xmm0
mov dword [0x49e490], eax
call fcn.00437941
push 0x49f0c0
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e488
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret
Function at 0x40b750
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x465e415d
mov dword [ebp - 0xc], 0x5e5d5d41
mov word [ebp - 8], 0x2e5d
mov ecx, dword [eax]
mov eax, dword [0x49e8e4]
cmp eax, dword [ecx + 4]
jle 0x40b7cd
push 0x49e8e4
call fcn.0043751a
add esp, 4
cmp dword [0x49e8e4], 0xffffffff
jne 0x40b7cd
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x4773c0
movq qword [0x49f030], xmm0
mov word [0x49f038], ax
call fcn.00437941
push 0x49e8e4
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f030
xor ecx, ebp
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x40c050
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x7d627f7d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x6b787c6b
mov ecx, dword [eax]
mov eax, dword [0x49f1f0]
mov dword [ebp - 0xc], 0x6b696f7c
mov word [ebp - 8], 0x7a60
cmp eax, dword [ecx + 4]
jle 0x40c0e5
push 0x49f1f0
call fcn.0043751a
add esp, 4
cmp dword [0x49f1f0], 0xffffffff
jne 0x40c0e5
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49f0ec], eax
mov ax, word [ebp - 8]
push 0x4771c0
movq qword [0x49f0e4], xmm0
mov word [0x49f0f0], ax
mov byte [0x49f0f2], bl
call fcn.00437941
push 0x49f1f0
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f0e4
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret

Function at 0x40c350
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x694d585d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5c4b404b
mov ecx, dword [eax]
mov eax, dword [0x49e7a8]
mov dword [ebp - 0xc], 0x41664d47
mov word [ebp - 8], 0x5a5d
cmp eax, dword [ecx + 4]
jle 0x40c3e5
push 0x49e7a8
call fcn.0043751a
add esp, 4
cmp dword [0x49e7a8], 0xffffffff
jne 0x40c3e5
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a04ec], eax
mov ax, word [ebp - 8]
push 0x477120
movq qword [0x4a04e4], xmm0
mov word [0x4a04f0], ax
mov byte [0x4a04f2], bl
call fcn.00437941
push 0x49e7a8
call fcn.004374d0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a04e4
xor ecx, ebp
pop ebx
call fcn.00437386
mov esp, ebp
pop ebp
ret