joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400035d6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x6b
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x5f
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x5d
mov byte [rsp + 0x2b], 0x52
mov byte [rsp + 0x2c], 0x63
mov byte [rsp + 0x2d], 0x5e
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x140599e20], 0
jne 0x14000367a
mov byte [0x140599e43], 1
mov eax, 0
lea rcx, [0x140599e30]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003655
mov byte [0x140599e20], 1
lea rcx, [0x140001cfd]
call fcn.1400014f0
lea rax, [0x140599e30]
add rsp, 0x48
ret

Function at 0x140003686
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x65
mov byte [rsp + 0x22], 0x60
mov byte [rsp + 0x23], 0x65
mov byte [rsp + 0x24], 0x52
mov byte [rsp + 0x25], 0x5d
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x55
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x5d
mov byte [rsp + 0x2a], 0x60
mov byte [rsp + 0x2b], 0x54
mov byte [rsp + 0x2c], 0x5c
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x14059a498], 0
jne 0x140003725
mov byte [0x14059a4b2], 1
mov eax, 0
lea rcx, [0x14059a4a0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003700
mov byte [0x14059a498], 1
lea rcx, [0x1400017ed]
call fcn.1400014f0
lea rax, [0x14059a4a0]
add rsp, 0x48
ret

Function at 0x140003732
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x5e
mov byte [rsp + 0x22], 0x52
mov byte [rsp + 0x23], 0x5d
mov byte [rsp + 0x24], 0x68
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x63
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x6a
mov byte [rsp + 0x2a], 0x65
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x64
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x14059a328], 0
jne 0x1400037d1
mov byte [0x14059a342], 1
mov eax, 0
lea rcx, [0x14059a330]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x1400037ac
mov byte [0x14059a328], 1
lea rcx, [0x14000190d]
call fcn.1400014f0
lea rax, [0x14059a330]
add rsp, 0x48
ret
Function at 0x1400037de
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x5e
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x5a
mov byte [rsp + 0x29], 0x64
mov byte [rsp + 0x2a], 0x60
mov byte [rsp + 0x2b], 0x57
mov byte [rsp + 0x2c], 0x65
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x140599ec8], 0
jne 0x14000387d
mov byte [0x140599ee2], 1
mov eax, 0
lea rcx, [0x140599ed0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003858
mov byte [0x140599ec8], 1
lea rcx, [0x140001c85]
call fcn.1400014f0
lea rax, [0x140599ed0]
add rsp, 0x48
ret

Function at 0x14000388a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x1e
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x54
mov byte [rsp + 0x2a], 0x66
mov byte [rsp + 0x2b], 0x63
mov byte [rsp + 0x2c], 0x56
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x140599ea0], 0
jne 0x140003929
mov byte [0x140599ec2], 1
mov eax, 0
lea rcx, [0x140599eb0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003904
mov byte [0x140599ea0], 1
lea rcx, [0x140001c9d]
call fcn.1400014f0
lea rax, [0x140599eb0]
add rsp, 0x48
ret

Function at 0x140003936
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x54
mov byte [rsp + 0x26], 0x54
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x5f
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x63
mov byte [rsp + 0x2d], 0x1f
mov byte [rsp + 0x2e], 0x54
mov byte [rsp + 0x2f], 0x60
mov byte [rsp + 0x30], 0x5e
mov byte [rsp + 0x31], 0xf1
cmp byte [0x140599da0], 0
jne 0x1400039d5
mov byte [0x140599dc2], 1
mov eax, 0
lea rcx, [0x140599db0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x1400039b0
mov byte [0x140599da0], 1
lea rcx, [0x140001d5d]
call fcn.1400014f0
lea rax, [0x140599db0]
add rsp, 0x48
ret
Function at 0x1400039e2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x65
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x65
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x5d
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x55
mov byte [rsp + 0x2c], 0x53
mov byte [rsp + 0x2d], 0x5d
mov byte [rsp + 0x2e], 0x60
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x5c
mov byte [rsp + 0x31], 0x1f
mov byte [rsp + 0x32], 0x54
mov byte [rsp + 0x33], 0x60
mov byte [rsp + 0x34], 0x5e
mov byte [rsp + 0x35], 0xf1
cmp byte [0x14059a470], 0
jne 0x140003a95
mov byte [0x14059a496], 1
mov eax, 0
lea rcx, [0x14059a480]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140003a70
mov byte [0x14059a470], 1
lea rcx, [0x140001805]
call fcn.1400014f0
lea rax, [0x14059a480]
add rsp, 0x48
ret

Function at 0x140003aa2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5e
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x68
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x53
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x65
mov byte [rsp + 0x2f], 0x56
mov byte [rsp + 0x30], 0x64
mov byte [rsp + 0x31], 0x1f
mov byte [rsp + 0x32], 0x54
mov byte [rsp + 0x33], 0x60
mov byte [rsp + 0x34], 0x5e
mov byte [rsp + 0x35], 0xf1
cmp byte [0x14059a308], 0
jne 0x140003b55
mov byte [0x14059a326], 1
mov eax, 0
lea rcx, [0x14059a310]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x16
jne 0x140003b30
mov byte [0x14059a308], 1
lea rcx, [0x140001925]
call fcn.1400014f0
lea rax, [0x14059a310]
add rsp, 0x48
ret

Function at 0x140003b62
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5e
mov byte [rsp + 0x26], 0x54
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x57
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x56
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a3f8], 0
jne 0x140003bf7
mov byte [0x14059a410], 1
mov eax, 0
lea rcx, [0x14059a400]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003bd2
mov byte [0x14059a3f8], 1
lea rcx, [0x140001865]
call fcn.1400014f0
lea rax, [0x14059a400]
add rsp, 0x38
ret
Function at 0x140003c04
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5f
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x63
mov byte [rsp + 0x28], 0x65
mov byte [rsp + 0x29], 0x60
mov byte [rsp + 0x2a], 0x5f
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a210], 0
jne 0x140003c99
mov byte [0x14059a230], 1
mov eax, 0
lea rcx, [0x14059a220]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003c74
mov byte [0x14059a210], 1
lea rcx, [0x1400019e5]
call fcn.1400014f0
lea rax, [0x14059a220]
add rsp, 0x38
ret

Function at 0x140003ca6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x6b
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x5d
mov byte [rsp + 0x29], 0x6a
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a1a0], 0
jne 0x140003d3b
mov byte [0x14059a1c0], 1
mov eax, 0
lea rcx, [0x14059a1b0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003d16
mov byte [0x14059a1a0], 1
lea rcx, [0x140001a45]
call fcn.1400014f0
lea rax, [0x14059a1b0]
add rsp, 0x38
ret

Function at 0x140003d48
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x64
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x61
mov byte [rsp + 0x28], 0x59
mov byte [rsp + 0x29], 0x60
mov byte [rsp + 0x2a], 0x64
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a0a8], 0
jne 0x140003ddd
mov byte [0x14059a0c0], 1
mov eax, 0
lea rcx, [0x14059a0b0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003db8
mov byte [0x14059a0a8], 1
lea rcx, [0x140001b05]
call fcn.1400014f0
lea rax, [0x14059a0b0]
add rsp, 0x38
ret
Function at 0x140003dea
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x59
mov byte [rsp + 0x27], 0x5f
mov byte [rsp + 0x28], 0x5d
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x53
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a008], 0
jne 0x140003e7f
mov byte [0x14059a020], 1
mov eax, 0
lea rcx, [0x14059a010]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003e5a
mov byte [0x14059a008], 1
lea rcx, [0x140001b7d]
call fcn.1400014f0
lea rax, [0x14059a010]
add rsp, 0x38
ret

Function at 0x140003e8c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x54
mov byte [rsp + 0x26], 0x5d
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x5e
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x67
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x5f
mov byte [rsp + 0x2d], 0x56
mov byte [rsp + 0x2e], 0x65
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140599f30], 0
jne 0x140003f21
mov byte [0x140599f50], 1
mov eax, 0
lea rcx, [0x140599f40]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003efc
mov byte [0x140599f30], 1
lea rcx, [0x140001c25]
call fcn.1400014f0
lea rax, [0x140599f40]
add rsp, 0x38
ret

Function at 0x140003f2e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x65
mov byte [rsp + 0x22], 0x63
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x5f
mov byte [rsp + 0x25], 0x55
mov byte [rsp + 0x26], 0x5e
mov byte [rsp + 0x27], 0x5a
mov byte [rsp + 0x28], 0x54
mov byte [rsp + 0x29], 0x63
mov byte [rsp + 0x2a], 0x60
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140599dc8], 0
jne 0x140003fc3
mov byte [0x140599de0], 1
mov eax, 0
lea rcx, [0x140599dd0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140003f9e
mov byte [0x140599dc8], 1
lea rcx, [0x140001d45]
call fcn.1400014f0
lea rax, [0x140599dd0]
add rsp, 0x38
ret
Function at 0x140003fd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x67
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x63
mov byte [rsp + 0x24], 0x66
mov byte [rsp + 0x25], 0x64
mov byte [rsp + 0x26], 0x65
mov byte [rsp + 0x27], 0x60
mov byte [rsp + 0x28], 0x65
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x5d
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140599d48], 0
jne 0x140004065
mov byte [0x140599d60], 1
mov eax, 0
lea rcx, [0x140599d50]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x10
jne 0x140004040
mov byte [0x140599d48], 1
lea rcx, [0x140001da5]
call fcn.1400014f0
lea rax, [0x140599d50]
add rsp, 0x38
ret

Function at 0x140004072
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x53
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x65
mov byte [rsp + 0x28], 0x55
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x5f
mov byte [rsp + 0x2d], 0x55
mov byte [rsp + 0x2e], 0x56
mov byte [rsp + 0x2f], 0x63
mov byte [rsp + 0x30], 0x1f
mov byte [rsp + 0x31], 0x54
mov byte [rsp + 0x32], 0x60
mov byte [rsp + 0x33], 0x5e
mov byte [rsp + 0x34], 0xf1
cmp byte [0x14059a3b0], 0
jne 0x140004120
mov byte [0x14059a3d5], 1
mov eax, 0
lea rcx, [0x14059a3c0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x15
jne 0x1400040fb
mov byte [0x14059a3b0], 1
lea rcx, [0x140001895]
call fcn.1400014f0
lea rax, [0x14059a3c0]
add rsp, 0x48
ret

Function at 0x14000412c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x59
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x5e
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x1f
mov byte [rsp + 0x2a], 0x64
mov byte [rsp + 0x2b], 0x60
mov byte [rsp + 0x2c], 0x61
mov byte [rsp + 0x2d], 0x59
mov byte [rsp + 0x2e], 0x60
mov byte [rsp + 0x2f], 0x64
mov byte [rsp + 0x30], 0x1f
mov byte [rsp + 0x31], 0x54
mov byte [rsp + 0x32], 0x60
mov byte [rsp + 0x33], 0x5e
mov byte [rsp + 0x34], 0xf1
cmp byte [0x14059a068], 0
jne 0x1400041da
mov byte [0x14059a085], 1
mov eax, 0
lea rcx, [0x14059a070]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x15
jne 0x1400041b5
mov byte [0x14059a068], 1
lea rcx, [0x140001b35]
call fcn.1400014f0
lea rax, [0x14059a070]
add rsp, 0x48
ret
Function at 0x1400041e6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x61
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x5f
mov byte [rsp + 0x28], 0x55
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x64
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x66
mov byte [rsp + 0x2e], 0x63
mov byte [rsp + 0x2f], 0x5a
mov byte [rsp + 0x30], 0x65
mov byte [rsp + 0x31], 0x6a
mov byte [rsp + 0x32], 0x1f
mov byte [rsp + 0x33], 0x54
mov byte [rsp + 0x34], 0x60
mov byte [rsp + 0x35], 0x5e
mov byte [rsp + 0x36], 0xf1
cmp byte [0x14059a2c0], 0
jne 0x14000429e
mov byte [0x14059a2e7], 1
mov eax, 0
lea rcx, [0x14059a2d0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x17
jne 0x140004279
mov byte [0x14059a2c0], 1
lea rcx, [0x140001955]
call fcn.1400014f0
lea rax, [0x14059a2d0]
add rsp, 0x48
ret

Function at 0x1400042aa
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x66
mov byte [rsp + 0x26], 0x64
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x1f
mov byte [rsp + 0x29], 0x5c
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x64
mov byte [rsp + 0x2c], 0x61
mov byte [rsp + 0x2d], 0x56
mov byte [rsp + 0x2e], 0x63
mov byte [rsp + 0x2f], 0x64
mov byte [rsp + 0x30], 0x5c
mov byte [rsp + 0x31], 0x6a
mov byte [rsp + 0x32], 0x1f
mov byte [rsp + 0x33], 0x54
mov byte [rsp + 0x34], 0x60
mov byte [rsp + 0x35], 0x5e
mov byte [rsp + 0x36], 0xf1
cmp byte [0x14059a120], 0
jne 0x140004362
mov byte [0x14059a147], 1
mov eax, 0
lea rcx, [0x14059a130]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x17
jne 0x14000433d
mov byte [0x14059a120], 1
lea rcx, [0x140001aa5]
call fcn.1400014f0
lea rax, [0x14059a130]
add rsp, 0x48
ret

Function at 0x14000436e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x61
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x5f
mov byte [rsp + 0x28], 0x55
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x64
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x66
mov byte [rsp + 0x2e], 0x63
mov byte [rsp + 0x2f], 0x5a
mov byte [rsp + 0x30], 0x65
mov byte [rsp + 0x31], 0x6a
mov byte [rsp + 0x32], 0x1f
mov byte [rsp + 0x33], 0x54
mov byte [rsp + 0x34], 0x60
mov byte [rsp + 0x35], 0x5e
mov byte [rsp + 0x36], 0xf1
cmp byte [0x140599e68], 0
jne 0x140004426
mov byte [0x140599e87], 1
mov eax, 0
lea rcx, [0x140599e70]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x17
jne 0x140004401
mov byte [0x140599e68], 1
lea rcx, [0x140001ccd]
call fcn.1400014f0
lea rax, [0x140599e70]
add rsp, 0x48
ret
Function at 0x140004432
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x22], 0x11
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x5e
mov byte [rsp + 0x25], 0x64
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x60
mov byte [rsp + 0x29], 0x57
mov byte [rsp + 0x2a], 0x65
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140599ee8], 0
jne 0x1400044bd
mov byte [0x140599efe], 1
mov eax, 0
lea rcx, [0x140599ef0]
movzx edx, byte [rsp + rax + 0x22]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xe
jne 0x140004498
mov byte [0x140599ee8], 1
lea rcx, [0x140001c6d]
call fcn.1400014f0
lea rax, [0x140599ef0]
add rsp, 0x38
ret

Function at 0x1400044ca
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x22], 0x11
mov byte [rsp + 0x23], 0x54
mov byte [rsp + 0x24], 0x54
mov byte [rsp + 0x25], 0x5d
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x5f
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140599d88], 0
jne 0x140004555
mov byte [0x140599d9e], 1
mov eax, 0
lea rcx, [0x140599d90]
movzx edx, byte [rsp + rax + 0x22]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xe
jne 0x140004530
mov byte [0x140599d88], 1
lea rcx, [0x140001d75]
call fcn.1400014f0
lea rax, [0x140599d90]
add rsp, 0x38
ret

Function at 0x140004562
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x65
mov byte [rsp + 0x26], 0x63
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x5f
mov byte [rsp + 0x29], 0x55
mov byte [rsp + 0x2a], 0x5e
mov byte [rsp + 0x2b], 0x5a
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x63
mov byte [rsp + 0x2e], 0x60
mov byte [rsp + 0x2f], 0x1f
mov byte [rsp + 0x30], 0x54
mov byte [rsp + 0x31], 0x60
mov byte [rsp + 0x32], 0x5e
mov byte [rsp + 0x33], 0xf1
cmp byte [0x140599de8], 0
jne 0x14000460b
mov byte [0x140599e04], 1
mov eax, 0
lea rcx, [0x140599df0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x14
jne 0x1400045e6
mov byte [0x140599de8], 1
lea rcx, [0x140001d2d]
call fcn.1400014f0
lea rax, [0x140599df0]
add rsp, 0x48
ret
Function at 0x140004618
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x67
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x63
mov byte [rsp + 0x28], 0x66
mov byte [rsp + 0x29], 0x64
mov byte [rsp + 0x2a], 0x65
mov byte [rsp + 0x2b], 0x60
mov byte [rsp + 0x2c], 0x65
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x5d
mov byte [rsp + 0x2f], 0x1f
mov byte [rsp + 0x30], 0x54
mov byte [rsp + 0x31], 0x60
mov byte [rsp + 0x32], 0x5e
mov byte [rsp + 0x33], 0xf1
cmp byte [0x140599d68], 0
jne 0x1400046c1
mov byte [0x140599d84], 1
mov eax, 0
lea rcx, [0x140599d70]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x14
jne 0x14000469c
mov byte [0x140599d68], 1
lea rcx, [0x140001d8d]
call fcn.1400014f0
lea rax, [0x140599d70]
add rsp, 0x48
ret

Function at 0x1400048ec
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov word [rsp + 0x20], 0x3d
mov word [rsp + 0x22], 0x46
mov word [rsp + 0x24], 0x59
mov word [rsp + 0x26], 0x51
mov word [rsp + 0x28], 0x4d
mov word [rsp + 0x2a], 0x50
mov word [rsp + 0x2c], 0x53
mov word [rsp + 0x2e], 0x46
mov word [rsp + 0x30], 0x53
mov word [rsp + 0x32], 0xf
mov word [rsp + 0x34], 0x46
mov word [rsp + 0x36], 0x59
mov word [rsp + 0x38], 0x46
mov word [rsp + 0x3a], 0xe1
cmp byte [0x140599048], 0
jne 0x140004994
mov byte [0x14059906c], 1
mov eax, 0
lea rcx, [0x140599050]
movzx edx, word [rsp + rax*2 + 0x20]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xe
jne 0x14000496e
mov byte [0x140599048], 1
lea rcx, [0x140001f4d]
call fcn.1400014f0
lea rax, [0x140599050]
add rsp, 0x48
ret