joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140012b9c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x57
mov byte [rsp + 0x32], 0x75
mov byte [rsp + 0x33], 0x64
mov byte [rsp + 0x34], 0x53
mov byte [rsp + 0x35], 0x65
mov byte [rsp + 0x36], 0x62
mov byte [rsp + 0x37], 0x62
mov byte [rsp + 0x38], 0x75
mov byte [rsp + 0x39], 0x7e
mov byte [rsp + 0x3a], 0x64
mov byte [rsp + 0x3b], 0x44
mov byte [rsp + 0x3c], 0x78
mov byte [rsp + 0x3d], 0x62
mov byte [rsp + 0x3e], 0x75
mov byte [rsp + 0x3f], 0x71
mov byte [rsp + 0x40], 0x74
mov byte [rsp + 0x41], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6680], eax
jle 0x140012c6c
lea rcx, [0x1401a6680]
call fcn.1400c1360
cmp dword [0x1401a6680], 0xffffffff
jne 0x140012c6c
lea rdx, [0x1401a6678]
lea rcx, [rsp + 0x30]
call fcn.14001ffd0
lea rcx, [0x1401108e4]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6680]
call fcn.1400c12f4
nop
lea rax, [0x1401a6678]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret

Function at 0x140012c88
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x41
mov byte [rsp + 0x32], 0x65
mov byte [rsp + 0x33], 0x75
mov byte [rsp + 0x34], 0x62
mov byte [rsp + 0x35], 0x69
mov byte [rsp + 0x36], 0x40
mov byte [rsp + 0x37], 0x75
mov byte [rsp + 0x38], 0x62
mov byte [rsp + 0x39], 0x76
mov byte [rsp + 0x3a], 0x7f
mov byte [rsp + 0x3b], 0x62
mov byte [rsp + 0x3c], 0x7d
mov byte [rsp + 0x3d], 0x71
mov byte [rsp + 0x3e], 0x7e
mov byte [rsp + 0x3f], 0x73
mov byte [rsp + 0x40], 0x75
mov byte [rsp + 0x41], 0x53
mov byte [rsp + 0x42], 0x7f
mov byte [rsp + 0x43], 0x65
mov byte [rsp + 0x44], 0x7e
mov byte [rsp + 0x45], 0x64
mov byte [rsp + 0x46], 0x75
mov byte [rsp + 0x47], 0x62
mov byte [rsp + 0x48], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a66a0], eax
jle 0x140012d7b
lea rcx, [0x1401a66a0]
call fcn.1400c1360
cmp dword [0x1401a66a0], 0xffffffff
jne 0x140012d7b
lea rdx, [0x1401a6698]
lea rcx, [rsp + 0x30]
call fcn.14002024c
lea rcx, [0x1401108fc]
call fcn.1400c16d0
nop
lea rcx, [0x1401a66a0]
call fcn.1400c12f4
nop
lea rax, [0x1401a6698]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret
Function at 0x140012e4c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x57
mov byte [rsp + 0x32], 0x75
mov byte [rsp + 0x33], 0x64
mov byte [rsp + 0x34], 0x5d
mov byte [rsp + 0x35], 0x7f
mov byte [rsp + 0x36], 0x74
mov byte [rsp + 0x37], 0x65
mov byte [rsp + 0x38], 0x7c
mov byte [rsp + 0x39], 0x75
mov byte [rsp + 0x3a], 0x58
mov byte [rsp + 0x3b], 0x71
mov byte [rsp + 0x3c], 0x7e
mov byte [rsp + 0x3d], 0x74
mov byte [rsp + 0x3e], 0x7c
mov byte [rsp + 0x3f], 0x75
mov byte [rsp + 0x40], 0x51
mov byte [rsp + 0x41], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6320], eax
jle 0x140012f1c
lea rcx, [0x1401a6320]
call fcn.1400c1360
cmp dword [0x1401a6320], 0xffffffff
jne 0x140012f1c
lea rdx, [0x1401a6318]
lea rcx, [rsp + 0x30]
call fcn.14001ffd0
lea rcx, [0x14011092c]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6320]
call fcn.1400c12f4
nop
lea rax, [0x1401a6318]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret

Function at 0x140012f38
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x57
mov byte [rsp + 0x32], 0x75
mov byte [rsp + 0x33], 0x64
mov byte [rsp + 0x34], 0x40
mov byte [rsp + 0x35], 0x62
mov byte [rsp + 0x36], 0x7f
mov byte [rsp + 0x37], 0x73
mov byte [rsp + 0x38], 0x51
mov byte [rsp + 0x39], 0x74
mov byte [rsp + 0x3a], 0x74
mov byte [rsp + 0x3b], 0x62
mov byte [rsp + 0x3c], 0x75
mov byte [rsp + 0x3d], 0x63
mov byte [rsp + 0x3e], 0x63
mov byte [rsp + 0x3f], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6420], eax
jle 0x140012ffe
lea rcx, [0x1401a6420]
call fcn.1400c1360
cmp dword [0x1401a6420], 0xffffffff
jne 0x140012ffe
lea rdx, [0x1401a6418]
lea rcx, [rsp + 0x30]
call fcn.1400209c0
lea rcx, [0x140110944]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6420]
call fcn.1400c12f4
nop
lea rax, [0x1401a6418]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x1400130dc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x41
mov byte [rsp + 0x32], 0x65
mov byte [rsp + 0x33], 0x75
mov byte [rsp + 0x34], 0x62
mov byte [rsp + 0x35], 0x69
mov byte [rsp + 0x36], 0x40
mov byte [rsp + 0x37], 0x75
mov byte [rsp + 0x38], 0x62
mov byte [rsp + 0x39], 0x76
mov byte [rsp + 0x3a], 0x7f
mov byte [rsp + 0x3b], 0x62
mov byte [rsp + 0x3c], 0x7d
mov byte [rsp + 0x3d], 0x71
mov byte [rsp + 0x3e], 0x7e
mov byte [rsp + 0x3f], 0x73
mov byte [rsp + 0x40], 0x75
mov byte [rsp + 0x41], 0x56
mov byte [rsp + 0x42], 0x62
mov byte [rsp + 0x43], 0x75
mov byte [rsp + 0x44], 0x61
mov byte [rsp + 0x45], 0x65
mov byte [rsp + 0x46], 0x75
mov byte [rsp + 0x47], 0x7e
mov byte [rsp + 0x48], 0x73
mov byte [rsp + 0x49], 0x69
mov byte [rsp + 0x4a], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a66b0], eax
jle 0x1400131d9
lea rcx, [0x1401a66b0]
call fcn.1400c1360
cmp dword [0x1401a66b0], 0xffffffff
jne 0x1400131d9
lea rdx, [0x1401a66a8]
lea rcx, [rsp + 0x30]
call fcn.140020320
lea rcx, [0x140110974]
call fcn.1400c16d0
nop
lea rcx, [0x1401a66b0]
call fcn.1400c12f4
nop
lea rax, [0x1401a66a8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret

Function at 0x1400132b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x5c
mov byte [rsp + 0x32], 0x7f
mov byte [rsp + 0x33], 0x71
mov byte [rsp + 0x34], 0x74
mov byte [rsp + 0x35], 0x5c
mov byte [rsp + 0x36], 0x79
mov byte [rsp + 0x37], 0x72
mov byte [rsp + 0x38], 0x62
mov byte [rsp + 0x39], 0x71
mov byte [rsp + 0x3a], 0x62
mov byte [rsp + 0x3b], 0x69
mov byte [rsp + 0x3c], 0x51
mov byte [rsp + 0x3d], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6430], eax
jle 0x14001336c
lea rcx, [0x1401a6430]
call fcn.1400c1360
cmp dword [0x1401a6430], 0xffffffff
jne 0x14001336c
lea rdx, [0x1401a6428]
lea rcx, [rsp + 0x30]
call fcn.140020818
lea rcx, [0x1401109a4]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6430]
call fcn.1400c12f4
nop
lea rax, [0x1401a6428]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x140013388
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x5c
mov byte [rsp + 0x32], 0x7f
mov byte [rsp + 0x33], 0x71
mov byte [rsp + 0x34], 0x74
mov byte [rsp + 0x35], 0x5c
mov byte [rsp + 0x36], 0x79
mov byte [rsp + 0x37], 0x72
mov byte [rsp + 0x38], 0x62
mov byte [rsp + 0x39], 0x71
mov byte [rsp + 0x3a], 0x62
mov byte [rsp + 0x3b], 0x69
mov byte [rsp + 0x3c], 0x51
mov byte [rsp + 0x3d], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6330], eax
jle 0x140013444
lea rcx, [0x1401a6330]
call fcn.1400c1360
cmp dword [0x1401a6330], 0xffffffff
jne 0x140013444
lea rdx, [0x1401a6328]
lea rcx, [rsp + 0x30]
call fcn.140020818
lea rcx, [0x1401109bc]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6330]
call fcn.1400c12f4
nop
lea rax, [0x1401a6328]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret

Function at 0x140013460
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x43
mov byte [rsp + 0x32], 0x69
mov byte [rsp + 0x33], 0x63
mov byte [rsp + 0x34], 0x79
mov byte [rsp + 0x35], 0x7e
mov byte [rsp + 0x36], 0x64
mov byte [rsp + 0x37], 0x75
mov byte [rsp + 0x38], 0x62
mov byte [rsp + 0x39], 0x7e
mov byte [rsp + 0x3a], 0x71
mov byte [rsp + 0x3b], 0x7c
mov byte [rsp + 0x3c], 0x63
mov byte [rsp + 0x3d], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a64c0], eax
jle 0x14001351c
lea rcx, [0x1401a64c0]
call fcn.1400c1360
cmp dword [0x1401a64c0], 0xffffffff
jne 0x14001351c
lea rdx, [0x1401a64b8]
lea rcx, [rsp + 0x30]
call fcn.140020818
lea rcx, [0x1401109d4]
call fcn.1400c16d0
nop
lea rcx, [0x1401a64c0]
call fcn.1400c12f4
nop
lea rax, [0x1401a64b8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x140013538
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x65
mov byte [rsp + 0x32], 0x63
mov byte [rsp + 0x33], 0x75
mov byte [rsp + 0x34], 0x62
mov byte [rsp + 0x35], 0x23
mov byte [rsp + 0x36], 0x22
mov byte [rsp + 0x37], 0x3e
mov byte [rsp + 0x38], 0x74
mov byte [rsp + 0x39], 0x7c
mov byte [rsp + 0x3a], 0x7c
mov byte [rsp + 0x3b], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6440], eax
jle 0x1400135ea
lea rcx, [0x1401a6440]
call fcn.1400c1360
cmp dword [0x1401a6440], 0xffffffff
jne 0x1400135ea
lea rdx, [0x1401a6438]
lea rcx, [rsp + 0x30]
call fcn.140020670
lea rcx, [0x1401109ec]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6440]
call fcn.1400c12f4
nop
lea rax, [0x1401a6438]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret

Function at 0x140013604
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x56
mov byte [rsp + 0x32], 0x62
mov byte [rsp + 0x33], 0x75
mov byte [rsp + 0x34], 0x75
mov byte [rsp + 0x35], 0x5c
mov byte [rsp + 0x36], 0x79
mov byte [rsp + 0x37], 0x72
mov byte [rsp + 0x38], 0x62
mov byte [rsp + 0x39], 0x71
mov byte [rsp + 0x3a], 0x62
mov byte [rsp + 0x3b], 0x69
mov byte [rsp + 0x3c], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6340], eax
jle 0x1400136bb
lea rcx, [0x1401a6340]
call fcn.1400c1360
cmp dword [0x1401a6340], 0xffffffff
jne 0x1400136bb
lea rdx, [0x1401a6338]
lea rcx, [rsp + 0x30]
call fcn.140020744
lea rcx, [0x140110a04]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6340]
call fcn.1400c12f4
nop
lea rax, [0x1401a6338]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x1400136d4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x40
mov byte [rsp + 0x32], 0x62
mov byte [rsp + 0x33], 0x7f
mov byte [rsp + 0x34], 0x73
mov byte [rsp + 0x35], 0x75
mov byte [rsp + 0x36], 0x63
mov byte [rsp + 0x37], 0x63
mov byte [rsp + 0x38], 0x30
mov byte [rsp + 0x39], 0x58
mov byte [rsp + 0x3a], 0x71
mov byte [rsp + 0x3b], 0x73
mov byte [rsp + 0x3c], 0x7b
mov byte [rsp + 0x3d], 0x75
mov byte [rsp + 0x3e], 0x62
mov byte [rsp + 0x3f], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a64d0], eax
jle 0x14001379a
lea rcx, [0x1401a64d0]
call fcn.1400c1360
cmp dword [0x1401a64d0], 0xffffffff
jne 0x14001379a
lea rdx, [0x1401a64c8]
lea rcx, [rsp + 0x30]
call fcn.1400209c0
lea rcx, [0x140110a1c]
call fcn.1400c16d0
nop
lea rcx, [0x1401a64d0]
call fcn.1400c12f4
nop
lea rax, [0x1401a64c8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret

Function at 0x1400137b4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x57
mov byte [rsp + 0x32], 0x75
mov byte [rsp + 0x33], 0x64
mov byte [rsp + 0x34], 0x44
mov byte [rsp + 0x35], 0x7f
mov byte [rsp + 0x36], 0x60
mov byte [rsp + 0x37], 0x47
mov byte [rsp + 0x38], 0x79
mov byte [rsp + 0x39], 0x7e
mov byte [rsp + 0x3a], 0x74
mov byte [rsp + 0x3b], 0x7f
mov byte [rsp + 0x3c], 0x67
mov byte [rsp + 0x3d], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6450], eax
jle 0x140013870
lea rcx, [0x1401a6450]
call fcn.1400c1360
cmp dword [0x1401a6450], 0xffffffff
jne 0x140013870
lea rdx, [0x1401a6448]
lea rcx, [rsp + 0x30]
call fcn.140020818
lea rcx, [0x140110a34]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6450]
call fcn.1400c12f4
nop
lea rax, [0x1401a6448]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x140013940
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x40
mov byte [rsp + 0x32], 0x62
mov byte [rsp + 0x33], 0x7f
mov byte [rsp + 0x34], 0x73
mov byte [rsp + 0x35], 0x75
mov byte [rsp + 0x36], 0x63
mov byte [rsp + 0x37], 0x63
mov byte [rsp + 0x38], 0x30
mov byte [rsp + 0x39], 0x5d
mov byte [rsp + 0x3a], 0x7f
mov byte [rsp + 0x3b], 0x7e
mov byte [rsp + 0x3c], 0x79
mov byte [rsp + 0x3d], 0x64
mov byte [rsp + 0x3e], 0x7f
mov byte [rsp + 0x3f], 0x62
mov byte [rsp + 0x40], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a64e0], eax
jle 0x140013a0b
lea rcx, [0x1401a64e0]
call fcn.1400c1360
cmp dword [0x1401a64e0], 0xffffffff
jne 0x140013a0b
lea rdx, [0x1401a64d8]
lea rcx, [rsp + 0x30]
call fcn.14001fefc
lea rcx, [0x140110a64]
call fcn.1400c16d0
nop
lea rcx, [0x1401a64e0]
call fcn.1400c12f4
nop
lea rax, [0x1401a64d8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret

Function at 0x140013aec
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x65
mov byte [rsp + 0x32], 0x62
mov byte [rsp + 0x33], 0x7c
mov byte [rsp + 0x34], 0x7d
mov byte [rsp + 0x35], 0x7f
mov byte [rsp + 0x36], 0x7e
mov byte [rsp + 0x37], 0x3e
mov byte [rsp + 0x38], 0x74
mov byte [rsp + 0x39], 0x7c
mov byte [rsp + 0x3a], 0x7c
mov byte [rsp + 0x3b], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6360], eax
jle 0x140013b9e
lea rcx, [0x1401a6360]
call fcn.1400c1360
cmp dword [0x1401a6360], 0xffffffff
jne 0x140013b9e
lea rdx, [0x1401a6358]
lea rcx, [rsp + 0x30]
call fcn.140020670
lea rcx, [0x140110a94]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6360]
call fcn.1400c12f4
nop
lea rax, [0x1401a6358]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x140013c60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x57
mov byte [rsp + 0x32], 0x75
mov byte [rsp + 0x33], 0x64
mov byte [rsp + 0x34], 0x47
mov byte [rsp + 0x35], 0x79
mov byte [rsp + 0x36], 0x7e
mov byte [rsp + 0x37], 0x74
mov byte [rsp + 0x38], 0x7f
mov byte [rsp + 0x39], 0x67
mov byte [rsp + 0x3a], 0x44
mov byte [rsp + 0x3b], 0x75
mov byte [rsp + 0x3c], 0x68
mov byte [rsp + 0x3d], 0x64
mov byte [rsp + 0x3e], 0x5c
mov byte [rsp + 0x3f], 0x75
mov byte [rsp + 0x40], 0x7e
mov byte [rsp + 0x41], 0x77
mov byte [rsp + 0x42], 0x64
mov byte [rsp + 0x43], 0x78
mov byte [rsp + 0x44], 0x47
mov byte [rsp + 0x45], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6470], eax
jle 0x140013d44
lea rcx, [0x1401a6470]
call fcn.1400c1360
cmp dword [0x1401a6470], 0xffffffff
jne 0x140013d44
lea rdx, [0x1401a6468]
lea rcx, [rsp + 0x30]
call fcn.140020178
lea rcx, [0x140110ac4]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6470]
call fcn.1400c12f4
nop
lea rax, [0x1401a6468]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret

Function at 0x140013d60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x63
mov byte [rsp + 0x32], 0x78
mov byte [rsp + 0x33], 0x75
mov byte [rsp + 0x34], 0x7c
mov byte [rsp + 0x35], 0x7c
mov byte [rsp + 0x36], 0x23
mov byte [rsp + 0x37], 0x22
mov byte [rsp + 0x38], 0x3e
mov byte [rsp + 0x39], 0x74
mov byte [rsp + 0x3a], 0x7c
mov byte [rsp + 0x3b], 0x7c
mov byte [rsp + 0x3c], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6370], eax
jle 0x140013e17
lea rcx, [0x1401a6370]
call fcn.1400c1360
cmp dword [0x1401a6370], 0xffffffff
jne 0x140013e17
lea rdx, [0x1401a6368]
lea rcx, [rsp + 0x30]
call fcn.140020744
lea rcx, [0x140110adc]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6370]
call fcn.1400c12f4
nop
lea rax, [0x1401a6368]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
Function at 0x140013ee8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x57
mov byte [rsp + 0x32], 0x75
mov byte [rsp + 0x33], 0x64
mov byte [rsp + 0x34], 0x47
mov byte [rsp + 0x35], 0x79
mov byte [rsp + 0x36], 0x7e
mov byte [rsp + 0x37], 0x74
mov byte [rsp + 0x38], 0x7f
mov byte [rsp + 0x39], 0x67
mov byte [rsp + 0x3a], 0x44
mov byte [rsp + 0x3b], 0x75
mov byte [rsp + 0x3c], 0x68
mov byte [rsp + 0x3d], 0x64
mov byte [rsp + 0x3e], 0x47
mov byte [rsp + 0x3f], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6480], eax
jle 0x140013fae
lea rcx, [0x1401a6480]
call fcn.1400c1360
cmp dword [0x1401a6480], 0xffffffff
jne 0x140013fae
lea rdx, [0x1401a6478]
lea rcx, [rsp + 0x30]
call fcn.1400209c0
lea rcx, [0x140110b0c]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6480]
call fcn.1400c12f4
nop
lea rax, [0x1401a6478]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret

Function at 0x140013fc8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x45
mov byte [rsp + 0x32], 0x42
mov byte [rsp + 0x33], 0x5c
mov byte [rsp + 0x34], 0x54
mov byte [rsp + 0x35], 0x7f
mov byte [rsp + 0x36], 0x67
mov byte [rsp + 0x37], 0x7e
mov byte [rsp + 0x38], 0x7c
mov byte [rsp + 0x39], 0x7f
mov byte [rsp + 0x3a], 0x71
mov byte [rsp + 0x3b], 0x74
mov byte [rsp + 0x3c], 0x44
mov byte [rsp + 0x3d], 0x7f
mov byte [rsp + 0x3e], 0x56
mov byte [rsp + 0x3f], 0x79
mov byte [rsp + 0x40], 0x7c
mov byte [rsp + 0x41], 0x75
mov byte [rsp + 0x42], 0x51
mov byte [rsp + 0x43], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6380], eax
jle 0x1400140a2
lea rcx, [0x1401a6380]
call fcn.1400c1360
cmp dword [0x1401a6380], 0xffffffff
jne 0x1400140a2
lea rdx, [0x1401a6378]
lea rcx, [rsp + 0x30]
call fcn.1400200a4
lea rcx, [0x140110b24]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6380]
call fcn.1400c12f4
nop
lea rax, [0x1401a6378]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x58
ret
Function at 0x140014178
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov dword [rsp + 0x20], 0
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x43
mov byte [rsp + 0x32], 0x78
mov byte [rsp + 0x33], 0x75
mov byte [rsp + 0x34], 0x7c
mov byte [rsp + 0x35], 0x7c
mov byte [rsp + 0x36], 0x55
mov byte [rsp + 0x37], 0x68
mov byte [rsp + 0x38], 0x75
mov byte [rsp + 0x39], 0x73
mov byte [rsp + 0x3a], 0x65
mov byte [rsp + 0x3b], 0x64
mov byte [rsp + 0x3c], 0x75
mov byte [rsp + 0x3d], 0x51
mov byte [rsp + 0x3e], 0x10
mov eax, 4
mov eax, eax
mov ecx, dword [0x1401a9440]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1401a6390], eax
jle 0x140014239
lea rcx, [0x1401a6390]
call fcn.1400c1360
cmp dword [0x1401a6390], 0xffffffff
jne 0x140014239
lea rdx, [0x1401a6388]
lea rcx, [rsp + 0x30]
call fcn.1400208ec
lea rcx, [0x140110b54]
call fcn.1400c16d0
nop
lea rcx, [0x1401a6390]
call fcn.1400c12f4
nop
lea rax, [0x1401a6388]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret