joyce8/EMBER2024-capa huggingface dataset:
Function at 0x48f310
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x56756648
push eax
push 0x518330
mov dword [ebp - 0x10], 0x4f736674
mov dword [ebp - 0xc], 0x58666e62
mov byte [ebp - 8], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x518330
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48f400
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x58756648
push eax
push 0x517bfc
mov dword [ebp - 0x10], 0x70656f6a
mov dword [ebp - 0xc], 0x676f4a78
mov word [ebp - 8], 0x70
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517bfc
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48f460
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x58756648
push eax
push 0x517ba8
mov dword [ebp - 0x10], 0x70656f6a
mov dword [ebp - 0xc], 0x79665578
mov word [ebp - 8], 0x4275
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517ba8
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48f4c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x58756648
push eax
push 0x517b98
mov dword [ebp - 0x10], 0x70656f6a
mov dword [ebp - 0xc], 0x79665578
mov word [ebp - 8], 0x5875
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517b98
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48f5d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x63706d48
push eax
push 0x51751c
mov dword [ebp - 0xc], 0x73476d62
mov word [ebp - 8], 0x6666
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x51751c
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48f620
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x63706d48
push eax
push 0x5179bc
mov dword [ebp - 0xc], 0x704d6d62
mov word [ebp - 8], 0x6c64
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x5179bc
call fcn.00472a8d
mov esp, ebp
pop ebp
ret
Function at 0x48f6c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x63706d48
push eax
push 0x5174ac
mov dword [ebp - 0x10], 0x6f566d62
mov dword [ebp - 0xc], 0x6c64706d
mov byte [ebp - 8], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x5174ac
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48f710
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x71626649
push eax
push 0x5177d8
mov dword [ebp - 0xc], 0x706d6d42
mov word [ebp - 8], 0x64
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x5177d8
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48f760
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x71626649
push eax
push 0x517754
mov dword [ebp - 0xc], 0x62667344
mov word [ebp - 8], 0x6675
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517754
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48f990
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x4ca7f0]
lea eax, [ebp - 0x20]
push 0x1a
push eax
push 0x516ed8
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x66546d62
mov dword [ebp - 0xc], 0x706a7564
mov word [ebp - 8], 0x6f
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x516ed8
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48fa50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x4ca970]
lea eax, [ebp - 0x24]
push 0x1d
push eax
push 0x518008
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x14], 0x66457a75
mov dword [ebp - 0x10], 0x6a736474
mov dword [ebp - 0xc], 0x73707571
mov byte [ebp - 8], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x518008
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48fab0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x62776f4a
push eax
push 0x517c60
mov dword [ebp - 0x10], 0x62656a6d
mov dword [ebp - 0xc], 0x66536675
mov word [ebp - 8], 0x7564
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517c60
call fcn.00472a8d
mov esp, ebp
pop ebp
ret
Function at 0x48fca0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x624e444d
push eax
push 0x5177f4
mov dword [ebp - 0x10], 0x73755471
mov dword [ebp - 0xc], 0x42686f6a
mov byte [ebp - 8], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x5177f4
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48fcf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x624e444d
push eax
push 0x517804
mov dword [ebp - 0x10], 0x73755471
mov dword [ebp - 0xc], 0x58686f6a
mov byte [ebp - 8], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517804
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48fde0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6562704d
push eax
push 0x517c70
mov dword [ebp - 0xc], 0x6f70644a
mov word [ebp - 8], 0x42
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517c70
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48fe30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6562704d
push eax
push 0x517320
mov dword [ebp - 0x10], 0x73636a4d
mov dword [ebp - 0xc], 0x427a7362
mov byte [ebp - 8], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517320
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48fe80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6562704d
push eax
push 0x517528
mov dword [ebp - 0x10], 0x73636a4d
mov dword [ebp - 0xc], 0x467a7362
mov word [ebp - 8], 0x4279
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517528
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48fee0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6562704d
push eax
push 0x517310
mov dword [ebp - 0x10], 0x73636a4d
mov dword [ebp - 0xc], 0x587a7362
mov byte [ebp - 8], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517310
call fcn.00472a8d
mov esp, ebp
pop ebp
ret
Function at 0x48ff30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6264704d
push eax
push 0x5171c8
mov dword [ebp - 0xc], 0x6d6d426d
mov word [ebp - 8], 0x6470
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x5171c8
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x48ff80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6264704d
push eax
push 0x5171bc
mov dword [ebp - 0xc], 0x6673476d
mov word [ebp - 8], 0x66
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x5171bc
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x490110
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x4271624e
push eax
push 0x516d60
mov dword [ebp - 0xc], 0x704d656f
mov word [ebp - 8], 0x6562
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x516d60
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x490160
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x5771624e
push eax
push 0x517718
mov dword [ebp - 0x10], 0x5078666a
mov dword [ebp - 0xc], 0x6d6a4767
mov word [ebp - 8], 0x66
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517718
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x490260
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x7665704e
push eax
push 0x517390
mov dword [ebp - 0x10], 0x3334666d
mov dword [ebp - 0xc], 0x74736a47
mov word [ebp - 8], 0x5875
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517390
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x4902c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x7665704e
push eax
push 0x5173a0
mov dword [ebp - 0x10], 0x3334666d
mov dword [ebp - 0xc], 0x7579664f
mov word [ebp - 8], 0x58
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x5173a0
call fcn.00472a8d
mov esp, ebp
pop ebp
ret
Function at 0x490460
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x5675664f
push eax
push 0x516a64
mov dword [ebp - 0x10], 0x48736674
mov dword [ebp - 0xc], 0x6f4a7566
mov word [ebp - 8], 0x7067
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x516a64
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x490560
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6f667150
push eax
push 0x517b44
mov dword [ebp - 0x10], 0x716a6d44
mov dword [ebp - 0xc], 0x73627063
mov word [ebp - 8], 0x65
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517b44
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x4905c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6f667150
push eax
push 0x516e34
mov dword [ebp - 0xc], 0x6f667746
mov word [ebp - 8], 0x4275
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x516e34
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x490610
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6f667150
push eax
push 0x518038
mov dword [ebp - 0x10], 0x6f667746
mov dword [ebp - 0xc], 0x68704d75
mov word [ebp - 8], 0x42
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x518038
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x490670
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xb
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6f667150
push eax
push 0x516e40
mov dword [ebp - 0xc], 0x6f667746
mov word [ebp - 8], 0x5875
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x516e40
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x4907b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6f667150
push eax
push 0x5180dc
mov dword [ebp - 0x10], 0x624e4454
mov dword [ebp - 0xc], 0x6668626f
mov word [ebp - 8], 0x4273
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x5180dc
call fcn.00472a8d
mov esp, ebp
pop ebp
ret
Function at 0x490810
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6f667150
push eax
push 0x5180ec
mov dword [ebp - 0x10], 0x624e4454
mov dword [ebp - 0xc], 0x6668626f
mov word [ebp - 8], 0x5873
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x5180ec
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x490870
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6f667150
push eax
push 0x518178
mov dword [ebp - 0x10], 0x77736654
mov dword [ebp - 0xc], 0x4266646a
mov byte [ebp - 8], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x518178
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x4908c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6f667150
push eax
push 0x518188
mov dword [ebp - 0x10], 0x77736654
mov dword [ebp - 0xc], 0x5866646a
mov byte [ebp - 8], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x518188
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x490b40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x6c666651
push eax
push 0x517c28
mov dword [ebp - 0x10], 0x7474664e
mov dword [ebp - 0xc], 0x42666862
mov byte [ebp - 8], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517c28
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x490be0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x64707351
push eax
push 0x517a2c
mov dword [ebp - 0x10], 0x34747466
mov dword [ebp - 0xc], 0x79664f33
mov word [ebp - 8], 0x5875
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517a2c
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x490f10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x746a6253
push eax
push 0x5177b0
mov dword [ebp - 0x10], 0x64794666
mov dword [ebp - 0xc], 0x6a757166
mov word [ebp - 8], 0x6f70
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x5177b0
call fcn.00472a8d
mov esp, ebp
pop ebp
ret
Function at 0x490f70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x65626653
push eax
push 0x518080
mov dword [ebp - 0x10], 0x6f667746
mov dword [ebp - 0xc], 0x68704d75
mov word [ebp - 8], 0x42
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x518080
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x4910c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x44686653
push eax
push 0x517eb8
mov dword [ebp - 0x10], 0x75626673
mov dword [ebp - 0xc], 0x7a664c66
mov word [ebp - 8], 0x42
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517eb8
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x491120
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x44686653
push eax
push 0x517efc
mov dword [ebp - 0x10], 0x75626673
mov dword [ebp - 0xc], 0x7a664c66
mov word [ebp - 8], 0x58
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517efc
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x4911d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x46686653
push eax
push 0x51829c
mov dword [ebp - 0x10], 0x4c6e766f
mov dword [ebp - 0xc], 0x79467a66
mov word [ebp - 8], 0x42
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x51829c
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x491230
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x46686653
push eax
push 0x518340
mov dword [ebp - 0x10], 0x4c6e766f
mov dword [ebp - 0xc], 0x79467a66
mov word [ebp - 8], 0x58
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x518340
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x4912e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x46686653
push eax
push 0x51828c
mov dword [ebp - 0x10], 0x576e766f
mov dword [ebp - 0xc], 0x66766d62
mov word [ebp - 8], 0x42
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x51828c
call fcn.00472a8d
mov esp, ebp
pop ebp
ret
Function at 0x4913e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x50686653
push eax
push 0x51827c
mov dword [ebp - 0x10], 0x4c6f6671
mov dword [ebp - 0xc], 0x79467a66
mov word [ebp - 8], 0x42
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x51827c
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x491440
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x50686653
push eax
push 0x517f64
mov dword [ebp - 0x10], 0x4c6f6671
mov dword [ebp - 0xc], 0x79467a66
mov word [ebp - 8], 0x58
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517f64
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x491590
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x54686653
push eax
push 0x517f0c
mov dword [ebp - 0x10], 0x62577566
mov dword [ebp - 0xc], 0x4666766d
mov word [ebp - 8], 0x4279
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517f0c
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x4915f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x54686653
push eax
push 0x518320
mov dword [ebp - 0x10], 0x62577566
mov dword [ebp - 0xc], 0x4666766d
mov word [ebp - 8], 0x5879
mov byte [ebp - 6], 0
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x518320
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x491650
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xe
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x56686653
push eax
push 0x517f1c
mov dword [ebp - 0x10], 0x62704d6f
mov dword [ebp - 0xc], 0x7a664c65
mov word [ebp - 8], 0x58
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517f1c
call fcn.00472a8d
mov esp, ebp
pop ebp
ret

Function at 0x491810
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x4df16c]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xa
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x666d6653
push eax
push 0x517d24
mov dword [ebp - 0xc], 0x45667462
mov word [ebp - 8], 0x44
call fcn.00494830
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 0x517d24
call fcn.00472a8d
mov esp, ebp
pop ebp
ret