joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4099e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x566b7d63
mov dword [ebp - 0x10], 0x404f464d
mov dword [ebp - 0xc], 0x7c7d4b49
mov ecx, dword [eax]
mov eax, dword [0x4a0830]
mov word [ebp - 8], 0x2e7d
cmp eax, dword [ecx + 4]
jle 0x409a6c
push 0x4a0830
call fcn.004374fa
add esp, 4
cmp dword [0x4a0830], 0xffffffff
jne 0x409a6c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0714], eax
mov ax, word [ebp - 8]
push 0x477b00
movq qword [0x4a070c], xmm0
mov word [0x4a0718], ax
call fcn.00437921
push 0x4a0830
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a070c
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x409b70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x62617d63
mov bl, 0x2e
mov dword [ebp - 0xc], 0x7a0a7e6f
mov ecx, dword [eax]
mov eax, dword [0x4a05fc]
mov word [ebp - 8], 0x7d7e
cmp eax, dword [ecx + 4]
jle 0x409bf6
push 0x4a05fc
call fcn.004374fa
add esp, 4
cmp dword [0x4a05fc], 0xffffffff
jne 0x409bf6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477ab0
movq qword [0x4a01e4], xmm0
mov word [0x4a01ec], ax
mov byte [0x4a01ee], bl
call fcn.00437921
push 0x4a05fc
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a01e4
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x409c10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x62617d63
mov dword [ebp - 0x10], 0x7a0a7e6f
mov dword [ebp - 0xc], 0x636f7d7e
mov ecx, dword [eax]
mov eax, dword [0x4a008c]
mov word [ebp - 8], 0x2e6f
cmp eax, dword [ecx + 4]
jle 0x409c9c
push 0x4a008c
call fcn.004374fa
add esp, 4
cmp dword [0x4a008c], 0xffffffff
jne 0x409c9c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0454], eax
mov ax, word [ebp - 8]
push 0x477a90
movq qword [0x4a044c], xmm0
mov word [0x4a0458], ax
call fcn.00437921
push 0x4a008c
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a044c
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret
Function at 0x409cb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x7f7d7d63
mov bl, 0x2e
mov dword [ebp - 0x10], 0x656c0a62
mov ecx, dword [eax]
mov eax, dword [0x49ec34]
mov dword [ebp - 0xc], 0x766b7e7b
mov word [ebp - 8], 0x6d6b
cmp eax, dword [ecx + 4]
jle 0x409d45
push 0x49ec34
call fcn.004374fa
add esp, 4
cmp dword [0x49ec34], 0xffffffff
jne 0x409d45
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0128], eax
mov ax, word [ebp - 8]
push 0x477a60
movq qword [0x4a0120], xmm0
mov word [0x4a012c], ax
mov byte [0x4a012e], bl
call fcn.00437921
push 0x49ec34
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0120
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40a4e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x489610]
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x14], 0x637d6c7d
mov ecx, dword [eax]
mov eax, dword [0x49ffb8]
mov dword [ebp - 0x10], 0x7a676061
mov dword [ebp - 0xc], 0x60677c61
mov word [ebp - 8], 0x2e69
cmp eax, dword [ecx + 4]
jle 0x40a566
push 0x49ffb8
call fcn.004374fa
add esp, 4
cmp dword [0x49ffb8], 0xffffffff
jne 0x40a566
lea eax, [ebp - 0x24]
mov ecx, 0x49e594
push eax
call fcn.00416a30
push 0x477870
call fcn.00437921
push 0x49ffb8
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e594
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40a580
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x489610]
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x7c6f667d
mov ecx, dword [eax]
mov eax, dword [0x49e434]
mov dword [ebp - 0xc], 0x67617e6b
mov word [ebp - 8], 0x7a60
mov byte [ebp - 6], 0x2e
cmp eax, dword [ecx + 4]
jle 0x40a603
push 0x49e434
call fcn.004374fa
add esp, 4
cmp dword [0x49e434], 0xffffffff
jne 0x40a603
lea eax, [ebp - 0x20]
mov ecx, 0x49e510
push eax
call fcn.00416920
push 0x477840
call fcn.00437921
push 0x49e434
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e510
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret
Function at 0x40a6c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x489610]
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x7a7d777d
mov ecx, dword [eax]
mov eax, dword [0x4a07b4]
mov dword [ebp - 0xc], 0x6c71636b
mov word [ebp - 8], 0x6d69
mov byte [ebp - 6], 0x2e
cmp eax, dword [ecx + 4]
jle 0x40a743
push 0x4a07b4
call fcn.004374fa
add esp, 4
cmp dword [0x4a07b4], 0xffffffff
jne 0x40a743
lea eax, [ebp - 0x20]
mov ecx, 0x49e498
push eax
call fcn.00416920
push 0x4777f0
call fcn.00437921
push 0x4a07b4
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e498
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40ac70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x68786a7e
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5c4b7d7d
mov ecx, dword [eax]
mov eax, dword [0x49ebac]
mov dword [ebp - 0xc], 0x4b4d4758
cmp eax, dword [ecx + 4]
jle 0x40acf5
push 0x49ebac
call fcn.004374fa
add esp, 4
cmp dword [0x49ebac], 0xffffffff
jne 0x40acf5
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x4776a0
movq qword [0x4a0370], xmm0
mov dword [0x4a0378], eax
mov byte [0x4a037c], bl
call fcn.00437921
push 0x49ebac
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0370
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40ada0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x415e4b7c
mov bl, 0x2e
mov dword [ebp - 0x10], 0x4b7d5a5c
mov ecx, dword [eax]
mov eax, dword [0x49e690]
mov dword [ebp - 0xc], 0x5c4b585c
cmp eax, dword [ecx + 4]
jle 0x40ae25
push 0x49e690
call fcn.004374fa
add esp, 4
cmp dword [0x49e690], 0xffffffff
jne 0x40ae25
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477670
movq qword [0x49ffe8], xmm0
mov dword [0x49fff0], eax
mov byte [0x49fff4], bl
call fcn.00437921
push 0x49e690
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ffe8
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret
Function at 0x40b280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7d786f7d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x47585c4b
mov ecx, dword [eax]
mov eax, dword [0x49e758]
mov word [ebp - 8], 0x4b4d
cmp eax, dword [ecx + 4]
jle 0x40b306
push 0x49e758
call fcn.004374fa
add esp, 4
cmp dword [0x49e758], 0xffffffff
jne 0x40b306
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477580
movq qword [0x49e410], xmm0
mov word [0x49e418], ax
mov byte [0x49e41a], bl
call fcn.00437921
push 0x49e758
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e410
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40b410
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x4163467d
mov dword [ebp - 0xc], 0x415a4740
mov word [ebp - 8], 0x2e5c
mov ecx, dword [eax]
mov eax, dword [0x49e728]
cmp eax, dword [ecx + 4]
jle 0x40b48d
push 0x49e728
call fcn.004374fa
add esp, 4
cmp dword [0x49e728], 0xffffffff
jne 0x40b48d
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477520
movq qword [0x49e570], xmm0
mov word [0x49e578], ax
call fcn.00437921
push 0x49e728
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e570
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40b530
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7d4d437d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x47585c4b
mov ecx, dword [eax]
mov eax, dword [0x49e440]
mov word [ebp - 8], 0x4b4d
cmp eax, dword [ecx + 4]
jle 0x40b5b6
push 0x49e440
call fcn.004374fa
add esp, 4
cmp dword [0x49e440], 0xffffffff
jne 0x40b5b6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x4774f0
movq qword [0x4a010c], xmm0
mov word [0x4a0114], ax
mov byte [0x4a0116], bl
call fcn.00437921
push 0x49e440
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a010c
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40b6e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x5e5a407d
mov dword [ebp - 0xc], 0x585c4b7d
mov dword [ebp - 8], 0x2e4b4d47
mov ecx, dword [eax]
mov eax, dword [0x4a0280]
cmp eax, dword [ecx + 4]
jle 0x40b75c
push 0x4a0280
call fcn.004374fa
add esp, 4
cmp dword [0x4a0280], 0xffffffff
jne 0x40b75c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x4774a0
movq qword [0x49e488], xmm0
mov dword [0x49e490], eax
call fcn.00437921
push 0x4a0280
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e488
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret
Function at 0x40b770
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x465e415d
mov dword [ebp - 0xc], 0x5e5d5d41
mov word [ebp - 8], 0x2e5d
mov ecx, dword [eax]
mov eax, dword [0x49eaa8]
cmp eax, dword [ecx + 4]
jle 0x40b7ed
push 0x49eaa8
call fcn.004374fa
add esp, 4
cmp dword [0x49eaa8], 0xffffffff
jne 0x40b7ed
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477480
movq qword [0x4a01f0], xmm0
mov word [0x4a01f8], ax
call fcn.00437921
push 0x49eaa8
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a01f0
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40c080
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x7d627f7d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x6b787c6b
mov ecx, dword [eax]
mov eax, dword [0x4a03b0]
mov dword [ebp - 0xc], 0x6b696f7c
mov word [ebp - 8], 0x7a60
cmp eax, dword [ecx + 4]
jle 0x40c115
push 0x4a03b0
call fcn.004374fa
add esp, 4
cmp dword [0x4a03b0], 0xffffffff
jne 0x40c115
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a02ac], eax
mov ax, word [ebp - 8]
push 0x477280
movq qword [0x4a02a4], xmm0
mov word [0x4a02b0], ax
mov byte [0x4a02b2], bl
call fcn.00437921
push 0x4a03b0
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a02a4
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40c380
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x694d585d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5c4b404b
mov ecx, dword [eax]
mov eax, dword [0x49e7a8]
mov dword [ebp - 0xc], 0x41664d47
mov word [ebp - 8], 0x5a5d
cmp eax, dword [ecx + 4]
jle 0x40c415
push 0x49e7a8
call fcn.004374fa
add esp, 4
cmp dword [0x49e7a8], 0xffffffff
jne 0x40c415
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a06e4], eax
mov ax, word [ebp - 8]
push 0x4771e0
movq qword [0x4a06dc], xmm0
mov word [0x4a06e8], ax
mov byte [0x4a06ea], bl
call fcn.00437921
push 0x49e7a8
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a06dc
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret
Function at 0x40c430
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7147595d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x5a424748
mov ecx, dword [eax]
mov eax, dword [0x49e6e8]
mov word [ebp - 8], 0x5c4b
cmp eax, dword [ecx + 4]
jle 0x40c4b6
push 0x49e6e8
call fcn.004374fa
add esp, 4
cmp dword [0x49e6e8], 0xffffffff
jne 0x40c4b6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x4771c0
movq qword [0x4a0818], xmm0
mov word [0x4a0820], ax
mov byte [0x4a0822], bl
call fcn.00437921
push 0x49e6e8
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0818
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40c4d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x7147595d
mov dword [ebp - 0xc], 0x585c4b5d
mov dword [ebp - 8], 0x2e4b4d47
mov ecx, dword [eax]
mov eax, dword [0x4a0780]
cmp eax, dword [ecx + 4]
jle 0x40c54c
push 0x4a0780
call fcn.004374fa
add esp, 4
cmp dword [0x4a0780], 0xffffffff
jne 0x40c54c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x4771a0
movq qword [0x4a01a0], xmm0
mov dword [0x4a01a8], eax
call fcn.00437921
push 0x4a0780
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a01a0
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40c930
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x4d4f6c43
mov ecx, dword [eax]
mov eax, dword [0x49ea68]
mov dword [ebp - 0xc], 0x7d5e5b45
mov word [ebp - 8], 0x4d58
cmp eax, dword [ecx + 4]
jle 0x40c9c5
push 0x49ea68
call fcn.004374fa
add esp, 4
cmp dword [0x49ea68], 0xffffffff
jne 0x40c9c5
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a05f0], eax
mov ax, word [ebp - 8]
push 0x4770a0
movq qword [0x4a05e8], xmm0
mov word [0x4a05f4], ax
mov byte [0x4a05f6], bl
call fcn.00437921
push 0x49ea68
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a05e8
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret
Function at 0x40c9e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x415c6c43
mov ecx, dword [eax]
mov eax, dword [0x49ecac]
mov dword [ebp - 0xc], 0x7d5c4b45
mov word [ebp - 8], 0x4d58
cmp eax, dword [ecx + 4]
jle 0x40ca75
push 0x49ecac
call fcn.004374fa
add esp, 4
cmp dword [0x49ecac], 0xffffffff
jne 0x40ca75
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0934], eax
mov ax, word [ebp - 8]
push 0x477070
movq qword [0x4a092c], xmm0
mov word [0x4a0938], ax
mov byte [0x4a093a], bl
call fcn.00437921
push 0x49ecac
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a092c
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40caf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x4f4b4b78
mov dword [ebp - 0x10], 0x41426d43
mov dword [ebp - 0xc], 0x587d4a5b
mov ecx, dword [eax]
mov eax, dword [0x49e3ac]
mov word [ebp - 8], 0x2e4d
cmp eax, dword [ecx + 4]
jle 0x40cb7c
push 0x49e3ac
call fcn.004374fa
add esp, 4
cmp dword [0x49e3ac], 0xffffffff
jne 0x40cb7c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a06ac], eax
mov ax, word [ebp - 8]
push 0x477040
movq qword [0x4a06a4], xmm0
mov word [0x4a06b0], ax
call fcn.00437921
push 0x49e3ac
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a06a4
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40cc20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5e4b6a43
mov ecx, dword [eax]
mov eax, dword [0x49e50c]
mov dword [ebp - 0xc], 0x7d574142
mov word [ebp - 8], 0x4d58
cmp eax, dword [ecx + 4]
jle 0x40ccb5
push 0x49e50c
call fcn.004374fa
add esp, 4
cmp dword [0x49e50c], 0xffffffff
jne 0x40ccb5
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49eb34], eax
mov ax, word [ebp - 8]
push 0x476fe0
movq qword [0x49eb2c], xmm0
mov word [0x49eb38], ax
mov byte [0x49eb3a], bl
call fcn.00437921
push 0x49e50c
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49eb2c
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret
Function at 0x40ccd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x494f404f
mov dword [ebp - 0xc], 0x587d5c4b
mov word [ebp - 8], 0x2e4d
mov ecx, dword [eax]
mov eax, dword [0x49e75c]
cmp eax, dword [ecx + 4]
jle 0x40cd5b
push 0x49e75c
call fcn.004374fa
add esp, 4
cmp dword [0x49e75c], 0xffffffff
jne 0x40cd5b
movaps xmm0, xmmword [0x489b20]
mov ax, word [ebp - 8]
movups xmmword [0x4a03cc], xmm0
push 0x476fc0
movq xmm0, qword [ebp - 0x10]
movq qword [0x4a03dc], xmm0
mov word [0x4a03e4], ax
call fcn.00437921
push 0x49e75c
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a03cc
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40cd70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x4f4b4b78
mov dword [ebp - 0x10], 0x5b416343
mov dword [ebp - 0xc], 0x587d5a40
mov ecx, dword [eax]
mov eax, dword [0x4a0758]
mov word [ebp - 8], 0x2e4d
cmp eax, dword [ecx + 4]
jle 0x40cdfc
push 0x4a0758
call fcn.004374fa
add esp, 4
cmp dword [0x4a0758], 0xffffffff
jne 0x40cdfc
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49ec5c], eax
mov ax, word [ebp - 8]
push 0x476fa0
movq qword [0x49ec54], xmm0
mov word [0x49ec60], ax
call fcn.00437921
push 0x4a0758
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ec54
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40ce10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x4f4b4b78
mov dword [ebp - 0xc], 0x7d686043
mov dword [ebp - 8], 0x2e4d587d
mov ecx, dword [eax]
mov eax, dword [0x49e398]
cmp eax, dword [ecx + 4]
jle 0x40ce8c
push 0x49e398
call fcn.004374fa
add esp, 4
cmp dword [0x49e398], 0xffffffff
jne 0x40ce8c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x476f80
movq qword [0x4a0848], xmm0
mov dword [0x4a0850], eax
call fcn.00437921
push 0x49e398
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0848
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret
Function at 0x40cea0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x7d6b7c43
mov ecx, dword [eax]
mov eax, dword [0x4a0754]
mov dword [ebp - 0xc], 0x4d587d7a
cmp eax, dword [ecx + 4]
jle 0x40cf25
push 0x4a0754
call fcn.004374fa
add esp, 4
cmp dword [0x4a0754], 0xffffffff
jne 0x40cf25
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x476f60
movq qword [0x4a0838], xmm0
mov dword [0x4a0840], eax
mov byte [0x4a0844], bl
call fcn.00437921
push 0x4a0754
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0838
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40d340
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7147595d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x4f4a5e5b
mov ecx, dword [eax]
mov eax, dword [0x4a016c]
mov word [ebp - 8], 0x4b5a
cmp eax, dword [ecx + 4]
jle 0x40d3c6
push 0x4a016c
call fcn.004374fa
add esp, 4
cmp dword [0x4a016c], 0xffffffff
jne 0x40d3c6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x476e80
movq qword [0x49ee7c], xmm0
mov word [0x49ee84], ax
mov byte [0x49ee86], bl
call fcn.00437921
push 0x4a016c
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ee7c
xor ecx, ebp
pop ebx
call fcn.00437366
mov esp, ebp
pop ebp
ret

Function at 0x40d3e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x6f627f7d
mov dword [ebp - 0x10], 0x5a404b49
mov dword [ebp - 0xc], 0x6a766d0a
mov ecx, dword [eax]
mov eax, dword [0x4a0690]
mov word [ebp - 8], 0x2e6c
cmp eax, dword [ecx + 4]
jle 0x40d46c
push 0x4a0690
call fcn.004374fa
add esp, 4
cmp dword [0x4a0690], 0xffffffff
jne 0x40d46c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49e990], eax
mov ax, word [ebp - 8]
push 0x476e60
movq qword [0x49e988], xmm0
mov word [0x49e994], ax
call fcn.00437921
push 0x4a0690
call fcn.004374b0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e988
xor ecx, ebp
call fcn.00437366
mov esp, ebp
pop ebp
ret