joyce8/EMBER2024-capa huggingface dataset:
Function at 0x409080
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4b486f4d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x4f5c684b
mov ecx, dword [eax]
mov eax, dword [0x4a0884]
mov dword [ebp - 0xc], 0x41594b43
mov word [ebp - 8], 0x455c
cmp eax, dword [ecx + 4]
jle 0x409123
push 0x4a0884
call fcn.00437568
add esp, 4
cmp dword [0x4a0884], 0xffffffff
jne 0x409123
movaps xmm0, xmmword [0x489560]
mov eax, dword [ebp - 0xc]
movups xmmword [0x49e644], xmm0
mov dword [0x49e65c], eax
movq xmm0, qword [ebp - 0x14]
mov ax, word [ebp - 8]
push 0x477cb0
movq qword [0x49e654], xmm0
mov word [0x49e660], ax
mov byte [0x49e662], bl
call fcn.0043798f
push 0x4a0884
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e644
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x4091d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x4f7a4d63
mov dword [ebp - 0x10], 0x4f63455d
mov dword [ebp - 0xc], 0x4b494f40
mov ecx, dword [eax]
mov eax, dword [0x49fe14]
mov word [ebp - 8], 0x2e5c
cmp eax, dword [ecx + 4]
jle 0x40925c
push 0x49fe14
call fcn.00437568
add esp, 4
cmp dword [0x49fe14], 0xffffffff
jne 0x40925c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49f9f8], eax
mov ax, word [ebp - 8]
push 0x477c70
movq qword [0x49f9f0], xmm0
mov word [0x49f9fc], ax
call fcn.0043798f
push 0x49fe14
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f9f0
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x409410
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x57544143
mov dword [ebp - 0x10], 0x4c415c5e
mov dword [ebp - 0xc], 0x5b454d4f
mov ecx, dword [eax]
mov eax, dword [0x4a0308]
mov word [ebp - 8], 0x2e5e
cmp eax, dword [ecx + 4]
jle 0x40949c
push 0x4a0308
call fcn.00437568
add esp, 4
cmp dword [0x4a0308], 0xffffffff
jne 0x40949c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0768], eax
mov ax, word [ebp - 8]
push 0x477c00
movq qword [0x4a0760], xmm0
mov word [0x4a076c], ax
call fcn.0043798f
push 0x4a0308
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0760
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x4094b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x5a6a5d63
mov dword [ebp - 0xc], 0x5c4b7d5d
mov dword [ebp - 8], 0x2e5c4b58
mov ecx, dword [eax]
mov eax, dword [0x49f790]
cmp eax, dword [ecx + 4]
jle 0x40952c
push 0x49f790
call fcn.00437568
add esp, 4
cmp dword [0x49f790], 0xffffffff
jne 0x40952c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x477be0
movq qword [0x4a0798], xmm0
mov dword [0x4a07a0], eax
call fcn.0043798f
push 0x49f790
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0798
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x4096a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x566b7d63
mov bl, 0x2e
mov dword [ebp - 0x10], 0x404f464d
mov ecx, dword [eax]
mov eax, dword [0x4a024c]
mov dword [ebp - 0xc], 0x7d6b4b49
cmp eax, dword [ecx + 4]
jle 0x409725
push 0x4a024c
call fcn.00437568
add esp, 4
cmp dword [0x4a024c], 0xffffffff
jne 0x409725
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477b60
movq qword [0x49e7dc], xmm0
mov dword [0x49e7e4], eax
mov byte [0x49e7e8], bl
call fcn.0043798f
push 0x4a024c
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e7dc
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x409740
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x566b7d63
mov bl, 0x2e
mov dword [ebp - 0x10], 0x404f464d
mov ecx, dword [eax]
mov eax, dword [0x49fdc4]
mov dword [ebp - 0xc], 0x7d674b49
cmp eax, dword [ecx + 4]
jle 0x4097c5
push 0x49fdc4
call fcn.00437568
add esp, 4
cmp dword [0x49fdc4], 0xffffffff
jne 0x4097c5
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477b40
movq qword [0x4a0250], xmm0
mov dword [0x4a0258], eax
mov byte [0x4a025c], bl
call fcn.0043798f
push 0x49fdc4
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0250
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x4097e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x566b7d63
mov bl, 0x2e
mov dword [ebp - 0x10], 0x404f464d
mov ecx, dword [eax]
mov eax, dword [0x49e74c]
mov dword [ebp - 0xc], 0x69634b49
mov word [ebp - 8], 0x7a63
cmp eax, dword [ecx + 4]
jle 0x409875
push 0x49e74c
call fcn.00437568
add esp, 4
cmp dword [0x49e74c], 0xffffffff
jne 0x409875
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49f8a0], eax
mov ax, word [ebp - 8]
push 0x477b10
movq qword [0x49f898], xmm0
mov word [0x49f8a4], ax
mov byte [0x49f8a6], bl
call fcn.0043798f
push 0x49e74c
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f898
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x409890
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x566b7d63
mov dword [ebp - 0x10], 0x404f464d
mov dword [ebp - 0xc], 0x7a634b49
mov ecx, dword [eax]
mov eax, dword [0x49fadc]
mov word [ebp - 8], 0x2e6f
cmp eax, dword [ecx + 4]
jle 0x40991c
push 0x49fadc
call fcn.00437568
add esp, 4
cmp dword [0x49fadc], 0xffffffff
jne 0x40991c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0818], eax
mov ax, word [ebp - 8]
push 0x477af0
movq qword [0x4a0810], xmm0
mov word [0x4a081c], ax
call fcn.0043798f
push 0x49fadc
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0810
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x409930
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x566b7d63
mov bl, 0x2e
mov dword [ebp - 0x10], 0x404f464d
mov ecx, dword [eax]
mov eax, dword [0x4a00d8]
mov dword [ebp - 0xc], 0x6f7d4b49
cmp eax, dword [ecx + 4]
jle 0x4099b5
push 0x4a00d8
call fcn.00437568
add esp, 4
cmp dword [0x4a00d8], 0xffffffff
jne 0x4099b5
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477ad0
movq qword [0x4a0188], xmm0
mov dword [0x4a0190], eax
mov byte [0x4a0194], bl
call fcn.0043798f
push 0x4a00d8
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0188
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x4099d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x566b7d63
mov dword [ebp - 0x10], 0x404f464d
mov dword [ebp - 0xc], 0x7c7d4b49
mov ecx, dword [eax]
mov eax, dword [0x4a06c8]
mov word [ebp - 8], 0x2e7d
cmp eax, dword [ecx + 4]
jle 0x409a5c
push 0x4a06c8
call fcn.00437568
add esp, 4
cmp dword [0x4a06c8], 0xffffffff
jne 0x409a5c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a05ac], eax
mov ax, word [ebp - 8]
push 0x477ab0
movq qword [0x4a05a4], xmm0
mov word [0x4a05b0], ax
call fcn.0043798f
push 0x4a06c8
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a05a4
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x409b60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x62617d63
mov bl, 0x2e
mov dword [ebp - 0xc], 0x7a0a7e6f
mov ecx, dword [eax]
mov eax, dword [0x4a0494]
mov word [ebp - 8], 0x7d7e
cmp eax, dword [ecx + 4]
jle 0x409be6
push 0x4a0494
call fcn.00437568
add esp, 4
cmp dword [0x4a0494], 0xffffffff
jne 0x409be6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477a60
movq qword [0x4a007c], xmm0
mov word [0x4a0084], ax
mov byte [0x4a0086], bl
call fcn.0043798f
push 0x4a0494
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a007c
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x409c00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x62617d63
mov dword [ebp - 0x10], 0x7a0a7e6f
mov dword [ebp - 0xc], 0x636f7d7e
mov ecx, dword [eax]
mov eax, dword [0x49ff24]
mov word [ebp - 8], 0x2e6f
cmp eax, dword [ecx + 4]
jle 0x409c8c
push 0x49ff24
call fcn.00437568
add esp, 4
cmp dword [0x49ff24], 0xffffffff
jne 0x409c8c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a02ec], eax
mov ax, word [ebp - 8]
push 0x477a40
movq qword [0x4a02e4], xmm0
mov word [0x4a02f0], ax
call fcn.0043798f
push 0x49ff24
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a02e4
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x409ca0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x7f7d7d63
mov bl, 0x2e
mov dword [ebp - 0x10], 0x656c0a62
mov ecx, dword [eax]
mov eax, dword [0x49f900]
mov dword [ebp - 0xc], 0x766b7e7b
mov word [ebp - 8], 0x6d6b
cmp eax, dword [ecx + 4]
jle 0x409d35
push 0x49f900
call fcn.00437568
add esp, 4
cmp dword [0x49f900], 0xffffffff
jne 0x409d35
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49ffc0], eax
mov ax, word [ebp - 8]
push 0x477a10
movq qword [0x49ffb8], xmm0
mov word [0x49ffc4], ax
mov byte [0x49ffc6], bl
call fcn.0043798f
push 0x49f900
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ffb8
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40a4e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x489070]
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x14], 0x637d6c7d
mov ecx, dword [eax]
mov eax, dword [0x49fe54]
mov dword [ebp - 0x10], 0x7a676061
mov dword [ebp - 0xc], 0x60677c61
mov word [ebp - 8], 0x2e69
cmp eax, dword [ecx + 4]
jle 0x40a566
push 0x49fe54
call fcn.00437568
add esp, 4
cmp dword [0x49fe54], 0xffffffff
jne 0x40a566
lea eax, [ebp - 0x24]
mov ecx, 0x49e594
push eax
call fcn.00416a70
push 0x477820
call fcn.0043798f
push 0x49fe54
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e594
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40a580
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x489070]
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x7c6f667d
mov ecx, dword [eax]
mov eax, dword [0x49e434]
mov dword [ebp - 0xc], 0x67617e6b
mov word [ebp - 8], 0x7a60
mov byte [ebp - 6], 0x2e
cmp eax, dword [ecx + 4]
jle 0x40a603
push 0x49e434
call fcn.00437568
add esp, 4
cmp dword [0x49e434], 0xffffffff
jne 0x40a603
lea eax, [ebp - 0x20]
mov ecx, 0x49e510
push eax
call fcn.00416960
push 0x4777f0
call fcn.0043798f
push 0x49e434
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e510
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x40a6c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x489070]
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x7a7d777d
mov ecx, dword [eax]
mov eax, dword [0x4a064c]
mov dword [ebp - 0xc], 0x6c71636b
mov word [ebp - 8], 0x6d69
mov byte [ebp - 6], 0x2e
cmp eax, dword [ecx + 4]
jle 0x40a743
push 0x4a064c
call fcn.00437568
add esp, 4
cmp dword [0x4a064c], 0xffffffff
jne 0x40a743
lea eax, [ebp - 0x20]
mov ecx, 0x49e498
push eax
call fcn.00416960
push 0x4777a0
call fcn.0043798f
push 0x4a064c
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e498
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40ac70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x68786a7e
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5c4b7d7d
mov ecx, dword [eax]
mov eax, dword [0x49f878]
mov dword [ebp - 0xc], 0x4b4d4758
cmp eax, dword [ecx + 4]
jle 0x40acf5
push 0x49f878
call fcn.00437568
add esp, 4
cmp dword [0x49f878], 0xffffffff
jne 0x40acf5
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477650
movq qword [0x4a0208], xmm0
mov dword [0x4a0210], eax
mov byte [0x4a0214], bl
call fcn.0043798f
push 0x49f878
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0208
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40ada0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x415e4b7c
mov bl, 0x2e
mov dword [ebp - 0x10], 0x4b7d5a5c
mov ecx, dword [eax]
mov eax, dword [0x49e690]
mov dword [ebp - 0xc], 0x5c4b585c
cmp eax, dword [ecx + 4]
jle 0x40ae25
push 0x49e690
call fcn.00437568
add esp, 4
cmp dword [0x49e690], 0xffffffff
jne 0x40ae25
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x477620
movq qword [0x49fe84], xmm0
mov dword [0x49fe8c], eax
mov byte [0x49fe90], bl
call fcn.0043798f
push 0x49e690
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49fe84
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x40b280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7d786f7d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x47585c4b
mov ecx, dword [eax]
mov eax, dword [0x49e75c]
mov word [ebp - 8], 0x4b4d
cmp eax, dword [ecx + 4]
jle 0x40b306
push 0x49e75c
call fcn.00437568
add esp, 4
cmp dword [0x49e75c], 0xffffffff
jne 0x40b306
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477530
movq qword [0x49e410], xmm0
mov word [0x49e418], ax
mov byte [0x49e41a], bl
call fcn.0043798f
push 0x49e75c
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e410
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40b410
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x4163467d
mov dword [ebp - 0xc], 0x415a4740
mov word [ebp - 8], 0x2e5c
mov ecx, dword [eax]
mov eax, dword [0x49e728]
cmp eax, dword [ecx + 4]
jle 0x40b48d
push 0x49e728
call fcn.00437568
add esp, 4
cmp dword [0x49e728], 0xffffffff
jne 0x40b48d
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x4774d0
movq qword [0x49e570], xmm0
mov word [0x49e578], ax
call fcn.0043798f
push 0x49e728
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e570
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40b530
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7d4d437d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x47585c4b
mov ecx, dword [eax]
mov eax, dword [0x49e440]
mov word [ebp - 8], 0x4b4d
cmp eax, dword [ecx + 4]
jle 0x40b5b6
push 0x49e440
call fcn.00437568
add esp, 4
cmp dword [0x49e440], 0xffffffff
jne 0x40b5b6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x4774a0
movq qword [0x49ffa4], xmm0
mov word [0x49ffac], ax
mov byte [0x49ffae], bl
call fcn.0043798f
push 0x49e440
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49ffa4
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40b6e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x5e5a407d
mov dword [ebp - 0xc], 0x585c4b7d
mov dword [ebp - 8], 0x2e4b4d47
mov ecx, dword [eax]
mov eax, dword [0x4a0118]
cmp eax, dword [ecx + 4]
jle 0x40b75c
push 0x4a0118
call fcn.00437568
add esp, 4
cmp dword [0x4a0118], 0xffffffff
jne 0x40b75c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x477450
movq qword [0x49e488], xmm0
mov dword [0x49e490], eax
call fcn.0043798f
push 0x4a0118
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e488
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x40b770
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x465e415d
mov dword [ebp - 0xc], 0x5e5d5d41
mov word [ebp - 8], 0x2e5d
mov ecx, dword [eax]
mov eax, dword [0x49e8e8]
cmp eax, dword [ecx + 4]
jle 0x40b7ed
push 0x49e8e8
call fcn.00437568
add esp, 4
cmp dword [0x49e8e8], 0xffffffff
jne 0x40b7ed
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477430
movq qword [0x4a0088], xmm0
mov word [0x4a0090], ax
call fcn.0043798f
push 0x49e8e8
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0088
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40c080
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x7d627f7d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x6b787c6b
mov ecx, dword [eax]
mov eax, dword [0x4a0248]
mov dword [ebp - 0xc], 0x6b696f7c
mov word [ebp - 8], 0x7a60
cmp eax, dword [ecx + 4]
jle 0x40c115
push 0x4a0248
call fcn.00437568
add esp, 4
cmp dword [0x4a0248], 0xffffffff
jne 0x40c115
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0144], eax
mov ax, word [ebp - 8]
push 0x477230
movq qword [0x4a013c], xmm0
mov word [0x4a0148], ax
mov byte [0x4a014a], bl
call fcn.0043798f
push 0x4a0248
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a013c
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40c380
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x694d585d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5c4b404b
mov ecx, dword [eax]
mov eax, dword [0x49e7ac]
mov dword [ebp - 0xc], 0x41664d47
mov word [ebp - 8], 0x5a5d
cmp eax, dword [ecx + 4]
jle 0x40c415
push 0x49e7ac
call fcn.00437568
add esp, 4
cmp dword [0x49e7ac], 0xffffffff
jne 0x40c415
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a057c], eax
mov ax, word [ebp - 8]
push 0x477190
movq qword [0x4a0574], xmm0
mov word [0x4a0580], ax
mov byte [0x4a0582], bl
call fcn.0043798f
push 0x49e7ac
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0574
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x40c430
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7147595d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x5a424748
mov ecx, dword [eax]
mov eax, dword [0x49e6e8]
mov word [ebp - 8], 0x5c4b
cmp eax, dword [ecx + 4]
jle 0x40c4b6
push 0x49e6e8
call fcn.00437568
add esp, 4
cmp dword [0x49e6e8], 0xffffffff
jne 0x40c4b6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x477170
movq qword [0x4a06b0], xmm0
mov word [0x4a06b8], ax
mov byte [0x4a06ba], bl
call fcn.0043798f
push 0x49e6e8
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a06b0
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40c4d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x7147595d
mov dword [ebp - 0xc], 0x585c4b5d
mov dword [ebp - 8], 0x2e4b4d47
mov ecx, dword [eax]
mov eax, dword [0x4a0618]
cmp eax, dword [ecx + 4]
jle 0x40c54c
push 0x4a0618
call fcn.00437568
add esp, 4
cmp dword [0x4a0618], 0xffffffff
jne 0x40c54c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x477150
movq qword [0x4a0038], xmm0
mov dword [0x4a0040], eax
call fcn.0043798f
push 0x4a0618
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0038
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40c930
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x4d4f6c43
mov ecx, dword [eax]
mov eax, dword [0x49e8a8]
mov dword [ebp - 0xc], 0x7d5e5b45
mov word [ebp - 8], 0x4d58
cmp eax, dword [ecx + 4]
jle 0x40c9c5
push 0x49e8a8
call fcn.00437568
add esp, 4
cmp dword [0x49e8a8], 0xffffffff
jne 0x40c9c5
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0488], eax
mov ax, word [ebp - 8]
push 0x477050
movq qword [0x4a0480], xmm0
mov word [0x4a048c], ax
mov byte [0x4a048e], bl
call fcn.0043798f
push 0x49e8a8
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0480
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret