joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14000217e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0xa8
mov word [rsp + 0x20], 0x79
mov word [rsp + 0x22], 0x6f
mov word [rsp + 0x24], 0x82
mov word [rsp + 0x26], 0x84
mov word [rsp + 0x28], 0x86
mov word [rsp + 0x2a], 0x90
mov word [rsp + 0x2c], 0x91
mov word [rsp + 0x2e], 0x8f
mov word [rsp + 0x30], 0x96
mov word [rsp + 0x32], 0x79
mov word [rsp + 0x34], 0x6a
mov word [rsp + 0x36], 0x7e
mov word [rsp + 0x38], pe_nt_image_headers64
mov word [rsp + 0x3a], 0x85
mov word [rsp + 0x3c], 0x86
mov word [rsp + 0x3e], 0x8b
mov word [rsp + 0x40], 0x82
mov word [rsp + 0x42], 0x79
mov word [rsp + 0x44], 0x70
mov word [rsp + 0x46], 0x76
mov word [rsp + 0x48], 0x70
mov word [rsp + 0x4a], 0x71
mov word [rsp + 0x4c], 0x62
mov word [rsp + 0x4e], 0x6a
mov word [rsp + 0x50], 0x79
mov word [rsp + 0x52], 0x60
mov word [rsp + 0x54], 0x92
mov word [rsp + 0x56], 0x8f
mov word [rsp + 0x58], 0x8f
mov word [rsp + 0x5a], 0x82
mov word [rsp + 0x5c], 0x8b
mov word [rsp + 0x5e], 0x91
mov word [rsp + 0x60], 0x60
mov word [rsp + 0x62], 0x8c
mov word [rsp + 0x64], 0x8b
mov word [rsp + 0x66], 0x91
mov word [rsp + 0x68], 0x8f
mov word [rsp + 0x6a], 0x8c
mov word [rsp + 0x6c], 0x89
mov word [rsp + 0x6e], 0x70
mov word [rsp + 0x70], 0x82
mov word [rsp + 0x72], 0x91
mov word [rsp + 0x74], 0x79
mov word [rsp + 0x76], 0x70
mov word [rsp + 0x78], 0x82
mov word [rsp + 0x7a], 0x8f
mov word [rsp + 0x7c], 0x93
mov word [rsp + 0x7e], 0x86
mov word [rsp + pe_nt_image_headers64], 0x80
mov word [rsp + 0x82], 0x82
mov word [rsp + 0x84], 0x90
mov word [rsp + 0x86], 0x79
mov word [rsp + 0x88], 0x94
mov word [rsp + 0x8a], 0x92
mov word [rsp + 0x8c], 0x7e
mov word [rsp + 0x8e], 0x92
mov word [rsp + 0x90], 0x90
mov word [rsp + 0x92], 0x82
mov word [rsp + 0x94], 0x8f
mov word [rsp + 0x96], 0x93
mov word [rsp + 0x98], 0x1d
cmp byte [0x14059a860], 0
jne 0x140002399
mov byte [0x14059a8fa], 1
mov eax, 0
lea rcx, [0x14059a880]
movzx edx, word [rsp + rax*2 + 0x20]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x3d
jne 0x140002373
mov byte [0x14059a860], 1
lea rcx, [0x14000168a]
call fcn.1400014f0
lea rax, [0x14059a880]
add rsp, 0xa8
ret

Function at 0x1400025b4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 0x11
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x68
mov byte [rsp + 0x25], 0x1f
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x67
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x64
mov byte [rsp + 0x2a], 0x65
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a530], 0
jne 0x140002644
mov byte [0x14059a54f], 1
mov eax, 0
lea rcx, [0x14059a540]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x14000261f
mov byte [0x14059a530], 1
lea rcx, [0x140001775]
call fcn.1400014f0
lea rax, [0x14059a540]
add rsp, 0x38
ret
Function at 0x140002650
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 0x11
mov byte [rsp + 0x22], 0x64
mov byte [rsp + 0x23], 0x54
mov byte [rsp + 0x24], 0x52
mov byte [rsp + 0x25], 0x5f
mov byte [rsp + 0x26], 0x58
mov byte [rsp + 0x27], 0x66
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x63
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a4d8], 0
jne 0x1400026e0
mov byte [0x14059a4ef], 1
mov eax, 0
lea rcx, [0x14059a4e0]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x1400026bb
mov byte [0x14059a4d8], 1
lea rcx, [0x1400017bd]
call fcn.1400014f0
lea rax, [0x14059a4e0]
add rsp, 0x38
ret

Function at 0x1400026ec
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 0x11
mov byte [rsp + 0x22], 0x61
mov byte [rsp + 0x23], 0x54
mov byte [rsp + 0x24], 0x61
mov byte [rsp + 0x25], 0x63
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x65
mov byte [rsp + 0x28], 0x56
mov byte [rsp + 0x29], 0x54
mov byte [rsp + 0x2a], 0x65
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a458], 0
jne 0x14000277c
mov byte [0x14059a46f], 1
mov eax, 0
lea rcx, [0x14059a460]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x140002757
mov byte [0x14059a458], 1
lea rcx, [0x14000181d]
call fcn.1400014f0
lea rax, [0x14059a460]
add rsp, 0x38
ret

Function at 0x140002788
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 0x11
mov byte [rsp + 0x22], 0x66
mov byte [rsp + 0x23], 0x64
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5f
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x63
mov byte [rsp + 0x28], 0x65
mov byte [rsp + 0x29], 0x60
mov byte [rsp + 0x2a], 0x5f
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a398], 0
jne 0x140002818
mov byte [0x14059a3af], 1
mov eax, 0
lea rcx, [0x14059a3a0]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x1400027f3
mov byte [0x14059a398], 1
lea rcx, [0x1400018ad]
call fcn.1400014f0
lea rax, [0x14059a3a0]
add rsp, 0x38
ret
Function at 0x140002824
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 0x11
mov byte [rsp + 0x22], 0x64
mov byte [rsp + 0x23], 0x66
mov byte [rsp + 0x24], 0x63
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x64
mov byte [rsp + 0x27], 0x59
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x63
mov byte [rsp + 0x2a], 0x5c
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a2a8], 0
jne 0x1400028b4
mov byte [0x14059a2bf], 1
mov eax, 0
lea rcx, [0x14059a2b0]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x14000288f
mov byte [0x14059a2a8], 1
lea rcx, [0x14000196d]
call fcn.1400014f0
lea rax, [0x14059a2b0]
add rsp, 0x38
ret

Function at 0x1400028c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 0x11
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x68
mov byte [rsp + 0x25], 0x1f
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x67
mov byte [rsp + 0x28], 0x5a
mov byte [rsp + 0x29], 0x63
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a250], 0
jne 0x140002950
mov byte [0x14059a26f], 1
mov eax, 0
lea rcx, [0x14059a260]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x14000292b
mov byte [0x14059a250], 1
lea rcx, [0x1400019b5]
call fcn.1400014f0
lea rax, [0x14059a260]
add rsp, 0x38
ret

Function at 0x14000295c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 0x11
mov byte [rsp + 0x22], 0x5c
mov byte [rsp + 0x23], 0x52
mov byte [rsp + 0x24], 0x64
mov byte [rsp + 0x25], 0x61
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x63
mov byte [rsp + 0x28], 0x64
mov byte [rsp + 0x29], 0x5c
mov byte [rsp + 0x2a], 0x6a
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x14059a188], 0
jne 0x1400029ec
mov byte [0x14059a19f], 1
mov eax, 0
lea rcx, [0x14059a190]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x1400029c7
mov byte [0x14059a188], 1
lea rcx, [0x140001a5d]
call fcn.1400014f0
lea rax, [0x14059a190]
add rsp, 0x38
ret
Function at 0x1400029f8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 0x11
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x68
mov byte [rsp + 0x25], 0x1f
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x67
mov byte [rsp + 0x28], 0x5a
mov byte [rsp + 0x29], 0x63
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140599fd0], 0
jne 0x140002a88
mov byte [0x140599fef], 1
mov eax, 0
lea rcx, [0x140599fe0]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x140002a63
mov byte [0x140599fd0], 1
lea rcx, [0x140001bad]
call fcn.1400014f0
lea rax, [0x140599fe0]
add rsp, 0x38
ret

Function at 0x140002a94
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 0x11
mov byte [rsp + 0x22], 0x53
mov byte [rsp + 0x23], 0x66
mov byte [rsp + 0x24], 0x5d
mov byte [rsp + 0x25], 0x5d
mov byte [rsp + 0x26], 0x58
mov byte [rsp + 0x27], 0x66
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x63
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140599f70], 0
jne 0x140002b24
mov byte [0x140599f8f], 1
mov eax, 0
lea rcx, [0x140599f80]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x140002aff
mov byte [0x140599f70], 1
lea rcx, [0x140001bf5]
call fcn.1400014f0
lea rax, [0x140599f80]
add rsp, 0x38
ret

Function at 0x140002b30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 0x11
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x68
mov byte [rsp + 0x25], 0x1f
mov byte [rsp + 0x26], 0x55
mov byte [rsp + 0x27], 0x63
mov byte [rsp + 0x28], 0x68
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x53
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140599f18], 0
jne 0x140002bc0
mov byte [0x140599f2f], 1
mov eax, 0
lea rcx, [0x140599f20]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x140002b9b
mov byte [0x140599f18], 1
lea rcx, [0x140001c3d]
call fcn.1400014f0
lea rax, [0x140599f20]
add rsp, 0x38
ret
Function at 0x140002bcc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 0x11
mov byte [rsp + 0x22], 0x6b
mov byte [rsp + 0x23], 0x60
mov byte [rsp + 0x24], 0x5f
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x63
mov byte [rsp + 0x2a], 0x5e
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x5e
mov byte [rsp + 0x2f], 0xf1
cmp byte [0x140599e08], 0
jne 0x140002c5c
mov byte [0x140599e1f], 1
mov eax, 0
lea rcx, [0x140599e10]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x140002c37
mov byte [0x140599e08], 1
lea rcx, [0x140001d15]
call fcn.1400014f0
lea rax, [0x140599e10]
add rsp, 0x38
ret

Function at 0x140002c68
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x65
mov byte [rsp + 0x26], 0x60
mov byte [rsp + 0x27], 0x65
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x5d
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x67
mov byte [rsp + 0x2c], 0x1f
mov byte [rsp + 0x2d], 0x54
mov byte [rsp + 0x2e], 0x60
mov byte [rsp + 0x2f], 0x5e
mov byte [rsp + 0x30], 0xf1
cmp byte [0x14059a4f0], 0
jne 0x140002d02
mov byte [0x14059a511], 1
mov eax, 0
lea rcx, [0x14059a500]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x11
jne 0x140002cdd
mov byte [0x14059a4f0], 1
lea rcx, [0x1400017a5]
call fcn.1400014f0
lea rax, [0x14059a500]
add rsp, 0x48
ret

Function at 0x140002d0e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x53
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x65
mov byte [rsp + 0x24], 0x55
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x57
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x5f
mov byte [rsp + 0x29], 0x55
mov byte [rsp + 0x2a], 0x56
mov byte [rsp + 0x2b], 0x63
mov byte [rsp + 0x2c], 0x1f
mov byte [rsp + 0x2d], 0x54
mov byte [rsp + 0x2e], 0x60
mov byte [rsp + 0x2f], 0x5e
mov byte [rsp + 0x30], 0xf1
cmp byte [0x14059a3d8], 0
jne 0x140002da8
mov byte [0x14059a3f1], 1
mov eax, 0
lea rcx, [0x14059a3e0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x11
jne 0x140002d83
mov byte [0x14059a3d8], 1
lea rcx, [0x14000187d]
call fcn.1400014f0
lea rax, [0x14059a3e0]
add rsp, 0x48
ret
Function at 0x140002db4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x55
mov byte [rsp + 0x26], 0x61
mov byte [rsp + 0x27], 0x53
mov byte [rsp + 0x28], 0x60
mov byte [rsp + 0x29], 0x5d
mov byte [rsp + 0x2a], 0x67
mov byte [rsp + 0x2b], 0x68
mov byte [rsp + 0x2c], 0x1f
mov byte [rsp + 0x2d], 0x5f
mov byte [rsp + 0x2e], 0x56
mov byte [rsp + 0x2f], 0x65
mov byte [rsp + 0x30], 0xf1
cmp byte [0x14059a0e0], 0
jne 0x140002e4e
mov byte [0x14059a101], 1
mov eax, 0
lea rcx, [0x14059a0f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x11
jne 0x140002e29
mov byte [0x14059a0e0], 1
lea rcx, [0x140001ad5]
call fcn.1400014f0
lea rax, [0x14059a0f0]
add rsp, 0x48
ret

Function at 0x140002e5a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x59
mov byte [rsp + 0x22], 0x60
mov byte [rsp + 0x23], 0x5e
mov byte [rsp + 0x24], 0x56
mov byte [rsp + 0x25], 0x1f
mov byte [rsp + 0x26], 0x64
mov byte [rsp + 0x27], 0x60
mov byte [rsp + 0x28], 0x61
mov byte [rsp + 0x29], 0x59
mov byte [rsp + 0x2a], 0x60
mov byte [rsp + 0x2b], 0x64
mov byte [rsp + 0x2c], 0x1f
mov byte [rsp + 0x2d], 0x54
mov byte [rsp + 0x2e], 0x60
mov byte [rsp + 0x2f], 0x5e
mov byte [rsp + 0x30], 0xf1
cmp byte [0x14059a088], 0
jne 0x140002ef4
mov byte [0x14059a0a1], 1
mov eax, 0
lea rcx, [0x14059a090]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x11
jne 0x140002ecf
mov byte [0x14059a088], 1
lea rcx, [0x140001b1d]
call fcn.1400014f0
lea rax, [0x14059a090]
add rsp, 0x48
ret

Function at 0x140002f00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x55
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x68
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x1f
mov byte [rsp + 0x2d], 0x54
mov byte [rsp + 0x2e], 0x60
mov byte [rsp + 0x2f], 0x5e
mov byte [rsp + 0x30], 0xf1
cmp byte [0x14059a040], 0
jne 0x140002f9a
mov byte [0x14059a061], 1
mov eax, 0
lea rcx, [0x14059a050]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x11
jne 0x140002f75
mov byte [0x14059a040], 1
lea rcx, [0x140001b4d]
call fcn.1400014f0
lea rax, [0x14059a050]
add rsp, 0x48
ret
Function at 0x140002fa6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x64
mov byte [rsp + 0x26], 0x54
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x5f
mov byte [rsp + 0x29], 0x58
mov byte [rsp + 0x2a], 0x66
mov byte [rsp + 0x2b], 0x52
mov byte [rsp + 0x2c], 0x63
mov byte [rsp + 0x2d], 0x55
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x14059a4b8], 0
jne 0x14000304a
mov byte [0x14059a4d3], 1
mov eax, 0
lea rcx, [0x14059a4c0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003025
mov byte [0x14059a4b8], 1
lea rcx, [0x1400017d5]
call fcn.1400014f0
lea rax, [0x14059a4c0]
add rsp, 0x48
ret

Function at 0x140003056
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x61
mov byte [rsp + 0x26], 0x54
mov byte [rsp + 0x27], 0x61
mov byte [rsp + 0x28], 0x63
mov byte [rsp + 0x29], 0x60
mov byte [rsp + 0x2a], 0x65
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x54
mov byte [rsp + 0x2d], 0x65
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x14059a430], 0
jne 0x1400030fa
mov byte [0x14059a453], 1
mov eax, 0
lea rcx, [0x14059a440]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400030d5
mov byte [0x14059a430], 1
lea rcx, [0x140001835]
call fcn.1400014f0
lea rax, [0x14059a440]
add rsp, 0x48
ret

Function at 0x140003106
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x66
mov byte [rsp + 0x26], 0x64
mov byte [rsp + 0x27], 0x1f
mov byte [rsp + 0x28], 0x5f
mov byte [rsp + 0x29], 0x60
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x65
mov byte [rsp + 0x2c], 0x60
mov byte [rsp + 0x2d], 0x5f
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x14059a378], 0
jne 0x1400031aa
mov byte [0x14059a393], 1
mov eax, 0
lea rcx, [0x14059a380]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003185
mov byte [0x14059a378], 1
lea rcx, [0x1400018c5]
call fcn.1400014f0
lea rax, [0x14059a380]
add rsp, 0x48
ret
Function at 0x1400031b6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x61
mov byte [rsp + 0x22], 0x52
mov byte [rsp + 0x23], 0x5f
mov byte [rsp + 0x24], 0x55
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x64
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x54
mov byte [rsp + 0x29], 0x66
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x5a
mov byte [rsp + 0x2c], 0x65
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x14059a2e8], 0
jne 0x14000325a
mov byte [0x14059a303], 1
mov eax, 0
lea rcx, [0x14059a2f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003235
mov byte [0x14059a2e8], 1
lea rcx, [0x14000193d]
call fcn.1400014f0
lea rax, [0x14059a2f0]
add rsp, 0x48
ret

Function at 0x140003266
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x64
mov byte [rsp + 0x26], 0x66
mov byte [rsp + 0x27], 0x63
mov byte [rsp + 0x28], 0x57
mov byte [rsp + 0x29], 0x64
mov byte [rsp + 0x2a], 0x59
mov byte [rsp + 0x2b], 0x52
mov byte [rsp + 0x2c], 0x63
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x14059a288], 0
jne 0x14000330a
mov byte [0x14059a2a3], 1
mov eax, 0
lea rcx, [0x14059a290]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400032e5
mov byte [0x14059a288], 1
lea rcx, [0x140001985]
call fcn.1400014f0
lea rax, [0x14059a290]
add rsp, 0x48
ret

Function at 0x140003316
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5c
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x61
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x64
mov byte [rsp + 0x2c], 0x5c
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x14059a168], 0
jne 0x1400033ba
mov byte [0x14059a183], 1
mov eax, 0
lea rcx, [0x14059a170]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003395
mov byte [0x14059a168], 1
lea rcx, [0x140001a75]
call fcn.1400014f0
lea rax, [0x14059a170]
add rsp, 0x48
ret
Function at 0x1400033c6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x66
mov byte [rsp + 0x22], 0x64
mov byte [rsp + 0x23], 0x52
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x5c
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x64
mov byte [rsp + 0x28], 0x61
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x64
mov byte [rsp + 0x2c], 0x5c
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x14059a148], 0
jne 0x14000346a
mov byte [0x14059a163], 1
mov eax, 0
lea rcx, [0x14059a150]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x140003445
mov byte [0x14059a148], 1
lea rcx, [0x140001a8d]
call fcn.1400014f0
lea rax, [0x14059a150]
add rsp, 0x48
ret

Function at 0x140003476
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x68
mov byte [rsp + 0x22], 0x68
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], 0x1f
mov byte [rsp + 0x25], 0x53
mov byte [rsp + 0x26], 0x66
mov byte [rsp + 0x27], 0x5d
mov byte [rsp + 0x28], 0x5d
mov byte [rsp + 0x29], 0x58
mov byte [rsp + 0x2a], 0x66
mov byte [rsp + 0x2b], 0x52
mov byte [rsp + 0x2c], 0x63
mov byte [rsp + 0x2d], 0x55
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x140599f90], 0
jne 0x14000351a
mov byte [0x140599fb3], 1
mov eax, 0
lea rcx, [0x140599fa0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400034f5
mov byte [0x140599f90], 1
lea rcx, [0x140001bdd]
call fcn.1400014f0
lea rax, [0x140599fa0]
add rsp, 0x48
ret

Function at 0x140003526
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 0x11
mov byte [rsp + 0x21], 0x61
mov byte [rsp + 0x22], 0x52
mov byte [rsp + 0x23], 0x5f
mov byte [rsp + 0x24], 0x55
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x64
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x54
mov byte [rsp + 0x29], 0x66
mov byte [rsp + 0x2a], 0x63
mov byte [rsp + 0x2b], 0x5a
mov byte [rsp + 0x2c], 0x65
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x1f
mov byte [rsp + 0x2f], 0x54
mov byte [rsp + 0x30], 0x60
mov byte [rsp + 0x31], 0x5e
mov byte [rsp + 0x32], 0xf1
cmp byte [0x140599e48], 0
jne 0x1400035ca
mov byte [0x140599e63], 1
mov eax, 0
lea rcx, [0x140599e50]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400035a5
mov byte [0x140599e48], 1
lea rcx, [0x140001ce5]
call fcn.1400014f0
lea rax, [0x140599e50]
add rsp, 0x48
ret