joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140002c1e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 0x5d
mov byte [rsp + 0x23], 0x52
mov byte [rsp + 0x24], 0x51
mov byte [rsp + 0x25], 0x48
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x44
mov byte [rsp + 0x29], 0x55
mov byte [rsp + 0x2a], 0x50
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f20a8], 0
jne 0x140002cae
mov byte [0x1409f20bf], 1
mov eax, 0
lea rcx, [0x1409f20b0]
movzx edx, byte [rsp + rax + 0x21]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xf
jne 0x140002c89
mov byte [0x1409f20a8], 1
lea rcx, [0x140001d15]
call fcn.1400014f0
lea rax, [0x1409f20b0]
add rsp, 0x38
ret

Function at 0x140002cba
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x23], 3
mov byte [rsp + 0x24], 0x57
mov byte [rsp + 0x25], 0x52
mov byte [rsp + 0x26], 0x57
mov byte [rsp + 0x27], 0x44
mov byte [rsp + 0x28], 0x4f
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x59
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f27b8], 0
jne 0x140002d40
mov byte [0x1409f27cd], 1
mov eax, 0
lea rcx, [0x1409f27c0]
movzx edx, byte [rsp + rax + 0x23]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xd
jne 0x140002d1b
mov byte [0x1409f27b8], 1
lea rcx, [0x14000178d]
call fcn.1400014f0
lea rax, [0x1409f27c0]
add rsp, 0x38
ret

Function at 0x140002d4c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x23], 3
mov byte [rsp + 0x24], 0x5a
mov byte [rsp + 0x25], 0x5a
mov byte [rsp + 0x26], 0x5a
mov byte [rsp + 0x27], 0x11
mov byte [rsp + 0x28], 0x44
mov byte [rsp + 0x29], 0x59
mov byte [rsp + 0x2a], 0x4a
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f25e8], 0
jne 0x140002dd2
mov byte [0x1409f25fd], 1
mov eax, 0
lea rcx, [0x1409f25f0]
movzx edx, byte [rsp + rax + 0x23]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xd
jne 0x140002dad
mov byte [0x1409f25e8], 1
lea rcx, [0x1400018f5]
call fcn.1400014f0
lea rax, [0x1409f25f0]
add rsp, 0x38
ret

Function at 0x140002dde
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x23], 3
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x53
mov byte [rsp + 0x26], 0x45
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x4f
mov byte [rsp + 0x29], 0x59
mov byte [rsp + 0x2a], 0x5a
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x51
mov byte [rsp + 0x2d], 0x48
mov byte [rsp + 0x2e], 0x57
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f23a8], 0
jne 0x140002e64
mov byte [0x1409f23bd], 1
mov eax, 0
lea rcx, [0x1409f23b0]
movzx edx, byte [rsp + rax + 0x23]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xd
jne 0x140002e3f
mov byte [0x1409f23a8], 1
lea rcx, [0x140001abd]
call fcn.1400014f0
lea rax, [0x1409f23b0]
add rsp, 0x38
ret
Function at 0x140002e70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x38
mov byte [rsp + 0x23], 3
mov byte [rsp + 0x24], 0x44
mov byte [rsp + 0x25], 0x47
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x5a
mov byte [rsp + 0x28], 0x44
mov byte [rsp + 0x29], 0x55
mov byte [rsp + 0x2a], 0x48
mov byte [rsp + 0x2b], 0x11
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x50
mov byte [rsp + 0x2f], 0xe3
cmp byte [0x1409f22c8], 0
jne 0x140002ef6
mov byte [0x1409f22dd], 1
mov eax, 0
lea rcx, [0x1409f22d0]
movzx edx, byte [rsp + rax + 0x23]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0xd
jne 0x140002ed1
mov byte [0x1409f22c8], 1
lea rcx, [0x140001b65]
call fcn.1400014f0
lea rax, [0x1409f22d0]
add rsp, 0x38
ret

Function at 0x140002f02
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x57
mov byte [rsp + 0x28], 0x44
mov byte [rsp + 0x29], 0x4f
mov byte [rsp + 0x2a], 0x44
mov byte [rsp + 0x2b], 0x59
mov byte [rsp + 0x2c], 0x11
mov byte [rsp + 0x2d], 0x46
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], 0x50
mov byte [rsp + 0x30], 0xe3
cmp byte [0x1409f2790], 0
jne 0x140002f9c
mov byte [0x1409f27b1], 1
mov eax, 0
lea rcx, [0x1409f27a0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x11
jne 0x140002f77
mov byte [0x1409f2790], 1
lea rcx, [0x1400017a5]
call fcn.1400014f0
lea rax, [0x1409f27a0]
add rsp, 0x48
ret

Function at 0x140002fa8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x45
mov byte [rsp + 0x22], 0x4c
mov byte [rsp + 0x23], 0x57
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x48
mov byte [rsp + 0x26], 0x49
mov byte [rsp + 0x27], 0x48
mov byte [rsp + 0x28], 0x51
mov byte [rsp + 0x29], 0x47
mov byte [rsp + 0x2a], 0x48
mov byte [rsp + 0x2b], 0x55
mov byte [rsp + 0x2c], 0x11
mov byte [rsp + 0x2d], 0x46
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], 0x50
mov byte [rsp + 0x30], 0xe3
cmp byte [0x1409f2678], 0
jne 0x140003042
mov byte [0x1409f2691], 1
mov eax, 0
lea rcx, [0x1409f2680]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x11
jne 0x14000301d
mov byte [0x1409f2678], 1
lea rcx, [0x14000187d]
call fcn.1400014f0
lea rax, [0x1409f2680]
add rsp, 0x48
ret
Function at 0x14000304e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x47
mov byte [rsp + 0x26], 0x53
mov byte [rsp + 0x27], 0x45
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x4f
mov byte [rsp + 0x2a], 0x59
mov byte [rsp + 0x2b], 0x5a
mov byte [rsp + 0x2c], 0x11
mov byte [rsp + 0x2d], 0x51
mov byte [rsp + 0x2e], 0x48
mov byte [rsp + 0x2f], 0x57
mov byte [rsp + 0x30], 0xe3
cmp byte [0x1409f2380], 0
jne 0x1400030e8
mov byte [0x1409f23a1], 1
mov eax, 0
lea rcx, [0x1409f2390]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x11
jne 0x1400030c3
mov byte [0x1409f2380], 1
lea rcx, [0x140001ad5]
call fcn.1400014f0
lea rax, [0x1409f2390]
add rsp, 0x48
ret

Function at 0x1400030f4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x4b
mov byte [rsp + 0x22], 0x52
mov byte [rsp + 0x23], 0x50
mov byte [rsp + 0x24], 0x48
mov byte [rsp + 0x25], 0x11
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x52
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x4b
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x11
mov byte [rsp + 0x2d], 0x46
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], 0x50
mov byte [rsp + 0x30], 0xe3
cmp byte [0x1409f2328], 0
jne 0x14000318e
mov byte [0x1409f2341], 1
mov eax, 0
lea rcx, [0x1409f2330]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x11
jne 0x140003169
mov byte [0x1409f2328], 1
lea rcx, [0x140001b1d]
call fcn.1400014f0
lea rax, [0x1409f2330]
add rsp, 0x48
ret

Function at 0x14000319a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], 0x47
mov byte [rsp + 0x27], 0x44
mov byte [rsp + 0x28], 0x5a
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x48
mov byte [rsp + 0x2c], 0x11
mov byte [rsp + 0x2d], 0x46
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], 0x50
mov byte [rsp + 0x30], 0xe3
cmp byte [0x1409f22e0], 0
jne 0x140003234
mov byte [0x1409f2301], 1
mov eax, 0
lea rcx, [0x1409f22f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x11
jne 0x14000320f
mov byte [0x1409f22e0], 1
lea rcx, [0x140001b4d]
call fcn.1400014f0
lea rax, [0x1409f22f0]
add rsp, 0x48
ret
Function at 0x140003240
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x46
mov byte [rsp + 0x27], 0x44
mov byte [rsp + 0x28], 0x51
mov byte [rsp + 0x29], 0x4a
mov byte [rsp + 0x2a], 0x58
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x47
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f2758], 0
jne 0x1400032e4
mov byte [0x1409f2773], 1
mov eax, 0
lea rcx, [0x1409f2760]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400032bf
mov byte [0x1409f2758], 1
lea rcx, [0x1400017d5]
call fcn.1400014f0
lea rax, [0x1409f2760]
add rsp, 0x48
ret

Function at 0x1400032f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x53
mov byte [rsp + 0x26], 0x46
mov byte [rsp + 0x27], 0x53
mov byte [rsp + 0x28], 0x55
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x48
mov byte [rsp + 0x2c], 0x46
mov byte [rsp + 0x2d], 0x57
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f26d0], 0
jne 0x140003394
mov byte [0x1409f26f3], 1
mov eax, 0
lea rcx, [0x1409f26e0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x14000336f
mov byte [0x1409f26d0], 1
lea rcx, [0x140001835]
call fcn.1400014f0
lea rax, [0x1409f26e0]
add rsp, 0x48
ret

Function at 0x1400033a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x58
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x11
mov byte [rsp + 0x28], 0x51
mov byte [rsp + 0x29], 0x52
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x57
mov byte [rsp + 0x2c], 0x52
mov byte [rsp + 0x2d], 0x51
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f2618], 0
jne 0x140003444
mov byte [0x1409f2633], 1
mov eax, 0
lea rcx, [0x1409f2620]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x14000341f
mov byte [0x1409f2618], 1
lea rcx, [0x1400018c5]
call fcn.1400014f0
lea rax, [0x1409f2620]
add rsp, 0x48
ret
Function at 0x140003450
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x53
mov byte [rsp + 0x22], 0x44
mov byte [rsp + 0x23], 0x51
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x48
mov byte [rsp + 0x28], 0x46
mov byte [rsp + 0x29], 0x58
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x4c
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f2588], 0
jne 0x1400034f4
mov byte [0x1409f25a3], 1
mov eax, 0
lea rcx, [0x1409f2590]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400034cf
mov byte [0x1409f2588], 1
lea rcx, [0x14000193d]
call fcn.1400014f0
lea rax, [0x1409f2590]
add rsp, 0x48
ret

Function at 0x140003500
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x56
mov byte [rsp + 0x26], 0x58
mov byte [rsp + 0x27], 0x55
mov byte [rsp + 0x28], 0x49
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x4b
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x4e
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f2528], 0
jne 0x1400035a4
mov byte [0x1409f2543], 1
mov eax, 0
lea rcx, [0x1409f2530]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x14000357f
mov byte [0x1409f2528], 1
lea rcx, [0x140001985]
call fcn.1400014f0
lea rax, [0x1409f2530]
add rsp, 0x48
ret

Function at 0x1400035b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x4e
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x48
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x4e
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f2408], 0
jne 0x140003654
mov byte [0x1409f2423], 1
mov eax, 0
lea rcx, [0x1409f2410]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x14000362f
mov byte [0x1409f2408], 1
lea rcx, [0x140001a75]
call fcn.1400014f0
lea rax, [0x1409f2410]
add rsp, 0x48
ret
Function at 0x140003660
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x58
mov byte [rsp + 0x22], 0x56
mov byte [rsp + 0x23], 0x44
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x4e
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x53
mov byte [rsp + 0x29], 0x48
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x56
mov byte [rsp + 0x2c], 0x4e
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f23e8], 0
jne 0x140003704
mov byte [0x1409f2403], 1
mov eax, 0
lea rcx, [0x1409f23f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400036df
mov byte [0x1409f23e8], 1
lea rcx, [0x140001a8d]
call fcn.1400014f0
lea rax, [0x1409f23f0]
add rsp, 0x48
ret

Function at 0x140003710
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x45
mov byte [rsp + 0x26], 0x58
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x4f
mov byte [rsp + 0x29], 0x4a
mov byte [rsp + 0x2a], 0x58
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x47
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f2230], 0
jne 0x1400037b4
mov byte [0x1409f2253], 1
mov eax, 0
lea rcx, [0x1409f2240]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x14000378f
mov byte [0x1409f2230], 1
lea rcx, [0x140001bdd]
call fcn.1400014f0
lea rax, [0x1409f2240]
add rsp, 0x48
ret

Function at 0x1400037c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x53
mov byte [rsp + 0x22], 0x44
mov byte [rsp + 0x23], 0x51
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], 0x56
mov byte [rsp + 0x27], 0x48
mov byte [rsp + 0x28], 0x46
mov byte [rsp + 0x29], 0x58
mov byte [rsp + 0x2a], 0x55
mov byte [rsp + 0x2b], 0x4c
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x5c
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f20e8], 0
jne 0x140003864
mov byte [0x1409f2103], 1
mov eax, 0
lea rcx, [0x1409f20f0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x14000383f
mov byte [0x1409f20e8], 1
lea rcx, [0x140001ce5]
call fcn.1400014f0
lea rax, [0x1409f20f0]
add rsp, 0x48
ret
Function at 0x140003870
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x5d
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x51
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x4f
mov byte [rsp + 0x2b], 0x44
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x50
mov byte [rsp + 0x2e], 0x11
mov byte [rsp + 0x2f], 0x46
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x50
mov byte [rsp + 0x32], 0xe3
cmp byte [0x1409f20c0], 0
jne 0x140003914
mov byte [0x1409f20e3], 1
mov eax, 0
lea rcx, [0x1409f20d0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x13
jne 0x1400038ef
mov byte [0x1409f20c0], 1
lea rcx, [0x140001cfd]
call fcn.1400014f0
lea rax, [0x1409f20d0]
add rsp, 0x48
ret

Function at 0x140003920
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x57
mov byte [rsp + 0x22], 0x52
mov byte [rsp + 0x23], 0x57
mov byte [rsp + 0x24], 0x44
mov byte [rsp + 0x25], 0x4f
mov byte [rsp + 0x26], 0x44
mov byte [rsp + 0x27], 0x47
mov byte [rsp + 0x28], 0x45
mov byte [rsp + 0x29], 0x4f
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x46
mov byte [rsp + 0x2c], 0x4e
mov byte [rsp + 0x2d], 0x11
mov byte [rsp + 0x2e], 0x46
mov byte [rsp + 0x2f], 0x52
mov byte [rsp + 0x30], 0x50
mov byte [rsp + 0x31], 0xe3
cmp byte [0x1409f2738], 0
jne 0x1400039bf
mov byte [0x1409f2752], 1
mov eax, 0
lea rcx, [0x1409f2740]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x14000399a
mov byte [0x1409f2738], 1
lea rcx, [0x1400017ed]
call fcn.1400014f0
lea rax, [0x1409f2740]
add rsp, 0x48
ret

Function at 0x1400039cc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x50
mov byte [rsp + 0x22], 0x44
mov byte [rsp + 0x23], 0x4f
mov byte [rsp + 0x24], 0x5a
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], 0x55
mov byte [rsp + 0x27], 0x48
mov byte [rsp + 0x28], 0x45
mov byte [rsp + 0x29], 0x5c
mov byte [rsp + 0x2a], 0x57
mov byte [rsp + 0x2b], 0x48
mov byte [rsp + 0x2c], 0x56
mov byte [rsp + 0x2d], 0x11
mov byte [rsp + 0x2e], 0x46
mov byte [rsp + 0x2f], 0x52
mov byte [rsp + 0x30], 0x50
mov byte [rsp + 0x31], 0xe3
cmp byte [0x1409f25c8], 0
jne 0x140003a6b
mov byte [0x1409f25e2], 1
mov eax, 0
lea rcx, [0x1409f25d0]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003a46
mov byte [0x1409f25c8], 1
lea rcx, [0x14000190d]
call fcn.1400014f0
lea rax, [0x1409f25d0]
add rsp, 0x48
ret
Function at 0x140003a78
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x48
mov byte [rsp + 0x26], 0x50
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x4c
mov byte [rsp + 0x29], 0x56
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], 0x49
mov byte [rsp + 0x2c], 0x57
mov byte [rsp + 0x2d], 0x11
mov byte [rsp + 0x2e], 0x46
mov byte [rsp + 0x2f], 0x52
mov byte [rsp + 0x30], 0x50
mov byte [rsp + 0x31], 0xe3
cmp byte [0x1409f2168], 0
jne 0x140003b17
mov byte [0x1409f2182], 1
mov eax, 0
lea rcx, [0x1409f2170]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003af2
mov byte [0x1409f2168], 1
lea rcx, [0x140001c85]
call fcn.1400014f0
lea rax, [0x1409f2170]
add rsp, 0x48
ret

Function at 0x140003b24
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x49
mov byte [rsp + 0x26], 0x10
mov byte [rsp + 0x27], 0x56
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x46
mov byte [rsp + 0x2a], 0x58
mov byte [rsp + 0x2b], 0x55
mov byte [rsp + 0x2c], 0x48
mov byte [rsp + 0x2d], 0x11
mov byte [rsp + 0x2e], 0x46
mov byte [rsp + 0x2f], 0x52
mov byte [rsp + 0x30], 0x50
mov byte [rsp + 0x31], 0xe3
cmp byte [0x1409f2140], 0
jne 0x140003bc3
mov byte [0x1409f2162], 1
mov eax, 0
lea rcx, [0x1409f2150]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003b9e
mov byte [0x1409f2140], 1
lea rcx, [0x140001c9d]
call fcn.1400014f0
lea rax, [0x1409f2150]
add rsp, 0x48
ret

Function at 0x140003bd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x20], 3
mov byte [rsp + 0x21], 0x5a
mov byte [rsp + 0x22], 0x5a
mov byte [rsp + 0x23], 0x5a
mov byte [rsp + 0x24], 0x11
mov byte [rsp + 0x25], 0x46
mov byte [rsp + 0x26], 0x46
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x48
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 0x51
mov byte [rsp + 0x2b], 0x48
mov byte [rsp + 0x2c], 0x55
mov byte [rsp + 0x2d], 0x11
mov byte [rsp + 0x2e], 0x46
mov byte [rsp + 0x2f], 0x52
mov byte [rsp + 0x30], 0x50
mov byte [rsp + 0x31], 0xe3
cmp byte [0x1409f2040], 0
jne 0x140003c6f
mov byte [0x1409f2062], 1
mov eax, 0
lea rcx, [0x1409f2050]
movzx edx, byte [rsp + rax + 0x20]
mov byte [rcx + rax], dl
add rax, 1
cmp rax, 0x12
jne 0x140003c4a
mov byte [0x1409f2040], 1
lea rcx, [0x140001d5d]
call fcn.1400014f0
lea rax, [0x1409f2050]
add rsp, 0x48
ret