joyce8/EMBER2024-capa huggingface dataset:
Function at 0x69e800
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x28
mov eax, dword [0x81f390]
xor eax, esp
mov dword [esp + 0x24], eax
cmp dword [0x854fdc], 0
je 0x69e829
inc dword [0x80fe88]
mov eax, dword [0x854fdc]
xor eax, 0x11223344
jne 0x69e88e
push 5
lea eax, [esp + 8]
mov dword [esp + 8], 0x746b765a
push eax
mov dword [esp + 0x10], 0x6447663c
mov dword [esp + 0x14], 0x796b0636
mov dword [esp + 0x18], 0x74634670
mov dword [esp + 0x1c], 0xb4850
call fcn.0069d100
lea eax, [esp]
mov dword [esp], 0
push eax
lea eax, [esp + 8]
push eax
call fcn.0069c2d0
mov dword [esp + 0x14], 0
xorps xmm0, xmm0
mov dword [esp], 0
movdqu xmmword [esp + 4], xmm0
test eax, eax
je 0x69e8a6
cmp dword [0x854fdc], 0
jne 0x69e8a6
mov dword [0x854fdc], eax
xor dword [0x854fdc], 0x11223344
mov ecx, dword [esp + 0x24]
xor ecx, esp
call fcn.006f7ca4
add esp, 0x28
ret

Function at 0x69ebd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x50
mov eax, dword [0x81f390]
xor eax, esp
mov dword [esp + 0x4c], eax
cmp dword [0x85503c], 0
je 0x69ebff
inc dword [0x80fe88]
mov eax, dword [0x85503c]
xor eax, 0x11223344
jne 0x69ec7d
push 8
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x746b765a
push eax
mov dword [esp + 0x1c], 0x7445663c
mov dword [esp + 0x20], 0x6c6b3814
mov dword [esp + 0x24], 0x4e7b6171
mov dword [esp + 0x28], 0x757f3a39
mov dword [esp + 0x2c], 0x7d492625
mov dword [esp + 0x30], 0x617d6d79
mov dword [esp + 0x34], 0xb4850
call fcn.0069d100
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
lea eax, [esp + 0x14]
push eax
call fcn.0069c2d0
mov dword [esp + 0xc], 0
xorps xmm0, xmm0
movdqa xmmword [esp + 0x10], xmm0
movdqa xmmword [esp + 0x20], xmm0
test eax, eax
je 0x69ec95
cmp dword [0x85503c], 0
jne 0x69ec95
mov dword [0x85503c], eax
xor dword [0x85503c], 0x11223344
mov ecx, dword [esp + 0x4c]
xor ecx, esp
call fcn.006f7ca4
mov esp, ebp
pop ebp
ret

Function at 0x69ecb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x40
mov eax, dword [0x81f390]
xor eax, esp
mov dword [esp + 0x3c], eax
cmp dword [0x855034], 0
je 0x69ece3
inc dword [0x80fe88]
mov eax, dword [0x855034]
xor eax, 0x11223344
jne 0x69ed79
push 8
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x746b765a
push eax
mov dword [esp + 0x1c], 0x7445663c
mov dword [esp + 0x20], 0x6a613f15
mov dword [esp + 0x24], 0x7e614b6d
mov dword [esp + 0x28], 0x61663a3f
mov dword [esp + 0x2c], 0x766b2330
mov dword [esp + 0x30], 0x7b607044
mov dword [esp + 0x34], 0x783b35
call fcn.0069d100
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
lea eax, [esp + 0x14]
push eax
call fcn.0069c2d0
mov dword [esp + 0xc], 0
xorps xmm0, xmm0
movdqa xmmword [esp + 0x10], xmm0
movdqa xmmword [esp + 0x20], xmm0
test eax, eax
je 0x69ed79
cmp dword [0x855034], 0
jne 0x69ed79
mov dword [0x855034], eax
xor dword [0x855034], 0x11223344
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.006f7ca4
mov esp, ebp
pop ebp
ret
Function at 0x69ed90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x40
mov eax, dword [0x81f390]
xor eax, esp
mov dword [esp + 0x3c], eax
cmp dword [0x855098], 0
je 0x69edc3
inc dword [0x80fe88]
mov eax, dword [0x855098]
xor eax, 0x11223344
jne 0x69ee59
push 8
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x746b765a
push eax
mov dword [esp + 0x1c], 0x7445663c
mov dword [esp + 0x20], 0x6a613f15
mov dword [esp + 0x24], 0x7e614b6d
mov dword [esp + 0x28], 0x61663a3f
mov dword [esp + 0x2c], 0x766b2330
mov dword [esp + 0x30], 0x7d7d6a40
mov dword [esp + 0x34], 0xb2c31
call fcn.0069d100
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
lea eax, [esp + 0x14]
push eax
call fcn.0069c2d0
mov dword [esp + 0xc], 0
xorps xmm0, xmm0
movdqa xmmword [esp + 0x10], xmm0
movdqa xmmword [esp + 0x20], xmm0
test eax, eax
je 0x69ee59
cmp dword [0x855098], 0
jne 0x69ee59
mov dword [0x855098], eax
xor dword [0x855098], 0x11223344
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.006f7ca4
mov esp, ebp
pop ebp
ret

Function at 0x69f010
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x40
mov eax, dword [0x81f390]
xor eax, esp
mov dword [esp + 0x3c], eax
cmp dword [0x855030], 0
je 0x69f043
inc dword [0x80fe88]
mov eax, dword [0x855030]
xor eax, 0x11223344
jne 0x69f0d9
push 8
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x746b765a
push eax
mov dword [esp + 0x1c], 0x7445663c
mov dword [esp + 0x20], 0x6a613f15
mov dword [esp + 0x24], 0x6b76516d
mov dword [esp + 0x28], 0x49662d24
mov dword [esp + 0x2c], 0x6a6b2c2a
mov dword [esp + 0x30], 0x717b6379
mov dword [esp + 0x34], 0xb263f
call fcn.0069d100
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
lea eax, [esp + 0x14]
push eax
call fcn.0069c2d0
mov dword [esp + 0xc], 0
xorps xmm0, xmm0
movdqa xmmword [esp + 0x10], xmm0
movdqa xmmword [esp + 0x20], xmm0
test eax, eax
je 0x69f0d9
cmp dword [0x855030], 0
jne 0x69f0d9
mov dword [0x855030], eax
xor dword [0x855030], 0x11223344
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.006f7ca4
mov esp, ebp
pop ebp
ret
Function at 0x69fcc0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x48
mov eax, dword [0x81f390]
xor eax, esp
mov dword [esp + 0x44], eax
push ebx
mov bl, byte [esp + 0x50]
test bl, bl
jne 0x69fd21
cmp dword [0x855110], 0
je 0x69fce7
mov eax, dword [0x855110]
jmp 0x69fd2f
mov dword [esp + 0x10], 0x6c610d6a
mov dword [esp + 0x14], 0x6c7c7b47
mov dword [esp + 0x18], 0x694d2535
mov dword [esp + 0x1c], 0x79732736
mov dword [esp + 0x20], 0x795b6766
mov dword [esp + 0x24], 0x6e2432
mov dword [esp + 0x28], 0x18044a44
jmp 0x69fd82
cmp dword [0x855114], 0
je 0x69fd4a
mov eax, dword [0x855114]
xor eax, 0x180f0214
test eax, eax
je 0x69fd92
pop ebx
mov ecx, dword [esp + 0x44]
xor ecx, esp
call fcn.006f7ca4
add esp, 0x48
ret 4
mov dword [esp + 0x10], 0x6d6a0f6a
mov dword [esp + 0x14], 0x6b765179
mov dword [esp + 0x18], 0x46662d24
mov dword [esp + 0x1c], 0x6f69382d
mov dword [esp + 0x20], 0x4c6a7075
mov dword [esp + 0x24], 0x65672a31
mov dword [esp + 0x28], 0x18044a37
mov dword [esp + 0xc], 0x32382435
mov dword [esp + 8], 0x767d677f
push esi
push 9
lea eax, [esp + 0x10]
push eax
call fcn.0069d100
lea eax, [esp + 8]
mov dword [esp + 8], 0
push eax
lea eax, [esp + 0x10]
push eax
call fcn.0069c2d0
push 0x40
mov esi, eax
lea eax, [esp + 0x10]
push 0
push eax
call fcn.006f87a0
add esp, 0xc
mov dword [esp + 8], 0
mov eax, esi
test esi, esi
je 0x69fe01
xor eax, 0x180f0214
test bl, bl
jne 0x69fdfa
mov dword [0x855110], eax
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x44]
xor ecx, esp
call fcn.006f7ca4
add esp, 0x48
ret 4
mov dword [0x855114], eax
mov eax, esi
mov ecx, dword [esp + 0x4c]
pop esi
pop ebx
xor ecx, esp
call fcn.006f7ca4
add esp, 0x48
ret 4
Function at 0x6a1dc0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x7772d8
mov eax, dword fs:[0]
push eax
sub esp, 0x10
mov eax, dword [0x81f390]
xor eax, esp
mov dword [esp + 0xc], eax
push ebx
push esi
push edi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov esi, ecx
xorps xmm0, xmm0
lea ecx, [esp + 0x14]
movq qword [esp + 0x14], xmm0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00532110
mov dword [esp + 0x14], eax
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
mov dword [esp + 0x2c], 0
mov eax, dword [eax + 0xc]
call eax
test al, al
je 0x6a1efe
mov eax, dword [esi]
lea edi, [esi + 0x14]
push edi
mov ecx, esi
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x6a1efe
push edi
lea eax, [esp + 0x18]
mov ecx, esi
push eax
call fcn.006a1f50
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call dword [eax + 0x18]
mov eax, dword [esi + 0x10]
lea ebx, [esi + 8]
sub eax, dword [ebx]
mov ecx, dword [esp + 0x18]
sar eax, 5
cmp eax, ecx
jae 0x6a1e92
cmp ecx, 0x7ffffff
jbe 0x6a1e8a
push str.vector_T__too_long
call fcn.006f2a33
push ecx
mov ecx, ebx
call fcn.006a2440
mov edi, dword [esp + 0x14]
mov esi, dword [edi]
cmp esi, edi
je 0x6a1efa
lea esp, [esp]
lea eax, [esi + 0x10]
mov ecx, ebx
push eax
call fcn.006a2640
cmp byte [esi + 0xd], 0
jne 0x6a1ef2
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
jne 0x6a1ed0
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x6a1ef2
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x6a1ec4
jmp 0x6a1ef2
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x6a1ef0
lea esp, [esp]
cmp esi, dword [eax + 8]
jne 0x6a1ef0
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x6a1ee0
mov esi, eax
cmp esi, edi
jne 0x6a1ea0
mov edi, dword [esp + 0x14]
mov bl, 1
jmp 0x6a1f04
mov edi, dword [esp + 0x14]
xor bl, bl
push edi
push dword [edi]
lea eax, [esp + 0x18]
mov dword [esp + 0x30], 0xffffffff
push eax
lea ecx, [esp + 0x20]
call fcn.00688a60
push dword [esp + 0x14]
call fcn.006f75a9
add esp, 4
mov al, bl
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc]
xor ecx, esp
call fcn.006f7ca4
add esp, 0x1c
ret
Function at 0x6a4ac0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x777610
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, dword [esp + 0x34]
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], 0
movdqu xmmword [esi], xmm0
movdqu xmmword [esi + 0x10], xmm0
mov eax, dword [eax]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov dword [esp + 8], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_919206c5cea4cc9ef00794828fef7e2a___0___class_std::allocator_class_std::_Func_class_void__struct_CERT_CERTIFICATE_CONTEXT_____void__struct_CERT_CERTIFICATE_CONTEXT__.0
mov dword [esp + 0x18], eax
push 0x10
mov dword [esp + 0x30], 1
call fcn.006f7558
add esp, 4
test eax, eax
je 0x6a4b35
xorps xmm0, xmm0
movdqu xmmword [eax], xmm0
jmp 0x6a4b37
xor eax, eax
lea ecx, [esp + 8]
push ecx
push eax
mov ecx, esi
call fcn.006a7350
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], 0xffffffff
test ecx, ecx
je 0x6a4b66
mov edx, dword [ecx]
lea eax, [esp + 8]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [esi]
xorps xmm0, xmm0
mov eax, esi
movdqu xmmword [ecx], xmm0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret

Function at 0x6a4be0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x777610
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, dword [esp + 0x34]
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], 0
movdqu xmmword [esi], xmm0
movdqu xmmword [esi + 0x10], xmm0
mov eax, dword [eax]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov dword [esp + 8], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_a98a09bd71fedf41e27e35f7b65694e8___0___class_std::allocator_class_std::_Func_class_void__struct_CERT_CERTIFICATE_STORAGE_____void__struct_CERT_CERTIFICATE_STORAGE__.0
mov dword [esp + 0x18], eax
push 0xc
mov dword [esp + 0x30], 1
call fcn.006f7558
add esp, 4
test eax, eax
je 0x6a4c5c
xorps xmm0, xmm0
movq qword [eax], xmm0
mov dword [eax + 8], 0
jmp 0x6a4c5e
xor eax, eax
lea ecx, [esp + 8]
push ecx
push eax
mov ecx, esi
call fcn.006a7350
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], 0xffffffff
test ecx, ecx
je 0x6a4c8d
mov edx, dword [ecx]
lea eax, [esp + 8]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [esi]
xorps xmm0, xmm0
mov eax, esi
movq qword [ecx], xmm0
mov dword [ecx + 8], 0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret
Function at 0x6a4d00
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x777610
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, dword [esp + 0x34]
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], 0
movdqu xmmword [esi], xmm0
movdqu xmmword [esi + 0x10], xmm0
mov eax, dword [eax]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov dword [esp + 8], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_c76859cc2679a88c9644de564e5c5bb6___0___class_std::allocator_class_std::_Func_class_void__struct_PKCS7_CONTENT_FI_DYNAMIC_CONTEXT_____void__struct_PKCS7_CONTENT_FI_DYNAMIC_CONTEXT__.0
mov dword [esp + 0x18], eax
push 0x14
mov dword [esp + 0x30], 1
call fcn.006f7558
add esp, 4
test eax, eax
je 0x6a4d7c
xorps xmm0, xmm0
movdqu xmmword [eax], xmm0
mov dword [eax + 0x10], 0
jmp 0x6a4d7e
xor eax, eax
lea ecx, [esp + 8]
push ecx
push eax
mov ecx, esi
call fcn.006a7350
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], 0xffffffff
test ecx, ecx
je 0x6a4dad
mov edx, dword [ecx]
lea eax, [esp + 8]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [esi]
xorps xmm0, xmm0
mov eax, esi
movdqu xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret

Function at 0x6a4f50
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x777610
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, dword [esp + 0x34]
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], 0
movdqu xmmword [esi], xmm0
movdqu xmmword [esi + 0x10], xmm0
mov eax, dword [eax]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov dword [esp + 8], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_73d93d5a7eadba59047f4c5fdb3135a2___0___class_std::allocator_class_std::_Func_class_void__struct_PKCS7_CONTENT_FI_P_CONTEXT_____void__struct_PKCS7_CONTENT_FI_P_CONTEXT__.0
mov dword [esp + 0x18], eax
push 0x14
mov dword [esp + 0x30], 1
call fcn.006f7558
add esp, 4
test eax, eax
je 0x6a4fcc
xorps xmm0, xmm0
movdqu xmmword [eax], xmm0
mov dword [eax + 0x10], 0
jmp 0x6a4fce
xor eax, eax
lea ecx, [esp + 8]
push ecx
push eax
mov ecx, esi
call fcn.006a7350
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], 0xffffffff
test ecx, ecx
je 0x6a4ffd
mov edx, dword [ecx]
lea eax, [esp + 8]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [esi]
xorps xmm0, xmm0
mov eax, esi
movdqu xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret
Function at 0x6a5070
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x777610
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, dword [esp + 0x34]
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], 0
movdqu xmmword [esi], xmm0
movdqu xmmword [esi + 0x10], xmm0
mov eax, dword [eax]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov dword [esp + 8], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_27645547b5a83a2fb8473cd270a7a393___0___class_std::allocator_class_std::_Func_class_void__struct_PKCS7_CONTENT_FI_T_CONTEXT_____void__struct_PKCS7_CONTENT_FI_T_CONTEXT__.0
mov dword [esp + 0x18], eax
push 0x14
mov dword [esp + 0x30], 1
call fcn.006f7558
add esp, 4
test eax, eax
je 0x6a50ec
xorps xmm0, xmm0
movdqu xmmword [eax], xmm0
mov dword [eax + 0x10], 0
jmp 0x6a50ee
xor eax, eax
lea ecx, [esp + 8]
push ecx
push eax
mov ecx, esi
call fcn.006a7350
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], 0xffffffff
test ecx, ecx
je 0x6a511d
mov edx, dword [ecx]
lea eax, [esp + 8]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [esi]
xorps xmm0, xmm0
mov eax, esi
movdqu xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret

Function at 0x6a52b0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x777610
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, dword [esp + 0x34]
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], 0
movdqu xmmword [esi], xmm0
movdqu xmmword [esi + 0x10], xmm0
mov eax, dword [eax]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov dword [esp + 8], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_28b9560e40db308869e66175ea5d964d___0___class_std::allocator_class_std::_Func_class_void__struct_PKCS7_CONTENT_PI_DYNAMIC_CONTEXT_____void__struct_PKCS7_CONTENT_PI_DYNAMIC_CONTEXT__.0
mov dword [esp + 0x18], eax
push 0x14
mov dword [esp + 0x30], 1
call fcn.006f7558
add esp, 4
test eax, eax
je 0x6a532c
xorps xmm0, xmm0
movdqu xmmword [eax], xmm0
mov dword [eax + 0x10], 0
jmp 0x6a532e
xor eax, eax
lea ecx, [esp + 8]
push ecx
push eax
mov ecx, esi
call fcn.006a7350
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], 0xffffffff
test ecx, ecx
je 0x6a535d
mov edx, dword [ecx]
lea eax, [esp + 8]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [esi]
xorps xmm0, xmm0
mov eax, esi
movdqu xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret
Function at 0x6a53d0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x777610
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, dword [esp + 0x34]
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], 0
movdqu xmmword [esi], xmm0
movdqu xmmword [esi + 0x10], xmm0
mov eax, dword [eax]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov dword [esp + 8], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_ad0975232e855d23621090a423b8d0a0___0___class_std::allocator_class_std::_Func_class_void__struct_PKCS7_CONTENT_PI_MERGE_CONTEXT_____void__struct_PKCS7_CONTENT_PI_MERGE_CONTEXT__.0
mov dword [esp + 0x18], eax
push 0x14
mov dword [esp + 0x30], 1
call fcn.006f7558
add esp, 4
test eax, eax
je 0x6a544c
xorps xmm0, xmm0
movdqu xmmword [eax], xmm0
mov dword [eax + 0x10], 0
jmp 0x6a544e
xor eax, eax
lea ecx, [esp + 8]
push ecx
push eax
mov ecx, esi
call fcn.006a7350
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], 0xffffffff
test ecx, ecx
je 0x6a547d
mov edx, dword [ecx]
lea eax, [esp + 8]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [esi]
xorps xmm0, xmm0
mov eax, esi
movdqu xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret

Function at 0x6a54f0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x777610
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, dword [esp + 0x34]
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], 0
movdqu xmmword [esi], xmm0
movdqu xmmword [esi + 0x10], xmm0
mov eax, dword [eax]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov dword [esp + 8], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_8e30157246d886f34b09c32dfa01fd24___0___class_std::allocator_class_std::_Func_class_void__struct_PKCS7_CONTENT_PI_P_CONTEXT_____void__struct_PKCS7_CONTENT_PI_P_CONTEXT__.0
mov dword [esp + 0x18], eax
push 0x14
mov dword [esp + 0x30], 1
call fcn.006f7558
add esp, 4
test eax, eax
je 0x6a556c
xorps xmm0, xmm0
movdqu xmmword [eax], xmm0
mov dword [eax + 0x10], 0
jmp 0x6a556e
xor eax, eax
lea ecx, [esp + 8]
push ecx
push eax
mov ecx, esi
call fcn.006a7350
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], 0xffffffff
test ecx, ecx
je 0x6a559d
mov edx, dword [ecx]
lea eax, [esp + 8]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [esi]
xorps xmm0, xmm0
mov eax, esi
movdqu xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret
Function at 0x6a5610
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x777610
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, dword [esp + 0x34]
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], 0
movdqu xmmword [esi], xmm0
movdqu xmmword [esi + 0x10], xmm0
mov eax, dword [eax]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov dword [esp + 8], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_822a8487a9aecccdd700b0e1e30069ff___0___class_std::allocator_class_std::_Func_class_void__struct_PKCS7_CONTENT_PI_T_CONTEXT_____void__struct_PKCS7_CONTENT_PI_T_CONTEXT__.0
mov dword [esp + 0x18], eax
push 0x14
mov dword [esp + 0x30], 1
call fcn.006f7558
add esp, 4
test eax, eax
je 0x6a568c
xorps xmm0, xmm0
movdqu xmmword [eax], xmm0
mov dword [eax + 0x10], 0
jmp 0x6a568e
xor eax, eax
lea ecx, [esp + 8]
push ecx
push eax
mov ecx, esi
call fcn.006a7350
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], 0xffffffff
test ecx, ecx
je 0x6a56bd
mov edx, dword [ecx]
lea eax, [esp + 8]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [esi]
xorps xmm0, xmm0
mov eax, esi
movdqu xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret

Function at 0x6a56e0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x777610
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, dword [esp + 0x34]
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], 0
movdqu xmmword [esi], xmm0
movdqu xmmword [esi + 0x10], xmm0
mov eax, dword [eax]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov dword [esp + 8], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_3ec4578b1a215e4498cd6a3156908392___0___class_std::allocator_class_std::_Func_class_void__struct_PKCS7_CONTENT_REMOTE_CONTEXT_____void__struct_PKCS7_CONTENT_REMOTE_CONTEXT__.0
mov dword [esp + 0x18], eax
push 0x14
mov dword [esp + 0x30], 1
call fcn.006f7558
add esp, 4
test eax, eax
je 0x6a575c
xorps xmm0, xmm0
movdqu xmmword [eax], xmm0
mov dword [eax + 0x10], 0
jmp 0x6a575e
xor eax, eax
lea ecx, [esp + 8]
push ecx
push eax
mov ecx, esi
call fcn.006a7350
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], 0xffffffff
test ecx, ecx
je 0x6a578d
mov edx, dword [ecx]
lea eax, [esp + 8]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [esi]
xorps xmm0, xmm0
mov eax, esi
movdqu xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret