joyce8/EMBER2024-capa huggingface dataset:
Function at 0x79225910
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_CryptCATCDFEnumMembers___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.CryptCATCDFEnumMembers
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225970
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_CryptCATCDFEnumMembersByCDFTag___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.CryptCATCDFEnumMembersByCDFTag
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x792259d0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_CryptCATHandleFromStore___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.CryptCATHandleFromStore
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225a30
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_CryptCATPersistStore___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.CryptCATPersistStore
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225a90
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_CryptCATPutAttrInfo___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.CryptCATPutAttrInfo
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225af0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_CryptCATPutCatAttrInfo___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.CryptCATPutCatAttrInfo
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4
Function at 0x79225b50
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_CryptCATPutMemberInfo___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.CryptCATPutMemberInfo
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225bb0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_CryptCATStoreFromHandle___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.CryptCATStoreFromHandle
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225c10
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_CryptCATVerifyMember___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.CryptCATVerifyMember
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225c70
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_CryptSIPGetInfo___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.CryptSIPGetInfo
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225cd0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_CryptSIPGetRegWorkingFlags___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.CryptSIPGetRegWorkingFlags
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225d30
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MsCatConstructHashTag___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.MsCatConstructHashTag
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4
Function at 0x79225d90
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MsCatFreeHashTag___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.MsCatFreeHashTag
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225df0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_OfficeCleanupPolicy___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.OfficeCleanupPolicy
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225e50
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_OfficeInitializePolicy___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.OfficeInitializePolicy
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225eb0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_SoftpubDumpStructure___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.SoftpubDumpStructure
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225f10
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_SoftpubFreeDefUsageCallData___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.SoftpubFreeDefUsageCallData
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79225f70
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_SoftpubLoadDefUsageCallData___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.SoftpubLoadDefUsageCallData
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4
Function at 0x79225fd0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_TrustDecode___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.TrustDecode
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79226030
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_TrustFindIssuerCertificate___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.TrustFindIssuerCertificate
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79226090
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_TrustFreeDecode___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.TrustFreeDecode
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x792260f0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_TrustOpenStores___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.TrustOpenStores
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79226150
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WTHelperCertFindIssuerCertificate___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WTHelperCertFindIssuerCertificate
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x792261b0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WTHelperCertIsSelfSigned___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WTHelperCertIsSelfSigned
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4
Function at 0x79226210
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WTHelperCheckCertUsage___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WTHelperCheckCertUsage
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79226270
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WTHelperGetAgencyInfo___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WTHelperGetAgencyInfo
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x792262d0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WTHelperGetFileHash___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WTHelperGetFileHash
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79226330
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WTHelperIsInRootStore___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WTHelperIsInRootStore
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79226390
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WTHelperOpenKnownStores___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WTHelperOpenKnownStores
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4
Function at 0x792263f0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WVTAsn1SpcMinimalCriteriaInfoDecode___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WVTAsn1SpcMinimalCriteriaInfoDecode
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79226450
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WVTAsn1SpcMinimalCriteriaInfoEncode___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WVTAsn1SpcMinimalCriteriaInfoEncode
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x792264b0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WVTAsn1SpcSigInfoDecode___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WVTAsn1SpcSigInfoDecode
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79226510
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WVTAsn1SpcSigInfoEncode___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WVTAsn1SpcSigInfoEncode
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79226570
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WVTAsn1SpcSpAgencyInfoDecode___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WVTAsn1SpcSpAgencyInfoDecode
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4
Function at 0x792265d0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WVTAsn1SpcSpAgencyInfoEncode___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WVTAsn1SpcSpAgencyInfoEncode
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79226630
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WVTAsn1SpcStatementTypeDecode___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WVTAsn1SpcStatementTypeDecode
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79226690
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WVTAsn1SpcStatementTypeEncode___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WVTAsn1SpcStatementTypeEncode
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x792266f0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WintrustGetDefaultForUsage___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x7922d991
mov dword [ebp - 0x40], str.WintrustGetDefaultForUsage
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4
Function at 0x79228c30
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
lea esi, [ebp + 0xc]
sub esp, 0x10
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 8], 0x1b
lea ebx, [eax + 0x40]
mov dword [esp + 4], 1
mov dword [esp + 0xc], ebx
mov dword [esp], 0x7922e784
call sym._fwrite
mov eax, dword [ebp + 8]
mov dword [esp + 8], esi
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.msvcrt.dll_vfprintf]
call sym._abort
lea esi, [esi]
Function at 0x414ac0
Capabilities:
Encode data using xor

Disassembly:
add byte cs:[edx - 0x72015710], bl
push 0
adc bh, byte [eax - 0x68dff91]
outsd dx, dword [esi]
leave
mov cl, 0xf9
outsd dx, dword [esi]
add byte [edx - 7], dh
outsd dx, dword [esi]
add byte [edx - 7], dh
outsd dx, dword [esi]
add byte [edx - 7], dh
xchg ebx, ecx
lea eax, [esi]
nop
ret
jb 0x414a8f
or cl, bh
mov esp, 0xe9278b63
out dx, eax
cmp eax, 0x2ea8b2
jb 0x414a00
sub byte [ebx + 0x421df88a], al
int1
adc dword [esi + 0x74], ebp
jle 0x414afa
xchg dword [ecx], eax
push es
ljmp 0xeb70
push es
xchg ebx, ecx
adc al, 6
nop
jmp 0x414aee
cmp cl, byte [ecx - 0x2f95c069]
and edi, dword [eax + 0x291a016f]
lodsd eax, dword [esi]
inc edx
jb 0x414a63
cdq
call 0xffd286de
and dl, byte [ecx]
retf
lea eax, [esi]
xchg dword [ebx - 0x73], ebx
push es
nop
mov eax, 0x2e9962
lcall 0xac30, 0x8dffe928
add byte [edx - 7], dh
outsd dx, dword [esi]
add byte [edx - 7], dh
outsd dx, dword [esi]
add byte [edx - 7], dh
outsd dx, dword [esi]
add byte [edx - 7], dh
nop
dec dword [ebp + 0x72006f06]
stc
nop
dec dword [ebp + 0x72006f06]
stc
outsd dx, dword [esi]
add byte [edx - 7], dh
outsd dx, dword [esi]
add byte [edx - 7], dh
outsd dx, dword [esi]
add cl, dh
adc eax, 0xdd76c76b
sub dword [eax - 0x49906d0], 0x3d
xchg ecx, eax
outsd dx, dword [esi]
jo 0x414b6e
imul eax, edi, 0x76
fld qword [ebx + 0x66f930a8]
sti
cmp eax, 0x33706f91
stc
and dword [edi - 0x36], eax
and ebp, ebp
cmp dh, ah
inc edx
mov al, byte [0x46bc1251]
push dword [eax + eax*2]
outsd dx, dword [esi]
adc byte [edx], dh
stc
out dx, al
invalid
lea edx, [ecx]
inc esp
add byte [edx - 7], dh
aam 0x2a
pop ds
and ch, byte [edx - 0x1bf0a4a7]
adc al, 0x56
jp 0x414b2c
add al, 0xf3
out dx, eax
xor byte [ebp - 0x47], al
xchg dword [edx], edx
jb 0x414b85
outsd dx, dword [esi]
add dword [eax + esi*8 + 0x308d0198], ecx
and al, 0x29
lodsd eax, dword [esi]
cmp esp, dword [ebx]
pop ebx
pcmpgtd mm6, mm7
cmp eax, ecx
outsb dx, byte [esi]
mov esi, 0xc3b5ea8d
cmp byte [ebx], ch
jb 0x414ba5
ret
dec esi
sti
and eax, 0x93efeea2
jo 0x414b3c
jle 0x414c02
sub byte [edx], bl
in eax, 0xf3
push ss
outsb dx, byte [esi]
add byte [edx - 7], dh
out dx, al
ret
fisubr dword [edx + 0x152cdadc]
invalid