joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100249b0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101104a9
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x1014a524]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x14], esi
mov dword [esi + 4], 0
mov dword [esi + 8], 0
push 0x10
mov dword [ebp - 4], 0
call fcn.100e1469
mov ecx, eax
add esp, 4
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x10024a2c
xorps xmm0, xmm0
movq qword [ecx], xmm0
mov dword [ecx + 8], 0
mov dword [ecx + 4], 1
mov dword [ecx + 8], 1
mov dword [ecx], vtable.std::_Ref_count_obj2_class__lambda_616d6ef7594a99784be4f22a0a0013d7__.0
jmp 0x10024a2e
xor ecx, ecx
mov edi, dword [esi + 8]
lea eax, [ecx + 0xc]
or ebx, 0xffffffff
mov dword [esi + 4], eax
mov dword [esi + 8], ecx
test edi, edi
je 0x10024a60
mov eax, ebx
lock xadd dword [edi + 4], eax
jne 0x10024a60
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, ebx
lock xadd dword [edi + 8], eax
jne 0x10024a60
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov dword [esi], eax
mov dword [esi + 0xc], 0x1002dd50
mov dword [esi + 0x10], 0x1002dd50
lea ebx, [esi + 0x14]
mov dword [ebp - 4], 1
mov dword [ebp - 0x14], ebx
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
push 0x10
mov byte [ebp - 4], 2
call fcn.100e1469
mov ecx, eax
add esp, 4
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x10024ac9
xorps xmm0, xmm0
movq qword [ecx], xmm0
mov dword [ecx + 8], 0
mov dword [ecx + 4], 1
mov dword [ecx + 8], 1
mov dword [ecx], vtable.std::_Ref_count_obj2_class__lambda_0296d5f97caaa3a8db88ced08dcb3e58__.0
jmp 0x10024acb
xor ecx, ecx
mov edi, dword [ebx + 8]
lea eax, [ecx + 0xc]
mov dword [ebx + 4], eax
mov dword [ebx + 8], ecx
test edi, edi
je 0x10024afd
or eax, 0xffffffff
lock xadd dword [edi + 4], eax
jne 0x10024afd
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [edi + 8], eax
dec eax
jne 0x10024afd
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov eax, dword [ebp + 8]
add eax, 0x14
mov dword [ebx + 0xc], 0x1002dce0
mov dword [ebx], eax
mov dword [ebx + 0x10], 0x1002dce0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
lea ecx, [esi + 0x30]
mov byte [ebp - 4], 4
call fcn.100c52a0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x10024b50
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101104a9
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x1014a524]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x14], esi
mov dword [esi + 4], 0
mov dword [esi + 8], 0
push 0x10
mov dword [ebp - 4], 0
call fcn.100e1469
mov ecx, eax
add esp, 4
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x10024bcc
xorps xmm0, xmm0
movq qword [ecx], xmm0
mov dword [ecx + 8], 0
mov dword [ecx + 4], 1
mov dword [ecx + 8], 1
mov dword [ecx], vtable.std::_Ref_count_obj2_class__lambda_67d0f60f6b358bd47a407a1ace07ccc1__.0
jmp 0x10024bce
xor ecx, ecx
mov edi, dword [esi + 8]
lea eax, [ecx + 0xc]
or ebx, 0xffffffff
mov dword [esi + 4], eax
mov dword [esi + 8], ecx
test edi, edi
je 0x10024c00
mov eax, ebx
lock xadd dword [edi + 4], eax
jne 0x10024c00
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, ebx
lock xadd dword [edi + 8], eax
jne 0x10024c00
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov dword [esi], eax
mov dword [esi + 0xc], 0x1002dd70
mov dword [esi + 0x10], 0x1002dd70
lea ebx, [esi + 0x14]
mov dword [ebp - 4], 1
mov dword [ebp - 0x14], ebx
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
push 0x10
mov byte [ebp - 4], 2
call fcn.100e1469
mov ecx, eax
add esp, 4
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x10024c69
xorps xmm0, xmm0
movq qword [ecx], xmm0
mov dword [ecx + 8], 0
mov dword [ecx + 4], 1
mov dword [ecx + 8], 1
mov dword [ecx], vtable.std::_Ref_count_obj2_class__lambda_3dfde576477671f535a2924ec6d80fa6__.0
jmp 0x10024c6b
xor ecx, ecx
mov edi, dword [ebx + 8]
lea eax, [ecx + 0xc]
mov dword [ebx + 4], eax
mov dword [ebx + 8], ecx
test edi, edi
je 0x10024c9d
or eax, 0xffffffff
lock xadd dword [edi + 4], eax
jne 0x10024c9d
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [edi + 8], eax
dec eax
jne 0x10024c9d
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov eax, dword [ebp + 8]
add eax, 0x14
mov dword [ebx + 0xc], 0x1002dce0
mov dword [ebx], eax
mov dword [ebx + 0x10], 0x1002dce0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
lea ecx, [esi + 0x30]
mov byte [ebp - 4], 4
call fcn.100c52a0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x100266b0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10110875
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x1014a524]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea ecx, [ebp - 0x10]
call fcn.1003d9f0
mov ecx, dword [edi]
mov dword [ebp - 4], 0
test ecx, ecx
je 0x1002672d
lea eax, [ebp - 0x14]
push eax
call fcn.100c75d0
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.100c5490
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.100c5480
mov esi, dword [edi]
push 0x1014e340
push 0x1014b450
call fcn.100e3c53
add esp, 8
mov ecx, esi
push eax
call fcn.10028af0
mov ebx, dword [ebp + 8]
mov ecx, ebx
call fcn.100c52a0
mov edx, dword [ebp + 0xc]
movzx eax, byte [edx]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edx + 1]
xor ecx, eax
movzx eax, byte [edx + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, ebx
push eax
call fcn.100c56f0
mov edi, dword [edi]
test edi, edi
je 0x1002679e
mov ecx, ebx
call fcn.100c7560
push 0x1014e340
push 0x1014b450
mov esi, eax
call fcn.100e3c53
add esp, 8
mov ecx, edi
push esi
push eax
call fcn.10028cd0
lea ecx, [ebp - 0x10]
call fcn.100c5480
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x100267c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10110875
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x1014a524]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
lea ecx, [ebp - 0x10]
call fcn.1003d9f0
mov ecx, dword [ebx]
mov dword [ebp - 4], 0
test ecx, ecx
je 0x1002683d
lea eax, [ebp - 0x14]
push eax
call fcn.100c75d0
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.100c5490
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.100c5480
mov esi, dword [ebx]
push 0x1014e340
push 0x1014b45c
call fcn.100e3c53
add esp, 8
mov ecx, esi
push eax
call fcn.10028af0
mov edi, dword [ebp + 8]
mov ecx, edi
call fcn.100c52a0
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
movss xmm1, dword [eax]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x10026863
mov dword [ebp + 8], 0
jmp 0x10026868
movss dword [ebp + 8], xmm1
mov edx, dword [ebp + 8]
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
imul ecx, ecx, 0x1000193
shr eax, 0x10
movzx eax, al
shr edx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
xor eax, edx
imul eax, eax, 0x1000193
push eax
call fcn.100c56f0
mov ebx, dword [ebx]
test ebx, ebx
je 0x100268d6
mov ecx, edi
call fcn.100c7560
push 0x1014e340
push 0x1014b45c
mov esi, eax
call fcn.100e3c53
add esp, 8
mov ecx, ebx
push esi
push eax
call fcn.10028cd0
lea ecx, [ebp - 0x10]
call fcn.100c5480
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x10026900
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101108b5
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x1014a524]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x10]
call fcn.1003d9f0
mov ecx, dword [ebx]
mov dword [ebp - 4], 0
test ecx, ecx
je 0x10026980
lea eax, [ebp - 0x14]
push eax
call fcn.100c75d0
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.100c5490
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.100c5480
mov esi, dword [ebx]
push 0x1014e340
push 0x1014b18c
call fcn.100e3c53
add esp, 8
mov ecx, esi
push eax
call fcn.10028af0
mov edi, dword [ebp + 8]
mov ecx, edi
call fcn.100c52a0
mov eax, dword [ebp + 0xc]
xorps xmm1, xmm1
movsd xmm0, qword [eax]
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jp 0x100269a5
movsd qword [ebp - 0x18], xmm1
jmp 0x100269aa
movsd qword [ebp - 0x18], xmm0
mov ebx, dword [ebp - 0x18]
mov ecx, ebx
movzx eax, bl
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
mov eax, dword [ebp - 0x14]
shrd ecx, eax, 8
movzx eax, cl
mov ecx, ebx
xor edx, eax
mov eax, dword [ebp - 0x14]
shrd ecx, eax, 0x10
imul edx, edx, 0x1000193
movzx eax, cl
xor edx, eax
imul ecx, edx, 0x1000193
mov edx, dword [ebp - 0x14]
mov eax, edx
shrd ebx, eax, 0x18
movzx eax, bl
xor ecx, eax
movzx eax, dl
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, dh
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [ebp - 0x12]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [ebp - 0x11]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
push eax
call fcn.100c56f0
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
test ebx, ebx
je 0x10026a5a
mov ecx, edi
call fcn.100c7560
push 0x1014e340
push 0x1014b18c
mov esi, eax
call fcn.100e3c53
add esp, 8
mov ecx, ebx
push esi
push eax
call fcn.10028cd0
lea ecx, [ebp - 0x10]
call fcn.100c5480
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x10026f20
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10110955
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x1014a524]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
lea ecx, [ebp - 0x10]
call fcn.1003d9f0
mov ecx, dword [ebx]
mov dword [ebp - 4], 0
test ecx, ecx
je 0x10026f9d
lea eax, [ebp - 0x14]
push eax
call fcn.100c75d0
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.100c5490
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.100c5480
mov esi, dword [ebx]
push 0x1014e340
push 0x1014b3ac
call fcn.100e3c53
add esp, 8
mov ecx, esi
push eax
call fcn.10028af0
mov esi, dword [ebp + 8]
mov ecx, esi
call fcn.100c52a0
mov eax, dword [ebp + 0xc]
mov edi, eax
cmp dword [eax + 0x14], 0x10
jb 0x10026fb4
mov edi, dword [eax]
mov edx, eax
jb 0x10026fba
mov edx, dword [eax]
mov eax, dword [eax + 0x10]
add eax, edx
mov dword [ebp - 0x1c], eax
cmp edi, eax
je 0x10027095
nop word [eax + eax]
lea ecx, [ebp + 0xc]
call fcn.1003d9f0
mov ecx, dword [ebx]
mov byte [ebp - 4], 2
test ecx, ecx
je 0x10027023
lea eax, [ebp - 0x14]
push eax
call fcn.100c75d0
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 3
call fcn.100c5490
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call fcn.100c5480
mov esi, dword [ebx]
push 0x1014e340
push 0x1014b444
call fcn.100e3c53
add esp, 8
mov ecx, esi
push eax
call fcn.10028af0
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x24]
call fcn.100c52a0
movzx eax, byte [edi]
lea ecx, [ebp - 0x24]
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
push eax
call fcn.100c56f0
mov eax, dword [ebx]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10027074
lea ecx, [ebp - 0x24]
call fcn.100c7560
push 0x1014e340
push 0x1014b444
mov esi, eax
call fcn.100e3c53
mov ecx, dword [ebp - 0x18]
add esp, 8
push esi
push eax
call fcn.10028cd0
mov esi, dword [ebp + 8]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0
call fcn.100c5480
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
call fcn.100c54d0
inc edi
cmp edi, dword [ebp - 0x1c]
jne 0x10026fd0
mov edi, dword [ebx]
test edi, edi
je 0x100270bf
mov ecx, esi
call fcn.100c7560
push 0x1014e340
push 0x1014b3ac
mov esi, eax
call fcn.100e3c53
add esp, 8
mov ecx, edi
push esi
push eax
call fcn.10028cd0
lea ecx, [ebp - 0x10]
call fcn.100c5480
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x100270e0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10110955
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x1014a524]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
lea ecx, [ebp - 0x10]
call fcn.1003d9f0
mov ecx, dword [ebx]
mov dword [ebp - 4], 0
test ecx, ecx
je 0x1002715d
lea eax, [ebp - 0x14]
push eax
call fcn.100c75d0
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.100c5490
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.100c5480
mov esi, dword [ebx]
push 0x1014e340
push 0x1014b1a4
call fcn.100e3c53
add esp, 8
mov ecx, esi
push eax
call fcn.10028af0
mov edi, dword [ebp + 8]
mov ecx, edi
call fcn.100c52a0
mov eax, dword [ebp + 0xc]
mov ecx, eax
cmp dword [eax + 0x14], 4
jb 0x10027174
mov ecx, dword [eax]
mov esi, eax
jb 0x1002717a
mov esi, dword [eax]
mov eax, dword [eax + 0x10]
lea eax, [esi + eax*4]
mov dword [ebp - 0x1c], eax
cmp ecx, eax
je 0x1002727c
lea edi, [ecx + 2]
nop
lea ecx, [ebp + 0xc]
call fcn.1003d9f0
mov ecx, dword [ebx]
mov byte [ebp - 4], 2
test ecx, ecx
je 0x100271e0
lea eax, [ebp - 0x14]
push eax
call fcn.100c75d0
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 3
call fcn.100c5490
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call fcn.100c5480
mov esi, dword [ebx]
push 0x1014e340
push 0x1014b21c
call fcn.100e3c53
add esp, 8
mov ecx, esi
push eax
call fcn.10028af0
lea ecx, [ebp - 0x24]
call fcn.100c52a0
movzx eax, byte [edi - 2]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edi - 1]
xor ecx, eax
movzx eax, byte [edi]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edi + 1]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
lea ecx, [ebp - 0x24]
push eax
call fcn.100c56f0
mov eax, dword [ebx]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10027252
lea ecx, [ebp - 0x24]
call fcn.100c7560
push 0x1014e340
push 0x1014b21c
mov esi, eax
call fcn.100e3c53
mov ecx, dword [ebp - 0x18]
add esp, 8
push esi
push eax
call fcn.10028cd0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0
call fcn.100c5480
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x24]
push eax
call fcn.100c54d0
add edi, 4
lea eax, [edi - 2]
cmp eax, dword [ebp - 0x1c]
jne 0x10027190
mov edi, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x100272a6
mov ecx, edi
call fcn.100c7560
push 0x1014e340
push 0x1014b1a4
mov esi, eax
call fcn.100e3c53
add esp, 8
mov ecx, ebx
push esi
push eax
call fcn.10028cd0
lea ecx, [ebp - 0x10]
call fcn.100c5480
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x10027520
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 8]
movzx eax, byte [edx]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edx + 1]
xor ecx, eax
movzx eax, byte [edx + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 4]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 5]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 6]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 7]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
pop ebp
ret 4

Function at 0x10027590
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10110875
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x1014a524]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
lea ecx, [ebp - 0x10]
call fcn.1003d9f0
mov ecx, dword [ebx]
mov dword [ebp - 4], 0
test ecx, ecx
je 0x1002760d
lea eax, [ebp - 0x14]
push eax
call fcn.100c75d0
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.100c5490
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.100c5480
mov esi, dword [ebx]
push 0x1014e340
push 0x1014b198
call fcn.100e3c53
add esp, 8
mov ecx, esi
push eax
call fcn.10028af0
mov edi, dword [ebp + 8]
mov ecx, edi
call fcn.100c52a0
mov eax, dword [ebp + 0xc]
mov ecx, edi
movzx eax, byte [eax]
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
push eax
call fcn.100c56f0
mov ebx, dword [ebx]
test ebx, ebx
je 0x1002765a
mov ecx, edi
call fcn.100c7560
push 0x1014e340
push 0x1014b198
mov esi, eax
call fcn.100e3c53
add esp, 8
mov ecx, ebx
push esi
push eax
call fcn.10028cd0
lea ecx, [ebp - 0x10]
call fcn.100c5480
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1002a180
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
movzx eax, byte [esi]
mov byte [edi], al
mov eax, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], edx
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x14]
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], ecx
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x1c]
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], ecx
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], ecx
movzx eax, byte [esi + 0x28]
mov byte [edi + 0x28], al
mov dword [edi + 0x2c], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
movups xmm0, xmmword [esi + 0x2c]
movups xmmword [edi + 0x2c], xmm0
movq xmm0, qword [esi + 0x3c]
movq qword [edi + 0x3c], xmm0
mov dword [esi + 0x3c], 0
mov dword [esi + 0x40], 3
mov dword [esi + 0x2c], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
movups xmm0, xmmword [esi + 0x44]
movups xmmword [edi + 0x44], xmm0
movq xmm0, qword [esi + 0x54]
movq qword [edi + 0x54], xmm0
mov dword [esi + 0x54], 0
mov dword [esi + 0x58], 0xf
mov byte [esi + 0x44], 0
movsd xmm0, qword [esi + 0x60]
movsd qword [edi + 0x60], xmm0
movq xmm0, qword [esi + 0x68]
movq qword [edi + 0x68], xmm0
mov eax, dword [esi + 0x70]
mov dword [edi + 0x70], eax
mov eax, dword [esi + 0x74]
mov dword [edi + 0x74], eax
mov eax, dword [esi + 0x78]
mov dword [edi + 0x78], eax
mov ax, word [esi + 0x7c]
mov word [edi + 0x7c], ax
movups xmm0, xmmword [esi + 0x80]
movups xmmword [edi + 0x80], xmm0
movzx eax, byte [esi + 0x90]
mov byte [edi + 0x90], al
mov eax, edi
movsd xmm0, qword [esi + 0x98]
movsd qword [edi + 0x98], xmm0
movsd xmm0, qword [esi + 0xa0]
movsd qword [edi + 0xa0], xmm0
movsd xmm0, qword [esi + 0xa8]
movsd qword [edi + 0xa8], xmm0
movsd xmm0, qword [esi + 0xb0]
movsd qword [edi + 0xb0], xmm0
pop edi
pop esi
pop ebp
ret 4
Function at 0x1002b350
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [ebp + 8]
movzx eax, byte [edi]
lea ebx, [edi + 0x2c]
mov byte [esi], al
mov eax, dword [edi + 8]
mov edx, dword [edi + 0xc]
mov dword [esi + 8], eax
mov dword [esi + 0xc], edx
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x14]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x1c]
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], ecx
mov eax, dword [edi + 0x20]
mov ecx, dword [edi + 0x24]
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
movzx eax, byte [edi + 0x28]
mov byte [esi + 0x28], al
lea eax, [esi + 0x2c]
cmp eax, ebx
je 0x1002b3cd
mov ecx, eax
call fcn.1000fac0
movups xmm0, xmmword [ebx]
movups xmmword [esi + 0x2c], xmm0
movq xmm0, qword [ebx + 0x10]
movq qword [esi + 0x3c], xmm0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 3
mov dword [ebx], 0
lea eax, [edi + 0x44]
push eax
lea ecx, [esi + 0x44]
call fcn.10010b50
movsd xmm0, qword [edi + 0x60]
movsd qword [esi + 0x60], xmm0
movq xmm0, qword [edi + 0x68]
movq qword [esi + 0x68], xmm0
mov eax, dword [edi + 0x70]
mov dword [esi + 0x70], eax
mov eax, dword [edi + 0x74]
mov dword [esi + 0x74], eax
mov eax, dword [edi + 0x78]
mov dword [esi + 0x78], eax
mov ax, word [edi + 0x7c]
mov word [esi + 0x7c], ax
movups xmm0, xmmword [edi + 0x80]
movups xmmword [esi + 0x80], xmm0
mov al, byte [edi + 0x90]
mov byte [esi + 0x90], al
mov eax, esi
movsd xmm0, qword [edi + 0x98]
movsd qword [esi + 0x98], xmm0
movsd xmm0, qword [edi + 0xa0]
movsd qword [esi + 0xa0], xmm0
movsd xmm0, qword [edi + 0xa8]
movsd qword [esi + 0xa8], xmm0
movsd xmm0, qword [edi + 0xb0]
pop edi
movsd qword [esi + 0xb0], xmm0
pop esi
pop ebx
pop ebp
ret 4

Function at 0x1002e770
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 0xc]
mov edx, 0x811c9dc5
push edi
mov edi, dword [ebp + 8]
mov ecx, 0
sub esi, edi
je 0x1002e7a1
nop dword [eax]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x1002e790
pop edi
mov eax, edx
pop esi
pop ebp
ret 8
Function at 0x1003c270
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov esi, dword [eax]
mov ebx, ecx
lea eax, [ebp - 4]
mov dword [ebp - 8], ebx
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 4], ebx
add esi, 0xc8
push eax
mov ecx, esi
call fcn.10008300
mov eax, dword [eax]
add dword [eax + 0x10], 0xffffffff
jne 0x1003c347
movzx eax, bl
xor eax, 0x811c9dc5
mov dword [ebp - 4], ebx
imul ecx, eax, 0x1000193
mov eax, ebx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, ebx
imul ecx, ecx, 0x1000193
shr eax, 0x10
movzx eax, al
xor ecx, eax
mov eax, ebx
imul ecx, ecx, 0x1000193
shr eax, 0x18
xor ecx, eax
lea eax, [ebp - 4]
imul edi, ecx, 0x1000193
mov ecx, esi
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10007660
mov edx, dword [eax + 4]
test edx, edx
je 0x1003c347
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0xc]
and ecx, edi
lea ecx, [eax + ecx*8]
mov eax, dword [ecx]
cmp dword [ecx + 4], edx
jne 0x1003c324
cmp eax, edx
jne 0x1003c31c
mov eax, dword [esi + 4]
mov dword [ecx], eax
mov dword [ecx + 4], eax
jmp 0x1003c32c
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
jmp 0x1003c32c
cmp eax, edx
jne 0x1003c32c
mov eax, dword [edx]
mov dword [ecx], eax
mov ecx, dword [edx]
dec dword [esi + 8]
mov eax, dword [edx + 4]
push 0x14
push edx
mov dword [eax], ecx
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
call fcn.100e1499
add esp, 8
mov edi, dword [ebp + 0xc]
or edx, 0xffffffff
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
lea esi, [edi + 8]
cmp esi, eax
je 0x1003c3b6
lea ebx, [edi + 4]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [esi], 0
mov dword [esi + 4], 0
mov edi, dword [ebx]
mov dword [ebx - 4], eax
mov dword [ebx], ecx
test edi, edi
je 0x1003c3a2
mov eax, edx
lock xadd dword [edi + 4], eax
jne 0x1003c3a2
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
or edx, 0xffffffff
mov eax, edx
lock xadd dword [edi + 8], eax
jne 0x1003c3a2
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
or edx, 0xffffffff
add esi, 8
add ebx, 8
cmp esi, dword [ebp - 4]
jne 0x1003c360
mov ebx, dword [ebp - 8]
mov edi, dword [ebp - 0xc]
mov eax, dword [ebx + 0x14]
mov esi, dword [eax - 4]
test esi, esi
je 0x1003c3de
mov eax, edx
lock xadd dword [esi + 4], eax
jne 0x1003c3de
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x1003c3de
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
add dword [ebx + 0x14], 0xfffffff8
mov ecx, ebx
call fcn.100c3b30
mov eax, dword [ebp + 8]
mov dword [eax], edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8