joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40a370
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1fffffff
sub esp, 8
bsr ecx, eax
push ebx
push esi
push edi
mov edi, 1
mov eax, edi
shl eax, cl
mov ecx, dword [ebp + 8]
cmp ecx, eax
ja 0x40a4dd
lea eax, [ecx - 1]
mov esi, dword [0x44edb8]
or eax, edi
mov dword [ebp + 8], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
mov ecx, 0x44edc0
lea eax, [edi + edi]
push eax
call fcn.004097a0
mov eax, dword [0x44edb8]
lea ebx, [edi - 1]
mov dword [0x44edcc], ebx
mov dword [0x44edd0], edi
mov eax, dword [eax]
mov ecx, eax
cmp eax, esi
je 0x40a4d4
nop word [eax + eax]
movzx edx, byte [eax + 8]
xor edx, 0x811c9dc5
mov ecx, dword [ecx]
imul edi, edx, 0x1000193
movzx edx, byte [eax + 9]
xor edi, edx
movzx edx, byte [eax + 0xa]
imul edi, edi, 0x1000193
xor edi, edx
movzx edx, byte [eax + 0xb]
imul edi, edi, 0x1000193
xor edi, edx
mov edx, dword [0x44edc0]
imul edi, edi, 0x1000193
and edi, ebx
mov ebx, dword [edx + edi*8]
lea edx, [edx + edi*8]
mov dword [ebp - 4], edx
cmp ebx, esi
jne 0x40a432
mov dword [edx], eax
mov dword [edx + 4], eax
jmp 0x40a49f
mov edx, dword [edx + 4]
mov edi, dword [eax + 8]
cmp edi, dword [edx + 8]
jne 0x40a46c
mov edx, dword [edx]
mov dword [ebp - 8], edx
cmp edx, eax
je 0x40a464
mov ebx, dword [eax + 4]
mov esi, dword [ebp - 8]
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
mov edx, dword [ebp - 4]
mov dword [edx + 4], eax
jmp 0x40a49f
cmp ebx, edx
je 0x40a47c
mov edx, dword [edx + 4]
cmp edi, dword [edx + 8]
je 0x40a4b0
cmp ebx, edx
jne 0x40a470
mov ebx, dword [eax + 4]
mov dword [ebp - 8], ebx
mov dword [ebx], ecx
mov ebx, dword [ecx + 4]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov dword [edx + 4], ebx
mov edx, dword [ebp - 8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 4]
mov dword [eax + 4], edi
mov dword [edx], eax
mov eax, ecx
cmp ecx, esi
je 0x40a4d4
mov ebx, dword [0x44edcc]
jmp 0x40a3e0
mov ebx, dword [eax + 4]
mov edx, dword [edx]
mov dword [ebp - 8], edx
mov esi, edx
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
jmp 0x40a49f
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push str.invalid_hash_bucket_count
call fcn.0042014e
int3

Function at 0x40aa70
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 8]
movzx eax, byte [edx]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edx + 1]
xor ecx, eax
movzx eax, byte [edx + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 4]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 5]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 6]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 7]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
pop ebp
ret 4
Function at 0x4146f0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43a76d
mov eax, dword fs:[0]
push eax
sub esp, 0x20
mov eax, dword [0x44d014]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
cmp byte [ebx + 0x23], 0
je 0x414779
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x18], ecx
call fcn.0040aa70
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebx + 0x274]
call fcn.0041cad0
mov eax, dword [eax + 4]
test eax, eax
jne 0x414759
mov eax, dword [ebx + 0x278]
cmp eax, dword [ebx + 0x278]
je 0x414779
add eax, 0x10
cmp byte [eax + 0x11], 0
je 0x414779
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [ebp + 0x18]
push eax
call fcn.0041e740
mov edx, dword [ebp + 0x18]
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [ebp + 0x1a]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [ebp + 0x1b]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
lea ecx, [ebx + 0x154]
push eax
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0041cb40
mov eax, dword [eax + 4]
test eax, eax
jne 0x4147ce
mov eax, dword [ebx + 0x158]
cmp eax, dword [ebx + 0x158]
je 0x4148ce
lea esi, [eax + 0xc]
lea eax, [ebp + 0x10]
push eax
call fcn.0040aa70
push eax
lea eax, [ebp + 0x10]
mov ecx, esi
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0041cad0
mov edi, dword [eax + 4]
test edi, edi
je 0x4148ce
cmp edi, dword [esi + 4]
je 0x4148ce
mov eax, dword [edi + 0x14]
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
test eax, eax
je 0x41481d
lock inc dword [eax + 4]
mov esi, dword [edi + 0x10]
mov edi, dword [edi + 0x14]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], edi
mov dword [ebp - 4], 0
cmp byte [ebx + 0x23], 0
je 0x414848
push dword [ebp + 0xc]
lea ecx, [ebx + 0x234]
push dword [ebp + 8]
push esi
call fcn.0041e9b0
mov ecx, dword [esi + 0xac]
cmp ecx, 2
je 0x414861
cmp ecx, 1
jne 0x4148a9
cmp byte [esi + 0xb9], 0
jne 0x4148a9
mov eax, dword [esi + 0x20]
or eax, dword [esi + 0x24]
jne 0x414877
mov eax, dword [ebp + 8]
mov dword [esi + 0x20], eax
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x24], eax
jmp 0x41487a
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov dword [esi + 0x38], edx
mov dword [esi + 0x3c], eax
mov dword [esi + 0xb0], 1
cmp byte [esi + 0xbb], 0
jne 0x41489b
cmp ecx, 2
je 0x4148a9
lea eax, [ebp - 0x1c]
mov ecx, ebx
push eax
call fcn.00418620
mov edi, dword [ebp - 0x18]
test edi, edi
je 0x4148ce
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x4148ce
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x4148ce
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00420eb4
mov esp, ebp
pop ebp
ret 0x14
Function at 0x4148f0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov edx, dword [ebp + 0xc]
push ebx
push esi
mov esi, ecx
movzx eax, dl
xor eax, 0x811c9dc5
mov ebx, dword [ebp + 8]
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
push edi
mov dword [ebp - 0x10], ebx
xor ecx, eax
mov eax, edx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr edx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
lea ecx, [esi + 0x154]
xor eax, edx
imul eax, eax, 0x1000193
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0041cb40
mov edi, dword [eax + 4]
test edi, edi
jne 0x41495e
mov edi, dword [esi + 0x158]
cmp edi, dword [esi + 0x158]
je 0x4149fc
mov edi, dword [edi + 0x10]
mov esi, dword [edi]
cmp esi, edi
je 0x4149fc
mov eax, dword [esi + 0x14]
test eax, eax
je 0x414982
lock inc dword [eax + 4]
mov ecx, dword [esi + 0x10]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi]
cmp esi, edi
je 0x4149eb
nop
mov edx, dword [esi + 0x10]
mov eax, dword [ecx + 4]
cmp eax, dword [edx + 4]
jb 0x4149e5
ja 0x4149a3
mov eax, dword [ecx]
cmp eax, dword [edx]
jbe 0x4149e5
mov eax, dword [esi + 0x14]
test eax, eax
je 0x4149ae
lock inc dword [eax + 4]
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
mov dword [ebp - 8], ecx
mov dword [ebp - 4], eax
test ebx, ebx
je 0x4149e2
or eax, 0xffffffff
lock xadd dword [ebx + 4], eax
jne 0x4149e2
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
or eax, 0xffffffff
lock xadd dword [ebx + 8], eax
jne 0x4149df
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov ecx, dword [ebp - 8]
mov ebx, dword [ebp - 4]
mov esi, dword [esi]
cmp esi, edi
jne 0x414990
mov eax, dword [ebp - 0x10]
mov dword [eax], ecx
mov dword [eax + 4], ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
pop edi
pop esi
mov dword [ebx], 0
mov eax, ebx
mov dword [ebx + 4], 0
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x417990
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, dword [eax]
mov ebx, ecx
mov edx, dword [edi + 0x90]
lea esi, [edi + 0x90]
mov dword [ebp - 8], eax
test edx, edx
je 0x417ae9
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr edx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
lea ecx, [ebx + 0x154]
xor eax, edx
imul eax, eax, 0x1000193
push eax
push esi
lea eax, [ebp - 0x10]
push eax
call fcn.0041cb40
mov esi, dword [eax + 4]
test esi, esi
jne 0x417a0e
mov esi, dword [ebx + 0x158]
mov edx, dword [ebx + 0x158]
cmp esi, edx
je 0x417ae9
cmp dword [esi + 0x14], 1
jne 0x417ab4
movzx eax, byte [esi + 8]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [esi + 9]
xor ecx, eax
movzx eax, byte [esi + 0xa]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esi + 0xb]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [ebx + 0x16c]
and ecx, eax
mov eax, dword [ebx + 0x160]
lea ecx, [eax + ecx*8]
mov eax, dword [ecx]
cmp dword [ecx + 4], esi
jne 0x417a84
cmp eax, esi
jne 0x417a7c
mov dword [ecx], edx
mov dword [ecx + 4], edx
jmp 0x417a8c
mov edx, dword [esi + 4]
mov dword [ecx + 4], edx
jmp 0x417a8c
cmp eax, esi
jne 0x417a8c
mov eax, dword [esi]
mov dword [ecx], eax
mov ecx, dword [esi]
dec dword [ebx + 0x15c]
mov eax, dword [esi + 4]
mov dword [eax], ecx
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
lea ecx, [esi + 0xc]
call fcn.0040bfd0
push 0x2c
push esi
call fcn.00421145
add esp, 8
jmp 0x417ada
mov ecx, dword [esi + 0x10]
mov eax, dword [ecx]
cmp eax, ecx
je 0x417ada
nop dword [eax]
cmp dword [eax + 0x10], edi
je 0x417acd
mov eax, dword [eax]
cmp eax, ecx
jne 0x417ac0
jmp 0x417ada
push eax
lea eax, [ebp - 4]
push eax
lea ecx, [esi + 0xc]
call fcn.0041a2a0
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov dword [eax + 0x90], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x418a90
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43aa6d
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x44d014]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov edx, dword [ebp + 8]
lea ebx, [esi + 0x114]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x10], eax
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr edx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, ebx
xor eax, edx
imul eax, eax, 0x1000193
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0041cb40
mov eax, dword [eax + 4]
test eax, eax
jne 0x418b1c
mov eax, dword [ebx + 4]
cmp eax, dword [esi + 0x118]
je 0x418b83
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x418b2f
lock inc dword [ecx + 4]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 0
push eax
mov ecx, esi
mov byte [edx + 0xc1], 1
call fcn.00418620
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x418b83
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x418b83
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x418b83
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
push dword [ebp - 0x10]
lea eax, [ebp + 8]
mov ecx, ebx
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0041ab80
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x418bb0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 0xc]
sub esp, 0xc
movzx eax, dl
xor eax, 0x811c9dc5
push ebx
mov ebx, ecx
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
push esi
xor ecx, eax
mov esi, dword [ebp + 8]
imul ecx, ecx, 0x1000193
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 0x18
push edi
xor ecx, eax
imul eax, ecx, 0x1000193
lea ecx, [ebx + 0x114]
xor eax, edx
imul eax, eax, 0x1000193
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0041cb40
mov eax, dword [eax + 4]
test eax, eax
jne 0x418c1b
mov eax, dword [ebx + 0x118]
cmp eax, dword [ebx + 0x118]
jne 0x418c3d
mov dword [esi], 0
mov eax, esi
mov dword [esi + 4], 0
xor ebx, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x418c48
lock inc dword [ecx + 4]
mov ecx, dword [eax + 0x10]
xor ebx, ebx
mov eax, dword [eax + 0xc]
mov dword [esi], eax
mov eax, esi
pop edi
mov dword [esi + 4], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x41a340
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
movzx edx, byte [eax + 8]
mov edi, ecx
movzx ecx, byte [eax + 0xb]
xor edx, 0x811c9dc5
imul esi, edx, 0x1000193
movzx edx, byte [eax + 9]
xor esi, edx
movzx edx, byte [eax + 0xa]
imul esi, esi, 0x1000193
xor esi, edx
imul edx, esi, 0x1000193
xor edx, ecx
imul ecx, edx, 0x1000193
mov edx, dword [edi + 0x18]
and edx, ecx
mov ecx, dword [edi + 0xc]
mov esi, dword [ecx + edx*8]
cmp dword [ecx + edx*8 + 4], eax
jne 0x41a3a9
cmp esi, eax
jne 0x41a3a0
mov eax, dword [edi + 4]
mov dword [ecx + edx*8], eax
mov dword [ecx + edx*8 + 4], eax
jmp 0x41a3b2
mov eax, dword [eax + 4]
mov dword [ecx + edx*8 + 4], eax
jmp 0x41a3b2
cmp esi, eax
jne 0x41a3b5
mov eax, dword [eax]
mov dword [ecx + edx*8], eax
mov eax, dword [ebp + 0xc]
mov ebx, dword [eax]
dec dword [edi + 8]
mov eax, dword [eax + 4]
mov dword [eax], ebx
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
mov dword [ebx + 4], eax
mov eax, dword [ebp + 0xc]
mov esi, dword [eax + 0x10]
test esi, esi
je 0x41a3f3
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x41a3f3
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x41a3f3
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
push 0x14
push dword [ebp + 0xc]
call fcn.00421145
mov eax, dword [ebp + 8]
add esp, 8
pop edi
pop esi
mov dword [eax], ebx
pop ebx
pop ebp
ret 8
Function at 0x41ada0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43ad47
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x44d014]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
push 0xe8
call fcn.00420ec2
mov ebx, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], 0
lea edi, [ebx + 0x10]
xorps xmm0, xmm0
lea esi, [edi + 0xc4]
movq qword [ebx], xmm0
mov dword [ebx + 8], 0
mov dword [ebx + 4], 1
mov dword [ebx + 8], 1
mov dword [ebx], vtable.std::_Ref_count_obj2_struct_PresentEvent_.0
push 8
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x50], 0xffffffff
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov dword [edi + 0x64], 0
mov dword [edi + 0x68], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x70], 0
mov dword [edi + 0x74], 0
mov dword [edi + 0x78], 0
mov dword [edi + 0x7c], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0x84], 0
mov dword [edi + 0x88], 0
mov dword [edi + 0x8c], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x94], 0xffffffff
mov dword [edi + 0x98], 0
mov dword [edi + 0x9c], 0
mov dword [edi + 0xa0], 0
mov dword [edi + 0xa4], 0
mov dword [edi + 0xa8], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xb8], 0
mov dword [edi + 0xbc], 0
mov word [edi + 0xc0], 0
mov byte [edi + 0xc2], 0
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
call fcn.00420ec2
xorps xmm0, xmm0
add esp, 8
mov dword [eax + 4], 0
mov dword [esi], eax
mov dword [eax], esi
mov eax, dword [ebp - 0x10]
movq qword [eax], xmm0
mov dword [eax + 4], 0
mov dword [eax], edi
mov dword [eax + 4], ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41c630
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
mov ebx, ecx
mov eax, 0x1fffffff
bsr ecx, eax
push esi
push edi
mov edi, 1
mov dword [ebp - 0x10], ebx
mov eax, edi
shl eax, cl
mov ecx, dword [ebp + 8]
cmp ecx, eax
ja 0x41c78b
lea eax, [ecx - 1]
mov esi, dword [ebx + 4]
or eax, edi
mov dword [ebp - 8], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
lea ecx, [ebx + 0xc]
lea eax, [edi + edi]
push eax
call fcn.004097a0
lea eax, [edi - 1]
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x18], eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov ecx, eax
cmp eax, esi
je 0x41c75e
movzx edx, byte [eax + 8]
xor edx, 0x811c9dc5
mov ecx, dword [ecx]
imul edi, edx, 0x1000193
movzx edx, byte [eax + 9]
xor edi, edx
movzx edx, byte [eax + 0xa]
imul edi, edi, 0x1000193
xor edi, edx
movzx edx, byte [eax + 0xb]
imul edi, edi, 0x1000193
xor edi, edx
imul edx, edi, 0x1000193
mov edi, dword [ebx + 0x18]
and edi, edx
mov edx, dword [ebx + 0xc]
mov ebx, dword [edx + edi*8]
lea edx, [edx + edi*8]
mov dword [ebp - 0xc], edx
cmp ebx, esi
jne 0x41c6e4
mov dword [edx], eax
mov dword [edx + 4], eax
jmp 0x41c751
mov edx, dword [edx + 4]
mov edi, dword [eax + 8]
cmp edi, dword [edx + 8]
jne 0x41c71e
mov edx, dword [edx]
mov dword [ebp - 4], edx
cmp edx, eax
je 0x41c716
mov ebx, dword [eax + 4]
mov esi, dword [ebp - 4]
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp - 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xc]
mov dword [edx + 4], eax
jmp 0x41c751
cmp ebx, edx
je 0x41c72e
mov edx, dword [edx + 4]
cmp edi, dword [edx + 8]
je 0x41c767
cmp ebx, edx
jne 0x41c722
mov ebx, dword [eax + 4]
mov dword [ebp - 4], ebx
mov dword [ebx], ecx
mov ebx, dword [ecx + 4]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov dword [edx + 4], ebx
mov edx, dword [ebp - 4]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0xc]
mov dword [eax + 4], edi
mov dword [edx], eax
mov ebx, dword [ebp - 0x10]
mov eax, ecx
cmp ecx, esi
jne 0x41c692
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [eax + 4]
mov edx, dword [edx]
mov dword [ebp - 4], edx
mov esi, edx
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp - 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
jmp 0x41c751
push str.invalid_hash_bucket_count
call fcn.0042014e
int3
Function at 0x41c7a0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
mov ebx, ecx
mov eax, 0x1fffffff
bsr ecx, eax
push esi
push edi
mov edi, 1
mov dword [ebp - 0x10], ebx
mov eax, edi
shl eax, cl
mov ecx, dword [ebp + 8]
cmp ecx, eax
ja 0x41c8f9
lea eax, [ecx - 1]
mov esi, dword [ebx + 4]
or eax, edi
mov dword [ebp - 8], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
lea ecx, [ebx + 0xc]
lea eax, [edi + edi]
push eax
call fcn.004097a0
lea eax, [edi - 1]
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x18], eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov ecx, eax
cmp eax, esi
je 0x41c8cc
movzx edx, byte [eax + 8]
xor edx, 0x811c9dc5
mov ecx, dword [ecx]
imul edi, edx, 0x1000193
movzx edx, byte [eax + 9]
xor edi, edx
movzx edx, byte [eax + 0xa]
imul edi, edi, 0x1000193
xor edi, edx
movzx edx, byte [eax + 0xb]
imul edi, edi, 0x1000193
xor edi, edx
mov edx, dword [ebx + 0xc]
imul edi, edi, 0x1000193
and edi, dword [ebx + 0x18]
mov ebx, dword [edx + edi*8]
lea edx, [edx + edi*8]
mov dword [ebp - 0xc], edx
cmp ebx, esi
jne 0x41c852
mov dword [edx], eax
mov dword [edx + 4], eax
jmp 0x41c8bf
mov edx, dword [edx + 4]
mov edi, dword [eax + 8]
cmp edi, dword [edx + 8]
jne 0x41c88c
mov edx, dword [edx]
mov dword [ebp - 4], edx
cmp edx, eax
je 0x41c884
mov ebx, dword [eax + 4]
mov esi, dword [ebp - 4]
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp - 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xc]
mov dword [edx + 4], eax
jmp 0x41c8bf
cmp ebx, edx
je 0x41c89c
mov edx, dword [edx + 4]
cmp edi, dword [edx + 8]
je 0x41c8d5
cmp ebx, edx
jne 0x41c890
mov ebx, dword [eax + 4]
mov dword [ebp - 4], ebx
mov dword [ebx], ecx
mov ebx, dword [ecx + 4]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov dword [edx + 4], ebx
mov edx, dword [ebp - 4]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0xc]
mov dword [eax + 4], edi
mov dword [edx], eax
mov ebx, dword [ebp - 0x10]
mov eax, ecx
cmp ecx, esi
jne 0x41c802
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [eax + 4]
mov edx, dword [edx]
mov dword [ebp - 4], edx
mov esi, edx
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp - 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
jmp 0x41c8bf
push str.invalid_hash_bucket_count
call fcn.0042014e
int3