joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1009e4e0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1031909d
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x1040e140]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [edi + 0xd48]
xor esi, esi
sub eax, dword [edi + 0xd44]
sar eax, 2
test eax, eax
je 0x1009e5ce
push esi
xorps xmm0, xmm0
lea eax, [ebp - 0x30]
push str._preset__i
push eax
movups xmmword [ebp - 0x30], xmm0
movups xmmword [ebp - 0x20], xmm0
call fcn.1004c2f0
add esp, 0xc
lea eax, [ebp - 0x30]
push 0x103cfe4c
push 0
push eax
push 0x103cfe78
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
xorps xmm0, xmm0
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x3c], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1009e576
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.10029750
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0
push eax
lea ecx, [edi + 0xc04]
call fcn.100267e0
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 4], 0xffffffff
mov dword [eax], ecx
lea ecx, [ebp - 0x4c]
call fcn.10027fc0
mov eax, dword [edi + 0xd48]
inc esi
sub eax, dword [edi + 0xd44]
sar eax, 2
cmp esi, eax
jb 0x1009e525
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.102e0890
mov esp, ebp
pop ebp
ret
Function at 0x100df3d0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1031f9cd
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x1040e140]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp + 0xc]
mov esi, edx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x24], edx
cmp dword [edx + 0x14], 0xf
jbe 0x100df40e
mov esi, dword [edx]
xor ecx, ecx
mov edi, 0x811c9dc5
cmp dword [edx + 0x10], ecx
jbe 0x100df432
nop word [eax + eax]
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edi
imul edi, eax, 0x1000193
cmp ecx, dword [edx + 0x10]
jb 0x100df420
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x20]
push edi
push edx
push eax
mov ecx, esi
call fcn.1002ad30
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x100df452
mov byte [ebx + 4], 0
jmp 0x100df551
cmp dword [esi + 8], 0x3ffffff
je 0x100df569
lea eax, [esi + 4]
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], 0
push 0x40
mov dword [ebp - 0x14], 0
call fcn.102e08b1
add esp, 4
mov dword [ebp - 0x14], eax
lea esi, [eax + 8]
push dword [ebp - 0x24]
mov ecx, esi
mov dword [ebp - 0x28], esi
call fcn.100276f0
lea ecx, [esi + 0x18]
mov byte [ebp - 4], 1
call fcn.1002b260
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 4], 2
mov eax, dword [ecx + 8]
mov esi, dword [ecx + 0x1c]
inc eax
movss xmm3, dword [ecx]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
movd xmm1, esi
addsd xmm0, qword [eax*8 + 0x103e4170]
cvtdq2pd xmm1, xmm1
mov eax, esi
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x103e4170]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
comiss xmm2, xmm3
jbe 0x100df540
divss xmm0, xmm3
call fcn.10019770
call fcn.102e1840
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp esi, ecx
jae 0x100df51c
cmp esi, 0x200
jae 0x100df51a
shl esi, 3
cmp esi, ecx
jae 0x100df51c
mov esi, ecx
mov ecx, dword [ebp - 0x10]
push esi
call fcn.10029d70
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
add eax, 8
push edi
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.1002ad30
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax]
jmp 0x100df543
mov edx, dword [ebp - 0x20]
push dword [ebp - 0x14]
push edx
push edi
call fcn.100299d0
mov byte [ebx + 4], 1
mov dword [ebx], eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.102df107
int3
Function at 0x100df580
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1031fa05
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x20
push esi
push edi
mov eax, dword [0x1040e140]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x18], eax
mov edx, dword [ebx + 0xc]
mov edi, dword [ebx + 8]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], edx
cmp dword [edx + 0x14], 0xf
mov dword [ebp - 0x14], edx
jbe 0x100df5da
mov ecx, dword [edx]
mov dword [ebp - 0x14], ecx
xor ecx, ecx
mov esi, 0x811c9dc5
cmp dword [edx + 0x10], ecx
jbe 0x100df608
mov edi, dword [ebp - 0x14]
nop dword [eax]
movzx eax, byte [edi + ecx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, dword [edx + 0x10]
jb 0x100df5f0
mov edi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
push esi
push edx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, eax
call fcn.1002ad30
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x100df629
mov dword [edi], eax
mov eax, edi
mov byte [edi + 4], 0
jmp 0x100df72c
mov edi, dword [ebp - 0x18]
cmp dword [edi + 8], 0x5555555
je 0x100df742
lea eax, [edi + 4]
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0
push 0x30
mov dword [ebp - 0x2c], 0
call fcn.102e08b1
add esp, 4
mov dword [ebp - 0x2c], eax
add eax, 8
mov ecx, eax
mov dword [ebp - 0x14], eax
push dword [ebp - 0x28]
call fcn.100276f0
mov eax, dword [ebp - 0x14]
xorps xmm0, xmm0
movups xmmword [eax + 0x18], xmm0
mov dword [ebp - 4], 1
mov eax, dword [edi + 8]
movss xmm3, dword [edi]
inc eax
mov edi, dword [edi + 0x1c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
movd xmm1, edi
addsd xmm0, qword [eax*8 + 0x103e4170]
cvtdq2pd xmm1, xmm1
mov eax, edi
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x103e4170]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
comiss xmm2, xmm3
jbe 0x100df70f
divss xmm0, xmm3
call fcn.10019770
call fcn.102e1840
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp edi, ecx
jae 0x100df6f1
cmp edi, 0x200
jae 0x100df6ef
shl edi, 3
cmp edi, ecx
jae 0x100df6f1
mov edi, ecx
push edi
mov edi, dword [ebp - 0x18]
mov ecx, edi
call fcn.10029d70
push esi
push dword [ebp - 0x14]
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
call fcn.1002ad30
mov ecx, dword [eax]
jmp 0x100df715
mov ecx, dword [ebp - 0x24]
mov edi, dword [ebp - 0x18]
push dword [ebp - 0x2c]
push ecx
push esi
mov ecx, edi
call fcn.100299d0
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov eax, ecx
mov byte [ecx + 4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
push str.unordered_map_set_too_long
call fcn.102df107
int3
Function at 0x100df750
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1031fa45
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x1040e140]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, ecx
mov dword [ebp - 0x10], edx
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x14], edi
cmp dword [edi + 0x14], 0xf
jbe 0x100df791
mov eax, dword [edi]
mov dword [ebp - 0x14], eax
xor ecx, ecx
mov esi, 0x811c9dc5
cmp dword [edi + 0x10], ecx
jbe 0x100df7b5
mov edx, dword [ebp - 0x14]
movzx eax, byte [edx + ecx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, dword [edi + 0x10]
jb 0x100df7a0
mov edx, dword [ebp - 0x10]
push esi
push edi
lea eax, [ebp - 0x1c]
mov ecx, edx
push eax
call fcn.1002ad30
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x100df7d2
mov byte [ebx + 4], 0
jmp 0x100df8cc
mov eax, dword [ebp - 0x10]
cmp dword [eax + 8], 0x71c71c7
je 0x100df8e4
add eax, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0
push 0x24
mov dword [ebp - 0x20], 0
call fcn.102e08b1
add esp, 4
mov dword [ebp - 0x20], eax
add eax, 8
mov ecx, eax
mov dword [ebp - 0x14], eax
push edi
call fcn.100276f0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 4], 1
mov eax, dword [ecx + 8]
mov edi, dword [ecx + 0x1c]
inc eax
movss xmm3, dword [ecx]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
movd xmm1, edi
addsd xmm0, qword [eax*8 + 0x103e4170]
cvtdq2pd xmm1, xmm1
mov eax, edi
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x103e4170]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
comiss xmm2, xmm3
jbe 0x100df8bb
divss xmm0, xmm3
call fcn.10019770
call fcn.102e1840
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp edi, ecx
jae 0x100df89b
cmp edi, 0x200
jae 0x100df899
shl edi, 3
cmp edi, ecx
jae 0x100df89b
mov edi, ecx
mov ecx, dword [ebp - 0x10]
push edi
call fcn.10029d70
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
push esi
push dword [ebp - 0x14]
push eax
call fcn.1002ad30
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax]
jmp 0x100df8be
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0x20]
push edx
push esi
call fcn.100299d0
mov byte [ebx + 4], 1
mov dword [ebx], eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.102df107
int3
Function at 0x100df8f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1031fa45
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x1040e140]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, ecx
mov dword [ebp - 0x10], edx
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x14], edi
cmp dword [edi + 0x14], 0xf
jbe 0x100df931
mov eax, dword [edi]
mov dword [ebp - 0x14], eax
xor ecx, ecx
mov esi, 0x811c9dc5
cmp dword [edi + 0x10], ecx
jbe 0x100df955
mov edx, dword [ebp - 0x14]
movzx eax, byte [edx + ecx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, dword [edi + 0x10]
jb 0x100df940
mov edx, dword [ebp - 0x10]
push esi
push edi
lea eax, [ebp - 0x1c]
mov ecx, edx
push eax
call fcn.1002ad30
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x100df972
mov byte [ebx + 4], 0
jmp 0x100dfa69
mov eax, dword [ebp - 0x10]
cmp dword [eax + 8], 0x71c71c7
je 0x100dfa81
add eax, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0
push 0x24
mov dword [ebp - 0x20], 0
call fcn.102e08b1
add esp, 4
mov dword [ebp - 0x20], eax
add eax, 8
mov ecx, eax
mov dword [ebp - 0x14], eax
push edi
call fcn.100276f0
mov eax, dword [ebp - 0x14]
mov byte [eax + 0x18], 0
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 4], 1
mov eax, dword [ecx + 8]
mov edi, dword [ecx + 0x1c]
inc eax
movss xmm3, dword [ecx]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
movd xmm1, edi
addsd xmm0, qword [eax*8 + 0x103e4170]
cvtdq2pd xmm1, xmm1
mov eax, edi
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x103e4170]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
comiss xmm2, xmm3
jbe 0x100dfa58
divss xmm0, xmm3
call fcn.10019770
call fcn.102e1840
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp edi, ecx
jae 0x100dfa38
cmp edi, 0x200
jae 0x100dfa36
shl edi, 3
cmp edi, ecx
jae 0x100dfa38
mov edi, ecx
mov ecx, dword [ebp - 0x10]
push edi
call fcn.10029d70
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
push esi
push dword [ebp - 0x14]
push eax
call fcn.1002ad30
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax]
jmp 0x100dfa5b
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0x20]
push edx
push esi
call fcn.100299d0
mov byte [ebx + 4], 1
mov dword [ebx], eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.102df107
int3
Function at 0x100e13e0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x34
push ebx
push esi
mov esi, dword [ebp + 8]
mov ecx, esi
push edi
call fcn.100e12f0
push 2
push esi
mov edi, eax
call fcn.102bf260
add esp, 8
push 0
push 2
push esi
test eax, eax
je 0x100e1416
call fcn.102bffa0
add esp, 0xc
jmp 0x100e1429
call fcn.102c0090
add esp, 4
fstp qword [esp]
call fcn.102f2ece
add esp, 8
mov ebx, eax
mov dword [esp + 0x34], edx
movzx eax, bl
xor eax, 0x811c9dc5
mov dword [esp + 0x30], ebx
imul ecx, eax, 0x1000193
mov eax, ebx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, ebx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr ebx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
xor eax, ebx
imul esi, eax, 0x1000193
lea eax, [esp + 0x30]
push esi
push eax
lea eax, [esp + 0x40]
push eax
call fcn.1002a930
mov edx, dword [eax + 4]
test edx, edx
je 0x100e14d3
mov ecx, dword [edi + 0x18]
and ecx, esi
mov esi, dword [edi + 0xc]
mov eax, dword [esi + ecx*8]
cmp dword [esi + ecx*8 + 4], edx
jne 0x100e14af
cmp eax, edx
jne 0x100e14a6
mov eax, dword [edi + 4]
mov dword [esi + ecx*8], eax
mov dword [esi + ecx*8 + 4], eax
jmp 0x100e14b8
mov eax, dword [edx + 4]
mov dword [esi + ecx*8 + 4], eax
jmp 0x100e14b8
cmp eax, edx
jne 0x100e14b8
mov eax, dword [edx]
mov dword [esi + ecx*8], eax
mov ecx, dword [edx]
dec dword [edi + 8]
mov eax, dword [edx + 4]
push 0x10
push edx
mov dword [eax], ecx
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
call fcn.102e0d10
add esp, 8
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x100e14e0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x34
push ebx
push esi
mov esi, dword [ebp + 8]
mov ecx, esi
push edi
call fcn.100e12f0
push 2
push esi
mov edi, eax
call fcn.102bf260
add esp, 8
push 0
push 2
push esi
test eax, eax
je 0x100e1516
call fcn.102bffa0
add esp, 0xc
jmp 0x100e1529
call fcn.102c0090
add esp, 4
fstp qword [esp]
call fcn.102f2ece
add esp, 8
mov ebx, eax
mov dword [esp + 0x34], edx
movzx eax, bl
xor eax, 0x811c9dc5
mov dword [esp + 0x30], ebx
imul ecx, eax, 0x1000193
mov eax, ebx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, ebx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr ebx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
xor eax, ebx
imul eax, eax, 0x1000193
push eax
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.1002a930
mov eax, dword [eax + 4]
test eax, eax
je 0x100e15a4
cmp eax, dword [edi + 4]
je 0x100e15a4
movzx eax, byte [eax + 0xc]
push eax
push esi
call fcn.102bf520
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call fcn.102bf6a0
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x100e16c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x28
mov eax, dword [0x1040e140]
xor eax, esp
mov dword [esp + 0x24], eax
push esi
mov esi, dword [ebp + 8]
push edi
push 3
push esi
call fcn.102c01a0
add esp, 8
test eax, eax
jne 0x100e1702
push esi
call fcn.100e13e0
add esp, 4
pop edi
pop esi
mov ecx, dword [esp + 0x24]
xor ecx, esp
call fcn.102e0890
mov esp, ebp
pop ebp
ret
mov ecx, esi
call fcn.100e12f0
mov edi, eax
push 2
push esi
mov dword [esp + 0x14], edi
call fcn.102bf260
add esp, 8
push 0
push 2
push esi
test eax, eax
je 0x100e172d
call fcn.102bffa0
add esp, 0xc
jmp 0x100e1740
call fcn.102c0090
add esp, 4
fstp qword [esp]
call fcn.102f2ece
add esp, 8
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], edx
mov edx, eax
movzx eax, dl
xor eax, 0x811c9dc5
mov dword [esp + 0x18], edx
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
imul ecx, ecx, 0x1000193
shr eax, 0x10
movzx eax, al
xor ecx, eax
mov eax, edx
imul ecx, ecx, 0x1000193
shr eax, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.1002a930
mov edi, dword [eax + 4]
mov eax, dword [esp + 0xc]
test edi, edi
je 0x100e17d1
cmp edi, dword [eax + 4]
je 0x100e17d4
push 3
push esi
call fcn.102bff70
add esp, 8
test eax, eax
setne al
mov byte [edi + 0xc], al
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x24]
xor ecx, esp
call fcn.102e0890
mov esp, ebp
pop ebp
ret
mov edi, dword [eax + 4]
mov eax, dword [esp + 0x10]
push 3
push esi
mov dword [esp + 0x18], eax
call fcn.102bff70
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
lea eax, [esp + 0x10]
setne byte [esp + 0x14]
push eax
push edi
lea eax, [esp + 0x20]
push eax
call fcn.100e1b10
mov ecx, dword [esp + 0x2c]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.102e0890
mov esp, ebp
pop ebp
ret
Function at 0x100e1b10
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1031fcb5
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x1040e140]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov dword [ebp - 0x20], edx
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [esi + 1]
xor ecx, eax
movzx eax, byte [esi + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul ebx, ecx, 0x1000193
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x1c], ebx
cmp ecx, dword [edi + 4]
je 0x100e1b8b
mov eax, dword [ecx + 8]
cmp eax, dword [esi]
jne 0x100e1b8b
mov ebx, dword [ecx]
jmp 0x100e1ba1
push ebx
push esi
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
call fcn.1002a930
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
test ecx, ecx
je 0x100e1bbd
mov dword [edx], ecx
mov eax, edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [edi + 8], 0xfffffff
je 0x100e1cd3
lea eax, [edi + 4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0
push 0x10
mov dword [ebp - 0x24], 0
call fcn.102e08b1
mov ecx, dword [esi]
add esp, 4
mov edx, dword [esi + 4]
mov dword [ebp - 0x24], eax
add eax, 8
mov dword [ebp - 0x14], eax
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [ebp - 4], 1
mov eax, dword [edi + 8]
mov esi, dword [edi + 0x1c]
inc eax
movss xmm3, dword [edi]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
movd xmm1, esi
addsd xmm0, qword [eax*8 + 0x103e4170]
cvtdq2pd xmm1, xmm1
mov eax, esi
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x103e4170]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
comiss xmm2, xmm3
jbe 0x100e1c94
divss xmm0, xmm3
call fcn.10019770
call fcn.102e1840
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp esi, ecx
jae 0x100e1c78
cmp esi, 0x200
jae 0x100e1c76
shl esi, 3
cmp esi, ecx
jae 0x100e1c78
mov esi, ecx
push esi
mov ecx, edi
call fcn.100285c0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x14]
cmp ecx, dword [edi + 4]
je 0x100e1cbe
mov eax, dword [ecx + 8]
cmp eax, dword [edx]
jne 0x100e1cbe
mov ebx, dword [ecx]
mov esi, dword [ebp - 0x1c]
push dword [ebp - 0x24]
mov ecx, edi
push ebx
push esi
call fcn.100299d0
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push esi
push edx
push eax
mov ecx, edi
call fcn.1002a930
mov ebx, dword [ebp - 0x18]
jmp 0x100e1c97
push str.unordered_map_set_too_long
call fcn.102df107
int3
Function at 0x100e1d00
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1031fa45
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x1040e140]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x10], edx
cmp dword [edx + 0x14], 0xf
mov dword [ebp - 0x14], edx
jbe 0x100e1d44
mov eax, dword [edx]
mov dword [ebp - 0x14], eax
xor ecx, ecx
mov esi, 0x811c9dc5
cmp dword [edx + 0x10], ecx
jbe 0x100e1d68
mov edi, dword [ebp - 0x14]
movzx eax, byte [edi + ecx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, dword [edx + 0x10]
jb 0x100e1d53
mov edi, dword [ebp - 0x1c]
push esi
push edx
lea eax, [ebp - 0x18]
mov ecx, ebx
push eax
call fcn.1002ad30
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x100e1d98
mov dword [edi], eax
mov eax, edi
mov byte [edi + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [ebx + 8], 0x71c71c7
je 0x100e1ed3
lea eax, [ebx + 4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0
push 0x24
mov dword [ebp - 0x20], 0
call fcn.102e08b1
add esp, 4
mov edi, eax
mov dword [ebp - 0x20], edi
push dword [ebp - 0x10]
lea ecx, [edi + 8]
call fcn.100276f0
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x18]
mov dword [edi + 0x20], ecx
mov dword [ebp - 4], 1
mov eax, dword [ebx + 8]
inc eax
movss xmm3, dword [ebx]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x103e4170]
mov eax, dword [ebx + 0x1c]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x103e4170]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
comiss xmm2, xmm3
jbe 0x100e1e75
divss xmm0, xmm3
call fcn.10019770
call fcn.102e1840
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
mov eax, dword [ebx + 0x1c]
cmp eax, ecx
jae 0x100e1e59
cmp eax, 0x200
jae 0x100e1e57
shl eax, 3
cmp eax, ecx
jae 0x100e1e59
mov eax, ecx
push eax
mov ecx, ebx
call fcn.100e2100
push esi
lea eax, [edi + 8]
mov ecx, ebx
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.1002ad30
mov edx, dword [eax]
jmp 0x100e1e78
mov edx, dword [ebp - 0x18]
mov eax, dword [edx + 4]
inc dword [ebx + 8]
mov dword [edi + 4], eax
mov dword [edi], edx
mov dword [eax], edi
mov dword [edx + 4], edi
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x18]
and eax, esi
mov esi, dword [ecx + eax*8]
cmp esi, dword [ebx + 4]
jne 0x100e1ea0
mov dword [ecx + eax*8], edi
jmp 0x100e1eb2
cmp esi, edx
jne 0x100e1ea9
mov dword [ecx + eax*8], edi
jmp 0x100e1eb6
mov edx, dword [ebp - 0x10]
cmp dword [ecx + eax*8 + 4], edx
jne 0x100e1eb6
mov dword [ecx + eax*8 + 4], edi
mov eax, dword [ebp - 0x1c]
mov dword [eax], edi
mov byte [eax + 4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.102df107
int3