joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b5370
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov bh, dl
push 0
push 0
push 0x14b
push dword [0x5653dc]
mov bl, cl
call esi
push str.Sort_by_pid_in_asc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
push str.Sort_by_pid_in_desc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
push str.Sort_by_score_in_asc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
push str.Sort_by_score_in_desc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
push str.Sort_by_ping_in_asc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
push str.Sort_by_ping_in_desc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
push str.Sort_by_name_in_asc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
push str.Sort_by_name_in_desc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
test bl, bl
je 0x4b5498
push str.Sort_by_IP_in_asc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
push str.Sort_by_IP_in_desc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
push str.Sort_by_geoinfo_in_asc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
push str.Sort_by_geoinfo_in_desc._order
push 0
push 0x143
push dword [0x5653dc]
call esi
test bh, bh
je 0x4b54a9
mov edx, 0xc
mov dword [0x55bc7c], edx
jmp 0x4b54af
test bh, bh
je 0x4b54a9
mov edx, 3
mov dword [0x55bc7c], edx
jmp 0x4b54af
mov edx, dword [0x55bc7c]
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
mov eax, edx
sar eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
imul ecx, ecx, 0x1000193
sar eax, 0x10
movzx eax, al
sar edx, 0x18
xor ecx, eax
movzx eax, dl
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
push eax
push 0x55bc7c
lea eax, [ebp - 8]
push eax
call fcn.004c0670
mov eax, dword [ebp - 4]
test eax, eax
je 0x4b5522
add eax, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x4b550c
mov eax, dword [eax]
push eax
push 0xffffffffffffffff
push 0x14d
push dword [0x5653dc]
call esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.invalid_unordered_map_K__T__key
call fcn.004cfb46
int3
Function at 0x4b9410
Capabilities:
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5083ee
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x48
mov eax, dword [0x55b18c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x40], edx
mov edi, ecx
mov dword [ebp - 0x44], edi
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x4c], 0
nop dword [eax]
inc eax
cmp eax, 5
je 0x4b9481
cmp byte [eax + str.__:], 0
jne 0x4b9470
jmp 0x4b9486
mov eax, 5
lea esi, [eax + str.__:]
mov dword [ebp - 0x18], 0
push ecx
xorps xmm0, xmm0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x38]
movups xmmword [ebp - 0x38], xmm0
movups xmmword [ebp - 0x28], xmm0
call fcn.00430d30
push esi
push str.__:
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 1
call fcn.00431720
mov dword [ebp - 4], 2
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x40]
mov edx, ecx
mov dword [ebp - 0x4c], 1
cmp dword [ecx + 0x14], 0x10
jb 0x4b9509
mov edx, dword [ecx]
mov eax, edx
mov dword [ebp - 0x40], eax
mov esi, edx
jmp 0x4b9510
mov eax, ecx
mov dword [ebp - 0x40], edx
mov esi, ecx
mov ecx, dword [ecx + 0x10]
add ecx, esi
mov dword [ebp - 0x44], ecx
cmp edx, ecx
je 0x4b95b1
mov al, byte [eax]
lea ecx, [ebp - 0x38]
mov esi, dword [edi + 0x10]
mov byte [ebp - 0x39], al
mov byte [ebp - 0x18], al
movzx eax, al
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00431760
mov ecx, dword [edi + 0x14]
cmp dword [eax + 4], 0
jne 0x4b9578
cmp esi, ecx
jae 0x4b9573
lea eax, [esi + 1]
mov dword [edi + 0x10], eax
mov eax, edi
cmp ecx, 0x10
jb 0x4b9566
mov eax, dword [edi]
mov cl, byte [ebp - 0x39]
mov byte [eax + esi], cl
mov byte [eax + esi + 1], 0
jmp 0x4b95a1
push dword [ebp - 0x18]
jmp 0x4b9595
cmp esi, ecx
jae 0x4b9593
lea eax, [esi + 1]
mov dword [edi + 0x10], eax
mov eax, edi
cmp ecx, 0x10
jb 0x4b958b
mov eax, dword [edi]
mov word [eax + esi], 0x5f
jmp 0x4b95a1
push 0x5f
push dword [ebp - 0x48]
mov ecx, edi
push 1
call fcn.004173a0
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, dword [ebp - 0x44]
jne 0x4b9520
lea ecx, [ebp - 0x38]
call fcn.00430270
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004d20a0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
Function at 0x4b96d0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
mov eax, dword [0x55b18c]
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0x60]
mov dword [ebp - 0x50], 0x44
push eax
lea eax, [ebp - 0x50]
xorps xmm0, xmm0
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
movups xmmword [ebp - 0x60], xmm0
movlpd qword [ebp - 0x4c], xmm0
movlpd qword [ebp - 0x44], xmm0
movlpd qword [ebp - 0x3c], xmm0
movlpd qword [ebp - 0x34], xmm0
movlpd qword [ebp - 0x2c], xmm0
movlpd qword [ebp - 0x24], xmm0
movlpd qword [ebp - 0x1c], xmm0
movlpd qword [ebp - 0x14], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x4b9759
push dword [ebp - 0x5c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x60]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004d20a0
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor al, al
xor ecx, ebp
call fcn.004d20a0
mov esp, ebp
pop ebp
ret

Function at 0x4b9770
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword fs:[0x2c]
sub esp, 0xc
push ebx
mov ebx, dword [eax]
mov eax, dword [0x5cc200]
push esi
push edi
cmp eax, dword [ebx + 4]
jle 0x4b9841
push 0x5cc200
call fcn.004d212f
add esp, 4
cmp dword [0x5cc200], 0xffffffff
jne 0x4b9841
call fcn.004d16c2
push 0
push 0x989680
push edx
push eax
call fcn.004fc340
mov edi, eax
mov dword [0x5cd748], 0x55555555
mov dword [0x5cd74c], 0x55555555
mov esi, 1
mov dword [0x5cc3c8], edi
mov dword [0x5cc3cc], edx
nop dword [eax]
push 0x5851f42d
mov ecx, edx
xor eax, eax
push 0x4c957f2d
shr ecx, 0x1e
xor eax, edx
xor ecx, edi
push eax
push ecx
call fcn.004d2d70
mov edi, eax
add edi, esi
mov dword [esi*8 + 0x5cc3c8], edi
adc edx, 0
mov dword [esi*8 + 0x5cc3cc], edx
inc esi
cmp esi, 0x138
jb 0x4b97f0
push 0x5cc200
mov dword [0x5cc3c0], 0x138
call fcn.004d20de
add esp, 4
mov eax, dword [0x5ceccc]
cmp eax, dword [ebx + 4]
jle 0x4b9885
push 0x5ceccc
call fcn.004d212f
add esp, 4
cmp dword [0x5ceccc], 0xffffffff
jne 0x4b9885
push 0x5ceccc
mov dword [0x5d7500], 0x3e8
mov dword [0x5d7504], 0xffffffff
call fcn.004d20de
add esp, 4
mov eax, dword [0x5d7504]
mov esi, dword [0x5d7500]
sub eax, esi
mov dword [esp + 0x10], 0x5cc3c0
cmp eax, 0xffffffff
jne 0x4b98b2
mov ecx, 0x5cc3c0
call fcn.004c6390
add eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
inc eax
lea ecx, [esp + 0x10]
push eax
call fcn.004c5900
pop edi
add eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x4b9cb0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
movzx eax, byte [edi]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [edi + 1]
xor edx, eax
movzx eax, byte [edi + 2]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [edi + 3]
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [esi + 0x18]
and ecx, eax
mov eax, dword [esi + 0xc]
lea edx, [eax + ecx*8]
mov eax, dword [edx + 4]
cmp eax, dword [esi + 4]
je 0x4b9d1d
mov ecx, dword [edi]
mov edx, dword [edx]
cmp ecx, dword [eax + 8]
je 0x4b9d14
cmp eax, edx
je 0x4b9d1d
mov eax, dword [eax + 4]
cmp ecx, dword [eax + 8]
jne 0x4b9d08
pop edi
add eax, 0xc
pop esi
pop ebp
ret 4
push str.invalid_unordered_map_K__T__key
call fcn.004cfb46
int3

Function at 0x4ba090
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
movzx eax, byte [edi]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [edi + 1]
xor edx, eax
movzx eax, byte [edi + 2]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [edi + 3]
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [esi + 0x18]
and ecx, eax
mov eax, dword [esi + 0xc]
lea edx, [eax + ecx*8]
mov eax, dword [edx + 4]
cmp eax, dword [esi + 4]
je 0x4ba103
mov ecx, dword [edi]
mov edx, dword [edx]
pop edi
pop esi
cmp ecx, dword [eax + 8]
je 0x4ba0fc
nop word [eax + eax]
cmp eax, edx
je 0x4ba103
mov eax, dword [eax + 4]
cmp ecx, dword [eax + 8]
jne 0x4ba0f0
add eax, 0x10
pop ebp
ret 4
push str.invalid_unordered_map_K__T__key
call fcn.004cfb46
int3

Function at 0x4ba110
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov edx, dword [ebp + 8]
push ebx
push esi
push edi
cmp dword [edx + 0x14], 0x10
mov esi, edx
mov ebx, dword [edx + 0x10]
mov dword [ebp - 4], ecx
jb 0x4ba12c
mov esi, dword [edx]
xor ecx, ecx
mov edi, 0x811c9dc5
test ebx, ebx
je 0x4ba148
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edi
imul edi, eax, 0x1000193
cmp ecx, ebx
jb 0x4ba137
mov ebx, dword [ebp - 4]
lea eax, [ebp - 0xc]
push edi
push edx
push eax
mov ecx, ebx
call fcn.00430b60
mov esi, dword [eax + 4]
test esi, esi
je 0x4ba1c3
mov ecx, dword [ebx + 0x18]
mov eax, dword [ebx + 0xc]
and ecx, edi
lea ecx, [eax + ecx*8]
mov eax, dword [ecx]
cmp dword [ecx + 4], esi
jne 0x4ba187
cmp eax, esi
jne 0x4ba17f
mov eax, dword [ebx + 4]
mov dword [ecx], eax
mov dword [ecx + 4], eax
jmp 0x4ba18f
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
jmp 0x4ba18f
cmp eax, esi
jne 0x4ba18f
mov eax, dword [esi]
mov dword [ecx], eax
mov ecx, dword [esi]
lea edx, [esi + 8]
dec dword [ebx + 8]
mov eax, dword [esi + 4]
mov dword [eax], ecx
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
call fcn.00474240
push 0xf8
push esi
call fcn.004d25e8
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x4c4c50
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x502b85
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x55b18c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x10], edx
cmp dword [edx + 0x14], 0x10
mov dword [ebp - 0x14], edx
jb 0x4c4c94
mov eax, dword [edx]
mov dword [ebp - 0x14], eax
xor ecx, ecx
mov esi, 0x811c9dc5
cmp dword [edx + 0x10], ecx
jbe 0x4c4cb8
mov edi, dword [ebp - 0x14]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, dword [edx + 0x10]
jb 0x4c4ca3
mov edi, dword [ebp - 0x1c]
push esi
push edx
lea eax, [ebp - 0x18]
mov ecx, ebx
push eax
call fcn.00430b60
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x4c4ce8
mov dword [edi], eax
mov eax, edi
mov byte [edi + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [ebx + 8], 0x71c71c7
je 0x4c4e25
lea eax, [ebx + 4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0
push 0x24
mov dword [ebp - 0x20], 0
call fcn.004d2193
add esp, 4
mov edi, eax
mov dword [ebp - 0x20], edi
push dword [ebp - 0x10]
lea ecx, [edi + 8]
call fcn.00414110
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x18]
mov dword [edi + 0x20], ecx
mov dword [ebp - 4], 1
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 0x1c]
inc eax
movss xmm3, dword [ebx]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
movd xmm1, ecx
addsd xmm0, qword [eax*8 + 0x548840]
cvtdq2pd xmm1, xmm1
mov eax, ecx
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x548840]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
comiss xmm2, xmm3
jbe 0x4c4dc7
divss xmm0, xmm3
call fcn.004277c0
call fcn.004fc920
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
mov eax, dword [ebx + 0x1c]
cmp eax, ecx
jae 0x4c4dab
cmp eax, 0x200
jae 0x4c4da9
shl eax, 3
cmp eax, ecx
jae 0x4c4dab
mov eax, ecx
push eax
mov ecx, ebx
call fcn.00430570
push esi
lea eax, [edi + 8]
mov ecx, ebx
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00430b60
mov edx, dword [eax]
jmp 0x4c4dca
mov edx, dword [ebp - 0x18]
mov eax, dword [edx + 4]
inc dword [ebx + 8]
mov dword [edi + 4], eax
mov dword [edi], edx
mov dword [eax], edi
mov dword [edx + 4], edi
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x18]
and eax, esi
mov esi, dword [ecx + eax*8]
cmp esi, dword [ebx + 4]
jne 0x4c4df2
mov dword [ecx + eax*8], edi
jmp 0x4c4e04
cmp esi, edx
jne 0x4c4dfb
mov dword [ecx + eax*8], edi
jmp 0x4c4e08
mov edx, dword [ebp - 0x10]
cmp dword [ecx + eax*8 + 4], edx
jne 0x4c4e08
mov dword [ecx + eax*8 + 4], edi
mov eax, dword [ebp - 0x1c]
mov dword [eax], edi
mov byte [eax + 4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.004cfb26
int3
Function at 0x4c4e30
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x508dd5
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x55b18c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, dword [ebp + 0xc]
mov edi, edx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x10], edx
cmp dword [edx + 0x14], 0x10
jb 0x4c4e6b
mov edi, dword [edx]
xor ecx, ecx
mov esi, 0x811c9dc5
cmp dword [edx + 0x10], ecx
jbe 0x4c4e89
movzx eax, byte [ecx + edi]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, dword [edx + 0x10]
jb 0x4c4e77
push esi
push edx
lea eax, [ebp - 0x18]
push eax
call fcn.004c05d0
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x4c4ea6
mov dword [ebx], eax
mov byte [ebx + 4], 0
jmp 0x4c4fe5
cmp dword [0x5695d0], 0x71c71c7
je 0x4c4ffb
mov dword [ebp - 0x20], 0x5695cc
mov dword [ebp - 4], 0
push 0x24
mov dword [ebp - 0x1c], 0
call fcn.004d2193
add esp, 4
mov edi, eax
mov dword [ebp - 0x1c], edi
push dword [ebp - 0x10]
lea ecx, [edi + 8]
call fcn.00414110
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x18]
mov dword [edi + 0x20], ecx
mov dword [ebp - 4], 1
mov eax, dword [0x5695d0]
mov ecx, dword [0x5695e4]
inc eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x548840]
mov eax, ecx
shr eax, 0x1f
cvtpd2ps xmm3, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
movaps xmm2, xmm3
addsd xmm0, qword [eax*8 + 0x548840]
cvtpd2ps xmm1, xmm0
movss xmm0, dword [0x5695c8]
divss xmm2, xmm1
comiss xmm2, xmm0
jbe 0x4c4f93
divss xmm3, xmm0
movaps xmm0, xmm3
call fcn.004277c0
call fcn.004fc920
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
mov eax, dword [0x5695e4]
cmp eax, ecx
jae 0x4c4f7b
cmp eax, 0x200
jae 0x4c4f79
shl eax, 3
cmp eax, ecx
jae 0x4c4f7b
mov eax, ecx
push eax
call fcn.004c5b60
push esi
lea eax, [edi + 8]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004c05d0
mov edx, dword [eax]
jmp 0x4c4f96
mov edx, dword [ebp - 0x18]
mov eax, dword [edx + 4]
inc dword [0x5695d0]
mov dword [edi + 4], eax
mov dword [edi], edx
mov dword [eax], edi
mov dword [edx + 4], edi
mov ecx, dword [0x5695d4]
mov dword [ebp - 0x10], eax
mov eax, dword [0x5695e0]
and eax, esi
mov esi, dword [ecx + eax*8]
cmp esi, dword [0x5695cc]
jne 0x4c4fc9
mov dword [ecx + eax*8], edi
jmp 0x4c4fdb
cmp esi, edx
jne 0x4c4fd2
mov dword [ecx + eax*8], edi
jmp 0x4c4fdf
mov edx, dword [ebp - 0x10]
cmp dword [ecx + eax*8 + 4], edx
jne 0x4c4fdf
mov dword [ecx + eax*8 + 4], edi
mov dword [ebx], edi
mov byte [ebx + 4], 1
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.004cfb26
int3
Function at 0x4c5010
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x502d55
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x55b18c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x14], edi
movzx eax, byte [ebx]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [ebx + 1]
xor ecx, eax
movzx eax, byte [ebx + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [ebx + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
push eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
push ebx
push eax
call fcn.004cba00
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x4c5093
mov dword [edi], eax
mov byte [edi + 4], 0
jmp 0x4c51ce
cmp dword [0x5716a4], 0xfffffff
je 0x4c51e4
mov dword [ebp - 0x24], 0x5716a0
mov dword [ebp - 4], 0
push 0x10
mov dword [ebp - 0x20], 0
call fcn.004d2193
mov ecx, dword [ebx]
mov esi, eax
mov edx, dword [ebx + 4]
lea edi, [esi + 8]
add esp, 4
mov dword [ebp - 0x20], esi
mov dword [edi], ecx
mov dword [edi + 4], edx
mov dword [ebp - 4], 1
mov ecx, dword [0x5716a4]
mov ebx, dword [0x5716b8]
lea eax, [ecx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x548840]
mov eax, ebx
shr eax, 0x1f
cvtpd2ps xmm3, xmm0
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
movaps xmm2, xmm3
addsd xmm0, qword [eax*8 + 0x548840]
cvtpd2ps xmm1, xmm0
movss xmm0, dword [0x57169c]
divss xmm2, xmm1
comiss xmm2, xmm0
jbe 0x4c517d
divss xmm3, xmm0
movaps xmm0, xmm3
call fcn.004277c0
call fcn.004fc920
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp ebx, ecx
jae 0x4c5160
cmp ebx, 0x200
jae 0x4c515e
shl ebx, 3
cmp ebx, ecx
jae 0x4c5160
mov ebx, ecx
push ebx
call fcn.004c5d50
push dword [ebp - 0x10]
lea eax, [ebp - 0x24]
push edi
push eax
call fcn.004cba00
mov ecx, dword [0x5716a4]
mov edx, dword [eax]
jmp 0x4c5180
mov edx, dword [ebp - 0x1c]
mov ebx, dword [edx + 4]
inc ecx
mov dword [0x5716a4], ecx
mov dword [esi], edx
mov dword [esi + 4], ebx
mov dword [ebx], esi
mov dword [edx + 4], esi
mov eax, dword [0x5716b4]
and eax, dword [ebp - 0x10]
mov ecx, dword [0x5716a8]
mov edi, dword [ecx + eax*8]
cmp edi, dword [0x5716a0]
jne 0x4c51b2
mov dword [ecx + eax*8], esi
jmp 0x4c51c1
cmp edi, edx
jne 0x4c51bb
mov dword [ecx + eax*8], esi
jmp 0x4c51c5
cmp dword [ecx + eax*8 + 4], ebx
jne 0x4c51c5
mov dword [ecx + eax*8 + 4], esi
mov edi, dword [ebp - 0x14]
mov dword [edi], esi
mov byte [edi + 4], 1
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.004cfb26
int3
Function at 0x4c51f0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x508e15
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x55b18c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x14], edi
movzx eax, byte [ebx]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [ebx + 1]
xor ecx, eax
movzx eax, byte [ebx + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [ebx + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
push eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
push ebx
push eax
call fcn.004c0670
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x4c5273
mov dword [edi], eax
mov byte [edi + 4], 0
jmp 0x4c53b4
cmp dword [0x5694dc], 0x71c71c7
je 0x4c53ca
mov dword [ebp - 0x24], 0x5694d8
mov dword [ebp - 4], 0
push 0x24
mov dword [ebp - 0x20], 0
call fcn.004d2193
mov ecx, dword [ebx]
lea edx, [ebx + 4]
mov esi, eax
add esp, 4
lea edi, [esi + 8]
mov dword [ebp - 0x20], esi
mov dword [edi], ecx
lea ecx, [edi + 4]
push edx
call fcn.00414110
mov dword [ebp - 4], 1
mov ecx, dword [0x5694dc]
mov ebx, dword [0x5694f0]
lea eax, [ecx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x548840]
mov eax, ebx
shr eax, 0x1f
cvtpd2ps xmm3, xmm0
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
movaps xmm2, xmm3
addsd xmm0, qword [eax*8 + 0x548840]
cvtpd2ps xmm1, xmm0
movss xmm0, dword [0x5694d4]
divss xmm2, xmm1
comiss xmm2, xmm0
jbe 0x4c5363
divss xmm3, xmm0
movaps xmm0, xmm3
call fcn.004277c0
call fcn.004fc920
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp ebx, ecx
jae 0x4c5346
cmp ebx, 0x200
jae 0x4c5344
shl ebx, 3
cmp ebx, ecx
jae 0x4c5346
mov ebx, ecx
push ebx
call fcn.004c5ed0
push dword [ebp - 0x10]
lea eax, [ebp - 0x24]
push edi
push eax
call fcn.004c0670
mov ecx, dword [0x5694dc]
mov edx, dword [eax]
jmp 0x4c5366
mov edx, dword [ebp - 0x1c]
mov ebx, dword [edx + 4]
inc ecx
mov dword [0x5694dc], ecx
mov dword [esi], edx
mov dword [esi + 4], ebx
mov dword [ebx], esi
mov dword [edx + 4], esi
mov eax, dword [0x5694ec]
and eax, dword [ebp - 0x10]
mov ecx, dword [0x5694e0]
mov edi, dword [ecx + eax*8]
cmp edi, dword [0x5694d8]
jne 0x4c5398
mov dword [ecx + eax*8], esi
jmp 0x4c53a7
cmp edi, edx
jne 0x4c53a1
mov dword [ecx + eax*8], esi
jmp 0x4c53ab
cmp dword [ecx + eax*8 + 4], ebx
jne 0x4c53ab
mov dword [ecx + eax*8 + 4], esi
mov edi, dword [ebp - 0x14]
mov dword [edi], esi
mov byte [edi + 4], 1
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.004cfb26
int3
Function at 0x4c53e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x508dd5
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x55b18c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, dword [ebp + 0xc]
mov edi, edx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x10], edx
cmp dword [edx + 0x14], 0x10
jb 0x4c541b
mov edi, dword [edx]
xor ecx, ecx
mov esi, 0x811c9dc5
cmp dword [edx + 0x10], ecx
jbe 0x4c5439
movzx eax, byte [ecx + edi]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, dword [edx + 0x10]
jb 0x4c5427
push esi
push edx
lea eax, [ebp - 0x18]
push eax
call fcn.00470e70
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x4c5456
mov dword [ebx], eax
mov byte [ebx + 4], 0
jmp 0x4c5595
cmp dword [0x569548], 0x71c71c7
je 0x4c55ab
mov dword [ebp - 0x20], 0x569544
mov dword [ebp - 4], 0
push 0x24
mov dword [ebp - 0x1c], 0
call fcn.004d2193
add esp, 4
mov edi, eax
mov dword [ebp - 0x1c], edi
push dword [ebp - 0x10]
lea ecx, [edi + 8]
call fcn.00414110
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x18]
mov dword [edi + 0x20], ecx
mov dword [ebp - 4], 1
mov eax, dword [0x569548]
mov ecx, dword [0x56955c]
inc eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x548840]
mov eax, ecx
shr eax, 0x1f
cvtpd2ps xmm3, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
movaps xmm2, xmm3
addsd xmm0, qword [eax*8 + 0x548840]
cvtpd2ps xmm1, xmm0
movss xmm0, dword [0x569540]
divss xmm2, xmm1
comiss xmm2, xmm0
jbe 0x4c5543
divss xmm3, xmm0
movaps xmm0, xmm3
call fcn.004277c0
call fcn.004fc920
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
mov eax, dword [0x56955c]
cmp eax, ecx
jae 0x4c552b
cmp eax, 0x200
jae 0x4c5529
shl eax, 3
cmp eax, ecx
jae 0x4c552b
mov eax, ecx
push eax
call fcn.004c6050
push esi
lea eax, [edi + 8]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00470e70
mov edx, dword [eax]
jmp 0x4c5546
mov edx, dword [ebp - 0x18]
mov eax, dword [edx + 4]
inc dword [0x569548]
mov dword [edi + 4], eax
mov dword [edi], edx
mov dword [eax], edi
mov dword [edx + 4], edi
mov ecx, dword [0x56954c]
mov dword [ebp - 0x10], eax
mov eax, dword [0x569558]
and eax, esi
mov esi, dword [ecx + eax*8]
cmp esi, dword [0x569544]
jne 0x4c5579
mov dword [ecx + eax*8], edi
jmp 0x4c558b
cmp esi, edx
jne 0x4c5582
mov dword [ecx + eax*8], edi
jmp 0x4c558f
mov edx, dword [ebp - 0x10]
cmp dword [ecx + eax*8 + 4], edx
jne 0x4c558f
mov dword [ecx + eax*8 + 4], edi
mov dword [ebx], edi
mov byte [ebx + 4], 1
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.004cfb26
int3