joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10096d80
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
mov edi, ecx
cmp dword [edi + 0x38], 0
je 0x10096e59
mov eax, dword [ebp + 8]
mov ebx, dword [edi + 0x10]
dec ebx
mov esi, ebx
mov eax, dword [eax]
mov edx, eax
shr edx, 0x10
xor edx, eax
imul ecx, edx, 0x85ebca6b
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul eax, eax, 0xc2b2ae35
mov ecx, eax
shr ecx, 0x10
xor ecx, eax
mov dword [ebp - 8], ecx
and esi, ecx
mov eax, dword [edi + 4]
mov eax, dword [eax + esi*4]
cmp eax, 0xffffffff
je 0x10096df4
mov ecx, dword [ebp + 8]
mov edx, dword [edi + 0x28]
mov esi, dword [ecx]
lea esp, [esp]
lea ecx, [eax + eax*2]
cmp esi, dword [edx + ecx*4]
je 0x10096e5c
mov eax, dword [edx + ecx*4 + 8]
cmp eax, 0xffffffff
jne 0x10096de0
mov ecx, dword [ebp - 8]
sar ebx, 1
cmp ebx, dword [edi + 0x48]
jl 0x10096e59
mov esi, ebx
and esi, ecx
cmp esi, dword [edi + 0x40]
jl 0x10096e59
test esi, esi
js 0x10096e0d
cmp esi, dword [edi + 0x14]
jl 0x10096e29
push str.bitNum___0__bitNum___this__Size__
push 0x14a
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1_bitstring.h
call fcn.10078380
add esp, 0xc
test al, al
jne 0x10096e29
int3
cmp dword [edi + 0x18], 1
lea eax, [edi + 0x1c]
je 0x10096e35
mov eax, dword [edi + 0x20]
mov dword [ebp - 4], eax
mov ecx, esi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov eax, esi
mov ecx, dword [ebp - 4]
sar eax, 5
test dword [ecx + eax*4], edx
jne 0x10096e59
mov ecx, dword [ebp - 8]
jmp 0x10096dc6
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10096e70
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
mov edi, ecx
cmp dword [edi + 0x38], 0
je 0x10096f57
mov edx, dword [ebp + 8]
mov ebx, dword [edi + 0x10]
dec ebx
push edx
imul eax, dword [edx], 0xcc9e2d51
rol eax, 0xf
imul eax, eax, 0x1b873593
xor eax, dword [edx + 4]
rol eax, 0xd
add eax, 0xfaddaf14
lea ecx, [eax + eax*4]
mov eax, ecx
shr eax, 0x10
xor eax, ecx
imul ecx, eax, 0x85ebca6b
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul eax, eax, 0xc2b2ae35
mov ecx, eax
shr ecx, 0x10
xor ecx, eax
mov eax, ebx
and eax, ecx
mov dword [ebp - 8], ecx
push eax
mov ecx, edi
call fcn.10096f70
cmp eax, 0xffffffff
jne 0x10096f5a
nop
sar ebx, 1
cmp ebx, dword [edi + 0x48]
jl 0x10096f57
mov esi, ebx
and esi, dword [ebp - 8]
cmp esi, dword [edi + 0x40]
jl 0x10096f57
test esi, esi
js 0x10096efa
cmp esi, dword [edi + 0x14]
jl 0x10096f16
push str.bitNum___0__bitNum___this__Size__
push 0x14a
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1_bitstring.h
call fcn.10078380
add esp, 0xc
test al, al
jne 0x10096f16
int3
cmp dword [edi + 0x18], 1
lea eax, [edi + 0x1c]
je 0x10096f22
mov eax, dword [edi + 0x20]
mov dword [ebp - 4], eax
mov ecx, esi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov eax, esi
mov ecx, dword [ebp - 4]
sar eax, 5
test dword [ecx + eax*4], edx
jne 0x10096f57
push dword [ebp + 8]
mov ecx, edi
push esi
call fcn.10096f70
cmp eax, 0xffffffff
je 0x10096ee0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100976c0
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
mov esi, ecx
push edi
mov edi, dword [esi + 0x40]
cmp edi, dword [esi + 0x44]
jge 0x10097761
mov dword [ebp - 0xc], 4
push ebx
mov edi, edi
lea eax, [edi + 1]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 4]
cmp dword [eax + edi*4], 0xffffffff
je 0x10097741
test edi, edi
js 0x100976f8
cmp edi, dword [esi + 0x14]
jl 0x10097714
push str.bitNum___0__bitNum___this__Size__
push 0x14a
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1_bitstring.h
call fcn.10078380
add esp, 0xc
test al, al
jne 0x10097714
int3
cmp dword [esi + 0x18], 1
lea eax, [esi + 0x1c]
je 0x10097720
mov eax, dword [esi + 0x20]
mov ebx, edi
mov dword [ebp - 4], eax
and ebx, 0x1f
mov eax, 1
mov ecx, ebx
mov edx, edi
shl eax, cl
mov ecx, dword [ebp - 4]
sar edx, 5
mov dword [ebp - 8], edx
test dword [ecx + edx*4], eax
je 0x10097767
mov edi, dword [esi + 0x40]
cmp edi, dword [esi + 0x44]
jl 0x100976e0
mov eax, dword [esi + 0x10]
lea ecx, [esi + 0x14]
mov dword [esi + 0x40], eax
mov dword [esi + 0x44], eax
dec eax
push 0
mov dword [esi + 0x48], eax
call fcn.1005d860
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
test edi, edi
js 0x10097770
cmp edi, dword [esi + 0x14]
jl 0x1009778f
push str.bitNum___0__bitNum___this__Size__
push 0x154
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1_bitstring.h
call fcn.10078380
add esp, 0xc
test al, al
jne 0x1009778c
int3
mov edx, dword [ebp - 8]
cmp dword [esi + 0x18], 1
lea ecx, [esi + 0x1c]
je 0x1009779b
mov ecx, dword [esi + 0x20]
mov eax, dword [ecx + edx*4]
bts eax, ebx
mov dword [ecx + edx*4], eax
mov eax, dword [esi + 4]
mov ebx, dword [eax + edi*4]
lea eax, [eax + edi*4]
mov dword [ebp - 4], eax
cmp ebx, 0xffffffff
je 0x10097826
mov edx, dword [esi + 0x28]
lea eax, [ebx + ebx*2]
shl eax, 2
add edx, eax
mov dword [ebp - 0x10], eax
mov ecx, dword [edx]
shr ecx, 0x10
xor ecx, dword [edx]
imul ecx, ecx, 0x85ebca6b
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul eax, eax, 0xc2b2ae35
mov ecx, eax
shr ecx, 0x10
xor ecx, eax
mov eax, dword [esi + 0x10]
dec eax
and ecx, eax
lea eax, [edx + 8]
mov dword [ebp - 8], ecx
cmp ecx, edi
je 0x1009781c
mov eax, dword [eax]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x28]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x10]
mov dword [edx + ecx + 8], eax
mov eax, dword [esi + 4]
mov edx, dword [ebp - 8]
mov dword [eax + edx*4], ebx
mov eax, dword [ebp - 4]
jmp 0x1009781f
mov dword [ebp - 4], eax
mov ebx, dword [eax]
cmp ebx, 0xffffffff
jne 0x100977b5
mov edi, dword [esi + 0x40]
cmp edi, dword [esi + 0x44]
jge 0x10097749
sub dword [ebp - 0xc], 1
jns 0x100976e0
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10097850
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
mov esi, ecx
push edi
mov edi, dword [esi + 0x40]
cmp edi, dword [esi + 0x44]
jge 0x100978f1
mov dword [ebp - 0xc], 4
push ebx
mov edi, edi
lea eax, [edi + 1]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 4]
cmp dword [eax + edi*4], 0xffffffff
je 0x100978d1
test edi, edi
js 0x10097888
cmp edi, dword [esi + 0x14]
jl 0x100978a4
push str.bitNum___0__bitNum___this__Size__
push 0x14a
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1_bitstring.h
call fcn.10078380
add esp, 0xc
test al, al
jne 0x100978a4
int3
cmp dword [esi + 0x18], 1
lea eax, [esi + 0x1c]
je 0x100978b0
mov eax, dword [esi + 0x20]
mov ebx, edi
mov dword [ebp - 4], eax
and ebx, 0x1f
mov eax, 1
mov ecx, ebx
mov edx, edi
shl eax, cl
mov ecx, dword [ebp - 4]
sar edx, 5
mov dword [ebp - 8], edx
test dword [ecx + edx*4], eax
je 0x100978f7
mov edi, dword [esi + 0x40]
cmp edi, dword [esi + 0x44]
jl 0x10097870
mov eax, dword [esi + 0x10]
lea ecx, [esi + 0x14]
mov dword [esi + 0x40], eax
mov dword [esi + 0x44], eax
dec eax
push 0
mov dword [esi + 0x48], eax
call fcn.1005d860
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
test edi, edi
js 0x10097900
cmp edi, dword [esi + 0x14]
jl 0x1009791f
push str.bitNum___0__bitNum___this__Size__
push 0x154
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1_bitstring.h
call fcn.10078380
add esp, 0xc
test al, al
jne 0x1009791c
int3
mov edx, dword [ebp - 8]
cmp dword [esi + 0x18], 1
lea ecx, [esi + 0x1c]
je 0x1009792b
mov ecx, dword [esi + 0x20]
mov eax, dword [ecx + edx*4]
bts eax, ebx
mov dword [ecx + edx*4], eax
mov eax, dword [esi + 4]
mov ebx, dword [eax + edi*4]
lea eax, [eax + edi*4]
mov dword [ebp - 4], eax
cmp ebx, 0xffffffff
je 0x100979e1
lea esp, [esp]
mov edx, dword [esi + 0x28]
mov eax, ebx
shl eax, 4
add edx, eax
mov dword [ebp - 0x10], eax
imul eax, dword [edx], 0xcc9e2d51
rol eax, 0xf
imul eax, eax, 0x1b873593
xor eax, dword [edx + 4]
rol eax, 0xd
add eax, 0xfaddaf14
lea ecx, [eax + eax*4]
mov eax, ecx
shr eax, 0x10
xor eax, ecx
imul ecx, eax, 0x85ebca6b
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul eax, eax, 0xc2b2ae35
mov ecx, eax
shr ecx, 0x10
xor ecx, eax
mov eax, dword [esi + 0x10]
dec eax
and ecx, eax
lea eax, [edx + 0xc]
mov dword [ebp - 8], ecx
cmp ecx, edi
je 0x100979d3
mov eax, dword [eax]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x28]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x10]
mov dword [edx + ecx + 0xc], eax
mov eax, dword [esi + 4]
mov edx, dword [ebp - 8]
mov dword [eax + edx*4], ebx
mov eax, dword [ebp - 4]
jmp 0x100979d6
mov dword [ebp - 4], eax
mov ebx, dword [eax]
cmp ebx, 0xffffffff
jne 0x10097950
mov edi, dword [esi + 0x40]
cmp edi, dword [esi + 0x44]
jge 0x100978d9
sub dword [ebp - 0xc], 1
jns 0x10097870
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10097e80
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
cmp esi, dword [edi + 0x3c]
jae 0x10097f8f
mov eax, dword [edi + 0x28]
mov ebx, esi
add ebx, ebx
cmp dword [eax + ebx*8 + 0xc], 0xffffffff
jl 0x10097f8f
call fcn.10097850
mov eax, dword [edi + 0x28]
push esi
mov edx, dword [eax + ebx*8 + 4]
imul eax, dword [eax + ebx*8], 0xcc9e2d51
mov ebx, dword [edi + 0x10]
dec ebx
rol eax, 0xf
imul eax, eax, 0x1b873593
xor eax, edx
rol eax, 0xd
add eax, 0xfaddaf14
lea ecx, [eax + eax*4]
mov eax, ecx
shr eax, 0x10
xor eax, ecx
imul ecx, eax, 0x85ebca6b
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul eax, eax, 0xc2b2ae35
mov ecx, eax
shr ecx, 0x10
xor ecx, eax
mov eax, ebx
and eax, ecx
mov dword [ebp - 8], ecx
push eax
mov ecx, edi
call fcn.10097fc0
test al, al
jne 0x10097fab
sar ebx, 1
cmp ebx, dword [edi + 0x48]
jl 0x10097f83
mov esi, ebx
and esi, dword [ebp - 8]
cmp esi, dword [edi + 0x40]
jl 0x10097f83
test esi, esi
js 0x10097f29
cmp esi, dword [edi + 0x14]
jl 0x10097f45
push str.bitNum___0__bitNum___this__Size__
push 0x14a
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1_bitstring.h
call fcn.10078380
add esp, 0xc
test al, al
jne 0x10097f45
int3
cmp dword [edi + 0x18], 1
lea eax, [edi + 0x1c]
je 0x10097f51
mov eax, dword [edi + 0x20]
mov dword [ebp - 4], eax
mov ecx, esi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov eax, esi
mov ecx, dword [ebp - 4]
sar eax, 5
test dword [ecx + eax*4], edx
jne 0x10097f83
push dword [ebp + 8]
mov ecx, edi
push esi
call fcn.10097fc0
test al, al
jne 0x10097fab
sar ebx, 1
cmp ebx, dword [edi + 0x48]
jge 0x10097f16
push str.CUtlHashMap::RemoveAt___couldnt_find_bucket_for_item
push 0x36f
jmp 0x10097f99
push str.CUtlHashMap::RemoveAt___Invalid_index
push 0x352
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1utlhashmap.h
call fcn.10078380
add esp, 0xc
test al, al
jne 0x10097fab
int3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100983b0
Capabilities:
Write file on windows

Disassembly:
push esi
mov esi, ecx
call fcn.1007a610
test al, al
jne 0x100983d8
push str.ThreadInMainThread__
push 0xadd
push str.c:_buildslave_steam_rel_client_win32_build_srccommonlogger.cpp
call fcn.10078380
add esp, 0xc
test al, al
jne 0x100983d8
int3
call fcn.1007a610
test al, al
jne 0x100983fd
push str.ThreadInMainThread__
push 0xae7
push str.c:_buildslave_steam_rel_client_win32_build_srccommonlogger.cpp
call fcn.10078380
add esp, 0xc
test al, al
jne 0x100983fd
int3
mov ecx, esi
pop esi
jmp fcn.10094ad0
Function at 0x10098550
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov ebx, ecx
test esi, esi
je 0x100985bf
push edi
mov edi, dword [ebp + 8]
cmp byte [edi + esi - 1], 0
je 0x1009856f
cmp byte [edi + esi], 0
je 0x1009858b
push str.pch_cub___1____0__pch_cub___0
push 0xb1e
push str.c:_buildslave_steam_rel_client_win32_build_srccommonlogger.cpp
call fcn.10078380
add esp, 0xc
test al, al
jne 0x1009858b
int3
push dword [ebx + 0x11c]
push 1
push esi
push edi
call fcn.101195a3
add esp, 0x10
pop edi
cmp eax, 1
je 0x100985bf
push str.1__ret
push 0xb3e
push str.c:_buildslave_steam_rel_client_win32_build_srccommonlogger.cpp
call fcn.10078380
add esp, 0xc
test al, al
jne 0x100985bf
int3
pop esi
pop ebx
pop ebp
ret 8
Function at 0x1009cd70
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push edi
call fcn.10067fd0
lea ecx, [edi + 0x18]
mov ebx, eax
push ecx
call fcn.10067fd0
mov ecx, dword [edi + 0x30]
add esp, 8
test ecx, ecx
mov dword [ebp + 8], eax
mov edx, 0x102a7940
cmovne edx, ecx
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1009cda2
push 0
sub ecx, esi
push 0x417
push ecx
push edx
call fcn.10064860
mov edx, dword [edi + 0x34]
mov esi, eax
shr edx, 0x10
add esp, 0x10
xor edx, dword [edi + 0x34]
imul edx, edx, 0x85ebca6b
pop edi
mov ecx, edx
shr ecx, 0xd
xor ecx, edx
imul ecx, ecx, 0xc2b2ae35
mov eax, ecx
shr eax, 0x10
xor eax, ecx
xor eax, esi
xor eax, dword [ebp + 8]
pop esi
xor eax, ebx
pop ebx
pop ebp
ret 4
Function at 0x100a4f80
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
lea eax, [ebp - 4]
mov dword [ebp - 4], 0x80
push eax
lea eax, [ebp - 0x84]
push eax
push dword [ebp + 8]
call dword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x100a4fc4
mov ecx, dword [ebp + 0xc]
lea eax, [ecx + 0x16]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0x84]
push eax
call fcn.100682b0
mov al, 1
mov esp, ebp
pop ebp
ret
call sub.WS2_32.dll_WSAGetLastError
push eax
push str.getsockname_failed_in_BGetBoundAddr_with_error:__d
push 0x6aa
push str.c:_buildslave_steam_rel_client_win32_build_srccommon_net.cpp
call fcn.10078390
add esp, 0x10
test al, al
jne 0x100a4fe6
int3
xor al, al
mov esp, ebp
pop ebp
ret
Function at 0x100a6bf0
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ecx
xor ecx, ecx
push edi
mov eax, dword [esi + 0x14]
lea edx, [esi + 0x28]
cmp edx, eax
lea ebx, [eax + 0x14]
cmove ebx, ecx
test ebx, ebx
je 0x100a6c91
mov ecx, dword [ebx - 0x14]
lea edi, [ebx - 0x14]
xor ebx, ebx
cmp edx, ecx
lea eax, [ecx + 0x14]
mov ecx, dword [edi + 8]
cmovne ebx, eax
shr ecx, 0x10
xor ecx, dword [edi + 8]
xor edx, edx
imul ecx, ecx, 0x85ebca6b
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0xc2b2ae35
mov eax, ecx
shr eax, 0x10
xor eax, ecx
div dword [esi + 4]
mov eax, dword [esi + 8]
lea eax, [eax + edx*4]
mov dword [ebp - 4], eax
cmp edi, dword [eax]
jne 0x100a6c65
mov ecx, dword [edi]
xor eax, eax
cmp dword [ecx + 0xc], edx
cmove eax, ecx
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
mov ecx, dword [edi + 4]
mov eax, dword [edi]
mov dword [ecx], eax
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
cmp edi, dword [esi + 0x40]
jne 0x100a6c7e
mov eax, dword [edi]
mov dword [esi + 0x40], eax
mov ecx, dword [esi + 0xc]
dec dword [esi + 0x10]
push edi
call fcn.10067650
lea edx, [esi + 0x28]
test ebx, ebx
jne 0x100a6c11
cmp dword [esi + 8], 0
je 0x100a6ca8
call fcn.10077ed0
push 0
push dword [esi + 8]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
mov edi, dword [esi + 0xc]
mov dword [esi + 8], 0
test edi, edi
je 0x100a6cc8
mov ecx, edi
call fcn.100672f0
push 0x30
push edi
call fcn.100ffd71
add esp, 8
pop edi
mov dword [esi + 0xc], 0
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x100a6ce0
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
mov eax, edi
shr eax, 0x10
xor eax, edi
imul edx, eax, 0x85ebca6b
mov eax, edx
shr eax, 0xd
xor eax, edx
xor edx, edx
imul ecx, eax, 0xc2b2ae35
mov eax, ecx
shr eax, 0x10
xor eax, ecx
div dword [esi + 4]
mov eax, dword [esi + 8]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x100a6d30
lea ebx, [ebx]
cmp dword [eax + 0xc], edx
jne 0x100a6d30
cmp edi, dword [eax + 8]
je 0x100a6d38
mov eax, dword [eax]
test eax, eax
jne 0x100a6d20
pop edi
xor eax, eax
pop esi
pop ebp
ret 4
pop edi
add eax, 0x14
pop esi
pop ebp
ret 4
Function at 0x100a6d50
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, ecx
mov eax, edi
shr eax, 0x10
xor eax, edi
imul edx, eax, 0x85ebca6b
mov eax, edx
shr eax, 0xd
xor eax, edx
xor edx, edx
imul eax, eax, 0xc2b2ae35
mov ecx, eax
shr ecx, 0x10
xor ecx, eax
mov eax, ecx
mov dword [ebp + 8], ecx
div dword [ebx + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x100a6dc4
cmp dword [eax + 0xc], edx
jne 0x100a6dc4
cmp edi, dword [eax + 8]
je 0x100a6da3
mov eax, dword [eax]
test eax, eax
jne 0x100a6d91
jmp 0x100a6dc4
add eax, 0x14
je 0x100a6dc4
push str.PvRecordFind__unKey____NULL
push 0xf2
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1_thash.h
call fcn.10078380
add esp, 0xc
test al, al
jne 0x100a6dc4
int3
mov ecx, dword [ebx + 0xc]
call fcn.100675b0
inc dword [ebx + 0x10]
mov esi, eax
mov eax, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 4], esi
mov dword [esi + 8], edi
mov dword [esi + 0x10], 1
div dword [ebx + 4]
mov eax, edx
lea edx, [ebx + 0x28]
mov dword [esi + 0xc], eax
mov ecx, eax
mov edi, dword [ebx + 4]
mov dword [ebp + 8], eax
cmp eax, edi
jge 0x100a6e13
mov eax, dword [ebx + 8]
mov edx, ecx
lea eax, [eax + edx*4]
mov edx, dword [eax]
test edx, edx
jne 0x100a6e13
inc ecx
add eax, 4
cmp ecx, edi
jl 0x100a6e02
lea edx, [ebx + 0x28]
mov ecx, dword [ebp + 8]
mov dword [esi], edx
mov eax, dword [edx + 4]
mov dword [esi + 4], eax
mov dword [edx + 4], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
mov eax, dword [ebx + 8]
mov dword [eax + ecx*4], esi
cmp byte [0x104110ec], 0
jne 0x100a6e97
mov eax, dword [ebx + 4]
lea eax, [eax + eax*4]
cmp dword [ebx + 0x10], eax
jl 0x100a6e97
mov byte [0x104110ec], 1
push dword [ebx + 4]
push dword [ebx + 0x10]
push str.Performance_warning:_too_many_items___d___not_enough_buckets___d_
push 0x11c
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1_thash.h
call fcn.10078390
add esp, 0x14
test al, al
jne 0x100a6e69
int3
mov esi, dword [ebx + 4]
mov edi, dword [ebx + 0x10]
push ebx
call fcn.10102135
push esi
add eax, 8
push edi
push eax
push str.not_enough_buckets_in_thash_class__s___d_records___d_buckets__n
call fcn.10078aa0
mov eax, dword [ebp - 4]
add esp, 0x14
add eax, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
pop edi
lea eax, [esi + 0x14]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100a6eb0
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 8]
add esi, 0xffffffec
push edi
mov edi, ecx
mov edx, dword [esi + 8]
shr edx, 0x10
xor edx, dword [esi + 8]
imul edx, edx, 0x85ebca6b
mov eax, edx
shr eax, 0xd
xor eax, edx
xor edx, edx
imul ecx, eax, 0xc2b2ae35
mov eax, ecx
shr eax, 0x10
xor eax, ecx
div dword [edi + 4]
mov eax, dword [edi + 8]
cmp esi, dword [eax + edx*4]
lea ebx, [eax + edx*4]
jne 0x100a6efd
mov eax, dword [esi]
xor ecx, ecx
cmp dword [eax + 0xc], edx
cmove ecx, eax
mov dword [ebx], ecx
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [ecx], eax
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
cmp esi, dword [edi + 0x40]
jne 0x100a6f16
mov eax, dword [esi]
mov dword [edi + 0x40], eax
mov ecx, dword [edi + 0xc]
dec dword [edi + 0x10]
push esi
call fcn.10067650
pop edi
pop esi
pop ebx
pop ebp
ret 4

Function at 0x100a7300
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x100a733d
mov eax, ecx
and eax, 3
push ecx
sub eax, 1
je 0x100a734f
sub eax, 1
je 0x100a7348
sub eax, 1
je 0x100a7341
push 0
push str.Invalid_connection_type__d_hConn_x
push 0x53e
push str.c:_buildslave_steam_rel_client_win32_build_srccommon_net.cpp
call fcn.10078390
add esp, 0x14
test al, al
jne 0x100a733d
int3
xor al, al
pop ebp
ret
call fcn.100cc840
jmp 0x100a7354
call fcn.100d21d0
jmp 0x100a7354
call fcn.100ad110
add esp, 4
test eax, eax
je 0x100a733d
mov ecx, eax
pop ebp
jmp fcn.100d0500
Function at 0x100ad280
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov esi, dword [0x104118c0]
push edi
mov edi, ecx
lea eax, [esi + 1]
cdq
mov dword [0x10411814], eax
lea eax, [esi + 2]
mov dword [0x104118c0], eax
mov dword [0x10411818], edx
cdq
mov dword [0x10411854], eax
lea eax, [edi + 0x38]
push eax
mov dword [0x10411858], edx
push dword [edi + 0x18]
call fcn.100a4f80
add esp, 8
mov dword [ebp - 4], 1
lea eax, [ebp - 4]
push 4
push eax
push 1
push 6
push dword [edi + 0x18]
call dword [sym.imp.WS2_32.dll_setsockopt]
test eax, eax
je 0x100ad2fa
push str.0__iRet___IsOSX____errno__EINVAL_
push 0x946
push str.c:_buildslave_steam_rel_client_win32_build_srccommon_tcpconnection.cpp
call fcn.10078380
add esp, 0xc
test al, al
jne 0x100ad2fa
int3
mov ecx, edi
call fcn.100cfc10
mov al, byte [edi + 0x50]
not al
test al, 1
je 0x100ad33c
cmp dword [edi + 0x118], 0
je 0x100ad32f
push str._m_pubRecvBuffer
push 0x94d
push str.c:_buildslave_steam_rel_client_win32_build_srccommon_tcpconnection.cpp
call fcn.10078380
add esp, 0xc
test al, al
jne 0x100ad32f
int3
test byte [edi + 0x50], 0x80
jne 0x100ad33c
mov ecx, edi
call fcn.100ac4a0
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x100ad420
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, ecx
mov eax, edi
shr eax, 0x10
xor eax, edi
imul edx, eax, 0x85ebca6b
mov eax, edx
shr eax, 0xd
xor eax, edx
xor edx, edx
imul eax, eax, 0xc2b2ae35
mov ecx, eax
shr ecx, 0x10
xor ecx, eax
mov eax, ecx
mov dword [ebp + 8], ecx
div dword [ebx + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x100ad494
cmp dword [eax + 0xc], edx
jne 0x100ad494
cmp edi, dword [eax + 8]
je 0x100ad473
mov eax, dword [eax]
test eax, eax
jne 0x100ad461
jmp 0x100ad494
add eax, 0x14
je 0x100ad494
push str.PvRecordFind__unKey____NULL
push 0xf2
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1_thash.h
call fcn.10078380
add esp, 0xc
test al, al
jne 0x100ad494
int3
mov ecx, dword [ebx + 0xc]
call fcn.100675b0
inc dword [ebx + 0x10]
mov esi, eax
mov eax, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 4], esi
mov dword [esi + 8], edi
mov dword [esi + 0x10], 1
div dword [ebx + 4]
mov eax, edx
lea edx, [ebx + 0x28]
mov dword [esi + 0xc], eax
mov ecx, eax
mov edi, dword [ebx + 4]
mov dword [ebp + 8], eax
cmp eax, edi
jge 0x100ad4e3
mov eax, dword [ebx + 8]
mov edx, ecx
lea eax, [eax + edx*4]
mov edx, dword [eax]
test edx, edx
jne 0x100ad4e3
inc ecx
add eax, 4
cmp ecx, edi
jl 0x100ad4d2
lea edx, [ebx + 0x28]
mov ecx, dword [ebp + 8]
mov dword [esi], edx
mov eax, dword [edx + 4]
mov dword [esi + 4], eax
mov dword [edx + 4], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
mov eax, dword [ebx + 8]
mov dword [eax + ecx*4], esi
cmp byte [0x10411c02], 0
jne 0x100ad567
mov eax, dword [ebx + 4]
lea eax, [eax + eax*4]
cmp dword [ebx + 0x10], eax
jl 0x100ad567
mov byte [0x10411c02], 1
push dword [ebx + 4]
push dword [ebx + 0x10]
push str.Performance_warning:_too_many_items___d___not_enough_buckets___d_
push 0x11c
push str.c:_buildslave_steam_rel_client_win32_build_srcpublic_tier1_thash.h
call fcn.10078390
add esp, 0x14
test al, al
jne 0x100ad539
int3
mov esi, dword [ebx + 4]
mov edi, dword [ebx + 0x10]
push ebx
call fcn.10102135
push esi
add eax, 8
push edi
push eax
push str.not_enough_buckets_in_thash_class__s___d_records___d_buckets__n
call fcn.10078aa0
mov eax, dword [ebp - 4]
add esp, 0x14
add eax, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
pop edi
lea eax, [esi + 0x14]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4