joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100727c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101acd8d
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x10210050]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [esi + 1]
xor ecx, eax
movzx eax, byte [esi + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
lea eax, [ebp - 0x20]
imul edi, ecx, 0x1000193
push edi
push esi
push eax
call fcn.100734d0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x100728ed
cmp dword [0x102aefc8], 0xfffffff
je 0x10072904
mov dword [ebp - 0x18], 0x102aefc4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], eax
push 0x10
mov dword [ebp - 0x14], eax
call fcn.1016fd4c
mov ebx, eax
add esp, 4
mov eax, dword [esi]
mov dword [ebp - 0x14], ebx
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], 0
mov dword [ebp - 4], 1
mov eax, dword [0x102aefc8]
inc eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101ede20]
mov eax, dword [0x102aefdc]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101ede20]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [0x102aefc0]
jbe 0x100728d4
call fcn.10072ea0
push edi
lea eax, [ebx + 8]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100734d0
mov ecx, dword [eax]
jmp 0x100728d7
mov ecx, dword [ebp - 0x20]
push ebx
push ecx
push edi
mov dword [ebp - 0x14], 0
call fcn.10072f00
mov dword [ebp - 4], 0xffffffff
add eax, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push str.unordered_map_set_too_long
call fcn.1016e2ab
int3
Function at 0x10072f80
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101acded
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x10210050]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, 0x1fffffff
mov edi, 1
bsr ecx, eax
mov eax, edi
shl eax, cl
mov ecx, dword [ebp + 8]
cmp ecx, eax
ja 0x10073120
lea eax, [ecx - 1]
mov esi, dword [0x102aefc4]
or eax, edi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
mov ecx, 0x102aefcc
lea eax, [edi + edi]
push eax
call fcn.10040460
lea eax, [edi - 1]
mov dword [0x102aefdc], edi
mov dword [0x102aefd8], eax
mov dword [ebp - 0x18], 0x102aefc0
mov dword [ebp - 4], 0
mov ecx, dword [0x102aefc4]
mov ecx, dword [ecx]
mov edx, ecx
cmp ecx, esi
je 0x100730dc
movzx eax, byte [ecx + 8]
xor eax, 0x811c9dc5
mov edx, dword [edx]
imul edi, eax, 0x1000193
movzx eax, byte [ecx + 9]
xor edi, eax
movzx eax, byte [ecx + 0xa]
imul edi, edi, 0x1000193
xor edi, eax
movzx eax, byte [ecx + 0xb]
imul edi, edi, 0x1000193
xor edi, eax
mov eax, dword [0x102aefcc]
imul edi, edi, 0x1000193
and edi, dword [0x102aefd8]
mov ebx, dword [eax + edi*8]
lea eax, [eax + edi*8]
mov dword [ebp - 0x14], eax
cmp ebx, esi
jne 0x10073068
mov dword [eax], ecx
mov dword [eax + 4], ecx
jmp 0x100730d2
mov eax, dword [eax + 4]
mov edi, dword [ecx + 8]
cmp edi, dword [eax + 8]
jne 0x1007309f
mov eax, dword [eax]
cmp eax, ecx
je 0x10073097
mov ebx, dword [ecx + 4]
mov dword [ebp - 0x10], ebx
mov dword [ebx], edx
mov ebx, dword [edx + 4]
mov dword [ebx], eax
mov edi, dword [eax + 4]
mov dword [edi], ecx
mov dword [eax + 4], ebx
mov eax, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov dword [ecx + 4], edi
mov eax, dword [ebp - 0x14]
mov dword [eax + 4], ecx
jmp 0x100730d2
cmp ebx, eax
je 0x100730af
mov eax, dword [eax + 4]
cmp edi, dword [eax + 8]
je 0x100730fe
cmp ebx, eax
jne 0x100730a3
mov ebx, dword [ecx + 4]
mov dword [ebp - 0x10], ebx
mov dword [ebx], edx
mov ebx, dword [edx + 4]
mov dword [ebx], eax
mov edi, dword [eax + 4]
mov dword [edi], ecx
mov dword [eax + 4], ebx
mov eax, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [ecx + 4], edi
mov dword [eax], ecx
mov ecx, edx
cmp edx, esi
jne 0x10073014
mov dword [ebp - 0x18], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [ecx + 4]
mov eax, dword [eax]
mov dword [ebp - 0x10], ebx
mov dword [ebx], edx
mov ebx, dword [edx + 4]
mov dword [ebx], eax
mov edi, dword [eax + 4]
mov dword [edi], ecx
mov dword [eax + 4], ebx
mov eax, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov dword [ecx + 4], edi
jmp 0x100730d2
push str.invalid_hash_bucket_count
call fcn.1016e2ab
int3
Function at 0x10076e00
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [esi + 1]
xor edx, eax
movzx eax, byte [esi + 2]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [esi + 3]
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
push eax
push esi
lea eax, [ebp - 8]
push eax
call fcn.10077770
mov eax, dword [ebp - 4]
pop edi
pop esi
test eax, eax
je 0x10076e5e
add eax, 0xc
mov esp, ebp
pop ebp
ret 4
push str.invalid_unordered_map_K__T__key
call fcn.1016e2cb
int3

Function at 0x10076f90
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101ad33b
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x10210050]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov edx, dword [ebp + 8]
movzx eax, byte [edx]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edx + 1]
xor ecx, eax
movzx eax, byte [edx + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
lea eax, [ebp - 0x1c]
imul ebx, ecx, 0x1000193
mov ecx, edi
push ebx
push edx
push eax
call fcn.10077770
mov esi, dword [eax + 4]
test esi, esi
je 0x1007708d
mov ecx, dword [edi + 0x18]
mov eax, dword [edi + 0xc]
and ecx, ebx
lea ecx, [eax + ecx*8]
mov eax, dword [ecx]
cmp dword [ecx + 4], esi
jne 0x1007702f
cmp eax, esi
jne 0x10077027
mov eax, dword [edi + 4]
mov dword [ecx], eax
mov dword [ecx + 4], eax
jmp 0x10077037
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
jmp 0x10077037
cmp eax, esi
jne 0x10077037
mov eax, dword [esi]
mov dword [ecx], eax
mov ecx, dword [esi]
dec dword [edi + 8]
mov eax, dword [esi + 4]
mov dword [eax], ecx
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
lea eax, [esi + 8]
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
add ecx, 0x44
call fcn.1004f460
push 0x5c
push esi
call fcn.10170096
add esp, 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10077500
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, ecx
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [esi + 1]
xor edx, eax
movzx eax, byte [esi + 2]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [esi + 3]
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
push eax
push esi
lea eax, [ebp - 8]
push eax
call fcn.10077770
mov ecx, dword [eax + 4]
mov eax, dword [ebp + 8]
test ecx, ecx
jne 0x10077559
mov ecx, dword [edi + 4]
pop edi
mov dword [eax], ecx
pop esi
mov esp, ebp
pop ebp
ret 8
Function at 0x10077570
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101ad443
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push esi
push edi
mov eax, dword [0x10210050]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [ebp + 8]
lea eax, [edi + 4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 4], 0
push 0x5c
mov dword [ebp - 0x20], 0
call fcn.1016fd4c
mov ecx, dword [ebp + 0x14]
mov ebx, eax
add esp, 4
mov byte [ebp - 0x10], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x20], ebx
mov eax, dword [ecx]
lea edx, [ebx + 8]
push dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
mov eax, dword [ecx + 4]
push dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x38], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x34], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x30], eax
mov eax, dword [ecx + 0x14]
mov ecx, edx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x14], edx
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10077f90
mov dword [ebp - 4], 2
lea edx, [ebx + 8]
movzx eax, byte [edx]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edx + 1]
xor ecx, eax
movzx eax, byte [edx + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
push eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x18]
push edx
push eax
call fcn.10077770
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x100776b7
mov dword [esi], eax
mov byte [esi + 4], 0
mov dword [ebp - 4], 3
test ebx, ebx
je 0x10077698
lea edx, [ebx + 8]
mov dword [ebp - 0x14], edx
mov byte [ebp - 4], 3
lea ecx, [edx + 4]
mov dword [ebp - 0x1c], ecx
mov byte [ebp - 4], 3
add ecx, 0x44
call fcn.1004f460
mov dword [ebp - 4], 0xffffffff
test ebx, ebx
je 0x10077742
push 0x5c
push ebx
call fcn.10170096
add esp, 8
jmp 0x10077742
mov eax, dword [edi + 8]
cmp eax, 0x2c8590b
je 0x10077758
inc eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101ede20]
mov eax, dword [edi + 0x1c]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101ede20]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [edi]
jbe 0x1007771f
mov ecx, edi
call fcn.100779d0
push dword [ebp - 0x10]
lea edx, [ebx + 8]
mov ecx, edi
push edx
lea eax, [ebp - 0x18]
push eax
call fcn.10077770
mov ecx, dword [eax]
jmp 0x10077722
mov ecx, dword [ebp - 0x18]
push ebx
push ecx
push dword [ebp - 0x10]
mov ecx, edi
mov dword [ebp - 0x20], 0
call fcn.10048850
mov dword [esi], eax
mov byte [esi + 4], 1
mov dword [ebp - 4], 0xffffffff
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push str.unordered_map_set_too_long
call fcn.1016e2ab
int3
Function at 0x10077a80
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101ad4ed
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x10210050]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x18], ebx
mov eax, 0x1fffffff
mov edi, 1
bsr ecx, eax
mov eax, edi
shl eax, cl
mov ecx, dword [ebp + 8]
cmp ecx, eax
ja 0x10077c20
lea eax, [ecx - 1]
mov esi, dword [ebx + 4]
or eax, edi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
lea ecx, [ebx + 0xc]
lea eax, [edi + edi]
push eax
call fcn.10077380
lea eax, [edi - 1]
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x18], eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], 0
mov ecx, dword [ebx + 4]
mov ecx, dword [ecx]
mov edx, ecx
cmp ecx, esi
je 0x10077bdc
nop dword [eax + eax]
movzx eax, byte [ecx + 8]
xor eax, 0x811c9dc5
mov edx, dword [edx]
imul edi, eax, 0x1000193
movzx eax, byte [ecx + 9]
xor edi, eax
movzx eax, byte [ecx + 0xa]
imul edi, edi, 0x1000193
xor edi, eax
movzx eax, byte [ecx + 0xb]
imul edi, edi, 0x1000193
xor edi, eax
imul eax, edi, 0x1000193
mov edi, dword [ebx + 0x18]
and edi, eax
mov eax, dword [ebx + 0xc]
mov ebx, dword [eax + edi*8]
lea eax, [eax + edi*8]
mov dword [ebp - 0x14], eax
cmp ebx, esi
jne 0x10077b61
mov dword [eax], ecx
mov dword [eax + 4], ecx
jmp 0x10077bcf
mov eax, dword [eax + 4]
mov edi, dword [ecx + 8]
cmp edi, dword [eax + 8]
jne 0x10077b98
mov eax, dword [eax]
cmp eax, ecx
je 0x10077b90
mov ebx, dword [ecx + 4]
mov dword [ebp - 0x10], ebx
mov dword [ebx], edx
mov ebx, dword [edx + 4]
mov dword [ebx], eax
mov edi, dword [eax + 4]
mov dword [edi], ecx
mov dword [eax + 4], ebx
mov eax, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov dword [ecx + 4], edi
mov eax, dword [ebp - 0x14]
mov dword [eax + 4], ecx
jmp 0x10077bcf
cmp ebx, eax
je 0x10077bac
nop dword [eax]
mov eax, dword [eax + 4]
cmp edi, dword [eax + 8]
je 0x10077bfe
cmp ebx, eax
jne 0x10077ba0
mov ebx, dword [ecx + 4]
mov dword [ebp - 0x10], ebx
mov dword [ebx], edx
mov ebx, dword [edx + 4]
mov dword [ebx], eax
mov edi, dword [eax + 4]
mov dword [edi], ecx
mov dword [eax + 4], ebx
mov eax, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [ecx + 4], edi
mov dword [eax], ecx
mov ebx, dword [ebp - 0x18]
mov ecx, edx
cmp edx, esi
jne 0x10077b10
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [ecx + 4]
mov eax, dword [eax]
mov dword [ebp - 0x10], ebx
mov dword [ebx], edx
mov ebx, dword [edx + 4]
mov dword [ebx], eax
mov edi, dword [eax + 4]
mov dword [edi], ecx
mov dword [eax + 4], ebx
mov eax, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov dword [ecx + 4], edi
jmp 0x10077bcf
push str.invalid_hash_bucket_count
call fcn.1016e2ab
int3
Function at 0x10082420
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101adf8d
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x10210050]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [esi + 1]
xor ecx, eax
movzx eax, byte [esi + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
lea eax, [ebp - 0x1c]
imul edi, ecx, 0x1000193
push edi
push esi
push eax
call fcn.10040fd0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x1008254a
cmp dword [0x102b22f8], 0xfffffff
je 0x10082561
mov dword [ebp - 0x14], 0x102b22f4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], eax
push 0x10
mov dword [ebp - 0x10], eax
call fcn.1016fd4c
mov ebx, eax
add esp, 4
mov eax, dword [esi]
mov dword [ebp - 0x10], ebx
mov dword [ebx + 8], eax
mov byte [ebx + 0xc], 0
mov dword [ebp - 4], 1
mov eax, dword [0x102b22f8]
inc eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101ede20]
mov eax, dword [0x102b230c]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101ede20]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [0x102b22f0]
jbe 0x10082531
call fcn.100409d0
push edi
lea eax, [ebx + 8]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.10040fd0
mov ecx, dword [eax]
jmp 0x10082534
mov ecx, dword [ebp - 0x1c]
push ebx
push ecx
push edi
mov dword [ebp - 0x10], 0
call fcn.10040a30
mov dword [ebp - 4], 0xffffffff
add eax, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push str.unordered_map_set_too_long
call fcn.1016e2ab
int3
Function at 0x10082c10
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101ad443
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push esi
push edi
mov eax, dword [0x10210050]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [ebp + 8]
lea eax, [edi + 4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 4], 0
push 0x5c
mov dword [ebp - 0x20], 0
call fcn.1016fd4c
mov ecx, dword [ebp + 0x14]
mov ebx, eax
add esp, 4
mov byte [ebp - 0x10], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x20], ebx
mov eax, dword [ecx]
lea edx, [ebx + 8]
push dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
mov eax, dword [ecx + 4]
push dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x38], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x34], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x30], eax
mov eax, dword [ecx + 0x14]
mov ecx, edx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x14], edx
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10084580
mov dword [ebp - 4], 2
lea edx, [ebx + 8]
movzx eax, byte [edx]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edx + 1]
xor ecx, eax
movzx eax, byte [edx + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
push eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x18]
push edx
push eax
call fcn.10077770
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x10082d57
mov dword [esi], eax
mov byte [esi + 4], 0
mov dword [ebp - 4], 3
test ebx, ebx
je 0x10082d38
lea edx, [ebx + 8]
mov dword [ebp - 0x14], edx
mov byte [ebp - 4], 3
lea ecx, [edx + 4]
mov dword [ebp - 0x1c], ecx
mov byte [ebp - 4], 3
add ecx, 0x44
call fcn.1004f460
mov dword [ebp - 4], 0xffffffff
test ebx, ebx
je 0x10082de2
push 0x5c
push ebx
call fcn.10170096
add esp, 8
jmp 0x10082de2
mov eax, dword [edi + 8]
cmp eax, 0x2c8590b
je 0x10082df8
inc eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101ede20]
mov eax, dword [edi + 0x1c]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101ede20]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [edi]
jbe 0x10082dbf
mov ecx, edi
call fcn.100779d0
push dword [ebp - 0x10]
lea edx, [ebx + 8]
mov ecx, edi
push edx
lea eax, [ebp - 0x18]
push eax
call fcn.10077770
mov ecx, dword [eax]
jmp 0x10082dc2
mov ecx, dword [ebp - 0x18]
push ebx
push ecx
push dword [ebp - 0x10]
mov ecx, edi
mov dword [ebp - 0x20], 0
call fcn.10048850
mov dword [esi], eax
mov byte [esi + 4], 1
mov dword [ebp - 4], 0xffffffff
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push str.unordered_map_set_too_long
call fcn.1016e2ab
int3
Function at 0x100973d0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
mov eax, dword [0x10210050]
xor eax, esp
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x14], eax
mov esi, edx
mov edx, dword [ebp + 8]
mov dword [esp + 0x10], esi
mov al, byte [edi + 6]
test al, al
jne 0x100974f9
mov ecx, dword [edi + 0x14]
lea eax, [edi + 0x34]
mov esi, dword [edi + 0xc]
cmp ecx, eax
je 0x1009744c
mov eax, edx
mov edx, str.cannot_resume_non_suspended_coroutine
shl eax, 4
sub esi, eax
mov dword [edi + 0xc], esi
mov ecx, edi
call fcn.100ab5d0
mov dword [esi], eax
mov al, byte [eax + 4]
or al, 0x40
mov byte [esi + 8], al
mov eax, 2
add dword [edi + 0xc], 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x10]
xor ecx, esp
call fcn.1016fd3e
mov esp, ebp
pop ebp
ret
mov eax, esi
sub eax, dword [ecx]
sub eax, 0x10
sar eax, 4
cmp eax, edx
jne 0x10097466
shl edx, 4
sub esi, edx
mov edx, str.cannot_resume_dead_coroutine
jmp 0x1009741d
mov esi, dword [esp + 0x10]
test esi, esi
jne 0x10097519
mov dword [edi + 0x60], 0xa0
lea eax, [ebp + 8]
mov edx, 0x10097350
push eax
mov ecx, edi
call fcn.100966e0
mov ecx, eax
add esp, 4
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], ecx
cmp ecx, 1
jle 0x100974e5
nop dword [eax + eax]
mov esi, dword [edi + 0x14]
test esi, esi
je 0x100974c1
nop word [eax + eax]
test byte [esi + 0x22], 8
jne 0x1009754d
mov esi, dword [esi + 8]
test esi, esi
jne 0x100974b0
cmp ecx, 1
jle 0x100974e5
push dword [edi + 0xc]
mov byte [edi + 6], cl
mov edx, ecx
mov ecx, edi
call fcn.10096580
mov ecx, dword [edi + 0x14]
add esp, 4
mov eax, dword [edi + 0xc]
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x18]
mov edx, dword [edi + 0x14]
cmp ecx, 1
jne 0x100975b7
mov eax, dword [edx + 0x1c]
jmp 0x100975c2
cmp al, 1
je 0x1009746a
mov eax, dword [ebp + 8]
mov edx, str.cannot_resume_dead_coroutine
mov esi, dword [edi + 0xc]
shl eax, 4
sub esi, eax
mov dword [edi + 0xc], esi
jmp 0x10097422
movzx eax, word [edi + 8]
movzx ecx, word [esi + 0x60]
sub ecx, eax
movzx eax, word [esi + 8]
add eax, 0xfffffff6
add eax, ecx
mov dword [edi + 0x60], eax
cmp eax, 0x50
ja 0x10097479
neg edx
shl edx, 4
add dword [edi + 0xc], edx
mov edx, str.C_stack_overflow
mov esi, dword [edi + 0xc]
jmp 0x10097420
mov edx, dword [edi + 0x20]
add edx, dword [esi + 0x1c]
push ecx
mov ecx, edi
call fcn.10098480
mov eax, dword [edi + 0x20]
add esp, 4
add eax, dword [esi + 0x1c]
mov ecx, edi
mov edx, dword [esp + 0x10]
push eax
call fcn.10096580
mov dword [edi + 0x14], esi
add esp, 4
mov al, byte [esi + 0x22]
mov ecx, edi
and al, 1
mov byte [edi + 7], al
call fcn.10096870
mov eax, dword [esi + 0x14]
mov edx, fcn.10097190
mov dword [edi + 0x5c], eax
mov ecx, edi
lea eax, [esp + 0x18]
push eax
call fcn.100966e0
mov ecx, eax
add esp, 4
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], ecx
cmp ecx, 1
jg 0x100974a0
jmp 0x100974e5
mov eax, dword [edi + 0xc]
sub eax, dword [edx]
sub eax, 0x10
sar eax, 4
mov edx, dword [esp + 0x14]
pop edi
pop esi
pop ebx
mov dword [edx], eax
mov eax, ecx
mov ecx, dword [esp + 0x10]
xor ecx, esp
call fcn.1016fd3e
mov esp, ebp
pop ebp
ret
Function at 0x1009cdb0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x224
mov eax, dword [0x10210050]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
lea eax, [ebp - 0x208]
mov dword [ebp - 0x20c], ecx
push edi
mov esi, edx
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x214], 0x200
nop
push 0xffffffffffffffff
mov edx, 0x200
lea ecx, [ebp - 0x218]
call fcn.1008d120
add esp, 4
push esi
push 0x200
push 1
push eax
call fcn.10176635
mov ecx, dword [ebp - 0x210]
add esp, 0x10
add ecx, eax
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 0x210], ecx
cmp eax, 0x200
je 0x1009cdf0
mov eax, dword [ebp - 0x218]
mov ebx, dword [ebp - 0x20c]
mov dword [ebp - 0x220], eax
test ecx, ecx
jne 0x1009ce55
mov edx, 0x101d3cb3
mov ecx, ebx
call fcn.100ab5d0
jmp 0x1009ced2
cmp ecx, 0x28
ja 0x1009ce69
push ecx
mov edx, eax
mov ecx, ebx
call fcn.100ab380
add esp, 4
jmp 0x1009ced2
cmp ecx, 0xffffffeb
jae 0x1009cf47
mov edi, dword [ebx + 0x10]
lea edx, [ecx + 0x11]
push 4
mov ecx, ebx
mov esi, dword [edi + 0x48]
call fcn.100a1970
mov cl, byte [edi + 0x4c]
mov edx, eax
mov eax, dword [ebp - 0x21c]
and cl, 0x18
add esp, 4
mov dword [ebp - 0x224], edx
mov byte [edx + 5], cl
mov byte [edx + 4], 0x14
mov ecx, dword [edi + 0x58]
mov dword [edx], ecx
mov dword [edi + 0x58], edx
push eax
push dword [ebp - 0x220]
mov dword [edx + 8], esi
mov byte [edx + 6], 0
mov byte [edx + eax + 0x10], 0
mov dword [edx + 0xc], eax
lea eax, [edx + 0x10]
push eax
call fcn.10171890
mov eax, dword [ebp - 0x224]
add esp, 0xc
mov ecx, dword [ebx + 0xc]
mov dword [ecx], eax
mov al, byte [eax + 4]
or al, 0x40
mov byte [ecx + 8], al
mov eax, dword [ebx + 0x10]
add dword [ebx + 0xc], 0x10
cmp dword [eax + 0xc], 0
jle 0x1009cef3
mov ecx, ebx
call fcn.1009b960
lea eax, [ebp - 0x208]
cmp dword [ebp - 0x218], eax
je 0x1009cf36
mov edx, dword [ebx + 0xc]
mov eax, dword [edx - 0x10]
mov ecx, dword [edx - 0xc]
mov dword [edx - 0x30], eax
mov dword [edx - 0x2c], ecx
mov al, byte [edx - 8]
mov byte [edx - 0x28], al
mov eax, dword [ebx + 0x14]
cmp word [eax + 0x20], 0xffff
jge 0x1009cf32
mov edx, dword [ebx + 0xc]
mov ecx, ebx
push 0
sub edx, 0x20
call fcn.10098480
add esp, 4
add dword [ebx + 0xc], 0xffffffe0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1016fd3e
mov esp, ebp
pop ebp
ret
mov ecx, ebx
call fcn.100a18e0
int3