joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1006c870
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e54e5
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x10122094]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
call fcn.10036be0
test eax, eax
jne 0x1006c8c6
mov ecx, dword [0x1012f264]
call fcn.100ac5e0
mov ecx, dword [0x1012f254]
call fcn.100ac5e0
mov ecx, dword [0x1012f26c]
call fcn.100ac5e0
push 0x1012f108
sub esp, 0x18
mov dword [0x1012f108], 0x5dc
mov ecx, esp
push 0xf
push str.GameListRefresh
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1003f030
call fcn.1004acd0
push 0xf
mov dword [ebp - 0x40], 0
lea ecx, [ebp - 0x40]
push str.Show_Difficulty
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.1003f030
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0
push eax
lea ecx, [esi + 0x24]
call fcn.10065480
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x2c], eax
cmp edx, 0x10
jb 0x1006c978
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c96e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006ca2d
push edx
push ecx
call fcn.100b4eda
add esp, 8
mov eax, dword [esi + 0x2c]
lea ecx, [ebp - 0x28]
push 0xf
mov dword [ebp - 0x28], 0
push str.Show_Gameserver
mov byte [eax], 1
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1003f030
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 1
push eax
lea ecx, [esi + 0x24]
call fcn.10065480
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x14]
mov dword [esi + 0x30], eax
cmp edx, 0x10
jb 0x1006c9f3
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c9e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006ca32
push edx
push ecx
call fcn.100b4eda
add esp, 8
mov eax, dword [esi + 0x30]
mov ecx, esi
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov byte [eax], 1
mov eax, dword [esi]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100b4e9c
mov esp, ebp
pop ebp
ret
call fcn.100ba49f
call fcn.100ba49f
int3
Function at 0x1006cab0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push esi
push edi
mov edi, dword [0x1012f264]
cmp byte [edi + 0x1c], 0
je 0x1006cb1c
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x1006cae1
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [edi + edx*4 + 8]
mov ecx, dword [edi]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 4]
push eax
push 0x40
push dword [edi + 0x10]
push esi
call ebx
mov edx, dword [edi + 0x10]
mov ecx, esi
push edx
push dword [edi + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [edi + 0x10]
push esi
call ebx
mov byte [edi + 0x1c], 0
mov edi, dword [0x1012f254]
cmp byte [edi + 0x1c], 0
je 0x1006cb79
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x1006cb3e
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [edi + edx*4 + 8]
mov ecx, dword [edi]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 8]
push eax
push 0x40
push dword [edi + 0x10]
push esi
call ebx
mov edx, dword [edi + 0x10]
mov ecx, esi
push edx
push dword [edi + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [edi + 0x10]
push esi
call ebx
mov byte [edi + 0x1c], 0
mov edi, dword [0x1012f26c]
cmp byte [edi + 0x1c], 0
je 0x1006cbd6
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x1006cb9b
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [edi + edx*4 + 8]
mov ecx, dword [edi]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 0xc]
push eax
push 0x40
push dword [edi + 0x10]
push esi
call ebx
mov edx, dword [edi + 0x10]
mov ecx, esi
push edx
push dword [edi + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push dword [edi + 0x10]
push esi
call ebx
mov byte [edi + 0x1c], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x1006cbe0
Capabilities:
Execute shellcode via indirect call

Disassembly:
mov ecx, dword [0x1012f264]
call fcn.100ac5e0
mov ecx, dword [0x1012f254]
call fcn.100ac5e0
mov ecx, dword [0x1012f26c]
jmp fcn.100ac5e0
Function at 0x10078970
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [ebp + 8]
mov dword [ebp - 8], edx
push ebx
push esi
push edi
mov edi, ecx
cmp eax, 0xc4
je 0x10078ac4
cmp eax, 0xc6
je 0x10078ac4
cmp eax, 0xc3
je 0x10078ac4
cmp eax, 0xc5
je 0x10078ac4
cmp eax, 0xc7
je 0x10078ac4
cmp eax, 0xc9
je 0x10078ac4
cmp eax, 0xcc
je 0x10078ac4
cmp eax, 0x36
je 0x10078ac4
cmp eax, 0x32
je 0x10078ac4
cmp eax, 0x30
je 0x10078ac4
cmp eax, 0x39
je 0x10078ac4
cmp eax, 0x34
je 0x10078ac4
mov dword [ebp + 8], 0
test edx, edx
jle 0x10078ac4
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 4], 0xffff
mov ecx, dword [edi]
cmp ecx, 0xffffffff
je 0x10078ac4
imul edx, ecx, 0x2e
mov ecx, dword [0x1012f298]
mov ecx, dword [ecx]
add edx, dword [ecx + 0xa4]
je 0x10078ac4
lea esi, [edx + 0x20]
mov ecx, 0xffff
cmp word [esi], cx
jne 0x10078a94
mov cl, byte [edx + 0x18]
cmp cl, 7
jne 0x10078a68
cmp eax, 0x19
je 0x10078acd
cmp eax, 0x12
je 0x10078acd
cmp eax, 0x11
je 0x10078acd
cmp eax, 0x111
je 0x10078acd
cmp eax, 0xdb
je 0x10078acd
cmp cl, 6
jne 0x10078a85
cmp eax, 0x16
je 0x10078acd
cmp eax, 0x18
je 0x10078acd
cmp eax, 0x110
je 0x10078acd
cmp eax, 0xda
je 0x10078acd
cmp cl, 5
jne 0x10078a94
cmp eax, 0x15
je 0x10078acd
cmp eax, 0x17
je 0x10078acd
xor edx, edx
movzx ecx, word [esi]
cmp cx, word [ebp - 4]
je 0x10078ab1
cmp ecx, eax
jne 0x10078aa8
cmp dword [edi + 4], ebx
je 0x10078acd
inc edx
add esi, 2
cmp edx, 7
jl 0x10078a96
mov edx, dword [ebp + 8]
add edi, 0x10
inc edx
mov dword [ebp + 8], edx
cmp edx, dword [ebp - 8]
jl 0x10078a14
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x100791f0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [esi + 1]
xor edx, eax
movzx eax, byte [esi + 2]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [esi + 3]
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
lea ecx, [ebx + 8]
push eax
push esi
lea eax, [ebp - 8]
push eax
call fcn.1007a220
mov eax, dword [eax + 4]
test eax, eax
jne 0x10079248
mov eax, dword [ebx + 0xc]
cmp eax, dword [ebx + 0xc]
pop edi
pop esi
setne al
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10079260
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [esi + 1]
xor edx, eax
movzx eax, byte [esi + 2]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [esi + 3]
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
lea ecx, [ebx + 8]
push eax
push esi
lea eax, [ebp - 8]
push eax
call fcn.1007a220
mov edi, dword [eax + 4]
test edi, edi
jne 0x100792b8
mov edi, dword [ebx + 0xc]
cmp edi, dword [ebx + 0xc]
je 0x100792fd
mov eax, dword [ebx]
mov esi, dword [edi + 0xc]
mov ecx, esi
mov ebx, dword [eax]
mov eax, dword [esi]
mov dword [ebp + 8], eax
cmp ebx, esi
je 0x100792f1
cmp ebx, eax
je 0x100792f1
mov edx, dword [esi + 4]
mov dword [edx], eax
mov ecx, dword [eax + 4]
mov dword [ecx], ebx
mov eax, dword [ebx + 4]
mov dword [eax], esi
mov dword [ebx + 4], ecx
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], edx
mov dword [esi + 4], eax
mov ecx, dword [edi + 0xc]
pop edi
pop esi
lea eax, [ecx + 0xc]
pop ebx
mov esp, ebp
pop ebp
ret 4
push ecx
lea ecx, [ebp - 0xc]
call fcn.100711e0
push 0x10120b00
lea eax, [ebp - 0xc]
push eax
call fcn.100b760b
int3
Function at 0x10079e60
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e6825
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x10122094]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0xc]
mov edx, ebx
cmp dword [ebx + 0x14], 0x10
mov edi, dword [ebx + 0x10]
jb 0x10079e98
mov edx, dword [ebx]
xor ecx, ecx
mov esi, 0x811c9dc5
test edi, edi
je 0x10079eb4
movzx eax, byte [ecx + edx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, edi
jb 0x10079ea3
push esi
push ebx
lea eax, [ebp - 0x14]
push eax
call fcn.1007a8d0
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x10079ee3
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [0x1013af04], 0x7ffffff
je 0x1007a02e
mov dword [ebp - 0x1c], 0x1013af00
mov dword [ebp - 4], 0
push 0x20
mov dword [ebp - 0x18], 0
call fcn.100b4eaa
mov edi, eax
add esp, 4
mov dword [ebp - 0x18], edi
lea ecx, [edi + 8]
push ebx
call fcn.1003ecf0
mov dword [ebp - 4], 1
mov ecx, dword [0x1013af04]
mov ebx, dword [0x1013af18]
lea eax, [ecx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1010ddc0]
mov eax, ebx
shr eax, 0x1f
cvtpd2ps xmm3, xmm0
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
movaps xmm2, xmm3
addsd xmm0, qword [eax*8 + 0x1010ddc0]
cvtpd2ps xmm1, xmm0
movss xmm0, dword [0x1013aefc]
divss xmm2, xmm1
comiss xmm2, xmm0
jbe 0x10079fca
divss xmm3, xmm0
movaps xmm0, xmm3
call fcn.10059670
call fcn.100df580
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp ebx, ecx
jae 0x10079fac
cmp ebx, 0x200
jae 0x10079faa
shl ebx, 3
cmp ebx, ecx
jae 0x10079fac
mov ebx, ecx
push ebx
call fcn.1007a440
push esi
lea eax, [edi + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1007a8d0
mov ecx, dword [0x1013af04]
mov edx, dword [eax]
jmp 0x10079fcd
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 4]
inc ecx
mov dword [0x1013af04], ecx
mov dword [edi], edx
mov dword [edi + 4], ebx
mov dword [ebx], edi
mov dword [edx + 4], edi
mov eax, dword [0x1013af14]
mov ecx, dword [0x1013af08]
and eax, esi
mov esi, dword [ecx + eax*8]
cmp esi, dword [0x1013af00]
jne 0x10079ffe
mov dword [ecx + eax*8], edi
jmp 0x1007a00d
cmp esi, edx
jne 0x1007a007
mov dword [ecx + eax*8], edi
jmp 0x1007a011
cmp dword [ecx + eax*8 + 4], ebx
jne 0x1007a011
mov dword [ecx + eax*8 + 4], edi
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov byte [eax + 4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.100b2c5b
int3
Function at 0x1007a040
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e6865
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x10122094]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 0xc]
movzx eax, byte [ebx]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [ebx + 1]
xor edx, eax
movzx eax, byte [ebx + 2]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [ebx + 3]
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
push eax
mov dword [ebp + 0xc], eax
lea eax, [ebp - 0x1c]
push ebx
push eax
call fcn.1007a220
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x1007a0d3
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [edi + 8], 0xfffffff
je 0x1007a210
lea eax, [edi + 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0
push 0x10
mov dword [ebp - 0x10], 0
call fcn.100b4eaa
mov ecx, dword [ebx]
mov esi, eax
add esp, 4
mov dword [ebp - 0x10], esi
mov dword [esi + 8], ecx
mov dword [esi + 0xc], 0
mov dword [ebp - 4], 1
mov ecx, dword [edi + 8]
mov ebx, dword [edi + 0x1c]
movss xmm3, dword [edi]
lea eax, [ecx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
movd xmm1, ebx
addsd xmm0, qword [eax*8 + 0x1010ddc0]
cvtdq2pd xmm1, xmm1
mov eax, ebx
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x1010ddc0]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
comiss xmm2, xmm3
jbe 0x1007a1af
divss xmm0, xmm3
call fcn.10059670
call fcn.100df580
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp ebx, ecx
jae 0x1007a18e
cmp ebx, 0x200
jae 0x1007a18c
shl ebx, 3
cmp ebx, ecx
jae 0x1007a18e
mov ebx, ecx
push ebx
mov ecx, edi
call fcn.1007a2d0
push dword [ebp + 0xc]
lea eax, [esi + 8]
mov ecx, edi
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1007a220
mov ecx, dword [edi + 8]
mov edx, dword [eax]
jmp 0x1007a1b2
mov edx, dword [ebp - 0x1c]
mov ebx, dword [edx + 4]
lea eax, [ecx + 1]
mov dword [edi + 8], eax
mov dword [esi], edx
mov dword [esi + 4], ebx
mov dword [ebx], esi
mov dword [edx + 4], esi
mov eax, dword [edi + 0x18]
and eax, dword [ebp + 0xc]
mov ecx, dword [edi + 0xc]
mov esi, dword [ebp - 0x14]
mov edi, dword [ecx + eax*8]
cmp edi, dword [esi]
mov esi, dword [ebp - 0x10]
jne 0x1007a1e0
mov dword [ecx + eax*8], esi
jmp 0x1007a1ef
cmp edi, edx
jne 0x1007a1e9
mov dword [ecx + eax*8], esi
jmp 0x1007a1f3
cmp dword [ecx + eax*8 + 4], ebx
jne 0x1007a1f3
mov dword [ecx + eax*8 + 4], esi
mov eax, dword [ebp + 8]
mov dword [eax], esi
mov byte [eax + 4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.100b2c5b
int3
Function at 0x1007a2d0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov edx, dword [ebp + 8]
mov eax, 0x1fffffff
push ebx
mov ebx, ecx
bsr ecx, eax
push esi
push edi
mov edi, 1
mov dword [ebp - 0xc], ebx
mov eax, edi
shl eax, cl
cmp edx, eax
ja 0x1007a433
mov esi, dword [ebx + 4]
lea eax, [edx - 1]
or eax, edi
mov dword [ebp - 4], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
lea ecx, [ebx + 0xc]
lea eax, [edi + edi]
push eax
call fcn.1005b620
lea eax, [edi - 1]
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x18], eax
mov ecx, dword [ebx + 4]
mov ecx, dword [ecx]
mov edx, ecx
cmp ecx, esi
je 0x1007a406
movzx eax, byte [ecx + 8]
xor eax, 0x811c9dc5
mov edx, dword [edx]
imul edi, eax, 0x1000193
movzx eax, byte [ecx + 9]
xor edi, eax
movzx eax, byte [ecx + 0xa]
imul edi, edi, 0x1000193
xor edi, eax
movzx eax, byte [ecx + 0xb]
imul edi, edi, 0x1000193
xor edi, eax
imul eax, edi, 0x1000193
mov edi, dword [ebx + 0x18]
and edi, eax
mov eax, dword [ebx + 0xc]
mov ebx, dword [eax + edi*8]
mov dword [ebp + 8], ebx
lea eax, [eax + edi*8]
mov dword [ebp - 8], eax
cmp ebx, esi
jne 0x1007a386
mov dword [eax], ecx
mov dword [eax + 4], ecx
jmp 0x1007a3f9
mov eax, dword [eax + 4]
mov ebx, dword [ecx + 8]
cmp ebx, dword [eax + 8]
jne 0x1007a3c0
mov eax, dword [eax]
mov dword [ebp + 8], eax
cmp eax, ecx
je 0x1007a3b8
mov ebx, dword [ecx + 4]
mov esi, dword [ebp + 8]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov eax, dword [eax + 4]
mov dword [eax], ecx
mov dword [esi + 4], edi
mov esi, dword [ebp - 4]
mov dword [edx + 4], ebx
mov dword [ecx + 4], eax
mov eax, dword [ebp - 8]
mov dword [eax + 4], ecx
jmp 0x1007a3f9
mov edi, eax
cmp dword [ebp + 8], eax
je 0x1007a3d6
mov eax, dword [eax + 4]
mov edi, eax
cmp ebx, dword [eax + 8]
je 0x1007a40f
cmp dword [ebp + 8], eax
jne 0x1007a3c7
mov eax, dword [ecx + 4]
mov dword [ebp + 8], eax
mov dword [eax], edx
mov ebx, dword [edx + 4]
mov dword [ebx], edi
mov eax, dword [edi + 4]
mov dword [eax], ecx
mov dword [edi + 4], ebx
mov edi, dword [ebp + 8]
mov dword [edx + 4], edi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 8]
mov dword [eax], ecx
mov ebx, dword [ebp - 0xc]
mov ecx, edx
cmp edx, esi
jne 0x1007a332
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [ecx + 4]
mov eax, dword [eax]
mov dword [ebp + 8], eax
mov esi, eax
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov eax, dword [eax + 4]
mov dword [eax], ecx
mov dword [esi + 4], edi
mov esi, dword [ebp - 4]
mov dword [edx + 4], ebx
mov dword [ecx + 4], eax
jmp 0x1007a3f9
push str.invalid_hash_bucket_count
call fcn.100b2c5b
int3
Function at 0x1007ac80
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e6909
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x10122094]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
mov al, byte [ebp + 8]
lea esi, [edi + 0x14]
mov dword [ebp - 4], 0
mov byte [edi + 8], al
mov eax, dword [ebp + 0xc]
mov dword [edi + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [edi], vtable.SkillListCondition.0
mov dword [edi + 0x10], eax
push 0x40
mov dword [ebp + 8], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.100b4eaa
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
lea esi, [edi + 0x1c]
mov byte [ebp - 4], 1
push 0x40
mov dword [ebp + 8], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.100b4eaa
add esp, 8
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov byte [ebp - 4], 4
mov ecx, edi
mov byte [edi + 4], 5
call fcn.10085a80
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc
Function at 0x100858e0
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 8]
push esi
xor esi, esi
push edi
mov eax, dword [edx + 0xec]
mov edi, ecx
mov edx, dword [edx + 0xf0]
cmp eax, edx
jae 0x1008591e
nop dword [eax]
cmp dword [eax], 0xcc
jne 0x10085917
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [edi + 0xc]
jne 0x10085917
cmp dword [eax + 0x14], esi
cmova esi, dword [eax + 0x14]
add eax, 0x38
cmp eax, edx
jb 0x10085900
movzx eax, byte [edi + 8]
mov ecx, dword [edi + 0x10]
sub eax, 0
je 0x10085952
sub eax, 1
je 0x10085947
sub eax, 1
je 0x1008593c
pop edi
xor al, al
pop esi
pop ebp
ret 0xc
cmp esi, ecx
pop edi
setb al
pop esi
pop ebp
ret 0xc
cmp esi, ecx
pop edi
seta al
pop esi
pop ebp
ret 0xc
cmp esi, ecx
pop edi
sete al
pop esi
pop ebp
ret 0xc

Function at 0x10086d00
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
mov eax, dword [eax]
push edi
mov edi, dword [esi + 4]
mov edx, dword [eax + 0xc]
mov dword [esp + 0xc], edx
mov eax, dword [eax + 0x14]
mov ebx, dword [eax + 0x18]
mov dword [esp + 0x10], ebx
test edi, edi
je 0x10086db3
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr edx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
lea ecx, [edi + 8]
xor eax, edx
imul eax, eax, 0x1000193
push eax
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1007a220
mov eax, dword [eax + 4]
test eax, eax
jne 0x10086d85
mov eax, dword [edi + 0xc]
cmp eax, dword [edi + 0xc]
je 0x10086db3
lea eax, [esp + 0xc]
mov ecx, edi
push eax
call fcn.10079260
cmp dword [eax], ebx
jne 0x10086db3
mov ecx, dword [esi + 4]
lea eax, [esp + 0xc]
push eax
call fcn.10079260
mov al, byte [eax + 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esi]
mov ecx, esi
push dword [ebp + 8]
mov eax, dword [eax]
call eax
mov ecx, dword [esi + 4]
mov bl, al
test ecx, ecx
je 0x10086de2
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x10]
mov byte [esp + 0x18], bl
push eax
call fcn.10087650
pop edi
pop esi
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10086e30
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e78d6
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x10122094]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x18], 0
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov esi, ecx
shr esi, 0x10
mov edx, ecx
mov dword [ebp - 0x20], esi
mov esi, ecx
shr esi, 8
mov dword [ebp - 0x10], ecx
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x1c], esi
mov esi, dword [ebp + 8]
shr edx, 0x18
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x14], eax
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [ebp - 4], 0
mov edi, dword [ebx + 4]
mov dword [ebp - 0x18], 1
test edi, edi
je 0x10086f46
movzx eax, cl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
mov eax, dword [ebp - 0x1c]
movzx eax, al
xor ecx, eax
mov eax, dword [ebp - 0x20]
imul ecx, ecx, 0x1000193
movzx eax, al
xor ecx, eax
imul eax, ecx, 0x1000193
lea ecx, [edi + 8]
xor eax, edx
imul eax, eax, 0x1000193
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.1007a220
mov eax, dword [eax + 4]
test eax, eax
jne 0x10086f07
mov eax, dword [edi + 0xc]
cmp eax, dword [edi + 0xc]
je 0x10086f46
lea eax, [ebp - 0x10]
mov ecx, edi
push eax
call fcn.10079260
mov ecx, dword [ebp - 0x14]
cmp dword [eax], ecx
jne 0x10086f46
mov ecx, dword [ebx + 4]
lea eax, [ebp - 0x10]
push eax
call fcn.10079260
add eax, 4
cmp esi, eax
je 0x10086fc0
push dword [ebp + 0xc]
mov ecx, esi
push dword [eax + 4]
push dword [eax]
call fcn.10088240
jmp 0x10086fc0
push dword [ebp + 0xc]
mov eax, dword [ebx]
lea ecx, [ebp - 0x28]
push ecx
mov ecx, ebx
call dword [eax]
mov edi, eax
cmp esi, edi
je 0x10086f84
mov ecx, esi
call fcn.1007aa30
mov ecx, dword [edi]
mov dword [esi], ecx
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov eax, dword [edi + 8]
mov dword [esi + 8], eax
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
lea ecx, [ebp - 0x28]
call fcn.1007aa30
cmp dword [ebx + 4], 0
je 0x10086fc0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
push esi
mov dword [ebp - 0x2c], eax
call fcn.100880c0
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 1
mov ecx, dword [ebx + 4]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10087380
lea ecx, [ebp - 0x28]
call fcn.1007aa30
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8