joyce8/EMBER2024-capa huggingface dataset:
Function at 0x449f80
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov ebx, ecx
mov ecx, 0x4cb8cc
push 0x4ce960
call fcn.0048273a
mov esi, eax
lea eax, [esi + 1]
lea ecx, [ecx]
mov dl, byte [esi]
inc esi
test dl, dl
jne 0x449fa0
push 0x4ce960
mov ecx, 0x4cb8cc
sub esi, eax
call fcn.0048273a
xor edx, edx
mov edi, 0x811c9dc5
test esi, esi
je 0x449fd4
movzx ecx, byte [edx + eax]
inc edx
xor ecx, edi
imul edi, ecx, 0x1000193
cmp edx, esi
jb 0x449fc3
mov edx, dword [ebx + 4]
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x449ff6
cmp dword [eax + 0x10], edi
jae 0x449fec
mov eax, dword [eax + 8]
jmp 0x449ff0
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x449fe2
cmp ecx, edx
je 0x44a002
mov dword [ebp - 4], ecx
cmp edi, dword [ecx + 0x10]
jae 0x44a005
mov dword [ebp - 4], edx
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, edx
je 0x44a067
lea edi, [eax + 0x14]
push 0x4ca58c
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x44a04d
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x44a031
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca59c]
push ecx
mov ecx, 0x4ca58c
call fcn.00444a10
test eax, eax
js 0x44a04d
mov dword [ebp - 4], esi
jmp 0x44a052
mov eax, dword [edi]
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, dword [edi]
je 0x44a067
push eax
lea eax, [ebp - 4]
mov ecx, edi
push eax
call fcn.00444400
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x44a0f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov ebx, ecx
mov ecx, 0x4cb8ac
push 0x4ce960
call fcn.0048273a
mov esi, eax
lea eax, [esi + 1]
lea ecx, [ecx]
mov dl, byte [esi]
inc esi
test dl, dl
jne 0x44a110
push 0x4ce960
mov ecx, 0x4cb8ac
sub esi, eax
call fcn.0048273a
xor edx, edx
mov edi, 0x811c9dc5
test esi, esi
je 0x44a144
movzx ecx, byte [edx + eax]
inc edx
xor ecx, edi
imul edi, ecx, 0x1000193
cmp edx, esi
jb 0x44a133
mov edx, dword [ebx + 4]
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x44a166
cmp dword [eax + 0x10], edi
jae 0x44a15c
mov eax, dword [eax + 8]
jmp 0x44a160
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44a152
cmp ecx, edx
je 0x44a172
mov dword [ebp - 4], ecx
cmp edi, dword [ecx + 0x10]
jae 0x44a175
mov dword [ebp - 4], edx
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, edx
je 0x44a1d7
lea edi, [eax + 0x14]
push 0x4ca58c
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x44a1bd
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x44a1a1
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca59c]
push ecx
mov ecx, 0x4ca58c
call fcn.00444a10
test eax, eax
js 0x44a1bd
mov dword [ebp - 4], esi
jmp 0x44a1c2
mov eax, dword [edi]
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, dword [edi]
je 0x44a1d7
push eax
lea eax, [ebp - 4]
mov ecx, edi
push eax
call fcn.00444400
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x44a260
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov ebx, ecx
mov ecx, 0x4cb88c
push 0x4ce960
call fcn.0048273a
mov esi, eax
lea eax, [esi + 1]
lea ecx, [ecx]
mov dl, byte [esi]
inc esi
test dl, dl
jne 0x44a280
push 0x4ce960
mov ecx, 0x4cb88c
sub esi, eax
call fcn.0048273a
xor edx, edx
mov edi, 0x811c9dc5
test esi, esi
je 0x44a2b4
movzx ecx, byte [edx + eax]
inc edx
xor ecx, edi
imul edi, ecx, 0x1000193
cmp edx, esi
jb 0x44a2a3
mov edx, dword [ebx + 4]
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x44a2d6
cmp dword [eax + 0x10], edi
jae 0x44a2cc
mov eax, dword [eax + 8]
jmp 0x44a2d0
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44a2c2
cmp ecx, edx
je 0x44a2e2
mov dword [ebp - 4], ecx
cmp edi, dword [ecx + 0x10]
jae 0x44a2e5
mov dword [ebp - 4], edx
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, edx
je 0x44a347
lea edi, [eax + 0x14]
push 0x4ca58c
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x44a32d
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x44a311
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca59c]
push ecx
mov ecx, 0x4ca58c
call fcn.00444a10
test eax, eax
js 0x44a32d
mov dword [ebp - 4], esi
jmp 0x44a332
mov eax, dword [edi]
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, dword [edi]
je 0x44a347
push eax
lea eax, [ebp - 4]
mov ecx, edi
push eax
call fcn.00444400
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x44a3d0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov ebx, ecx
mov ecx, 0x4cb86c
push 0x4ce960
call fcn.0048273a
mov esi, eax
lea eax, [esi + 1]
lea ecx, [ecx]
mov dl, byte [esi]
inc esi
test dl, dl
jne 0x44a3f0
push 0x4ce960
mov ecx, 0x4cb86c
sub esi, eax
call fcn.0048273a
xor edx, edx
mov edi, 0x811c9dc5
test esi, esi
je 0x44a424
movzx ecx, byte [edx + eax]
inc edx
xor ecx, edi
imul edi, ecx, 0x1000193
cmp edx, esi
jb 0x44a413
mov edx, dword [ebx + 4]
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x44a446
cmp dword [eax + 0x10], edi
jae 0x44a43c
mov eax, dword [eax + 8]
jmp 0x44a440
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44a432
cmp ecx, edx
je 0x44a452
mov dword [ebp - 4], ecx
cmp edi, dword [ecx + 0x10]
jae 0x44a455
mov dword [ebp - 4], edx
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, edx
je 0x44a4b7
lea edi, [eax + 0x14]
push 0x4ca58c
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x44a49d
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x44a481
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca59c]
push ecx
mov ecx, 0x4ca58c
call fcn.00444a10
test eax, eax
js 0x44a49d
mov dword [ebp - 4], esi
jmp 0x44a4a2
mov eax, dword [edi]
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, dword [edi]
je 0x44a4b7
push eax
lea eax, [ebp - 4]
mov ecx, edi
push eax
call fcn.00444400
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x44a5e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6529
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb8cc
push 0x4ce960
mov dword [ebp - 0x10], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x44a644
push 0x4ce960
mov ecx, 0x4cb8cc
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x44a681
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x44a670
mov edi, dword [ebp - 0x14]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x44a6a6
cmp dword [eax + 0x10], edx
jae 0x44a69c
mov eax, dword [eax + 8]
jmp 0x44a6a0
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44a692
cmp ecx, esi
je 0x44a6b2
mov dword [ebp - 0x14], ecx
cmp edx, dword [ecx + 0x10]
jae 0x44a6b5
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov eax, dword [eax]
cmp eax, esi
je 0x44a716
lea edi, [eax + 0x14]
push 0x4ca58c
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x44a6fd
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x44a6e1
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca59c]
push ecx
mov ecx, 0x4ca58c
call fcn.00444a10
test eax, eax
js 0x44a6fd
mov dword [ebp + 8], esi
jmp 0x44a702
mov eax, dword [edi]
mov dword [ebp + 8], eax
lea ecx, [ebp + 8]
mov ecx, dword [ecx]
cmp ecx, dword [edi]
je 0x44a716
add ecx, 0x28
push ecx
mov ecx, ebx
call fcn.004441b0
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x44a7e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6529
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb8ac
push 0x4ce960
mov dword [ebp - 0x10], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x44a844
push 0x4ce960
mov ecx, 0x4cb8ac
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x44a881
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x44a870
mov edi, dword [ebp - 0x14]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x44a8a6
cmp dword [eax + 0x10], edx
jae 0x44a89c
mov eax, dword [eax + 8]
jmp 0x44a8a0
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44a892
cmp ecx, esi
je 0x44a8b2
mov dword [ebp - 0x14], ecx
cmp edx, dword [ecx + 0x10]
jae 0x44a8b5
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov eax, dword [eax]
cmp eax, esi
je 0x44a916
lea edi, [eax + 0x14]
push 0x4ca58c
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x44a8fd
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x44a8e1
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca59c]
push ecx
mov ecx, 0x4ca58c
call fcn.00444a10
test eax, eax
js 0x44a8fd
mov dword [ebp + 8], esi
jmp 0x44a902
mov eax, dword [edi]
mov dword [ebp + 8], eax
lea ecx, [ebp + 8]
mov ecx, dword [ecx]
cmp ecx, dword [edi]
je 0x44a916
add ecx, 0x28
push ecx
mov ecx, ebx
call fcn.004441b0
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x44a9e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6529
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb88c
push 0x4ce960
mov dword [ebp - 0x10], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x44aa44
push 0x4ce960
mov ecx, 0x4cb88c
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x44aa81
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x44aa70
mov edi, dword [ebp - 0x14]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x44aaa6
cmp dword [eax + 0x10], edx
jae 0x44aa9c
mov eax, dword [eax + 8]
jmp 0x44aaa0
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44aa92
cmp ecx, esi
je 0x44aab2
mov dword [ebp - 0x14], ecx
cmp edx, dword [ecx + 0x10]
jae 0x44aab5
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov eax, dword [eax]
cmp eax, esi
je 0x44ab16
lea edi, [eax + 0x14]
push 0x4ca58c
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x44aafd
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x44aae1
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca59c]
push ecx
mov ecx, 0x4ca58c
call fcn.00444a10
test eax, eax
js 0x44aafd
mov dword [ebp + 8], esi
jmp 0x44ab02
mov eax, dword [edi]
mov dword [ebp + 8], eax
lea ecx, [ebp + 8]
mov ecx, dword [ecx]
cmp ecx, dword [edi]
je 0x44ab16
add ecx, 0x28
push ecx
mov ecx, ebx
call fcn.004441b0
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x44abe0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6529
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb86c
push 0x4ce960
mov dword [ebp - 0x10], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x44ac44
push 0x4ce960
mov ecx, 0x4cb86c
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x44ac81
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x44ac70
mov edi, dword [ebp - 0x14]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x44aca6
cmp dword [eax + 0x10], edx
jae 0x44ac9c
mov eax, dword [eax + 8]
jmp 0x44aca0
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44ac92
cmp ecx, esi
je 0x44acb2
mov dword [ebp - 0x14], ecx
cmp edx, dword [ecx + 0x10]
jae 0x44acb5
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov eax, dword [eax]
cmp eax, esi
je 0x44ad16
lea edi, [eax + 0x14]
push 0x4ca58c
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x44acfd
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x44ace1
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca59c]
push ecx
mov ecx, 0x4ca58c
call fcn.00444a10
test eax, eax
js 0x44acfd
mov dword [ebp + 8], esi
jmp 0x44ad02
mov eax, dword [edi]
mov dword [ebp + 8], eax
lea ecx, [ebp + 8]
mov ecx, dword [ecx]
cmp ecx, dword [edi]
je 0x44ad16
add ecx, 0x28
push ecx
mov ecx, ebx
call fcn.004441b0
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x44ca70
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a67a9
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb834
push 0x4ce960
mov dword [ebp - 0x14], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x44cad4
push 0x4ce960
mov ecx, 0x4cb834
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x44cb11
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x44cb00
mov edi, dword [ebp - 0x18]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x44cb36
cmp dword [eax + 0x10], edx
jae 0x44cb2c
mov eax, dword [eax + 8]
jmp 0x44cb30
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44cb22
cmp ecx, esi
je 0x44cb42
mov dword [ebp - 0x18], ecx
cmp edx, dword [ecx + 0x10]
jae 0x44cb45
mov dword [ebp - 0x18], esi
lea eax, [ebp - 0x18]
mov eax, dword [eax]
cmp eax, esi
je 0x44cbcb
push ecx
add eax, 0x14
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444230
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x24]
mov eax, dword [eax]
add eax, 0x28
push eax
call fcn.004442d0
mov edx, eax
mov eax, dword [ebx + 4]
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov dword [ebx + 4], ecx
mov ecx, dword [edx]
mov eax, dword [ebx]
mov dword [edx], eax
mov esi, dword [ebp - 0x20]
mov dword [ebx], ecx
test esi, esi
je 0x44cbae
or edi, 0xffffffff
lea ecx, [esi + 4]
mov eax, edi
lock xadd dword [ecx], eax
jne 0x44cbae
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
lock xadd dword [eax], edi
dec edi
jne 0x44cbae
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp + 8]
push ecx
push dword [ecx]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444340
push dword [ebp - 0x1c]
call fcn.004815f5
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x44cc60
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a67a9
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb810
push 0x4ce960
mov dword [ebp - 0x14], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x44ccc4
push 0x4ce960
mov ecx, 0x4cb810
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x44cd01
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x44ccf0
mov edi, dword [ebp - 0x18]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x44cd26
cmp dword [eax + 0x10], edx
jae 0x44cd1c
mov eax, dword [eax + 8]
jmp 0x44cd20
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44cd12
cmp ecx, esi
je 0x44cd32
mov dword [ebp - 0x18], ecx
cmp edx, dword [ecx + 0x10]
jae 0x44cd35
mov dword [ebp - 0x18], esi
lea eax, [ebp - 0x18]
mov eax, dword [eax]
cmp eax, esi
je 0x44cdbb
push ecx
add eax, 0x14
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444230
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x24]
mov eax, dword [eax]
add eax, 0x28
push eax
call fcn.004442d0
mov edx, eax
mov eax, dword [ebx + 4]
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov dword [ebx + 4], ecx
mov ecx, dword [edx]
mov eax, dword [ebx]
mov dword [edx], eax
mov esi, dword [ebp - 0x20]
mov dword [ebx], ecx
test esi, esi
je 0x44cd9e
or edi, 0xffffffff
lea ecx, [esi + 4]
mov eax, edi
lock xadd dword [ecx], eax
jne 0x44cd9e
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
lock xadd dword [eax], edi
dec edi
jne 0x44cd9e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp + 8]
push ecx
push dword [ecx]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444340
push dword [ebp - 0x1c]
call fcn.004815f5
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x44cde0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a67a9
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb7f0
push 0x4ce960
mov dword [ebp - 0x14], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x44ce44
push 0x4ce960
mov ecx, 0x4cb7f0
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x44ce81
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x44ce70
mov edi, dword [ebp - 0x18]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x44cea6
cmp dword [eax + 0x10], edx
jae 0x44ce9c
mov eax, dword [eax + 8]
jmp 0x44cea0
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44ce92
cmp ecx, esi
je 0x44ceb2
mov dword [ebp - 0x18], ecx
cmp edx, dword [ecx + 0x10]
jae 0x44ceb5
mov dword [ebp - 0x18], esi
lea eax, [ebp - 0x18]
mov eax, dword [eax]
cmp eax, esi
je 0x44cf3b
push ecx
add eax, 0x14
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444230
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x24]
mov eax, dword [eax]
add eax, 0x28
push eax
call fcn.004442d0
mov edx, eax
mov eax, dword [ebx + 4]
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov dword [ebx + 4], ecx
mov ecx, dword [edx]
mov eax, dword [ebx]
mov dword [edx], eax
mov esi, dword [ebp - 0x20]
mov dword [ebx], ecx
test esi, esi
je 0x44cf1e
or edi, 0xffffffff
lea ecx, [esi + 4]
mov eax, edi
lock xadd dword [ecx], eax
jne 0x44cf1e
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
lock xadd dword [eax], edi
dec edi
jne 0x44cf1e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp + 8]
push ecx
push dword [ecx]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444340
push dword [ebp - 0x1c]
call fcn.004815f5
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x44cf60
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a67a9
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb8ac
push 0x4ce960
mov dword [ebp - 0x14], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x44cfc4
push 0x4ce960
mov ecx, 0x4cb8ac
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x44d001
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x44cff0
mov edi, dword [ebp - 0x18]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x44d026
cmp dword [eax + 0x10], edx
jae 0x44d01c
mov eax, dword [eax + 8]
jmp 0x44d020
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44d012
cmp ecx, esi
je 0x44d032
mov dword [ebp - 0x18], ecx
cmp edx, dword [ecx + 0x10]
jae 0x44d035
mov dword [ebp - 0x18], esi
lea eax, [ebp - 0x18]
mov eax, dword [eax]
cmp eax, esi
je 0x44d0bb
push ecx
add eax, 0x14
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444230
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x24]
mov eax, dword [eax]
add eax, 0x28
push eax
call fcn.004442d0
mov edx, eax
mov eax, dword [ebx + 4]
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov dword [ebx + 4], ecx
mov ecx, dword [edx]
mov eax, dword [ebx]
mov dword [edx], eax
mov esi, dword [ebp - 0x20]
mov dword [ebx], ecx
test esi, esi
je 0x44d09e
or edi, 0xffffffff
lea ecx, [esi + 4]
mov eax, edi
lock xadd dword [ecx], eax
jne 0x44d09e
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
lock xadd dword [eax], edi
dec edi
jne 0x44d09e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp + 8]
push ecx
push dword [ecx]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444340
push dword [ebp - 0x1c]
call fcn.004815f5
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4