joyce8/EMBER2024-capa huggingface dataset:
Function at 0x101206e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
mov edx, dword [ebp + 0xc]
push 0xffffffffffffffff
push 0x10174415
push eax
mov dword fs:[0], esp
sub esp, 0x10
cmp dword [edx + 0x14], 0xf
push ebx
push esi
push edi
mov ebx, ecx
mov edi, edx
jbe 0x1012070d
mov edi, dword [edx]
xor ecx, ecx
mov esi, 0x811c9dc5
cmp dword [edx + 0x10], ecx
jbe 0x10120732
nop dword [eax]
movzx eax, byte [edi + ecx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, dword [edx + 0x10]
jb 0x10120720
push esi
push edx
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
call fcn.100948e0
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x10120762
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [ebx + 8], 0x5d1745d
jne 0x10120776
push str.unordered_map_set_too_long
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
lea eax, [ebx + 4]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
push 0x2c
mov dword [ebp - 0x18], 0
call fcn.101706d6
add esp, 4
mov edi, eax
mov dword [ebp - 0x18], edi
push dword [ebp + 0xc]
lea ecx, [edi + 8]
call fcn.100918c0
xorps xmm0, xmm0
movq qword [edi + 0x20], xmm0
mov dword [edi + 0x28], 0
mov dword [edi + 0x20], 0xffffffff
mov dword [edi + 0x24], 0
mov word [edi + 0x28], 0x100
mov byte [edi + 0x2a], 0
mov dword [ebp - 4], 1
mov eax, dword [ebx + 8]
inc eax
movss xmm3, dword [ebx]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10287280]
mov eax, dword [ebx + 0x1c]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x10287280]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
comiss xmm2, xmm3
jbe 0x10120864
divss xmm0, xmm3
call fcn.10059070
call fcn.10172640
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
mov eax, dword [ebx + 0x1c]
cmp eax, ecx
jae 0x10120848
cmp eax, 0x200
jae 0x10120846
shl eax, 3
cmp eax, ecx
jae 0x10120848
mov eax, ecx
push eax
mov ecx, ebx
call fcn.100a3c50
push esi
lea eax, [edi + 8]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.100948e0
mov edx, dword [eax]
jmp 0x10120867
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 4]
inc dword [ebx + 8]
mov dword [edi + 4], eax
mov dword [edi], edx
mov dword [eax], edi
mov dword [edx + 4], edi
mov ecx, dword [ebx + 0xc]
mov dword [ebp + 0xc], eax
mov eax, dword [ebx + 0x18]
and eax, esi
mov esi, dword [ecx + eax*8]
cmp esi, dword [ebx + 4]
jne 0x1012088f
mov dword [ecx + eax*8], edi
jmp 0x101208a1
cmp esi, edx
jne 0x10120898
mov dword [ecx + eax*8], edi
jmp 0x101208a5
mov edx, dword [ebp + 0xc]
cmp dword [ecx + eax*8 + 4], edx
jne 0x101208a5
mov dword [ecx + eax*8 + 4], edi
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword [eax], edi
pop edi
pop esi
mov byte [eax + 4], 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x10120e10
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1fffffff
sub esp, 8
bsr ecx, eax
push ebx
push esi
push edi
mov edi, 1
mov eax, edi
shl eax, cl
mov ecx, dword [ebp + 8]
cmp ecx, eax
jbe 0x10120e3c
push str.invalid_hash_bucket_count
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
lea eax, [ecx - 1]
mov esi, dword [0x102a6da8]
or eax, 1
mov dword [ebp + 8], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
mov ecx, 0x102a6db0
lea eax, [edi + edi]
push eax
call fcn.10091ca0
mov eax, dword [0x102a6da8]
lea ebx, [edi - 1]
mov dword [0x102a6dbc], ebx
mov dword [0x102a6dc0], edi
mov eax, dword [eax]
mov ecx, eax
cmp eax, esi
je 0x10120f76
movzx edx, byte [eax + 8]
xor edx, 0x811c9dc5
mov ecx, dword [ecx]
imul edi, edx, 0x1000193
movzx edx, byte [eax + 9]
xor edi, edx
movzx edx, byte [eax + 0xa]
imul edi, edi, 0x1000193
xor edi, edx
movzx edx, byte [eax + 0xb]
imul edi, edi, 0x1000193
xor edi, edx
mov edx, dword [0x102a6db0]
imul edi, edi, 0x1000193
and edi, ebx
mov ebx, dword [edx + edi*8]
lea edx, [edx + edi*8]
mov dword [ebp - 4], edx
cmp ebx, esi
jne 0x10120ed4
mov dword [edx], eax
mov dword [edx + 4], eax
jmp 0x10120f41
mov edx, dword [edx + 4]
mov edi, dword [eax + 8]
cmp edi, dword [edx + 8]
jne 0x10120f0e
mov edx, dword [edx]
mov dword [ebp - 8], edx
cmp edx, eax
je 0x10120f06
mov ebx, dword [eax + 4]
mov esi, dword [ebp - 8]
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
mov edx, dword [ebp - 4]
mov dword [edx + 4], eax
jmp 0x10120f41
cmp ebx, edx
je 0x10120f1e
mov edx, dword [edx + 4]
cmp edi, dword [edx + 8]
je 0x10120f52
cmp ebx, edx
jne 0x10120f12
mov ebx, dword [eax + 4]
mov dword [ebp - 8], ebx
mov dword [ebx], ecx
mov ebx, dword [ecx + 4]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov dword [edx + 4], ebx
mov edx, dword [ebp - 8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 4]
mov dword [eax + 4], edi
mov dword [edx], eax
mov eax, ecx
cmp ecx, esi
je 0x10120f76
mov ebx, dword [0x102a6dbc]
jmp 0x10120e82
mov ebx, dword [eax + 4]
mov edx, dword [edx]
mov dword [ebp - 8], edx
mov esi, edx
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
jmp 0x10120f41
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10120f80
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1fffffff
sub esp, 8
bsr ecx, eax
push ebx
push esi
push edi
mov edi, 1
mov eax, edi
shl eax, cl
mov ecx, dword [ebp + 8]
cmp ecx, eax
jbe 0x10120fac
push str.invalid_hash_bucket_count
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
lea eax, [ecx - 1]
mov esi, dword [0x1029d938]
or eax, 1
mov dword [ebp + 8], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
mov ecx, 0x1029d940
lea eax, [edi + edi]
push eax
call fcn.1011d3b0
mov eax, dword [0x1029d938]
lea ebx, [edi - 1]
mov dword [0x1029d94c], ebx
mov dword [0x1029d950], edi
mov eax, dword [eax]
mov ecx, eax
cmp eax, esi
je 0x101210e6
movzx edx, byte [eax + 8]
xor edx, 0x811c9dc5
mov ecx, dword [ecx]
imul edi, edx, 0x1000193
movzx edx, byte [eax + 9]
xor edi, edx
movzx edx, byte [eax + 0xa]
imul edi, edi, 0x1000193
xor edi, edx
movzx edx, byte [eax + 0xb]
imul edi, edi, 0x1000193
xor edi, edx
mov edx, dword [0x1029d940]
imul edi, edi, 0x1000193
and edi, ebx
mov ebx, dword [edx + edi*8]
lea edx, [edx + edi*8]
mov dword [ebp - 4], edx
cmp ebx, esi
jne 0x10121044
mov dword [edx], eax
mov dword [edx + 4], eax
jmp 0x101210b1
mov edx, dword [edx + 4]
mov edi, dword [eax + 8]
cmp edi, dword [edx + 8]
jne 0x1012107e
mov edx, dword [edx]
mov dword [ebp - 8], edx
cmp edx, eax
je 0x10121076
mov ebx, dword [eax + 4]
mov esi, dword [ebp - 8]
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
mov edx, dword [ebp - 4]
mov dword [edx + 4], eax
jmp 0x101210b1
cmp ebx, edx
je 0x1012108e
mov edx, dword [edx + 4]
cmp edi, dword [edx + 8]
je 0x101210c2
cmp ebx, edx
jne 0x10121082
mov ebx, dword [eax + 4]
mov dword [ebp - 8], ebx
mov dword [ebx], ecx
mov ebx, dword [ecx + 4]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov dword [edx + 4], ebx
mov edx, dword [ebp - 8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 4]
mov dword [eax + 4], edi
mov dword [edx], eax
mov eax, ecx
cmp ecx, esi
je 0x101210e6
mov ebx, dword [0x1029d94c]
jmp 0x10120ff2
mov ebx, dword [eax + 4]
mov edx, dword [edx]
mov dword [ebp - 8], edx
mov esi, edx
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
jmp 0x101210b1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10121580
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101790b5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebx
push esi
push edi
mov dword [ebp - 0x10], ecx
lea eax, [ebp + 8]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x34]
call fcn.100918c0
mov byte [ebp - 4], 1
sub esp, 0x18
lea eax, [ebp - 0x34]
mov ecx, esp
push eax
call fcn.100918c0
lea eax, [ebp - 0x4c]
push eax
call fcn.100e2db0
push eax
lea ecx, [ebp - 0x34]
call fcn.100917b0
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x1012160c
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10121602
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10121745
push ecx
push edx
call fcn.101706c8
add esp, 8
cmp dword [ebp - 0x20], 0xf
lea edi, [ebp - 0x34]
mov ebx, 0x811c9dc5
cmova edi, dword [ebp - 0x34]
xor edx, edx
mov ecx, edi
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10121623
sub ecx, esi
je 0x1012164f
nop
movsx eax, byte [edi + edx]
xor eax, ebx
imul ebx, eax, 0x1000193
mov eax, edi
inc edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10121642
sub eax, esi
cmp edx, eax
jb 0x10121630
mov al, byte [0x10274478]
test al, al
jne 0x1012165f
mov eax, 0x811c9dc5
jmp 0x10121677
movsx eax, al
mov ecx, 0x10274479
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.100de6f0
cmp ebx, eax
mov ebx, dword [ebp - 0x10]
je 0x101216cd
mov edi, dword [ebp - 0x24]
lea esi, [ebp - 0x34]
add ebx, 0x24
mov edx, 0x811c9dc5
cmp dword [ebp - 0x20], 0xf
cmova esi, dword [ebp - 0x34]
xor ecx, ecx
test edi, edi
je 0x101216b1
nop word [eax + eax]
movzx eax, byte [esi + ecx]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x101216a0
push edx
lea eax, [ebp - 0x34]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.100948e0
cmp dword [eax + 4], 0
je 0x101215b8
jmp 0x101216d0
add ebx, 0x24
lea eax, [ebp - 0x34]
mov ecx, ebx
push eax
call fcn.100e4630
mov ecx, dword [ebp - 0x20]
mov bl, byte [eax]
cmp ecx, 0xf
jbe 0x1012170d
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10121703
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10121745
push ecx
push edx
call fcn.101706c8
add esp, 8
mov ecx, dword [ebp + 0x1c]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0xf
jbe 0x10121755
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1012174b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1012174b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101706c8
add esp, 8
mov ecx, dword [ebp - 0xc]
mov al, bl
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x10121770
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101790dd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x48
test byte [0x102a3b04], 6
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x18], esi
je 0x10121803
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x10], 7
mov dword [esi + 0x14], 0xf
mov eax, dword [0x10274478]
mov dword [esi], eax
mov ax, word [0x1027447c]
mov word [esi + 4], ax
mov al, byte [0x1027447e]
mov byte [esi + 6], al
mov eax, esi
mov byte [esi + 7], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp byte [ebx + 8], 0
push str.default
je 0x10121828
call fcn.100918c0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea ecx, [ebp - 0x3c]
call fcn.100918c0
mov dword [ebp - 4], 0
nop word [eax + eax]
cmp dword [ebp - 0x28], 0xf
lea edi, [ebp - 0x3c]
mov esi, 0x811c9dc5
cmova edi, dword [ebp - 0x3c]
xor edx, edx
mov ecx, edi
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10121860
sub ecx, dword [ebp - 0x14]
je 0x10121881
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10121870
mov eax, dword [0x10274478]
test al, al
jne 0x10121891
mov eax, 0x811c9dc5
jmp 0x101218a9
movsx eax, al
mov ecx, 0x10274479
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.100de6f0
cmp esi, eax
je 0x10121959
cmp dword [ebp - 0x28], 0xf
lea esi, [ebp - 0x3c]
mov edi, dword [ebp - 0x2c]
mov edx, 0x811c9dc5
cmova esi, dword [ebp - 0x3c]
xor eax, eax
test edi, edi
je 0x101218e1
nop word [eax + eax]
movzx ecx, byte [esi + eax]
inc eax
xor ecx, edx
imul edx, ecx, 0x1000193
cmp eax, edi
jb 0x101218d0
push edx
lea eax, [ebp - 0x3c]
mov ecx, 0x102a3b18
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.100948e0
cmp dword [eax + 4], 0
jne 0x10121959
sub esp, 0x18
lea eax, [ebp - 0x3c]
mov ecx, esp
push eax
call fcn.100918c0
lea eax, [ebp - 0x54]
push eax
call fcn.100e2db0
push eax
lea ecx, [ebp - 0x3c]
call fcn.100917b0
mov ecx, dword [ebp - 0x40]
cmp ecx, 0xf
jbe 0x10121840
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10121944
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10121953
push ecx
push edx
call fcn.101706c8
add esp, 8
jmp 0x10121840
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [ebp - 0x18]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
movups xmm0, xmmword [ebp - 0x3c]
mov dword [eax + 0x14], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x2c]
movq qword [eax + 0x10], xmm0
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
Function at 0x101219a0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10179105
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebx
push esi
push edi
lea eax, [ebp + 8]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x30]
call fcn.100918c0
mov byte [ebp - 4], 1
sub esp, 0x18
lea eax, [ebp - 0x30]
mov ecx, esp
push eax
call fcn.100918c0
lea eax, [ebp - 0x48]
push eax
call fcn.100e2db0
push eax
lea ecx, [ebp - 0x30]
call fcn.100917b0
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xf
jbe 0x10121a29
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10121a1f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10121b5d
push ecx
push edx
call fcn.101706c8
add esp, 8
cmp dword [ebp - 0x1c], 0xf
lea edi, [ebp - 0x30]
mov ebx, 0x811c9dc5
cmova edi, dword [ebp - 0x30]
xor edx, edx
mov ecx, edi
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10121a40
sub ecx, esi
je 0x10121a6f
nop dword [eax + eax]
movsx eax, byte [edi + edx]
xor eax, ebx
imul ebx, eax, 0x1000193
mov eax, edi
inc edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10121a62
sub eax, esi
cmp edx, eax
jb 0x10121a50
mov al, byte [0x10274478]
test al, al
jne 0x10121a7f
mov eax, 0x811c9dc5
jmp 0x10121a97
movsx eax, al
mov ecx, 0x10274479
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.100de6f0
cmp ebx, eax
je 0x10121ae2
cmp dword [ebp - 0x1c], 0xf
lea esi, [ebp - 0x30]
mov edi, dword [ebp - 0x20]
mov edx, 0x811c9dc5
cmova esi, dword [ebp - 0x30]
xor ecx, ecx
test edi, edi
je 0x10121ac5
movzx eax, byte [esi + ecx]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x10121ab4
push edx
lea eax, [ebp - 0x30]
mov ecx, 0x102a3b18
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.100948e0
cmp dword [eax + 4], 0
je 0x101219d5
lea eax, [ebp - 0x30]
mov ecx, 0x102a3b18
push eax
call fcn.100e45b0
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax]
mov edi, dword [eax + 4]
cmp ecx, 0xf
jbe 0x10121b25
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10121b1b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10121b5d
push ecx
push edx
call fcn.101706c8
add esp, 8
mov ecx, dword [ebp + 0x1c]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
cmp ecx, 0xf
jbe 0x10121b6d
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10121b63
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10121b63
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101706c8
add esp, 8
mov ecx, dword [ebp - 0xc]
mov edx, edi
pop edi
mov eax, esi
mov dword fs:[0], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x10121dc0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101790b5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebx
push esi
push edi
mov dword [ebp - 0x10], ecx
lea eax, [ebp + 8]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x34]
call fcn.100918c0
mov byte [ebp - 4], 1
sub esp, 0x18
lea eax, [ebp - 0x34]
mov ecx, esp
push eax
call fcn.100918c0
lea eax, [ebp - 0x4c]
push eax
call fcn.100e2db0
push eax
lea ecx, [ebp - 0x34]
call fcn.100917b0
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x10121e4c
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10121e42
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10121f8c
push ecx
push edx
call fcn.101706c8
add esp, 8
cmp dword [ebp - 0x20], 0xf
lea edi, [ebp - 0x34]
mov ebx, 0x811c9dc5
cmova edi, dword [ebp - 0x34]
xor edx, edx
mov ecx, edi
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10121e63
sub ecx, esi
je 0x10121e8f
nop
movsx eax, byte [edi + edx]
mov ecx, edi
xor eax, ebx
imul ebx, eax, 0x1000193
inc edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10121e82
sub ecx, esi
cmp edx, ecx
jb 0x10121e70
mov al, byte [0x10274478]
test al, al
jne 0x10121e9f
mov eax, 0x811c9dc5
jmp 0x10121eb7
movsx eax, al
mov ecx, 0x10274479
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.100de6f0
cmp ebx, eax
mov ebx, dword [ebp - 0x10]
je 0x10121f0d
mov edi, dword [ebp - 0x24]
lea esi, [ebp - 0x34]
add ebx, 0x28
mov edx, 0x811c9dc5
cmp dword [ebp - 0x20], 0xf
cmova esi, dword [ebp - 0x34]
xor ecx, ecx
test edi, edi
je 0x10121ef1
nop word [eax + eax]
movzx eax, byte [esi + ecx]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x10121ee0
push edx
lea eax, [ebp - 0x34]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.100948e0
cmp dword [eax + 4], 0
je 0x10121df8
jmp 0x10121f10
add ebx, 0x28
lea eax, [ebp - 0x34]
mov ecx, ebx
push eax
call fcn.100e45f0
mov ecx, dword [ebp - 0x20]
movss xmm0, dword [eax]
movss dword [ebp - 0x10], xmm0
cmp ecx, 0xf
jbe 0x10121f54
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10121f4a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10121f8c
push ecx
push edx
call fcn.101706c8
add esp, 8
mov ecx, dword [ebp + 0x1c]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0xf
jbe 0x10121f9c
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10121f92
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10121f92
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101706c8
add esp, 8
mov ecx, dword [ebp - 0xc]
movss xmm0, dword [ebp - 0x10]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x10121fc0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101790b5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebx
push esi
push edi
mov dword [ebp - 0x10], ecx
lea eax, [ebp + 8]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x34]
call fcn.100918c0
mov byte [ebp - 4], 1
sub esp, 0x18
lea eax, [ebp - 0x34]
mov ecx, esp
push eax
call fcn.100918c0
lea eax, [ebp - 0x4c]
push eax
call fcn.100e2db0
push eax
lea ecx, [ebp - 0x34]
call fcn.100917b0
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x1012204c
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10122042
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10122185
push ecx
push edx
call fcn.101706c8
add esp, 8
cmp dword [ebp - 0x20], 0xf
lea edi, [ebp - 0x34]
mov ebx, 0x811c9dc5
cmova edi, dword [ebp - 0x34]
xor edx, edx
mov ecx, edi
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10122063
sub ecx, esi
je 0x1012208f
nop
movsx eax, byte [edi + edx]
xor eax, ebx
imul ebx, eax, 0x1000193
mov eax, edi
inc edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10122082
sub eax, esi
cmp edx, eax
jb 0x10122070
mov al, byte [0x10274478]
test al, al
jne 0x1012209f
mov eax, 0x811c9dc5
jmp 0x101220b7
movsx eax, al
mov ecx, 0x10274479
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.100de6f0
cmp ebx, eax
mov ebx, dword [ebp - 0x10]
je 0x1012210d
mov edi, dword [ebp - 0x24]
lea esi, [ebp - 0x34]
add ebx, 0x28
mov edx, 0x811c9dc5
cmp dword [ebp - 0x20], 0xf
cmova esi, dword [ebp - 0x34]
xor ecx, ecx
test edi, edi
je 0x101220f1
nop word [eax + eax]
movzx eax, byte [esi + ecx]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x101220e0
push edx
lea eax, [ebp - 0x34]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.100948e0
cmp dword [eax + 4], 0
je 0x10121ff8
jmp 0x10122110
add ebx, 0x28
lea eax, [ebp - 0x34]
mov ecx, ebx
push eax
call fcn.100e45f0
mov ecx, dword [ebp - 0x20]
mov esi, dword [eax]
cmp ecx, 0xf
jbe 0x1012214d
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10122143
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10122185
push ecx
push edx
call fcn.101706c8
add esp, 8
mov ecx, dword [ebp + 0x1c]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0xf
jbe 0x10122195
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1012218b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1012218b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101706c8
add esp, 8
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret