joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1002e4e0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edi, ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov ebx, dword [edi + 0x1278]
cmp dword [ebx + 0x60], ecx
jbe 0x1002e510
mov eax, dword [ebx + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x1002e5b2
jmp 0x1002e5cd
mov dword [ebp - 0x10], edi
mov eax, ecx
shr eax, 0x10
mov esi, ecx
shr esi, 8
mov edx, 0xff
mov edi, ecx
and edi, edx
and esi, edx
and eax, edx
mov edx, ecx
shr edx, 0x18
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
xor edi, esi
imul edi, edi, 0x1000193
xor edi, eax
imul edi, edi, 0x1000193
xor edi, edx
imul edi, edi, 0x1000193
and edi, dword [ebx + 0x80]
mov edx, dword [ebx + 0x6c]
mov ebx, dword [ebx + 0x74]
shl eax, 0x10
and ecx, 0xff0000ff
or ecx, eax
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebx + edi*8]
lea eax, [edi + edi]
inc eax
mov dword [ebp - 0x14], eax
shl esi, 8
or ecx, esi
mov eax, ebx
cmp edx, ebx
je 0x1002e58f
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
mov esi, dword [esi + edi*4]
mov edi, dword [esi]
jmp 0x1002e591
mov edi, ebx
xor esi, esi
cmp eax, edi
je 0x1002e5a0
cmp dword [eax + 8], ecx
je 0x1002e5a5
mov eax, dword [eax]
jmp 0x1002e57e
mov edx, dword [ebp + 0xc]
jmp 0x1002e5cf
cmp eax, edx
mov edx, dword [ebp + 0xc]
mov edi, dword [ebp - 0x10]
je 0x1002e5cf
mov esi, dword [eax + 0xc]
test esi, esi
je 0x1002e5cd
cmp dword [esi + 0x174], 0
je 0x1002e5cf
mov ecx, esi
push edi
mov edi, edx
call fcn.1005d010
mov edx, edi
jmp 0x1002e5cf
xor esi, esi
test edx, edx
jle 0x1002e5f6
xor ebx, ebx
push dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
push dword [eax + ebx*4]
push esi
mov edi, edx
call fcn.100b47d0
mov edx, edi
add esp, 0xc
mov ecx, dword [ebp + 0x18]
mov dword [ecx + ebx*4], eax
inc ebx
cmp edi, ebx
jne 0x1002e5d5
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x14
Function at 0x1002e600
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x2c
mov edx, ecx
mov ecx, dword [ebp + 8]
mov eax, dword [0x1038100c]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov edi, dword [edx + 0x1278]
cmp dword [edi + 0x60], ecx
jbe 0x1002e637
mov eax, dword [edi + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x1002e6d0
jmp 0x1002e6e7
mov dword [ebp - 0x30], edx
mov ebx, ecx
shr ebx, 0x10
mov esi, ecx
shr esi, 8
mov eax, 0xff
mov edx, ecx
and edx, eax
and esi, eax
and ebx, eax
mov eax, ecx
shr eax, 0x18
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [edi + 0x80]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov dword [ebp - 0x38], edi
mov edi, dword [edi + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x34], eax
shl esi, 8
or ecx, esi
mov ebx, edi
cmp edx, edi
je 0x1002e6b5
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x1002e6b7
mov eax, edi
xor esi, esi
cmp ebx, eax
je 0x1002e6e9
cmp dword [ebx + 8], ecx
je 0x1002e6c6
mov ebx, dword [ebx]
jmp 0x1002e6a4
cmp ebx, edx
je 0x1002e6e9
mov esi, dword [ebx + 0xc]
mov edx, dword [ebp - 0x30]
test esi, esi
je 0x1002e6e7
cmp dword [esi + 0x174], 0
je 0x1002e6e9
mov ecx, esi
push edx
call fcn.1005d010
jmp 0x1002e6e9
xor esi, esi
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov ebx, dword [ebp + 0xc]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
cmp eax, 0xf
jbe 0x1002e729
sub esp, 0xc
mov al, byte [ebp - 0x2c]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
lea ecx, [ebp - 0x28]
call fcn.10001080
jmp 0x1002e73f
lea eax, [ebp - 0x28]
mov dword [eax + 0x10], edi
push edi
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebp + edi - 0x28], 0
mov ecx, 0x3dc
add ecx, dword [esi + 0x100]
lea edi, [ebp - 0x28]
mov edx, edi
call fcn.10062050
mov esi, eax
mov ecx, dword [edi + 0x14]
cmp ecx, 0x10
jb 0x1002e774
mov eax, dword [ebp - 0x28]
inc ecx
cmp ecx, 0x1000
jae 0x1002e78a
push eax
call dword [sym.imp.mozglue.dll_free]
add esp, 4
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1021e470
mov eax, esi
add esp, 0x2c
pop esi
pop edi
pop ebx
pop ebp
ret 8
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x1002e79b
mov eax, ecx
jmp 0x1002e76a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
Function at 0x1002e7b0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, dword [ebx + 0x1278]
cmp dword [edi + 0x60], ecx
jbe 0x1002e7e0
mov eax, dword [edi + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x1002e881
jmp 0x1002e89c
mov dword [ebp - 0x10], ebx
mov ebx, ecx
shr ebx, 0x10
mov esi, ecx
shr esi, 8
mov eax, 0xff
mov edx, ecx
and edx, eax
and esi, eax
and ebx, eax
mov eax, ecx
shr eax, 0x18
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [edi + 0x80]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov dword [ebp - 0x18], edi
mov edi, dword [edi + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x14], eax
shl esi, 8
or ecx, esi
mov ebx, edi
cmp edx, edi
je 0x1002e85e
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x1002e860
mov eax, edi
xor esi, esi
cmp ebx, eax
je 0x1002e86f
cmp dword [ebx + 8], ecx
je 0x1002e874
mov ebx, dword [ebx]
jmp 0x1002e84d
mov edx, dword [ebp + 0xc]
jmp 0x1002e89e
cmp ebx, edx
mov edx, dword [ebp + 0xc]
je 0x1002e89e
mov esi, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x10]
test esi, esi
je 0x1002e89c
cmp dword [esi + 0x174], 0
je 0x1002e89e
mov ecx, esi
push ebx
mov edi, edx
call fcn.1005d010
mov edx, edi
jmp 0x1002e89e
xor esi, esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edx
push esi
call fcn.100b1e50
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0x10

Function at 0x1002e8c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
push eax
mov eax, ecx
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x1278]
cmp dword [edx + 0x60], ecx
jbe 0x1002e8e1
shl ecx, 2
add ecx, dword [edx + 0x64]
mov edx, ecx
jmp 0x1002e94e
mov dword [ebp - 0x10], eax
mov edi, ecx
shr edi, 0x10
mov esi, ecx
shr esi, 8
mov ebx, 0xff
mov eax, ecx
and eax, ebx
and esi, ebx
and edi, ebx
mov ebx, ecx
shr ebx, 0x18
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
xor eax, esi
imul eax, eax, 0x1000193
xor eax, edi
imul eax, eax, 0x1000193
xor eax, ebx
imul eax, eax, 0x1000193
and eax, dword [edx + 0x80]
mov edx, dword [edx + 0x74]
mov edx, dword [edx + eax*8]
shl edi, 0x10
and ecx, 0xff0000ff
or ecx, edi
shl esi, 8
or ecx, esi
cmp dword [edx + 8], ecx
je 0x1002e948
mov edx, dword [edx]
jmp 0x1002e93f
add edx, 0xc
mov eax, dword [ebp - 0x10]
mov ebx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [edx]
cmp dword [edi + 0x174], 0
je 0x1002e967
mov ecx, edi
push eax
call fcn.1005d010
mov edx, 0x3dc
add edx, dword [edi + 0x100]
mov ecx, esi
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push ebx
call fcn.10061cd0
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret 0x14
Function at 0x1002e990
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ecx + 0x1278]
cmp dword [edx + 0x60], eax
jbe 0x1002e9be
mov ecx, dword [edx + 0x64]
mov edi, dword [ecx + eax*4]
cmp edi, 0xffffffff
jne 0x1002ea50
jmp 0x1002ea69
mov ebx, eax
shr ebx, 0x10
mov edi, eax
shr edi, 8
mov ecx, 0xff
mov esi, eax
and esi, ecx
and edi, ecx
and ebx, ecx
mov ecx, eax
shr ecx, 0x18
xor esi, 0x811c9dc5
imul esi, esi, 0x1000193
xor esi, edi
imul esi, esi, 0x1000193
xor esi, ebx
imul esi, esi, 0x1000193
xor esi, ecx
imul esi, esi, 0x1000193
and esi, dword [edx + 0x80]
mov ecx, dword [edx + 0x6c]
mov edx, dword [edx + 0x74]
shl ebx, 0x10
and eax, 0xff0000ff
or eax, ebx
mov dword [ebp - 0x18], edx
mov edx, dword [edx + esi*8]
add esi, esi
inc esi
mov dword [ebp - 0x14], esi
shl edi, 8
or eax, edi
mov ebx, edx
cmp ecx, edx
je 0x1002ea38
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
mov esi, dword [esi + edi*4]
mov esi, dword [esi]
jmp 0x1002ea3a
mov esi, edx
xor edi, edi
cmp ebx, esi
je 0x1002ea6b
cmp dword [ebx + 8], eax
je 0x1002ea49
mov ebx, dword [ebx]
jmp 0x1002ea27
cmp ebx, ecx
je 0x1002ea6b
mov edi, dword [ebx + 0xc]
test edi, edi
je 0x1002ea69
cmp dword [edi + 0x174], 0
je 0x1002ea6b
mov ecx, edi
push dword [ebp - 0x10]
call fcn.1005d010
jmp 0x1002ea6b
xor edi, edi
mov ecx, edi
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.100621f0
cmp dword [edi + 0x17c], 0
je 0x1002ea9b
mov esi, dword [ebp - 0x10]
lea ecx, [esi + 8]
push 0x82e2
call fcn.100833c0
mov dword [esi + 0x1f18], 1
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x1002edd0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ecx + 0x1278]
cmp dword [edx + 0x60], eax
jbe 0x1002edfe
mov ecx, dword [edx + 0x64]
mov edi, dword [ecx + eax*4]
cmp edi, 0xffffffff
jne 0x1002ee90
jmp 0x1002eea9
mov ebx, eax
shr ebx, 0x10
mov edi, eax
shr edi, 8
mov ecx, 0xff
mov esi, eax
and esi, ecx
and edi, ecx
and ebx, ecx
mov ecx, eax
shr ecx, 0x18
xor esi, 0x811c9dc5
imul esi, esi, 0x1000193
xor esi, edi
imul esi, esi, 0x1000193
xor esi, ebx
imul esi, esi, 0x1000193
xor esi, ecx
imul esi, esi, 0x1000193
and esi, dword [edx + 0x80]
mov ecx, dword [edx + 0x6c]
mov edx, dword [edx + 0x74]
shl ebx, 0x10
and eax, 0xff0000ff
or eax, ebx
mov dword [ebp - 0x18], edx
mov edx, dword [edx + esi*8]
add esi, esi
inc esi
mov dword [ebp - 0x14], esi
shl edi, 8
or eax, edi
mov ebx, edx
cmp ecx, edx
je 0x1002ee78
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
mov esi, dword [esi + edi*4]
mov esi, dword [esi]
jmp 0x1002ee7a
mov esi, edx
xor edi, edi
cmp ebx, esi
je 0x1002eeab
cmp dword [ebx + 8], eax
je 0x1002ee89
mov ebx, dword [ebx]
jmp 0x1002ee67
cmp ebx, ecx
je 0x1002eeab
mov edi, dword [ebx + 0xc]
test edi, edi
je 0x1002eea9
cmp dword [edi + 0x174], 0
je 0x1002eeab
mov ecx, edi
push dword [ebp - 0x10]
call fcn.1005d010
jmp 0x1002eeab
xor edi, edi
mov ecx, edi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp - 0x10]
call fcn.10060420
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x1002eed0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, dword [ebx + 0x1278]
cmp dword [edi + 0x60], ecx
jbe 0x1002ef00
mov eax, dword [edi + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x1002efa1
jmp 0x1002efbc
mov dword [ebp - 0x10], ebx
mov ebx, ecx
shr ebx, 0x10
mov esi, ecx
shr esi, 8
mov eax, 0xff
mov edx, ecx
and edx, eax
and esi, eax
and ebx, eax
mov eax, ecx
shr eax, 0x18
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [edi + 0x80]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov dword [ebp - 0x18], edi
mov edi, dword [edi + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x14], eax
shl esi, 8
or ecx, esi
mov ebx, edi
cmp edx, edi
je 0x1002ef7e
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x1002ef80
mov eax, edi
xor esi, esi
cmp ebx, eax
je 0x1002ef8f
cmp dword [ebx + 8], ecx
je 0x1002ef94
mov ebx, dword [ebx]
jmp 0x1002ef6d
mov edx, dword [ebp + 0xc]
jmp 0x1002efbe
cmp ebx, edx
mov edx, dword [ebp + 0xc]
je 0x1002efbe
mov esi, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x10]
test esi, esi
je 0x1002efbc
cmp dword [esi + 0x174], 0
je 0x1002efbe
mov ecx, esi
push ebx
mov edi, edx
call fcn.1005d010
mov edx, edi
jmp 0x1002efbe
xor esi, esi
mov ecx, esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edx
call fcn.10060740
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x1002f030
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, dword [ebx + 0x1278]
cmp dword [edi + 0x60], ecx
jbe 0x1002f060
mov eax, dword [edi + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x1002f101
jmp 0x1002f11c
mov dword [ebp - 0x10], ebx
mov ebx, ecx
shr ebx, 0x10
mov esi, ecx
shr esi, 8
mov eax, 0xff
mov edx, ecx
and edx, eax
and esi, eax
and ebx, eax
mov eax, ecx
shr eax, 0x18
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [edi + 0x80]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov dword [ebp - 0x18], edi
mov edi, dword [edi + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x14], eax
shl esi, 8
or ecx, esi
mov ebx, edi
cmp edx, edi
je 0x1002f0de
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x1002f0e0
mov eax, edi
xor esi, esi
cmp ebx, eax
je 0x1002f0ef
cmp dword [ebx + 8], ecx
je 0x1002f0f4
mov ebx, dword [ebx]
jmp 0x1002f0cd
mov edx, dword [ebp + 0xc]
jmp 0x1002f11e
cmp ebx, edx
mov edx, dword [ebp + 0xc]
je 0x1002f11e
mov esi, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x10]
test esi, esi
je 0x1002f11c
cmp dword [esi + 0x174], 0
je 0x1002f11e
mov ecx, esi
push ebx
mov edi, edx
call fcn.1005d010
mov edx, edi
jmp 0x1002f11e
xor esi, esi
mov ecx, esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edx
call fcn.100607e0
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x1002f180
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, dword [ebx + 0x1278]
cmp dword [edi + 0x60], ecx
jbe 0x1002f1b0
mov eax, dword [edi + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x1002f251
jmp 0x1002f26c
mov dword [ebp - 0x10], ebx
mov ebx, ecx
shr ebx, 0x10
mov esi, ecx
shr esi, 8
mov eax, 0xff
mov edx, ecx
and edx, eax
and esi, eax
and ebx, eax
mov eax, ecx
shr eax, 0x18
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [edi + 0x80]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov dword [ebp - 0x18], edi
mov edi, dword [edi + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x14], eax
shl esi, 8
or ecx, esi
mov ebx, edi
cmp edx, edi
je 0x1002f22e
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x1002f230
mov eax, edi
xor esi, esi
cmp ebx, eax
je 0x1002f23f
cmp dword [ebx + 8], ecx
je 0x1002f244
mov ebx, dword [ebx]
jmp 0x1002f21d
mov edx, dword [ebp + 0xc]
jmp 0x1002f26e
cmp ebx, edx
mov edx, dword [ebp + 0xc]
je 0x1002f26e
mov esi, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x10]
test esi, esi
je 0x1002f26c
cmp dword [esi + 0x174], 0
je 0x1002f26e
mov ecx, esi
push ebx
mov edi, edx
call fcn.1005d010
mov edx, edi
jmp 0x1002f26e
xor esi, esi
mov ecx, esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edx
call fcn.10060890
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x1002f290
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, dword [ebx + 0x1278]
cmp dword [edi + 0x60], ecx
jbe 0x1002f2c0
mov eax, dword [edi + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x1002f361
jmp 0x1002f37c
mov dword [ebp - 0x10], ebx
mov ebx, ecx
shr ebx, 0x10
mov esi, ecx
shr esi, 8
mov eax, 0xff
mov edx, ecx
and edx, eax
and esi, eax
and ebx, eax
mov eax, ecx
shr eax, 0x18
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [edi + 0x80]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov dword [ebp - 0x18], edi
mov edi, dword [edi + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x14], eax
shl esi, 8
or ecx, esi
mov ebx, edi
cmp edx, edi
je 0x1002f33e
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x1002f340
mov eax, edi
xor esi, esi
cmp ebx, eax
je 0x1002f34f
cmp dword [ebx + 8], ecx
je 0x1002f354
mov ebx, dword [ebx]
jmp 0x1002f32d
mov edx, dword [ebp + 0xc]
jmp 0x1002f37e
cmp ebx, edx
mov edx, dword [ebp + 0xc]
je 0x1002f37e
mov esi, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x10]
test esi, esi
je 0x1002f37c
cmp dword [esi + 0x174], 0
je 0x1002f37e
mov ecx, esi
push ebx
mov edi, edx
call fcn.1005d010
mov edx, edi
jmp 0x1002f37e
xor esi, esi
mov ecx, esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edx
call fcn.10060940
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x1002f3a0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, dword [ebx + 0x1278]
cmp dword [edi + 0x60], ecx
jbe 0x1002f3d0
mov eax, dword [edi + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x1002f471
jmp 0x1002f48c
mov dword [ebp - 0x10], ebx
mov ebx, ecx
shr ebx, 0x10
mov esi, ecx
shr esi, 8
mov eax, 0xff
mov edx, ecx
and edx, eax
and esi, eax
and ebx, eax
mov eax, ecx
shr eax, 0x18
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [edi + 0x80]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov dword [ebp - 0x18], edi
mov edi, dword [edi + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x14], eax
shl esi, 8
or ecx, esi
mov ebx, edi
cmp edx, edi
je 0x1002f44e
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x1002f450
mov eax, edi
xor esi, esi
cmp ebx, eax
je 0x1002f45f
cmp dword [ebx + 8], ecx
je 0x1002f464
mov ebx, dword [ebx]
jmp 0x1002f43d
mov edx, dword [ebp + 0xc]
jmp 0x1002f48e
cmp ebx, edx
mov edx, dword [ebp + 0xc]
je 0x1002f48e
mov esi, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x10]
test esi, esi
je 0x1002f48c
cmp dword [esi + 0x174], 0
je 0x1002f48e
mov ecx, esi
push ebx
mov edi, edx
call fcn.1005d010
mov edx, edi
jmp 0x1002f48e
xor esi, esi
mov ecx, esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edx
call fcn.100609d0
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x1002f500
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, dword [ebx + 0x1278]
cmp dword [edi + 0x60], ecx
jbe 0x1002f530
mov eax, dword [edi + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x1002f5d1
jmp 0x1002f5ec
mov dword [ebp - 0x10], ebx
mov ebx, ecx
shr ebx, 0x10
mov esi, ecx
shr esi, 8
mov eax, 0xff
mov edx, ecx
and edx, eax
and esi, eax
and ebx, eax
mov eax, ecx
shr eax, 0x18
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [edi + 0x80]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov dword [ebp - 0x18], edi
mov edi, dword [edi + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x14], eax
shl esi, 8
or ecx, esi
mov ebx, edi
cmp edx, edi
je 0x1002f5ae
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x1002f5b0
mov eax, edi
xor esi, esi
cmp ebx, eax
je 0x1002f5bf
cmp dword [ebx + 8], ecx
je 0x1002f5c4
mov ebx, dword [ebx]
jmp 0x1002f59d
mov edx, dword [ebp + 0xc]
jmp 0x1002f5ee
cmp ebx, edx
mov edx, dword [ebp + 0xc]
je 0x1002f5ee
mov esi, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x10]
test esi, esi
je 0x1002f5ec
cmp dword [esi + 0x174], 0
je 0x1002f5ee
mov ecx, esi
push ebx
mov edi, edx
call fcn.1005d010
mov edx, edi
jmp 0x1002f5ee
xor esi, esi
mov ecx, esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edx
call fcn.10060a70
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x1002f650
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, dword [ebx + 0x1278]
cmp dword [edi + 0x60], ecx
jbe 0x1002f680
mov eax, dword [edi + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x1002f721
jmp 0x1002f73c
mov dword [ebp - 0x10], ebx
mov ebx, ecx
shr ebx, 0x10
mov esi, ecx
shr esi, 8
mov eax, 0xff
mov edx, ecx
and edx, eax
and esi, eax
and ebx, eax
mov eax, ecx
shr eax, 0x18
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [edi + 0x80]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov dword [ebp - 0x18], edi
mov edi, dword [edi + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x14], eax
shl esi, 8
or ecx, esi
mov ebx, edi
cmp edx, edi
je 0x1002f6fe
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x1002f700
mov eax, edi
xor esi, esi
cmp ebx, eax
je 0x1002f70f
cmp dword [ebx + 8], ecx
je 0x1002f714
mov ebx, dword [ebx]
jmp 0x1002f6ed
mov edx, dword [ebp + 0xc]
jmp 0x1002f73e
cmp ebx, edx
mov edx, dword [ebp + 0xc]
je 0x1002f73e
mov esi, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x10]
test esi, esi
je 0x1002f73c
cmp dword [esi + 0x174], 0
je 0x1002f73e
mov ecx, esi
push ebx
mov edi, edx
call fcn.1005d010
mov edx, edi
jmp 0x1002f73e
xor esi, esi
mov ecx, esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edx
call fcn.10060b20
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x10