joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1001bd30
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 8
mov edx, dword [ebp + 8]
cmp dword [ecx + 0x1d9c], edx
jbe 0x1001bd5a
mov eax, dword [ecx + 0x1da0]
mov ecx, dword [eax + edx*4]
xor eax, eax
cmp ecx, 0xffffffff
cmovne eax, ecx
jmp 0x1001bdf4
mov edi, edx
shr edi, 0x10
mov eax, edx
shr eax, 8
mov esi, 0xff
mov ebx, edx
and ebx, esi
and eax, esi
and edi, esi
mov esi, edx
shr esi, 0x18
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, edi
imul ebx, ebx, 0x1000193
xor ebx, esi
imul ebx, ebx, 0x1000193
and ebx, dword [ecx + 0x1dbc]
mov esi, dword [ecx + 0x1da8]
mov ecx, dword [ecx + 0x1db0]
shl edi, 0x10
and edx, 0xff0000ff
or edx, edi
mov dword [ebp - 0x14], ecx
mov ecx, dword [ecx + ebx*8]
lea edi, [ebx + ebx]
inc edi
mov dword [ebp - 0x10], edi
shl eax, 8
or edx, eax
mov edi, ecx
cmp esi, ecx
je 0x1001bddc
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
mov eax, dword [eax + ebx*4]
mov ebx, dword [eax]
jmp 0x1001bdde
mov ebx, ecx
xor eax, eax
cmp edi, ebx
je 0x1001bdf4
cmp dword [edi + 8], edx
je 0x1001bded
mov edi, dword [edi]
jmp 0x1001bdcb
cmp edi, esi
je 0x1001bdf4
mov eax, dword [edi + 0xc]
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret 4
Function at 0x1001cf40
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edx, ecx
mov ecx, dword [ebp + 0xc]
mov eax, dword [edx + 0x127c]
cmp dword [eax + 0x38], ecx
jbe 0x1001cf6c
mov eax, dword [eax + 0x3c]
mov eax, dword [eax + ecx*4]
xor ebx, ebx
cmp eax, 0xffffffff
cmovne ebx, eax
jmp 0x1001cffc
mov dword [ebp - 0x10], edx
mov esi, ecx
shr esi, 0x10
mov ebx, ecx
shr ebx, 8
mov edx, 0xff
mov edi, ecx
and edi, edx
and ebx, edx
and esi, edx
mov edx, ecx
shr edx, 0x18
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
xor edi, ebx
imul edi, edi, 0x1000193
xor edi, esi
imul edi, edi, 0x1000193
xor edi, edx
imul edi, edi, 0x1000193
and edi, dword [eax + 0x58]
mov edx, dword [eax + 0x44]
mov eax, dword [eax + 0x4c]
shl esi, 0x10
and ecx, 0xff0000ff
or ecx, esi
mov dword [ebp - 0x18], eax
mov eax, dword [eax + edi*8]
lea esi, [edi + edi]
inc esi
mov dword [ebp - 0x14], esi
shl ebx, 8
or ecx, ebx
mov esi, eax
cmp edx, eax
je 0x1001cfe8
mov edi, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x14]
mov edi, dword [edi + ebx*4]
mov edi, dword [edi]
jmp 0x1001cfea
mov edi, eax
xor ebx, ebx
cmp esi, edi
je 0x1001cff9
cmp dword [esi + 8], ecx
je 0x1001d042
mov esi, dword [esi]
jmp 0x1001cfd7
mov edx, dword [ebp - 0x10]
mov al, byte [ebp + 0x14]
lea ecx, [edx + 8]
movzx eax, al
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push eax
push dword [ebp + 0x10]
push ebx
mov edi, dword [ebp + 8]
push edi
push edx
mov esi, edx
call fcn.10083420
shl edi, 4
add edi, dword [esi + 0x2090]
lea eax, [ebx + 0x18]
test ebx, ebx
cmove eax, ebx
mov ecx, edi
push eax
call fcn.100545d0
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x1c
cmp esi, edx
mov edx, dword [ebp - 0x10]
mov al, byte [ebp + 0x14]
je 0x1001cfff
mov ebx, dword [esi + 0xc]
jmp 0x1001cfff
Function at 0x1001d060
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov esi, ecx
mov eax, dword [ebp + 8]
add ecx, 8
mov edx, dword [esi + 0x1278]
cmp dword [edx + 0x60], eax
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x14], ecx
jbe 0x1001d096
mov ecx, dword [edx + 0x64]
mov ebx, dword [ecx + eax*4]
cmp ebx, 0xffffffff
jne 0x1001d12b
jmp 0x1001d142
mov edi, eax
shr edi, 0x10
mov ebx, eax
shr ebx, 8
mov ecx, 0xff
mov esi, eax
and esi, ecx
and ebx, ecx
and edi, ecx
mov ecx, eax
shr ecx, 0x18
xor esi, 0x811c9dc5
imul esi, esi, 0x1000193
xor esi, ebx
imul esi, esi, 0x1000193
xor esi, edi
imul esi, esi, 0x1000193
xor esi, ecx
imul esi, esi, 0x1000193
and esi, dword [edx + 0x80]
mov ecx, dword [edx + 0x6c]
mov edx, dword [edx + 0x74]
shl edi, 0x10
and eax, 0xff0000ff
or eax, edi
mov dword [ebp - 0x1c], edx
mov edx, dword [edx + esi*8]
add esi, esi
inc esi
mov dword [ebp - 0x18], esi
shl ebx, 8
or eax, ebx
mov edi, edx
cmp ecx, edx
je 0x1001d110
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x18]
mov esi, dword [esi + ebx*4]
mov esi, dword [esi]
jmp 0x1001d112
mov esi, edx
xor ebx, ebx
cmp edi, esi
je 0x1001d144
cmp dword [edi + 8], eax
je 0x1001d121
mov edi, dword [edi]
jmp 0x1001d0ff
cmp edi, ecx
je 0x1001d144
mov ebx, dword [edi + 0xc]
mov esi, dword [ebp - 0x10]
test ebx, ebx
je 0x1001d142
cmp dword [ebx + 0x174], 0
je 0x1001d144
mov ecx, ebx
push esi
call fcn.1005d010
jmp 0x1001d144
xor ebx, ebx
mov ecx, dword [ebp - 0x14]
push ebx
mov esi, dword [ebp - 0x10]
push esi
call fcn.10080180
cmp eax, 1
je 0x1001d163
lea ecx, [esi + 0x1ef8]
mov edx, esi
call fcn.1001d170
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret 4
Function at 0x1001d3e0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x14], ecx
mov edi, dword [ecx + 0x1278]
cmp dword [edi + 0x60], edx
jbe 0x1001d45a
mov eax, dword [edi + 0x64]
mov eax, dword [eax + edx*4]
xor esi, esi
cmp eax, 0xffffffff
cmovne esi, eax
mov edx, dword [ebp + 8]
mov edi, dword [ebp - 0x14]
lea eax, [edi + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [edi + 0x1290]
push edx
push dword [edi + 0x1bf4]
call fcn.1001d500
mov ebx, eax
mov ecx, eax
push esi
push dword [ebp + 0xc]
push edi
call fcn.100734a0
mov ecx, dword [ebp - 0x10]
push ebx
push edi
call fcn.10080830
cmp eax, 1
je 0x1001d450
lea ecx, [edi + 0x1ef8]
mov edx, edi
call fcn.1001d170
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
mov eax, edx
shr eax, 0x10
mov esi, edx
shr esi, 8
mov ecx, 0xff
mov ebx, edx
and ebx, ecx
and esi, ecx
and eax, ecx
mov ecx, edx
shr ecx, 0x18
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, esi
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, ecx
imul ebx, ebx, 0x1000193
and ebx, dword [edi + 0x80]
mov ecx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl eax, 0x10
and edx, 0xff0000ff
or edx, eax
mov dword [ebp - 0x10], edi
mov edi, dword [edi + ebx*8]
lea eax, [ebx + ebx]
inc eax
mov dword [ebp - 0x18], eax
shl esi, 8
or edx, esi
mov eax, edi
cmp ecx, edi
je 0x1001d4d6
mov esi, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x18]
mov esi, dword [esi + ebx*4]
mov ebx, dword [esi]
jmp 0x1001d4d8
mov ebx, edi
xor esi, esi
cmp eax, ebx
je 0x1001d408
cmp dword [eax + 8], edx
je 0x1001d4eb
mov eax, dword [eax]
jmp 0x1001d4c5
cmp eax, ecx
mov edx, dword [ebp + 8]
je 0x1001d40b
mov esi, dword [eax + 0xc]
jmp 0x1001d40b
Function at 0x1001d780
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1c
mov esi, dword [ebp + 8]
mov eax, dword [0x1038100c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ecx + 0x1e4c], esi
mov dword [ebp - 0x20], ecx
jbe 0x1001d7b8
mov eax, dword [ecx + 0x1e50]
mov edi, dword [eax + esi*4]
cmp edi, 0xffffffff
jne 0x1001d850
jmp 0x1001d858
mov eax, esi
shr eax, 0x18
mov edx, esi
shr edx, 0x10
mov ecx, esi
shr ecx, 8
mov edi, esi
mov esi, 0xff
and edi, esi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
and ecx, esi
xor edi, ecx
imul edi, edi, 0x1000193
and edx, esi
xor edi, edx
imul esi, edi, 0x1000193
xor esi, eax
imul ebx, esi, 0x1000193
mov esi, dword [ebp - 0x20]
and ebx, dword [esi + 0x1e6c]
mov eax, dword [esi + 0x1e58]
shl edx, 0x10
mov edi, dword [ebp + 8]
and edi, 0xff0000ff
or edi, edx
mov edx, dword [esi + 0x1e60]
shl ecx, 8
or edi, ecx
mov esi, dword [edx + ebx*8]
lea ecx, [ebx + ebx]
inc ecx
mov dword [ebp - 0x24], ecx
mov ecx, esi
cmp eax, esi
je 0x1001d83a
mov ebx, dword [ebp - 0x24]
mov ebx, dword [edx + ebx*4]
mov ebx, dword [ebx]
jmp 0x1001d83c
mov ebx, esi
cmp ecx, ebx
je 0x1001d858
cmp dword [ecx + 8], edi
je 0x1001d849
mov ecx, dword [ecx]
jmp 0x1001d82c
cmp ecx, eax
je 0x1001d858
mov edi, dword [ecx + 0xc]
test edi, edi
jne 0x1001d951
push 0x58
call dword [sym.imp.mozglue.dll_moz_xmalloc]
add esp, 4
mov edi, eax
mov ebx, dword [ebp - 0x20]
lea eax, [ebx + 0x20]
mov ecx, edi
push eax
mov esi, dword [ebp + 8]
push esi
push dword [ebx + 0x1bf4]
call fcn.1008aef0
inc dword [edi + 4]
mov dword [ebp - 0x1c], esi
cmp esi, 0x3fff
ja 0x1001d931
mov eax, dword [ebx + 0x1e4c]
cmp eax, esi
mov ecx, ebx
ja 0x1001d926
mov ebx, eax
add eax, eax
cmp ebx, esi
jbe 0x1001d89f
xor ecx, ecx
dec ecx
mov edx, 4
mov eax, ebx
mul edx
cmovo eax, ecx
mov esi, dword [ebp - 0x20]
mov ecx, dword [esi + 0x1e50]
mov dword [ebp - 0x24], ecx
push eax
call dword [sym.imp.mozglue.dll_moz_xmalloc]
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [esi + 0x1e50], eax
mov esi, dword [esi + 0x1e4c]
lea edx, [eax + esi*4]
mov ecx, ebx
sub ecx, esi
shl ecx, 2
push ecx
push 0xff
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
shl esi, 2
push esi
mov esi, dword [ebp + 8]
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
add esp, 0xc
mov dword [ecx + 0x1e4c], ebx
test eax, eax
je 0x1001d926
push eax
call dword [sym.imp.mozglue.dll_free]
mov ecx, dword [ebp - 0x20]
add esp, 4
shl esi, 2
add esi, dword [ecx + 0x1e50]
jmp 0x1001d94f
add ebx, 0x1e54
lea eax, [ebp - 0x1c]
lea esi, [ebp - 0x18]
mov ecx, ebx
mov edx, esi
push eax
call fcn.10032d90
add esp, 4
mov esi, dword [esi]
add esi, 0xc
mov dword [esi], edi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1021e470
mov eax, edi
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 4
Function at 0x1001dce0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, dword [ebp + 8]
mov eax, dword [0x1038100c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ecx + 0x1d9c], ebx
mov dword [ebp - 0x1c], ecx
jbe 0x1001dd18
mov eax, dword [ecx + 0x1da0]
mov eax, dword [eax + ebx*4]
cmp eax, 0xffffffff
jne 0x1001ddbe
jmp 0x1001ddf1
mov eax, ebx
shr eax, 0x18
mov dword [ebp - 0x18], eax
mov esi, ebx
shr esi, 0x10
mov edx, ebx
shr edx, 8
mov edi, ebx
mov eax, 0xff
and edi, eax
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
mov eax, 0xff
and edx, eax
mov eax, 0xff
mov dword [ebp - 0x20], edx
xor edi, edx
imul edi, edi, 0x1000193
and esi, eax
xor edi, esi
imul edx, edi, 0x1000193
xor edx, dword [ebp - 0x18]
imul eax, edx, 0x1000193
and eax, dword [ecx + 0x1dbc]
mov edx, dword [ecx + 0x1da8]
mov ecx, dword [ecx + 0x1db0]
shl esi, 0x10
and ebx, 0xff0000ff
or ebx, esi
mov dword [ebp - 0x18], ecx
mov edi, dword [ecx + eax*8]
lea ecx, [eax + eax]
inc ecx
mov eax, dword [ebp - 0x20]
shl eax, 8
or ebx, eax
mov esi, edi
cmp edx, edi
je 0x1001dda8
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + ecx*4]
mov eax, dword [eax]
jmp 0x1001ddaa
mov eax, edi
cmp esi, eax
je 0x1001ddf1
cmp dword [esi + 8], ebx
je 0x1001ddb7
mov esi, dword [esi]
jmp 0x1001dd9a
cmp esi, edx
je 0x1001ddf1
mov eax, dword [esi + 0xc]
test eax, eax
je 0x1001ddf1
mov ecx, dword [ebp + 0xc]
cmp ecx, 0x8867
je 0x1001de1b
cmp ecx, 0x8866
jne 0x1001de07
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x20]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
call ebx
jmp 0x1001de07
mov eax, dword [ebp + 0xc]
and eax, 0xfffffffe
cmp eax, 0x8866
jne 0x1001de07
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1021e470
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
mov byte [ebp - 0x11], 0
mov ecx, dword [ebp - 0x1c]
cmp byte [ecx + 0x1ed5], 0
je 0x1001de30
xor eax, eax
inc eax
jmp 0x1001de54
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov esi, ecx
mov ebx, dword [eax + 0x24]
mov ecx, ebx
call dword [section..00cfg]
lea eax, [ebp - 0x11]
mov ecx, edi
push eax
push esi
call ebx
cmp eax, 1
je 0x1001de07
movzx eax, byte [ebp - 0x11]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
jmp 0x1001de07
Function at 0x1001de60
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, dword [ebp + 8]
mov eax, dword [0x1038100c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ecx + 0x1d9c], ebx
mov dword [ebp - 0x1c], ecx
jbe 0x1001de98
mov eax, dword [ecx + 0x1da0]
mov eax, dword [eax + ebx*4]
cmp eax, 0xffffffff
jne 0x1001df3e
jmp 0x1001df71
mov eax, ebx
shr eax, 0x18
mov dword [ebp - 0x18], eax
mov esi, ebx
shr esi, 0x10
mov edx, ebx
shr edx, 8
mov edi, ebx
mov eax, 0xff
and edi, eax
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
mov eax, 0xff
and edx, eax
mov eax, 0xff
mov dword [ebp - 0x20], edx
xor edi, edx
imul edi, edi, 0x1000193
and esi, eax
xor edi, esi
imul edx, edi, 0x1000193
xor edx, dword [ebp - 0x18]
imul eax, edx, 0x1000193
and eax, dword [ecx + 0x1dbc]
mov edx, dword [ecx + 0x1da8]
mov ecx, dword [ecx + 0x1db0]
shl esi, 0x10
and ebx, 0xff0000ff
or ebx, esi
mov dword [ebp - 0x18], ecx
mov edi, dword [ecx + eax*8]
lea ecx, [eax + eax]
inc ecx
mov eax, dword [ebp - 0x20]
shl eax, 8
or ebx, eax
mov esi, edi
cmp edx, edi
je 0x1001df28
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + ecx*4]
mov eax, dword [eax]
jmp 0x1001df2a
mov eax, edi
cmp esi, eax
je 0x1001df71
cmp dword [esi + 8], ebx
je 0x1001df37
mov esi, dword [esi]
jmp 0x1001df1a
cmp esi, edx
je 0x1001df71
mov eax, dword [esi + 0xc]
test eax, eax
je 0x1001df71
mov ecx, dword [ebp + 0xc]
cmp ecx, 0x8867
je 0x1001df9b
cmp ecx, 0x8866
jne 0x1001df87
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x1c]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
call ebx
jmp 0x1001df87
mov eax, dword [ebp + 0xc]
and eax, 0xfffffffe
cmp eax, 0x8866
jne 0x1001df87
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1021e470
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
mov byte [ebp - 0x11], 0
mov ecx, dword [ebp - 0x1c]
cmp byte [ecx + 0x1ed5], 0
je 0x1001dfb0
xor eax, eax
inc eax
jmp 0x1001dfd4
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov esi, ecx
mov ebx, dword [eax + 0x24]
mov ecx, ebx
call dword [section..00cfg]
lea eax, [ebp - 0x11]
mov ecx, edi
push eax
push esi
call ebx
cmp eax, 1
je 0x1001df87
movzx eax, byte [ebp - 0x11]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
jmp 0x1001df87
Function at 0x1001dfe0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, dword [ebp + 8]
mov eax, dword [0x1038100c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ecx + 0x1d9c], ebx
mov dword [ebp - 0x1c], ecx
jbe 0x1001e018
mov eax, dword [ecx + 0x1da0]
mov eax, dword [eax + ebx*4]
cmp eax, 0xffffffff
jne 0x1001e0be
jmp 0x1001e0f1
mov eax, ebx
shr eax, 0x18
mov dword [ebp - 0x18], eax
mov esi, ebx
shr esi, 0x10
mov edx, ebx
shr edx, 8
mov edi, ebx
mov eax, 0xff
and edi, eax
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
mov eax, 0xff
and edx, eax
mov eax, 0xff
mov dword [ebp - 0x20], edx
xor edi, edx
imul edi, edi, 0x1000193
and esi, eax
xor edi, esi
imul edx, edi, 0x1000193
xor edx, dword [ebp - 0x18]
imul eax, edx, 0x1000193
and eax, dword [ecx + 0x1dbc]
mov edx, dword [ecx + 0x1da8]
mov ecx, dword [ecx + 0x1db0]
shl esi, 0x10
and ebx, 0xff0000ff
or ebx, esi
mov dword [ebp - 0x18], ecx
mov edi, dword [ecx + eax*8]
lea ecx, [eax + eax]
inc ecx
mov eax, dword [ebp - 0x20]
shl eax, 8
or ebx, eax
mov esi, edi
cmp edx, edi
je 0x1001e0a8
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + ecx*4]
mov eax, dword [eax]
jmp 0x1001e0aa
mov eax, edi
cmp esi, eax
je 0x1001e0f1
cmp dword [esi + 8], ebx
je 0x1001e0b7
mov esi, dword [esi]
jmp 0x1001e09a
cmp esi, edx
je 0x1001e0f1
mov eax, dword [esi + 0xc]
test eax, eax
je 0x1001e0f1
mov ecx, dword [ebp + 0xc]
cmp ecx, 0x8867
je 0x1001e11c
cmp ecx, 0x8866
jne 0x1001e108
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x18]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
call ebx
jmp 0x1001e108
mov eax, dword [ebp + 0xc]
and eax, 0xfffffffe
cmp eax, 0x8866
jne 0x1001e108
xor eax, eax
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1021e470
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
mov byte [ebp - 0x11], 0
mov ecx, dword [ebp - 0x1c]
cmp byte [ecx + 0x1ed5], 0
je 0x1001e131
xor eax, eax
inc eax
jmp 0x1001e155
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov esi, ecx
mov ebx, dword [eax + 0x24]
mov ecx, ebx
call dword [section..00cfg]
lea eax, [ebp - 0x11]
mov ecx, edi
push eax
push esi
call ebx
cmp eax, 1
je 0x1001e108
movzx eax, byte [ebp - 0x11]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov dword [ecx + 4], 0
jmp 0x1001e108
Function at 0x1001e170
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, dword [ebp + 8]
mov eax, dword [0x1038100c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ecx + 0x1d9c], ebx
mov dword [ebp - 0x1c], ecx
jbe 0x1001e1a8
mov eax, dword [ecx + 0x1da0]
mov eax, dword [eax + ebx*4]
cmp eax, 0xffffffff
jne 0x1001e24e
jmp 0x1001e281
mov eax, ebx
shr eax, 0x18
mov dword [ebp - 0x18], eax
mov esi, ebx
shr esi, 0x10
mov edx, ebx
shr edx, 8
mov edi, ebx
mov eax, 0xff
and edi, eax
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
mov eax, 0xff
and edx, eax
mov eax, 0xff
mov dword [ebp - 0x20], edx
xor edi, edx
imul edi, edi, 0x1000193
and esi, eax
xor edi, esi
imul edx, edi, 0x1000193
xor edx, dword [ebp - 0x18]
imul eax, edx, 0x1000193
and eax, dword [ecx + 0x1dbc]
mov edx, dword [ecx + 0x1da8]
mov ecx, dword [ecx + 0x1db0]
shl esi, 0x10
and ebx, 0xff0000ff
or ebx, esi
mov dword [ebp - 0x18], ecx
mov edi, dword [ecx + eax*8]
lea ecx, [eax + eax]
inc ecx
mov eax, dword [ebp - 0x20]
shl eax, 8
or ebx, eax
mov esi, edi
cmp edx, edi
je 0x1001e238
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + ecx*4]
mov eax, dword [eax]
jmp 0x1001e23a
mov eax, edi
cmp esi, eax
je 0x1001e281
cmp dword [esi + 8], ebx
je 0x1001e247
mov esi, dword [esi]
jmp 0x1001e22a
cmp esi, edx
je 0x1001e281
mov eax, dword [esi + 0xc]
test eax, eax
je 0x1001e281
mov ecx, dword [ebp + 0xc]
cmp ecx, 0x8867
je 0x1001e2ac
cmp ecx, 0x8866
jne 0x1001e298
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x14]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
call ebx
jmp 0x1001e298
mov eax, dword [ebp + 0xc]
and eax, 0xfffffffe
cmp eax, 0x8866
jne 0x1001e298
xor eax, eax
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1021e470
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
mov byte [ebp - 0x11], 0
mov ecx, dword [ebp - 0x1c]
cmp byte [ecx + 0x1ed5], 0
je 0x1001e2c1
xor eax, eax
inc eax
jmp 0x1001e2e5
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov esi, ecx
mov ebx, dword [eax + 0x24]
mov ecx, ebx
call dword [section..00cfg]
lea eax, [ebp - 0x11]
mov ecx, edi
push eax
push esi
call ebx
cmp eax, 1
je 0x1001e298
movzx eax, byte [ebp - 0x11]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov dword [ecx + 4], 0
jmp 0x1001e298
Function at 0x1001e300
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 8
mov edx, dword [ebp + 8]
cmp dword [ecx + 0x1d44], edx
jbe 0x1001e32a
mov eax, dword [ecx + 0x1d48]
mov ecx, dword [eax + edx*4]
xor eax, eax
cmp ecx, 0xffffffff
cmovne eax, ecx
jmp 0x1001e3c4
mov edi, edx
shr edi, 0x10
mov eax, edx
shr eax, 8
mov esi, 0xff
mov ebx, edx
and ebx, esi
and eax, esi
and edi, esi
mov esi, edx
shr esi, 0x18
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, edi
imul ebx, ebx, 0x1000193
xor ebx, esi
imul ebx, ebx, 0x1000193
and ebx, dword [ecx + 0x1d64]
mov esi, dword [ecx + 0x1d50]
mov ecx, dword [ecx + 0x1d58]
shl edi, 0x10
and edx, 0xff0000ff
or edx, edi
mov dword [ebp - 0x14], ecx
mov ecx, dword [ecx + ebx*8]
lea edi, [ebx + ebx]
inc edi
mov dword [ebp - 0x10], edi
shl eax, 8
or edx, eax
mov edi, ecx
cmp esi, ecx
je 0x1001e3ac
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
mov eax, dword [eax + ebx*4]
mov ebx, dword [eax]
jmp 0x1001e3ae
mov ebx, ecx
xor eax, eax
cmp edi, ebx
je 0x1001e3c4
cmp dword [edi + 8], edx
je 0x1001e3bd
mov edi, dword [edi]
jmp 0x1001e39b
cmp edi, esi
je 0x1001e3c4
mov eax, dword [edi + 0xc]
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret 4

Function at 0x10020a10
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, dword [ebx + 0x1278]
cmp dword [edi + 0x60], ecx
jbe 0x10020a40
mov eax, dword [edi + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x10020ae1
jmp 0x10020afc
mov dword [ebp - 0x10], ebx
mov ebx, ecx
shr ebx, 0x10
mov esi, ecx
shr esi, 8
mov eax, 0xff
mov edx, ecx
and edx, eax
and esi, eax
and ebx, eax
mov eax, ecx
shr eax, 0x18
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [edi + 0x80]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov dword [ebp - 0x18], edi
mov edi, dword [edi + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x14], eax
shl esi, 8
or ecx, esi
mov ebx, edi
cmp edx, edi
je 0x10020abe
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x10020ac0
mov eax, edi
xor esi, esi
cmp ebx, eax
je 0x10020acf
cmp dword [ebx + 8], ecx
je 0x10020ad4
mov ebx, dword [ebx]
jmp 0x10020aad
mov edx, dword [ebp + 0xc]
jmp 0x10020afe
cmp ebx, edx
mov edx, dword [ebp + 0xc]
je 0x10020afe
mov esi, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x10]
test esi, esi
je 0x10020afc
cmp dword [esi + 0x174], 0
je 0x10020afe
mov ecx, esi
push ebx
mov edi, edx
call fcn.1005d010
mov edx, edi
jmp 0x10020afe
xor esi, esi
mov ecx, esi
push dword [ebp + 0x10]
push edx
call fcn.10059a00
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x10020b20
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, dword [ebx + 0x1278]
cmp dword [edi + 0x60], ecx
jbe 0x10020b50
mov eax, dword [edi + 0x64]
mov esi, dword [eax + ecx*4]
cmp esi, 0xffffffff
jne 0x10020bf1
jmp 0x10020c0c
mov dword [ebp - 0x10], ebx
mov ebx, ecx
shr ebx, 0x10
mov esi, ecx
shr esi, 8
mov eax, 0xff
mov edx, ecx
and edx, eax
and esi, eax
and ebx, eax
mov eax, ecx
shr eax, 0x18
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [edi + 0x80]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x74]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov dword [ebp - 0x18], edi
mov edi, dword [edi + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x14], eax
shl esi, 8
or ecx, esi
mov ebx, edi
cmp edx, edi
je 0x10020bce
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x10020bd0
mov eax, edi
xor esi, esi
cmp ebx, eax
je 0x10020bdf
cmp dword [ebx + 8], ecx
je 0x10020be4
mov ebx, dword [ebx]
jmp 0x10020bbd
mov edx, dword [ebp + 0xc]
jmp 0x10020c0e
cmp ebx, edx
mov edx, dword [ebp + 0xc]
je 0x10020c0e
mov esi, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x10]
test esi, esi
je 0x10020c0c
cmp dword [esi + 0x174], 0
je 0x10020c0e
mov ecx, esi
push ebx
mov edi, edx
call fcn.1005d010
mov edx, edi
jmp 0x10020c0e
xor esi, esi
push dword [ebp + 0x10]
push edx
push esi
call fcn.100b4970
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret 0xc