joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10016660
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1c
mov esi, ecx
mov ecx, dword [ebp + 8]
mov eax, dword [0x1038000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [esi + 0x1ea4], ecx
jbe 0x10016697
mov eax, dword [esi + 0x1ea8]
mov ebx, dword [eax + ecx*4]
cmp ebx, 0xffffffff
jne 0x1001672d
jmp 0x10016812
mov edi, dword [ebp + 8]
mov ecx, edi
shr ecx, 0x18
mov ebx, edi
shr ebx, 0x10
mov eax, edi
shr eax, 8
mov edx, esi
mov esi, 0xff
and edi, esi
and eax, esi
and ebx, esi
mov dword [ebp - 0x28], edi
mov esi, edi
xor esi, 0x811c9dc5
imul esi, esi, 0x1000193
xor esi, eax
imul esi, esi, 0x1000193
xor esi, ebx
imul esi, esi, 0x1000193
xor esi, ecx
imul esi, esi, 0x1000193
and esi, dword [edx + 0x1ec4]
mov edi, dword [edx + 0x1eb0]
mov dword [ebp - 0x20], edx
mov edx, dword [edx + 0x1eb8]
mov ecx, dword [edx + esi*8 + 4]
mov dword [ebp - 0x24], edi
cmp ecx, edi
je 0x10016812
mov edi, dword [ebp + 8]
and edi, 0xff000000
shl ebx, 0x10
or ebx, edi
shl eax, 8
or eax, ebx
add eax, dword [ebp - 0x28]
cmp eax, dword [ecx + 8]
jne 0x10016816
mov esi, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0x24]
je 0x10016735
mov ebx, dword [ecx + 0xc]
test ebx, ebx
jne 0x10016868
mov bl, byte [ebp + 0xc]
push 0x38
call dword [sym.imp.mozglue.dll_moz_xmalloc]
add esp, 4
movzx edx, bl
mov ebx, eax
mov ecx, eax
mov edi, dword [ebp + 8]
push edi
push edx
push dword [esi + 0x1d14]
call fcn.10075960
inc dword [ebx + 4]
mov dword [ebp - 0x1c], edi
cmp edi, 0x3fff
ja 0x10016848
mov eax, dword [esi + 0x1ea4]
cmp eax, dword [ebp + 8]
ja 0x10016804
mov dword [ebp - 0x28], ebx
mov ebx, eax
add eax, eax
cmp ebx, dword [ebp + 8]
jbe 0x1001677e
mov edi, dword [esi + 0x1ea8]
lea eax, [ebx*4]
xor ecx, ecx
dec ecx
cmp ebx, 0x40000000
cmovb ecx, eax
push ecx
call dword [sym.imp.mozglue.dll_moz_xmalloc]
add esp, 4
mov ecx, eax
mov dword [ebp - 0x24], eax
mov dword [esi + 0x1ea8], eax
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x20]
mov esi, dword [eax + 0x1ea4]
lea eax, [ecx + esi*4]
mov ecx, ebx
sub ecx, esi
shl ecx, 2
push ecx
push 0xff
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
shl esi, 2
push esi
mov esi, dword [ebp - 0x20]
push edi
push dword [ebp - 0x24]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [esi + 0x1ea4], ebx
test edi, edi
mov ebx, dword [ebp - 0x28]
je 0x10016804
push edi
call dword [sym.imp.mozglue.dll_free]
add esp, 4
mov eax, dword [ebp + 8]
shl eax, 2
add eax, dword [esi + 0x1ea8]
jmp 0x10016866
xor ebx, ebx
jmp 0x10016868
add esi, esi
mov edx, dword [edx + esi*4]
mov esi, ecx
xor ebx, ebx
cmp esi, edx
je 0x10016868
mov esi, dword [esi + 4]
cmp eax, dword [esi + 8]
jne 0x1001681f
cmp esi, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
je 0x10016868
cmp ecx, edx
je 0x10016735
mov ecx, dword [ecx + 4]
cmp eax, dword [ecx + 8]
jne 0x10016833
jmp 0x10016725
add esi, 0x1eac
lea eax, [ebp - 0x1c]
lea edi, [ebp - 0x18]
mov ecx, esi
mov edx, edi
push eax
call fcn.1002ddc0
add esp, 4
mov eax, dword [edi]
add eax, 0xc
mov dword [eax], ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
mov eax, ebx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 8
Function at 0x10016980
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1c
mov esi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov eax, dword [0x1038000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ecx + 0x1ea4], edx
mov dword [ebp - 0x1c], ecx
jbe 0x100169bb
mov eax, dword [ecx + 0x1ea8]
mov eax, dword [eax + edx*4]
cmp eax, 0xffffffff
jne 0x10016a62
jmp 0x10016a92
mov eax, edx
shr eax, 0x18
mov dword [ebp - 0x18], eax
mov ebx, edx
shr ebx, 0x10
mov esi, ecx
mov ecx, edx
shr ecx, 8
mov edi, edx
mov eax, 0xff
and edi, eax
and ecx, eax
and ebx, eax
mov dword [ebp - 0x28], edi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
xor edi, ecx
imul edi, edi, 0x1000193
xor edi, ebx
imul edi, edi, 0x1000193
xor edi, dword [ebp - 0x18]
imul edi, edi, 0x1000193
and edi, dword [esi + 0x1ec4]
mov eax, dword [esi + 0x1eb0]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x1eb8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], eax
mov edi, dword [eax + edi*8 + 4]
cmp edi, dword [ebp - 0x18]
je 0x10016a92
and edx, 0xff000000
shl ebx, 0x10
or ebx, edx
shl ecx, 8
or ecx, ebx
add ecx, dword [ebp - 0x28]
cmp ecx, dword [edi + 8]
je 0x10016a5a
mov eax, dword [ebp - 0x24]
add eax, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4]
cmp edi, eax
je 0x10016a92
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x10016a4e
cmp edi, dword [ebp - 0x18]
je 0x10016a92
mov eax, dword [edi + 0xc]
test eax, eax
je 0x10016a92
cmp esi, 0x8867
je 0x10016aba
cmp esi, 0x8866
jne 0x10016aa6
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x20]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
call ebx
jmp 0x10016aa6
and esi, 0xfffffffe
cmp esi, 0x8866
jne 0x10016aa6
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
mov byte [ebp - 0x11], 0
mov ecx, dword [ebp - 0x1c]
cmp byte [ecx + 0x1fb9], 0
je 0x10016acf
xor eax, eax
inc eax
jmp 0x10016af3
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x24]
mov esi, ecx
mov ecx, ebx
call dword [section..00cfg]
lea eax, [ebp - 0x11]
mov ecx, edi
push eax
push esi
call ebx
cmp eax, 1
je 0x10016aa6
movzx eax, byte [ebp - 0x11]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
jmp 0x10016aa6
Function at 0x10016b00
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1c
mov esi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov eax, dword [0x1038000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ecx + 0x1ea4], edx
mov dword [ebp - 0x1c], ecx
jbe 0x10016b3b
mov eax, dword [ecx + 0x1ea8]
mov eax, dword [eax + edx*4]
cmp eax, 0xffffffff
jne 0x10016be2
jmp 0x10016c12
mov eax, edx
shr eax, 0x18
mov dword [ebp - 0x18], eax
mov ebx, edx
shr ebx, 0x10
mov esi, ecx
mov ecx, edx
shr ecx, 8
mov edi, edx
mov eax, 0xff
and edi, eax
and ecx, eax
and ebx, eax
mov dword [ebp - 0x28], edi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
xor edi, ecx
imul edi, edi, 0x1000193
xor edi, ebx
imul edi, edi, 0x1000193
xor edi, dword [ebp - 0x18]
imul edi, edi, 0x1000193
and edi, dword [esi + 0x1ec4]
mov eax, dword [esi + 0x1eb0]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x1eb8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], eax
mov edi, dword [eax + edi*8 + 4]
cmp edi, dword [ebp - 0x18]
je 0x10016c12
and edx, 0xff000000
shl ebx, 0x10
or ebx, edx
shl ecx, 8
or ecx, ebx
add ecx, dword [ebp - 0x28]
cmp ecx, dword [edi + 8]
je 0x10016bda
mov eax, dword [ebp - 0x24]
add eax, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4]
cmp edi, eax
je 0x10016c12
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x10016bce
cmp edi, dword [ebp - 0x18]
je 0x10016c12
mov eax, dword [edi + 0xc]
test eax, eax
je 0x10016c12
cmp esi, 0x8867
je 0x10016c3a
cmp esi, 0x8866
jne 0x10016c26
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x1c]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
call ebx
jmp 0x10016c26
and esi, 0xfffffffe
cmp esi, 0x8866
jne 0x10016c26
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
mov byte [ebp - 0x11], 0
mov ecx, dword [ebp - 0x1c]
cmp byte [ecx + 0x1fb9], 0
je 0x10016c4f
xor eax, eax
inc eax
jmp 0x10016c73
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x24]
mov esi, ecx
mov ecx, ebx
call dword [section..00cfg]
lea eax, [ebp - 0x11]
mov ecx, edi
push eax
push esi
call ebx
cmp eax, 1
je 0x10016c26
movzx eax, byte [ebp - 0x11]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
jmp 0x10016c26
Function at 0x10016c80
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1c
mov esi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov eax, dword [0x1038000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ecx + 0x1ea4], edx
mov dword [ebp - 0x1c], ecx
jbe 0x10016cbb
mov eax, dword [ecx + 0x1ea8]
mov eax, dword [eax + edx*4]
cmp eax, 0xffffffff
jne 0x10016d62
jmp 0x10016d92
mov eax, edx
shr eax, 0x18
mov dword [ebp - 0x18], eax
mov ebx, edx
shr ebx, 0x10
mov esi, ecx
mov ecx, edx
shr ecx, 8
mov edi, edx
mov eax, 0xff
and edi, eax
and ecx, eax
and ebx, eax
mov dword [ebp - 0x28], edi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
xor edi, ecx
imul edi, edi, 0x1000193
xor edi, ebx
imul edi, edi, 0x1000193
xor edi, dword [ebp - 0x18]
imul edi, edi, 0x1000193
and edi, dword [esi + 0x1ec4]
mov eax, dword [esi + 0x1eb0]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x1eb8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], eax
mov edi, dword [eax + edi*8 + 4]
cmp edi, dword [ebp - 0x18]
je 0x10016d92
and edx, 0xff000000
shl ebx, 0x10
or ebx, edx
shl ecx, 8
or ecx, ebx
add ecx, dword [ebp - 0x28]
cmp ecx, dword [edi + 8]
je 0x10016d5a
mov eax, dword [ebp - 0x24]
add eax, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4]
cmp edi, eax
je 0x10016d92
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x10016d4e
cmp edi, dword [ebp - 0x18]
je 0x10016d92
mov eax, dword [edi + 0xc]
test eax, eax
je 0x10016d92
cmp esi, 0x8867
je 0x10016dbb
cmp esi, 0x8866
jne 0x10016da7
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x18]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
call ebx
jmp 0x10016da7
and esi, 0xfffffffe
cmp esi, 0x8866
jne 0x10016da7
xor eax, eax
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
mov byte [ebp - 0x11], 0
mov ecx, dword [ebp - 0x1c]
cmp byte [ecx + 0x1fb9], 0
je 0x10016dd0
xor eax, eax
inc eax
jmp 0x10016df4
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x24]
mov esi, ecx
mov ecx, ebx
call dword [section..00cfg]
lea eax, [ebp - 0x11]
mov ecx, edi
push eax
push esi
call ebx
cmp eax, 1
je 0x10016da7
movzx eax, byte [ebp - 0x11]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov dword [ecx + 4], 0
jmp 0x10016da7
Function at 0x10016e10
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1c
mov esi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov eax, dword [0x1038000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ecx + 0x1ea4], edx
mov dword [ebp - 0x1c], ecx
jbe 0x10016e4b
mov eax, dword [ecx + 0x1ea8]
mov eax, dword [eax + edx*4]
cmp eax, 0xffffffff
jne 0x10016ef2
jmp 0x10016f22
mov eax, edx
shr eax, 0x18
mov dword [ebp - 0x18], eax
mov ebx, edx
shr ebx, 0x10
mov esi, ecx
mov ecx, edx
shr ecx, 8
mov edi, edx
mov eax, 0xff
and edi, eax
and ecx, eax
and ebx, eax
mov dword [ebp - 0x28], edi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
xor edi, ecx
imul edi, edi, 0x1000193
xor edi, ebx
imul edi, edi, 0x1000193
xor edi, dword [ebp - 0x18]
imul edi, edi, 0x1000193
and edi, dword [esi + 0x1ec4]
mov eax, dword [esi + 0x1eb0]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x1eb8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], eax
mov edi, dword [eax + edi*8 + 4]
cmp edi, dword [ebp - 0x18]
je 0x10016f22
and edx, 0xff000000
shl ebx, 0x10
or ebx, edx
shl ecx, 8
or ecx, ebx
add ecx, dword [ebp - 0x28]
cmp ecx, dword [edi + 8]
je 0x10016eea
mov eax, dword [ebp - 0x24]
add eax, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4]
cmp edi, eax
je 0x10016f22
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x10016ede
cmp edi, dword [ebp - 0x18]
je 0x10016f22
mov eax, dword [edi + 0xc]
test eax, eax
je 0x10016f22
cmp esi, 0x8867
je 0x10016f4b
cmp esi, 0x8866
jne 0x10016f37
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x14]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
call ebx
jmp 0x10016f37
and esi, 0xfffffffe
cmp esi, 0x8866
jne 0x10016f37
xor eax, eax
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
mov byte [ebp - 0x11], 0
mov ecx, dword [ebp - 0x1c]
cmp byte [ecx + 0x1fb9], 0
je 0x10016f60
xor eax, eax
inc eax
jmp 0x10016f84
mov edi, dword [eax + 0x1c]
mov eax, dword [edi]
mov ebx, dword [eax + 0x24]
mov esi, ecx
mov ecx, ebx
call dword [section..00cfg]
lea eax, [ebp - 0x11]
mov ecx, edi
push eax
push esi
call ebx
cmp eax, 1
je 0x10016f37
movzx eax, byte [ebp - 0x11]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov dword [ecx + 4], 0
jmp 0x10016f37
Function at 0x10016fa0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov esi, dword [ebp + 8]
cmp dword [ecx + 0x1e58], esi
jbe 0x10016fca
mov eax, dword [ecx + 0x1e5c]
mov ecx, dword [eax + esi*4]
xor eax, eax
cmp ecx, 0xffffffff
cmovne eax, ecx
jmp 0x1001706b
mov ebx, esi
shr ebx, 0x10
mov edx, esi
shr edx, 8
mov eax, 0xff
mov edi, esi
and edi, eax
and edx, eax
and ebx, eax
mov eax, esi
shr eax, 0x18
mov dword [ebp - 0x18], edi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
xor edi, edx
imul edi, edi, 0x1000193
xor edi, ebx
imul edi, edi, 0x1000193
xor edi, eax
imul eax, edi, 0x1000193
and eax, dword [ecx + 0x1e78]
mov edi, dword [ecx + 0x1e64]
mov ecx, dword [ecx + 0x1e6c]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ecx + eax*8 + 4]
mov dword [ebp - 0x14], edi
cmp ecx, edi
je 0x10017049
and esi, 0xff000000
shl ebx, 0x10
or ebx, esi
shl edx, 8
or edx, ebx
add edx, dword [ebp - 0x18]
cmp edx, dword [ecx + 8]
jne 0x1001704d
xor eax, eax
jmp 0x10017063
xor eax, eax
jmp 0x1001706b
add eax, eax
mov esi, dword [ebp - 0x10]
mov esi, dword [esi + eax*4]
xor eax, eax
cmp ecx, esi
je 0x1001706b
mov ecx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
jne 0x10017057
cmp ecx, dword [ebp - 0x14]
je 0x1001706b
mov eax, dword [ecx + 0xc]
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 4

Function at 0x100197c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edx, ecx
mov esi, dword [ebp + 8]
mov edi, dword [ecx + 0x1368]
cmp dword [edi + 0x54], esi
jbe 0x100197e4
mov eax, dword [edi + 0x58]
mov esi, dword [eax + esi*4]
jmp 0x10019887
mov dword [ebp - 0x10], edx
mov ebx, esi
shr ebx, 0x10
mov ecx, esi
shr ecx, 8
mov edx, 0xff
mov eax, esi
and eax, edx
and ecx, edx
and ebx, edx
mov edx, esi
shr edx, 0x18
mov dword [ebp - 0x18], eax
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
xor eax, ecx
imul eax, eax, 0x1000193
xor eax, ebx
imul eax, eax, 0x1000193
xor eax, edx
imul edx, eax, 0x1000193
and edx, dword [edi + 0x74]
mov eax, dword [edi + 0x60]
mov edi, dword [edi + 0x68]
mov dword [ebp - 0x14], edi
mov edi, dword [edi + edx*8 + 4]
cmp edi, eax
je 0x10019859
and esi, 0xff000000
shl ebx, 0x10
or ebx, esi
shl ecx, 8
or ecx, ebx
add ecx, dword [ebp - 0x18]
cmp ecx, dword [edi + 8]
jne 0x10019862
mov esi, eax
jmp 0x1001985d
mov esi, eax
xor edi, edi
mov edx, dword [ebp - 0x10]
jmp 0x1001987f
mov esi, eax
add edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x10]
cmp edi, eax
je 0x1001987d
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x1001986f
jmp 0x1001987f
xor edi, edi
test edi, edi
cmovne esi, edi
mov esi, dword [esi + 0xc]
mov ebx, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
cmp dword [esi + 0x158], 0
je 0x1001989e
mov ecx, esi
push edx
call fcn.100599c0
mov ecx, esi
push ebx
push edi
call fcn.10057a30
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x100198c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov esi, dword [ecx + 0x1368]
cmp dword [esi + 0x54], edx
jbe 0x100198f3
mov eax, dword [esi + 0x58]
mov esi, dword [eax + edx*4]
cmp esi, 0xffffffff
mov edx, edi
jne 0x100199a2
jmp 0x100199c3
mov dword [ebp - 0x10], ecx
mov eax, edx
shr eax, 0x10
mov ecx, edx
shr ecx, 8
mov edi, 0xff
mov ebx, edx
and ebx, edi
and ecx, edi
and eax, edi
mov edi, edx
shr edi, 0x18
mov dword [ebp - 0x20], ebx
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, ecx
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, edi
imul edi, ebx, 0x1000193
and edi, dword [esi + 0x74]
mov ebx, dword [esi + 0x60]
mov esi, dword [esi + 0x68]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], esi
mov edi, dword [esi + edi*8 + 4]
xor esi, esi
mov dword [ebp - 0x1c], ebx
cmp edi, ebx
je 0x10019972
and edx, 0xff000000
shl eax, 0x10
or eax, edx
shl ecx, 8
or ecx, eax
add ecx, dword [ebp - 0x20]
cmp ecx, dword [edi + 8]
jne 0x1001997a
mov edx, dword [ebp + 0xc]
jmp 0x10019994
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
jmp 0x100199c5
mov eax, dword [ebp - 0x18]
add eax, eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp + 0xc]
cmp edi, eax
je 0x10019975
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x10019988
cmp edi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x10]
je 0x100199c5
mov esi, dword [edi + 0xc]
mov ecx, dword [ebp - 0x10]
test esi, esi
je 0x100199c3
cmp dword [esi + 0x158], 0
je 0x100199c5
mov eax, ecx
mov edi, ebx
mov ecx, esi
push eax
mov ebx, edx
call fcn.100599c0
mov edx, ebx
mov ebx, edi
jmp 0x100199c5
xor esi, esi
push ebx
push edx
push esi
call fcn.100c7970
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x100199e0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov esi, ecx
mov ebx, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edx, dword [esi + 0x1368]
cmp dword [edx + 0x54], ecx
jbe 0x10019a13
mov eax, dword [edx + 0x58]
mov eax, dword [eax + ecx*4]
cmp eax, 0xffffffff
jne 0x10019ac8
jmp 0x10019ae6
mov dword [ebp - 0x10], esi
mov ebx, ecx
shr ebx, 0x10
mov eax, ecx
shr eax, 8
mov edi, 0xff
mov esi, ecx
and esi, edi
and eax, edi
and ebx, edi
mov edi, ecx
shr edi, 0x18
mov dword [ebp - 0x1c], esi
xor esi, 0x811c9dc5
imul esi, esi, 0x1000193
xor esi, eax
imul esi, esi, 0x1000193
xor esi, ebx
imul esi, esi, 0x1000193
xor esi, edi
imul edi, esi, 0x1000193
and edi, dword [edx + 0x74]
mov esi, dword [edx + 0x60]
mov edx, dword [edx + 0x68]
mov dword [ebp - 0x18], edx
mov edx, dword [edx + edi*8 + 4]
cmp edx, esi
je 0x10019a93
and ecx, 0xff000000
shl ebx, 0x10
or ebx, ecx
shl eax, 8
or eax, ebx
add eax, dword [ebp - 0x1c]
cmp eax, dword [edx + 8]
mov dword [ebp - 0x14], esi
jne 0x10019a9e
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
jmp 0x10019abb
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
jmp 0x10019ae6
add edi, edi
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + edi*4]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
cmp edx, ecx
je 0x10019ae6
mov edx, dword [edx + 4]
cmp eax, dword [edx + 8]
jne 0x10019aaf
cmp edx, dword [ebp - 0x14]
mov eax, 0
je 0x10019ae8
mov eax, dword [edx + 0xc]
test eax, eax
je 0x10019ae6
cmp dword [eax + 0x158], 0
je 0x10019ae8
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push esi
call fcn.100599c0
mov eax, dword [ebp - 0x10]
jmp 0x10019ae8
xor eax, eax
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push ebx
push edi
push eax
push esi
call fcn.100c7d20
add esp, 0x2c
pop esi
pop edi
pop ebx
pop ebp
ret 0x18
Function at 0x10019b10
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov esi, dword [ecx + 0x1368]
cmp dword [esi + 0x54], edx
jbe 0x10019b43
mov eax, dword [esi + 0x58]
mov esi, dword [eax + edx*4]
cmp esi, 0xffffffff
mov edx, edi
jne 0x10019bf2
jmp 0x10019c13
mov dword [ebp - 0x10], ecx
mov eax, edx
shr eax, 0x10
mov ecx, edx
shr ecx, 8
mov edi, 0xff
mov ebx, edx
and ebx, edi
and ecx, edi
and eax, edi
mov edi, edx
shr edi, 0x18
mov dword [ebp - 0x20], ebx
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, ecx
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, edi
imul edi, ebx, 0x1000193
and edi, dword [esi + 0x74]
mov ebx, dword [esi + 0x60]
mov esi, dword [esi + 0x68]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], esi
mov edi, dword [esi + edi*8 + 4]
xor esi, esi
mov dword [ebp - 0x1c], ebx
cmp edi, ebx
je 0x10019bc2
and edx, 0xff000000
shl eax, 0x10
or eax, edx
shl ecx, 8
or ecx, eax
add ecx, dword [ebp - 0x20]
cmp ecx, dword [edi + 8]
jne 0x10019bca
mov edx, dword [ebp + 0xc]
jmp 0x10019be4
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
jmp 0x10019c15
mov eax, dword [ebp - 0x18]
add eax, eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp + 0xc]
cmp edi, eax
je 0x10019bc5
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x10019bd8
cmp edi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x10]
je 0x10019c15
mov esi, dword [edi + 0xc]
mov ecx, dword [ebp - 0x10]
test esi, esi
je 0x10019c13
cmp dword [esi + 0x158], 0
je 0x10019c15
mov eax, ecx
mov edi, ebx
mov ecx, esi
push eax
mov ebx, edx
call fcn.100599c0
mov edx, ebx
mov ebx, edi
jmp 0x10019c15
xor esi, esi
push ebx
push edx
push esi
call fcn.100c7dc0
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x10019c30
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov esi, dword [ecx + 0x1368]
cmp dword [esi + 0x54], edx
jbe 0x10019c63
mov eax, dword [esi + 0x58]
mov esi, dword [eax + edx*4]
cmp esi, 0xffffffff
mov edx, edi
jne 0x10019d12
jmp 0x10019d33
mov dword [ebp - 0x10], ecx
mov eax, edx
shr eax, 0x10
mov ecx, edx
shr ecx, 8
mov edi, 0xff
mov ebx, edx
and ebx, edi
and ecx, edi
and eax, edi
mov edi, edx
shr edi, 0x18
mov dword [ebp - 0x20], ebx
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, ecx
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, edi
imul edi, ebx, 0x1000193
and edi, dword [esi + 0x74]
mov ebx, dword [esi + 0x60]
mov esi, dword [esi + 0x68]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], esi
mov edi, dword [esi + edi*8 + 4]
xor esi, esi
mov dword [ebp - 0x1c], ebx
cmp edi, ebx
je 0x10019ce2
and edx, 0xff000000
shl eax, 0x10
or eax, edx
shl ecx, 8
or ecx, eax
add ecx, dword [ebp - 0x20]
cmp ecx, dword [edi + 8]
jne 0x10019cea
mov edx, dword [ebp + 0xc]
jmp 0x10019d04
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
jmp 0x10019d35
mov eax, dword [ebp - 0x18]
add eax, eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp + 0xc]
cmp edi, eax
je 0x10019ce5
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x10019cf8
cmp edi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x10]
je 0x10019d35
mov esi, dword [edi + 0xc]
mov ecx, dword [ebp - 0x10]
test esi, esi
je 0x10019d33
cmp dword [esi + 0x158], 0
je 0x10019d35
mov eax, ecx
mov edi, ebx
mov ecx, esi
push eax
mov ebx, edx
call fcn.100599c0
mov edx, ebx
mov ebx, edi
jmp 0x10019d35
xor esi, esi
push dword [ebp + 0x24]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push ebx
push edx
push esi
call fcn.100c4e60
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret 0x20