joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1004e0c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov dword [ebp - 0x10], edx
mov esi, dword [ebp + 8]
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
movzx edx, byte [esi + 1]
xor edx, eax
imul eax, edx, 0x1000193
movzx edx, byte [esi + 2]
xor edx, eax
imul eax, edx, 0x1000193
movzx edx, byte [esi + 3]
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [ecx + 0x18]
mov edx, dword [ecx + 0xc]
mov ebx, dword [edx + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ecx
mov eax, dword [ecx + 4]
mov edi, dword [esi]
mov ecx, ebx
cmp eax, ebx
je 0x1004e128
mov esi, dword [ebp - 0x18]
mov esi, dword [edx + esi*4]
mov esi, dword [esi]
jmp 0x1004e12a
mov esi, ebx
cmp ecx, esi
je 0x1004e146
cmp dword [ecx + 8], edi
je 0x1004e137
mov ecx, dword [ecx]
jmp 0x1004e11a
cmp ecx, eax
je 0x1004e146
mov eax, dword [ebp - 0x10]
mov dword [eax], ecx
mov byte [eax + 4], 0
jmp 0x1004e1b1
mov esi, dword [eax]
mov ebx, dword [esi + 4]
push 0x24
call dword [sym.imp.mozglue.dll_moz_xmalloc]
add esp, 4
test esi, esi
mov ecx, esi
cmove ecx, eax
mov dword [eax], ecx
mov ecx, ebx
cmove ecx, eax
mov dword [eax + 4], ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax + 8], ecx
mov dword [eax + 0x20], 0xf
mov dword [eax + 0x1c], 0
mov byte [eax + 0xc], 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 8]
cmp edx, 0x71c71c6
je 0x1004e1b9
inc edx
mov dword [ecx + 8], edx
mov dword [esi + 4], eax
mov dword [ebx], eax
mov eax, dword [ecx + 4]
mov eax, dword [eax]
mov esi, dword [ebp - 0x10]
mov edx, esi
push eax
add eax, 8
push eax
call fcn.1004e1d0
add esp, 8
mov eax, esi
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
push str.list_T__too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__
int3
Function at 0x10064640
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x18
mov edi, dword [ebp + 8]
mov ebx, dword [edi + 0x10]
cmp dword [edi + 0x14], 0xf
jbe 0x10064657
mov edi, dword [edi]
test ebx, ebx
mov dword [ebp - 0x10], edx
mov eax, 0x811c9dc5
je 0x10064676
xor edx, edx
movzx esi, byte [edi + edx]
xor esi, eax
imul eax, esi, 0x1000193
inc edx
cmp ebx, edx
jne 0x10064665
mov dword [ebp - 0x14], edi
and eax, dword [ecx + 0x18]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx + 0xc]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ecx + eax*8]
lea eax, [eax + eax + 1]
mov dword [ebp - 0x20], eax
mov esi, ecx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x1c], ecx
cmp edx, ecx
je 0x100646a8
mov eax, dword [ebp - 0x24]
mov edi, dword [ebp - 0x20]
mov eax, dword [eax + edi*4]
mov eax, dword [eax]
jmp 0x100646aa
mov eax, ecx
cmp esi, eax
je 0x100646dd
cmp dword [esi + 0x18], ebx
jne 0x100646d9
cmp dword [esi + 0x1c], 0xf
jbe 0x100646be
mov edi, dword [esi + 8]
jmp 0x100646c1
lea edi, [esi + 8]
mov eax, dword [ebp - 0x14]
push ebx
push eax
push edi
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
test eax, eax
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
je 0x100646e4
mov esi, dword [esi]
jmp 0x10064697
mov eax, dword [ebp - 0x10]
mov dword [eax], edx
jmp 0x10064704
push ebx
push edi
push dword [ebp - 0x14]
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
test eax, eax
je 0x100646ff
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
jmp 0x10064704
mov eax, dword [ebp - 0x10]
mov dword [eax], esi
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x10075630
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 8
mov edx, dword [ebp + 8]
cmp dword [ecx + 0x38], edx
jbe 0x10075654
mov eax, dword [ecx + 0x3c]
mov ecx, dword [eax + edx*4]
xor eax, eax
cmp ecx, 0xffffffff
cmovne eax, ecx
jmp 0x100756e5
mov edi, edx
shr edi, 0x10
mov eax, edx
shr eax, 8
mov esi, 0xff
mov ebx, edx
and ebx, esi
and eax, esi
and edi, esi
mov esi, edx
shr esi, 0x18
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, edi
imul ebx, ebx, 0x1000193
xor ebx, esi
imul ebx, ebx, 0x1000193
and ebx, dword [ecx + 0x58]
mov esi, dword [ecx + 0x44]
mov ecx, dword [ecx + 0x4c]
shl edi, 0x10
and edx, 0xff0000ff
or edx, edi
mov dword [ebp - 0x14], ecx
mov ecx, dword [ecx + ebx*8]
lea edi, [ebx + ebx]
inc edi
mov dword [ebp - 0x10], edi
shl eax, 8
or edx, eax
mov edi, ecx
cmp esi, ecx
je 0x100756cd
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
mov eax, dword [eax + ebx*4]
mov ebx, dword [eax]
jmp 0x100756cf
mov ebx, ecx
xor eax, eax
cmp edi, ebx
je 0x100756e5
cmp dword [edi + 8], edx
je 0x100756de
mov edi, dword [edi]
jmp 0x100756bc
cmp edi, esi
je 0x100756e5
mov eax, dword [edi + 0xc]
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret 4
Function at 0x10076630
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
push eax
mov eax, dword [ebp + 8]
cmp dword [ecx + 0x38], eax
jbe 0x1007664b
mov ecx, dword [ecx + 0x3c]
cmp dword [ecx + eax*4], 0xffffffff
jmp 0x100766cf
mov edi, eax
shr edi, 0x10
mov esi, eax
shr esi, 8
mov edx, 0xff
mov ebx, eax
and ebx, edx
and esi, edx
and edi, edx
mov edx, eax
shr edx, 0x18
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, esi
imul ebx, ebx, 0x1000193
xor ebx, edi
imul ebx, ebx, 0x1000193
xor ebx, edx
imul ebx, ebx, 0x1000193
and ebx, dword [ecx + 0x58]
mov edx, dword [ecx + 0x44]
mov ecx, dword [ecx + 0x4c]
shl edi, 0x10
and eax, 0xff0000ff
or eax, edi
mov dword [ebp - 0x10], ecx
mov ecx, dword [ecx + ebx*8]
add ebx, ebx
inc ebx
shl esi, 8
or eax, esi
mov esi, ecx
cmp edx, ecx
je 0x100766bc
mov edi, dword [ebp - 0x10]
mov edi, dword [edi + ebx*4]
mov edi, dword [edi]
jmp 0x100766be
mov edi, ecx
cmp esi, edi
je 0x100766cb
cmp dword [esi + 8], eax
je 0x100766cd
mov esi, dword [esi]
jmp 0x100766ae
mov esi, edx
cmp esi, edx
setne al
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret 4
Function at 0x10076fc0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov esi, dword [ebp + 8]
cmp dword [ecx], edx
jbe 0x10076fed
mov eax, dword [ecx + 4]
mov ecx, dword [eax + edx*4]
cmp ecx, 0xffffffff
je 0x100770e0
mov dword [esi], ecx
mov dword [eax + edx*4], 0xffffffff
jmp 0x1007712b
mov eax, edx
shr eax, 0x18
mov dword [ebp - 0x14], eax
mov esi, edx
shr esi, 0x10
mov eax, edx
shr eax, 8
mov edi, 0xff
mov ebx, edx
and ebx, edi
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
and eax, edi
xor ebx, eax
imul ebx, ebx, 0x1000193
and esi, edi
xor ebx, esi
imul edi, ebx, 0x1000193
xor edi, dword [ebp - 0x14]
imul edi, edi, 0x1000193
and edi, dword [ecx + 0x20]
mov ebx, dword [ecx + 0xc]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ecx + 0x14]
shl esi, 0x10
and edx, 0xff0000ff
or edx, esi
mov dword [ebp - 0x14], ecx
mov ecx, dword [ecx + edi*8]
shl eax, 8
or edx, eax
mov eax, dword [ebp - 0x10]
add eax, 0xc
mov dword [ebp - 0x18], eax
add edi, edi
inc edi
mov eax, ecx
cmp ebx, ecx
je 0x1007706f
mov esi, dword [ebp - 0x14]
mov esi, dword [esi + edi*4]
mov esi, dword [esi]
jmp 0x10077071
mov esi, ecx
cmp eax, esi
je 0x100770e0
cmp dword [eax + 8], edx
je 0x1007707e
mov eax, dword [eax]
jmp 0x10077061
cmp eax, ebx
je 0x100770e0
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp + 8]
mov dword [edx], ecx
movzx ecx, byte [eax + 8]
xor ecx, 0x811c9dc5
imul ecx, ecx, 0x1000193
movzx edx, byte [eax + 9]
xor edx, ecx
imul ecx, edx, 0x1000193
movzx edx, byte [eax + 0xa]
xor edx, ecx
imul ecx, edx, 0x1000193
movzx edx, byte [eax + 0xb]
xor edx, ecx
imul ecx, edx, 0x1000193
mov edx, dword [ebp - 0x10]
and ecx, dword [edx + 0x20]
lea esi, [ecx + ecx]
mov edi, dword [edx + 0x14]
lea edx, [edi + ecx*8]
mov ebx, dword [edx]
cmp dword [edi + esi*4 + 4], eax
je 0x100770e4
cmp ebx, eax
mov edi, dword [ebp - 0x10]
jne 0x1007710f
mov ecx, eax
jmp 0x1007710b
xor eax, eax
jmp 0x1007712d
cmp ebx, eax
je 0x100770f6
lea edx, [edi + esi*4]
add edx, 4
lea ecx, [eax + 4]
mov edi, dword [ebp - 0x10]
jmp 0x1007710b
mov edi, dword [ebp - 0x10]
mov esi, dword [edi + 0xc]
mov dword [edx], esi
lea edx, [ecx + ecx]
inc edx
shl edx, 2
add edx, dword [edi + 0x14]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
mov dword [edx], ecx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [edx], ecx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
dec dword [edi + 0x10]
push eax
call dword [sym.imp.mozglue.dll_free]
add esp, 4
mov al, 1
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x10077750
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov edi, dword [ebp + 0xc]
cmp dword [ecx + 0x38], edi
jbe 0x10077780
mov eax, dword [ecx + 0x3c]
mov esi, edi
mov edi, dword [eax + edi*4]
cmp edi, 0xffffffff
je 0x10077910
mov edx, ecx
mov dword [eax + esi*4], 0xffffffff
jmp 0x100778d7
mov edx, edi
shr edx, 0x18
mov ebx, edi
shr ebx, 0x10
mov eax, edi
shr eax, 8
mov esi, 0xff
and edi, esi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
and eax, esi
xor edi, eax
imul edi, edi, 0x1000193
and ebx, esi
xor edi, ebx
imul esi, edi, 0x1000193
xor esi, edx
imul edx, esi, 0x1000193
mov esi, dword [ecx + 0x58]
mov dword [ebp - 0x10], esi
and edx, esi
shl ebx, 0x10
mov edi, dword [ebp + 0xc]
and edi, 0xff0000ff
or edi, ebx
mov esi, dword [ecx + 0x4c]
shl eax, 8
or edi, eax
mov dword [ebp - 0x18], esi
mov ebx, dword [esi + edx*8]
lea esi, [edx + edx]
inc esi
mov edx, dword [ecx + 0x44]
mov dword [ebp - 0x1c], ecx
lea eax, [ecx + 0x44]
mov dword [ebp - 0x20], eax
mov eax, ebx
cmp edx, ebx
je 0x10077802
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + esi*4]
mov ecx, dword [ecx]
jmp 0x10077804
mov ecx, ebx
cmp eax, ecx
je 0x10077910
mov ecx, dword [eax + 8]
cmp ecx, edi
je 0x10077817
mov eax, dword [eax]
jmp 0x100777f4
cmp eax, edx
je 0x10077910
mov esi, dword [eax + 0xc]
mov dword [ebp - 0x14], esi
movzx ecx, cl
xor ecx, 0x811c9dc5
imul ecx, ecx, 0x1000193
movzx esi, byte [eax + 9]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [eax + 0xa]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [eax + 0xb]
xor esi, ecx
imul esi, esi, 0x1000193
and esi, dword [ebp - 0x10]
lea ecx, [esi + esi]
mov edi, dword [ebp - 0x18]
lea ebx, [edi + esi*8]
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebx]
cmp dword [edi + ecx*4 + 4], eax
je 0x10077880
cmp ebx, eax
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp - 0x14]
jne 0x100778b6
mov ecx, eax
mov edx, dword [ebp - 0x10]
jmp 0x100778b2
cmp ebx, eax
je 0x10077895
mov edx, dword [ebp - 0x18]
lea edx, [edx + ecx*4]
add edx, 4
lea ecx, [eax + 4]
mov esi, dword [ebp + 0xc]
jmp 0x100778af
mov ecx, dword [ebp - 0x10]
mov dword [ecx], edx
lea ecx, [esi + esi]
inc ecx
shl ecx, 2
mov edx, dword [ebp - 0x1c]
add ecx, dword [edx + 0x4c]
mov edx, ecx
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x14]
mov ecx, dword [ecx]
mov dword [edx], ecx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [edx], ecx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov ebx, dword [ebp - 0x1c]
dec dword [ebx + 0x48]
push eax
call dword [sym.imp.mozglue.dll_free]
mov ecx, ebx
add esp, 4
add ecx, 4
push esi
call fcn.100506c0
test edi, edi
je 0x10077910
dec dword [edi + 4]
jne 0x10077910
mov ebx, dword [ebp + 8]
mov eax, dword [edi]
mov esi, dword [eax]
mov ecx, esi
call dword [section..00cfg]
mov ecx, edi
push ebx
call esi
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [section..00cfg]
mov ecx, edi
push 1
call esi
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 8
Function at 0x100779c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x18
mov edi, dword [ebp + 0xc]
cmp dword [ecx + 0x38], edi
jbe 0x100779f0
mov eax, dword [ecx + 0x3c]
mov esi, edi
mov edi, dword [eax + edi*4]
cmp edi, 0xffffffff
je 0x10077b76
mov edx, ecx
mov dword [eax + esi*4], 0xffffffff
jmp 0x10077b4c
mov edx, edi
shr edx, 0x18
mov ebx, edi
shr ebx, 0x10
mov eax, edi
shr eax, 8
mov esi, 0xff
and edi, esi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
and eax, esi
xor edi, eax
imul edi, edi, 0x1000193
and ebx, esi
xor edi, ebx
imul esi, edi, 0x1000193
xor esi, edx
imul edx, esi, 0x1000193
mov esi, dword [ecx + 0x58]
mov dword [ebp - 0x14], esi
and edx, esi
shl ebx, 0x10
mov edi, dword [ebp + 0xc]
and edi, 0xff0000ff
or edi, ebx
mov esi, dword [ecx + 0x4c]
shl eax, 8
or edi, eax
mov dword [ebp - 0x10], esi
mov ebx, dword [esi + edx*8]
lea esi, [edx + edx]
inc esi
mov edx, dword [ecx + 0x44]
mov dword [ebp - 0x20], ecx
lea eax, [ecx + 0x44]
mov dword [ebp - 0x24], eax
mov eax, ebx
cmp edx, ebx
je 0x10077a72
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + esi*4]
mov ecx, dword [ecx]
jmp 0x10077a74
mov ecx, ebx
cmp eax, ecx
je 0x10077b76
mov ecx, dword [eax + 8]
cmp ecx, edi
je 0x10077a87
mov eax, dword [eax]
jmp 0x10077a64
cmp eax, edx
je 0x10077b76
mov edi, dword [eax + 0xc]
movzx ecx, cl
xor ecx, 0x811c9dc5
imul ecx, ecx, 0x1000193
movzx esi, byte [eax + 9]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [eax + 0xa]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [eax + 0xb]
xor esi, ecx
imul esi, esi, 0x1000193
and esi, dword [ebp - 0x14]
lea ecx, [esi + esi]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x10]
lea ebx, [ecx + esi*8]
mov dword [ebp - 0x18], ebx
mov ecx, dword [ebx]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
cmp dword [ebx + ecx*4 + 4], eax
je 0x10077af7
cmp dword [ebp - 0x1c], eax
mov esi, dword [ebp + 0xc]
jne 0x10077b2b
mov ecx, eax
mov edx, dword [ebp - 0x18]
jmp 0x10077b27
cmp dword [ebp - 0x1c], eax
je 0x10077b0d
mov edx, dword [ebp - 0x10]
lea edx, [edx + ecx*4]
add edx, 4
lea ecx, [eax + 4]
mov esi, dword [ebp + 0xc]
jmp 0x10077b27
mov ecx, dword [ebp - 0x18]
mov dword [ecx], edx
lea ecx, [esi + esi]
inc ecx
shl ecx, 2
mov edx, dword [ebp - 0x20]
add ecx, dword [edx + 0x4c]
mov edx, ecx
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx]
mov dword [edx], ecx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [edx], ecx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov ebx, dword [ebp - 0x20]
dec dword [ebx + 0x48]
push eax
call dword [sym.imp.mozglue.dll_free]
mov ecx, ebx
add esp, 4
add ecx, 4
push esi
call fcn.100506c0
test edi, edi
je 0x10077b76
mov ecx, edi
push dword [ebp + 8]
call fcn.100442b0
mov ecx, edi
call fcn.10044110
push edi
call dword [sym.imp.mozglue.dll_free]
add esp, 0x1c
jmp 0x10077b79
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret 8
Function at 0x1009dde0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 8
mov esi, dword [ebp + 8]
mov edi, esi
shr edi, 8
mov ebx, esi
shr ebx, 0x10
mov eax, dword [0x10397f40]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
shr esi, 0x18
mov ecx, dword [0x10398454]
cmp ecx, dword [eax + 4]
jg 0x1009ded0
call fcn.1009e330
mov eax, 0xff
mov edx, dword [ebp + 8]
mov ecx, edx
and ecx, eax
xor ecx, 0x811c9dc5
imul ecx, ecx, 0x1000193
and edi, eax
xor ecx, edi
imul ecx, ecx, 0x1000193
and ebx, eax
xor ecx, ebx
imul eax, ecx, 0x1000193
xor eax, esi
imul eax, eax, 0x1000193
and eax, dword [0x103983e0]
mov esi, dword [0x103983d4]
mov ecx, edx
mov dword [ebp - 0x14], esi
mov esi, dword [esi + eax*8]
shl ebx, 0x10
and ecx, 0xff0000ff
or ecx, ebx
mov ebx, dword [0x103983cc]
add eax, eax
inc eax
mov dword [ebp - 0x10], eax
shl edi, 8
or ecx, edi
mov edi, esi
cmp ebx, esi
je 0x1009de96
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [eax + edx*4]
mov edx, dword [eax]
jmp 0x1009de98
mov edx, esi
mov eax, 0x103983ec
cmp edi, edx
je 0x1009dec8
cmp dword [edi + 8], ecx
je 0x1009deaa
mov edi, dword [edi]
jmp 0x1009de85
cmp edi, ebx
je 0x1009dec8
cmp dword [edi + 0x14], 1
jne 0x1009dec8
mov eax, dword [edi + 0x10]
mov eax, dword [eax]
cmp byte [eax + 0x10], 0
lea ecx, [eax + 0xc]
mov eax, 0x103983ec
cmovne eax, ecx
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x10398454
call fcn.1021e491
add esp, 4
cmp dword [0x10398454], 0xffffffff
jne 0x1009de1a
mov dword [0x103983ec], 0
mov byte [0x103983f0], 0
xorps xmm0, xmm0
movups xmmword [0x103983f4], xmm0
movups xmmword [0x10398404], xmm0
movups xmmword [0x10398411], xmm0
movups xmmword [0x10398424], xmm0
movups xmmword [0x10398430], xmm0
mov eax, 0x10004f50
mov dword [0x10398440], eax
mov dword [0x10398444], eax
mov dword [0x10398448], eax
mov dword [0x1039844c], eax
mov dword [0x10398450], eax
push 0x10398454
call fcn.1021e491
add esp, 4
jmp 0x1009de1a
Function at 0x1009df60
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, dword [ebp + 8]
mov eax, ebx
shr eax, 8
mov dword [ebp - 0x10], eax
mov esi, ebx
shr esi, 0x10
mov eax, dword [0x10397f40]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov edi, ebx
shr edi, 0x18
mov edx, dword [ebp + 0xc]
mov ecx, dword [0x103984c0]
cmp ecx, dword [eax + 4]
jg 0x1009e102
mov eax, edx
shr eax, 8
mov dword [ebp - 0x14], eax
mov eax, edx
shr eax, 0x10
mov dword [ebp - 0x1c], eax
shr edx, 0x18
mov dword [ebp - 0x18], edx
call fcn.1009e330
mov eax, 0xff
mov ecx, ebx
and ecx, eax
xor ecx, 0x811c9dc5
imul ecx, ecx, 0x1000193
mov edx, dword [ebp - 0x10]
and edx, eax
xor ecx, edx
imul ecx, ecx, 0x1000193
and esi, eax
xor ecx, esi
imul eax, ecx, 0x1000193
xor eax, edi
imul eax, eax, 0x1000193
and eax, dword [0x103983e0]
mov ecx, dword [0x103983d4]
mov dword [ebp - 0x10], ecx
mov edi, dword [ecx + eax*8]
shl esi, 0x10
and ebx, 0xff0000ff
or ebx, esi
mov esi, dword [0x103983cc]
add eax, eax
inc eax
mov dword [ebp - 0x20], eax
shl edx, 8
or ebx, edx
mov edx, edi
mov ecx, ebx
cmp esi, edi
je 0x1009e034
mov eax, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x20]
mov eax, dword [eax + ebx*4]
mov ebx, dword [eax]
jmp 0x1009e036
mov ebx, edi
mov eax, 0x10398458
cmp edx, ebx
je 0x1009e0fa
cmp dword [edx + 8], ecx
je 0x1009e04e
mov ebx, ecx
mov edx, dword [edx]
jmp 0x1009e021
cmp edx, esi
je 0x1009e0fa
mov ecx, dword [edx + 0x10]
cmp dword [edx + 0x14], 1
jne 0x1009e06f
mov eax, dword [ecx]
cmp byte [eax + 0x10], 0
je 0x1009e06f
add eax, 0xc
jmp 0x1009e0fa
mov eax, 0xff
mov ebx, dword [ebp + 0xc]
mov esi, ebx
and esi, eax
and dword [ebp - 0x14], eax
mov edi, dword [ebp - 0x1c]
and edi, eax
xor esi, 0x811c9dc5
imul eax, esi, 0x1000193
xor eax, dword [ebp - 0x14]
imul eax, eax, 0x1000193
xor eax, edi
imul eax, eax, 0x1000193
xor eax, dword [ebp - 0x18]
imul eax, eax, 0x1000193
and eax, dword [edx + 0x24]
mov edx, dword [edx + 0x18]
shl edi, 0x10
and ebx, 0xff0000ff
or ebx, edi
mov dword [ebp - 0x10], edx
mov esi, dword [edx + eax*8]
lea edi, [eax + eax]
inc edi
mov eax, dword [ebp - 0x14]
shl eax, 8
or ebx, eax
mov eax, ebx
mov edx, esi
mov ebx, ecx
cmp ecx, esi
je 0x1009e0de
mov ebx, dword [ebp - 0x10]
mov ebx, dword [ebx + edi*4]
mov ebx, dword [ebx]
cmp edx, ebx
je 0x1009e0eb
cmp dword [edx + 8], eax
je 0x1009e0ed
mov edx, dword [edx]
jmp 0x1009e0d0
mov edx, ecx
lea esi, [edx + 0xc]
cmp edx, ecx
mov eax, 0x10398458
cmovne eax, esi
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x103984c0
call fcn.1021e491
mov edx, dword [ebp + 0xc]
add esp, 4
cmp dword [0x103984c0], 0xffffffff
jne 0x1009dfa2
mov dword [0x10398458], 0
mov byte [0x1039845c], 0
xorps xmm0, xmm0
movups xmmword [0x10398460], xmm0
movups xmmword [0x10398470], xmm0
movups xmmword [0x1039847d], xmm0
movups xmmword [0x10398490], xmm0
movups xmmword [0x1039849c], xmm0
mov eax, 0x10004f50
mov dword [0x103984ac], eax
mov dword [0x103984b0], eax
mov dword [0x103984b4], eax
mov dword [0x103984b8], eax
mov dword [0x103984bc], eax
push 0x103984c0
call fcn.1021e491
mov edx, dword [ebp + 0xc]
add esp, 4
jmp 0x1009dfa2
Function at 0x100ac9c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
push eax
mov ebx, dword [ebp + 8]
mov edi, ebx
shr edi, 8
mov esi, ebx
shr esi, 0x10
call fcn.1009e330
mov eax, 0xff
and esi, eax
mov ecx, esi
shl ecx, 0x10
and edi, eax
mov eax, ebx
and eax, 0xff0000ff
or eax, ecx
mov ecx, edi
shl ecx, 8
or eax, ecx
je 0x100aca5d
movzx ecx, bl
shr ebx, 0x18
xor ecx, 0x811c9dc5
imul ecx, ecx, 0x1000193
xor ecx, edi
imul ecx, ecx, 0x1000193
xor ecx, esi
imul ecx, ecx, 0x1000193
xor ecx, ebx
imul edx, ecx, 0x1000193
and edx, dword [0x103983e0]
mov esi, dword [0x103983d4]
mov ebx, dword [esi + edx*8]
mov ecx, dword [0x103983cc]
add edx, edx
inc edx
mov dword [ebp - 0x10], edx
mov edx, ebx
cmp ecx, ebx
je 0x100aca4e
mov edi, dword [ebp - 0x10]
mov edi, dword [esi + edi*4]
mov edi, dword [edi]
jmp 0x100aca50
mov edi, ebx
cmp edx, edi
je 0x100aca61
cmp dword [edx + 8], eax
je 0x100aca63
mov edx, dword [edx]
jmp 0x100aca40
xor eax, eax
jmp 0x100aca68
mov edx, ecx
cmp edx, ecx
setne al
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x100ad880
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov dword [ebp - 0x10], edx
mov esi, dword [ebp + 8]
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
movzx edx, byte [esi + 1]
xor edx, eax
imul eax, edx, 0x1000193
movzx edx, byte [esi + 2]
xor edx, eax
imul eax, edx, 0x1000193
movzx edx, byte [esi + 3]
xor edx, eax
imul eax, edx, 0x1000193
and eax, dword [ecx + 0x18]
mov edx, dword [ecx + 0xc]
mov ebx, dword [edx + eax*8]
add eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ecx
mov eax, dword [ecx + 4]
mov edi, dword [esi]
mov ecx, ebx
cmp eax, ebx
je 0x100ad8e8
mov esi, dword [ebp - 0x18]
mov esi, dword [edx + esi*4]
mov esi, dword [esi]
jmp 0x100ad8ea
mov esi, ebx
cmp ecx, esi
je 0x100ad909
cmp dword [ecx + 8], edi
je 0x100ad8f7
mov ecx, dword [ecx]
jmp 0x100ad8da
cmp ecx, eax
je 0x100ad909
mov eax, dword [ebp - 0x10]
mov dword [eax], ecx
mov byte [eax + 4], 0
jmp 0x100ad998
mov esi, dword [eax]
mov edi, dword [esi + 4]
push 0x74
call dword [sym.imp.mozglue.dll_moz_xmalloc]
add esp, 4
test esi, esi
mov ecx, edi
cmove ecx, eax
mov edx, esi
cmove edx, eax
mov dword [eax], edx
mov dword [eax + 4], ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], 0
mov byte [eax + 0x10], 0
xorps xmm0, xmm0
movups xmmword [eax + 0x31], xmm0
movups xmmword [eax + 0x24], xmm0
movups xmmword [eax + 0x14], xmm0
movups xmmword [eax + 0x50], xmm0
movups xmmword [eax + 0x44], xmm0
mov ecx, 0x10004f50
mov dword [eax + 0x60], ecx
mov dword [eax + 0x64], ecx
mov dword [eax + 0x68], ecx
mov dword [eax + 0x6c], ecx
mov dword [eax + 0x70], ecx
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 8]
cmp edx, 0x234f72b
je 0x100ad9a0
inc edx
mov dword [ecx + 8], edx
mov dword [esi + 4], eax
mov dword [edi], eax
mov eax, dword [ecx + 4]
mov eax, dword [eax]
mov esi, dword [ebp - 0x10]
mov edx, esi
push eax
add eax, 8
push eax
call fcn.10032e90
add esp, 8
mov eax, esi
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
push str.list_T__too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__
int3