joyce8/EMBER2024-capa huggingface dataset:
Function at 0x41ed30
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x451e35
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x468254]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ebx, dword [ebx]
movzx eax, bl
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
mov eax, ebx
shr eax, 8
movzx eax, al
xor edx, eax
mov eax, ebx
shr eax, 0x10
imul ecx, edx, 0x1000193
movzx eax, al
shr ebx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
xor eax, ebx
imul ebx, eax, 0x1000193
lea eax, [ebp - 0x14]
push ebx
push dword [ebp + 0xc]
push eax
call fcn.0041cfd0
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x41edba
mov dword [edi], eax
xor al, al
jmp 0x41ee7a
cmp dword [esi + 8], 0xfffffff
je 0x41ee93
lea eax, [esi + 4]
mov dword [ebp - 0x1c], eax
push 0x10
mov dword [ebp - 4], 0
mov dword [ebp - 0x18], 0
call fcn.0043301f
mov ecx, dword [ebp + 0xc]
add esp, 4
mov dword [ebp - 0x18], eax
lea edx, [eax + 8]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [ebp + 8], edx
mov dword [edx + 4], eax
mov ecx, dword [esi + 8]
inc ecx
mov dword [ebp - 4], 1
mov eax, ecx
shr eax, 0x1f
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x456200]
mov eax, dword [esi + 0x1c]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x456200]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [esi]
jbe 0x41ee67
push ecx
mov ecx, esi
call fcn.00424740
push eax
mov ecx, esi
call fcn.00424ec0
push ebx
push dword [ebp + 8]
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.0041cfd0
mov ecx, dword [eax]
jmp 0x41ee6a
mov ecx, dword [ebp - 0x14]
push dword [ebp - 0x18]
push ecx
push ebx
mov ecx, esi
call fcn.00425830
mov dword [edi], eax
mov al, 1
mov byte [edi + 4], al
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.00431751
int3
Function at 0x41f100
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
mov esi, dword [ebp + 0x10]
cmp dword [esi + 8], 0
jne 0x41f13b
cmp byte [ebp + 0x14], 0
je 0x41f13b
mov eax, dword [ebp + 0xc]
mov ecx, esi
mov dword [ebp - 8], 1
mov eax, dword [eax]
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0041ed30
pop esi
mov esp, ebp
pop ebp
ret 0x10
push ebx
push edi
lea eax, [ebp + 0x14]
mov dword [ebp + 0x14], 1
push eax
lea eax, [ebp + 0x10]
mov ecx, esi
push eax
call fcn.0041ec50
mov ebx, dword [esi + 4]
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
cmp eax, ebx
je 0x41f167
mov eax, dword [eax + 0xc]
cmp eax, dword [edi]
je 0x41f194
lea eax, [ebp + 8]
mov ecx, esi
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.0041ec50
mov edi, dword [edi]
cmp dword [eax], ebx
jne 0x41f19d
mov eax, dword [ebp + 8]
mov ecx, esi
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 4], edi
push eax
call fcn.0041ed30
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret 0x10
mov edx, dword [ebp + 8]
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr edx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
xor eax, edx
imul eax, eax, 0x1000193
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0041cfd0
mov eax, dword [ebp - 4]
test eax, eax
je 0x41f1fc
mov dword [eax + 0xc], edi
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret 0x10
push str.invalid_unordered_map_K__T__key
call fcn.00431771
int3
Function at 0x41f490
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
mov esi, dword [ebp + 0x10]
cmp dword [esi + 8], 0
jne 0x41f4cb
cmp byte [ebp + 0x14], 0
je 0x41f4cb
mov eax, dword [ebp + 0xc]
mov ecx, esi
mov dword [ebp - 8], 1
mov al, byte [eax]
mov byte [ebp - 4], al
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0041e8b0
pop esi
mov esp, ebp
pop ebp
ret 0x10
push edi
lea eax, [ebp + 0x14]
mov dword [ebp + 0x14], 1
push eax
lea eax, [ebp + 0x10]
mov ecx, esi
push eax
call fcn.0041ec50
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
cmp eax, dword [esi + 4]
je 0x41f4f4
mov al, byte [eax + 0xc]
cmp al, byte [edi]
je 0x41f526
push ebx
lea eax, [ebp + 8]
mov ecx, esi
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.0041ec50
mov ecx, dword [esi + 4]
mov bl, byte [edi]
cmp dword [eax], ecx
jne 0x41f52e
mov eax, dword [ebp + 8]
mov ecx, esi
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], bl
push eax
call fcn.0041e8b0
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
mov edx, dword [ebp + 8]
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr edx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
xor eax, edx
imul eax, eax, 0x1000193
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0041cfd0
mov eax, dword [ebp - 4]
test eax, eax
je 0x41f58d
mov byte [eax + 0xc], bl
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
push str.invalid_unordered_map_K__T__key
call fcn.00431771
int3

Function at 0x41f5a0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x451f30
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x468254]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edx, dword [ebp + 8]
movzx eax, dl
xor eax, 0x811c9dc5
mov esi, dword [ebp + 0xc]
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr edx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
xor eax, edx
imul eax, eax, 0x1000193
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0041cfd0
mov eax, dword [eax + 4]
test eax, eax
je 0x41f62b
mov dword [ebp + 8], eax
cmp eax, dword [esi + 4]
jne 0x41f665
jmp 0x41f631
mov eax, dword [esi + 4]
mov dword [ebp + 8], eax
push 0xfb69b604
lea eax, [ebp + 0xc]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0x18]
mov dword [ebp + 0xc], 1
push eax
mov ecx, esi
call fcn.0041cfd0
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x41f67c
jmp 0x41f665
add eax, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push str.invalid_unordered_map_K__T__key
call fcn.00431771
int3
Function at 0x41f690
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x451f50
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x468254]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edx, dword [ebp + 8]
movzx eax, dl
xor eax, 0x811c9dc5
mov esi, dword [ebp + 0xc]
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr edx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
xor eax, edx
imul eax, eax, 0x1000193
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0041cfd0
mov eax, dword [eax + 4]
test eax, eax
je 0x41f71b
mov dword [ebp + 8], eax
cmp eax, dword [esi + 4]
jne 0x41f757
jmp 0x41f721
mov eax, dword [esi + 4]
mov dword [ebp + 8], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 4], 0
push eax
mov ecx, esi
mov dword [ebp + 0xc], 1
call fcn.00426700
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
add eax, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc

Function at 0x41f780
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x451f70
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x468254]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edx, dword [ebp + 8]
movzx eax, dl
xor eax, 0x811c9dc5
mov esi, dword [ebp + 0xc]
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr edx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
xor eax, edx
imul eax, eax, 0x1000193
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0041cfd0
mov eax, dword [eax + 4]
test eax, eax
je 0x41f806
cmp eax, dword [esi + 4]
jne 0x41f82f
push 0xfb69b604
lea eax, [ebp + 8]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0x18]
mov dword [ebp + 8], 1
push eax
mov ecx, esi
call fcn.0041cfd0
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x41f862
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push str.invalid_unordered_map_K__T__key
call fcn.00431771
int3
Function at 0x41f880
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x451f90
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x468254]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edx, dword [ebp + 8]
movzx eax, dl
xor eax, 0x811c9dc5
mov esi, dword [ebp + 0xc]
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
xor ecx, eax
mov eax, edx
shr eax, 0x10
imul ecx, ecx, 0x1000193
movzx eax, al
shr edx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
xor eax, edx
imul eax, eax, 0x1000193
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0041cfd0
mov eax, dword [eax + 4]
test eax, eax
je 0x41f906
cmp eax, dword [esi + 4]
jne 0x41f92f
push 0xfb69b604
lea eax, [ebp + 8]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0x18]
mov dword [ebp + 8], 1
push eax
mov ecx, esi
call fcn.0041cfd0
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x41f962
mov al, byte [eax + 0xc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push str.invalid_unordered_map_K__T__key
call fcn.00431771
int3
Function at 0x4249a0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x452865
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x468254]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ecx + 8]
mov esi, dword [ecx + 4]
add esi, 0x180
mov dword [ebp - 0x1c], 0
mov edx, dword [eax]
movzx eax, dl
xor eax, 0x811c9dc5
mov dword [ebp - 0x10], edx
imul ecx, eax, 0x1000193
mov eax, edx
shr eax, 8
movzx eax, al
mov dword [ebp - 0x20], edx
xor ecx, eax
mov eax, edx
imul ecx, ecx, 0x1000193
shr eax, 0x10
movzx eax, al
xor ecx, eax
mov eax, edx
imul ecx, ecx, 0x1000193
shr eax, 0x18
xor ecx, eax
lea eax, [ebp - 0x20]
imul edi, ecx, 0x1000193
mov ecx, esi
push edi
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0041cfd0
cmp dword [ebp - 0x14], 0
jne 0x424af2
cmp dword [esi + 8], 0xfffffff
je 0x424b06
lea eax, [esi + 4]
mov dword [ebp - 0x20], eax
push 0x10
mov dword [ebp - 4], 0
mov dword [ebp - 0x1c], 0
call fcn.0043301f
mov ebx, eax
add esp, 4
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], 0
mov ecx, dword [esi + 8]
inc ecx
mov dword [ebp - 4], 1
mov eax, ecx
shr eax, 0x1f
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x456200]
mov eax, dword [esi + 0x1c]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x456200]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [esi]
jbe 0x424ae5
push ecx
mov ecx, esi
call fcn.00424740
push eax
mov ecx, esi
call fcn.00424ec0
push edi
lea eax, [ebx + 8]
mov ecx, esi
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0041cfd0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x424ae8
mov ecx, dword [ebp - 0x18]
push ebx
push ecx
push edi
mov ecx, esi
call fcn.00425830
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.unordered_map_set_too_long
call fcn.00431751
int3
Function at 0x424b40
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x468254]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, ecx
cmp dword [esi + 0x38], 0
je 0x424bfc
cmp byte [esi + 0x3d], 0
je 0x424bfc
mov eax, dword [esi]
push edi
push 0xffffffffffffffff
call dword [eax + 0xc]
cmp eax, 0xffffffff
je 0x424bea
mov ecx, dword [esi + 0x38]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [esi + 0x40]
push eax
call edx
sub eax, 0
je 0x424bb2
sub eax, 1
je 0x424bb6
sub eax, 2
jne 0x424bea
mov byte [esi + 0x3d], al
mov al, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004332ca
mov esp, ebp
pop ebp
ret
mov byte [esi + 0x3d], 0
mov edi, dword [ebp - 0x28]
lea eax, [ebp - 0x24]
sub edi, eax
je 0x424bd3
push dword [esi + 0x4c]
push edi
push 1
push eax
call fcn.0043b038
add esp, 0x10
cmp edi, eax
jne 0x424bea
cmp byte [esi + 0x3d], 0
pop edi
sete al
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004332ca
mov esp, ebp
pop ebp
ret
pop edi
xor al, al
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004332ca
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov al, 1
xor ecx, ebp
pop esi
call fcn.004332ca
mov esp, ebp
pop ebp
ret
Function at 0x424ec0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov edx, dword [ebp + 8]
mov eax, 0x1fffffff
push ebx
mov ebx, ecx
bsr ecx, eax
push esi
push edi
mov edi, 1
mov dword [ebp - 0xc], ebx
mov eax, edi
shl eax, cl
cmp edx, eax
ja 0x42502f
mov esi, dword [ebx + 4]
lea eax, [edx - 1]
or eax, edi
mov dword [ebp - 4], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
lea ecx, [ebx + 0xc]
mov dword [ebp - 0x10], ecx
lea eax, [edi + edi]
push eax
call fcn.004241a0
lea eax, [edi - 1]
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x18], eax
mov ecx, dword [ebx + 4]
mov ecx, dword [ecx]
mov edx, ecx
cmp ecx, esi
je 0x425002
mov ebx, dword [ecx + 8]
movzx eax, bl
xor eax, 0x811c9dc5
mov edx, dword [edx]
imul edi, eax, 0x1000193
mov eax, ebx
shr eax, 8
movzx eax, al
xor edi, eax
mov eax, ebx
imul edi, edi, 0x1000193
shr eax, 0x10
movzx eax, al
xor edi, eax
mov eax, ebx
imul edi, edi, 0x1000193
shr eax, 0x18
xor edi, eax
imul eax, edi, 0x1000193
mov edi, dword [ebp - 0xc]
mov edi, dword [edi + 0x18]
and edi, eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
lea eax, [eax + edi*8]
mov edi, dword [eax]
mov dword [ebp - 8], eax
mov dword [ebp + 8], edi
cmp edi, esi
jne 0x424f88
mov dword [eax], ecx
mov dword [eax + 4], ecx
jmp 0x424ff8
mov eax, dword [eax + 4]
cmp ebx, dword [eax + 8]
jne 0x424fbf
mov eax, dword [eax]
mov dword [ebp + 8], eax
cmp eax, ecx
je 0x424fb7
mov ebx, dword [ecx + 4]
mov esi, dword [ebp + 8]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov eax, dword [eax + 4]
mov dword [eax], ecx
mov dword [esi + 4], edi
mov esi, dword [ebp - 4]
mov dword [edx + 4], ebx
mov dword [ecx + 4], eax
mov eax, dword [ebp - 8]
mov dword [eax + 4], ecx
jmp 0x424ff8
mov edi, eax
cmp dword [ebp + 8], eax
je 0x424fd5
mov eax, dword [eax + 4]
mov edi, eax
cmp ebx, dword [eax + 8]
je 0x42500b
cmp dword [ebp + 8], eax
jne 0x424fc6
mov eax, dword [ecx + 4]
mov dword [ebp + 8], eax
mov dword [eax], edx
mov ebx, dword [edx + 4]
mov dword [ebx], edi
mov eax, dword [edi + 4]
mov dword [eax], ecx
mov dword [edi + 4], ebx
mov edi, dword [ebp + 8]
mov dword [edx + 4], edi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 8]
mov dword [eax], ecx
mov ecx, edx
cmp edx, esi
jne 0x424f25
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [ecx + 4]
mov eax, dword [eax]
mov dword [ebp + 8], eax
mov esi, eax
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov eax, dword [eax + 4]
mov dword [eax], ecx
mov dword [esi + 4], edi
mov esi, dword [ebp - 4]
mov dword [edx + 4], ebx
mov dword [ecx + 4], eax
jmp 0x424ff8
push str.invalid_hash_bucket_count
call fcn.00431751
int3
Function at 0x4264c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov dword [ebp - 4], ecx
cmp edx, eax
je 0x426633
cmp dword [edx + 0x1c], 0x10
mov eax, dword [ecx + 4]
push esi
mov dword [ebp - 0x18], eax
mov esi, edx
mov eax, dword [ecx + 0xc]
push edi
mov dword [ebp - 0x14], eax
lea edi, [edx + 8]
mov eax, dword [edx + 4]
mov dword [ebp - 8], eax
mov eax, dword [edi + 0x10]
jb 0x4264fb
mov edi, dword [edi]
xor edx, edx
push ebx
mov ebx, 0x811c9dc5
test eax, eax
je 0x426524
mov ecx, eax
nop dword [eax]
movzx eax, byte [edx + edi]
inc edx
xor eax, ebx
imul ebx, eax, 0x1000193
cmp edx, ecx
jb 0x426510
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0x18]
mov ecx, dword [ebp - 0x14]
and eax, ebx
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov dword [ebp - 0xc], eax
mov eax, dword [eax + 4]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x1c], eax
nop dword [eax]
mov edi, esi
mov ebx, esi
mov esi, dword [esi]
lea ecx, [edi + 8]
call fcn.004223c0
push 0x38
push edi
call fcn.0043304f
mov eax, dword [ebp - 4]
add esp, 8
dec dword [eax + 8]
cmp ebx, dword [ebp - 0x1c]
je 0x42658d
mov eax, dword [ebp + 0xc]
cmp esi, eax
jne 0x426540
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp + 8]
jne 0x426628
mov ecx, dword [ebp - 0xc]
pop ebx
pop edi
mov dword [ecx], esi
mov ecx, dword [ebp - 8]
mov dword [ecx], esi
mov dword [esi + 4], ecx
pop esi
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
jne 0x42659f
mov eax, dword [ebp - 0x18]
mov dword [ecx], eax
jmp 0x4265a2
mov eax, dword [ebp - 8]
mov dword [ecx + 4], eax
mov eax, dword [ebp + 0xc]
cmp esi, eax
je 0x426628
nop dword [eax]
cmp dword [esi + 0x1c], 0x10
lea edx, [esi + 8]
mov ebx, dword [edx + 0x10]
jb 0x4265be
mov edx, dword [edx]
xor ecx, ecx
mov edi, 0x811c9dc5
test ebx, ebx
je 0x4265e1
nop dword [eax]
movzx eax, byte [ecx + edx]
inc ecx
xor eax, edi
imul edi, eax, 0x1000193
cmp ecx, ebx
jb 0x4265d0
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0x18]
mov ecx, dword [ebp - 0x14]
and eax, edi
lea eax, [ecx + eax*8]
mov dword [ebp + 8], eax
mov eax, dword [eax + 4]
mov dword [ebp - 0x1c], eax
mov edi, esi
mov ebx, esi
mov esi, dword [esi]
lea ecx, [edi + 8]
call fcn.004223c0
push 0x38
push edi
call fcn.0043304f
mov ecx, dword [ebp - 4]
add esp, 8
mov eax, dword [ebp + 0xc]
dec dword [ecx + 8]
cmp ebx, dword [ebp - 0x1c]
je 0x426639
cmp esi, eax
jne 0x4265f8
mov ecx, dword [ebp + 8]
mov dword [ecx], esi
mov ecx, dword [ebp - 8]
pop ebx
pop edi
mov dword [ecx], esi
mov dword [esi + 4], ecx
pop esi
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebp + 8]
mov edi, dword [ebp - 0x18]
mov dword [ecx], edi
mov dword [ecx + 4], edi
cmp esi, eax
jne 0x4265b0
mov ecx, dword [ebp - 8]
pop ebx
pop edi
mov dword [ecx], esi
mov dword [esi + 4], ecx
pop esi
mov esp, ebp
pop ebp
ret 8
Function at 0x426700
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov ebx, dword [esi]
movzx eax, bl
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
mov eax, ebx
shr eax, 8
movzx eax, al
xor edx, eax
mov eax, ebx
shr eax, 0x10
imul ecx, edx, 0x1000193
movzx eax, al
shr ebx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
xor eax, ebx
imul eax, eax, 0x1000193
push eax
push esi
lea eax, [ebp - 8]
push eax
call fcn.0041cfd0
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
test eax, eax
je 0x426769
add eax, 0xc
mov esp, ebp
pop ebp
ret 4
push str.invalid_unordered_map_K__T__key
call fcn.00431771
int3
Function at 0x42a670
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [ecx]
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
call dword [eax + 0x2c]
mov ebx, dword [ebp + 8]
mov esi, ebx
mov dword [ebp - 4], eax
cmp dword [ebx + 0x14], 0x10
mov edi, dword [ebx + 0x10]
jb 0x42a694
mov esi, dword [ebx]
xor ecx, ecx
mov edx, 0x811c9dc5
test edi, edi
je 0x42a6b4
nop
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x42a6a0
mov eax, dword [ebp - 4]
push edx
push ebx
lea ecx, [ebp - 0x10]
push ecx
mov ecx, eax
call fcn.0041cf40
mov esi, dword [eax + 4]
test esi, esi
jne 0x42a6ce
mov esi, dword [ebp - 4]
mov esi, dword [esi + 4]
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
call dword [eax + 0x2c]
cmp esi, dword [eax + 4]
jne 0x42a6e6
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esi + 0x20]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x42ac90
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push esi
push 0x32
push 0x46a1a4
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x42ad1b
mov ecx, 0x4548c0
mov eax, 0x46a1a4
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x42acd2
test dl, dl
je 0x42acce
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x42acd2
add eax, 2
add ecx, 2
test dl, dl
jne 0x42acb2
xor eax, eax
jmp 0x42acd7
sbb eax, eax
or eax, 1
test eax, eax
je 0x42ad1b
mov esi, dword [ebp + 8]
mov ecx, 0x46a1a4
mov dword [esi], 0
lea edx, [ecx + 1]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42ad00
sub ecx, edx
push ecx
push 0x46a1a4
mov ecx, esi
call fcn.00417610
mov eax, esi
pop esi
pop ebp
ret
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 0x10]
mov ecx, edx
push edi
mov dword [esi], 0
mov dword [esi + 0x10], 0
lea edi, [ecx + 1]
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42ad40
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.00417610
pop edi
mov eax, esi
pop esi
pop ebp
ret