joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10171970
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x28], eax
push ebx
push esi
push edi
mov edi, edx
mov dword [esp + 0x24], ecx
call fcn.10170ca0
mov ebx, eax
mov eax, dword [esp + 0x24]
movzx ecx, al
xor ecx, 0x811c9dc5
mov dword [esp + 0x10], ebx
imul edx, ecx, 0x1000193
movzx ecx, ah
movzx eax, byte [esp + 0x27]
xor edx, ecx
movzx ecx, byte [esp + 0x26]
imul edx, edx, 0x1000193
xor edx, ecx
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, ebx
push eax
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
je 0x101719f2
cmp eax, dword [ebx + 4]
jne 0x10171a7a
mov edi, dword [edi]
lea eax, [esp + 0x30]
mov ebx, dword [edi + 0xb4]
lea esi, [edi + 0xb4]
push eax
push 4
push 4
push esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], 4
mov dword [esp + 0x40], 0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x30]
mov dword [esi], 0x101773c0
push eax
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x14], eax
mov eax, 0x2d
mov word [esp + 0x1c], ax
mov ax, word [esp + 0x2e]
mov word [esp + 0x1e], ax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x24], ebx
lea eax, [esp + 0x2c]
mov ebx, dword [esp + 0x14]
mov ecx, ebx
push eax
mov dword [esp + 0x20], edi
call fcn.10173080
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.10173410
mov ecx, dword [esp + 0x34]
pop edi
pop esi
mov eax, dword [eax]
pop ebx
xor ecx, esp
mov eax, dword [eax + 0x14]
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret
Function at 0x10171ab0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x28], eax
push ebx
push esi
push edi
mov edi, edx
mov dword [esp + 0x24], ecx
call fcn.10170ca0
mov ebx, eax
mov eax, dword [esp + 0x24]
movzx ecx, al
xor ecx, 0x811c9dc5
mov dword [esp + 0x10], ebx
imul edx, ecx, 0x1000193
movzx ecx, ah
movzx eax, byte [esp + 0x27]
xor edx, ecx
movzx ecx, byte [esp + 0x26]
imul edx, edx, 0x1000193
xor edx, ecx
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, ebx
push eax
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
je 0x10171b32
cmp eax, dword [ebx + 4]
jne 0x10171bba
mov edi, dword [edi]
lea eax, [esp + 0x30]
mov ebx, dword [edi + 0x9c]
lea esi, [edi + 0x9c]
push eax
push 4
push 4
push esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], 4
mov dword [esp + 0x40], 0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x30]
mov dword [esi], 0x101774b0
push eax
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x14], eax
mov eax, 0x27
mov word [esp + 0x1c], ax
mov ax, word [esp + 0x2e]
mov word [esp + 0x1e], ax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x24], ebx
lea eax, [esp + 0x2c]
mov ebx, dword [esp + 0x14]
mov ecx, ebx
push eax
mov dword [esp + 0x20], edi
call fcn.10173080
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.10173410
mov ecx, dword [esp + 0x34]
pop edi
pop esi
mov eax, dword [eax]
pop ebx
xor ecx, esp
mov eax, dword [eax + 0x14]
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret
Function at 0x10171bf0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x28], eax
push ebx
push esi
push edi
mov edi, edx
mov dword [esp + 0x24], ecx
call fcn.10170ca0
mov ebx, eax
mov eax, dword [esp + 0x24]
movzx ecx, al
xor ecx, 0x811c9dc5
mov dword [esp + 0x10], ebx
imul edx, ecx, 0x1000193
movzx ecx, ah
movzx eax, byte [esp + 0x27]
xor edx, ecx
movzx ecx, byte [esp + 0x26]
imul edx, edx, 0x1000193
xor edx, ecx
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, ebx
push eax
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
je 0x10171c72
cmp eax, dword [ebx + 4]
jne 0x10171cfa
mov edi, dword [edi]
lea eax, [esp + 0x30]
mov ebx, dword [edi + 0xb8]
lea esi, [edi + 0xb8]
push eax
push 4
push 4
push esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], 4
mov dword [esp + 0x40], 0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x30]
mov dword [esi], 0x10177550
push eax
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x14], eax
mov eax, 0x2e
mov word [esp + 0x1c], ax
mov ax, word [esp + 0x2e]
mov word [esp + 0x1e], ax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x24], ebx
lea eax, [esp + 0x2c]
mov ebx, dword [esp + 0x14]
mov ecx, ebx
push eax
mov dword [esp + 0x20], edi
call fcn.10173080
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.10173410
mov ecx, dword [esp + 0x34]
pop edi
pop esi
mov eax, dword [eax]
pop ebx
xor ecx, esp
mov eax, dword [eax + 0x14]
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret
Function at 0x10171d30
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x28], eax
push ebx
push esi
push edi
mov edi, edx
mov dword [esp + 0x24], ecx
call fcn.10170ca0
mov ebx, eax
mov eax, dword [esp + 0x24]
movzx ecx, al
xor ecx, 0x811c9dc5
mov dword [esp + 0x10], ebx
imul edx, ecx, 0x1000193
movzx ecx, ah
movzx eax, byte [esp + 0x27]
xor edx, ecx
movzx ecx, byte [esp + 0x26]
imul edx, edx, 0x1000193
xor edx, ecx
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, ebx
push eax
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
je 0x10171db2
cmp eax, dword [ebx + 4]
jne 0x10171e3a
mov edi, dword [edi]
lea eax, [esp + 0x30]
mov ebx, dword [edi + 0xa0]
lea esi, [edi + 0xa0]
push eax
push 4
push 4
push esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], 4
mov dword [esp + 0x40], 0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x30]
mov dword [esi], 0x101776f0
push eax
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x14], eax
mov eax, 0x28
mov word [esp + 0x1c], ax
mov ax, word [esp + 0x2e]
mov word [esp + 0x1e], ax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x24], ebx
lea eax, [esp + 0x2c]
mov ebx, dword [esp + 0x14]
mov ecx, ebx
push eax
mov dword [esp + 0x20], edi
call fcn.10173080
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.10173410
mov ecx, dword [esp + 0x34]
pop edi
pop esi
mov eax, dword [eax]
pop ebx
xor ecx, esp
mov eax, dword [eax + 0x14]
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret
Function at 0x10171e70
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x28], eax
push ebx
push esi
push edi
mov edi, edx
mov dword [esp + 0x24], ecx
call fcn.10170ca0
mov ebx, eax
mov eax, dword [esp + 0x24]
movzx ecx, al
xor ecx, 0x811c9dc5
mov dword [esp + 0x10], ebx
imul edx, ecx, 0x1000193
movzx ecx, ah
movzx eax, byte [esp + 0x27]
xor edx, ecx
movzx ecx, byte [esp + 0x26]
imul edx, edx, 0x1000193
xor edx, ecx
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, ebx
push eax
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
je 0x10171ef2
cmp eax, dword [ebx + 4]
jne 0x10171f74
mov edi, dword [edi]
lea eax, [esp + 0x30]
mov ebx, dword [edi + 0x34]
lea esi, [edi + 0x34]
push eax
push 4
push 4
push esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], 4
mov dword [esp + 0x40], 0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x30]
mov dword [esi], 0x101777a0
push eax
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x14], eax
mov eax, 0xd
mov word [esp + 0x1c], ax
mov ax, word [esp + 0x2e]
mov word [esp + 0x1e], ax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x24], ebx
lea eax, [esp + 0x2c]
mov ebx, dword [esp + 0x14]
mov ecx, ebx
push eax
mov dword [esp + 0x20], edi
call fcn.10173080
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.10173410
mov ecx, dword [esp + 0x34]
pop edi
pop esi
mov eax, dword [eax]
pop ebx
xor ecx, esp
mov eax, dword [eax + 0x14]
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret
Function at 0x10171fa0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x40
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x3c], eax
push esi
push edi
mov edi, edx
mov dword [esp + 0x40], ecx
call fcn.10170e10
mov edx, dword [esp + 0x40]
mov esi, eax
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [esp + 0x42]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esp + 0x43]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
jne 0x10172016
mov eax, dword [esi + 4]
cmp eax, dword [esi + 4]
jne 0x1017204f
push 1
push edi
lea ecx, [esp + 0x34]
call fcn.10191410
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x14], ecx
mov ecx, esi
movups xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x10]
push eax
movups xmmword [esp + 0x20], xmm0
call fcn.10172eb0
lea eax, [esp + 0x40]
mov ecx, esi
push eax
lea eax, [esp + 0x10]
push eax
call fcn.10173240
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x10172073
mov dword [ecx + 0x98], 0x10173ec0
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
mov eax, dword [eax + 0x94]
xor ecx, esp
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret

Function at 0x10172090
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x38], eax
push ebx
push esi
push edi
movzx edi, word [ebp + 8]
mov ebx, edx
mov dword [esp + 0x40], ecx
call fcn.10170e10
mov edx, dword [esp + 0x40]
mov esi, eax
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [esp + 0x42]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esp + 0x43]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
jne 0x1017210b
mov eax, dword [esi + 4]
cmp eax, dword [esi + 4]
jne 0x10172145
push dword [ebp + 0x10]
lea ecx, [esp + 0x30]
push ebx
call fcn.10191410
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x14], ecx
mov ecx, esi
movups xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x10]
push eax
movups xmmword [esp + 0x20], xmm0
call fcn.10172eb0
lea eax, [esp + 0x40]
mov ecx, esi
push eax
lea eax, [esp + 0x10]
push eax
call fcn.10173240
mov esi, dword [eax]
mov edx, dword [esi + 0x18]
test edx, edx
je 0x10172168
mov eax, dword [ebp + 0xc]
mov ecx, edi
mov dword [edx + ecx*4 + 4], eax
mov eax, dword [esi + 0x10]
mov ecx, edi
pop edi
pop esi
pop ebx
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret
Function at 0x10172190
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x40
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x3c], eax
push esi
push edi
mov edi, edx
mov dword [esp + 0x40], ecx
call fcn.10170e10
mov edx, dword [esp + 0x40]
mov esi, eax
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [esp + 0x42]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esp + 0x43]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
jne 0x10172206
mov eax, dword [esi + 4]
cmp eax, dword [esi + 4]
jne 0x1017223f
push 0
push edi
lea ecx, [esp + 0x34]
call fcn.10191410
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x14], ecx
mov ecx, esi
movups xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x10]
push eax
movups xmmword [esp + 0x20], xmm0
call fcn.10172eb0
lea eax, [esp + 0x40]
mov ecx, esi
push eax
lea eax, [esp + 0x10]
push eax
call fcn.10173240
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x10172263
mov dword [ecx + 0x90], 0x10173810
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
mov eax, dword [eax + 0x8c]
xor ecx, esp
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret

Function at 0x10172280
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x40
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x3c], eax
push esi
push edi
mov edi, edx
mov dword [esp + 0x40], ecx
call fcn.10170e10
mov edx, dword [esp + 0x40]
mov esi, eax
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [esp + 0x42]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esp + 0x43]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
jne 0x101722f6
mov eax, dword [esi + 4]
cmp eax, dword [esi + 4]
jne 0x1017232f
push 0
push edi
lea ecx, [esp + 0x34]
call fcn.10191410
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x14], ecx
mov ecx, esi
movups xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x10]
push eax
movups xmmword [esp + 0x20], xmm0
call fcn.10172eb0
lea eax, [esp + 0x40]
mov ecx, esi
push eax
lea eax, [esp + 0x10]
push eax
call fcn.10173240
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x10172350
mov dword [ecx + 0x4c], 0x101738a0
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
mov eax, dword [eax + 0x48]
xor ecx, esp
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret
Function at 0x10172370
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x40
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x3c], eax
push esi
push edi
mov edi, edx
mov dword [esp + 0x40], ecx
call fcn.10170e10
mov edx, dword [esp + 0x40]
mov esi, eax
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [esp + 0x42]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esp + 0x43]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
jne 0x101723e6
mov eax, dword [esi + 4]
cmp eax, dword [esi + 4]
jne 0x1017241f
push 0
push edi
lea ecx, [esp + 0x34]
call fcn.10191410
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x14], ecx
mov ecx, esi
movups xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x10]
push eax
movups xmmword [esp + 0x20], xmm0
call fcn.10172eb0
lea eax, [esp + 0x40]
mov ecx, esi
push eax
lea eax, [esp + 0x10]
push eax
call fcn.10173240
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x10172440
mov dword [ecx + 0x44], 0x10174b40
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
mov eax, dword [eax + 0x40]
xor ecx, esp
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret

Function at 0x10172460
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x40
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x3c], eax
push esi
push edi
mov edi, edx
mov dword [esp + 0x40], ecx
call fcn.10170e10
mov edx, dword [esp + 0x40]
mov esi, eax
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [esp + 0x42]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esp + 0x43]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
jne 0x101724d6
mov eax, dword [esi + 4]
cmp eax, dword [esi + 4]
jne 0x1017250f
push 0
push edi
lea ecx, [esp + 0x34]
call fcn.10191410
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x14], ecx
mov ecx, esi
movups xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x10]
push eax
movups xmmword [esp + 0x20], xmm0
call fcn.10172eb0
lea eax, [esp + 0x40]
mov ecx, esi
push eax
lea eax, [esp + 0x10]
push eax
call fcn.10173240
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x10172530
mov dword [ecx + 0x48], 0x10174850
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
mov eax, dword [eax + 0x44]
xor ecx, esp
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret
Function at 0x10172550
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x40
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x3c], eax
push esi
push edi
mov edi, edx
mov dword [esp + 0x40], ecx
call fcn.10170e10
mov edx, dword [esp + 0x40]
mov esi, eax
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [esp + 0x42]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esp + 0x43]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
jne 0x101725c6
mov eax, dword [esi + 4]
cmp eax, dword [esi + 4]
jne 0x101725ff
push 1
push edi
lea ecx, [esp + 0x34]
call fcn.10191410
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x14], ecx
mov ecx, esi
movups xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x10]
push eax
movups xmmword [esp + 0x20], xmm0
call fcn.10172eb0
lea eax, [esp + 0x40]
mov ecx, esi
push eax
lea eax, [esp + 0x10]
push eax
call fcn.10173240
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x10172623
mov dword [ecx + 0x198], 0x10174dd0
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
mov eax, dword [eax + 0x194]
xor ecx, esp
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret

Function at 0x10172640
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x40
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x3c], eax
push esi
push edi
mov edi, edx
mov dword [esp + 0x40], ecx
call fcn.10170e10
mov edx, dword [esp + 0x40]
mov esi, eax
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [esp + 0x42]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esp + 0x43]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
jne 0x101726b6
mov eax, dword [esi + 4]
cmp eax, dword [esi + 4]
jne 0x101726ef
push 1
push edi
lea ecx, [esp + 0x34]
call fcn.10191410
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x14], ecx
mov ecx, esi
movups xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x10]
push eax
movups xmmword [esp + 0x20], xmm0
call fcn.10172eb0
lea eax, [esp + 0x40]
mov ecx, esi
push eax
lea eax, [esp + 0x10]
push eax
call fcn.10173240
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x10172713
mov dword [ecx + 0x84], 0x10174e50
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
mov eax, dword [eax + 0x80]
xor ecx, esp
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret
Function at 0x10172730
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x40
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x3c], eax
push esi
push edi
mov edi, edx
mov dword [esp + 0x40], ecx
call fcn.10170e10
mov edx, dword [esp + 0x40]
mov esi, eax
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [esp + 0x42]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esp + 0x43]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
jne 0x101727a6
mov eax, dword [esi + 4]
cmp eax, dword [esi + 4]
jne 0x101727df
push 0
push edi
lea ecx, [esp + 0x34]
call fcn.10191410
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x14], ecx
mov ecx, esi
movups xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x10]
push eax
movups xmmword [esp + 0x20], xmm0
call fcn.10172eb0
lea eax, [esp + 0x40]
mov ecx, esi
push eax
lea eax, [esp + 0x10]
push eax
call fcn.10173240
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x10172800
mov dword [ecx + 0x18], 0x10174bb0
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
mov eax, dword [eax + 0x14]
xor ecx, esp
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret

Function at 0x10172820
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x40
mov eax, dword [0x10216080]
xor eax, esp
mov dword [esp + 0x3c], eax
push esi
push edi
mov edi, edx
mov dword [esp + 0x40], ecx
call fcn.10170e10
mov edx, dword [esp + 0x40]
mov esi, eax
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [esp + 0x42]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esp + 0x43]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, esi
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.10114f20
mov eax, dword [eax + 4]
test eax, eax
jne 0x10172896
mov eax, dword [esi + 4]
cmp eax, dword [esi + 4]
jne 0x101728cf
push 0
push edi
lea ecx, [esp + 0x34]
call fcn.10191410
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x14], ecx
mov ecx, esi
movups xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x10]
push eax
movups xmmword [esp + 0x20], xmm0
call fcn.10172eb0
lea eax, [esp + 0x40]
mov ecx, esi
push eax
lea eax, [esp + 0x10]
push eax
call fcn.10173240
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x101728f0
mov dword [ecx + 0x10], 0x10174f30
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
mov eax, dword [eax + 0xc]
xor ecx, esp
call fcn.101a8fbb
mov esp, ebp
pop ebp
ret