joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100547e0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov edx, dword [0x100e83ec]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [esi + 1]
xor ecx, eax
movzx eax, byte [esi + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul ecx, ecx, 0x1000193
and ecx, dword [0x100e83f8]
mov eax, dword [edx + ecx*8]
add ecx, ecx
mov edi, dword [edx + ecx*4]
lea ebx, [edx + ecx*4]
mov edx, dword [0x100e83e4]
nop dword [eax + eax]
cmp edi, edx
jne 0x10054848
mov ecx, edx
jmp 0x1005484d
mov ecx, dword [ebx + 4]
mov ecx, dword [ecx]
cmp eax, ecx
je 0x10054860
mov ecx, dword [eax + 8]
cmp ecx, dword [esi]
je 0x1005485c
mov eax, dword [eax]
jmp 0x10054840
mov ecx, eax
jmp 0x10054864
mov eax, edx
mov ecx, edx
cmp ecx, edx
jne 0x100548b8
push ecx
mov dword [ebp + 8], esi
lea eax, [ebp + 8]
mov esi, dword [edx]
push eax
push ecx
mov edi, dword [esi + 4]
push edi
push esi
call fcn.1005bed0
mov edx, eax
mov ecx, 0x5d1745c
mov eax, dword [0x100e83e8]
sub ecx, eax
cmp ecx, 1
jb 0x100548c4
inc eax
mov ecx, 0x100e83e0
mov dword [0x100e83e8], eax
mov dword [esi + 4], edx
mov dword [edi], edx
mov eax, dword [0x100e83e4]
mov eax, dword [eax]
push eax
add eax, 8
push eax
lea eax, [ebp - 8]
push eax
call fcn.1005a8b0
mov eax, dword [ebp - 8]
pop edi
pop esi
add eax, 0xc
pop ebx
mov esp, ebp
pop ebp
ret 4
push str.list_T__too_long
call fcn.1005dddf
int3

Function at 0x10054960
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
mov dword [ebp - 4], esi
movzx eax, byte [edi]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [edi + 1]
xor edx, eax
movzx eax, byte [edi + 2]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [edi + 3]
imul ecx, edx, 0x1000193
mov edx, dword [esi + 0xc]
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [esi + 0x18]
mov esi, dword [esi + 4]
and ecx, eax
mov eax, dword [edx + ecx*8]
add ecx, ecx
mov ebx, dword [edx + ecx*4]
lea edx, [edx + ecx*4]
nop dword [eax]
cmp ebx, esi
jne 0x100549c8
mov ecx, esi
jmp 0x100549cd
mov ecx, dword [edx + 4]
mov ecx, dword [ecx]
cmp eax, ecx
je 0x100549e0
mov ecx, dword [eax + 8]
cmp ecx, dword [edi]
je 0x100549dc
mov eax, dword [eax]
jmp 0x100549c0
cmp eax, esi
jne 0x10054a2a
mov esi, dword [esi]
lea eax, [ebp + 8]
push ecx
push eax
push ecx
mov dword [ebp + 8], edi
mov edi, dword [esi + 4]
push edi
push esi
call fcn.1005bfc0
mov ebx, dword [ebp - 4]
mov edx, eax
mov ecx, 0x5d1745c
mov eax, dword [ebx + 8]
sub ecx, eax
cmp ecx, 1
jb 0x10054a36
inc eax
mov ecx, ebx
mov dword [ebx + 8], eax
mov dword [esi + 4], edx
mov dword [edi], edx
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
add eax, 8
push eax
lea eax, [ebp - 8]
push eax
call fcn.1005aaa0
mov eax, dword [ebp - 8]
pop edi
pop esi
add eax, 0xc
pop ebx
mov esp, ebp
pop ebp
ret 4
push str.list_T__too_long
call fcn.1005dddf
int3
Function at 0x10054a50
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
mov dword [ebp - 4], esi
movzx eax, byte [edi]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [edi + 1]
xor edx, eax
movzx eax, byte [edi + 2]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [edi + 3]
imul ecx, edx, 0x1000193
mov edx, dword [esi + 0xc]
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [esi + 0x18]
mov esi, dword [esi + 4]
and ecx, eax
mov eax, dword [edx + ecx*8]
add ecx, ecx
mov ebx, dword [edx + ecx*4]
lea edx, [edx + ecx*4]
nop dword [eax]
cmp ebx, esi
jne 0x10054ab8
mov ecx, esi
jmp 0x10054abd
mov ecx, dword [edx + 4]
mov ecx, dword [ecx]
cmp eax, ecx
je 0x10054ad0
mov ecx, dword [eax + 8]
cmp ecx, dword [edi]
je 0x10054acc
mov eax, dword [eax]
jmp 0x10054ab0
cmp eax, esi
jne 0x10054b1a
mov esi, dword [esi]
lea eax, [ebp + 8]
push ecx
push eax
push ecx
mov dword [ebp + 8], edi
mov edi, dword [esi + 4]
push edi
push esi
call fcn.1005c280
mov ebx, dword [ebp - 4]
mov edx, eax
mov ecx, 0x5d1745c
mov eax, dword [ebx + 8]
sub ecx, eax
cmp ecx, 1
jb 0x10054b26
inc eax
mov ecx, ebx
mov dword [ebx + 8], eax
mov dword [esi + 4], edx
mov dword [edi], edx
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
add eax, 8
push eax
lea eax, [ebp - 8]
push eax
call fcn.1005aef0
mov eax, dword [ebp - 8]
pop edi
pop esi
add eax, 0xc
pop ebx
mov esp, ebp
pop ebp
ret 4
push str.list_T__too_long
call fcn.1005dddf
int3

Function at 0x100552a0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
movzx eax, byte [ebx + 8]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [ebx + 9]
xor edx, eax
movzx eax, byte [ebx + 0xa]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [ebx + 0xb]
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [edi + 0x18]
and ecx, eax
lea edx, [ecx*8]
mov ecx, dword [edi + 0xc]
add ecx, edx
mov eax, dword [ecx]
cmp dword [ecx + 4], ebx
jne 0x10055313
cmp eax, ebx
jne 0x1005530b
mov eax, dword [edi + 4]
mov dword [ecx], eax
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 4]
mov dword [edx + ecx + 4], eax
jmp 0x1005531b
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
jmp 0x1005531b
cmp eax, ebx
jne 0x1005531e
mov eax, dword [ebx]
mov dword [ecx], eax
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx + 4]
mov esi, dword [ebx]
mov dword [eax], esi
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
lea ecx, [ebx + 0x18]
dec dword [edi + 8]
call fcn.10009db0
lea ecx, [ebx + 0x10]
call fcn.100215d0
push 0x40
push dword [ebx + 0x10]
call fcn.1005cbc1
push 0x2c
push ebx
call fcn.1005cbc1
mov eax, dword [ebp + 8]
add esp, 0x10
pop edi
mov dword [eax], esi
pop esi
pop ebx
pop ebp
ret 8
Function at 0x10055470
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
movzx eax, byte [ebx + 8]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [ebx + 9]
xor edx, eax
movzx eax, byte [ebx + 0xa]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [ebx + 0xb]
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [edi + 0x18]
and ecx, eax
lea edx, [ecx*8]
mov ecx, dword [edi + 0xc]
add ecx, edx
mov eax, dword [ecx]
cmp dword [ecx + 4], ebx
jne 0x100554e3
cmp eax, ebx
jne 0x100554db
mov eax, dword [edi + 4]
mov dword [ecx], eax
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 4]
mov dword [edx + ecx + 4], eax
jmp 0x100554eb
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
jmp 0x100554eb
cmp eax, ebx
jne 0x100554ee
mov eax, dword [ebx]
mov dword [ecx], eax
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx + 4]
mov esi, dword [ebx]
mov dword [eax], esi
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
lea ecx, [ebx + 0x18]
dec dword [edi + 8]
call fcn.10009db0
lea ecx, [ebx + 0x10]
call fcn.10021590
push 0x40
push dword [ebx + 0x10]
call fcn.1005cbc1
push 0x2c
push ebx
call fcn.1005cbc1
mov eax, dword [ebp + 8]
add esp, 0x10
pop edi
mov dword [eax], esi
pop esi
pop ebx
pop ebp
ret 8

Function at 0x10055540
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov ebx, ecx
movzx eax, byte [edi + 8]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [edi + 9]
xor edx, eax
movzx eax, byte [edi + 0xa]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [edi + 0xb]
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [ebx + 0x18]
and ecx, eax
lea edx, [ecx*8]
mov ecx, dword [ebx + 0xc]
add ecx, edx
mov eax, dword [ecx]
cmp dword [ecx + 4], edi
jne 0x100555b3
cmp eax, edi
jne 0x100555ab
mov eax, dword [ebx + 4]
mov dword [ecx], eax
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 4]
mov dword [edx + ecx + 4], eax
jmp 0x100555bb
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
jmp 0x100555bb
cmp eax, edi
jne 0x100555be
mov eax, dword [edi]
mov dword [ecx], eax
mov edi, dword [ebp + 0xc]
mov eax, dword [edi + 4]
mov esi, dword [edi]
mov dword [eax], esi
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
lea ecx, [edi + 0xc]
dec dword [ebx + 8]
call fcn.1001d250
push 0x2c
push edi
call fcn.1005cbc1
mov eax, dword [ebp + 8]
add esp, 8
pop edi
mov dword [eax], esi
pop esi
pop ebx
pop ebp
ret 8
Function at 0x10056f40
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b3f50
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
mov dword [ebp - 4], 0
push ebx
mov ebx, ecx
mov ecx, dword [ebp + 0xc]
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ecx]
mov esi, dword [ebx + 0x18]
xor eax, 0x811c9dc5
mov edi, dword [ebx + 4]
imul edx, eax, 0x1000193
movzx eax, byte [ecx + 1]
mov dword [ebp - 0x18], ebx
xor edx, eax
imul eax, edx, 0x1000193
and esi, eax
mov eax, dword [ebx + 0xc]
mov dword [ebp + 0xc], esi
mov edx, dword [eax + esi*8]
cmp edx, edi
jne 0x10056fa3
mov esi, edi
jmp 0x10056fb0
mov esi, dword [eax + esi*8 + 4]
mov esi, dword [esi]
nop dword [eax]
cmp esi, edx
je 0x10056fdc
mov esi, dword [esi + 4]
mov ax, word [ecx]
cmp ax, word [esi + 8]
jne 0x10056fb0
mov eax, dword [ebp + 8]
mov dword [eax], esi
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [ebp - 4], 0xffffffff
mov edi, dword [edi]
push ecx
mov eax, dword [edi + 4]
push eax
push edi
mov dword [ebp - 0x14], eax
call fcn.1001cfa0
mov edx, eax
mov ecx, 0x15555554
mov eax, dword [ebx + 8]
sub ecx, eax
cmp ecx, 1
jb 0x100570d6
inc eax
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x14]
mov dword [edi + 4], edx
mov dword [eax], edx
mov ecx, dword [ebx + 4]
mov edi, dword [ecx]
mov dword [ebp - 0x14], edi
mov eax, dword [edi]
cmp esi, eax
je 0x10057046
mov ecx, dword [edi + 4]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
mov dword [ecx], esi
mov ecx, dword [esi + 4]
mov dword [ecx], edi
mov ecx, dword [eax + 4]
mov edx, dword [esi + 4]
mov dword [esi + 4], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov dword [edi + 4], edx
mov ecx, dword [ebx + 4]
mov eax, dword [ebx + 0xc]
mov edx, dword [ebp + 0xc]
lea edx, [eax + edx*8]
mov eax, dword [edx]
cmp eax, ecx
jne 0x10057063
mov ecx, dword [ebp + 0xc]
mov dword [edx], edi
mov eax, dword [ebx + 0xc]
mov dword [eax + ecx*8 + 4], edi
jmp 0x10057089
cmp eax, esi
jne 0x1005706b
mov dword [edx], edi
jmp 0x10057089
mov eax, dword [edx + 4]
mov eax, dword [eax]
mov dword [edx + 4], eax
cmp eax, edi
je 0x10057089
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebp + 0xc]
lea ecx, [eax + ecx*8]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 4]
mov dword [ecx + 4], eax
mov ecx, ebx
mov dword [ebp - 4], 2
call fcn.1001ca50
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword [eax], edi
pop edi
pop esi
mov byte [eax + 4], 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push str.list_T__too_long
call fcn.1005dddf
int3
Function at 0x100570f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, edi
cmp dword [edi + 0x14], 0x10
mov ebx, dword [edi + 0x10]
jb 0x10057109
mov esi, dword [edi]
xor ecx, ecx
mov edx, 0x811c9dc5
test ebx, ebx
je 0x10057125
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, ebx
jb 0x10057114
and edx, dword [0x100e88b8]
mov ecx, dword [0x100e88ac]
mov ebx, dword [0x100e88a4]
lea eax, [edx + edx]
mov esi, dword [ecx + edx*8]
lea eax, [eax + 1]
mov edx, dword [ecx + eax*4 - 4]
lea eax, [ecx + eax*4]
mov dword [ebp - 4], edx
mov dword [ebp - 8], eax
nop dword [eax]
cmp edx, ebx
jne 0x10057158
mov eax, ebx
jmp 0x1005715c
mov eax, dword [eax]
mov eax, dword [eax]
cmp esi, eax
je 0x100571d2
cmp dword [edi + 0x14], 0x10
lea eax, [esi + 8]
mov ecx, edi
jb 0x1005716d
mov ecx, dword [edi]
mov edx, dword [eax + 0x14]
mov dword [ebp + 0xc], eax
mov dword [ebp - 0xc], edx
cmp edx, 0x10
jb 0x10057180
mov edx, dword [eax]
mov dword [ebp + 0xc], edx
push dword [edi + 0x10]
mov eax, dword [eax + 0x10]
mov edx, eax
push ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x10], eax
call fcn.10008560
add esp, 8
test al, al
jne 0x100571a5
mov esi, dword [esi]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
jmp 0x10057150
cmp dword [ebp - 0xc], 0x10
lea eax, [esi + 8]
jb 0x100571b0
mov eax, dword [eax]
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x100571ba
mov ecx, dword [edi]
push dword [ebp - 0x10]
mov edx, dword [edi + 0x10]
push eax
call fcn.10008560
add esp, 8
test al, al
cmove esi, ebx
mov eax, esi
jmp 0x100571d6
mov esi, ebx
mov eax, ebx
cmp eax, ebx
jne 0x10057232
mov esi, dword [ebx]
lea eax, [ebp + 0xc]
push ecx
push eax
push ecx
mov dword [ebp + 0xc], edi
mov edi, dword [esi + 4]
push edi
push esi
call fcn.1005bbd0
mov edx, eax
mov ecx, 0x4924923
mov eax, dword [0x100e88a8]
sub ecx, eax
cmp ecx, 1
jb 0x10057244
inc eax
mov ecx, 0x100e88a0
mov dword [0x100e88a8], eax
mov dword [esi + 4], edx
mov esi, dword [ebp + 8]
mov dword [edi], edx
mov eax, dword [0x100e88a4]
mov eax, dword [eax]
push eax
add eax, 8
push eax
push esi
call fcn.1005a480
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp + 8]
pop edi
mov dword [eax], esi
pop esi
mov byte [eax + 4], 0
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.list_T__too_long
call fcn.1005dddf
int3
Function at 0x10057250
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, edi
mov dword [ebp - 4], ecx
cmp dword [edi + 0x14], 0x10
mov ebx, dword [edi + 0x10]
jb 0x1005726c
mov esi, dword [edi]
xor ecx, ecx
mov edx, 0x811c9dc5
test ebx, ebx
je 0x10057288
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, ebx
jb 0x10057277
mov ebx, dword [ebp - 4]
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0xc]
and eax, edx
mov ebx, dword [ebx + 4]
mov esi, dword [ecx + eax*8]
add eax, eax
mov edx, dword [ecx + eax*4]
inc eax
mov dword [ebp - 8], edx
lea eax, [ecx + eax*4]
mov dword [ebp - 0xc], eax
cmp edx, ebx
jne 0x100572b0
mov eax, ebx
jmp 0x100572b4
mov eax, dword [eax]
mov eax, dword [eax]
cmp esi, eax
je 0x10057327
cmp dword [edi + 0x14], 0x10
mov edx, edi
jb 0x100572c2
mov edx, dword [edi]
mov edi, dword [esi + 0x1c]
lea ecx, [esi + 8]
mov dword [ebp - 0x10], edi
cmp edi, 0x10
mov edi, dword [ebp + 0xc]
jb 0x100572d6
mov ecx, dword [esi + 8]
push dword [edi + 0x10]
mov eax, dword [esi + 0x18]
push edx
mov edx, eax
mov dword [ebp - 0x14], eax
call fcn.10008560
add esp, 8
test al, al
jne 0x100572f8
mov esi, dword [esi]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
jmp 0x100572a8
cmp dword [ebp - 0x10], 0x10
lea eax, [esi + 8]
jb 0x10057303
mov eax, dword [eax]
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x1005730d
mov ecx, dword [edi]
push dword [ebp - 0x14]
mov edx, dword [edi + 0x10]
push eax
call fcn.10008560
add esp, 8
mov ecx, ebx
test al, al
cmovne ecx, esi
mov eax, ecx
jmp 0x1005732b
mov ecx, ebx
mov eax, ebx
cmp eax, ebx
jne 0x10057381
mov esi, dword [ebx]
lea eax, [ebp + 0xc]
push ecx
push eax
push ecx
mov dword [ebp + 0xc], edi
mov edi, dword [esi + 4]
push edi
push esi
call fcn.1005bce0
mov ebx, dword [ebp - 4]
mov edx, eax
mov ecx, 0x4924923
mov eax, dword [ebx + 8]
sub ecx, eax
cmp ecx, 1
jb 0x10057393
inc eax
mov ecx, ebx
mov dword [ebx + 8], eax
mov dword [esi + 4], edx
mov esi, dword [ebp + 8]
mov dword [edi], edx
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
add eax, 8
push eax
push esi
call fcn.1005a480
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov dword [eax], ecx
mov byte [eax + 4], 0
mov esp, ebp
pop ebp
ret 8
push str.list_T__too_long
call fcn.1005dddf
int3
Function at 0x100573a0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, edi
mov dword [ebp - 4], ecx
cmp dword [edi + 0x14], 0x10
mov ebx, dword [edi + 0x10]
jb 0x100573bc
mov esi, dword [edi]
xor ecx, ecx
mov edx, 0x811c9dc5
test ebx, ebx
je 0x100573d8
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, ebx
jb 0x100573c7
mov ebx, dword [ebp - 4]
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0xc]
and eax, edx
mov ebx, dword [ebx + 4]
mov esi, dword [ecx + eax*8]
add eax, eax
mov edx, dword [ecx + eax*4]
inc eax
mov dword [ebp - 8], edx
lea eax, [ecx + eax*4]
mov dword [ebp - 0xc], eax
cmp edx, ebx
jne 0x10057400
mov eax, ebx
jmp 0x10057404
mov eax, dword [eax]
mov eax, dword [eax]
cmp esi, eax
je 0x10057477
cmp dword [edi + 0x14], 0x10
mov edx, edi
jb 0x10057412
mov edx, dword [edi]
mov edi, dword [esi + 0x1c]
lea ecx, [esi + 8]
mov dword [ebp - 0x10], edi
cmp edi, 0x10
mov edi, dword [ebp + 0xc]
jb 0x10057426
mov ecx, dword [esi + 8]
push dword [edi + 0x10]
mov eax, dword [esi + 0x18]
push edx
mov edx, eax
mov dword [ebp - 0x14], eax
call fcn.10008560
add esp, 8
test al, al
jne 0x10057448
mov esi, dword [esi]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
jmp 0x100573f8
cmp dword [ebp - 0x10], 0x10
lea eax, [esi + 8]
jb 0x10057453
mov eax, dword [eax]
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x1005745d
mov ecx, dword [edi]
push dword [ebp - 0x14]
mov edx, dword [edi + 0x10]
push eax
call fcn.10008560
add esp, 8
mov ecx, ebx
test al, al
cmovne ecx, esi
mov eax, ecx
jmp 0x1005747b
mov ecx, ebx
mov eax, ebx
cmp eax, ebx
jne 0x100574d1
mov esi, dword [ebx]
lea eax, [ebp + 0xc]
push ecx
push eax
push ecx
mov dword [ebp + 0xc], edi
mov edi, dword [esi + 4]
push edi
push esi
call fcn.1005bdd0
mov ebx, dword [ebp - 4]
mov edx, eax
mov ecx, 0x3fffffe
mov eax, dword [ebx + 8]
sub ecx, eax
cmp ecx, 1
jb 0x100574e3
inc eax
mov ecx, ebx
mov dword [ebx + 8], eax
mov dword [esi + 4], edx
mov esi, dword [ebp + 8]
mov dword [edi], edx
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
add eax, 8
push eax
push esi
call fcn.10059420
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov dword [eax], ecx
mov byte [eax + 4], 0
mov esp, ebp
pop ebp
ret 8
push str.list_T__too_long
call fcn.1005dddf
int3
Function at 0x100574f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, edi
mov dword [ebp - 4], ecx
cmp dword [edi + 0x14], 0x10
mov ebx, dword [edi + 0x10]
jb 0x1005750c
mov esi, dword [edi]
xor ecx, ecx
mov edx, 0x811c9dc5
test ebx, ebx
je 0x10057528
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, ebx
jb 0x10057517
mov ebx, dword [ebp - 4]
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0xc]
and eax, edx
mov ebx, dword [ebx + 4]
mov esi, dword [ecx + eax*8]
add eax, eax
mov edx, dword [ecx + eax*4]
inc eax
mov dword [ebp - 8], edx
lea eax, [ecx + eax*4]
mov dword [ebp - 0xc], eax
cmp edx, ebx
jne 0x10057550
mov eax, ebx
jmp 0x10057554
mov eax, dword [eax]
mov eax, dword [eax]
cmp esi, eax
je 0x100575c7
cmp dword [edi + 0x14], 0x10
mov edx, edi
jb 0x10057562
mov edx, dword [edi]
mov edi, dword [esi + 0x1c]
lea ecx, [esi + 8]
mov dword [ebp - 0x10], edi
cmp edi, 0x10
mov edi, dword [ebp + 0xc]
jb 0x10057576
mov ecx, dword [esi + 8]
push dword [edi + 0x10]
mov eax, dword [esi + 0x18]
push edx
mov edx, eax
mov dword [ebp - 0x14], eax
call fcn.10008560
add esp, 8
test al, al
jne 0x10057598
mov esi, dword [esi]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
jmp 0x10057548
cmp dword [ebp - 0x10], 0x10
lea eax, [esi + 8]
jb 0x100575a3
mov eax, dword [eax]
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x100575ad
mov ecx, dword [edi]
push dword [ebp - 0x14]
mov edx, dword [edi + 0x10]
push eax
call fcn.10008560
add esp, 8
mov ecx, ebx
test al, al
cmovne ecx, esi
mov eax, ecx
jmp 0x100575cb
mov ecx, ebx
mov eax, ebx
cmp eax, ebx
jne 0x10057621
mov esi, dword [ebx]
lea eax, [ebp + 0xc]
push ecx
push eax
push ecx
mov dword [ebp + 0xc], edi
mov edi, dword [esi + 4]
push edi
push esi
call fcn.1005be50
mov ebx, dword [ebp - 4]
mov edx, eax
mov ecx, 0x71c71c6
mov eax, dword [ebx + 8]
sub ecx, eax
cmp ecx, 1
jb 0x10057633
inc eax
mov ecx, ebx
mov dword [ebx + 8], eax
mov dword [esi + 4], edx
mov esi, dword [ebp + 8]
mov dword [edi], edx
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
add eax, 8
push eax
push esi
call fcn.10059120
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov dword [eax], ecx
mov byte [eax + 4], 0
mov esp, ebp
pop ebp
ret 8
push str.list_T__too_long
call fcn.1005dddf
int3
Function at 0x10057640
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, edi
mov dword [ebp - 4], ecx
cmp dword [edi + 0x14], 0x10
mov ebx, dword [edi + 0x10]
jb 0x1005765c
mov esi, dword [edi]
xor ecx, ecx
mov edx, 0x811c9dc5
test ebx, ebx
je 0x10057678
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, ebx
jb 0x10057667
mov ebx, dword [ebp - 4]
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0xc]
and eax, edx
mov ebx, dword [ebx + 4]
mov esi, dword [ecx + eax*8]
add eax, eax
mov edx, dword [ecx + eax*4]
inc eax
mov dword [ebp - 8], edx
lea eax, [ecx + eax*4]
mov dword [ebp - 0xc], eax
cmp edx, ebx
jne 0x100576a0
mov eax, ebx
jmp 0x100576a4
mov eax, dword [eax]
mov eax, dword [eax]
cmp esi, eax
je 0x10057717
cmp dword [edi + 0x14], 0x10
mov edx, edi
jb 0x100576b2
mov edx, dword [edi]
mov edi, dword [esi + 0x1c]
lea ecx, [esi + 8]
mov dword [ebp - 0x10], edi
cmp edi, 0x10
mov edi, dword [ebp + 0xc]
jb 0x100576c6
mov ecx, dword [esi + 8]
push dword [edi + 0x10]
mov eax, dword [esi + 0x18]
push edx
mov edx, eax
mov dword [ebp - 0x14], eax
call fcn.10008560
add esp, 8
test al, al
jne 0x100576e8
mov esi, dword [esi]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
jmp 0x10057698
cmp dword [ebp - 0x10], 0x10
lea eax, [esi + 8]
jb 0x100576f3
mov eax, dword [eax]
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x100576fd
mov ecx, dword [edi]
push dword [ebp - 0x14]
mov edx, dword [edi + 0x10]
push eax
call fcn.10008560
add esp, 8
mov ecx, ebx
test al, al
cmovne ecx, esi
mov eax, ecx
jmp 0x1005771b
mov ecx, ebx
mov eax, ebx
cmp eax, ebx
jne 0x10057771
mov esi, dword [ebx]
lea eax, [ebp + 0xc]
push ecx
push eax
push ecx
mov dword [ebp + 0xc], edi
mov edi, dword [esi + 4]
push edi
push esi
call fcn.1005bf40
mov ebx, dword [ebp - 4]
mov edx, eax
mov ecx, 0x3fffffe
mov eax, dword [ebx + 8]
sub ecx, eax
cmp ecx, 1
jb 0x10057783
inc eax
mov ecx, ebx
mov dword [ebx + 8], eax
mov dword [esi + 4], edx
mov esi, dword [ebp + 8]
mov dword [edi], edx
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
add eax, 8
push eax
push esi
call fcn.10059730
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov dword [eax], ecx
mov byte [eax + 4], 0
mov esp, ebp
pop ebp
ret 8
push str.list_T__too_long
call fcn.1005dddf
int3