joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1011f0f0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101751f5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
movzx eax, byte [edi]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edi + 1]
xor ecx, eax
movzx eax, byte [edi + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
lea eax, [ebp - 0x14]
imul ebx, ecx, 0x1000193
push ebx
push edi
push eax
call fcn.10122d30
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x1011f171
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [0x102a615c], 0xaaaaaaa
jne 0x1011f188
push str.unordered_map_set_too_long
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
mov dword [ebp - 0x1c], 0x102a6158
mov dword [ebp - 4], 0
push 0x18
mov dword [ebp - 0x18], 0
call fcn.1016f536
mov ecx, dword [edi]
mov esi, eax
xorps xmm0, xmm0
mov dword [ebp - 0x18], esi
add esp, 4
mov dword [esi + 8], ecx
movq qword [esi + 0xc], xmm0
mov dword [esi + 0xc], 0x64
mov dword [esi + 0x10], 0x64
mov dword [esi + 0x14], 0
mov dword [ebp - 4], 1
mov ecx, dword [0x102a615c]
mov edi, dword [0x102a6170]
lea eax, [ecx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
movd xmm1, edi
addsd xmm0, qword [eax*8 + 0x10285f50]
cvtdq2pd xmm1, xmm1
mov eax, edi
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x10285f50]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
movss xmm1, dword [0x102a6154]
comiss xmm2, xmm1
jbe 0x1011f275
divss xmm0, xmm1
call fcn.10059060
call fcn.101714a0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp edi, ecx
jae 0x1011f257
cmp edi, 0x200
jae 0x1011f255
shl edi, 3
cmp edi, ecx
jae 0x1011f257
mov edi, ecx
push edi
call fcn.1011fed0
push ebx
lea eax, [esi + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10122d30
mov ecx, dword [0x102a615c]
mov edx, dword [eax]
jmp 0x1011f278
mov edx, dword [ebp - 0x14]
mov edi, dword [edx + 4]
inc ecx
mov dword [0x102a615c], ecx
mov dword [esi], edx
mov dword [esi + 4], edi
mov dword [edi], esi
mov dword [edx + 4], esi
mov eax, dword [0x102a616c]
mov ecx, dword [0x102a6160]
and eax, ebx
mov ebx, dword [ecx + eax*8]
cmp ebx, dword [0x102a6158]
jne 0x1011f2a9
mov dword [ecx + eax*8], esi
jmp 0x1011f2b8
cmp ebx, edx
jne 0x1011f2b2
mov dword [ecx + eax*8], esi
jmp 0x1011f2bc
cmp dword [ecx + eax*8 + 4], edi
jne 0x1011f2bc
mov dword [ecx + eax*8 + 4], esi
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword [eax], esi
pop esi
mov byte [eax + 4], 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1011f330
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10177bd5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
movzx eax, byte [edi]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edi + 1]
xor ecx, eax
movzx eax, byte [edi + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
lea eax, [ebp - 0x14]
imul ebx, ecx, 0x1000193
push ebx
push edi
push eax
call fcn.101201b0
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x1011f3b1
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [0x1029ccec], 0xfffffff
jne 0x1011f3c8
push str.unordered_map_set_too_long
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
mov dword [ebp - 0x1c], 0x1029cce8
mov dword [ebp - 4], 0
push 0x10
mov dword [ebp - 0x18], 0
call fcn.1016f536
mov ecx, dword [edi]
mov esi, eax
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [esi + 8], ecx
mov dword [esi + 0xc], 0
mov dword [ebp - 4], 1
mov ecx, dword [0x1029ccec]
mov edi, dword [0x1029cd00]
lea eax, [ecx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10285f50]
mov eax, edi
shr eax, 0x1f
cvtpd2ps xmm3, xmm0
movd xmm0, edi
cvtdq2pd xmm0, xmm0
movaps xmm2, xmm3
addsd xmm0, qword [eax*8 + 0x10285f50]
cvtpd2ps xmm1, xmm0
movss xmm0, dword [0x1029cce4]
divss xmm2, xmm1
comiss xmm2, xmm0
jbe 0x1011f4a2
divss xmm3, xmm0
movaps xmm0, xmm3
call fcn.10059060
call fcn.101714a0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp edi, ecx
jae 0x1011f484
cmp edi, 0x200
jae 0x1011f482
shl edi, 3
cmp edi, ecx
jae 0x1011f484
mov edi, ecx
push edi
call fcn.10120040
push ebx
lea eax, [esi + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.101201b0
mov ecx, dword [0x1029ccec]
mov edx, dword [eax]
jmp 0x1011f4a5
mov edx, dword [ebp - 0x14]
mov edi, dword [edx + 4]
inc ecx
mov dword [0x1029ccec], ecx
mov dword [esi], edx
mov dword [esi + 4], edi
mov dword [edi], esi
mov dword [edx + 4], esi
mov eax, dword [0x1029ccfc]
mov ecx, dword [0x1029ccf0]
and eax, ebx
mov ebx, dword [ecx + eax*8]
cmp ebx, dword [0x1029cce8]
jne 0x1011f4d6
mov dword [ecx + eax*8], esi
jmp 0x1011f4e5
cmp ebx, edx
jne 0x1011f4df
mov dword [ecx + eax*8], esi
jmp 0x1011f4e9
cmp dword [ecx + eax*8 + 4], edi
jne 0x1011f4e9
mov dword [ecx + eax*8 + 4], esi
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword [eax], esi
pop esi
mov byte [eax + 4], 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1011f7a0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
mov edx, dword [ebp + 0xc]
push 0xffffffffffffffff
push 0x10173265
push eax
mov dword fs:[0], esp
sub esp, 0x10
cmp dword [edx + 0x14], 0xf
push ebx
push esi
push edi
mov ebx, ecx
mov edi, edx
jbe 0x1011f7cd
mov edi, dword [edx]
xor ecx, ecx
mov esi, 0x811c9dc5
cmp dword [edx + 0x10], ecx
jbe 0x1011f7f2
nop dword [eax]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, dword [edx + 0x10]
jb 0x1011f7e0
push esi
push edx
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
call fcn.10094890
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x1011f822
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [ebx + 8], 0x5d1745d
jne 0x1011f836
push str.unordered_map_set_too_long
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
lea eax, [ebx + 4]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
push 0x2c
mov dword [ebp - 0x18], 0
call fcn.1016f536
add esp, 4
mov edi, eax
mov dword [ebp - 0x18], edi
push dword [ebp + 0xc]
lea ecx, [edi + 8]
call fcn.10091990
xorps xmm0, xmm0
movq qword [edi + 0x20], xmm0
mov dword [edi + 0x28], 0
mov dword [edi + 0x20], 0xffffffff
mov dword [edi + 0x24], 0
mov word [edi + 0x28], 0x100
mov byte [edi + 0x2a], 0
mov dword [ebp - 4], 1
mov eax, dword [ebx + 8]
inc eax
movss xmm3, dword [ebx]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10285f50]
mov eax, dword [ebx + 0x1c]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x10285f50]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
comiss xmm2, xmm3
jbe 0x1011f924
divss xmm0, xmm3
call fcn.10059060
call fcn.101714a0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
mov eax, dword [ebx + 0x1c]
cmp eax, ecx
jae 0x1011f908
cmp eax, 0x200
jae 0x1011f906
shl eax, 3
cmp eax, ecx
jae 0x1011f908
mov eax, ecx
push eax
mov ecx, ebx
call fcn.100a3870
push esi
lea eax, [edi + 8]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10094890
mov edx, dword [eax]
jmp 0x1011f927
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 4]
inc dword [ebx + 8]
mov dword [edi + 4], eax
mov dword [edi], edx
mov dword [eax], edi
mov dword [edx + 4], edi
mov ecx, dword [ebx + 0xc]
mov dword [ebp + 0xc], eax
mov eax, dword [ebx + 0x18]
and eax, esi
mov esi, dword [ecx + eax*8]
cmp esi, dword [ebx + 4]
jne 0x1011f94f
mov dword [ecx + eax*8], edi
jmp 0x1011f961
cmp esi, edx
jne 0x1011f958
mov dword [ecx + eax*8], edi
jmp 0x1011f965
mov edx, dword [ebp + 0xc]
cmp dword [ecx + eax*8 + 4], edx
jne 0x1011f965
mov dword [ecx + eax*8 + 4], edi
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword [eax], edi
pop edi
pop esi
mov byte [eax + 4], 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1011fed0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1fffffff
sub esp, 8
bsr ecx, eax
push ebx
push esi
push edi
mov edi, 1
mov eax, edi
shl eax, cl
mov ecx, dword [ebp + 8]
cmp ecx, eax
jbe 0x1011fefc
push str.invalid_hash_bucket_count
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
lea eax, [ecx - 1]
mov esi, dword [0x102a6158]
or eax, 1
mov dword [ebp + 8], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
mov ecx, 0x102a6160
lea eax, [edi + edi]
push eax
call fcn.10091d70
mov eax, dword [0x102a6158]
lea ebx, [edi - 1]
mov dword [0x102a616c], ebx
mov dword [0x102a6170], edi
mov eax, dword [eax]
mov ecx, eax
cmp eax, esi
je 0x10120036
movzx edx, byte [eax + 8]
xor edx, 0x811c9dc5
mov ecx, dword [ecx]
imul edi, edx, 0x1000193
movzx edx, byte [eax + 9]
xor edi, edx
movzx edx, byte [eax + 0xa]
imul edi, edi, 0x1000193
xor edi, edx
movzx edx, byte [eax + 0xb]
imul edi, edi, 0x1000193
xor edi, edx
mov edx, dword [0x102a6160]
imul edi, edi, 0x1000193
and edi, ebx
mov ebx, dword [edx + edi*8]
lea edx, [edx + edi*8]
mov dword [ebp - 4], edx
cmp ebx, esi
jne 0x1011ff94
mov dword [edx], eax
mov dword [edx + 4], eax
jmp 0x10120001
mov edx, dword [edx + 4]
mov edi, dword [eax + 8]
cmp edi, dword [edx + 8]
jne 0x1011ffce
mov edx, dword [edx]
mov dword [ebp - 8], edx
cmp edx, eax
je 0x1011ffc6
mov ebx, dword [eax + 4]
mov esi, dword [ebp - 8]
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
mov edx, dword [ebp - 4]
mov dword [edx + 4], eax
jmp 0x10120001
cmp ebx, edx
je 0x1011ffde
mov edx, dword [edx + 4]
cmp edi, dword [edx + 8]
je 0x10120012
cmp ebx, edx
jne 0x1011ffd2
mov ebx, dword [eax + 4]
mov dword [ebp - 8], ebx
mov dword [ebx], ecx
mov ebx, dword [ecx + 4]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov dword [edx + 4], ebx
mov edx, dword [ebp - 8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 4]
mov dword [eax + 4], edi
mov dword [edx], eax
mov eax, ecx
cmp ecx, esi
je 0x10120036
mov ebx, dword [0x102a616c]
jmp 0x1011ff42
mov ebx, dword [eax + 4]
mov edx, dword [edx]
mov dword [ebp - 8], edx
mov esi, edx
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
jmp 0x10120001
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10120040
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1fffffff
sub esp, 8
bsr ecx, eax
push ebx
push esi
push edi
mov edi, 1
mov eax, edi
shl eax, cl
mov ecx, dword [ebp + 8]
cmp ecx, eax
jbe 0x1012006c
push str.invalid_hash_bucket_count
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
lea eax, [ecx - 1]
mov esi, dword [0x1029cce8]
or eax, 1
mov dword [ebp + 8], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
mov ecx, 0x1029ccf0
lea eax, [edi + edi]
push eax
call fcn.1011c450
mov eax, dword [0x1029cce8]
lea ebx, [edi - 1]
mov dword [0x1029ccfc], ebx
mov dword [0x1029cd00], edi
mov eax, dword [eax]
mov ecx, eax
cmp eax, esi
je 0x101201a6
movzx edx, byte [eax + 8]
xor edx, 0x811c9dc5
mov ecx, dword [ecx]
imul edi, edx, 0x1000193
movzx edx, byte [eax + 9]
xor edi, edx
movzx edx, byte [eax + 0xa]
imul edi, edi, 0x1000193
xor edi, edx
movzx edx, byte [eax + 0xb]
imul edi, edi, 0x1000193
xor edi, edx
mov edx, dword [0x1029ccf0]
imul edi, edi, 0x1000193
and edi, ebx
mov ebx, dword [edx + edi*8]
lea edx, [edx + edi*8]
mov dword [ebp - 4], edx
cmp ebx, esi
jne 0x10120104
mov dword [edx], eax
mov dword [edx + 4], eax
jmp 0x10120171
mov edx, dword [edx + 4]
mov edi, dword [eax + 8]
cmp edi, dword [edx + 8]
jne 0x1012013e
mov edx, dword [edx]
mov dword [ebp - 8], edx
cmp edx, eax
je 0x10120136
mov ebx, dword [eax + 4]
mov esi, dword [ebp - 8]
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
mov edx, dword [ebp - 4]
mov dword [edx + 4], eax
jmp 0x10120171
cmp ebx, edx
je 0x1012014e
mov edx, dword [edx + 4]
cmp edi, dword [edx + 8]
je 0x10120182
cmp ebx, edx
jne 0x10120142
mov ebx, dword [eax + 4]
mov dword [ebp - 8], ebx
mov dword [ebx], ecx
mov ebx, dword [ecx + 4]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov dword [edx + 4], ebx
mov edx, dword [ebp - 8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 4]
mov dword [eax + 4], edi
mov dword [edx], eax
mov eax, ecx
cmp ecx, esi
je 0x101201a6
mov ebx, dword [0x1029ccfc]
jmp 0x101200b2
mov ebx, dword [eax + 4]
mov edx, dword [edx]
mov dword [ebp - 8], edx
mov esi, edx
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
jmp 0x10120171
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10120640
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10177c35
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebx
push esi
push edi
mov dword [ebp - 0x10], ecx
lea eax, [ebp + 8]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x34]
call fcn.10091990
mov byte [ebp - 4], 1
sub esp, 0x18
lea eax, [ebp - 0x34]
mov ecx, esp
push eax
call fcn.10091990
lea eax, [ebp - 0x4c]
push eax
call fcn.100e2850
push eax
lea ecx, [ebp - 0x34]
call fcn.100918d0
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x101206cc
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x101206c2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10120805
push ecx
push edx
call fcn.1016f528
add esp, 8
cmp dword [ebp - 0x20], 0xf
lea edi, [ebp - 0x34]
mov ebx, 0x811c9dc5
cmova edi, dword [ebp - 0x34]
xor edx, edx
mov ecx, edi
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x101206e3
sub ecx, esi
je 0x1012070f
nop
movsx eax, byte [edx + edi]
xor eax, ebx
imul ebx, eax, 0x1000193
mov eax, edi
inc edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10120702
sub eax, esi
cmp edx, eax
jb 0x101206f0
mov al, byte [0x102732c8]
test al, al
jne 0x1012071f
mov eax, 0x811c9dc5
jmp 0x10120737
movsx eax, al
mov ecx, 0x102732c9
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.100de180
cmp ebx, eax
mov ebx, dword [ebp - 0x10]
je 0x1012078d
mov edi, dword [ebp - 0x24]
lea esi, [ebp - 0x34]
add ebx, 0x24
mov edx, 0x811c9dc5
cmp dword [ebp - 0x20], 0xf
cmova esi, dword [ebp - 0x34]
xor ecx, ecx
test edi, edi
je 0x10120771
nop word [eax + eax]
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x10120760
push edx
lea eax, [ebp - 0x34]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10094890
cmp dword [eax + 4], 0
je 0x10120678
jmp 0x10120790
add ebx, 0x24
lea eax, [ebp - 0x34]
mov ecx, ebx
push eax
call fcn.100e40d0
mov ecx, dword [ebp - 0x20]
mov bl, byte [eax]
cmp ecx, 0xf
jbe 0x101207cd
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x101207c3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10120805
push ecx
push edx
call fcn.1016f528
add esp, 8
mov ecx, dword [ebp + 0x1c]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0xf
jbe 0x10120815
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1012080b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1012080b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1016f528
add esp, 8
mov ecx, dword [ebp - 0xc]
mov al, bl
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x10120830
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10177c5d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x48
test byte [0x102a2eb4], 6
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x18], esi
je 0x101208c3
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x10], 7
mov dword [esi + 0x14], 0xf
mov eax, dword [0x102732c8]
mov dword [esi], eax
mov ax, word [0x102732cc]
mov word [esi + 4], ax
mov al, byte [0x102732ce]
mov byte [esi + 6], al
mov eax, esi
mov byte [esi + 7], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp byte [ebx + 8], 0
push str.default
je 0x101208e8
call fcn.10091990
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea ecx, [ebp - 0x3c]
call fcn.10091990
mov dword [ebp - 4], 0
nop word [eax + eax]
cmp dword [ebp - 0x28], 0xf
lea edi, [ebp - 0x3c]
mov esi, 0x811c9dc5
cmova edi, dword [ebp - 0x3c]
xor edx, edx
mov ecx, edi
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10120920
sub ecx, dword [ebp - 0x14]
je 0x10120941
nop dword [eax]
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10120930
mov eax, dword [0x102732c8]
test al, al
jne 0x10120951
mov eax, 0x811c9dc5
jmp 0x10120969
movsx eax, al
mov ecx, 0x102732c9
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.100de180
cmp esi, eax
je 0x10120a19
cmp dword [ebp - 0x28], 0xf
lea esi, [ebp - 0x3c]
mov edi, dword [ebp - 0x2c]
mov edx, 0x811c9dc5
cmova esi, dword [ebp - 0x3c]
xor eax, eax
test edi, edi
je 0x101209a1
nop word [eax + eax]
movzx ecx, byte [eax + esi]
inc eax
xor ecx, edx
imul edx, ecx, 0x1000193
cmp eax, edi
jb 0x10120990
push edx
lea eax, [ebp - 0x3c]
mov ecx, 0x102a2ec8
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.10094890
cmp dword [eax + 4], 0
jne 0x10120a19
sub esp, 0x18
lea eax, [ebp - 0x3c]
mov ecx, esp
push eax
call fcn.10091990
lea eax, [ebp - 0x54]
push eax
call fcn.100e2850
push eax
lea ecx, [ebp - 0x3c]
call fcn.100918d0
mov ecx, dword [ebp - 0x40]
cmp ecx, 0xf
jbe 0x10120900
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10120a04
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10120a13
push ecx
push edx
call fcn.1016f528
add esp, 8
jmp 0x10120900
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [ebp - 0x18]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
movups xmm0, xmmword [ebp - 0x3c]
mov dword [eax + 0x14], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x2c]
movq qword [eax + 0x10], xmm0
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
Function at 0x10120a60
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10177c85
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebx
push esi
push edi
lea eax, [ebp + 8]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x30]
call fcn.10091990
mov byte [ebp - 4], 1
sub esp, 0x18
lea eax, [ebp - 0x30]
mov ecx, esp
push eax
call fcn.10091990
lea eax, [ebp - 0x48]
push eax
call fcn.100e2850
push eax
lea ecx, [ebp - 0x30]
call fcn.100918d0
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xf
jbe 0x10120ae9
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10120adf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10120c1d
push ecx
push edx
call fcn.1016f528
add esp, 8
cmp dword [ebp - 0x1c], 0xf
lea edi, [ebp - 0x30]
mov ebx, 0x811c9dc5
cmova edi, dword [ebp - 0x30]
xor edx, edx
mov ecx, edi
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10120b00
sub ecx, esi
je 0x10120b2f
nop dword [eax + eax]
movsx eax, byte [edx + edi]
xor eax, ebx
imul ebx, eax, 0x1000193
mov eax, edi
inc edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10120b22
sub eax, esi
cmp edx, eax
jb 0x10120b10
mov al, byte [0x102732c8]
test al, al
jne 0x10120b3f
mov eax, 0x811c9dc5
jmp 0x10120b57
movsx eax, al
mov ecx, 0x102732c9
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.100de180
cmp ebx, eax
je 0x10120ba2
cmp dword [ebp - 0x1c], 0xf
lea esi, [ebp - 0x30]
mov edi, dword [ebp - 0x20]
mov edx, 0x811c9dc5
cmova esi, dword [ebp - 0x30]
xor ecx, ecx
test edi, edi
je 0x10120b85
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x10120b74
push edx
lea eax, [ebp - 0x30]
mov ecx, 0x102a2ec8
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.10094890
cmp dword [eax + 4], 0
je 0x10120a95
lea eax, [ebp - 0x30]
mov ecx, 0x102a2ec8
push eax
call fcn.100e4050
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax]
mov edi, dword [eax + 4]
cmp ecx, 0xf
jbe 0x10120be5
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10120bdb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10120c1d
push ecx
push edx
call fcn.1016f528
add esp, 8
mov ecx, dword [ebp + 0x1c]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
cmp ecx, 0xf
jbe 0x10120c2d
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10120c23
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10120c23
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1016f528
add esp, 8
mov ecx, dword [ebp - 0xc]
mov edx, edi
pop edi
mov eax, esi
mov dword fs:[0], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret