joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10019d60
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov esi, dword [ecx + 0x1368]
cmp dword [esi + 0x54], edx
jbe 0x10019d93
mov eax, dword [esi + 0x58]
mov esi, dword [eax + edx*4]
cmp esi, 0xffffffff
mov edx, edi
jne 0x10019e42
jmp 0x10019e63
mov dword [ebp - 0x10], ecx
mov eax, edx
shr eax, 0x10
mov ecx, edx
shr ecx, 8
mov edi, 0xff
mov ebx, edx
and ebx, edi
and ecx, edi
and eax, edi
mov edi, edx
shr edi, 0x18
mov dword [ebp - 0x20], ebx
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, ecx
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, edi
imul edi, ebx, 0x1000193
and edi, dword [esi + 0x74]
mov ebx, dword [esi + 0x60]
mov esi, dword [esi + 0x68]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], esi
mov edi, dword [esi + edi*8 + 4]
xor esi, esi
mov dword [ebp - 0x1c], ebx
cmp edi, ebx
je 0x10019e12
and edx, 0xff000000
shl eax, 0x10
or eax, edx
shl ecx, 8
or ecx, eax
add ecx, dword [ebp - 0x20]
cmp ecx, dword [edi + 8]
jne 0x10019e1a
mov edx, dword [ebp + 0xc]
jmp 0x10019e34
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
jmp 0x10019e65
mov eax, dword [ebp - 0x18]
add eax, eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp + 0xc]
cmp edi, eax
je 0x10019e15
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x10019e28
cmp edi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x10]
je 0x10019e65
mov esi, dword [edi + 0xc]
mov ecx, dword [ebp - 0x10]
test esi, esi
je 0x10019e63
cmp dword [esi + 0x158], 0
je 0x10019e65
mov eax, ecx
mov edi, ebx
mov ecx, esi
push eax
mov ebx, edx
call fcn.100599c0
mov edx, ebx
mov ebx, edi
jmp 0x10019e65
xor esi, esi
push dword [ebp + 0x14]
push ebx
push edx
push esi
call fcn.100c7f20
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x1001a610
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 8
mov esi, dword [ebp + 8]
cmp dword [ecx + 0x1ef0], esi
jbe 0x1001a636
mov eax, dword [ecx + 0x1ef4]
cmp dword [eax + esi*4], 0xffffffff
setne al
jmp 0x1001a6d2
mov edi, esi
shr edi, 0x10
mov eax, esi
shr eax, 8
mov edx, 0xff
mov ebx, esi
and ebx, edx
and eax, edx
and edi, edx
mov edx, esi
shr edx, 0x18
mov dword [ebp - 0x14], ebx
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, edi
imul ebx, ebx, 0x1000193
xor ebx, edx
imul edx, ebx, 0x1000193
and edx, dword [ecx + 0x1f10]
mov ebx, dword [ecx + 0x1efc]
mov ecx, dword [ecx + 0x1f04]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ecx + edx*8 + 4]
cmp ecx, ebx
je 0x1001a6c4
and esi, 0xff000000
shl edi, 0x10
or edi, esi
shl eax, 8
or eax, edi
add eax, dword [ebp - 0x14]
cmp eax, dword [ecx + 8]
je 0x1001a6c6
add edx, edx
mov esi, dword [ebp - 0x10]
mov edx, dword [esi + edx*4]
cmp ecx, edx
je 0x1001a6c4
mov ecx, dword [ecx + 4]
cmp eax, dword [ecx + 8]
jne 0x1001a6b6
jmp 0x1001a6c6
xor ecx, ecx
test ecx, ecx
setne dl
cmp ecx, ebx
setne al
and al, dl
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret 4

Function at 0x1001a6e0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 8
mov esi, dword [ebp + 8]
cmp dword [ecx + 0x1f3c], esi
jbe 0x1001a706
mov eax, dword [ecx + 0x1f40]
cmp dword [eax + esi*4], 0xffffffff
setne al
jmp 0x1001a7a2
mov edi, esi
shr edi, 0x10
mov eax, esi
shr eax, 8
mov edx, 0xff
mov ebx, esi
and ebx, edx
and eax, edx
and edi, edx
mov edx, esi
shr edx, 0x18
mov dword [ebp - 0x14], ebx
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, edi
imul ebx, ebx, 0x1000193
xor ebx, edx
imul edx, ebx, 0x1000193
and edx, dword [ecx + 0x1f5c]
mov ebx, dword [ecx + 0x1f48]
mov ecx, dword [ecx + 0x1f50]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ecx + edx*8 + 4]
cmp ecx, ebx
je 0x1001a794
and esi, 0xff000000
shl edi, 0x10
or edi, esi
shl eax, 8
or eax, edi
add eax, dword [ebp - 0x14]
cmp eax, dword [ecx + 8]
je 0x1001a796
add edx, edx
mov esi, dword [ebp - 0x10]
mov edx, dword [esi + edx*4]
cmp ecx, edx
je 0x1001a794
mov ecx, dword [ecx + 4]
cmp eax, dword [ecx + 8]
jne 0x1001a786
jmp 0x1001a796
xor ecx, ecx
test ecx, ecx
setne dl
cmp ecx, ebx
setne al
and al, dl
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret 4
Function at 0x1001a960
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, ecx
mov edi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov esi, dword [ecx + 0x1368]
cmp dword [esi + 0x54], edx
jbe 0x1001a990
mov eax, dword [esi + 0x58]
mov esi, dword [eax + edx*4]
cmp esi, 0xffffffff
jne 0x1001aa39
jmp 0x1001aa50
mov dword [ebp - 0x10], ebx
mov eax, edx
shr eax, 0x10
mov ecx, edx
shr ecx, 8
mov edi, 0xff
mov ebx, edx
and ebx, edi
and ecx, edi
and eax, edi
mov edi, edx
shr edi, 0x18
mov dword [ebp - 0x20], ebx
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, ecx
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, edi
imul ebx, ebx, 0x1000193
and ebx, dword [esi + 0x74]
mov edi, dword [esi + 0x60]
mov esi, dword [esi + 0x68]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], esi
mov ebx, dword [esi + ebx*8 + 4]
xor esi, esi
mov dword [ebp - 0x1c], edi
cmp ebx, edi
je 0x1001aa0f
and edx, 0xff000000
shl eax, 0x10
or eax, edx
shl ecx, 8
or ecx, eax
add ecx, dword [ebp - 0x20]
cmp ecx, dword [ebx + 8]
jne 0x1001aa14
mov edi, dword [ebp + 0xc]
jmp 0x1001aa2e
mov edi, dword [ebp + 0xc]
jmp 0x1001aa52
mov eax, dword [ebp - 0x18]
add eax, eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + eax*4]
mov edi, dword [ebp + 0xc]
cmp ebx, eax
je 0x1001aa52
mov ebx, dword [ebx + 4]
cmp ecx, dword [ebx + 8]
jne 0x1001aa22
cmp ebx, dword [ebp - 0x1c]
je 0x1001aa52
mov esi, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x10]
test esi, esi
je 0x1001aa50
cmp dword [esi + 0x158], 0
je 0x1001aa52
mov ecx, esi
push ebx
call fcn.100599c0
jmp 0x1001aa52
xor esi, esi
mov eax, dword [ebp + 0x10]
cmp edi, 0x8258
je 0x1001aa76
cmp edi, 0x8257
jne 0x1001aa85
xor edx, edx
test eax, eax
setne dl
mov ecx, esi
push edx
call fcn.1005b990
jmp 0x1001aa85
xor edx, edx
test eax, eax
setne dl
mov ecx, esi
push edx
call fcn.1005b9d0
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x1001d910
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x50
mov esi, ecx
mov eax, dword [ebp + 0x14]
mov edi, dword [ebp + 8]
mov ecx, dword [0x1038000c]
xor ecx, ebp
mov dword [ebp - 0x10], ecx
cmp edi, 0x8d40
je 0x1001d94e
cmp edi, 0x8ca9
je 0x1001d94e
xor ecx, ecx
cmp edi, 0x8ca8
jne 0x1001d954
mov ecx, dword [esi + 0x14e4]
jmp 0x1001d954
mov ecx, dword [esi + 0x14e8]
mov ebx, dword [ebp + 0xc]
test eax, eax
je 0x1001d982
mov dword [ebp - 0x38], ecx
mov edi, dword [ebp + 0x18]
mov dl, byte [ebp + 0x10]
mov ecx, dword [esi + 0x136c]
cmp dword [ecx + 0x2c], eax
jbe 0x1001d9c3
mov ecx, dword [ecx + 0x30]
mov eax, dword [ecx + eax*4]
xor ebx, ebx
cmp eax, 0xffffffff
cmovne ebx, eax
jmp 0x1001da7c
lea eax, [ebp - 0x20]
mov byte [eax], 0xb
xor edx, edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], 0xffffffff
mov dword [esp + 0x20], edx
movaps xmm0, xmmword [0x102c3360]
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], esi
call fcn.1003ff00
sub esp, 0x24
jmp 0x1001dad6
mov dword [ebp - 0x24], esi
mov edi, eax
shr edi, 0x10
mov edx, eax
shr edx, 8
mov ebx, 0xff
mov esi, eax
and esi, ebx
and edx, ebx
and edi, ebx
mov ebx, eax
shr ebx, 0x18
mov dword [ebp - 0x34], esi
xor esi, 0x811c9dc5
imul esi, esi, 0x1000193
xor esi, edx
imul esi, esi, 0x1000193
xor esi, edi
imul esi, esi, 0x1000193
xor esi, ebx
imul ebx, esi, 0x1000193
and ebx, dword [ecx + 0x4c]
mov esi, dword [ecx + 0x38]
mov ecx, dword [ecx + 0x40]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ecx + ebx*8 + 4]
xor ebx, ebx
cmp ecx, esi
je 0x1001da44
and eax, 0xff000000
shl edi, 0x10
or edi, eax
shl edx, 8
or edx, edi
add edx, dword [ebp - 0x34]
cmp edx, dword [ecx + 8]
mov dword [ebp - 0x28], esi
jne 0x1001da4f
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp + 0x18]
jmp 0x1001da6c
mov esi, dword [ebp - 0x24]
mov dl, byte [ebp + 0x10]
mov edi, dword [ebp + 0x18]
jmp 0x1001da7c
mov eax, dword [ebp - 0x30]
add eax, eax
mov esi, dword [ebp - 0x2c]
mov eax, dword [esi + eax*4]
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp + 0x18]
cmp ecx, eax
je 0x1001da79
mov ecx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
jne 0x1001da60
cmp ecx, dword [ebp - 0x28]
mov dl, byte [ebp + 0x10]
je 0x1001da7c
mov ebx, dword [ecx + 0xc]
jmp 0x1001da7c
mov dl, byte [ebp + 0x10]
mov dword [esp + 8], edi
movzx eax, dl
mov dword [esp + 4], eax
lea edi, [ebp - 0x20]
mov dword [esp], edi
mov dword [esp + 0xc], 1
call fcn.1004ca20
lea eax, [ebx + 0x18]
test ebx, ebx
cmove eax, ebx
movaps xmm0, xmmword [0x102c3350]
movups xmmword [esp + 0x14], xmm0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edi
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], 0x1702
mov ecx, dword [ebp - 0x38]
call fcn.1003ff00
sub esp, 0x24
mov edi, dword [ebp + 8]
add esi, 8
mov dword [esp], edi
mov ecx, esi
call fcn.10089f30
sub esp, 4
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
add esp, 0x50
pop esi
pop edi
pop ebx
pop ebp
ret 0x14
Function at 0x1001db00
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x50
mov esi, ecx
mov eax, dword [ebp + 0x14]
mov edi, dword [ebp + 8]
mov ecx, dword [0x1038000c]
xor ecx, ebp
mov dword [ebp - 0x10], ecx
cmp edi, 0x8d40
je 0x1001db3e
cmp edi, 0x8ca9
je 0x1001db3e
xor ecx, ecx
cmp edi, 0x8ca8
jne 0x1001db44
mov ecx, dword [esi + 0x14e4]
jmp 0x1001db44
mov ecx, dword [esi + 0x14e8]
mov ebx, dword [ebp + 0xc]
test eax, eax
je 0x1001db69
mov edi, dword [esi + 0x136c]
cmp dword [edi + 0x2c], eax
jbe 0x1001dbaa
mov edx, dword [edi + 0x30]
mov eax, dword [edx + eax*4]
xor ebx, ebx
cmp eax, 0xffffffff
cmovne ebx, eax
jmp 0x1001dc38
lea eax, [ebp - 0x20]
mov byte [eax], 0xb
xor edx, edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], 0xffffffff
mov dword [esp + 0x20], edx
movaps xmm0, xmmword [0x102c3360]
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], esi
call fcn.1003ff00
sub esp, 0x24
jmp 0x1001dc8a
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], esi
mov esi, eax
shr esi, 0x10
mov edx, eax
shr edx, 8
mov ecx, 0xff
mov ebx, eax
and ebx, ecx
and edx, ecx
and esi, ecx
mov ecx, eax
shr ecx, 0x18
mov dword [ebp - 0x38], ebx
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, edx
imul ebx, ebx, 0x1000193
xor ebx, esi
imul ebx, ebx, 0x1000193
xor ebx, ecx
imul ebx, ebx, 0x1000193
and ebx, dword [edi + 0x4c]
mov ecx, dword [edi + 0x38]
mov edi, dword [edi + 0x40]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], edi
mov edi, dword [edi + ebx*8 + 4]
xor ebx, ebx
mov dword [ebp - 0x34], ecx
cmp edi, ecx
je 0x1001dc32
and eax, 0xff000000
shl esi, 0x10
or esi, eax
shl edx, 8
or edx, esi
add edx, dword [ebp - 0x38]
cmp edx, dword [edi + 8]
jne 0x1001dcae
mov esi, dword [ebp - 0x28]
jmp 0x1001dccc
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp + 0x1c]
lea eax, [ebp - 0x20]
mov byte [eax], 4
mov edi, dword [ebp + 0x18]
mov dword [eax + 4], edi
mov dword [eax + 8], edx
mov dword [eax + 0xc], 1
lea edx, [ebx + 0x18]
test ebx, ebx
cmove edx, ebx
movaps xmm0, xmmword [0x102c3350]
movups xmmword [esp + 0x14], xmm0
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], 0x1702
call fcn.1003ff00
sub esp, 0x24
mov edi, dword [ebp + 8]
add esi, 8
mov dword [esp], edi
mov ecx, esi
call fcn.10089f30
sub esp, 4
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
add esp, 0x50
pop esi
pop edi
pop ebx
pop ebp
ret 0x18
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + eax*4]
mov esi, dword [ebp - 0x28]
cmp edi, eax
je 0x1001dc35
mov edi, dword [edi + 4]
cmp edx, dword [edi + 8]
jne 0x1001dcbc
cmp edi, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp + 0x1c]
je 0x1001dc3b
mov ebx, dword [edi + 0xc]
jmp 0x1001dc3b
Function at 0x1001dde0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x24
mov esi, ecx
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
mov ecx, dword [0x1038000c]
xor ecx, ebp
mov dword [ebp - 0x10], ecx
cmp edi, 0x8d40
je 0x1001de1e
cmp edi, 0x8ca9
je 0x1001de1e
xor ecx, ecx
cmp edi, 0x8ca8
jne 0x1001de24
mov ecx, dword [esi + 0x14e4]
jmp 0x1001de24
mov ecx, dword [esi + 0x14e8]
mov ebx, dword [ebp + 0xc]
test eax, eax
je 0x1001de52
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp + 0x14]
mov ebx, dword [esi + 0x136c]
cmp dword [ebx + 0x2c], eax
jbe 0x1001de93
mov ecx, dword [ebx + 0x30]
mov eax, dword [ecx + eax*4]
xor edi, edi
cmp eax, 0xffffffff
cmovne edi, eax
mov ecx, dword [ebp + 0x18]
jmp 0x1001df21
lea eax, [ebp - 0x20]
mov byte [eax], 0xb
xor edx, edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], 0xffffffff
sub esp, 0x24
mov dword [esp + 0x20], edx
movaps xmm0, xmmword [0x102c3360]
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], esi
call fcn.1003ff00
jmp 0x1001df6d
mov dword [ebp - 0x24], esi
mov edi, eax
shr edi, 0x10
mov edx, eax
shr edx, 8
mov ecx, 0xff
mov esi, eax
and esi, ecx
and edx, ecx
and edi, ecx
mov ecx, eax
shr ecx, 0x18
mov dword [ebp - 0x2c], esi
xor esi, 0x811c9dc5
imul esi, esi, 0x1000193
xor esi, edx
imul esi, esi, 0x1000193
xor esi, edi
imul esi, esi, 0x1000193
xor esi, ecx
imul ecx, esi, 0x1000193
and ecx, dword [ebx + 0x4c]
mov esi, dword [ebx + 0x38]
mov ebx, dword [ebx + 0x40]
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebx + ecx*8 + 4]
cmp ebx, esi
je 0x1001df0c
and eax, 0xff000000
shl edi, 0x10
or edi, eax
shl edx, 8
or edx, edi
add edx, dword [ebp - 0x2c]
cmp edx, dword [ebx + 8]
jne 0x1001df8c
mov edi, esi
jmp 0x1001df10
mov edi, esi
xor ebx, ebx
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp + 0x18]
test ebx, ebx
cmovne edi, ebx
mov edi, dword [edi + 0xc]
mov edx, dword [ebp + 0x14]
movzx eax, byte [edi + 0x6c]
lea ebx, [ebp - 0x20]
push 1
push ecx
push edx
push eax
push ebx
call fcn.1004ca80
add esp, 0x14
add edi, 0x18
sub esp, 0x24
movaps xmm0, xmmword [0x102c3350]
movups xmmword [esp + 0x14], xmm0
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], ebx
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], 0x1702
mov ecx, dword [ebp - 0x30]
call fcn.1003ff00
mov edi, dword [ebp + 8]
add esi, 8
mov ecx, esi
push edi
call fcn.10089f30
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret 0x14
mov edi, esi
add ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + ecx*4]
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp + 0x18]
cmp ebx, eax
je 0x1001dfad
mov ebx, dword [ebx + 4]
cmp edx, dword [ebx + 8]
jne 0x1001df9c
jmp 0x1001df16
xor ebx, ebx
jmp 0x1001df16
Function at 0x1001dfc0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x2c
mov esi, ecx
mov ebx, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
mov eax, dword [0x1038000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp edi, 0x8d40
je 0x1001dffd
cmp edi, 0x8ca9
je 0x1001dffd
xor ecx, ecx
cmp edi, 0x8ca8
jne 0x1001e003
mov ecx, dword [esi + 0x14e4]
jmp 0x1001e003
mov ecx, dword [esi + 0x14e8]
mov eax, dword [ebp + 0xc]
test ebx, ebx
je 0x1001e02b
mov dword [ebp - 0x38], ecx
mov edx, dword [esi + 0x136c]
cmp dword [edx + 0x2c], ebx
jbe 0x1001e06e
mov eax, dword [edx + 0x30]
mov eax, dword [eax + ebx*4]
xor edx, edx
cmp eax, 0xffffffff
cmovne edx, eax
jmp 0x1001e0f3
mov ebx, eax
lea eax, [ebp - 0x20]
mov byte [eax], 0xb
xor edx, edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], 0xffffffff
sub esp, 0x24
mov dword [esp + 0x20], edx
movaps xmm0, xmmword [0x102c3360]
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], esi
call fcn.1003ff00
jmp 0x1001e13a
mov dword [ebp - 0x24], esi
mov esi, ebx
shr esi, 0x10
mov eax, ebx
shr eax, 8
mov ecx, 0xff
mov edi, ebx
and edi, ecx
and eax, ecx
and esi, ecx
mov ecx, ebx
shr ecx, 0x18
mov dword [ebp - 0x34], edi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
xor edi, eax
imul edi, edi, 0x1000193
xor edi, esi
imul edi, edi, 0x1000193
xor edi, ecx
imul edi, edi, 0x1000193
and edi, dword [edx + 0x4c]
mov ecx, dword [edx + 0x38]
mov edx, dword [edx + 0x40]
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], edx
mov edi, dword [edx + edi*8 + 4]
xor edx, edx
mov dword [ebp - 0x30], ecx
cmp edi, ecx
je 0x1001e0f0
and ebx, 0xff000000
shl esi, 0x10
or esi, ebx
shl eax, 8
or eax, esi
add eax, dword [ebp - 0x34]
cmp eax, dword [edi + 8]
jne 0x1001e159
mov esi, dword [ebp - 0x24]
jmp 0x1001e173
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp + 0x14]
xor ecx, ecx
cmp byte [edx + 0x6c], 1
setne bl
cmove ecx, eax
add bl, bl
or bl, 1
lea eax, [ebp - 0x20]
mov byte [eax], bl
mov dword [eax + 4], ecx
mov ebx, dword [ebp + 0x18]
mov dword [eax + 8], ebx
mov edi, dword [ebp + 0x1c]
mov dword [eax + 0xc], edi
add edx, 0x18
mov ecx, dword [ebp - 0x38]
push 0
push 1
push ebx
push edi
push edx
push eax
push dword [ebp + 0xc]
push 0x1702
push esi
call fcn.1003ff00
mov edi, dword [ebp + 8]
add esi, 8
mov ecx, esi
push edi
call fcn.10089f30
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
add esp, 0x2c
pop esi
pop edi
pop ebx
pop ebp
ret 0x18
mov ecx, dword [ebp - 0x2c]
add ecx, ecx
mov esi, dword [ebp - 0x28]
mov ecx, dword [esi + ecx*4]
mov esi, dword [ebp - 0x24]
cmp edi, ecx
je 0x1001e0f3
mov edi, dword [edi + 4]
cmp eax, dword [edi + 8]
jne 0x1001e167
cmp edi, dword [ebp - 0x30]
mov eax, dword [ebp + 0x14]
je 0x1001e0f6
mov edx, dword [edi + 0xc]
jmp 0x1001e0f6
Function at 0x1001e190
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x28
mov esi, ecx
mov edx, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
mov eax, dword [0x1038000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp edi, 0x8d40
je 0x1001e1cd
cmp edi, 0x8ca9
je 0x1001e1cd
xor ecx, ecx
cmp edi, 0x8ca8
jne 0x1001e1d3
mov ecx, dword [esi + 0x14e4]
jmp 0x1001e1d3
mov ecx, dword [esi + 0x14e8]
mov ebx, dword [ebp + 0xc]
test edx, edx
je 0x1001e200
mov dword [ebp - 0x34], ecx
mov edi, edx
mov edx, dword [ebp + 0x14]
mov ebx, dword [esi + 0x136c]
cmp dword [ebx + 0x2c], edi
jbe 0x1001e241
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + edi*4]
xor edi, edi
cmp eax, 0xffffffff
cmovne edi, eax
jmp 0x1001e2e9
lea eax, [ebp - 0x20]
mov byte [eax], 0xb
xor edx, edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], 0xffffffff
sub esp, 0x24
mov dword [esp + 0x20], edx
movaps xmm0, xmmword [0x102c3360]
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], esi
call fcn.1003ff00
jmp 0x1001e337
mov dword [ebp - 0x28], esi
mov ecx, edi
shr ecx, 0x10
mov edx, edi
shr edx, 8
mov eax, 0xff
mov esi, edi
and esi, eax
and edx, eax
and ecx, eax
mov eax, edi
shr eax, 0x18
mov dword [ebp - 0x30], esi
xor esi, 0x811c9dc5
imul esi, esi, 0x1000193
xor esi, edx
imul esi, esi, 0x1000193
xor esi, ecx
imul esi, esi, 0x1000193
xor esi, eax
imul eax, esi, 0x1000193
and eax, dword [ebx + 0x4c]
mov esi, dword [ebx + 0x38]
mov ebx, dword [ebx + 0x40]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebx + eax*8 + 4]
mov dword [ebp - 0x24], esi
cmp ebx, esi
je 0x1001e2d6
and edi, 0xff000000
shl ecx, 0x10
or ecx, edi
shl edx, 8
or edx, ecx
add edx, dword [ebp - 0x30]
cmp edx, dword [ebx + 8]
je 0x1001e2d8
add eax, eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + eax*4]
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
cmp ebx, eax
je 0x1001e356
mov ebx, dword [ebx + 4]
cmp edx, dword [ebx + 8]
jne 0x1001e2c4
jmp 0x1001e2de
xor ebx, ebx
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
test ebx, ebx
cmovne ecx, ebx
mov edi, dword [ecx + 0xc]
mov edx, dword [ebp + 0x14]
movzx eax, byte [edi + 0x6c]
xor ecx, ecx
dec ecx
lea ebx, [ebp - 0x20]
push ecx
push ecx
push edx
push eax
push ebx
call fcn.1004ca80
add esp, 0x14
add edi, 0x18
sub esp, 0x24
movaps xmm0, xmmword [0x102c3350]
movups xmmword [esp + 0x14], xmm0
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], ebx
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], 0x1702
mov ecx, dword [ebp - 0x34]
call fcn.1003ff00
mov edi, dword [ebp + 8]
add esi, 8
mov ecx, esi
push edi
call fcn.10089f30
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
xor ebx, ebx
jmp 0x1001e2de
Function at 0x10020af0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ebx, dword [ecx + 0x1368]
cmp dword [ebx + 0x54], edx
jbe 0x10020b1d
mov eax, dword [ebx + 0x58]
mov eax, dword [eax + edx*4]
xor edi, edi
cmp eax, 0xffffffff
cmovne edi, eax
jmp 0x10020bca
mov dword [ebp - 0x10], ecx
mov esi, edx
shr esi, 0x10
mov eax, edx
shr eax, 8
mov edi, 0xff
mov ecx, edx
and ecx, edi
and eax, edi
and esi, edi
mov edi, edx
shr edi, 0x18
mov dword [ebp - 0x1c], ecx
xor ecx, 0x811c9dc5
imul ecx, ecx, 0x1000193
xor ecx, eax
imul ecx, ecx, 0x1000193
xor ecx, esi
imul ecx, ecx, 0x1000193
xor ecx, edi
imul edi, ecx, 0x1000193
and edi, dword [ebx + 0x74]
mov ecx, dword [ebx + 0x60]
mov ebx, dword [ebx + 0x68]
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebx + edi*8 + 4]
cmp ebx, ecx
je 0x10020b9c
and edx, 0xff000000
shl esi, 0x10
or esi, edx
shl eax, 8
or eax, esi
add eax, dword [ebp - 0x1c]
cmp eax, dword [ebx + 8]
mov dword [ebp - 0x14], ecx
jne 0x10020ba6
mov esi, dword [ebp + 8]
mov ecx, dword [ebp - 0x10]
xor edi, edi
jmp 0x10020bc2
mov esi, dword [ebp + 8]
mov ecx, dword [ebp - 0x10]
xor edi, edi
jmp 0x10020bca
add edi, edi
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx + edi*4]
mov esi, dword [ebp + 8]
mov ecx, dword [ebp - 0x10]
xor edi, edi
cmp ebx, edx
je 0x10020bca
mov ebx, dword [ebx + 4]
cmp eax, dword [ebx + 8]
jne 0x10020bb6
cmp ebx, dword [ebp - 0x14]
je 0x10020bca
mov edi, dword [ebx + 0xc]
mov eax, dword [ecx + 0x1380]
mov edx, dword [ecx + 0x1d14]
mov ecx, eax
push esi
call fcn.10016130
add esp, 4
mov dword [eax + 0x6c], edi
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret 8