joyce8/EMBER2024-capa huggingface dataset:
Function at 0x101dacd0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov ebx, dword [ebp + 8]
mov eax, dword [0x1039f0a4]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
jne 0x101dacf6
call fcn.10212224
mov eax, dword [0x1039f0a4]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov esi, dword [eax + 0xc]
test esi, esi
je 0x101dad43
cmp byte [esi + 0x1d00], 0
je 0x101dad51
call fcn.101fc8e0
mov edi, eax
push eax
call sub.MSVCP140.dll__Mtx_lock
add esp, 4
test eax, eax
jne 0x101dad5c
mov ecx, esi
push ebx
call fcn.10025a20
mov ebx, eax
push edi
call sub.MSVCP140.dll__Mtx_unlock
add esp, 4
mov eax, ebx
jmp 0x101dad4a
call fcn.101fca70
xor eax, eax
pop esi
pop edi
pop ebx
pop ebp
ret 4
mov ecx, esi
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.10025a20
push eax
call sub.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_
int3

Function at 0x101daed0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov ebx, dword [ebp + 8]
mov eax, dword [0x1039f0a4]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
jne 0x101daef6
call fcn.10212224
mov eax, dword [0x1039f0a4]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov esi, dword [eax + 0xc]
test esi, esi
je 0x101daf43
cmp byte [esi + 0x1d00], 0
je 0x101daf51
call fcn.101fc8e0
mov edi, eax
push eax
call sub.MSVCP140.dll__Mtx_lock
add esp, 4
test eax, eax
jne 0x101daf5c
mov ecx, esi
push ebx
call fcn.10025b00
mov ebx, eax
push edi
call sub.MSVCP140.dll__Mtx_unlock
add esp, 4
mov eax, ebx
jmp 0x101daf4a
call fcn.101fca70
xor eax, eax
pop esi
pop edi
pop ebx
pop ebp
ret 4
mov ecx, esi
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.10025b00
push eax
call sub.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_
int3

Function at 0x101e7d50
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x18], eax
mov edi, dword [ebp + 0x10]
mov eax, dword [0x1039f0a4]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x14], ecx
cmp byte [eax + 8], 0
mov ebx, dword [ebp + 8]
jne 0x101e7d88
call fcn.10212224
mov eax, dword [0x1039f0a4]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov esi, dword [eax + 0xc]
test esi, esi
je 0x101e7ddd
cmp byte [esi + 0x1d00], 0
je 0x101e7dec
mov dword [ebp - 0x10], edi
call fcn.101fc8e0
mov edi, eax
push eax
call sub.MSVCP140.dll__Mtx_lock
add esp, 4
test eax, eax
jne 0x101e7dfa
mov ecx, esi
push dword [ebp - 0x18]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push ebx
call fcn.1001e190
push edi
call sub.MSVCP140.dll__Mtx_unlock
add esp, 0x10
jmp 0x101e7de5
call fcn.101fca70
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
mov ecx, esi
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.1001e190
push eax
call sub.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_

Function at 0x101fcd80
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
pop ebp
jmp sym.libGLESv2.dll__GL_BindBuffer_8
Function at 0x101fcdb0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
pop ebp
jmp sym.libGLESv2.dll__GL_BindTexture_8

Function at 0x101fd290
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
pop ebp
jmp sym.libGLESv2.dll__GL_IsProgram_4

Function at 0x101fd2c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
pop ebp
jmp sym.libGLESv2.dll__GL_IsTexture_4

Function at 0x101fe1e0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
pop ebp
jmp sym.libGLESv2.dll__GL_FramebufferTexture_16
Function at 0x10217c10
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov eax, dword [ebp + 8]
mov edx, dword [0x1038000c]
xor edx, ebp
mov dword [ebp - 0x10], edx
mov edx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
mov esi, eax
jb 0x10217c34
mov esi, dword [eax]
mov edi, 0x811c9dc5
test edx, edx
je 0x10217c50
xor ebx, ebx
movzx eax, byte [esi + ebx]
xor eax, edi
imul edi, eax, 0x1000193
inc ebx
cmp edx, ebx
jne 0x10217c3f
lea esi, [ebp - 0x18]
push edi
push dword [ebp + 8]
push esi
call fcn.10218130
xor ebx, ebx
cmp dword [esi + 4], 0
setne bl
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
mov eax, ebx
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 4

Function at 0x10218000
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x20
mov esi, dword [ebp + 8]
mov eax, dword [0x1038000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x10]
cmp dword [esi + 0x14], 0x10
mov edi, esi
jb 0x10218023
mov edi, dword [esi]
mov dword [ebp - 0x2c], edx
mov ebx, 0x811c9dc5
test eax, eax
je 0x10218042
xor edx, edx
movzx esi, byte [edi + edx]
xor esi, ebx
imul ebx, esi, 0x1000193
inc edx
cmp eax, edx
jne 0x10218031
lea esi, [ebp - 0x18]
mov edi, ecx
push ebx
push dword [ebp + 8]
push esi
call fcn.10218130
mov eax, dword [esi + 4]
test eax, eax
je 0x10218075
mov esi, dword [ebp - 0x2c]
mov dword [esi], eax
mov byte [esi + 4], 0
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
mov eax, esi
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret
cmp dword [edi + 8], 0x7ffffff
je 0x10218123
lea edx, [edi + 4]
lea ecx, [ebp - 0x20]
push dword [ebp + 8]
call fcn.102181b0
add esp, 4
mov eax, dword [edi + 8]
inc eax
movq xmm0, qword [0x102c3120]
movd xmm1, eax
por xmm1, xmm0
subsd xmm1, xmm0
cvtsd2ss xmm1, xmm1
movss xmm2, dword [edi + 0x1c]
orpd xmm2, xmm0
subsd xmm2, xmm0
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm2
divss xmm1, xmm0
ucomiss xmm1, dword [edi]
jbe 0x102180f3
mov ecx, edi
call fcn.10218270
mov eax, dword [ebp - 0x1c]
add eax, 8
lea esi, [ebp - 0x28]
mov ecx, edi
push ebx
push eax
push esi
call fcn.10218130
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], eax
jmp 0x102180f6
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x2c]
lea ecx, [ebp - 0x20]
mov edx, dword [ecx + 4]
mov dword [ecx + 4], 0
mov ecx, edi
push edx
push eax
push ebx
call fcn.10218310
mov dword [esi], eax
mov byte [esi + 4], 1
lea ecx, [ebp - 0x20]
call fcn.10218360
jmp 0x10218061
push str.unordered_map_set_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__
int3
Function at 0x102193c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov edi, ecx
mov esi, dword [ebp + 8]
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
movzx ecx, byte [esi + 1]
xor ecx, eax
imul eax, ecx, 0x1000193
movzx ecx, byte [esi + 2]
xor ecx, eax
imul eax, ecx, 0x1000193
movzx ecx, byte [esi + 3]
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x14], eax
and ecx, eax
mov esi, dword [edi + 0xc]
mov ebx, dword [esi + ecx*8 + 4]
mov dword [ebp - 0x1c], edi
cmp ebx, dword [edi + 4]
je 0x1021944d
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp eax, dword [ebx + 8]
jne 0x10219425
xor eax, eax
jmp 0x1021943e
mov dword [ebp - 0x10], edx
add ecx, ecx
mov esi, dword [esi + ecx*4]
cmp ebx, esi
je 0x10219452
mov ebx, dword [ebx + 4]
cmp eax, dword [ebx + 8]
jne 0x1021942d
xor eax, eax
mov edx, dword [ebp - 0x10]
mov dword [edx], ebx
mov byte [edx + 4], al
mov eax, edx
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x10], edx
mov esi, ebx
mov edi, dword [ebp - 0x1c]
cmp dword [edi + 8], 0xfffffff
je 0x1021950b
push 0x10
call dword [sym.imp.mozglue.dll_moz_xmalloc]
add esp, 4
mov ebx, eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebx + 0xc], eax
mov dword [ebx + 8], ecx
mov eax, dword [edi + 8]
inc eax
movq xmm0, qword [0x102c3120]
movd xmm1, eax
por xmm1, xmm0
subsd xmm1, xmm0
cvtsd2ss xmm1, xmm1
movss xmm2, dword [edi + 0x1c]
orpd xmm2, xmm0
subsd xmm2, xmm0
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm2
divss xmm1, xmm0
ucomiss xmm1, dword [edi]
jbe 0x102194d2
mov dword [ebp - 0x18], ecx
mov ecx, edi
call fcn.10219520
mov eax, dword [edi + 0x18]
and eax, dword [ebp - 0x14]
mov ecx, dword [edi + 0xc]
mov esi, dword [ecx + eax*8 + 4]
cmp esi, dword [edi + 4]
jne 0x102194e8
mov ecx, edi
mov edx, dword [ebp - 0x14]
push ebx
push esi
call fcn.102195c0
add esp, 8
mov al, 1
jmp 0x1021943b
mov edx, dword [ebp - 0x18]
cmp dword [esi + 8], edx
jne 0x102194f4
mov esi, dword [esi]
jmp 0x102194d2
add eax, eax
mov eax, dword [ecx + eax*4]
cmp esi, eax
je 0x10219507
mov esi, dword [esi + 4]
cmp dword [esi + 8], edx
jne 0x102194f9
jmp 0x102194f0
mov esi, eax
jmp 0x102194d2
push str.unordered_map_set_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__
int3

Function at 0x10219520
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0xc
mov esi, ecx
mov eax, dword [ecx + 8]
inc eax
movd xmm0, eax
por xmm0, xmmword [0x102c3850]
subsd xmm0, qword [0x102c3120]
cvtsd2ss xmm0, xmm0
mov edi, dword [ecx + 0x1c]
divss xmm0, dword [ecx]
cvtss2sd xmm0, xmm0
movsd qword [esp], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_ceil
fstp dword [ebp - 0xc]
movss xmm0, dword [ebp - 0xc]
cvttss2si eax, xmm0
mov ecx, eax
subss xmm0, dword [0x102c3128]
cvttss2si edx, xmm0
sar ecx, 0x1f
and edx, ecx
or edx, eax
cmp edx, 9
mov eax, 8
cmovae eax, edx
cmp edi, eax
jae 0x102195a2
lea ecx, [edi*8]
cmp ecx, eax
cmovb ecx, eax
cmp edi, 0x200
cmovae ecx, eax
mov edi, ecx
mov ecx, esi
mov edx, edi
add esp, 0xc
pop esi
pop edi
pop ebp
jmp fcn.10219610
Function at 0x10219770
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edi, ecx
mov esi, dword [ebp + 8]
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
movzx ecx, byte [esi + 1]
xor ecx, eax
imul eax, ecx, 0x1000193
movzx ecx, byte [esi + 2]
xor ecx, eax
imul eax, ecx, 0x1000193
movzx ecx, byte [esi + 3]
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], eax
and ecx, eax
mov esi, dword [edi + 0xc]
mov ebx, dword [esi + ecx*8 + 4]
mov dword [ebp - 0x10], edi
cmp ebx, dword [edi + 4]
je 0x10219800
mov edi, dword [ebp + 8]
mov eax, dword [edi]
cmp eax, dword [ebx + 8]
jne 0x102197d5
xor eax, eax
jmp 0x102197f1
mov dword [ebp - 0x14], edx
add ecx, ecx
mov esi, dword [esi + ecx*4]
mov ecx, dword [ebp - 0x10]
cmp ebx, esi
je 0x1021980b
mov ebx, dword [ebx + 4]
cmp eax, dword [ebx + 8]
jne 0x102197e0
xor eax, eax
mov edx, dword [ebp - 0x14]
mov dword [edx], ebx
mov byte [edx + 4], al
mov eax, edx
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x14], edx
mov esi, ebx
mov ecx, dword [ebp - 0x10]
mov edi, dword [ebp + 8]
cmp dword [ecx + 8], 0xfffffff
je 0x102198bb
push 0x10
call dword [sym.imp.mozglue.dll_moz_xmalloc]
add esp, 4
mov ebx, eax
mov edi, dword [edi]
mov dword [eax + 8], edi
mov dword [eax + 0xc], 0
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx + 8]
inc eax
movq xmm0, qword [0x102c3120]
movd xmm1, eax
por xmm1, xmm0
subsd xmm1, xmm0
cvtsd2ss xmm1, xmm1
movss xmm2, dword [ecx + 0x1c]
orpd xmm2, xmm0
subsd xmm2, xmm0
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm2
divss xmm1, xmm0
ucomiss xmm1, dword [ecx]
jbe 0x10219887
call fcn.10219520
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx + 0x18]
and eax, dword [ebp - 0x18]
mov edx, dword [ecx + 0xc]
mov esi, dword [edx + eax*8 + 4]
cmp esi, dword [ecx + 4]
jne 0x1021989b
mov edx, dword [ebp - 0x18]
push ebx
push esi
call fcn.102195c0
add esp, 8
mov al, 1
jmp 0x102197ee
cmp edi, dword [esi + 8]
jne 0x102198a4
mov esi, dword [esi]
jmp 0x10219887
add eax, eax
mov eax, dword [edx + eax*4]
cmp esi, eax
je 0x102198b7
mov esi, dword [esi + 4]
cmp edi, dword [esi + 8]
jne 0x102198a9
jmp 0x102198a0
mov esi, eax
jmp 0x10219887
push str.unordered_map_set_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__
int3

Function at 0x10219990
Capabilities:
Hash data using murmur3

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
and eax, 0xf
jmp dword [eax*4 + 0x103024b4]
Function at 0x1021d920
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x238
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x1038000c]
xor ecx, ebp
mov dword [ebp - 0x10], ecx
lea ebx, [ebp - 0x23c]
mov dword [ebx], eax
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov dword [ebx + 4], eax
lea edi, [ebp - 0x28]
push ebx
push edi
call fcn.1021d650
add esp, 8
mov dword [ebx + 0x208], ebx
xor eax, eax
mov dword [ebx + 0x20c], eax
mov dword [ebx + 0x210], 0x104
cmp dword [edi + 0x14], 8
jb 0x1021d97c
mov edi, dword [ebp - 0x28]
mov esi, dword [ebp + 8]
push eax
push eax
push edi
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x1021d9a8
mov edi, eax
cmp dword [ebp - 0x30], eax
jb 0x1021da48
mov dword [ebp - 0x30], edi
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x14], 8
jb 0x1021d9bb
mov ecx, dword [ebp - 0x28]
jmp 0x1021d9be
xor eax, eax
mov dword [esi], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
jmp 0x1021d9e8
lea ecx, [ebp - 0x28]
push edi
push eax
push ecx
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableW]
mov eax, dword [ebp - 0x34]
lea edi, [ebp - 0x244]
mov dword [edi], eax
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov dword [edi + 4], eax
push edi
push esi
call fcn.1021d5a0
add esp, 8
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x34]
cmp eax, ebx
je 0x1021da04
test eax, eax
je 0x1021da04
push eax
call dword [sym.imp.mozglue.dll_free]
add esp, 4
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x1021da31
mov eax, dword [ebp - 0x28]
inc ecx
test ecx, 0x7ffff800
je 0x1021da27
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x1021da80
mov eax, ecx
push eax
call dword [sym.imp.mozglue.dll_free]
add esp, 4
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
mov eax, esi
add esp, 0x238
pop esi
pop edi
pop ebx
pop ebp
ret
lea ecx, [ebp - 0x23c]
mov edx, edi
call fcn.1021da90
lea ecx, [ebp - 0x23c]
mov eax, dword [ecx + 0x208]
mov ecx, dword [ecx + 0x20c]
lea edx, [eax + edi*2]
lea eax, [eax + ecx*2]
sub edx, eax
push edx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
jmp 0x1021d997
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
Function at 0x10265a50
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edi, ecx
mov esi, dword [ebp + 8]
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
movzx ecx, byte [esi + 1]
xor ecx, eax
imul eax, ecx, 0x1000193
movzx ecx, byte [esi + 2]
xor ecx, eax
imul eax, ecx, 0x1000193
movzx ecx, byte [esi + 3]
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x14], eax
and ecx, eax
mov esi, dword [edi + 0xc]
mov ebx, dword [esi + ecx*8 + 4]
mov dword [ebp - 0x18], edi
cmp ebx, dword [edi + 4]
je 0x10265add
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp eax, dword [ebx + 8]
jne 0x10265ab5
xor eax, eax
jmp 0x10265ace
mov dword [ebp - 0x10], edx
add ecx, ecx
mov esi, dword [esi + ecx*4]
cmp ebx, esi
je 0x10265ae2
mov ebx, dword [ebx + 4]
cmp eax, dword [ebx + 8]
jne 0x10265abd
xor eax, eax
mov edx, dword [ebp - 0x10]
mov dword [edx], ebx
mov byte [edx + 4], al
mov eax, edx
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x10], edx
mov esi, ebx
mov edi, dword [ebp - 0x18]
cmp dword [edi + 8], 0xfffffff
je 0x10265b9c
call fcn.1025c190
mov ecx, eax
push 0x10
call fcn.1021aad0
mov ebx, eax
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], 0
mov eax, dword [edi + 8]
inc eax
movq xmm0, qword [0x102c3120]
movd xmm1, eax
por xmm1, xmm0
subsd xmm1, xmm0
cvtsd2ss xmm1, xmm1
movss xmm2, dword [edi + 0x1c]
orpd xmm2, xmm0
subsd xmm2, xmm0
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm2
divss xmm1, xmm0
ucomiss xmm1, dword [edi]
jbe 0x10265b63
mov ecx, edi
call fcn.10265bb0
mov ecx, dword [edi + 0x18]
and ecx, dword [ebp - 0x14]
mov edx, dword [edi + 0xc]
mov esi, dword [edx + ecx*8 + 4]
cmp esi, dword [edi + 4]
jne 0x10265b79
mov ecx, edi
mov edx, dword [ebp - 0x14]
push ebx
push esi
call fcn.102195c0
add esp, 8
mov al, 1
jmp 0x10265acb
mov eax, dword [ebx + 8]
cmp eax, dword [esi + 8]
jne 0x10265b85
mov esi, dword [esi]
jmp 0x10265b63
add ecx, ecx
mov ecx, dword [edx + ecx*4]
cmp esi, ecx
je 0x10265b98
mov esi, dword [esi + 4]
cmp eax, dword [esi + 8]
jne 0x10265b8a
jmp 0x10265b81
mov esi, ecx
jmp 0x10265b63
push str.unordered_map_set_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__
int3

Function at 0x10265bb0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0xc
mov esi, ecx
mov eax, dword [ecx + 8]
inc eax
movd xmm0, eax
por xmm0, xmmword [0x102c3850]
subsd xmm0, qword [0x102c3120]
cvtsd2ss xmm0, xmm0
mov edi, dword [ecx + 0x1c]
divss xmm0, dword [ecx]
cvtss2sd xmm0, xmm0
movsd qword [esp], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_ceil
fstp dword [ebp - 0xc]
movss xmm0, dword [ebp - 0xc]
cvttss2si eax, xmm0
mov ecx, eax
subss xmm0, dword [0x102c3128]
cvttss2si edx, xmm0
sar ecx, 0x1f
and edx, ecx
or edx, eax
cmp edx, 9
mov eax, 8
cmovae eax, edx
cmp edi, eax
jae 0x10265c32
lea ecx, [edi*8]
cmp ecx, eax
cmovb ecx, eax
cmp edi, 0x200
cmovae ecx, eax
mov edi, ecx
mov ecx, esi
mov edx, edi
add esp, 0xc
pop esi
pop edi
pop ebp
jmp fcn.10265c50
Function at 0x10273980
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov esi, edx
mov edx, dword [ebp + 8]
mov eax, dword [0x1038000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [edx]
test eax, eax
mov edx, 0x10369b5f
cmovne edx, eax
mov edi, ecx
mov cl, byte [edx]
mov eax, 0x811c9dc5
test cl, cl
je 0x102739c4
inc edx
movsx ecx, cl
xor ecx, eax
imul eax, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x102739b2
lea ebx, [ebp - 0x18]
mov ecx, edi
mov edx, ebx
push eax
push dword [ebp + 8]
call fcn.10274f60
add esp, 8
mov eax, dword [ebx + 4]
test eax, eax
jne 0x102739e1
mov eax, dword [edi + 4]
mov dword [esi], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
mov eax, esi
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret

Function at 0x10274e30
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1c
mov esi, edx
mov edx, dword [ebp + 8]
mov eax, dword [0x1038000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov edx, dword [edx]
test edx, edx
mov eax, 0x10369b5f
cmovne eax, edx
mov dl, byte [eax]
mov ebx, 0x811c9dc5
test dl, dl
je 0x10274e72
inc eax
movsx edx, dl
xor edx, ebx
imul ebx, edx, 0x1000193
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10274e60
lea edi, [ebp - 0x18]
mov dword [ebp - 0x24], ecx
mov edx, edi
push ebx
push dword [ebp + 8]
call fcn.10274f60
add esp, 8
mov edi, dword [edi + 4]
test edi, edi
je 0x10274ea8
xor eax, eax
mov dword [esi], edi
mov byte [esi + 4], al
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
mov eax, esi
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x24]
cmp dword [eax + 8], 0xccccccc
je 0x10274f55
call fcn.1025c190
mov ecx, eax
push 0x14
call fcn.1021aad0
mov edi, eax
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 8]
mov dword [edi + 0x10], eax
movsd xmm0, qword [ecx]
movsd qword [edi + 8], xmm0
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx + 8]
inc eax
movq xmm0, qword [0x102c3120]
movd xmm1, eax
por xmm1, xmm0
subsd xmm1, xmm0
cvtsd2ss xmm1, xmm1
movss xmm2, dword [ecx + 0x1c]
orpd xmm2, xmm0
subsd xmm2, xmm0
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm2
divss xmm1, xmm0
ucomiss xmm1, dword [ecx]
jbe 0x10274f3f
mov eax, edi
add eax, 8
mov dword [ebp - 0x28], eax
call fcn.10274ff0
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
push ebx
push dword [ebp - 0x28]
call fcn.10274f60
mov ecx, dword [ebp - 0x24]
add esp, 8
lea eax, [ebp - 0x20]
mov eax, dword [eax]
jmp 0x10274f42
mov eax, dword [ebp - 0x18]
mov edx, ebx
push edi
push eax
call fcn.102195c0
add esp, 8
mov al, 1
jmp 0x10274e8f
push str.unordered_map_set_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__
int3
Function at 0x10274ff0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0xc
mov esi, ecx
mov eax, dword [ecx + 8]
inc eax
movd xmm0, eax
por xmm0, xmmword [0x102c3850]
subsd xmm0, qword [0x102c3120]
cvtsd2ss xmm0, xmm0
mov edi, dword [ecx + 0x1c]
divss xmm0, dword [ecx]
cvtss2sd xmm0, xmm0
movsd qword [esp], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_ceil
fstp dword [ebp - 0xc]
movss xmm0, dword [ebp - 0xc]
cvttss2si eax, xmm0
mov ecx, eax
subss xmm0, dword [0x102c3128]
cvttss2si edx, xmm0
sar ecx, 0x1f
and edx, ecx
or edx, eax
cmp edx, 9
mov eax, 8
cmovae eax, edx
cmp edi, eax
jae 0x10275072
lea ecx, [edi*8]
cmp ecx, eax
cmovb ecx, eax
cmp edi, 0x200
cmovae ecx, eax
mov edi, ecx
mov ecx, esi
mov edx, edi
add esp, 0xc
pop esi
pop edi
pop ebp
jmp fcn.10275090

Function at 0x1027fe40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
mov esi, ecx
mov dword [ecx], 0x1031d130
add ecx, 0x8f0
mov eax, dword [esi + 0x8f0]
push dword [eax + 4]
push ecx
call fcn.10216fc0
mov edi, dword [sym.imp.mozglue.dll_free]
push dword [esi + 0x8f0]
call edi
add esp, 4
lea ecx, [esi + 0x8e8]
mov eax, dword [esi + 0x8e8]
push dword [eax + 4]
push ecx
call fcn.102136c0
push dword [esi + 0x8e8]
call edi
add esp, 4
lea ecx, [esi + 0x8e0]
mov eax, dword [esi + 0x8e0]
push dword [eax + 4]
push ecx
call fcn.10216fc0
push dword [esi + 0x8e0]
call edi
add esp, 4
lea ecx, [esi + 0x8d0]
mov eax, dword [esi + 0x8d0]
push dword [eax + 4]
push ecx
call fcn.10216fc0
push dword [esi + 0x8d0]
call edi
add esp, 4
lea ecx, [esi + 0x8c8]
mov eax, dword [esi + 0x8c8]
push dword [eax + 4]
push ecx
call fcn.10216fc0
push dword [esi + 0x8c8]
call edi
add esp, 4
lea ecx, [esi + 0x8c0]
mov eax, dword [esi + 0x8c0]
push dword [eax + 4]
push ecx
call fcn.10216fc0
push dword [esi + 0x8c0]
call edi
add esp, 4
lea ecx, [esi + 0x8b8]
mov eax, dword [esi + 0x8b8]
push dword [eax + 4]
push ecx
call fcn.10216fc0
push dword [esi + 0x8b8]
call edi
add esp, 4
mov ecx, esi
pop esi
pop edi
pop ebp
jmp fcn.10226bd0
Function at 0x10287c60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, ecx
mov dword [ecx], 0x1031db00
add ecx, 0x84
mov eax, dword [esi + 0x84]
push dword [eax + 4]
push ecx
call fcn.102136c0
push dword [esi + 0x84]
call dword [sym.imp.mozglue.dll_free]
add esp, 4
mov eax, dword [esi + 0x78]
test eax, eax
je 0x10287cd2
mov ecx, dword [esi + 0x80]
sub ecx, eax
cmp ecx, 0x1000
jb 0x10287cba
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x10287d4b
mov eax, ecx
push eax
call dword [sym.imp.mozglue.dll_free]
add esp, 4
xor eax, eax
mov dword [esi + 0x78], eax
mov dword [esi + 0x7c], eax
mov dword [esi + 0x80], eax
mov eax, dword [esi + 0x6c]
test eax, eax
je 0x10287d0a
mov ecx, dword [esi + 0x74]
sub ecx, eax
cmp ecx, 0x1000
jb 0x10287cf5
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x10287d4b
mov eax, ecx
push eax
call dword [sym.imp.mozglue.dll_free]
add esp, 4
xor eax, eax
mov dword [esi + 0x6c], eax
mov dword [esi + 0x70], eax
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x60]
test eax, eax
je 0x10287d42
mov ecx, dword [esi + 0x68]
sub ecx, eax
cmp ecx, 0x1000
jb 0x10287d2d
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x10287d4b
mov eax, ecx
push eax
call dword [sym.imp.mozglue.dll_free]
add esp, 4
xor eax, eax
mov dword [esi + 0x60], eax
mov dword [esi + 0x64], eax
mov dword [esi + 0x68], eax
mov ecx, esi
pop esi
pop ebp
jmp fcn.102b6510
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3