joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10119010
Capabilities:
Hash data using fnv

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x24]
mov ebx, ecx
movzx eax, byte [edi]
xor eax, 0x811c9dc5
mov ebp, dword [ebx + 0x18]
imul edx, eax, 0x1000193
movzx eax, byte [edi + 1]
mov esi, dword [ebx + 4]
xor edx, eax
movzx eax, byte [edi + 2]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [edi + 3]
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [ebx + 0xc]
and ebp, eax
mov eax, dword [ecx + ebp*8]
cmp esi, eax
je 0x1011907c
mov esi, dword [ecx + ebp*8 + 4]
mov esi, dword [esi]
cmp esi, eax
je 0x1011907c
mov ecx, dword [edi]
nop dword [eax]
mov esi, dword [esi + 4]
cmp ecx, dword [esi + 8]
je 0x101190c2
cmp esi, eax
jne 0x10119070
mov edi, dword [esp + 0x28]
mov dword [esp + 0x10], edi
mov eax, dword [edi]
cmp esi, eax
je 0x101190ab
mov ecx, dword [edi + 4]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
mov dword [ecx], esi
mov ecx, dword [esi + 4]
mov dword [ecx], edi
mov ecx, dword [eax + 4]
mov edx, dword [esi + 4]
mov dword [esi + 4], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov dword [edi + 4], edx
mov ecx, dword [ebx + 0xc]
mov eax, dword [ecx + ebp*8]
cmp eax, dword [ebx + 4]
jne 0x101190f7
mov dword [ecx + ebp*8], edi
mov eax, dword [ebx + 0xc]
mov dword [eax + ebp*8 + 4], edi
jmp 0x1011911c
mov edx, dword [esp + 0x28]
push 0x10
push edx
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [ecx], eax
mov ecx, dword [edx]
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
dec dword [ebx + 8]
call fcn.1037dfe9
mov eax, dword [esp + 0x28]
add esp, 8
pop edi
mov dword [eax], esi
pop esi
pop ebp
mov byte [eax + 4], 0
pop ebx
add esp, 0xc
ret 0xc
cmp eax, esi
jne 0x10119100
mov dword [ecx + ebp*8], edi
jmp 0x1011911c
mov eax, dword [ecx + ebp*8 + 4]
mov eax, dword [eax]
mov dword [ecx + ebp*8 + 4], eax
cmp eax, edi
je 0x1011911c
mov ecx, dword [ebx + 0xc]
mov eax, dword [ecx + ebp*8 + 4]
mov eax, dword [eax + 4]
mov dword [ecx + ebp*8 + 4], eax
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 0x1c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10386860]
mov eax, ecx
shr eax, 0x1f
cvtpd2ps xmm1, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x10386860]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [ebx]
jbe 0x101191a6
cmp ecx, 0x200
jae 0x1011916a
shl ecx, 3
jmp 0x10119174
cmp ecx, 0x1fffffff
jae 0x10119174
add ecx, ecx
push ecx
mov ecx, ebx
call fcn.10084520
mov eax, dword [ebx + 4]
cmp dword [eax], eax
je 0x101191a6
mov eax, dword [eax + 4]
mov edi, eax
mov esi, dword [ebx + 4]
mov ecx, ebx
mov esi, dword [esi]
push esi
lea eax, [esi + 8]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.10119010
cmp esi, edi
jne 0x10119188
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov dword [eax], edi
pop edi
pop esi
pop ebp
mov byte [eax + 4], 1
pop ebx
add esp, 0xc
ret 0xc
Function at 0x10119240
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x18]
mov ebx, ecx
mov esi, edi
cmp dword [edi + 0x14], 0x10
mov ebp, dword [edi + 0x10]
jb 0x10119257
mov esi, dword [edi]
xor ecx, ecx
mov edx, 0x811c9dc5
test ebp, ebp
je 0x10119273
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, ebp
jb 0x10119262
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 4]
and eax, edx
lea ebp, [eax*8]
mov eax, dword [ebx + 0xc]
mov edx, dword [eax + ebp]
cmp edx, ecx
jne 0x10119290
mov esi, ecx
jmp 0x10119296
mov esi, dword [eax + ebp + 4]
mov esi, dword [esi]
cmp esi, edx
je 0x101192bd
nop word [eax + eax]
mov esi, dword [esi + 4]
mov ecx, edi
lea eax, [esi + 8]
push eax
call fcn.101177c0
test al, al
jne 0x1011930d
mov eax, dword [ebx + 0xc]
cmp esi, dword [eax + ebp]
jne 0x101192a0
mov ecx, dword [ebx + 4]
push edi
push dword [ecx]
lea ecx, [ebx + 4]
call fcn.101191c0
mov edx, dword [ebx + 4]
mov edi, dword [edx]
mov eax, dword [edi]
cmp esi, eax
je 0x101192f7
mov ecx, dword [edi + 4]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
mov dword [ecx], esi
mov ecx, dword [esi + 4]
mov dword [ecx], edi
mov edx, dword [esi + 4]
mov ecx, dword [eax + 4]
mov dword [esi + 4], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov dword [edi + 4], edx
mov edx, dword [ebx + 4]
mov ecx, dword [ebx + 0xc]
add ecx, ebp
mov eax, dword [ecx]
cmp eax, edx
jne 0x1011931e
mov dword [ecx], edi
mov eax, dword [ebx + 0xc]
mov dword [eax + ebp + 4], edi
jmp 0x10119340
mov eax, dword [esp + 0x14]
pop edi
mov dword [eax], esi
pop esi
pop ebp
mov byte [eax + 4], 0
pop ebx
ret 0xc
cmp eax, esi
jne 0x10119326
mov dword [ecx], edi
jmp 0x10119340
mov eax, dword [ecx + 4]
mov eax, dword [eax]
mov dword [ecx + 4], eax
cmp eax, edi
je 0x10119340
mov ecx, dword [ebx + 0xc]
mov eax, dword [ecx + ebp + 4]
mov eax, dword [eax + 4]
mov dword [ecx + ebp + 4], eax
mov ecx, ebx
call fcn.1011fd30
mov eax, dword [esp + 0x14]
mov dword [eax], edi
pop edi
pop esi
pop ebp
mov byte [eax + 4], 1
pop ebx
ret 0xc
Function at 0x10119360
Capabilities:
Hash data using fnv

Disassembly:
push ecx
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x1c]
mov ebx, ecx
movzx eax, byte [edi]
xor eax, 0x811c9dc5
mov esi, dword [ebx + 0xc]
imul edx, eax, 0x1000193
movzx eax, byte [edi + 1]
xor edx, eax
movzx eax, byte [edi + 2]
imul edx, edx, 0x1000193
xor edx, eax
movzx eax, byte [edi + 3]
imul ecx, edx, 0x1000193
mov edx, dword [ebx + 4]
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [ebx + 0x18]
and ecx, eax
mov eax, dword [esi + ecx*8]
lea ebp, [ecx*8]
cmp eax, edx
jne 0x101193ba
mov esi, edx
jmp 0x101193c0
mov esi, dword [esi + ebp + 4]
mov esi, dword [esi]
cmp esi, eax
je 0x101193d2
mov ecx, dword [edi]
mov esi, dword [esi + 4]
cmp ecx, dword [esi + 8]
je 0x1011940e
cmp esi, eax
jne 0x101193c6
mov edi, dword [edx]
push 0xc
mov eax, dword [edi + 4]
mov dword [esp + 0x14], eax
call fcn.1037dfb9
mov ecx, dword [esp + 0x20]
mov edx, eax
mov eax, dword [esp + 0x14]
add esp, 4
mov dword [edx], edi
mov dword [edx + 4], eax
mov ecx, dword [ecx]
mov dword [edx + 8], ecx
mov ecx, 0x15555554
mov eax, dword [ebx + 8]
sub ecx, eax
cmp ecx, 1
jb 0x101194ad
jmp 0x10119420
mov eax, dword [esp + 0x18]
pop edi
mov dword [eax], esi
pop esi
pop ebp
mov byte [eax + 4], 0
pop ebx
pop ecx
ret 0xc
inc eax
mov dword [ebx + 8], eax
mov eax, dword [esp + 0x10]
mov dword [edi + 4], edx
mov dword [eax], edx
mov edx, dword [ebx + 4]
mov edi, dword [edx]
mov eax, dword [edi]
cmp esi, eax
je 0x1011945c
mov ecx, dword [edi + 4]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
mov dword [ecx], esi
mov ecx, dword [esi + 4]
mov dword [ecx], edi
mov edx, dword [esi + 4]
mov ecx, dword [eax + 4]
mov dword [esi + 4], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov dword [edi + 4], edx
mov edx, dword [ebx + 4]
mov ecx, dword [ebx + 0xc]
add ecx, ebp
mov eax, dword [ecx]
cmp eax, edx
jne 0x10119472
mov dword [ecx], edi
mov eax, dword [ebx + 0xc]
mov dword [eax + ebp + 4], edi
jmp 0x10119494
cmp eax, esi
jne 0x1011947a
mov dword [ecx], edi
jmp 0x10119494
mov eax, dword [ecx + 4]
mov eax, dword [eax]
mov dword [ecx + 4], eax
cmp eax, edi
je 0x10119494
mov ecx, dword [ebx + 0xc]
mov eax, dword [ecx + ebp + 4]
mov eax, dword [eax + 4]
mov dword [ecx + ebp + 4], eax
mov ecx, ebx
call fcn.1011fdb0
mov eax, dword [esp + 0x18]
mov dword [eax], edi
pop edi
pop esi
pop ebp
mov byte [eax + 4], 1
pop ebx
pop ecx
ret 0xc
push str.list_T__too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__
int3
Function at 0x1011d550
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x20]
lea ebp, [ecx + 0x18]
push 0x28
mov dword [esp + 0x14], ecx
mov eax, dword [edi]
mov dword [ecx], eax
movzx eax, byte [edi + 4]
mov byte [ecx + 4], al
movzx eax, byte [edi + 5]
mov byte [ecx + 5], al
movzx eax, byte [edi + 6]
mov byte [ecx + 6], al
movzx eax, byte [edi + 7]
mov byte [ecx + 7], al
movzx eax, byte [edi + 8]
mov byte [ecx + 8], al
mov eax, dword [edi + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [edi + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [edi + 0x14]
mov dword [ecx + 0x14], eax
mov eax, dword [edi + 0x18]
mov dword [ebp], eax
mov dword [ebp + 4], 0
mov dword [ebp + 8], 0
call fcn.1037dfb9
add esp, 4
lea ecx, [ebp + 4]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebp + 4], eax
mov dword [ebp + 0xc], 0
mov dword [ebp + 0x10], 0
mov dword [ebp + 0x14], 0
mov eax, dword [edi + 0x30]
mov dword [ebp + 0x18], eax
mov eax, dword [edi + 0x34]
mov dword [ebp + 0x1c], eax
call fcn.10085190
mov eax, dword [edi + 0x18]
lea ecx, [ebp + 0xc]
mov dword [ebp], eax
mov eax, dword [ebp + 4]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
push eax
mov eax, dword [edi + 0x28]
sub eax, dword [edi + 0x24]
sar eax, 2
push eax
call fcn.10084e70
mov edi, dword [edi + 0x1c]
mov esi, dword [edi]
cmp esi, edi
je 0x1011d644
mov eax, dword [ebp + 4]
lea ecx, [esi + 8]
push ecx
lea ecx, [ebp + 4]
push dword [eax]
call fcn.101191c0
mov eax, dword [ebp + 4]
mov ecx, ebp
mov eax, dword [eax]
push eax
add eax, 8
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.10081d30
mov esi, dword [esi]
cmp esi, edi
jne 0x1011d617
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 4

Function at 0x1011fac0
Capabilities:
Terminate process

Disassembly:
mov eax, dword [esp + 4]
lea ecx, [eax - 0x35]
cmp ecx, 0x28
ja case.0x1011fad0.71
jmp dword [ecx*4 + 0x1011fbd0]
mov eax, 0x10398818
ret
mov eax, 0x1038d5e8
ret
mov eax, 0x103978d4
ret
mov eax, 0x1039881c
ret
mov eax, 0x10398820
ret
mov eax, 0x10398824
ret
mov eax, 0x10398828
ret
mov eax, 0x1039882c
ret
mov eax, 0x10398830
ret
mov eax, 0x10398834
ret
mov eax, 0x10398838
ret
mov eax, 0x1039883c
ret
mov eax, 0x10398840
ret
mov eax, 0x10398844
ret
mov eax, 0x10398848
ret
mov eax, 0x1038ba0c
ret
mov eax, 0x1039884c
ret
mov eax, 0x10398850
ret
mov eax, 0x10398854
ret
mov eax, 0x10398604
ret
mov eax, 0x10398858
ret
mov eax, 0x1039885c
ret
mov eax, 0x10398860
ret
mov eax, 0x10398864
ret
mov eax, 0x10398868
ret
mov eax, 0x1039886c
ret
mov eax, 0x10398870
ret
mov eax, 0x10398874
ret
mov eax, 0x10398878
ret
mov eax, 0x1039887c
ret
mov eax, 0x10398880
ret
mov eax, 0x10398884
ret
mov eax, 0x10398888
ret
mov eax, 0x1039888c
ret
mov eax, 0x10398890
ret
mov eax, 0x10398894
ret
mov eax, 0x10398898
ret
mov eax, 0x10388cfc
ret
push eax
push str.unsupported_operator:__d_n
call fcn.100d7e60
add esp, 8
jmp fcn.101ca200
Function at 0x1011fd30
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
mov edx, dword [esi + 0x1c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10386860]
mov eax, edx
shr eax, 0x1f
cvtpd2ps xmm1, xmm0
movd xmm0, edx
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x10386860]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [esi]
jbe 0x1011fda5
cmp edx, 0x200
jae 0x1011fd8d
shl edx, 3
push edx
call fcn.10084520
mov ecx, esi
pop esi
jmp 0x101204a0
cmp edx, 0x1fffffff
jae 0x1011fd97
add edx, edx
push edx
call fcn.10084520
mov ecx, esi
pop esi
jmp 0x101204a0
pop esi
ret
sub esp, 0x10
push ebx
mov ebx, ecx
mov eax, dword [ebx + 4]
push esi
lea esi, [ebx + 4]
mov dword [esp + 0x10], ebx
cmp dword [eax], eax
je 0x101205e3
mov eax, dword [eax + 4]
push ebp
mov dword [esp + 0x18], eax
push edi
mov esi, dword [esi]
mov edi, dword [esi]
cmp dword [edi + 0x1c], 0x10
lea edx, [edi + 8]
mov ecx, dword [edx + 0x10]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
jb 0x101204e0
mov eax, dword [edx]
mov dword [esp + 0x10], eax
xor eax, eax
mov ebp, 0x811c9dc5
test ecx, ecx
je 0x1012050b
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
movzx ecx, byte [eax + edx]
inc eax
xor ecx, ebp
imul ebp, ecx, 0x1000193
cmp eax, ebx
jb 0x101204f3
mov ebx, dword [esp + 0x18]
lea edx, [edi + 8]
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0xc]
and eax, ebp
lea ebp, [eax*8]
mov eax, dword [ecx + ebp]
cmp esi, eax
je 0x1012054d
mov esi, dword [ecx + ebp + 4]
mov esi, dword [esi]
cmp esi, eax
je 0x1012054d
nop dword [eax + eax]
mov esi, dword [esi + 4]
mov ecx, edx
lea eax, [esi + 8]
push eax
call fcn.101177c0
test al, al
jne 0x1012058c
mov ecx, dword [ebx + 0xc]
lea edx, [edi + 8]
cmp esi, dword [ecx + ebp]
jne 0x10120530
mov eax, dword [edi]
cmp esi, eax
je 0x10120577
mov ecx, dword [edi + 4]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
mov dword [ecx], esi
mov ecx, dword [esi + 4]
mov dword [ecx], edi
mov ecx, dword [eax + 4]
mov edx, dword [esi + 4]
mov dword [esi + 4], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov dword [edi + 4], edx
mov ecx, dword [ebx + 0xc]
mov eax, dword [ecx + ebp]
add ecx, ebp
cmp eax, dword [ebx + 4]
jne 0x101205ab
mov dword [ecx], edi
mov eax, dword [ebx + 0xc]
mov dword [eax + ebp + 4], edi
jmp 0x101205cd
mov ecx, dword [edi + 4]
lea esi, [ebx + 4]
mov eax, dword [edi]
push edi
mov dword [ecx], eax
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
mov ecx, esi
dec dword [esi + 4]
call fcn.100844c0
jmp 0x101205d7
cmp eax, esi
jne 0x101205b3
mov dword [ecx], edi
jmp 0x101205cd
mov eax, dword [ecx + 4]
mov eax, dword [eax]
mov dword [ecx + 4], eax
cmp eax, edi
je 0x101205cd
mov ecx, dword [ebx + 0xc]
mov eax, dword [ecx + ebp + 4]
mov eax, dword [eax + 4]
mov dword [ecx + ebp + 4], eax
mov ecx, ebx
call fcn.1011fd30
lea esi, [ebx + 4]
cmp edi, dword [esp + 0x1c]
jne 0x101204c2
pop edi
pop ebp
pop esi
pop ebx
add esp, 0x10
ret
Function at 0x1011fdb0
Capabilities:
Hash data using fnv

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
mov edx, dword [esi + 0x1c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10386860]
mov eax, edx
shr eax, 0x1f
cvtpd2ps xmm1, xmm0
movd xmm0, edx
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x10386860]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [esi]
jbe 0x1011fe25
cmp edx, 0x200
jae 0x1011fe0d
shl edx, 3
push edx
call fcn.10120230
mov ecx, esi
pop esi
jmp 0x101205f0
cmp edx, 0x1fffffff
jae 0x1011fe17
add edx, edx
push edx
call fcn.10120230
mov ecx, esi
pop esi
jmp 0x101205f0
pop esi
ret
push ecx
push edi
mov edi, ecx
mov eax, dword [edi + 4]
cmp dword [eax], eax
je 0x10120714
push ebx
mov ebx, dword [eax + 4]
push ebp
push esi
mov dword [esp + 0x10], ebx
nop dword [eax]
mov eax, dword [edi + 4]
mov esi, dword [eax]
movzx ecx, byte [esi + 8]
xor ecx, 0x811c9dc5
imul edx, ecx, 0x1000193
movzx ecx, byte [esi + 9]
xor edx, ecx
movzx ecx, byte [esi + 0xa]
imul edx, edx, 0x1000193
xor edx, ecx
movzx ecx, byte [esi + 0xb]
imul edx, edx, 0x1000193
xor edx, ecx
imul ecx, edx, 0x1000193
mov edx, dword [edi + 0x18]
and edx, ecx
lea ebp, [edx*8]
mov edx, dword [edi + 0xc]
mov ecx, dword [edx + ebp]
cmp eax, ecx
je 0x1012067c
mov eax, dword [edx + ebp + 4]
mov eax, dword [eax]
cmp eax, ecx
je 0x1012067c
mov edx, dword [esi + 8]
nop dword [eax]
mov eax, dword [eax + 4]
cmp edx, dword [eax + 8]
je 0x101206be
cmp eax, ecx
jne 0x10120670
mov ecx, dword [esi]
cmp eax, ecx
je 0x101206a7
mov edx, dword [esi + 4]
mov dword [edx], ecx
mov edx, dword [ecx + 4]
mov dword [edx], eax
mov edx, dword [eax + 4]
mov dword [edx], esi
mov ebx, dword [eax + 4]
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
mov dword [ecx + 4], edx
mov dword [esi + 4], ebx
mov ebx, dword [esp + 0x10]
mov ecx, dword [edi + 0xc]
mov edx, dword [ecx + ebp]
cmp edx, dword [edi + 4]
jne 0x101206dd
mov dword [ecx + ebp], esi
mov eax, dword [edi + 0xc]
mov dword [eax + ebp + 4], esi
jmp 0x10120702
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0xc
push esi
mov dword [ecx], eax
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
dec dword [edi + 8]
call fcn.1037dfe9
add esp, 8
jmp 0x10120709
cmp edx, eax
jne 0x101206e6
mov dword [ecx + ebp], esi
jmp 0x10120702
mov eax, dword [ecx + ebp + 4]
mov eax, dword [eax]
mov dword [ecx + ebp + 4], eax
cmp eax, esi
je 0x10120702
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx + ebp + 4]
mov eax, dword [eax + 4]
mov dword [ecx + ebp + 4], eax
mov ecx, edi
call fcn.1011fdb0
cmp esi, ebx
jne 0x10120610
pop esi
pop ebp
pop ebx
pop edi
pop ecx
ret

Function at 0x10120e40
Capabilities:
Terminate process

Disassembly:
mov ecx, dword [esp + 4]
mov eax, dword [ecx + 8]
sub eax, 6
cmp eax, 0xa
ja case.0x10120e57.7
nop
movzx eax, byte [eax + 0x10120e94]
jmp dword [eax*4 + 0x10120e88]
mov ecx, dword [ecx + 0x10]
mov eax, dword [ecx + 8]
sub eax, 6
cmp eax, 0xa
jbe 0x10120e50
push str.shouldnt_be_writing_to_this_kind_of_expression_n
call fcn.100d7e60
add esp, 4
jmp fcn.101ca200
push 0
call fcn.101cdf50
ret
Function at 0x101240f0
Capabilities:
Hash data using fnv

Disassembly:
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x18]
mov esi, ecx
mov ebx, dword [esp + 0x14]
movzx eax, byte [edi]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [edi + 1]
xor edx, eax
movzx eax, byte [edi + 2]
imul ecx, edx, 0x1000193
mov edx, dword [esi + 0xc]
xor ecx, eax
movzx eax, byte [edi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [esi + 0x18]
mov esi, dword [esi + 4]
and ecx, eax
lea eax, [ecx*8]
mov ebp, dword [eax + edx]
mov ecx, ebp
add edx, eax
nop dword [eax]
cmp ebp, esi
jne 0x10124158
mov eax, esi
jmp 0x1012415d
mov eax, dword [edx + 4]
mov eax, dword [eax]
cmp ecx, eax
je 0x10124177
mov eax, dword [ecx + 8]
cmp eax, dword [edi]
je 0x1012416c
mov ecx, dword [ecx]
jmp 0x10124150
pop edi
pop esi
pop ebp
mov dword [ebx], ecx
mov eax, ebx
pop ebx
ret 8
pop edi
mov dword [ebx], esi
mov eax, ebx
pop esi
pop ebp
pop ebx
ret 8
Function at 0x1013ca90
Capabilities:
Hash data using murmur3

Disassembly:
push ecx
mov eax, dword [esp + 8]
push ebx
push ebp
mov dword [esp + 8], ecx
mov ebx, 1
mov ebp, dword [eax]
mov eax, ebp
shr eax, 0x10
xor eax, ebp
imul edx, eax, 0x85ebca6b
push esi
push edi
mov eax, edx
shr eax, 0xd
xor eax, edx
imul edx, eax, 0xc2b2ae35
mov ecx, edx
shr ecx, 0x10
mov eax, ecx
xor eax, edx
cmp ecx, edx
mov edx, dword [esp + 0x10]
cmovne ebx, eax
xor esi, esi
mov ecx, dword [edx + 4]
lea eax, [ecx - 1]
mov dword [esp + 0x18], eax
and eax, ebx
test ecx, ecx
jle 0x1013cb19
lea ecx, [eax + eax*2]
mov edi, eax
shl ecx, 4
add ecx, dword [edx + 8]
mov edx, dword [ecx + 0x28]
test edx, edx
je 0x1013cb19
cmp ebx, edx
jne 0x1013cafc
cmp ebp, dword [ecx]
je 0x1013cb23
mov edx, dword [esp + 0x10]
lea ecx, [eax - 1]
mov eax, dword [esp + 0x18]
test ecx, ecx
mov ecx, 0xffffffff
cmovns eax, ecx
inc esi
add eax, edi
cmp esi, dword [edx + 4]
jl 0x1013cae2
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret 4
pop edi
pop esi
pop ebp
lea eax, [ecx + 8]
pop ebx
pop ecx
ret 4
Function at 0x1013cb80
Capabilities:
Hash data using murmur3

Disassembly:
sub esp, 0x1c
mov al, byte [esp + 0x18]
and al, 0xfd
mov dword [esp + 0x10], 0
push edi
or al, 1
mov dword [esp + 0x18], 0
mov edi, ecx
mov byte [esp + 0x1c], al
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0
push eax
lea ecx, [edi + 0x28]
call fcn.1012ff90
mov eax, dword [esp + 0x10]
mov ecx, eax
mov dword [esp + 4], ecx
test ecx, ecx
je 0x1013ccdd
mov eax, dword [esp + 0x14]
lea eax, [ecx + eax*8]
mov dword [esp + 0xc], eax
cmp ecx, eax
je 0x1013ccd9
push ebx
push ebp
push esi
nop
mov ecx, dword [ecx]
mov ebp, 1
mov eax, ecx
mov ebx, dword [edi + 0xc]
shr eax, 0x10
xor eax, ecx
imul ecx, eax, 0x85ebca6b
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul edx, eax, 0xc2b2ae35
mov ecx, edx
shr ecx, 0x10
mov eax, ecx
xor eax, edx
cmp ecx, edx
lea ecx, [ebx - 1]
cmovne ebp, eax
xor esi, esi
and ecx, ebp
mov dword [esp + 0x14], ebp
test ebx, ebx
jle 0x1013cc55
lea eax, [ecx + ecx*2]
mov ebp, ecx
shl eax, 4
add eax, dword [edi + 0x10]
mov edx, dword [eax + 0x28]
test edx, edx
je 0x1013cc55
cmp dword [esp + 0x14], edx
jne 0x1013cc46
mov ebx, dword [esp + 0x10]
mov edx, dword [ebx]
mov ebx, dword [edi + 0xc]
cmp edx, dword [eax]
je 0x1013cc57
add ecx, 0xffffffff
jns 0x1013cc50
lea ecx, [ebp - 1]
add ecx, ebx
inc esi
cmp esi, ebx
jl 0x1013cc21
xor eax, eax
lea ecx, [eax + 8]
neg eax
sbb eax, eax
and eax, ecx
je 0x1013ccc1
mov esi, dword [eax + 8]
test esi, esi
je 0x1013cc71
mov eax, dword [eax + 0xc]
lea ebx, [esi + eax*4]
jmp 0x1013cc73
xor ebx, ebx
cmp esi, ebx
je 0x1013ccb5
mov ecx, dword [esi]
call sym.skottie.dll_public:_enum_SkAlphaType___thiscall_SkPixmap::alphaType_void_
sub dword [edi + 0x20], eax
mov edx, dword [esi]
mov ecx, dword [edx + 8]
mov eax, dword [edx + 0xc]
test ecx, ecx
je 0x1013cc92
mov dword [ecx + 0xc], eax
jmp 0x1013cc94
mov dword [edi], eax
test eax, eax
je 0x1013cc9d
mov dword [eax + 8], ecx
jmp 0x1013cca0
mov dword [edi + 4], ecx
add esi, 4
mov dword [edx + 8], 0
mov dword [edx + 0xc], 0
cmp esi, ebx
jne 0x1013cc77
push dword [esp + 0x10]
lea ecx, [edi + 8]
call fcn.1013cd00
mov ecx, dword [esp + 0x10]
add ecx, 8
mov dword [esp + 0x10], ecx
cmp ecx, dword [esp + 0x18]
jne 0x1013cbe0
pop esi
pop ebp
pop ebx
mov eax, dword [esp + 0x10]
test byte [esp + 0x1c], 1
pop edi
je 0x1013ccee
push eax
call sym.skottie.dll_void___cdecl_sk_free_void__
add esp, 4
add esp, 0x1c
ret
Function at 0x1013cd00
Capabilities:
Hash data using murmur3

Disassembly:
sub esp, 0x38
mov eax, dword [esp + 0x3c]
push ebx
push ebp
push esi
mov ebx, dword [eax]
mov ebp, 1
mov eax, ebx
mov dword [esp + 0x10], ebx
shr eax, 0x10
xor eax, ebx
imul edx, eax, 0x85ebca6b
push edi
mov edi, ecx
mov dword [esp + 0x10], edi
mov eax, edx
shr eax, 0xd
xor eax, edx
imul edx, eax, 0xc2b2ae35
mov ecx, edx
shr ecx, 0x10
mov eax, ecx
xor eax, edx
cmp ecx, edx
mov edx, dword [edi + 4]
cmovne ebp, eax
xor ecx, ecx
mov dword [esp + 0x4c], ebp
lea esi, [edx - 1]
and esi, ebp
test edx, edx
jle 0x1013ce7f
mov ebp, dword [edi + 8]
nop dword [eax]
mov ebx, dword [esp + 0x4c]
lea eax, [esi + esi*2]
add eax, eax
mov edi, esi
cmp ebx, dword [ebp + eax*8 + 0x28]
mov ebx, dword [esp + 0x14]
jne 0x1013cd7b
cmp ebx, dword [ebp + eax*8]
je 0x1013cd94
add esi, 0xffffffff
jns 0x1013cd85
lea esi, [edx - 1]
add esi, edi
inc ecx
cmp ecx, edx
jl 0x1013cd60
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 4
mov eax, dword [esp + 0x10]
dec dword [eax]
nop word [eax + eax]
mov ebp, dword [eax + 8]
lea ebx, [esi + esi*2]
mov edi, dword [eax + 4]
mov ecx, esi
shl ebx, 4
add ebx, ebp
mov eax, esi
add esi, 0xffffffff
jns 0x1013cdbc
lea esi, [edi - 1]
add esi, eax
lea eax, [esi + esi*2]
add eax, eax
mov edx, dword [ebp + eax*8 + 0x28]
test edx, edx
je 0x1013ce04
lea eax, [edi - 1]
and eax, edx
cmp esi, eax
jg 0x1013cdfa
cmp eax, ecx
jl 0x1013cdb0
cmp ecx, esi
jge 0x1013cdde
cmp esi, eax
jle 0x1013cdb0
lea edi, [esi + esi*2]
mov ecx, ebx
shl edi, 4
add edi, ebp
push edi
call fcn.1013c5b0
mov eax, dword [edi + 0x28]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x10]
jmp 0x1013cda0
cmp eax, ecx
jge 0x1013cdd6
cmp ecx, esi
jl 0x1013cdb0
jmp 0x1013cdde
mov al, byte [esp + 0x34]
lea ecx, [esp + 0x38]
and al, 0xfd
mov dword [esp + 0x28], ecx
and al, 0xfe
mov dword [esp + 0x20], 0
mov byte [esp + 0x34], al
xorps xmm0, xmm0
lea eax, [esp + 0x18]
movq qword [esp + 0x18], xmm0
push eax
mov ecx, ebx
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 1
mov dword [esp + 0x44], 0
call fcn.1013c5b0
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0x28]
mov dword [ebx + 0x28], eax
call fcn.100919c0
mov edi, dword [esp + 0x10]
mov ecx, dword [edi]
mov eax, dword [edi + 4]
shl ecx, 2
cmp ecx, eax
jg 0x1013ce7f
cmp eax, 4
jle 0x1013ce7f
cdq
mov ecx, edi
sub eax, edx
sar eax, 1
push eax
call fcn.1013ce90
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 4