joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10110500
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101335c5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
movzx eax, byte [edi]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edi + 1]
xor ecx, eax
movzx eax, byte [edi + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
lea eax, [ebp - 0x14]
imul ebx, ecx, 0x1000193
push ebx
push edi
push eax
call fcn.10110850
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x10110581
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [0x102898f0], 0xccccccc
jne 0x10110598
push str.unordered_map_set_too_long
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
mov dword [ebp - 0x1c], 0x102898ec
mov dword [ebp - 4], 0
push 0x14
mov dword [ebp - 0x18], 0
call fcn.1012ae34
mov ecx, dword [edi]
mov esi, eax
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [esi + 8], ecx
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [ebp - 4], 1
mov ecx, dword [0x102898f0]
mov edi, dword [0x10289904]
lea eax, [ecx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101bf240]
mov eax, edi
shr eax, 0x1f
cvtpd2ps xmm3, xmm0
movd xmm0, edi
cvtdq2pd xmm0, xmm0
movaps xmm2, xmm3
addsd xmm0, qword [eax*8 + 0x101bf240]
cvtpd2ps xmm1, xmm0
movss xmm0, dword [0x102898e8]
divss xmm2, xmm1
comiss xmm2, xmm0
jbe 0x10110679
divss xmm3, xmm0
movaps xmm0, xmm3
call fcn.10011700
call fcn.1012c2f0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp edi, ecx
jae 0x1011065b
cmp edi, 0x200
jae 0x10110659
shl edi, 3
cmp edi, ecx
jae 0x1011065b
mov edi, ecx
push edi
call fcn.101106e0
push ebx
lea eax, [esi + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10110850
mov ecx, dword [0x102898f0]
mov edx, dword [eax]
jmp 0x1011067c
mov edx, dword [ebp - 0x14]
mov edi, dword [edx + 4]
inc ecx
mov dword [0x102898f0], ecx
mov dword [esi], edx
mov dword [esi + 4], edi
mov dword [edi], esi
mov dword [edx + 4], esi
mov eax, dword [0x10289900]
mov ecx, dword [0x102898f4]
and eax, ebx
mov ebx, dword [ecx + eax*8]
cmp ebx, dword [0x102898ec]
jne 0x101106ad
mov dword [ecx + eax*8], esi
jmp 0x101106bc
cmp ebx, edx
jne 0x101106b6
mov dword [ecx + eax*8], esi
jmp 0x101106c0
cmp dword [ecx + eax*8 + 4], edi
jne 0x101106c0
mov dword [ecx + eax*8 + 4], esi
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword [eax], esi
pop esi
mov byte [eax + 4], 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x101106e0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1fffffff
sub esp, 8
bsr ecx, eax
push ebx
push esi
push edi
mov edi, 1
mov eax, edi
shl eax, cl
mov ecx, dword [ebp + 8]
cmp ecx, eax
jbe 0x1011070c
push str.invalid_hash_bucket_count
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
lea eax, [ecx - 1]
mov esi, dword [0x102898ec]
or eax, 1
mov dword [ebp + 8], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
mov ecx, 0x102898f4
lea eax, [edi + edi]
push eax
call fcn.10011000
mov eax, dword [0x102898ec]
lea ebx, [edi - 1]
mov dword [0x10289900], ebx
mov dword [0x10289904], edi
mov eax, dword [eax]
mov ecx, eax
cmp eax, esi
je 0x10110846
movzx edx, byte [eax + 8]
xor edx, 0x811c9dc5
mov ecx, dword [ecx]
imul edi, edx, 0x1000193
movzx edx, byte [eax + 9]
xor edi, edx
movzx edx, byte [eax + 0xa]
imul edi, edi, 0x1000193
xor edi, edx
movzx edx, byte [eax + 0xb]
imul edi, edi, 0x1000193
xor edi, edx
mov edx, dword [0x102898f4]
imul edi, edi, 0x1000193
and edi, ebx
mov ebx, dword [edx + edi*8]
lea edx, [edx + edi*8]
mov dword [ebp - 4], edx
cmp ebx, esi
jne 0x101107a4
mov dword [edx], eax
mov dword [edx + 4], eax
jmp 0x10110811
mov edx, dword [edx + 4]
mov edi, dword [eax + 8]
cmp edi, dword [edx + 8]
jne 0x101107de
mov edx, dword [edx]
mov dword [ebp - 8], edx
cmp edx, eax
je 0x101107d6
mov ebx, dword [eax + 4]
mov esi, dword [ebp - 8]
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
mov edx, dword [ebp - 4]
mov dword [edx + 4], eax
jmp 0x10110811
cmp ebx, edx
je 0x101107ee
mov edx, dword [edx + 4]
cmp edi, dword [edx + 8]
je 0x10110822
cmp ebx, edx
jne 0x101107e2
mov ebx, dword [eax + 4]
mov dword [ebp - 8], ebx
mov dword [ebx], ecx
mov ebx, dword [ecx + 4]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov dword [edx + 4], ebx
mov edx, dword [ebp - 8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 4]
mov dword [eax + 4], edi
mov dword [edx], eax
mov eax, ecx
cmp ecx, esi
je 0x10110846
mov ebx, dword [0x10289900]
jmp 0x10110752
mov ebx, dword [eax + 4]
mov edx, dword [edx]
mov dword [ebp - 8], edx
mov esi, edx
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
jmp 0x10110811
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10112530
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10133985
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
movzx eax, byte [edi]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edi + 1]
xor ecx, eax
movzx eax, byte [edi + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
lea eax, [ebp - 0x14]
imul ebx, ecx, 0x1000193
push ebx
push edi
push eax
call fcn.101128a0
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x101125b1
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [0x101cfbb0], 0x7ffffff
jne 0x101125c8
push str.unordered_map_set_too_long
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
mov dword [ebp - 0x1c], 0x101cfbac
mov dword [ebp - 4], 0
push 0x20
mov dword [ebp - 0x18], 0
call fcn.1012ae34
mov ecx, dword [edi]
mov esi, eax
mov dword [ebp - 0x18], esi
add esp, 4
mov dword [esi + 8], ecx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0xc], 0
mov dword [ebp - 4], 1
mov ecx, dword [0x101cfbb0]
mov edi, dword [0x101cfbc4]
lea eax, [ecx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101bf240]
mov eax, edi
shr eax, 0x1f
cvtpd2ps xmm3, xmm0
movd xmm0, edi
cvtdq2pd xmm0, xmm0
movaps xmm2, xmm3
addsd xmm0, qword [eax*8 + 0x101bf240]
cvtpd2ps xmm1, xmm0
movss xmm0, dword [0x101cfba8]
divss xmm2, xmm1
comiss xmm2, xmm0
jbe 0x101126cc
divss xmm3, xmm0
movaps xmm0, xmm3
call fcn.10011700
call fcn.1012c2f0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp edi, ecx
jae 0x101126ae
cmp edi, 0x200
jae 0x101126ac
shl edi, 3
cmp edi, ecx
jae 0x101126ae
mov edi, ecx
push edi
call fcn.10112730
push ebx
lea eax, [esi + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.101128a0
mov ecx, dword [0x101cfbb0]
mov edx, dword [eax]
jmp 0x101126cf
mov edx, dword [ebp - 0x14]
mov edi, dword [edx + 4]
inc ecx
mov dword [0x101cfbb0], ecx
mov dword [esi], edx
mov dword [esi + 4], edi
mov dword [edi], esi
mov dword [edx + 4], esi
mov eax, dword [0x101cfbc0]
mov ecx, dword [0x101cfbb4]
and eax, ebx
mov ebx, dword [ecx + eax*8]
cmp ebx, dword [0x101cfbac]
jne 0x10112700
mov dword [ecx + eax*8], esi
jmp 0x1011270f
cmp ebx, edx
jne 0x10112709
mov dword [ecx + eax*8], esi
jmp 0x10112713
cmp dword [ecx + eax*8 + 4], edi
jne 0x10112713
mov dword [ecx + eax*8 + 4], esi
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword [eax], esi
pop esi
mov byte [eax + 4], 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x10112730
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1fffffff
sub esp, 8
bsr ecx, eax
push ebx
push esi
push edi
mov edi, 1
mov eax, edi
shl eax, cl
mov ecx, dword [ebp + 8]
cmp ecx, eax
jbe 0x1011275c
push str.invalid_hash_bucket_count
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
lea eax, [ecx - 1]
mov esi, dword [0x101cfbac]
or eax, 1
mov dword [ebp + 8], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
mov ecx, 0x101cfbb4
lea eax, [edi + edi]
push eax
call fcn.10011000
mov eax, dword [0x101cfbac]
lea ebx, [edi - 1]
mov dword [0x101cfbc0], ebx
mov dword [0x101cfbc4], edi
mov eax, dword [eax]
mov ecx, eax
cmp eax, esi
je 0x10112896
movzx edx, byte [eax + 8]
xor edx, 0x811c9dc5
mov ecx, dword [ecx]
imul edi, edx, 0x1000193
movzx edx, byte [eax + 9]
xor edi, edx
movzx edx, byte [eax + 0xa]
imul edi, edi, 0x1000193
xor edi, edx
movzx edx, byte [eax + 0xb]
imul edi, edi, 0x1000193
xor edi, edx
mov edx, dword [0x101cfbb4]
imul edi, edi, 0x1000193
and edi, ebx
mov ebx, dword [edx + edi*8]
lea edx, [edx + edi*8]
mov dword [ebp - 4], edx
cmp ebx, esi
jne 0x101127f4
mov dword [edx], eax
mov dword [edx + 4], eax
jmp 0x10112861
mov edx, dword [edx + 4]
mov edi, dword [eax + 8]
cmp edi, dword [edx + 8]
jne 0x1011282e
mov edx, dword [edx]
mov dword [ebp - 8], edx
cmp edx, eax
je 0x10112826
mov ebx, dword [eax + 4]
mov esi, dword [ebp - 8]
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
mov edx, dword [ebp - 4]
mov dword [edx + 4], eax
jmp 0x10112861
cmp ebx, edx
je 0x1011283e
mov edx, dword [edx + 4]
cmp edi, dword [edx + 8]
je 0x10112872
cmp ebx, edx
jne 0x10112832
mov ebx, dword [eax + 4]
mov dword [ebp - 8], ebx
mov dword [ebx], ecx
mov ebx, dword [ecx + 4]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], eax
mov dword [edx + 4], ebx
mov edx, dword [ebp - 8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 4]
mov dword [eax + 4], edi
mov dword [edx], eax
mov eax, ecx
cmp ecx, esi
je 0x10112896
mov ebx, dword [0x101cfbc0]
jmp 0x101127a2
mov ebx, dword [eax + 4]
mov edx, dword [edx]
mov dword [ebp - 8], edx
mov esi, edx
mov dword [ebx], ecx
mov edi, dword [ecx + 4]
mov dword [edi], edx
mov edx, dword [edx + 4]
mov dword [edx], eax
mov dword [esi + 4], edi
mov esi, dword [ebp + 8]
mov dword [ecx + 4], ebx
mov dword [eax + 4], edx
jmp 0x10112861
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10119c00
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, ecx
mov edx, ebx
push esi
push edi
mov edi, 0x811c9dc5
xor esi, esi
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x10119c15
sub edx, ecx
je 0x10119c3f
movsx eax, byte [ebx + esi]
mov ecx, ebx
xor eax, edi
imul edi, eax, 0x1000193
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10119c32
sub ecx, edx
cmp esi, ecx
jb 0x10119c20
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x1011a470
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10134b35
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
mov ebx, dword [ebp + 0xc]
mov edx, ebx
push esi
push edi
cmp dword [ebx + 0x14], 0xf
mov edi, dword [ebx + 0x10]
jbe 0x1011a49e
mov edx, dword [ebx]
xor ecx, ecx
mov esi, 0x811c9dc5
test edi, edi
je 0x1011a4c1
nop dword [eax]
movzx eax, byte [edx + ecx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, edi
jb 0x1011a4b0
push esi
push ebx
lea eax, [ebp - 0x14]
push eax
call fcn.1011a840
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x1011a4ef
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [0x1026afd0], 0x71c71c7
jne 0x1011a506
push str.unordered_map_set_too_long
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
mov dword [ebp - 0x1c], 0x1026afcc
mov dword [ebp - 4], 0
push 0x24
mov dword [ebp - 0x18], 0
call fcn.1012ae34
mov edi, eax
add esp, 4
mov dword [ebp - 0x18], edi
lea ecx, [edi + 8]
push ebx
call fcn.1002ba30
mov ecx, dword [ebx + 0x18]
mov dword [edi + 0x20], ecx
mov dword [ebp - 4], 1
mov ecx, dword [0x1026afd0]
mov ebx, dword [0x1026afe4]
lea eax, [ecx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
movd xmm1, ebx
addsd xmm0, qword [eax*8 + 0x101bf240]
cvtdq2pd xmm1, xmm1
mov eax, ebx
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x101bf240]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
movss xmm1, dword [0x1026afc8]
comiss xmm2, xmm1
jbe 0x1011a5e0
divss xmm0, xmm1
call fcn.10011700
call fcn.1012c2f0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp ebx, ecx
jae 0x1011a5c2
cmp ebx, 0x200
jae 0x1011a5c0
shl ebx, 3
cmp ebx, ecx
jae 0x1011a5c2
mov ebx, ecx
push ebx
call fcn.1011a650
push esi
lea eax, [edi + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1011a840
mov ecx, dword [0x1026afd0]
mov edx, dword [eax]
jmp 0x1011a5e3
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 4]
inc ecx
mov dword [0x1026afd0], ecx
mov dword [edi], edx
mov dword [edi + 4], ebx
mov dword [ebx], edi
mov dword [edx + 4], edi
mov eax, dword [0x1026afe0]
mov ecx, dword [0x1026afd4]
and eax, esi
mov esi, dword [ecx + eax*8]
cmp esi, dword [0x1026afcc]
jne 0x1011a614
mov dword [ecx + eax*8], edi
jmp 0x1011a623
cmp esi, edx
jne 0x1011a61d
mov dword [ecx + eax*8], edi
jmp 0x1011a627
cmp dword [ecx + eax*8 + 4], ebx
jne 0x1011a627
mov dword [ecx + eax*8 + 4], edi
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword [eax], edi
pop edi
pop esi
mov byte [eax + 4], 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1011d0c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
mov edx, dword [ebp + 0xc]
push 0xffffffffffffffff
push 0x10134b35
push eax
mov dword fs:[0], esp
sub esp, 0x10
cmp dword [edx + 0x14], 0xf
push ebx
push esi
push edi
mov ebx, ecx
mov edi, edx
jbe 0x1011d0ed
mov edi, dword [edx]
xor ecx, ecx
mov esi, 0x811c9dc5
cmp dword [edx + 0x10], ecx
jbe 0x1011d112
nop dword [eax]
movzx eax, byte [edi + ecx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, dword [edx + 0x10]
jb 0x1011d100
push esi
push edx
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
call fcn.1001a570
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x1011d142
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [ebx + 8], 0x71c71c7
jne 0x1011d156
push str.unordered_map_set_too_long
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
lea eax, [ebx + 4]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
push 0x24
mov dword [ebp - 0x18], 0
call fcn.1012ae34
add esp, 4
mov edi, eax
mov dword [ebp - 0x18], edi
push dword [ebp + 0xc]
lea ecx, [edi + 8]
call fcn.1002ba30
mov dword [edi + 0x20], 0
mov dword [ebp - 4], 1
mov eax, dword [ebx + 8]
inc eax
movss xmm3, dword [ebx]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101bf240]
mov eax, dword [ebx + 0x1c]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
cvtpd2ps xmm0, xmm0
addsd xmm1, qword [eax*8 + 0x101bf240]
movaps xmm2, xmm0
cvtpd2ps xmm1, xmm1
divss xmm2, xmm1
comiss xmm2, xmm3
jbe 0x1011d224
divss xmm0, xmm3
call fcn.10011700
call fcn.1012c2f0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
mov eax, dword [ebx + 0x1c]
cmp eax, ecx
jae 0x1011d208
cmp eax, 0x200
jae 0x1011d206
shl eax, 3
cmp eax, ecx
jae 0x1011d208
mov eax, ecx
push eax
mov ecx, ebx
call fcn.10018f90
push esi
lea eax, [edi + 8]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1001a570
mov edx, dword [eax]
jmp 0x1011d227
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 4]
inc dword [ebx + 8]
mov dword [edi + 4], eax
mov dword [edi], edx
mov dword [eax], edi
mov dword [edx + 4], edi
mov ecx, dword [ebx + 0xc]
mov dword [ebp + 0xc], eax
mov eax, dword [ebx + 0x18]
and eax, esi
mov esi, dword [ecx + eax*8]
cmp esi, dword [ebx + 4]
jne 0x1011d24f
mov dword [ecx + eax*8], edi
jmp 0x1011d261
cmp esi, edx
jne 0x1011d258
mov dword [ecx + eax*8], edi
jmp 0x1011d265
mov edx, dword [ebp + 0xc]
cmp dword [ecx + eax*8 + 4], edx
jne 0x1011d265
mov dword [ecx + eax*8 + 4], edi
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword [eax], edi
pop edi
pop esi
mov byte [eax + 4], 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1011d4e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1013504b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
push edi
mov edi, ecx
lea ecx, [edi + 4]
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x14], ecx
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
lea ebx, [edi + 0x10]
mov dword [ebp - 4], 0
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
mov dword [edi], eax
mov eax, dword [ebp + 0xc]
mov dword [edi + 0x1c], 0
mov byte [edi + 0x20], 0
cmp ebx, eax
je 0x1011d5fb
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov edx, dword [ebx + 8]
sub edi, esi
mov dword [ebp + 8], esi
cmp edi, edx
jbe 0x1011d5b1
cmp edi, 0x7fffffff
ja 0x1011d6b0
mov ecx, edx
mov eax, 0x7fffffff
shr ecx, 1
sub eax, ecx
cmp edx, eax
jbe 0x1011d58d
mov eax, 0x7fffffff
jmp 0x1011d595
lea eax, [ecx + edx]
cmp eax, edi
cmovb eax, edi
push eax
mov ecx, ebx
call fcn.1011dac0
mov esi, dword [ebx]
push edi
push dword [ebp + 8]
push esi
call sub.VCRUNTIME140.dll_memmove
lea eax, [esi + edi]
mov dword [ebx + 4], eax
jmp 0x1011d5f2
mov eax, dword [ebx + 4]
mov dword [ebp + 8], eax
cmp edi, eax
jbe 0x1011d5e6
push eax
push esi
push 0
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp + 8]
add esi, eax
sub edi, eax
mov dword [ebp + 8], esi
mov esi, dword [ebx + 4]
push edi
push dword [ebp + 8]
push esi
call sub.VCRUNTIME140.dll_memmove
lea eax, [edi + esi]
add esp, 0x18
mov dword [ebx + 4], eax
jmp 0x1011d5f5
push edi
push esi
push 0
call sub.VCRUNTIME140.dll_memmove
mov dword [ebx + 4], edi
add esp, 0xc
mov edi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
mov esi, dword [ebx + 4]
sub esi, dword [ebx]
mov dword [edi + 0x1c], esi
mov eax, dword [ecx + 4]
mov edx, eax
mov ebx, dword [ecx]
sub edx, ebx
mov dword [ebp + 8], eax
cmp esi, edx
jae 0x1011d61b
lea eax, [esi + ebx]
mov dword [ecx + 4], eax
jmp 0x1011d646
jbe 0x1011d646
mov eax, dword [ecx + 8]
sub eax, ebx
cmp esi, eax
jbe 0x1011d62f
push ecx
push esi
call fcn.1011db40
jmp 0x1011d646
mov ebx, dword [ebp + 8]
sub esi, edx
push esi
push 0
push ebx
call sub.VCRUNTIME140.dll_memset
lea eax, [esi + ebx]
add esp, 0xc
mov dword [edi + 8], eax
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp + 0xc]
push eax
push 0x40
push dword [edi + 0x1c]
push dword [edi]
call esi
push dword [edi + 0x1c]
push dword [edi]
push dword [edi + 4]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 0xc]
push dword [edi + 0x1c]
push dword [edi]
call esi
call fcn.1011d490
mov dword [ebp + 8], edi
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x1011d68f
mov dword [ecx], edi
add dword [eax + 4], 4
jmp 0x1011d69b
lea edx, [ebp + 8]
push edx
push ecx
mov ecx, eax
call fcn.10030900
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
call fcn.1001a670
int3
Function at 0x1011e9d0
Capabilities:
Hash data with md5

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x5c
push esi
push 0x40
lea eax, [esp + 0x24]
mov esi, ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, 0x20
mov dword [esp + 0x14], 0x67452301
mov dword [esp + 0x24], eax
lea ecx, [esp + 0x2c]
shr eax, 3
mov edx, 0x3f
and eax, 0x3f
mov dword [esp + 0x18], 0xefcdab89
add ecx, eax
mov dword [esp + 0x1c], 0x98badcfe
mov dword [esp + 0x20], 0x10325476
sub edx, eax
mov dword [esp + 0x28], 0
add esp, 0xc
mov dword [esp + 0x20], esi
mov byte [ecx], 0x80
inc ecx
cmp edx, 8
jae 0x1011ea67
push edx
push 0
push ecx
call sub.VCRUNTIME140.dll_memset
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x14]
call fcn.1011e350
push 0x38
lea eax, [esp + 0x30]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
jmp 0x1011ea76
lea eax, [edx - 8]
push eax
push 0
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x20]
mov dword [esp + 0x58], eax
lea ecx, [esp + 8]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x5c], eax
call fcn.1011e350
mov eax, dword [esp + 0xe]
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10124da0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, dword [0x101d5dc4]
push esi
push str.cl_interp
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30d0], eax
push str.cl_sidespeed
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30d4], eax
push str.cl_interp_ratio
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30d8], eax
push str.cl_updaterate
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30dc], eax
push str.tf_weapon_criticals_bucket_cap
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30e0], eax
push str.tf_weapon_criticals_bucket_bottom
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30e4], eax
push str.tf_weapon_criticals_bucket_default
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30e8], eax
push str.sv_gravity
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30ec], eax
push str.cl_flipviewmodels
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30f0], eax
push str.sv_maxunlag
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30f4], eax
push str.tf_enable_glows_after_respawn
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30f8], eax
push str.glow_outline_effect_enable
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d30fc], eax
push str.r_drawspecificstaticprop
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d3100], eax
push str.sv_namechange_cooldown_seconds
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d3104], eax
push str.mp_idlemaxtime
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d3108], eax
push str.sv_maxusrcmdprocessticks
mov eax, dword [ecx]
call dword [eax + 0x34]
mov dword [0x101d310c], eax
mov ecx, dword [0x101d5dc4]
push str.sv_maxusrcmdprocessticks_holdaim
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [0x101d5dc4]
mov dword [0x101d3110], eax
mov eax, dword [ecx]
call dword [eax + 0x44]
mov esi, eax
test esi, esi
je 0x10124f90
nop dword [eax + eax]
mov eax, dword [esi]
mov ecx, esi
and dword [esi + 0x14], 0xffbfbfed
call dword [eax + 0x18]
cmp eax, str.name
jne 0x10124f4c
mov eax, dword [esi]
mov ecx, esi
push 0
mov dword [esi + 0x44], 0
call dword [eax + 0x3c]
mov dword [esi + 0x44], 0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
mov ecx, eax
mov al, byte [ecx]
test al, al
jne 0x10124f62
mov eax, 0x811c9dc5
jmp 0x10124f76
movsx eax, al
inc ecx
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.10031140
mov dword [ebp - 4], eax
mov ecx, 0x101d3114
lea eax, [ebp - 4]
push eax
call fcn.10016e50
mov dword [eax], esi
mov esi, dword [esi + 4]
test esi, esi
jne 0x10124f20
pop esi
mov esp, ebp
pop ebp
ret