joyce8/EMBER2024-capa huggingface dataset:
Function at 0x101857e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1039e28d
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x1049b0c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0xc]
mov edx, ebx
cmp dword [ebx + 0x14], 0xf
mov edi, dword [ebx + 0x10]
jbe 0x10185818
mov edx, dword [ebx]
xor ecx, ecx
mov esi, 0x811c9dc5
test edi, edi
je 0x10185834
movzx eax, byte [edx + ecx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, edi
jb 0x10185823
push esi
push ebx
lea eax, [ebp - 0x14]
push eax
call fcn.1018a9f0
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x10185863
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [0x1054bca8], 0x17d05f4
je 0x101859db
mov dword [ebp - 0x1c], 0x1054bca4
mov dword [ebp - 4], 0
push 0xac
mov dword [ebp - 0x18], 0
call fcn.102fe3a6
mov edi, eax
add esp, 4
mov dword [ebp - 0x18], edi
lea eax, [edi + 8]
push ebx
mov ecx, eax
mov dword [ebp + 0xc], eax
call fcn.10050c50
lea ecx, [edi + 0x20]
mov byte [ebp - 4], 1
call fcn.10169540
mov dword [ebp - 4], 2
mov edx, dword [0x1054bca8]
mov ebx, dword [0x1054bcbc]
lea eax, [edx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1046f8a0]
mov eax, ebx
shr eax, 0x1f
cvtpd2ps xmm2, xmm0
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
movaps xmm1, xmm2
addsd xmm0, qword [eax*8 + 0x1046f8a0]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
movss xmm0, dword [0x1054bca0]
comiss xmm1, xmm0
seta al
test al, al
je 0x10185979
divss xmm2, xmm0
sub esp, 8
movss dword [ebp + 0xc], xmm2
fld dword [ebp + 0xc]
fstp qword [esp]
call fcn.1036b8f0
add esp, 8
fstp dword [ebp + 0xc]
movss xmm0, dword [ebp + 0xc]
call fcn.102ff0f0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp ebx, ecx
jae 0x1018595b
cmp ebx, 0x200
jae 0x10185959
shl ebx, 3
cmp ebx, ecx
jae 0x1018595b
mov ebx, ecx
push ebx
call fcn.10186d30
push esi
lea eax, [edi + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1018a9f0
mov edx, dword [0x1054bca8]
mov ecx, dword [eax]
jmp 0x1018597c
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ecx + 4]
inc edx
mov dword [0x1054bca8], edx
mov dword [edi], ecx
mov dword [edi + 4], ebx
mov dword [ebx], edi
mov dword [ecx + 4], edi
and esi, dword [0x1054bcb8]
mov eax, dword [0x1054bcac]
mov edx, dword [eax + esi*8]
cmp edx, dword [0x1054bca4]
jne 0x101859ab
mov dword [eax + esi*8], edi
jmp 0x101859ba
cmp edx, ecx
jne 0x101859b4
mov dword [eax + esi*8], edi
jmp 0x101859be
cmp dword [eax + esi*8 + 4], ebx
jne 0x101859be
mov dword [eax + esi*8 + 4], edi
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov byte [eax + 4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.102fca7f
int3
Function at 0x101859f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1039e245
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x1049b0c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0xc]
mov edx, ebx
cmp dword [ebx + 0x14], 0xf
mov edi, dword [ebx + 0x10]
jbe 0x10185a28
mov edx, dword [ebx]
xor ecx, ecx
mov esi, 0x811c9dc5
test edi, edi
je 0x10185a44
movzx eax, byte [edx + ecx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, edi
jb 0x10185a33
push esi
push ebx
lea eax, [ebp - 0x14]
push eax
call fcn.1018aa90
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x10185a73
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [0x1054bcc8], 0x71c71c7
je 0x10185bde
mov dword [ebp - 0x1c], 0x1054bcc4
mov dword [ebp - 4], 0
push 0x24
mov dword [ebp - 0x18], 0
call fcn.102fe3a6
mov edi, eax
add esp, 4
mov dword [ebp - 0x18], edi
lea ecx, [edi + 8]
push ebx
call fcn.10050c50
mov dword [edi + 0x20], 0
mov dword [ebp - 4], 1
mov edx, dword [0x1054bcc8]
mov ebx, dword [0x1054bcdc]
lea eax, [edx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1046f8a0]
mov eax, ebx
shr eax, 0x1f
cvtpd2ps xmm2, xmm0
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
movaps xmm1, xmm2
addsd xmm0, qword [eax*8 + 0x1046f8a0]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
movss xmm0, dword [0x1054bcc0]
comiss xmm1, xmm0
seta al
test al, al
je 0x10185b7c
divss xmm2, xmm0
sub esp, 8
movss dword [ebp + 0xc], xmm2
fld dword [ebp + 0xc]
fstp qword [esp]
call fcn.1036b8f0
add esp, 8
fstp dword [ebp + 0xc]
movss xmm0, dword [ebp + 0xc]
call fcn.102ff0f0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp ebx, ecx
jae 0x10185b5e
cmp ebx, 0x200
jae 0x10185b5c
shl ebx, 3
cmp ebx, ecx
jae 0x10185b5e
mov ebx, ecx
push ebx
call fcn.10186f70
push esi
lea eax, [edi + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1018aa90
mov edx, dword [0x1054bcc8]
mov ecx, dword [eax]
jmp 0x10185b7f
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ecx + 4]
inc edx
mov dword [0x1054bcc8], edx
mov dword [edi], ecx
mov dword [edi + 4], ebx
mov dword [ebx], edi
mov dword [ecx + 4], edi
and esi, dword [0x1054bcd8]
mov eax, dword [0x1054bccc]
mov edx, dword [eax + esi*8]
cmp edx, dword [0x1054bcc4]
jne 0x10185bae
mov dword [eax + esi*8], edi
jmp 0x10185bbd
cmp edx, ecx
jne 0x10185bb7
mov dword [eax + esi*8], edi
jmp 0x10185bc1
cmp dword [eax + esi*8 + 4], ebx
jne 0x10185bc1
mov dword [eax + esi*8 + 4], edi
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov byte [eax + 4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.102fca7f
int3
Function at 0x10185fd0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1039e245
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x1049b0c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov edx, dword [ebp + 0xc]
mov edi, edx
cmp dword [edx + 0x14], 0xf
jbe 0x10186007
mov edi, dword [edx]
xor ecx, ecx
mov esi, 0x811c9dc5
cmp dword [edx + 0x10], ecx
jbe 0x10186025
movzx eax, byte [edi + ecx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, dword [edx + 0x10]
jb 0x10186013
push esi
push edx
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
call fcn.1015b6d0
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x10186056
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp dword [ebx + 8], 0x71c71c7
je 0x101861af
lea eax, [ebx + 4]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
push 0x24
mov dword [ebp - 0x18], 0
call fcn.102fe3a6
add esp, 4
mov edi, eax
mov dword [ebp - 0x18], edi
push dword [ebp + 0xc]
lea ecx, [edi + 8]
call fcn.10050c50
mov dword [edi + 0x20], 0
mov dword [ebp - 4], 1
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 0x1c]
inc eax
movss xmm3, dword [ebx]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1046f8a0]
mov eax, ecx
shr eax, 0x1f
cvtpd2ps xmm2, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
movaps xmm1, xmm2
addsd xmm0, qword [eax*8 + 0x1046f8a0]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, xmm3
seta al
test al, al
je 0x10186151
divss xmm2, xmm3
sub esp, 8
movss dword [ebp + 0xc], xmm2
fld dword [ebp + 0xc]
fstp qword [esp]
call fcn.1036b8f0
add esp, 8
fstp dword [ebp + 0xc]
movss xmm0, dword [ebp + 0xc]
call fcn.102ff0f0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
mov eax, dword [ebx + 0x1c]
cmp eax, ecx
jae 0x10186135
cmp eax, 0x200
jae 0x10186133
shl eax, 3
cmp eax, ecx
jae 0x10186135
mov eax, ecx
push eax
mov ecx, ebx
call fcn.1015b3e0
push esi
lea eax, [edi + 8]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1015b6d0
mov edx, dword [eax]
jmp 0x10186154
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 4]
inc dword [ebx + 8]
mov dword [edi + 4], eax
mov dword [edi], edx
mov dword [eax], edi
mov dword [edx + 4], edi
mov ecx, dword [ebx + 0xc]
mov dword [ebp + 0xc], eax
mov eax, dword [ebx + 0x18]
and eax, esi
mov esi, dword [ecx + eax*8]
cmp esi, dword [ebx + 4]
jne 0x1018617c
mov dword [ecx + eax*8], edi
jmp 0x1018618e
cmp esi, edx
jne 0x10186185
mov dword [ecx + eax*8], edi
jmp 0x10186192
mov edx, dword [ebp + 0xc]
cmp dword [ecx + eax*8 + 4], edx
jne 0x10186192
mov dword [ecx + eax*8 + 4], edi
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov byte [eax + 4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.102fca7f
int3
Function at 0x10186a60
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword [ebp + 8]
xor ecx, ecx
push esi
push edi
mov edx, 0x811c9dc5
mov esi, dword [eax + 4]
mov edi, dword [eax]
test esi, esi
je 0x10186a91
nop dword [eax + eax]
movzx eax, byte [edi + ecx]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x10186a80
pop edi
mov eax, edx
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1018f9b0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1039f1f5
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x1049b0c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
cmp esi, edi
je 0x1018fb25
nop dword [eax + eax]
movzx eax, byte [esi + 8]
lea edx, [esi + 8]
xor eax, 0x811c9dc5
mov dword [ebp - 0x14], edx
imul ecx, eax, 0x1000193
movzx eax, byte [edx + 1]
xor ecx, eax
movzx eax, byte [edx + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, ebx
push eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
push edx
push eax
call fcn.100cce10
cmp dword [ebp - 0x18], 0
jne 0x1018fb18
cmp dword [ebx + 8], 0xfffffff
je 0x1018fb39
lea eax, [ebx + 4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0
push 0x10
mov dword [ebp - 0x20], 0
call fcn.102fe3a6
mov edx, dword [ebp - 0x14]
mov edi, eax
add esp, 4
mov dword [ebp - 0x20], edi
mov ecx, dword [edx]
mov edx, dword [edx + 4]
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
mov dword [ebp - 4], 1
mov eax, dword [ebx + 8]
inc eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1046f8a0]
mov eax, dword [ebx + 0x1c]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1046f8a0]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [ebx]
seta al
test al, al
je 0x1018faf4
mov ecx, ebx
call fcn.101869e0
mov esi, dword [ebp - 0x10]
lea eax, [edi + 8]
push esi
push eax
lea eax, [ebp - 0x2c]
mov ecx, ebx
push eax
call fcn.100cce10
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], eax
jmp 0x1018fafa
mov ecx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x10]
push edi
push ecx
push esi
mov ecx, ebx
mov dword [ebp - 0x20], 0
call fcn.1015b2e0
mov dword [ebp - 4], 0xffffffff
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov esi, dword [esi]
mov dword [ebp + 8], esi
cmp esi, edi
jne 0x1018f9f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push str.unordered_map_set_too_long
call fcn.102fca7f
int3
Function at 0x1018ff00
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1039f270
mov eax, dword fs:[0]
push eax
push ebx
push esi
mov eax, dword [0x1049b0c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, dword [eax + 4]
mov dword [ebp - 4], 1
push dword [eax]
push 0xffffd8f0
push esi
call fcn.103031e0
push 0xffffffffffffffff
push esi
call fcn.103039d0
push 0xffffffffffffffff
push esi
mov byte [ebp - 4], 0
call fcn.10303960
push 0xfffffffffffffffe
push esi
mov ebx, eax
call fcn.10303720
movzx ecx, bl
add esp, 0x24
xor ecx, 0x811c9dc5
imul edx, ecx, 0x1000193
mov ecx, ebx
shr ecx, 8
movzx eax, cl
xor edx, eax
mov eax, ebx
imul ecx, edx, 0x1000193
shr eax, 0x10
movzx eax, al
shr ebx, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
xor eax, ebx
imul eax, eax, 0x1000193
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x101d0c90
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x103a1e90
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x1049b0c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov ecx, esi
call fcn.101d0b50
push 2
push esi
mov edi, eax
call fcn.10303910
fstp qword [esp]
call fcn.1036ae49
mov ebx, eax
add esp, 8
mov ecx, ebx
shr eax, 0x10
shr ecx, 8
movzx edx, cl
movzx ecx, bl
xor ecx, 0x811c9dc5
movzx eax, al
imul ecx, ecx, 0x1000193
mov dword [ebp - 0x10], ebx
shr ebx, 0x18
xor edx, ecx
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
xor eax, ebx
imul esi, eax, 0x1000193
lea eax, [ebp - 0x10]
push esi
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.100cce10
mov edx, dword [eax + 4]
test edx, edx
je 0x101d0d80
mov ecx, dword [edi + 0x18]
and ecx, esi
mov esi, dword [edi + 0xc]
mov eax, dword [esi + ecx*8]
cmp dword [esi + ecx*8 + 4], edx
jne 0x101d0d55
cmp eax, edx
jne 0x101d0d4c
mov eax, dword [edi + 4]
mov dword [esi + ecx*8], eax
mov dword [esi + ecx*8 + 4], eax
jmp 0x101d0d5e
mov eax, dword [edx + 4]
mov dword [esi + ecx*8 + 4], eax
jmp 0x101d0d5e
cmp eax, edx
jne 0x101d0d5e
mov eax, dword [edx]
mov dword [esi + ecx*8], eax
mov ecx, dword [edx]
dec dword [edi + 8]
mov eax, dword [edx + 4]
mov dword [eax], ecx
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
push 0x10
push edx
call fcn.102fe83e
add esp, 8
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x101d0da0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x34
push ebx
push esi
mov esi, dword [ebp + 8]
mov ecx, esi
push edi
call fcn.101d0b50
push 2
push esi
mov edi, eax
call fcn.10303910
fstp qword [esp]
call fcn.1036ae49
mov ebx, eax
add esp, 8
movzx ecx, bl
xor ecx, 0x811c9dc5
shr eax, 0x10
imul edx, ecx, 0x1000193
mov ecx, ebx
shr ecx, 8
movzx ecx, cl
movzx eax, al
mov dword [esp + 0x34], ebx
xor edx, ecx
shr ebx, 0x18
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
xor eax, ebx
imul eax, eax, 0x1000193
push eax
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.100cce10
mov eax, dword [eax + 4]
test eax, eax
je 0x101d0e41
cmp eax, dword [edi + 4]
je 0x101d0e41
movzx eax, byte [eax + 0xc]
push eax
push esi
call fcn.10302e60
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call fcn.10303000
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x101d0f60
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x18
push esi
mov esi, dword [ebp + 8]
push edi
push 3
push esi
call fcn.103039d0
add esp, 8
test eax, eax
jne 0x101d0f8c
push esi
call fcn.101d0c90
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov ecx, esi
call fcn.101d0b50
mov edi, eax
mov dword [esp + 0xc], 0
lea eax, [esp + 0xc]
mov dword [esp + 0x14], edi
push eax
mov edx, 2
mov dword [esp + 0x14], 0
mov ecx, esi
call fcn.1016cf10
movzx ecx, al
add esp, 4
xor ecx, 0x811c9dc5
mov dword [esp + 0xc], eax
imul edx, ecx, 0x1000193
mov ecx, eax
shr ecx, 8
movzx eax, cl
xor edx, eax
mov eax, dword [esp + 0xc]
shr eax, 0x10
movzx eax, al
imul ecx, edx, 0x1000193
xor ecx, eax
mov eax, dword [esp + 0xc]
imul ecx, ecx, 0x1000193
shr eax, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
push eax
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.100cce10
mov edi, dword [eax + 4]
mov eax, dword [esp + 0x14]
test edi, edi
je 0x101d103e
cmp edi, dword [eax + 4]
je 0x101d1041
push 3
push esi
call fcn.10303810
add esp, 8
test eax, eax
setne al
mov byte [edi + 0xc], al
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov edi, dword [eax + 4]
mov eax, dword [esp + 0xc]
push 3
push esi
mov dword [esp + 0x20], eax
call fcn.10303810
mov ecx, dword [esp + 0x1c]
add esp, 8
test eax, eax
lea eax, [esp + 0x18]
setne byte [esp + 0x1c]
push eax
push edi
lea eax, [esp + 0x14]
push eax
call fcn.101d7df0
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x101d1080
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x34
push ebx
push esi
mov esi, dword [ebp + 8]
mov ecx, esi
push edi
call fcn.101d0b50
push 0xffffffffffffffff
push esi
mov edi, eax
call fcn.10303910
fstp qword [esp]
call fcn.1036ae49
mov ebx, eax
add esp, 8
movzx ecx, bl
xor ecx, 0x811c9dc5
shr eax, 0x10
imul edx, ecx, 0x1000193
mov ecx, ebx
shr ecx, 8
movzx ecx, cl
movzx eax, al
mov dword [esp + 0x34], ebx
xor edx, ecx
shr ebx, 0x18
imul ecx, edx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, edi
xor eax, ebx
imul eax, eax, 0x1000193
push eax
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.100cce10
mov eax, dword [eax + 4]
test eax, eax
je 0x101d1121
cmp eax, dword [edi + 4]
je 0x101d1121
movzx eax, byte [eax + 0xc]
push eax
push esi
call fcn.10302e60
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call fcn.10303000
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x101d7df0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x103a23b5
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x1049b0c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
movzx eax, byte [ebx]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [ebx + 1]
xor edx, eax
movzx eax, byte [ebx + 2]
imul ecx, edx, 0x1000193
xor ecx, eax
movzx eax, byte [ebx + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul edx, ecx, 0x1000193
mov dword [ebp - 0x14], edx
cmp esi, dword [edi + 4]
je 0x101d7e6b
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov dword [ebp - 0x18], ecx
cmp eax, dword [ebx]
jne 0x101d7e6b
mov eax, dword [esi]
jmp 0x101d7e84
push edx
push ebx
lea eax, [ebp - 0x20]
mov ecx, edi
push eax
call fcn.100cce10
lea eax, [esi + 8]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp + 0x10], eax
test esi, esi
je 0x101d7e95
mov ecx, dword [ebp + 8]
mov dword [ecx], esi
jmp 0x101d7f71
cmp dword [edi + 8], 0xfffffff
je 0x101d7f87
lea esi, [edi + 4]
mov dword [ebp - 0x28], esi
mov dword [ebp - 4], 0
push 0x10
mov dword [ebp - 0x24], 0
call fcn.102fe3a6
mov ecx, dword [ebx + 4]
add esp, 4
mov dword [ebp - 0x24], eax
lea edx, [eax + 8]
mov eax, dword [ebx]
mov dword [ebp - 0x1c], edx
mov dword [edx], eax
mov dword [edx + 4], ecx
mov dword [ebp - 4], 1
mov eax, dword [edi + 8]
inc eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1046f8a0]
mov eax, dword [edi + 0x1c]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1046f8a0]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [edi]
seta al
test al, al
je 0x101d7f5b
mov ecx, edi
call fcn.101869e0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x1c]
cmp ecx, dword [esi]
je 0x101d7f43
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
cmp eax, dword [edx]
jne 0x101d7f43
mov eax, dword [ecx]
mov esi, dword [ebp - 0x14]
mov dword [ebp + 0x10], eax
jmp 0x101d7f5e
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x20]
push esi
push edx
push eax
mov ecx, edi
call fcn.100cce10
mov eax, dword [ebp - 0x20]
mov dword [ebp + 0x10], eax
jmp 0x101d7f5e
mov esi, dword [ebp - 0x14]
push dword [ebp - 0x24]
mov ecx, edi
push dword [ebp + 0x10]
push esi
call fcn.1015b2e0
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push str.unordered_map_set_too_long
call fcn.102fca7f
int3
Function at 0x10233a80
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x103a7abd
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x1049b0c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x40], edx
mov ebx, ecx
mov dword [ebp - 0x3c], ebx
mov edi, dword [0x1054c3f8]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x44], eax
test edi, edi
jne 0x10233b70
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x30], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x38], ecx
cmp ecx, ebx
je 0x10233b4a
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x10233b4a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
sub ecx, 4
dec edx
mov dword [ebp - 0x34], ecx
mov edi, 0xed9144e4
mov dword [ebp - 0x2c], edx
mov ecx, dword [ecx]
add ecx, ebx
mov bl, byte [ecx]
inc ecx
test bl, bl
je 0x10233b40
movsx esi, bl
lea ecx, [ecx + 1]
sub bl, 0x41
mov edx, esi
or edx, 0x20
cmp bl, 0x19
mov bl, byte [ecx - 1]
cmova edx, esi
xor edx, edi
imul edi, edx, 0x1000193
test bl, bl
jne 0x10233b12
mov edx, dword [ebp - 0x2c]
cmp edi, 0xed89c488
je 0x10233b4e
mov ecx, dword [ebp - 0x34]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x10233af8
mov eax, dword [eax]
jmp 0x10233ad3
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edx*2]
mov edi, dword [ecx + eax*4]
add edi, esi
mov dword [0x1054c3f8], edi
lea eax, [ebp - 0x28]
mov ecx, 0x10537b60
push eax
call fcn.10055f60
mov dword [ebp - 4], 0
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 0xf
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x40]
call edi
mov esi, eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x10233bb7
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.10034640
add esp, 0xc
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
test esi, esi
jne 0x10233bd1
mov dword [ebx], esi
jmp 0x10233bdd
push 0
push dword [ebp - 0x44]
call esi
add esp, 8
mov dword [ebx], eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.102fe398
mov esp, ebp
pop ebp
ret