joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10057c50
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub esp, 8
push ebx
push ebp
push esi
mov esi, ecx
mov ebx, edx
xor ebp, ebp
mov dword [esp + 0x10], ebx
push edi
mov eax, dword [esi + 0x1c]
sub eax, 0x20
mov dword [esi + 0x54], 0
mov dword [esi + 0x20], eax
mov eax, dword [esi + 0x24]
mov dword [esi + 0x50], eax
mov word [esi + 0x4e], 0
mov dword [esi + 0x2c], 0
mov dword [eax + 8], eax
xor eax, eax
mov word [esi + 0x4c], ax
cmp ax, word [esi + 0x78]
jge 0x10057d66
xor edx, edx
nop dword [eax]
mov eax, dword [esi + 0x84]
mov ecx, esi
mov dword [esi + 0x5c], 0
mov dword [esi + 0x58], 0
push ebx
movzx eax, word [eax + ebp*2]
push eax
call fcn.10057890
test al, al
jne 0x10057e03
mov eax, dword [esi + 0x84]
mov edi, dword [esi + 4]
mov edx, dword [esi + 0x40]
movzx eax, word [eax + ebp*2]
mov dword [esp + 0x10], eax
lea eax, [edi - 1]
test edx, eax
jne 0x10057d07
cmp edx, dword [esi + 0x44]
jl 0x10057d07
cmp edx, dword [esi + 0x48]
jg 0x10057d07
mov ecx, dword [esi + 0x58]
test ecx, ecx
je 0x10057d07
mov eax, dword [esi + 0x50]
mov cl, byte [ecx + 0xc]
xor cl, byte [eax + 0xc]
test cl, 8
jne 0x10057d07
add dword [esi + 0x24], 0xfffffffc
mov ebx, dword [esi + 0x50]
mov eax, dword [esi + 0x24]
cmp eax, dword [ebx + 8]
je 0x10057d23
test byte [ebx + 0xc], 8
je 0x10057d23
neg edi
and edi, edx
sub edx, edi
cmp edx, dword [esi + 8]
jmp 0x10057d31
lea eax, [edi - 1]
neg edi
add eax, edx
and eax, edi
sub eax, edx
cmp eax, dword [esi + 8]
setge dl
mov ecx, esi
call fcn.10056e50
test al, al
jne 0x10057e03
mov eax, dword [esi + 0x58]
test eax, eax
je 0x10057d4d
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 0x10]
inc ebp
mov ebx, dword [esp + 0x14]
inc eax
movzx edx, ax
movsx eax, word [esi + 0x78]
cmp ebp, eax
jl 0x10057ca0
movzx eax, word [esi + 0x4c]
mov edi, dword [esi + 0x54]
mov dword [esp + 0x10], eax
cmp eax, 1
jbe 0x10057e0d
test edi, edi
je 0x10057e0d
lea ebx, [edi + 4]
mov dword [esp + 0x14], ebx
cmp ax, 1
jbe 0x10057d9a
mov ecx, dword [edi + 0x10]
mov eax, dword [edi + 8]
lea eax, [eax + ecx*4]
jmp 0x10057d9c
xor eax, eax
mov dword [ebx], eax
test byte [edi + 0xc], 8
mov ebx, dword [edi + 0x14]
mov edx, ebx
mov eax, dword [edi + 0x10]
je 0x10057db1
dec ebx
add ebx, eax
jmp 0x10057dc1
sub edx, eax
lea eax, [eax*4 - 4]
inc edx
add dword [edi + 8], eax
mov dword [edi + 0x14], edx
mov ecx, esi
call fcn.10056ee0
test al, al
jne 0x10057e03
lea edx, [ebx + 1]
mov ecx, esi
call fcn.10056ee0
test al, al
jne 0x10057e03
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
add eax, 0xffff
mov dword [esp + 0x10], eax
mov edi, dword [edi]
test ax, ax
jne 0x10057d82
mov eax, dword [esi + 0x24]
cmp eax, dword [esi + 0x20]
pop edi
pop esi
pop ebp
setae al
pop ebx
add esp, 8
ret
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 8
ret
mov eax, dword [esi + 0x24]
cmp eax, dword [esi + 0x20]
pop edi
mov dword [esi + 0x54], 0
setae al
pop esi
pop ebp
pop ebx
add esp, 8
ret
Function at 0x10057c55
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub esp, 8
push ebx
push ebp
push esi
mov esi, ecx
mov ebx, edx
xor ebp, ebp
mov dword [esp + 0x10], ebx
push edi
mov eax, dword [esi + 0x1c]
sub eax, 0x20
mov dword [esi + 0x54], 0
mov dword [esi + 0x20], eax
mov eax, dword [esi + 0x24]
mov dword [esi + 0x50], eax
mov word [esi + 0x4e], 0
mov dword [esi + 0x2c], 0
mov dword [eax + 8], eax
xor eax, eax
mov word [esi + 0x4c], ax
cmp ax, word [esi + 0x78]
jge 0x10057d66
xor edx, edx
nop dword [eax]
mov eax, dword [esi + 0x84]
mov ecx, esi
mov dword [esi + 0x5c], 0
mov dword [esi + 0x58], 0
push ebx
movzx eax, word [eax + ebp*2]
push eax
call fcn.10057890
test al, al
jne 0x10057e03
mov eax, dword [esi + 0x84]
mov edi, dword [esi + 4]
mov edx, dword [esi + 0x40]
movzx eax, word [eax + ebp*2]
mov dword [esp + 0x10], eax
lea eax, [edi - 1]
test edx, eax
jne 0x10057d07
cmp edx, dword [esi + 0x44]
jl 0x10057d07
cmp edx, dword [esi + 0x48]
jg 0x10057d07
mov ecx, dword [esi + 0x58]
test ecx, ecx
je 0x10057d07
mov eax, dword [esi + 0x50]
mov cl, byte [ecx + 0xc]
xor cl, byte [eax + 0xc]
test cl, 8
jne 0x10057d07
add dword [esi + 0x24], 0xfffffffc
mov ebx, dword [esi + 0x50]
mov eax, dword [esi + 0x24]
cmp eax, dword [ebx + 8]
je 0x10057d23
test byte [ebx + 0xc], 8
je 0x10057d23
neg edi
and edi, edx
sub edx, edi
cmp edx, dword [esi + 8]
jmp 0x10057d31
lea eax, [edi - 1]
neg edi
add eax, edx
and eax, edi
sub eax, edx
cmp eax, dword [esi + 8]
setge dl
mov ecx, esi
call fcn.10056e50
test al, al
jne 0x10057e03
mov eax, dword [esi + 0x58]
test eax, eax
je 0x10057d4d
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 0x10]
inc ebp
mov ebx, dword [esp + 0x14]
inc eax
movzx edx, ax
movsx eax, word [esi + 0x78]
cmp ebp, eax
jl 0x10057ca0
movzx eax, word [esi + 0x4c]
mov edi, dword [esi + 0x54]
mov dword [esp + 0x10], eax
cmp eax, 1
jbe 0x10057e0d
test edi, edi
je 0x10057e0d
lea ebx, [edi + 4]
mov dword [esp + 0x14], ebx
cmp ax, 1
jbe 0x10057d9a
mov ecx, dword [edi + 0x10]
mov eax, dword [edi + 8]
lea eax, [eax + ecx*4]
jmp 0x10057d9c
xor eax, eax
mov dword [ebx], eax
test byte [edi + 0xc], 8
mov ebx, dword [edi + 0x14]
mov edx, ebx
mov eax, dword [edi + 0x10]
je 0x10057db1
dec ebx
add ebx, eax
jmp 0x10057dc1
sub edx, eax
lea eax, [eax*4 - 4]
inc edx
add dword [edi + 8], eax
mov dword [edi + 0x14], edx
mov ecx, esi
call fcn.10056ee0
test al, al
jne 0x10057e03
lea edx, [ebx + 1]
mov ecx, esi
call fcn.10056ee0
test al, al
jne 0x10057e03
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
add eax, 0xffff
mov dword [esp + 0x10], eax
mov edi, dword [edi]
test ax, ax
jne 0x10057d82
mov eax, dword [esi + 0x24]
cmp eax, dword [esi + 0x20]
pop edi
pop esi
pop ebp
setae al
pop ebx
add esp, 8
ret
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 8
ret
mov eax, dword [esi + 0x24]
cmp eax, dword [esi + 0x20]
pop edi
mov dword [esi + 0x54], 0
setae al
pop esi
pop ebp
pop ebx
add esp, 8
ret
Function at 0x10066900
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x18
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x18], edi
mov ebx, dword [edi + 0xc]
mov ecx, dword [edi + 0x44]
mov edx, dword [edi + 0x48]
mov dword [esp + 0x1c], ebx
movsx ebp, word [ebx + 0x3a]
mov eax, dword [ebx + 0x3c]
lea esi, [ebp*8]
mov dword [esi + eax], ecx
mov dword [esi + eax + 4], edx
mov eax, dword [ebx + 0x3c]
mov ecx, dword [edi + 0x4c]
mov edx, dword [edi + 0x50]
mov dword [esp + 0x20], esi
mov dword [esi + eax + 8], ecx
mov dword [esi + eax + 0xc], edx
mov eax, dword [ebx + 0x3c]
mov ecx, dword [edi + 0xb4]
mov edx, dword [edi + 0xb8]
mov dword [eax + ebp*8 + 0x10], ecx
mov dword [eax + ebp*8 + 0x14], edx
mov eax, dword [ebx + 0x3c]
mov ecx, dword [edi + 0xbc]
mov edx, dword [edi + 0xc0]
mov dword [eax + ebp*8 + 0x18], ecx
mov dword [eax + ebp*8 + 0x1c], edx
mov eax, dword [ebx + 0x40]
mov byte [eax + ebp], 0
mov eax, dword [ebx + 0x40]
mov byte [eax + ebp + 1], 0
mov eax, dword [ebx + 0x40]
mov byte [eax + ebp + 2], 0
mov eax, dword [ebx + 0x40]
mov byte [eax + ebp + 3], 0
add ebp, 4
test byte [edi + 0x10], 2
mov dword [esp + 0x24], ebp
jne 0x100669fc
movzx esi, word [ebx + 0x3a]
mov word [edi + 0x80], si
mov ax, word [ebx + 0x38]
mov word [edi + 0x82], ax
mov eax, dword [ebx + 0x4c]
mov dword [edi + 0x84], eax
mov edx, dword [ebx + 0x3c]
mov dword [edi + 0x88], edx
mov ecx, dword [ebx + 0x50]
mov dword [edi + 0x8c], ecx
mov eax, dword [ebx + 0x40]
mov dword [edi + 0x90], eax
mov eax, dword [ebx + 0x44]
mov dword [edi + 0x94], eax
xor eax, eax
mov word [edi + 0x98], ax
lea eax, [esi*8 + 0x20]
push eax
push edx
push ecx
call fcn.10121200
add esp, 0xc
mov esi, dword [ebx + 0x3c]
mov edx, edi
sub edx, 0xffffff80
test byte [edi + 0x10], 1
lea ebp, [esi + ebp*8]
jne 0x10066a4e
mov eax, dword [edi + 4]
mov eax, dword [eax + 0x2c]
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
cmp esi, ebp
jae 0x10066a4e
mov ebx, ecx
mov edi, eax
mov ecx, dword [esi]
mov edx, ebx
call fcn.10030ca0
mov ecx, dword [esi + 4]
mov edx, edi
mov dword [esi], eax
call fcn.10030ca0
mov dword [esi + 4], eax
add esi, 8
cmp esi, ebp
jb 0x10066a21
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edx, [edi + 0x80]
test byte [edi + 0x10], 2
mov eax, dword [ebx + 0x3c]
mov esi, dword [esp + 0x20]
mov ecx, dword [esi + eax]
mov eax, dword [esi + eax + 4]
mov esi, dword [esp + 0x24]
mov dword [edi + 0x44], ecx
mov dword [edi + 0x48], eax
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + esi*8 - 0x18]
mov eax, dword [eax + esi*8 - 0x14]
mov dword [edi + 0x4c], ecx
mov dword [edi + 0x50], eax
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + esi*8 - 0x10]
mov eax, dword [eax + esi*8 - 0xc]
mov dword [edi + 0xb4], ecx
mov dword [edi + 0xb8], eax
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + esi*8 - 8]
mov eax, dword [eax + esi*8 - 4]
mov dword [edi + 0xbc], ecx
mov dword [edi + 0xc0], eax
jne 0x10066abf
add word [edx], 4
mov ecx, edi
pop edi
pop esi
pop ebp
xor dl, dl
pop ebx
add esp, 0x18
jmp fcn.100665a0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x18
ret
Function at 0x1006ec50
Capabilities:
Hash data using fnv

Disassembly:
mov al, byte [ecx]
test al, al
je 0x1006ec67
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
inc ecx
jmp fcn.1006ec50
mov eax, edx
ret

Function at 0x10071db0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push esi
mov esi, dword [esp + 8]
push edi
push esi
mov edi, ecx
call fcn.100706e0
mov dword [edi + 0x4c], 0
lea ecx, [esi + 4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test eax, eax
je 0x10071e95
lea edx, [eax + 4]
mov ecx, 0x811c9dc5
mov al, byte [edx]
test al, al
je 0x10071e90
nop dword [eax]
movsx eax, al
lea edx, [edx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [edx]
test al, al
jne 0x10071df0
cmp ecx, 0x6b1b9d0d
ja 0x10071e4b
je 0x10071e3c
cmp ecx, 0x12b4cf9d
je 0x10071e2d
cmp ecx, 0x4ce308fb
jne 0x10071e90
mov eax, str.Pistol_Case
mov dword [edi + 0x4c], eax
mov eax, edi
pop edi
pop esi
ret 4
mov eax, str.Tools_Case
mov dword [edi + 0x4c], eax
mov eax, edi
pop edi
pop esi
ret 4
mov eax, str.Light_Case
mov dword [edi + 0x4c], eax
mov eax, edi
pop edi
pop esi
ret 4
cmp ecx, 0xa311b4a5
je 0x10071e81
cmp ecx, 0xdf3294fd
je 0x10071e72
cmp ecx, 0xffbb400c
jne 0x10071e90
mov eax, str.Heavy_Case
mov dword [edi + 0x4c], eax
mov eax, edi
pop edi
pop esi
ret 4
mov eax, str.Explosive_Case
mov dword [edi + 0x4c], eax
mov eax, edi
pop edi
pop esi
ret 4
mov eax, str.Cash_Dufflebag
mov dword [edi + 0x4c], eax
mov eax, edi
pop edi
pop esi
ret 4
xor eax, eax
mov dword [edi + 0x4c], eax
mov eax, edi
pop edi
pop esi
ret 4
Function at 0x10072400
Capabilities:
Hash data using fnv

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x24]
movzx eax, byte [edi]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edi + 1]
xor ecx, eax
movzx eax, byte [edi + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
lea eax, [esp + 0x10]
imul ebx, ecx, 0x1000193
mov ecx, 0x1027cfe8
push ebx
push edi
push eax
call fcn.100736d0
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x1007246a
mov eax, dword [esp + 0x20]
mov dword [eax], ecx
mov byte [eax + 4], 0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8
cmp dword [0x1027cff0], 0xccccccc
je 0x100725cb
push 0x14
call fcn.10117c3b
mov ecx, dword [edi]
mov esi, eax
xorps xmm0, xmm0
mov dword [esi + 8], ecx
movq qword [esi + 0xc], xmm0
lea ebp, [esi + 8]
mov dword [ebp + 8], 0
add esp, 4
mov ecx, dword [0x1027cff0]
mov edi, dword [0x1027d004]
lea eax, [ecx + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10183e70]
mov eax, edi
shr eax, 0x1f
cvtpd2ps xmm2, xmm0
movd xmm0, edi
cvtdq2pd xmm0, xmm0
movaps xmm1, xmm2
addsd xmm0, qword [eax*8 + 0x10183e70]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
movss xmm0, dword [0x1027cfe8]
comiss xmm1, xmm0
jbe 0x1007255d
divss xmm2, xmm0
sub esp, 8
movss dword [esp + 0x2c], xmm2
fld dword [esp + 0x2c]
fstp qword [esp]
call fcn.10132ab0
add esp, 8
fstp dword [esp + 0x24]
movss xmm0, dword [esp + 0x24]
call fcn.101482e0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp edi, ecx
jae 0x1007253c
cmp edi, 0x200
jae 0x1007253a
shl edi, 3
cmp edi, ecx
jae 0x1007253c
mov edi, ecx
push edi
call fcn.100726a0
push ebx
push ebp
lea eax, [esp + 0x18]
mov ecx, 0x1027cfe8
push eax
call fcn.100736d0
mov ecx, dword [0x1027cff0]
mov edx, dword [eax]
jmp 0x10072561
mov edx, dword [esp + 0x10]
mov edi, dword [edx + 4]
inc ecx
mov dword [0x1027cff0], ecx
mov dword [esi], edx
mov dword [esi + 4], edi
mov dword [edi], esi
mov dword [edx + 4], esi
mov eax, dword [0x1027d000]
mov ecx, dword [0x1027cff4]
and eax, ebx
mov ebx, dword [ecx + eax*8]
cmp ebx, dword [0x1027cfec]
jne 0x10072592
mov dword [ecx + eax*8], esi
jmp 0x100725b3
cmp ebx, edx
jne 0x100725ad
mov dword [ecx + eax*8], esi
mov eax, dword [esp + 0x20]
mov dword [eax], esi
mov byte [eax + 4], 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8
cmp dword [ecx + eax*8 + 4], edi
jne 0x100725b7
mov dword [ecx + eax*8 + 4], esi
mov eax, dword [esp + 0x20]
pop edi
mov dword [eax], esi
pop esi
pop ebp
mov byte [eax + 4], 1
pop ebx
add esp, 0xc
ret 8
push str.unordered_map_set_too_long
call fcn.10118f5f
int3
Function at 0x100726a0
Capabilities:
Hash data using fnv

Disassembly:
mov eax, 0x1fffffff
bsr ecx, eax
push ebx
push ebp
push esi
push edi
mov edi, 1
mov eax, edi
shl eax, cl
mov ecx, dword [esp + 0x14]
cmp ecx, eax
ja 0x100727ef
lea eax, [ecx - 1]
mov esi, dword [0x1027cfec]
or eax, edi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
mov ecx, 0x1027cff4
lea eax, [edi + edi]
push eax
call fcn.1001d840
mov ecx, dword [0x1027cfec]
lea ebx, [edi - 1]
mov dword [0x1027d000], ebx
mov dword [0x1027d004], edi
mov ecx, dword [ecx]
mov edx, ecx
cmp ecx, esi
je 0x100727e8
movzx eax, byte [ecx + 8]
xor eax, 0x811c9dc5
mov edx, dword [edx]
imul edi, eax, 0x1000193
movzx eax, byte [ecx + 9]
xor edi, eax
movzx eax, byte [ecx + 0xa]
imul edi, edi, 0x1000193
xor edi, eax
movzx eax, byte [ecx + 0xb]
imul edi, edi, 0x1000193
xor edi, eax
mov eax, dword [0x1027cff4]
imul edi, edi, 0x1000193
and edi, ebx
mov ebx, dword [eax + edi*8]
lea eax, [eax + edi*8]
mov dword [esp + 0x14], eax
cmp ebx, esi
jne 0x10072755
mov dword [eax], ecx
mov dword [eax + 4], ecx
jmp 0x100727bb
mov eax, dword [eax + 4]
mov edi, dword [ecx + 8]
cmp edi, dword [eax + 8]
jne 0x10072788
mov eax, dword [eax]
cmp eax, ecx
je 0x1007277f
mov ebp, dword [ecx + 4]
mov dword [ebp], edx
mov ebx, dword [edx + 4]
mov dword [ebx], eax
mov edi, dword [eax + 4]
mov dword [edi], ecx
mov dword [eax + 4], ebx
mov dword [edx + 4], ebp
mov dword [ecx + 4], edi
mov eax, dword [esp + 0x14]
mov dword [eax + 4], ecx
jmp 0x100727bb
cmp ebx, eax
je 0x1007279c
nop dword [eax]
mov eax, dword [eax + 4]
cmp edi, dword [eax + 8]
je 0x100727cc
cmp ebx, eax
jne 0x10072790
mov ebp, dword [ecx + 4]
mov dword [ebp], edx
mov ebx, dword [edx + 4]
mov dword [ebx], eax
mov edi, dword [eax + 4]
mov dword [edi], ecx
mov dword [eax + 4], ebx
mov eax, dword [esp + 0x14]
mov dword [edx + 4], ebp
mov dword [ecx + 4], edi
mov dword [eax], ecx
mov ecx, edx
cmp edx, esi
je 0x100727e8
mov ebx, dword [0x1027d000]
jmp 0x10072704
mov ebx, dword [ecx + 4]
mov ebp, dword [eax]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], ebp
mov eax, dword [ebp + 4]
mov dword [eax], ecx
mov dword [ebp + 4], edi
mov dword [edx + 4], ebx
mov dword [ecx + 4], eax
jmp 0x100727bb
pop edi
pop esi
pop ebp
pop ebx
ret 4
push str.invalid_hash_bucket_count
call fcn.10118f5f
int3
Function at 0x1007ecd0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
mov esi, dword [esp + 0x20]
mov ebp, ecx
push edi
mov edx, esi
cmp dword [esi + 0x14], 0x10
mov ebx, dword [esi + 0x10]
jb 0x1007ecea
mov edx, dword [esi]
xor ecx, ecx
mov edi, 0x811c9dc5
test ebx, ebx
je 0x1007ed06
movzx eax, byte [ecx + edx]
inc ecx
xor eax, edi
imul edi, eax, 0x1000193
cmp ecx, ebx
jb 0x1007ecf5
push edi
push esi
lea eax, [esp + 0x18]
mov ecx, ebp
push eax
call fcn.10027540
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x1007ed30
mov eax, dword [esp + 0x20]
mov dword [eax], ecx
mov byte [eax + 4], 0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8
cmp dword [ebp + 8], 0xffffff
je 0x1007eeb0
push 0x100
call fcn.10117c3b
mov ebx, eax
xorps xmm0, xmm0
add esp, 4
movups xmmword [ebx + 8], xmm0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0
movups xmm0, xmmword [esi]
push 0xe0
push 0
movups xmmword [ebx + 8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebx + 0x18], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea esi, [ebx + 0x20]
push esi
call fcn.10120ba0
add esp, 0xc
mov ecx, esi
call fcn.1002f490
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0x1c]
inc eax
movss xmm3, dword [ebp]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10183e70]
mov eax, esi
shr eax, 0x1f
cvtpd2ps xmm2, xmm0
movd xmm0, esi
cvtdq2pd xmm0, xmm0
movaps xmm1, xmm2
addsd xmm0, qword [eax*8 + 0x10183e70]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, xmm3
jbe 0x1007ee4e
divss xmm2, xmm3
sub esp, 8
movss dword [esp + 0x2c], xmm2
fld dword [esp + 0x2c]
fstp qword [esp]
call fcn.10132ab0
add esp, 8
fstp dword [esp + 0x24]
movss xmm0, dword [esp + 0x24]
call fcn.101482e0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp esi, ecx
jae 0x1007ee31
cmp esi, 0x200
jae 0x1007ee2f
shl esi, 3
cmp esi, ecx
jae 0x1007ee31
mov esi, ecx
push esi
mov ecx, ebp
call fcn.10025100
push edi
lea eax, [ebx + 8]
mov ecx, ebp
push eax
lea eax, [esp + 0x18]
push eax
call fcn.10027540
mov edx, dword [eax]
jmp 0x1007ee52
mov edx, dword [esp + 0x10]
mov esi, dword [edx + 4]
inc dword [ebp + 8]
mov dword [ebx], edx
mov dword [ebx + 4], esi
mov dword [esi], ebx
mov dword [edx + 4], ebx
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0xc]
and eax, edi
mov edi, dword [ecx + eax*8]
cmp edi, dword [ebp + 4]
jne 0x1007ee77
mov dword [ecx + eax*8], ebx
jmp 0x1007ee98
cmp edi, edx
jne 0x1007ee92
mov dword [ecx + eax*8], ebx
mov eax, dword [esp + 0x20]
mov dword [eax], ebx
mov byte [eax + 4], 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8
cmp dword [ecx + eax*8 + 4], esi
jne 0x1007ee9c
mov dword [ecx + eax*8 + 4], ebx
mov eax, dword [esp + 0x20]
pop edi
pop esi
pop ebp
mov dword [eax], ebx
mov byte [eax + 4], 1
pop ebx
add esp, 0xc
ret 8
push str.unordered_map_set_too_long
call fcn.10118f5f
int3
Function at 0x10081040
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
sub esp, 0xc
push ebx
push ebp
mov ebp, dword [esp + 0x1c]
mov ebx, ecx
push esi
push edi
mov edx, ebp
cmp dword [ebp + 0x14], 0x10
mov edi, dword [ebp + 0x10]
jb 0x1008105b
mov edx, dword [ebp]
xor ecx, ecx
mov esi, 0x811c9dc5
test edi, edi
je 0x10081077
movzx eax, byte [ecx + edx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, edi
jb 0x10081066
push esi
push ebp
lea eax, [esp + 0x18]
mov ecx, ebx
push eax
call fcn.10027540
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x100810a1
mov eax, dword [esp + 0x20]
mov dword [eax], ecx
mov byte [eax + 4], 0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8
cmp dword [ebx + 8], 0x4444444
je 0x10081264
push 0x3c
call fcn.10117c3b
mov edi, eax
xorps xmm0, xmm0
add esp, 4
movups xmmword [edi + 8], xmm0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
movups xmm0, xmmword [ebp]
movups xmmword [edi + 8], xmm0
movq xmm0, qword [ebp + 0x10]
movq qword [edi + 0x18], xmm0
mov dword [ebp + 0x10], 0
mov dword [ebp + 0x14], 0xf
mov byte [ebp], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x20], 0x3f800000
mov dword [edi + 0x24], 0x3f800000
mov dword [edi + 0x28], 0x3f800000
mov dword [edi + 0x2c], 0x3f800000
mov dword [edi + 0x30], 0x3f19999a
mov word [edi + 0x34], 0
mov byte [edi + 0x36], 0
mov dword [edi + 0x38], 0
mov eax, dword [ebx + 8]
mov ebp, dword [ebx + 0x1c]
inc eax
movss xmm3, dword [ebx]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10183e70]
mov eax, ebp
shr eax, 0x1f
cvtpd2ps xmm2, xmm0
movd xmm0, ebp
cvtdq2pd xmm0, xmm0
movaps xmm1, xmm2
addsd xmm0, qword [eax*8 + 0x10183e70]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, xmm3
jbe 0x10081201
divss xmm2, xmm3
sub esp, 8
movss dword [esp + 0x2c], xmm2
fld dword [esp + 0x2c]
fstp qword [esp]
call fcn.10132ab0
add esp, 8
fstp dword [esp + 0x24]
movss xmm0, dword [esp + 0x24]
call fcn.101482e0
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp ebp, ecx
jae 0x100811e4
cmp ebp, 0x200
jae 0x100811e2
shl ebp, 3
cmp ebp, ecx
jae 0x100811e4
mov ebp, ecx
push ebp
mov ecx, ebx
call fcn.10025100
push esi
lea eax, [edi + 8]
mov ecx, ebx
push eax
lea eax, [esp + 0x18]
push eax
call fcn.10027540
mov edx, dword [eax]
jmp 0x10081205
mov edx, dword [esp + 0x10]
mov ebp, dword [edx + 4]
inc dword [ebx + 8]
mov dword [edi], edx
mov dword [edi + 4], ebp
mov dword [ebp], edi
mov dword [edx + 4], edi
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0xc]
and eax, esi
mov esi, dword [ecx + eax*8]
cmp esi, dword [ebx + 4]
jne 0x1008122b
mov dword [ecx + eax*8], edi
jmp 0x1008124c
cmp esi, edx
jne 0x10081246
mov dword [ecx + eax*8], edi
mov eax, dword [esp + 0x20]
mov dword [eax], edi
mov byte [eax + 4], 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8
cmp dword [ecx + eax*8 + 4], ebp
jne 0x10081250
mov dword [ecx + eax*8 + 4], edi
mov eax, dword [esp + 0x20]
mov dword [eax], edi
pop edi
pop esi
pop ebp
mov byte [eax + 4], 1
pop ebx
add esp, 0xc
ret 8
push str.unordered_map_set_too_long
call fcn.10118f5f
int3
Function at 0x1008b020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ecx
push esi
mov esi, ecx
push edi
mov edx, dword [esi + 8]
mov edi, edx
and edi, 7
je 0x1008b048
cmp edx, edi
jge 0x1008b038
call fcn.1008aa00
mov eax, dword [esi + 0xc]
mov ecx, edi
shr eax, cl
sub dword [esi + 8], edi
mov edx, dword [esi + 8]
mov dword [esi + 0xc], eax
xor eax, eax
mov ecx, edx
test edx, edx
jle 0x1008b06e
mov edx, dword [esi + 0xc]
push ebx
mov bl, dl
mov byte [esp + eax + 0xc], bl
sub ecx, 8
shr edx, 8
inc eax
mov dword [esi + 0xc], edx
mov bl, dl
test ecx, ecx
jg 0x1008b056
pop ebx
mov dword [esi + 8], ecx
test ecx, ecx
js 0x1008b0fc
cmp eax, 4
jge 0x1008b097
mov edi, dword [esi + 4]
mov ecx, dword [esi]
cmp ecx, edi
jb 0x1008b088
xor dl, dl
jmp 0x1008b08d
mov dl, byte [ecx]
inc ecx
mov dword [esi], ecx
mov byte [esp + eax + 8], dl
inc eax
cmp eax, 4
jl 0x1008b080
mov eax, dword [esp + 8]
movzx ecx, byte [esp + 0xb]
movzx edi, ah
movzx eax, al
shl edi, 8
add edi, eax
shl ecx, 8
movzx eax, byte [esp + 0xa]
add ecx, eax
mov eax, edi
xor eax, 0xffff
cmp ecx, eax
jne 0x1008b0fc
mov eax, dword [esi]
add eax, edi
cmp eax, dword [esi + 4]
ja 0x1008b0fc
mov edx, dword [esi + 0x10]
lea eax, [edx + edi]
cmp eax, dword [esi + 0x18]
jbe 0x1008b0e0
push edi
mov ecx, esi
call fcn.1008ab20
test eax, eax
je 0x1008b0fc
push edi
push dword [esi]
push dword [esi + 0x10]
call fcn.10121200
add dword [esi], edi
add esp, 0xc
add dword [esi + 0x10], edi
mov eax, 1
pop edi
pop esi
pop ecx
ret
pop edi
xor eax, eax
pop esi
pop ecx
ret