joyce8/EMBER2024-capa huggingface dataset:
Function at 0x44d0e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a67a9
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb8cc
push 0x4ce960
mov dword [ebp - 0x14], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x44d144
push 0x4ce960
mov ecx, 0x4cb8cc
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x44d181
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x44d170
mov edi, dword [ebp - 0x18]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x44d1a6
cmp dword [eax + 0x10], edx
jae 0x44d19c
mov eax, dword [eax + 8]
jmp 0x44d1a0
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44d192
cmp ecx, esi
je 0x44d1b2
mov dword [ebp - 0x18], ecx
cmp edx, dword [ecx + 0x10]
jae 0x44d1b5
mov dword [ebp - 0x18], esi
lea eax, [ebp - 0x18]
mov eax, dword [eax]
cmp eax, esi
je 0x44d23b
push ecx
add eax, 0x14
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444230
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x24]
mov eax, dword [eax]
add eax, 0x28
push eax
call fcn.004442d0
mov edx, eax
mov eax, dword [ebx + 4]
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov dword [ebx + 4], ecx
mov ecx, dword [edx]
mov eax, dword [ebx]
mov dword [edx], eax
mov esi, dword [ebp - 0x20]
mov dword [ebx], ecx
test esi, esi
je 0x44d21e
or edi, 0xffffffff
lea ecx, [esi + 4]
mov eax, edi
lock xadd dword [ecx], eax
jne 0x44d21e
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
lock xadd dword [eax], edi
dec edi
jne 0x44d21e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp + 8]
push ecx
push dword [ecx]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444340
push dword [ebp - 0x1c]
call fcn.004815f5
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x44d260
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a67a9
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb88c
push 0x4ce960
mov dword [ebp - 0x14], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x44d2c4
push 0x4ce960
mov ecx, 0x4cb88c
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x44d301
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x44d2f0
mov edi, dword [ebp - 0x18]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x44d326
cmp dword [eax + 0x10], edx
jae 0x44d31c
mov eax, dword [eax + 8]
jmp 0x44d320
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44d312
cmp ecx, esi
je 0x44d332
mov dword [ebp - 0x18], ecx
cmp edx, dword [ecx + 0x10]
jae 0x44d335
mov dword [ebp - 0x18], esi
lea eax, [ebp - 0x18]
mov eax, dword [eax]
cmp eax, esi
je 0x44d3bb
push ecx
add eax, 0x14
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444230
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x24]
mov eax, dword [eax]
add eax, 0x28
push eax
call fcn.004442d0
mov edx, eax
mov eax, dword [ebx + 4]
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov dword [ebx + 4], ecx
mov ecx, dword [edx]
mov eax, dword [ebx]
mov dword [edx], eax
mov esi, dword [ebp - 0x20]
mov dword [ebx], ecx
test esi, esi
je 0x44d39e
or edi, 0xffffffff
lea ecx, [esi + 4]
mov eax, edi
lock xadd dword [ecx], eax
jne 0x44d39e
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
lock xadd dword [eax], edi
dec edi
jne 0x44d39e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp + 8]
push ecx
push dword [ecx]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444340
push dword [ebp - 0x1c]
call fcn.004815f5
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x4508c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a67a9
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb86c
push 0x4ce960
mov dword [ebp - 0x14], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x450924
push 0x4ce960
mov ecx, 0x4cb86c
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x450961
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x450950
mov edi, dword [ebp - 0x18]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x450986
cmp dword [eax + 0x10], edx
jae 0x45097c
mov eax, dword [eax + 8]
jmp 0x450980
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x450972
cmp ecx, esi
je 0x450992
mov dword [ebp - 0x18], ecx
cmp edx, dword [ecx + 0x10]
jae 0x450995
mov dword [ebp - 0x18], esi
lea eax, [ebp - 0x18]
mov eax, dword [eax]
cmp eax, esi
je 0x450a1b
push ecx
add eax, 0x14
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444230
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x24]
mov eax, dword [eax]
add eax, 0x28
push eax
call fcn.004442d0
mov edx, eax
mov eax, dword [ebx + 4]
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov dword [ebx + 4], ecx
mov ecx, dword [edx]
mov eax, dword [ebx]
mov dword [edx], eax
mov esi, dword [ebp - 0x20]
mov dword [ebx], ecx
test esi, esi
je 0x4509fe
or edi, 0xffffffff
lea ecx, [esi + 4]
mov eax, edi
lock xadd dword [ecx], eax
jne 0x4509fe
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
lock xadd dword [eax], edi
dec edi
jne 0x4509fe
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp + 8]
push ecx
push dword [ecx]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00444340
push dword [ebp - 0x1c]
call fcn.004815f5
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x450a40
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6478
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x10], eax
push ecx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, eax
call fcn.00451580
cmp dword [ebp - 0x20], 0
mov esi, dword [ebp - 0x1c]
setne bl
or edi, 0xffffffff
test esi, esi
je 0x450aad
lea eax, [esi + 4]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0x450aad
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
mov edx, edi
lock xadd dword [eax], edx
jne 0x450aad
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
test bl, bl
je 0x450aba
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.00451100
push dword [ebp + 0xc]
lea ecx, [ebp - 0x18]
call fcn.004511f0
add esp, 4
push 0x4ce960
mov ecx, 0x4cb834
mov dword [ebp - 4], 0
call fcn.0048273a
mov esi, eax
lea eax, [esi + 1]
mov dl, byte [esi]
inc esi
test dl, dl
jne 0x450ae3
push 0x4ce960
mov ecx, 0x4cb834
sub esi, eax
call fcn.0048273a
xor edx, edx
mov ebx, eax
mov eax, 0x811c9dc5
test esi, esi
je 0x450b19
movzx ecx, byte [edx + ebx]
inc edx
xor ecx, eax
imul eax, ecx, 0x1000193
cmp edx, esi
jb 0x450b08
mov ecx, dword [ebp - 0x10]
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0xc]
push 0x4ca5a4
push eax
lea ecx, [ecx + 4]
call fcn.00449a20
mov ecx, eax
call fcn.00449b50
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
test ebx, ebx
je 0x450b53
lea ecx, [ebx + 4]
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [ebp - 0x10]
mov esi, dword [eax + 4]
mov dword [eax + 4], ebx
mov dword [eax], ecx
test esi, esi
je 0x450b82
lea eax, [esi + 4]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0x450b82
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
mov edx, edi
lock xadd dword [eax], edx
jne 0x450b82
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x450bb2
lea eax, [esi + 4]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0x450bb2
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
lock xadd dword [eax], edi
dec edi
jne 0x450bb2
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x450bd0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6478
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x10], eax
push ecx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, eax
call fcn.00451780
cmp dword [ebp - 0x20], 0
mov esi, dword [ebp - 0x1c]
setne bl
or edi, 0xffffffff
test esi, esi
je 0x450c3d
lea eax, [esi + 4]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0x450c3d
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
mov edx, edi
lock xadd dword [eax], edx
jne 0x450c3d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
test bl, bl
je 0x450c4a
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.00451270
push dword [ebp + 0xc]
lea ecx, [ebp - 0x18]
call fcn.00451360
add esp, 4
push 0x4ce960
mov ecx, 0x4cb8f8
mov dword [ebp - 4], 0
call fcn.0048273a
mov esi, eax
lea eax, [esi + 1]
mov dl, byte [esi]
inc esi
test dl, dl
jne 0x450c73
push 0x4ce960
mov ecx, 0x4cb8f8
sub esi, eax
call fcn.0048273a
xor edx, edx
mov ebx, eax
mov eax, 0x811c9dc5
test esi, esi
je 0x450ca9
movzx ecx, byte [edx + ebx]
inc edx
xor ecx, eax
imul eax, ecx, 0x1000193
cmp edx, esi
jb 0x450c98
mov ecx, dword [ebp - 0x10]
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0xc]
push 0x4ca5a4
push eax
lea ecx, [ecx + 4]
call fcn.00449a20
mov ecx, eax
call fcn.00449b50
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
test ebx, ebx
je 0x450ce3
lea ecx, [ebx + 4]
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [ebp - 0x10]
mov esi, dword [eax + 4]
mov dword [eax + 4], ebx
mov dword [eax], ecx
test esi, esi
je 0x450d12
lea eax, [esi + 4]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0x450d12
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
mov edx, edi
lock xadd dword [eax], edx
jne 0x450d12
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x450d42
lea eax, [esi + 4]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0x450d42
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
lock xadd dword [eax], edi
dec edi
jne 0x450d42
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x450d60
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6c10
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x14], eax
push ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0
push ecx
mov ecx, eax
call fcn.00451980
cmp dword [ebp - 0x1c], 0
mov esi, dword [ebp - 0x18]
setne bl
or edi, 0xffffffff
test esi, esi
je 0x450dd4
lea eax, [esi + 4]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0x450dd4
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
mov edx, edi
lock xadd dword [eax], edx
jne 0x450dd4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
test bl, bl
je 0x450de1
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.004513e0
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x24]
call fcn.004514d0
add esp, 4
push 0x4ce960
mov ecx, 0x4cb810
mov byte [ebp - 4], 1
call fcn.0048273a
mov esi, eax
lea eax, [esi + 1]
mov dl, byte [esi]
inc esi
test dl, dl
jne 0x450e08
push 0x4ce960
mov ecx, 0x4cb810
sub esi, eax
call fcn.0048273a
xor edx, edx
mov ebx, eax
mov eax, 0x811c9dc5
test esi, esi
je 0x450e41
lea ecx, [ecx]
movzx ecx, byte [edx + ebx]
inc edx
xor ecx, eax
imul eax, ecx, 0x1000193
cmp edx, esi
jb 0x450e30
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push 0x4ca5a4
push eax
lea ecx, [ecx + 4]
call fcn.00449a20
mov ecx, eax
call fcn.00449b50
mov ebx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x14], ecx
test ebx, ebx
je 0x450e7b
lea ecx, [ebx + 4]
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [ebp - 0x14]
mov esi, dword [eax + 4]
mov dword [eax + 4], ebx
mov dword [eax], ecx
test esi, esi
je 0x450eaa
lea eax, [esi + 4]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0x450eaa
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
mov edx, edi
lock xadd dword [eax], edx
jne 0x450eaa
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 0
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x450ed8
lea eax, [esi + 4]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0x450ed8
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
mov edx, edi
lock xadd dword [eax], edx
jne 0x450ed8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp + 0x10]
test esi, esi
je 0x450f08
lea eax, [esi + 4]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0x450f08
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
lock xadd dword [eax], edi
dec edi
jne 0x450f08
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
Function at 0x451100
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov ebx, ecx
mov ecx, 0x4cb834
push 0x4ce960
call fcn.0048273a
mov esi, eax
lea eax, [esi + 1]
lea ecx, [ecx]
mov dl, byte [esi]
inc esi
test dl, dl
jne 0x451120
push 0x4ce960
mov ecx, 0x4cb834
sub esi, eax
call fcn.0048273a
xor edx, edx
mov edi, 0x811c9dc5
test esi, esi
je 0x451154
movzx ecx, byte [edx + eax]
inc edx
xor ecx, edi
imul edi, ecx, 0x1000193
cmp edx, esi
jb 0x451143
mov edx, dword [ebx + 4]
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x451176
cmp dword [eax + 0x10], edi
jae 0x45116c
mov eax, dword [eax + 8]
jmp 0x451170
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x451162
cmp ecx, edx
je 0x451182
mov dword [ebp - 4], ecx
cmp edi, dword [ecx + 0x10]
jae 0x451185
mov dword [ebp - 4], edx
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, edx
je 0x4511e7
lea edi, [eax + 0x14]
push 0x4ca5a4
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x4511cd
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x4511b1
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca5b4]
push ecx
mov ecx, 0x4ca5a4
call fcn.00444a10
test eax, eax
js 0x4511cd
mov dword [ebp - 4], esi
jmp 0x4511d2
mov eax, dword [edi]
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, dword [edi]
je 0x4511e7
push eax
lea eax, [ebp - 4]
mov ecx, edi
push eax
call fcn.00444400
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x451270
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov ebx, ecx
mov ecx, 0x4cb8f8
push 0x4ce960
call fcn.0048273a
mov esi, eax
lea eax, [esi + 1]
lea ecx, [ecx]
mov dl, byte [esi]
inc esi
test dl, dl
jne 0x451290
push 0x4ce960
mov ecx, 0x4cb8f8
sub esi, eax
call fcn.0048273a
xor edx, edx
mov edi, 0x811c9dc5
test esi, esi
je 0x4512c4
movzx ecx, byte [edx + eax]
inc edx
xor ecx, edi
imul edi, ecx, 0x1000193
cmp edx, esi
jb 0x4512b3
mov edx, dword [ebx + 4]
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x4512e6
cmp dword [eax + 0x10], edi
jae 0x4512dc
mov eax, dword [eax + 8]
jmp 0x4512e0
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x4512d2
cmp ecx, edx
je 0x4512f2
mov dword [ebp - 4], ecx
cmp edi, dword [ecx + 0x10]
jae 0x4512f5
mov dword [ebp - 4], edx
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, edx
je 0x451357
lea edi, [eax + 0x14]
push 0x4ca5a4
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x45133d
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x451321
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca5b4]
push ecx
mov ecx, 0x4ca5a4
call fcn.00444a10
test eax, eax
js 0x45133d
mov dword [ebp - 4], esi
jmp 0x451342
mov eax, dword [edi]
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, dword [edi]
je 0x451357
push eax
lea eax, [ebp - 4]
mov ecx, edi
push eax
call fcn.00444400
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x4513e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov ebx, ecx
mov ecx, 0x4cb810
push 0x4ce960
call fcn.0048273a
mov esi, eax
lea eax, [esi + 1]
lea ecx, [ecx]
mov dl, byte [esi]
inc esi
test dl, dl
jne 0x451400
push 0x4ce960
mov ecx, 0x4cb810
sub esi, eax
call fcn.0048273a
xor edx, edx
mov edi, 0x811c9dc5
test esi, esi
je 0x451434
movzx ecx, byte [edx + eax]
inc edx
xor ecx, edi
imul edi, ecx, 0x1000193
cmp edx, esi
jb 0x451423
mov edx, dword [ebx + 4]
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x451456
cmp dword [eax + 0x10], edi
jae 0x45144c
mov eax, dword [eax + 8]
jmp 0x451450
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x451442
cmp ecx, edx
je 0x451462
mov dword [ebp - 4], ecx
cmp edi, dword [ecx + 0x10]
jae 0x451465
mov dword [ebp - 4], edx
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, edx
je 0x4514c7
lea edi, [eax + 0x14]
push 0x4ca5a4
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x4514ad
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x451491
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca5b4]
push ecx
mov ecx, 0x4ca5a4
call fcn.00444a10
test eax, eax
js 0x4514ad
mov dword [ebp - 4], esi
jmp 0x4514b2
mov eax, dword [edi]
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
mov eax, dword [eax]
cmp eax, dword [edi]
je 0x4514c7
push eax
lea eax, [ebp - 4]
mov ecx, edi
push eax
call fcn.00444400
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x451580
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6529
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb834
push 0x4ce960
mov dword [ebp - 0x10], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x4515e4
push 0x4ce960
mov ecx, 0x4cb834
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x451621
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x451610
mov edi, dword [ebp - 0x14]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x451646
cmp dword [eax + 0x10], edx
jae 0x45163c
mov eax, dword [eax + 8]
jmp 0x451640
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x451632
cmp ecx, esi
je 0x451652
mov dword [ebp - 0x14], ecx
cmp edx, dword [ecx + 0x10]
jae 0x451655
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov eax, dword [eax]
cmp eax, esi
je 0x4516b6
lea edi, [eax + 0x14]
push 0x4ca5a4
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x45169d
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x451681
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca5b4]
push ecx
mov ecx, 0x4ca5a4
call fcn.00444a10
test eax, eax
js 0x45169d
mov dword [ebp + 8], esi
jmp 0x4516a2
mov eax, dword [edi]
mov dword [ebp + 8], eax
lea ecx, [ebp + 8]
mov ecx, dword [ecx]
cmp ecx, dword [edi]
je 0x4516b6
add ecx, 0x28
push ecx
mov ecx, ebx
call fcn.004441b0
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x451780
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6529
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x4c93e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], 0
mov ebx, dword [ebp + 8]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 4], 0
mov ecx, 0x4cb8f8
push 0x4ce960
mov dword [ebp - 0x10], 1
call fcn.0048273a
mov esi, eax
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x4517e4
push 0x4ce960
mov ecx, 0x4cb8f8
sub esi, edx
call fcn.0048273a
xor ecx, ecx
mov edi, eax
mov edx, 0x811c9dc5
test esi, esi
je 0x451821
lea esp, [esp]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x451810
mov edi, dword [ebp - 0x14]
mov esi, dword [edi + 4]
mov ecx, esi
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x451846
cmp dword [eax + 0x10], edx
jae 0x45183c
mov eax, dword [eax + 8]
jmp 0x451840
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x451832
cmp ecx, esi
je 0x451852
mov dword [ebp - 0x14], ecx
cmp edx, dword [ecx + 0x10]
jae 0x451855
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov eax, dword [eax]
cmp eax, esi
je 0x4518b6
lea edi, [eax + 0x14]
push 0x4ca5a4
mov ecx, edi
call fcn.00449ee0
mov esi, eax
cmp esi, dword [edi]
je 0x45189d
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x451881
mov eax, dword [eax]
push ecx
push eax
push dword [0x4ca5b4]
push ecx
mov ecx, 0x4ca5a4
call fcn.00444a10
test eax, eax
js 0x45189d
mov dword [ebp + 8], esi
jmp 0x4518a2
mov eax, dword [edi]
mov dword [ebp + 8], eax
lea ecx, [ebp + 8]
mov ecx, dword [ecx]
cmp ecx, dword [edi]
je 0x4518b6
add ecx, 0x28
push ecx
mov ecx, ebx
call fcn.004441b0
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8