joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10022500
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ecx, dword [ecx + 0x1368]
cmp dword [ecx + 0x54], edi
jbe 0x1002252d
mov eax, dword [ecx + 0x58]
mov eax, dword [eax + edi*4]
xor edi, edi
cmp eax, 0xffffffff
cmovne edi, eax
jmp 0x100225e4
mov eax, edi
shr eax, 0x18
mov dword [ebp - 0x10], eax
mov eax, edi
shr eax, 0x10
mov edx, edi
shr edx, 8
mov ebx, edi
mov esi, 0xff
and ebx, esi
and edx, esi
and eax, esi
mov dword [ebp - 0x20], ebx
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, edx
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, dword [ebp - 0x10]
imul ebx, ebx, 0x1000193
and ebx, dword [ecx + 0x74]
mov esi, dword [ecx + 0x60]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ecx + 0x68]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ebx
mov ebx, dword [ecx + ebx*8 + 4]
mov dword [ebp - 0x1c], esi
cmp ebx, esi
je 0x100225b3
and edi, 0xff000000
shl eax, 0x10
or eax, edi
shl edx, 8
or edx, eax
add edx, dword [ebp - 0x20]
cmp edx, dword [ebx + 8]
jne 0x100225bd
mov esi, dword [ebp + 0xc]
xor edi, edi
mov ecx, dword [ebp - 0x10]
jmp 0x100225dc
mov esi, dword [ebp + 0xc]
xor edi, edi
mov ecx, dword [ebp - 0x10]
jmp 0x100225e4
mov ecx, dword [ebp - 0x14]
add ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + ecx*4]
mov esi, dword [ebp + 0xc]
xor edi, edi
mov ecx, dword [ebp - 0x10]
cmp ebx, eax
je 0x100225e4
mov ebx, dword [ebx + 4]
cmp edx, dword [ebx + 8]
jne 0x100225d0
cmp ebx, dword [ebp - 0x1c]
je 0x100225e4
mov edi, dword [ebx + 0xc]
push esi
call fcn.10076790
movzx ecx, byte [eax + 0x120]
mov dword [edi + ecx*4 + 0x64], eax
inc dword [eax + 0x124]
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 8
Function at 0x10022670
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edx, ecx
mov esi, dword [ebp + 8]
mov edi, dword [ecx + 0x1368]
cmp dword [edi + 0x54], esi
jbe 0x10022694
mov eax, dword [edi + 0x58]
mov esi, dword [eax + esi*4]
jmp 0x10022737
mov dword [ebp - 0x10], edx
mov ebx, esi
shr ebx, 0x10
mov ecx, esi
shr ecx, 8
mov edx, 0xff
mov eax, esi
and eax, edx
and ecx, edx
and ebx, edx
mov edx, esi
shr edx, 0x18
mov dword [ebp - 0x18], eax
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
xor eax, ecx
imul eax, eax, 0x1000193
xor eax, ebx
imul eax, eax, 0x1000193
xor eax, edx
imul edx, eax, 0x1000193
and edx, dword [edi + 0x74]
mov eax, dword [edi + 0x60]
mov edi, dword [edi + 0x68]
mov dword [ebp - 0x14], edi
mov edi, dword [edi + edx*8 + 4]
cmp edi, eax
je 0x10022709
and esi, 0xff000000
shl ebx, 0x10
or ebx, esi
shl ecx, 8
or ecx, ebx
add ecx, dword [ebp - 0x18]
cmp ecx, dword [edi + 8]
jne 0x10022712
mov esi, eax
jmp 0x1002270d
mov esi, eax
xor edi, edi
mov edx, dword [ebp - 0x10]
jmp 0x1002272f
mov esi, eax
add edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x10]
cmp edi, eax
je 0x1002272d
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x1002271f
jmp 0x1002272f
xor edi, edi
test edi, edi
cmovne esi, edi
mov esi, dword [esi + 0xc]
mov ebx, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
cmp dword [esi + 0x158], 0
je 0x1002274e
mov ecx, esi
push edx
call fcn.100599c0
mov ecx, esi
push ebx
push edi
call fcn.10057430
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x10022e10
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x28
mov esi, ecx
mov eax, dword [ebp + 0x14]
mov edi, dword [ebp + 8]
mov ecx, dword [0x1038000c]
xor ecx, ebp
mov dword [ebp - 0x10], ecx
cmp edi, 0x8d40
je 0x10022e4e
cmp edi, 0x8ca9
je 0x10022e4e
xor ecx, ecx
cmp edi, 0x8ca8
jne 0x10022e54
mov ecx, dword [esi + 0x14e4]
jmp 0x10022e54
mov ecx, dword [esi + 0x14e8]
mov ebx, dword [ebp + 0xc]
test eax, eax
je 0x10022e7f
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp + 0x18]
mov ecx, dword [esi + 0x136c]
cmp dword [ecx + 0x2c], eax
jbe 0x10022ec0
mov ecx, dword [ecx + 0x30]
mov eax, dword [ecx + eax*4]
xor ebx, ebx
cmp eax, 0xffffffff
cmovne ebx, eax
jmp 0x10022f46
lea eax, [ebp - 0x20]
mov byte [eax], 0xb
xor edx, edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], 0xffffffff
sub esp, 0x24
mov dword [esp + 0x20], edx
movaps xmm0, xmmword [0x102c3360]
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], esi
call fcn.1003ff00
jmp 0x10022f87
mov dword [ebp - 0x24], esi
mov edi, eax
shr edi, 0x10
mov edx, eax
shr edx, 8
mov ebx, 0xff
mov esi, eax
and esi, ebx
and edx, ebx
and edi, ebx
mov ebx, eax
shr ebx, 0x18
mov dword [ebp - 0x30], esi
xor esi, 0x811c9dc5
imul esi, esi, 0x1000193
xor esi, edx
imul esi, esi, 0x1000193
xor esi, edi
imul esi, esi, 0x1000193
xor esi, ebx
imul ebx, esi, 0x1000193
and ebx, dword [ecx + 0x4c]
mov esi, dword [ecx + 0x38]
mov ecx, dword [ecx + 0x40]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ecx + ebx*8 + 4]
xor ebx, ebx
cmp ecx, esi
je 0x10022f40
and eax, 0xff000000
shl edi, 0x10
or edi, eax
shl edx, 8
or edx, edi
add edx, dword [ebp - 0x30]
cmp edx, dword [ecx + 8]
jne 0x10022fa6
mov edi, esi
mov esi, dword [ebp - 0x24]
jmp 0x10022fc2
mov esi, dword [ebp - 0x24]
mov edx, dword [ebp + 0x18]
mov al, byte [ebp + 0x10]
xor edi, edi
inc edi
movzx eax, al
lea ecx, [ebp - 0x20]
push edi
push edx
push eax
push ecx
call fcn.1004ca20
add esp, 0x10
lea eax, [ebx + 0x18]
test ebx, ebx
cmove eax, ebx
xor edx, edx
mov ecx, dword [ebp - 0x34]
push dword [ebp + 0x1c]
push edx
push edx
push edi
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 0xc]
push 0x1702
push esi
call fcn.1003ff00
mov edi, dword [ebp + 8]
add esi, 8
mov ecx, esi
push edi
call fcn.10089f30
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10212780
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret 0x18
mov edi, esi
mov eax, dword [ebp - 0x2c]
add eax, eax
mov esi, dword [ebp - 0x28]
mov eax, dword [esi + eax*4]
mov esi, dword [ebp - 0x24]
cmp ecx, eax
je 0x10022f43
mov ecx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
jne 0x10022fb6
cmp ecx, edi
mov edx, dword [ebp + 0x18]
mov al, byte [ebp + 0x10]
je 0x10022f49
mov ebx, dword [ecx + 0xc]
jmp 0x10022f49
Function at 0x100247c0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov edi, ecx
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1368]
cmp dword [ecx + 0x54], ebx
jbe 0x100247ef
mov eax, dword [ecx + 0x58]
mov eax, dword [eax + ebx*4]
xor ebx, ebx
cmp eax, 0xffffffff
cmovne ebx, eax
jmp 0x100248b0
mov dword [ebp - 0x14], edi
mov eax, ebx
shr eax, 0x18
mov dword [ebp - 0x10], eax
mov esi, ebx
shr esi, 0x10
mov edx, ebx
shr edx, 8
mov edi, ebx
mov eax, 0xff
and edi, eax
and edx, eax
and esi, eax
mov dword [ebp - 0x20], edi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
xor edi, edx
imul edi, edi, 0x1000193
xor edi, esi
imul edi, edi, 0x1000193
xor edi, dword [ebp - 0x10]
mov eax, ecx
imul ecx, edi, 0x1000193
and ecx, dword [eax + 0x74]
mov edi, dword [eax + 0x60]
mov dword [ebp - 0x10], eax
mov eax, dword [eax + 0x68]
mov dword [ebp - 0x18], eax
mov eax, dword [eax + ecx*8 + 4]
mov dword [ebp - 0x1c], edi
cmp eax, edi
je 0x10024877
and ebx, 0xff000000
shl esi, 0x10
or esi, ebx
shl edx, 8
or edx, esi
add edx, dword [ebp - 0x20]
cmp edx, dword [eax + 8]
jne 0x10024884
mov edi, dword [ebp - 0x14]
xor ebx, ebx
mov ecx, dword [ebp - 0x10]
jmp 0x100248a0
mov edi, dword [ebp - 0x14]
mov edx, dword [ebp + 0xc]
xor ebx, ebx
mov ecx, dword [ebp - 0x10]
jmp 0x100248b0
add ecx, ecx
mov esi, dword [ebp - 0x18]
mov esi, dword [esi + ecx*4]
mov edi, dword [ebp - 0x14]
xor ebx, ebx
mov ecx, dword [ebp - 0x10]
cmp eax, esi
je 0x100248ad
mov eax, dword [eax + 4]
cmp edx, dword [eax + 8]
jne 0x10024894
cmp eax, dword [ebp - 0x1c]
mov edx, dword [ebp + 0xc]
je 0x100248b0
mov ebx, dword [eax + 0xc]
jmp 0x100248b0
mov edx, dword [ebp + 0xc]
push edx
call fcn.10076790
mov ecx, ebx
push eax
push edi
call fcn.100573a0
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 8
Function at 0x10024a10
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edx, ecx
mov esi, dword [ebp + 8]
mov edi, dword [ecx + 0x1368]
cmp dword [edi + 0x54], esi
jbe 0x10024a34
mov eax, dword [edi + 0x58]
mov esi, dword [eax + esi*4]
jmp 0x10024ad7
mov dword [ebp - 0x10], edx
mov ebx, esi
shr ebx, 0x10
mov ecx, esi
shr ecx, 8
mov edx, 0xff
mov eax, esi
and eax, edx
and ecx, edx
and ebx, edx
mov edx, esi
shr edx, 0x18
mov dword [ebp - 0x18], eax
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
xor eax, ecx
imul eax, eax, 0x1000193
xor eax, ebx
imul eax, eax, 0x1000193
xor eax, edx
imul edx, eax, 0x1000193
and edx, dword [edi + 0x74]
mov eax, dword [edi + 0x60]
mov edi, dword [edi + 0x68]
mov dword [ebp - 0x14], edi
mov edi, dword [edi + edx*8 + 4]
cmp edi, eax
je 0x10024aa9
and esi, 0xff000000
shl ebx, 0x10
or ebx, esi
shl ecx, 8
or ecx, ebx
add ecx, dword [ebp - 0x18]
cmp ecx, dword [edi + 8]
jne 0x10024ab2
mov esi, eax
jmp 0x10024aad
mov esi, eax
xor edi, edi
mov edx, dword [ebp - 0x10]
jmp 0x10024acf
mov esi, eax
add edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x10]
cmp edi, eax
je 0x10024acd
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x10024abf
jmp 0x10024acf
xor edi, edi
test edi, edi
cmovne esi, edi
mov esi, dword [esi + 0xc]
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
cmp dword [esi + 0x158], 0
mov edi, dword [ebp + 0xc]
je 0x10024af8
mov ecx, esi
push edx
mov ebx, eax
call fcn.100599c0
mov eax, ebx
mov ebx, dword [ebp + 0x14]
mov ecx, esi
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push ebx
push eax
push edi
call fcn.1005bb30
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x1c
Function at 0x10024b20
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edx, ecx
mov esi, dword [ebp + 8]
mov edi, dword [ecx + 0x1368]
cmp dword [edi + 0x54], esi
jbe 0x10024b44
mov eax, dword [edi + 0x58]
mov esi, dword [eax + esi*4]
jmp 0x10024be7
mov dword [ebp - 0x10], edx
mov ebx, esi
shr ebx, 0x10
mov ecx, esi
shr ecx, 8
mov edx, 0xff
mov eax, esi
and eax, edx
and ecx, edx
and ebx, edx
mov edx, esi
shr edx, 0x18
mov dword [ebp - 0x18], eax
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
xor eax, ecx
imul eax, eax, 0x1000193
xor eax, ebx
imul eax, eax, 0x1000193
xor eax, edx
imul edx, eax, 0x1000193
and edx, dword [edi + 0x74]
mov eax, dword [edi + 0x60]
mov edi, dword [edi + 0x68]
mov dword [ebp - 0x14], edi
mov edi, dword [edi + edx*8 + 4]
cmp edi, eax
je 0x10024bb9
and esi, 0xff000000
shl ebx, 0x10
or ebx, esi
shl ecx, 8
or ecx, ebx
add ecx, dword [ebp - 0x18]
cmp ecx, dword [edi + 8]
jne 0x10024bc2
mov esi, eax
jmp 0x10024bbd
mov esi, eax
xor edi, edi
mov edx, dword [ebp - 0x10]
jmp 0x10024bdf
mov esi, eax
add edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x10]
cmp edi, eax
je 0x10024bdd
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x10024bcf
jmp 0x10024bdf
xor edi, edi
test edi, edi
cmovne esi, edi
mov esi, dword [esi + 0xc]
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
cmp dword [esi + 0x158], 0
mov edi, dword [ebp + 0xc]
je 0x10024c08
mov ecx, esi
push edx
mov ebx, eax
call fcn.100599c0
mov eax, ebx
mov ebx, dword [ebp + 0x14]
mov ecx, esi
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push ebx
push eax
push edi
call fcn.1005cc30
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x1c

Function at 0x10024c30
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
push eax
mov ebx, dword [ebp + 0x14]
mov esi, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov eax, dword [ecx + 0x1368]
cmp dword [eax + 0x54], edi
jbe 0x10024c5e
mov eax, dword [eax + 0x58]
mov eax, dword [eax + edi*4]
xor ecx, ecx
cmp eax, 0xffffffff
cmovne ecx, eax
jmp 0x10024cd7
mov ebx, edi
shr ebx, 0x10
mov ecx, edi
shr ecx, 8
mov esi, 0xff
mov edx, edi
and edx, esi
mov dword [ebp - 0x10], edx
and ecx, esi
and ebx, esi
mov esi, edi
shr esi, 0x18
mov edx, dword [ebp - 0x10]
xor edx, 0x811c9dc5
imul edx, edx, 0x1000193
xor edx, ecx
imul edx, edx, 0x1000193
xor edx, ebx
imul edx, edx, 0x1000193
xor edx, esi
imul edx, edx, 0x1000193
and edx, dword [eax + 0x74]
mov eax, dword [eax + 0x68]
mov eax, dword [eax + edx*8 + 4]
and edi, 0xff000000
shl ebx, 0x10
or ebx, edi
shl ecx, 8
or ecx, ebx
add ecx, dword [ebp - 0x10]
cmp ecx, dword [eax + 8]
je 0x10024ccb
mov eax, dword [eax + 4]
jmp 0x10024cc1
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0x14]
push ebx
push esi
push edx
call fcn.1005ba10
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x100251f0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov esi, ecx
mov edi, dword [ebp + 8]
mov ecx, dword [ecx + 0x1368]
cmp dword [ecx + 0x54], edi
jbe 0x10025246
mov eax, dword [ecx + 0x58]
mov ebx, dword [eax + edi*4]
xor eax, eax
cmp ebx, 0xffffffff
mov edi, ebx
cmove edi, eax
cmp byte [esi + 0x1fb9], 0
setne cl
cmp dword [ebp + 0xc], 0x91b1
sete dl
or dl, cl
cmove edi, eax
jne 0x10025335
cmp ebx, 0xffffffff
jne 0x1002531a
jmp 0x10025335
mov dword [ebp - 0x10], esi
mov edx, edi
shr edx, 0x10
mov eax, edi
shr eax, 8
mov esi, 0xff
mov ebx, edi
and ebx, esi
and eax, esi
and edx, esi
mov esi, edi
shr esi, 0x18
mov dword [ebp - 0x1c], ebx
xor ebx, 0x811c9dc5
imul ebx, ebx, 0x1000193
xor ebx, eax
imul ebx, ebx, 0x1000193
xor ebx, edx
imul ebx, ebx, 0x1000193
xor ebx, esi
imul ebx, ebx, 0x1000193
and ebx, dword [ecx + 0x74]
mov esi, dword [ecx + 0x60]
mov ecx, dword [ecx + 0x68]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ecx + ebx*8 + 4]
mov dword [ebp - 0x14], esi
cmp ecx, esi
je 0x100252df
add ebx, ebx
mov esi, dword [ebp - 0x18]
mov ebx, dword [esi + ebx*4]
and edi, 0xff000000
shl edx, 0x10
or edx, edi
shl eax, 8
or eax, edx
add eax, dword [ebp - 0x1c]
mov edx, dword [ecx + 8]
mov esi, ecx
cmp eax, edx
je 0x100252d5
mov esi, ecx
cmp esi, ebx
je 0x100252e6
mov esi, dword [esi + 4]
cmp eax, dword [esi + 8]
jne 0x100252c9
cmp esi, dword [ebp - 0x14]
je 0x100252e6
mov edi, dword [esi + 0xc]
jmp 0x100252e8
xor edi, edi
mov esi, dword [ebp - 0x10]
jmp 0x10025335
xor edi, edi
mov esi, dword [ebp - 0x10]
cmp dword [ebp + 0xc], 0x91b1
je 0x10025335
cmp byte [esi + 0x1fb9], 0
jne 0x10025335
cmp eax, edx
je 0x1002530d
cmp ecx, ebx
je 0x10025333
mov ecx, dword [ecx + 4]
cmp eax, dword [ecx + 8]
jne 0x10025301
mov edi, 0
cmp ecx, dword [ebp - 0x14]
je 0x10025335
mov ebx, dword [ecx + 0xc]
test ebx, ebx
je 0x10025333
cmp dword [ebx + 0x158], 0
je 0x1002532f
mov ecx, ebx
push esi
call fcn.100599c0
mov edi, ebx
jmp 0x10025335
xor edi, edi
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push edi
push esi
call fcn.100c23d0
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x10025390
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edx, ecx
mov esi, dword [ebp + 8]
mov edi, dword [ecx + 0x1368]
cmp dword [edi + 0x54], esi
jbe 0x100253b4
mov eax, dword [edi + 0x58]
mov esi, dword [eax + esi*4]
jmp 0x10025457
mov dword [ebp - 0x10], edx
mov ebx, esi
shr ebx, 0x10
mov ecx, esi
shr ecx, 8
mov edx, 0xff
mov eax, esi
and eax, edx
and ecx, edx
and ebx, edx
mov edx, esi
shr edx, 0x18
mov dword [ebp - 0x18], eax
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
xor eax, ecx
imul eax, eax, 0x1000193
xor eax, ebx
imul eax, eax, 0x1000193
xor eax, edx
imul edx, eax, 0x1000193
and edx, dword [edi + 0x74]
mov eax, dword [edi + 0x60]
mov edi, dword [edi + 0x68]
mov dword [ebp - 0x14], edi
mov edi, dword [edi + edx*8 + 4]
cmp edi, eax
je 0x10025429
and esi, 0xff000000
shl ebx, 0x10
or ebx, esi
shl ecx, 8
or ecx, ebx
add ecx, dword [ebp - 0x18]
cmp ecx, dword [edi + 8]
jne 0x10025432
mov esi, eax
jmp 0x1002542d
mov esi, eax
xor edi, edi
mov edx, dword [ebp - 0x10]
jmp 0x1002544f
mov esi, eax
add edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x10]
cmp edi, eax
je 0x1002544d
mov edi, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x1002543f
jmp 0x1002544f
xor edi, edi
test edi, edi
cmovne esi, edi
mov esi, dword [esi + 0xc]
mov eax, dword [ebp + 0x14]
mov ebx, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
cmp dword [esi + 0x158], 0
je 0x1002547c
mov ecx, esi
push edx
mov ebx, edi
mov edi, eax
call fcn.100599c0
mov eax, edi
mov edi, ebx
mov ebx, dword [ebp + 0x10]
mov ecx, dword [esi + 0xe4]
add ecx, 0x30
push eax
push ebx
push edi
call fcn.10053d20
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x10025630
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edx, dword [ebp + 8]
mov dword [ebp - 0x10], ecx
mov edi, dword [ecx + 0x1368]
cmp dword [edi + 0x54], edx
jbe 0x10025658
mov eax, dword [edi + 0x58]
mov edi, dword [eax + edx*4]
mov edx, dword [ebp - 0x10]
jmp 0x100256f1
mov ebx, edx
shr ebx, 0x10
mov eax, edx
shr eax, 8
mov ecx, 0xff
mov esi, edx
and esi, ecx
and eax, ecx
and ebx, ecx
mov ecx, edx
shr ecx, 0x18
mov dword [ebp - 0x18], esi
xor esi, 0x811c9dc5
imul esi, esi, 0x1000193
xor esi, eax
imul esi, esi, 0x1000193
xor esi, ebx
imul esi, esi, 0x1000193
xor esi, ecx
imul ecx, esi, 0x1000193
and ecx, dword [edi + 0x74]
mov esi, dword [edi + 0x60]
mov edi, dword [edi + 0x68]
mov dword [ebp - 0x14], edi
mov edi, dword [edi + ecx*8 + 4]
cmp edi, esi
je 0x100256e0
and edx, 0xff000000
shl ebx, 0x10
or ebx, edx
shl eax, 8
or eax, ebx
add eax, dword [ebp - 0x18]
cmp eax, dword [edi + 8]
je 0x100256e2
add ecx, ecx
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + ecx*4]
mov edx, dword [ebp - 0x10]
cmp edi, ecx
je 0x100256e7
mov edi, dword [edi + 4]
cmp eax, dword [edi + 8]
jne 0x100256d2
jmp 0x100256e9
xor edi, edi
mov edx, dword [ebp - 0x10]
jmp 0x100256e9
xor edi, edi
test edi, edi
cmovne esi, edi
mov edi, dword [esi + 0xc]
mov ebx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
cmp dword [edi + 0x158], 0
je 0x1002570b
mov ecx, edi
push edx
call fcn.100599c0
mov edx, dword [ebp - 0x10]
mov ecx, edi
push ebx
push esi
push edx
call fcn.1005e250
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x10025720
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edx, dword [ebp + 8]
mov dword [ebp - 0x10], ecx
mov edi, dword [ecx + 0x1368]
cmp dword [edi + 0x54], edx
jbe 0x10025748
mov eax, dword [edi + 0x58]
mov edi, dword [eax + edx*4]
mov edx, dword [ebp - 0x10]
jmp 0x100257e1
mov ebx, edx
shr ebx, 0x10
mov eax, edx
shr eax, 8
mov ecx, 0xff
mov esi, edx
and esi, ecx
and eax, ecx
and ebx, ecx
mov ecx, edx
shr ecx, 0x18
mov dword [ebp - 0x18], esi
xor esi, 0x811c9dc5
imul esi, esi, 0x1000193
xor esi, eax
imul esi, esi, 0x1000193
xor esi, ebx
imul esi, esi, 0x1000193
xor esi, ecx
imul ecx, esi, 0x1000193
and ecx, dword [edi + 0x74]
mov esi, dword [edi + 0x60]
mov edi, dword [edi + 0x68]
mov dword [ebp - 0x14], edi
mov edi, dword [edi + ecx*8 + 4]
cmp edi, esi
je 0x100257d0
and edx, 0xff000000
shl ebx, 0x10
or ebx, edx
shl eax, 8
or eax, ebx
add eax, dword [ebp - 0x18]
cmp eax, dword [edi + 8]
je 0x100257d2
add ecx, ecx
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + ecx*4]
mov edx, dword [ebp - 0x10]
cmp edi, ecx
je 0x100257d7
mov edi, dword [edi + 4]
cmp eax, dword [edi + 8]
jne 0x100257c2
jmp 0x100257d9
xor edi, edi
mov edx, dword [ebp - 0x10]
jmp 0x100257d9
xor edi, edi
test edi, edi
cmovne esi, edi
mov edi, dword [esi + 0xc]
mov ebx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
cmp dword [edi + 0x158], 0
je 0x100257fb
mov ecx, edi
push edx
call fcn.100599c0
mov edx, dword [ebp - 0x10]
mov ecx, edi
push ebx
push esi
push edx
call fcn.1005e4e0
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x10025a20
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov edx, dword [ebp + 8]
test edx, edx
je 0x10025a4e
mov ecx, dword [ecx + 0x1368]
cmp dword [ecx + 0x54], edx
jbe 0x10025a55
mov eax, dword [ecx + 0x58]
mov eax, dword [eax + edx*4]
xor ecx, ecx
cmp eax, 0xffffffff
cmovne ecx, eax
jmp 0x10025aeb
xor eax, eax
jmp 0x10025af0
mov ebx, edx
shr ebx, 0x10
mov eax, edx
shr eax, 8
mov esi, 0xff
mov edi, edx
and edi, esi
and eax, esi
and ebx, esi
mov esi, edx
shr esi, 0x18
mov dword [ebp - 0x1c], edi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
xor edi, eax
imul edi, edi, 0x1000193
xor edi, ebx
imul edi, edi, 0x1000193
xor edi, esi
imul esi, edi, 0x1000193
and esi, dword [ecx + 0x74]
mov edi, dword [ecx + 0x60]
mov ecx, dword [ecx + 0x68]
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], ecx
mov esi, dword [ecx + esi*8 + 4]
xor ecx, ecx
mov dword [ebp - 0x18], edi
cmp esi, edi
je 0x10025aeb
and edx, 0xff000000
shl ebx, 0x10
or ebx, edx
shl eax, 8
or eax, ebx
add eax, dword [ebp - 0x1c]
cmp eax, dword [esi + 8]
je 0x10025ae3
mov edx, dword [ebp - 0x14]
add edx, edx
mov edi, dword [ebp - 0x10]
mov edx, dword [edi + edx*4]
cmp esi, edx
je 0x10025aeb
mov esi, dword [esi + 4]
cmp eax, dword [esi + 8]
jne 0x10025ad7
cmp esi, dword [ebp - 0x18]
je 0x10025aeb
mov ecx, dword [esi + 0xc]
test ecx, ecx
setne al
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret 4

Function at 0x10025b00
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov edx, dword [ebp + 8]
test edx, edx
je 0x10025b2e
mov ecx, dword [ecx + 0x136c]
cmp dword [ecx + 0x2c], edx
jbe 0x10025b35
mov eax, dword [ecx + 0x30]
mov eax, dword [eax + edx*4]
xor ecx, ecx
cmp eax, 0xffffffff
cmovne ecx, eax
jmp 0x10025bcb
xor eax, eax
jmp 0x10025bd0
mov ebx, edx
shr ebx, 0x10
mov eax, edx
shr eax, 8
mov esi, 0xff
mov edi, edx
and edi, esi
and eax, esi
and ebx, esi
mov esi, edx
shr esi, 0x18
mov dword [ebp - 0x1c], edi
xor edi, 0x811c9dc5
imul edi, edi, 0x1000193
xor edi, eax
imul edi, edi, 0x1000193
xor edi, ebx
imul edi, edi, 0x1000193
xor edi, esi
imul esi, edi, 0x1000193
and esi, dword [ecx + 0x4c]
mov edi, dword [ecx + 0x38]
mov ecx, dword [ecx + 0x40]
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], ecx
mov esi, dword [ecx + esi*8 + 4]
xor ecx, ecx
mov dword [ebp - 0x18], edi
cmp esi, edi
je 0x10025bcb
and edx, 0xff000000
shl ebx, 0x10
or ebx, edx
shl eax, 8
or eax, ebx
add eax, dword [ebp - 0x1c]
cmp eax, dword [esi + 8]
je 0x10025bc3
mov edx, dword [ebp - 0x14]
add edx, edx
mov edi, dword [ebp - 0x10]
mov edx, dword [edi + edx*4]
cmp esi, edx
je 0x10025bcb
mov esi, dword [esi + 4]
cmp eax, dword [esi + 8]
jne 0x10025bb7
cmp esi, dword [ebp - 0x18]
je 0x10025bcb
mov ecx, dword [esi + 0xc]
test ecx, ecx
setne al
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret 4