joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100a8f20
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 4], edi
test esi, esi
jns 0x100a8f86
push esi
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.EncodeAddress_was_passed_a_negative_address:
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.1004fd10
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100a90b5
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebp + 0xc]
cmp esi, ecx
jl 0x100a8fda
push ecx
push ecx
push esi
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.EncodeAddress_was_called_with_address__
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.1004fd10
mov edx, str.____here_address__
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.1004fd10
mov edx, 0x100fdbfc
mov ecx, eax
call fcn.100146e0
jmp 0x100a8f5c
mov ebx, dword [edi + 4]
test ebx, ebx
jle 0x100a9030
shl ebx, 8
mov eax, esi
cdq
idiv ebx
mov eax, dword [edi + 0x18]
mov ebx, edx
cmp dword [eax + ebx*4], esi
jne 0x100a9030
push esi
mov ecx, edi
call fcn.100a8ee0
mov ecx, ebx
and ecx, 0x800000ff
jns 0x100a900d
dec ecx
or ecx, 0xffffff00
inc ecx
mov eax, dword [ebp + 0x10]
mov dword [eax], ecx
mov eax, ebx
mov cl, byte [edi]
cdq
add cl, 2
and edx, 0xff
add eax, edx
sar eax, 8
add eax, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
sub ecx, esi
mov dword [ebp + 8], esi
xor bl, bl
cmp ecx, esi
jge 0x100a9040
mov bl, 1
mov dword [ebp + 8], ecx
mov eax, dword [edi]
xor ecx, ecx
mov dword [ebp + 0xc], eax
test eax, eax
jle 0x100a908d
mov eax, dword [edi + 0xc]
mov edx, eax
mov edi, dword [ebp + 8]
mov dword [ebp - 8], eax
mov eax, esi
sub eax, dword [edx]
js 0x100a9065
cmp eax, edi
jge 0x100a9065
lea ebx, [ecx + 2]
mov edi, eax
mov eax, dword [ebp + 0xc]
inc ecx
add edx, 4
cmp ecx, eax
jl 0x100a9056
mov dword [ebp + 8], edi
mov edi, dword [ebp - 4]
test eax, eax
jle 0x100a908d
mov eax, dword [edi + 8]
mov ecx, dword [ebp - 8]
mov dword [ecx + eax*4], esi
mov eax, dword [edi + 8]
inc eax
cdq
idiv dword [edi]
mov dword [edi + 8], edx
mov ecx, dword [edi + 4]
test ecx, ecx
jle 0x100a90a2
mov eax, esi
shl ecx, 8
cdq
idiv ecx
mov ecx, dword [edi + 0x18]
mov dword [ecx + edx*4], esi
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], eax
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3
Function at 0x100a90d0
Capabilities:
Terminate process

Disassembly:
push ecx
test ecx, ecx
jns 0x100a911e
push ecx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Decoded_address
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.1004fd10
mov edx, str._is_invalid
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100a916c
xor al, al
pop ecx
ret
cmp ecx, edx
jl 0x100a9168
push edx
push ecx
push ecx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Decoded_address__
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.1004fd10
mov edx, str.__is_beyond_location_in_target_file__
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.1004fd10
mov edx, 0x100fdbfc
jmp 0x100a9101
mov al, 1
pop ecx
ret
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3
Function at 0x100a9180
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
mov dword [ebp - 4], esi
push edi
test eax, eax
jns 0x100a91d7
push eax
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.DecodeAddress_was_passed_a_negative_value_for_here_address:
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.1004fd10
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
je 0x100a931b
jmp 0x100a9335
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov edi, dword [edi]
mov dword [ebp - 8], edi
cmp edi, ecx
jae 0x100a9327
mov dl, byte [esi]
mov bl, byte [ebp + 0xc]
mov bh, dl
add bh, 2
cmp bl, bh
jb 0x100a9221
mov al, byte [esi + 4]
inc al
add al, dl
cmp bl, al
ja 0x100a9221
mov cl, byte [edi]
inc edi
movzx eax, bh
movzx edx, bl
mov ebx, dword [ebp - 4]
sub edx, eax
movzx eax, cl
shl edx, 8
add edx, eax
mov eax, dword [esi + 0x18]
mov esi, dword [eax + edx*4]
jmp 0x100a9277
lea edx, [ebp - 8]
call fcn.100af020
mov esi, eax
cmp esi, 0xfffffffe
je 0x100a9327
cmp esi, 0xffffffff
je 0x100a92f2
test bl, bl
jne 0x100a9246
mov ebx, dword [ebp - 4]
jmp 0x100a9274
cmp bl, 1
jne 0x100a925c
mov edx, dword [ebp + 8]
mov eax, edx
mov edi, dword [ebp - 8]
sub eax, esi
mov ebx, dword [ebp - 4]
mov esi, eax
jmp 0x100a927a
cmp bl, 2
jb 0x100a92a1
cmp bl, bh
jae 0x100a92a1
movzx ecx, bl
mov ebx, dword [ebp - 4]
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + ecx*4 - 8]
add esi, eax
mov edi, dword [ebp - 8]
mov edx, dword [ebp + 8]
mov ecx, esi
call fcn.100a90d0
test al, al
je 0x100a931b
mov eax, dword [ebp + 0x10]
mov ecx, ebx
push esi
mov dword [eax], edi
call fcn.100a8ee0
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [ebp - 4]
mov edx, str.ERROR:
mov eax, dword [ecx + 4]
inc al
add al, byte [ecx]
movzx eax, al
push eax
push ecx
movzx eax, bl
push eax
push ecx
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Invalid_mode_value__
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.1004fd10
mov edx, str.__passed_to_DecodeAddress__maximum_mode_value_
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.1004fd10
jmp 0x100a930d
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Found_invalid_variable_length_integer_as_encoded_address_value
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
call fcn.1009dcb0
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
pop edi
pop esi
mov eax, 0xfffffffe
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3
Function at 0x100a9670
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, ecx
mov ecx, dword [ebp + 8]
mov eax, dword [esi + 4]
mov edx, dword [esi + 8]
sub eax, edx
cmp ecx, eax
jbe 0x100a96e1
push eax
push ecx
push ecx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Internal_error:_position_advanced_by
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.10011a30
mov edx, str._bytes__current_unparsed_size
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.10011a30
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100a96ec
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
pop esi
pop ebp
ret 4
lea eax, [edx + ecx]
mov dword [esi + 8], eax
pop esi
pop ebp
ret 4
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3

Function at 0x100a9700
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [ebp + 8]
mov ebx, dword [esi]
cmp edi, ebx
jae 0x100a9768
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Internal_error:_new_data_position
mov ecx, eax
call fcn.100146e0
mov edx, edi
mov ecx, eax
call fcn.100146e0
mov edx, str._is_beyond_start_of_data
mov ecx, eax
call fcn.100146e0
mov edx, ebx
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100a97d1
mov eax, dword [esi]
mov dword [esi + 8], eax
pop edi
pop esi
pop ebx
pop ebp
ret 4
mov ebx, dword [esi + 4]
cmp edi, ebx
jbe 0x100a97c7
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Internal_error:_new_data_position
mov ecx, eax
call fcn.100146e0
mov edx, edi
mov ecx, eax
call fcn.100146e0
mov edx, str._is_beyond_end_of_data
mov ecx, eax
call fcn.100146e0
mov edx, ebx
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100a97e2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
pop edi
pop esi
pop ebx
pop ebp
ret 4
mov dword [esi + 8], edi
pop edi
pop esi
pop ebx
pop ebp
ret 4
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3

Function at 0x100a9800
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 8]
push esi
mov esi, ecx
mov eax, dword [esi + 4]
mov ecx, eax
sub ecx, dword [esi + 8]
cmp edx, ecx
jbe 0x100a9871
push ecx
push ecx
push edx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Internal_error:_specified_number_of_remaining_bytes
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.10011a30
mov edx, str._is_greater_than_unparsed_data_size
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.10011a30
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100a987b
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
pop esi
pop ebp
ret 4
sub eax, edx
mov dword [esi + 8], eax
pop esi
pop ebp
ret 4
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3
Function at 0x100a9890
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov esi, ecx
cmp dword [esi + 0xc], 0
jne 0x100a9918
mov ecx, dword [esi + 4]
lea edx, [esi + 8]
call fcn.100af020
cmp eax, 0xfffffffe
je 0x100a9911
cmp eax, 0xffffffff
je 0x100a98bf
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov al, 1
pop esi
pop ecx
pop ebp
ret 8
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Expected
mov ecx, eax
call fcn.100146e0
mov edx, dword [ebp + 8]
mov ecx, eax
call fcn.100146e0
mov edx, str.__found_invalid_variable_length_integer
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100a9920
mov dword [esi + 0xc], 0xffffffff
xor al, al
pop esi
pop ecx
pop ebp
ret 8
mov dword [esi + 0xc], 0xfffffffe
xor al, al
pop esi
pop ecx
pop ebp
ret 8
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3

Function at 0x100a9940
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov esi, ecx
cmp dword [esi + 0xc], 0
jne 0x100a99e2
mov ecx, dword [esi + 4]
lea edx, [esi + 8]
call fcn.100af190
mov ecx, eax
cmp ecx, 0xfffffffe
jne 0x100a9973
cmp edx, 0xffffffff
jne 0x100a9973
mov dword [esi + 0xc], eax
xor al, al
pop esi
pop ecx
pop ebp
ret 8
and eax, edx
cmp eax, 0xffffffff
je 0x100a99f7
test edx, edx
jl 0x100a99ea
jg 0x100a9985
cmp ecx, 0xffffffff
jbe 0x100a99ea
push edx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Value_of
mov ecx, eax
call fcn.100146e0
mov edx, str.Adler32_checksum_value
mov ecx, eax
call fcn.100146e0
mov edx, 0x101195a8
mov ecx, eax
call fcn.100146e0
mov ecx, eax
call fcn.100a9fd0
mov edx, str.__is_too_large_for_unsigned_32_bit_integer
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
call fcn.1009dcb0
mov dword [esi + 0xc], 0xffffffff
xor al, al
pop esi
pop ecx
pop ebp
ret 8
mov eax, dword [ebp + 0xc]
pop esi
mov dword [eax], ecx
mov al, 1
pop ecx
pop ebp
ret 8
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Expected
mov ecx, eax
call fcn.100146e0
mov edx, str.Adler32_checksum_value
mov ecx, eax
call fcn.100146e0
mov edx, str.__found_invalid_variable_length_integer
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
je 0x100a99db
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3
Function at 0x100a9a50
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push str.source_segment_length
mov edi, ecx
call fcn.100a9890
test al, al
je 0x100a9bb1
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebp - 4]
mov esi, dword [ebp + 8]
mov dword [ebx], eax
cmp eax, esi
jbe 0x100a9b03
push esi
push ecx
push eax
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Source_segment_length__
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.10011a30
mov edx, str.__is_larger_than
mov ecx, eax
call fcn.100146e0
mov edx, dword [ebp + 0x10]
mov ecx, eax
call fcn.100146e0
mov edx, 0x100fdc00
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.10011a30
mov edx, 0x100fdbfc
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
je 0x100a9baa
jmp 0x100a9bec
lea eax, [ebp + 0x14]
mov dword [ebp + 0x14], 0
push eax
push str.source_segment_position
mov ecx, edi
call fcn.100a9890
test al, al
je 0x100a9bb1
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov dword [eax], ecx
cmp ecx, esi
jb 0x100a9bbc
cmp dword [ebx], 0
jbe 0x100a9bbc
push esi
push ecx
push ecx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Source_segment_position__
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.10011a30
mov edx, str.__is_past
mov ecx, eax
call fcn.100146e0
mov edx, dword [ebp + 0xc]
mov ecx, eax
call fcn.100146e0
mov edx, 0x100fdc00
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.10011a30
mov edx, 0x100fdbfc
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
call fcn.1009dcb0
mov dword [edi + 0xc], 0xffffffff
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov eax, dword [ebx]
add eax, ecx
cmp eax, esi
jbe 0x100a9be1
push esi
push ecx
push eax
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Source_segment_end_position__
jmp 0x100a9b53
pop edi
pop esi
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3
Function at 0x100a9c00
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
mov edi, ecx
cmp dword [edi + 0xc], 0
jne 0x100a9c1e
mov eax, dword [edi + 4]
mov ecx, dword [edi + 8]
sub eax, ecx
jne 0x100a9c26
mov dword [edi + 0xc], 0xfffffffe
xor al, al
pop edi
pop esi
pop ebp
ret 0x18
mov esi, dword [ebp + 0x14]
mov al, byte [ecx]
mov ecx, edi
push 1
mov byte [esi], al
call fcn.100a9670
movzx eax, byte [esi]
and eax, 3
dec eax
je 0x100a9cde
dec eax
je 0x100a9c80
dec eax
je 0x100a9c51
mov al, 1
pop edi
pop esi
pop ebp
ret 0x18
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Win_Indicator_must_not_have_both_VCD_SOURCE_and_VCD_TARGET_set
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
je 0x100a9caf
jmp 0x100a9cfe
cmp byte [ebp + 0x10], 0
jne 0x100a9cbe
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Delta_file_contains_VCD_TARGET_flag__which_is_not_allowed_by_current_decoder_settings
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
call fcn.1009dcb0
mov dword [edi + 0xc], 0xffffffff
xor al, al
pop edi
pop esi
pop ebp
ret 0x18
push dword [ebp + 0x1c]
mov ecx, edi
push dword [ebp + 0x18]
push str.target_file
push str.current_target_position
push dword [ebp + 0xc]
call fcn.100a9a50
pop edi
pop esi
pop ebp
ret 0x18
push dword [ebp + 0x1c]
mov ecx, edi
push dword [ebp + 0x18]
push str.dictionary
push str.end_of_dictionary
push dword [ebp + 8]
call fcn.100a9a50
pop edi
pop esi
pop ebp
ret 0x18
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3

Function at 0x100a9d10
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push esi
mov esi, ecx
cmp dword [esi + 0x14], 0
je 0x100a9d5c
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Internal_error:_VCDiffHeaderParser::ParseWindowLengths_was_called_twice_for_the_same_delta_window
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100a9dad
mov dword [esi + 0xc], 0xffffffff
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push str.length_of_the_delta_encoding
call fcn.100a9890
test al, al
je 0x100a9d53
mov eax, dword [ebp - 4]
mov ecx, esi
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
mov dword [esi + 0x14], eax
lea eax, [ebp - 4]
push eax
push str.size_of_the_target_window
mov dword [ebp - 4], 0
call fcn.100a9890
test al, al
je 0x100a9d53
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 4]
pop esi
mov dword [ecx], eax
mov al, 1
mov esp, ebp
pop ebp
ret 4
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3

Function at 0x100a9dc0
Capabilities:
Terminate process

Disassembly:
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Internal_error:_VCDiffHeaderParser::GetDeltaWindowEnd_was_called_before_ParseWindowLengths
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100a9df2
xor eax, eax
pop ecx
ret
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3
Function at 0x100a9e10
Capabilities:
Terminate process

Disassembly:
push ecx
push ebx
push esi
mov esi, ecx
cmp dword [esi + 0xc], 0
jne 0x100a9e2c
mov eax, dword [esi + 4]
mov ecx, dword [esi + 8]
sub eax, ecx
jne 0x100a9e32
mov dword [esi + 0xc], 0xfffffffe
xor al, al
pop esi
pop ebx
pop ecx
ret
mov bl, byte [ecx]
mov ecx, esi
push 1
call fcn.100a9670
test bl, 7
je 0x100a9e7c
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Secondary_compression_of_delta_file_sections_is_not_supported
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100a9e82
mov dword [esi + 0xc], 0xffffffff
xor al, al
pop esi
pop ebx
pop ecx
ret
pop esi
mov al, 1
pop ebx
pop ecx
ret
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3

Function at 0x100a9ea0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push str.length_of_data_for_ADDs_and_RUNs
mov esi, ecx
call fcn.100a9890
mov ebx, dword [ebp + 0xc]
test al, al
je 0x100a9ecc
mov eax, dword [ebp - 4]
mov dword [ebx], eax
lea eax, [ebp + 0xc]
mov dword [ebp + 0xc], 0
push eax
push str.length_of_instructions_section
mov ecx, esi
call fcn.100a9890
mov edi, dword [ebp + 0x10]
test al, al
je 0x100a9eef
mov eax, dword [ebp + 0xc]
mov dword [edi], eax
lea eax, [ebp + 0xc]
mov dword [ebp + 0xc], 0
push eax
push str.length_of_addresses_for_COPYs
mov ecx, esi
call fcn.100a9890
test al, al
je 0x100a9f12
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 0xc]
mov dword [ecx], eax
cmp byte [ebp + 8], 0
je 0x100a9f37
lea eax, [ebp + 8]
mov dword [ebp + 8], 0
push eax
push ecx
mov ecx, esi
call fcn.100a9940
test al, al
je 0x100a9f37
mov ecx, dword [ebp + 0x18]
mov eax, dword [ebp + 8]
mov dword [ecx], eax
cmp dword [esi + 0xc], 0
jne 0x100a9f78
mov ecx, dword [esi + 0x14]
test ecx, ecx
jne 0x100a9f83
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Internal_error:_VCDiffHeaderParser::ParseSectionLengths_was_called_before_ParseWindowLengths
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100a9fb7
mov dword [esi + 0xc], 0xffffffff
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov eax, dword [esi + 8]
sub eax, ecx
mov ecx, dword [ebp + 0x14]
add eax, dword [ebx]
add eax, dword [edi]
add eax, dword [ecx]
cmp dword [esi + 0x10], eax
je 0x100a9fac
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.The_length_of_the_delta_encoding_does_not_match_the_size_of_the_header_plus_the_sizes_of_the_data_sections
jmp 0x100a9f58
pop edi
pop esi
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3
Function at 0x100aa1a0
Capabilities:
Terminate process

Disassembly:
push esi
mov esi, ecx
cmp dword [esi + 8], 0
je 0x100aa1da
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Init___called_twice_for_same_VCDiffEngine_object
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
jne 0x100aa20a
xor al, al
pop esi
ret
mov edx, dword [esi + 4]
mov ecx, dword [esi]
call fcn.100af610
mov dword [esi + 8], eax
test eax, eax
jne 0x100aa201
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Creation_of_dictionary_hash_failed
jmp 0x100aa1bd
call fcn.100aa220
mov al, 1
pop esi
ret
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3
Function at 0x100aa290
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
mov ebx, ecx
push esi
push edi
mov dword [ebp - 8], ebx
cmp dword [ebx + 8], 0
jne 0x100aa2da
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Internal_error:_VCDiffEngine::Encode___called_before_VCDiffEngine::Init__
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
je 0x100aa43a
jmp 0x100aa443
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x100aa43a
cmp esi, 0x10
jae 0x100aa30f
mov edi, dword [ebp + 0x14]
test esi, esi
je 0x100aa2fc
mov eax, dword [edi]
mov ecx, edi
push esi
push dword [ebp + 8]
call dword [eax + 0xc]
mov eax, dword [edi]
mov ecx, edi
push dword [ebp + 0x10]
call dword [eax + 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [ebp + 0xf]
call fcn.100aa590
push dword [ebx + 4]
mov ebx, dword [ebp + 8]
mov edx, esi
mov ecx, ebx
call fcn.100af6d0
add esp, 4
mov dword [ebp + 0xc], eax
test eax, eax
jne 0x100aa362
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.Instantiation_of_target_hash_failed
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
call fcn.1009dcb0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea eax, [ebx + esi]
mov ecx, ebx
mov dword [ebp - 4], eax
mov esi, ebx
mov edi, ebx
call fcn.100aa5e0
mov ebx, eax
mov edx, dword [ebp + 0xc]
push dword [ebp + 0x14]
mov ecx, dword [ebp - 4]
push edx
sub ecx, esi
push ecx
mov ecx, dword [ebp - 8]
push esi
push edi
push ebx
call fcn.100aa630
mov ecx, dword [ebp - 4]
test eax, eax
je 0x100aa3b8
add esi, eax
lea eax, [ecx - 0x10]
mov edi, esi
cmp esi, eax
ja 0x100aa40d
mov ecx, esi
call fcn.100aa5e0
mov ecx, dword [ebp + 0xc]
mov ebx, eax
mov eax, esi
sub eax, dword [ebp + 8]
push eax
call fcn.100afa90
jmp 0x100aa375
lea eax, [edi + 1]
add ecx, 0xfffffff0
mov dword [ebp - 0xc], eax
cmp eax, ecx
ja 0x100aa40a
mov edx, dword [ebp + 0xc]
mov eax, edi
sub eax, dword [ebp + 8]
mov ecx, dword [edx + 0x34]
inc ecx
shl ecx, 4
cmp eax, ecx
jne 0x100aa3e3
push ebx
mov ecx, edx
call fcn.100af8e0
mov edx, dword [ebp + 0xc]
movzx ecx, byte [edi]
mov eax, dword [0x100f1a3c]
mov eax, dword [eax + ecx*4]
add eax, ebx
imul ebx, eax, 0x101
movzx eax, byte [edi + 0x10]
mov edi, dword [ebp - 0xc]
add ebx, eax
and ebx, 0x7fffff
jmp 0x100aa378
mov ecx, dword [ebp - 4]
mov ebx, dword [ebp + 0x14]
sub ecx, esi
je 0x100aa41d
mov eax, dword [ebx]
push ecx
push esi
mov ecx, ebx
call dword [eax + 0xc]
mov eax, dword [ebx]
mov ecx, ebx
push dword [ebp + 0x10]
call dword [eax + 0x1c]
mov ebx, dword [ebp + 0xc]
mov ecx, ebx
call fcn.100af420
push ebx
call fcn.100b4c76
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3