joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800a6590
Capabilities:
Create thread

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rcx
cmp edx, 1
jne 0x1800a65e1
lea rcx, [0x18017d5d0]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor eax, eax
lea r8, [0x1800a6510]
mov qword [rsp + 0x28], rax
mov r9, rbx
xor edx, edx
mov dword [rsp + 0x20], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x1800a65e1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
add rsp, 0x30
pop rbx
ret

Function at 0x1800a65f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b14], edx
jle 0x1800a66cf
lea rcx, [0x180229b14]
call fcn.18017dd34
cmp dword [0x180229b14], 0xffffffff
jne 0x1800a66cf
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a66bc
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a6662
mov rdx, r11
test rax, rax
je 0x1800a66a0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a6680
cmp r9d, 0x7a1c884e
je 0x1800a66a9
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a664f
lea r8, str.m_lifeState
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229adc], r11d
lea rcx, [0x180229b14]
call fcn.18017dcd4
movsxd rax, dword [0x180229adc]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800a66f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229af0], edx
jle 0x1800a67cf
lea rcx, [0x180229af0]
call fcn.18017dd34
cmp dword [0x180229af0], 0xffffffff
jne 0x1800a67cf
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a67bc
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a6762
mov rdx, r11
test rax, rax
je 0x1800a67a0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a6780
cmp r9d, 0x7c5cc931
je 0x1800a67a9
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a674f
lea r8, str.m_nPlayerCond
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b18], r11d
lea rcx, [0x180229af0]
call fcn.18017dcd4
movsxd rax, dword [0x180229b18]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800a67e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229ae8], edx
jle 0x1800a68bf
lea rcx, [0x180229ae8]
call fcn.18017dd34
cmp dword [0x180229ae8], 0xffffffff
jne 0x1800a68bf
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a68ac
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a6852
mov rdx, r11
test rax, rax
je 0x1800a6890
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a6870
cmp r9d, 0x7c5cc931
je 0x1800a6899
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a683f
lea r8, str.m_bFeignDeathReady
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229aec], r11d
lea rcx, [0x180229ae8]
call fcn.18017dcd4
movsxd rax, dword [0x180229aec]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800a68d0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229ae4], edx
jle 0x1800a69af
lea rcx, [0x180229ae4]
call fcn.18017dd34
cmp dword [0x180229ae4], 0xffffffff
jne 0x1800a69af
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a699c
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a6942
mov rdx, r11
test rax, rax
je 0x1800a6980
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a6960
cmp r9d, 0x7c5cc931
je 0x1800a6989
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a692f
lea r8, str.m_nPlayerCondEx2
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b00], r11d
lea rcx, [0x180229ae4]
call fcn.18017dcd4
movsxd rax, dword [0x180229b00]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800a7350
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b98], edx
jle 0x1800a742f
lea rcx, [0x180229b98]
call fcn.18017dd34
cmp dword [0x180229b98], 0xffffffff
jne 0x1800a742f
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a741c
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a73c2
mov rdx, r11
test rax, rax
je 0x1800a7400
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a73e0
cmp r9d, 0x9dc483b8
je 0x1800a7409
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a73af
lea r8, str.m_vecOrigin
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b8c], r11d
lea rcx, [0x180229b98]
call fcn.18017dcd4
movsxd rax, dword [0x180229b8c]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800a7440
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b54], edx
jle 0x1800a751f
lea rcx, [0x180229b54]
call fcn.18017dd34
cmp dword [0x180229b54], 0xffffffff
jne 0x1800a751f
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a750c
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a74b2
mov rdx, r11
test rax, rax
je 0x1800a74f0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a74d0
cmp r9d, 0x9dc483b8
je 0x1800a74f9
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a749f
lea r8, str.m_iTeamNum
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b60], r11d
lea rcx, [0x180229b54]
call fcn.18017dcd4
movsxd rax, dword [0x180229b60]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800a7530
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b9c], edx
jle 0x1800a760f
lea rcx, [0x180229b9c]
call fcn.18017dd34
cmp dword [0x180229b9c], 0xffffffff
jne 0x1800a760f
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a75fc
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a75a2
mov rdx, r11
test rax, rax
je 0x1800a75e0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a75c0
cmp r9d, 0x9dc483b8
je 0x1800a75e9
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a758f
lea r8, str.m_vecMins
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b48], r11d
lea rcx, [0x180229b9c]
call fcn.18017dcd4
movsxd rax, dword [0x180229b48]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800a7620
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b4c], edx
jle 0x1800a76ff
lea rcx, [0x180229b4c]
call fcn.18017dd34
cmp dword [0x180229b4c], 0xffffffff
jne 0x1800a76ff
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a76ec
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a7692
mov rdx, r11
test rax, rax
je 0x1800a76d0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a76b0
cmp r9d, 0x9dc483b8
je 0x1800a76d9
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a767f
lea r8, str.m_vecMaxs
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b78], r11d
lea rcx, [0x180229b4c]
call fcn.18017dcd4
movsxd rax, dword [0x180229b78]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800a7710
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b1c], edx
jle 0x1800a77ef
lea rcx, [0x180229b1c]
call fcn.18017dd34
cmp dword [0x180229b1c], 0xffffffff
jne 0x1800a77ef
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a77dc
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a7782
mov rdx, r11
test rax, rax
je 0x1800a77c0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a77a0
cmp r9d, 0x7a1c884e
je 0x1800a77c9
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a776f
lea r8, str.m_vecViewOffset_0_
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b5c], r11d
lea rcx, [0x180229b1c]
call fcn.18017dcd4
movsxd rax, dword [0x180229b5c]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800a7800
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b6c], edx
jle 0x1800a78df
lea rcx, [0x180229b6c]
call fcn.18017dd34
cmp dword [0x180229b6c], 0xffffffff
jne 0x1800a78df
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a78cc
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a7872
mov rdx, r11
test rax, rax
je 0x1800a78b0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a7890
cmp r9d, 0x7a1c884e
je 0x1800a78b9
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a785f
lea r8, str.m_fFlags
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b90], r11d
lea rcx, [0x180229b6c]
call fcn.18017dcd4
movsxd rax, dword [0x180229b90]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800a78f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b7c], edx
jle 0x1800a79cf
lea rcx, [0x180229b7c]
call fcn.18017dd34
cmp dword [0x180229b7c], 0xffffffff
jne 0x1800a79cf
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a79bc
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a7962
mov rdx, r11
test rax, rax
je 0x1800a79a0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a7980
cmp r9d, 0x7c5cc931
je 0x1800a79a9
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a794f
lea r8, str.m_iClass
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b44], r11d
lea rcx, [0x180229b7c]
call fcn.18017dcd4
movsxd rax, dword [0x180229b44]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800a79e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b74], edx
jle 0x1800a7abf
lea rcx, [0x180229b74]
call fcn.18017dd34
cmp dword [0x180229b74], 0xffffffff
jne 0x1800a7abf
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a7aac
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a7a52
mov rdx, r11
test rax, rax
je 0x1800a7a90
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a7a70
cmp r9d, 0x7c5cc931
je 0x1800a7a99
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a7a3f
lea r8, str._condition_bits
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b94], r11d
lea rcx, [0x180229b74]
call fcn.18017dcd4
movsxd rax, dword [0x180229b94]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800a7ad0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b40], edx
jle 0x1800a7baf
lea rcx, [0x180229b40]
call fcn.18017dd34
cmp dword [0x180229b40], 0xffffffff
jne 0x1800a7baf
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a7b9c
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a7b42
mov rdx, r11
test rax, rax
je 0x1800a7b80
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a7b60
cmp r9d, 0x7c5cc931
je 0x1800a7b89
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a7b2f
lea r8, str.m_nPlayerCondEx
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b88], r11d
lea rcx, [0x180229b40]
call fcn.18017dcd4
movsxd rax, dword [0x180229b88]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800a7bc0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b30], edx
jle 0x1800a7c9f
lea rcx, [0x180229b30]
call fcn.18017dd34
cmp dword [0x180229b30], 0xffffffff
jne 0x1800a7c9f
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a7c8c
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a7c32
mov rdx, r11
test rax, rax
je 0x1800a7c70
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a7c50
cmp r9d, 0x7c5cc931
je 0x1800a7c79
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a7c1f
lea r8, str.m_nPlayerCondEx3
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b80], r11d
lea rcx, [0x180229b30]
call fcn.18017dcd4
movsxd rax, dword [0x180229b80]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800a7cb0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b70], edx
jle 0x1800a7d8f
lea rcx, [0x180229b70]
call fcn.18017dd34
cmp dword [0x180229b70], 0xffffffff
jne 0x1800a7d8f
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a7d7c
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a7d22
mov rdx, r11
test rax, rax
je 0x1800a7d60
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a7d40
cmp r9d, 0x7c5cc931
je 0x1800a7d69
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a7d0f
lea r8, str.m_nPlayerCondEx4
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b58], r11d
lea rcx, [0x180229b70]
call fcn.18017dcd4
movsxd rax, dword [0x180229b58]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800a7da0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229b50], edx
jle 0x1800a7e82
lea rcx, [0x180229b50]
call fcn.18017dd34
cmp dword [0x180229b50], 0xffffffff
jne 0x1800a7e82
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a7e6c
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800a7e12
mov rdx, r11
test rax, rax
je 0x1800a7e50
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800a7e30
cmp r9d, 0x7c5cc931
je 0x1800a7e59
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a7dff
lea r8, str.m_flInvisChangeCompleteTime
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
lea eax, [r11 - 8]
mov dword [0x180229b64], eax
lea rcx, [0x180229b50]
call fcn.18017dcd4
movsxd rax, dword [0x180229b64]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800a80f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x30
movaps xmmword [rsp + 0x20], xmm6
mov rdi, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov esi, 4
mov rbx, qword [rax + rdx*8]
mov eax, dword [rbx + rsi]
cmp dword [0x180229b34], eax
jle 0x1800a815f
lea rcx, [0x180229b34]
call fcn.18017dd34
cmp dword [0x180229b34], 0xffffffff
jne 0x1800a815f
mov rcx, qword [0x180229a10]
mov rax, qword [rcx]
lea rdx, str.tf_spy_invis_time
call qword [rax + 0x68]
mov qword [0x180229ba0], rax
lea rcx, [0x180229b34]
call fcn.18017dcd4
mov rax, qword [0x180229ba0]
test rax, rax
je 0x1800a8176
mov rax, qword [rax + 0x38]
movss xmm6, dword [rax + 0x54]
jmp 0x1800a817e
movss xmm6, dword [0x1802000e0]
mov eax, dword [rbx + rsi]
cmp dword [0x180229b38], eax
jle 0x1800a8230
lea rcx, [0x180229b38]
call fcn.18017dd34
cmp dword [0x180229b38], 0xffffffff
jne 0x1800a8230
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800a821d
mov r8, qword [r10 + 0x10]
mov rcx, 0xffffffffffffffff
mov r9d, 0x811c9dc5
nop
inc rcx
cmp byte [r8 + rcx], r11b
jne 0x1800a81d0
mov rdx, r11
test rcx, rcx
je 0x1800a8201
movsx eax, byte [rdx + r8]
xor eax, r9d
imul r9d, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x1800a81e1
cmp r9d, 0x7c5cc931
je 0x1800a820a
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800a81bc
lea r8, str.m_flInvisChangeCompleteTime
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229b3c], r11d
lea rcx, [0x180229b38]
call fcn.18017dcd4
movsxd rax, dword [0x180229b3c]
movss xmm1, dword [rax + rdi]
mov rax, qword [0x180229a88]
subss xmm1, dword [rax + 0xc]
xorps xmm2, xmm2
ucomiss xmm6, xmm2
jp 0x1800a827c
jne 0x1800a827c
comiss xmm1, xmm2
jb 0x1800a826c
movss xmm0, dword [0x18020028c]
movaps xmm6, xmmword [rsp + 0x20]
add rsp, 0x30
pop rdi
pop rsi
pop rbx
ret
xorps xmm0, xmm0
movaps xmm6, xmmword [rsp + 0x20]
add rsp, 0x30
pop rdi
pop rsi
pop rbx
ret
subss xmm1, xmm6
xorps xmm0, xmm0
subss xmm0, xmm6
divss xmm1, xmm0
movss dword [rsp + 0x58], xmm1
mov dword [rsp + 0x60], 0x3f800000
mov dword [rsp + 0x50], 0
lea rcx, [rsp + 0x50]
lea rax, [rsp + 0x58]
comiss xmm2, xmm1
cmovbe rcx, rax
lea rax, [rsp + 0x60]
comiss xmm1, dword [0x1802000e0]
cmovbe rax, rcx
movss xmm0, dword [rax]
mulss xmm0, dword [0x18020028c]
addss xmm0, xmm2
movaps xmm6, xmmword [rsp + 0x20]
add rsp, 0x30
pop rdi
pop rsi
pop rbx
ret
Function at 0x1800aaf90
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov rbx, qword [rsp + 0x70]
lea r14, [r8 - 1]
sar r14, 1
mov rbp, r9
mov r13, r8
mov r10, rdx
mov rdi, rcx
mov r15, rdx
mov rsi, rdx
cmp rdx, r14
jge 0x1800ab03e
nop
mov edx, dword [rbx]
add rsi, rsi
imul rcx, rsi, 0x1858
test edx, edx
je 0x1800aaffc
cmp edx, 1
je 0x1800aafe9
xor al, al
jmp 0x1800ab010
movss xmm0, dword [rcx + rdi + 0x1880]
comiss xmm0, dword [rcx + rdi + 0x30d8]
jmp 0x1800ab00d
movss xmm0, dword [rcx + rdi + 0x187c]
comiss xmm0, dword [rcx + rdi + 0x30d4]
seta al
movzx eax, al
xor rax, 1
inc rax
add rsi, rax
imul rcx, r10, 0x1858
imul rdx, rsi, 0x1858
add rcx, rdi
add rdx, rdi
call fcn.1800a9f90
mov r10, rsi
cmp rsi, r14
jl 0x1800aafd0
cmp rsi, r14
jne 0x1800ab06d
test r13b, 1
jne 0x1800ab06d
imul rdx, r13, 0x1858
imul rcx, r10, 0x1858
add rdx, 0xffffffffffffe7a8
add rdx, rdi
add rcx, rdi
call fcn.1800a9f90
lea r10, [r13 - 1]
cmp r15, r10
jge 0x1800ab0ce
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [rbx]
lea rsi, [r10 - 1]
sar rsi, 1
imul rdx, rsi, 0x1858
add rdx, rdi
test ecx, ecx
je 0x1800ab0a7
cmp ecx, 1
jne 0x1800ab0ce
movss xmm0, dword [rbp + 0x28]
comiss xmm0, dword [rdx + 0x28]
jmp 0x1800ab0b0
movss xmm0, dword [rbp + 0x24]
comiss xmm0, dword [rdx + 0x24]
seta al
test al, al
je 0x1800ab0ce
imul rcx, r10, 0x1858
add rcx, rdi
call fcn.1800a9f90
mov r10, rsi
cmp r15, rsi
jl 0x1800ab080
imul rcx, r10, 0x1858
mov rdx, rbp
add rcx, rdi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
jmp fcn.1800a9f90

Function at 0x1800ab5d0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18022812c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180229bc0], edx
jle 0x1800ab6af
lea rcx, [0x180229bc0]
call fcn.18017dd34
cmp dword [0x180229bc0], 0xffffffff
jne 0x1800ab6af
mov rcx, qword [0x180229a08]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800ab69c
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800ab642
mov rdx, r11
test rax, rax
je 0x1800ab680
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [rdx + r8]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800ab660
cmp r9d, 0x9dc483b8
je 0x1800ab689
mov r10, qword [r10 + 0x20]
test r10, r10
jmp 0x1800ab62f
lea r8, str.m_flSimulationTime
mov rdx, qword [r10 + 0x18]
call fcn.18017d7d0
mov r11d, eax
mov dword [0x180229be4], r11d
lea rcx, [0x180229bc0]
call fcn.18017dcd4
movsxd rax, dword [0x180229be4]
add rax, rbx
add rsp, 0x20
pop rbx
ret