joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800a5890
Capabilities:
Resume thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
sub rsp, 0x30
mov r8d, dword [0x180256a6c]
mov esi, ecx
xor ecx, ecx
mov ebx, ecx
test r8d, r8d
je 0x1800a58d7
mov rax, qword [0x180256a60]
add rax, 0x20
nop word [rax + rax]
movzx edx, byte [rax]
shr edx, 1
and edx, 1
cmp edx, esi
jne 0x1800a58e4
inc ebx
add rax, 0x38
cmp ebx, r8d
jb 0x1800a58c0
mov eax, ecx
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop rsi
ret
cmp ebx, 0xffffffff
je 0x1800a58d7
test esi, esi
mov qword [rsp + 0x48], rdi
mov edx, 0xffffffff
setne cl
mov r8d, ecx
lea rcx, [rsp + 0x20]
call fcn.1800a55a0
mov edi, eax
test eax, eax
jne 0x1800a59cf
mov r9d, dword [0x180256a6c]
cmp ebx, r9d
jae 0x1800a595c
nop dword [rax + rax]
mov ecx, ebx
imul rdx, rcx, 0x38
mov rcx, qword [0x180256a60]
movzx r8d, byte [rdx + rcx + 0x20]
shr r8d, 1
and r8d, 1
cmp r8d, esi
je 0x1800a5955
mov edx, esi
mov ecx, ebx
call fcn.1800a5780
mov edi, eax
test eax, eax
jne 0x1800a595c
mov r9d, dword [0x180256a6c]
inc ebx
cmp ebx, r9d
jb 0x1800a5920
cmp qword [rsp + 0x20], 0
je 0x1800a59cd
mov eax, dword [rsp + 0x2c]
test eax, eax
je 0x1800a59b9
mov rbx, qword [rsp + 0x20]
mov qword [rsp + 0x40], rbp
mov ebp, eax
nop dword [rax + rax]
mov r8d, dword [rbx]
xor edx, edx
mov ecx, 0x5a
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x1800a59aa
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 4
sub rbp, 1
jne 0x1800a5980
mov rbp, qword [rsp + 0x40]
mov r8, qword [rsp + 0x20]
xor edx, edx
mov rcx, qword [0x180242b40]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, edi
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop rsi
ret
Function at 0x1800ac7e0
Capabilities:
Enumerate gui resources
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x28
cmp qword [0x180244628], 0
jne 0x1800ac81a
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x30], 0
lea rcx, [0x18018ba40]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rax, qword [rsp + 0x30]
mov qword [0x180244628], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x180244628]
jne 0x1800ac839
mov ecx, 0x7a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x1800ac849
cmp byte [0x180243e78], 0
jne 0x1800ac849
xor al, al
add rsp, 0x28
ret
mov al, 1
add rsp, 0x28
ret
Function at 0x1800b32d0
Capabilities:
Hash data using fnv

Disassembly:
mov rdx, qword [rcx + 0x10]
mov r9, rcx
add rdx, 1
mov r8, qword [rcx + 0x38]
vxorps xmm0, xmm0, xmm0
js 0x1800b32ec
vcvtsi2ss xmm0, xmm0, rdx
jmp 0x1800b3301
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
vcvtsi2ss xmm0, xmm0, rax
vaddss xmm0, xmm0, xmm0
vdivss xmm0, xmm0, dword [rcx]
vxorps xmm1, xmm1, xmm1
vroundss xmm1, xmm1, xmm0, 2
vmovss xmm0, dword [0x180218d30]
xor ecx, ecx
vcomiss xmm1, xmm0
jb 0x1800b3336
vsubss xmm1, xmm1, xmm0
vcomiss xmm1, xmm0
jae 0x1800b3336
movabs rax, 0x8000000000000000
mov rcx, rax
vcvttss2si rax, xmm1
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp r8, rcx
jae 0x1800b3368
cmp r8, 0x200
jae 0x1800b3365
lea r8, [r8*8]
cmp r8, rcx
jae 0x1800b3368
mov r8, rcx
mov rdx, r8
mov rcx, r9
jmp fcn.1800b3500
Function at 0x1800bcee0
Capabilities:
Create thread

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rcx
cmp edx, 1
jne 0x1800bcf28
lea rcx, [0x18018ff60]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
xor eax, eax
lea r8, [0x1800bce60]
mov qword [rsp + 0x28], rax
mov r9, rbx
xor edx, edx
mov dword [rsp + 0x20], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x1800bcf28
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
add rsp, 0x30
pop rbx
ret

Function at 0x1800bcf40
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180243fac], edx
jle 0x1800bd021
lea rcx, [0x180243fac]
call fcn.1801905cc
cmp dword [0x180243fac], 0xffffffff
jne 0x1800bd021
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800bd00e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800bcfb2
mov rdx, r11
test rax, rax
je 0x1800bcff0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800bcfd0
cmp r9d, 0x7a1c884e
je 0x1800bcffb
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800bcfa1
jmp 0x1800bd00e
lea r8, str.m_lifeState
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180243f74], r11d
lea rcx, [0x180243fac]
call fcn.180190560
movsxd rax, dword [0x180243f74]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800bd050
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180243f88], edx
jle 0x1800bd131
lea rcx, [0x180243f88]
call fcn.1801905cc
cmp dword [0x180243f88], 0xffffffff
jne 0x1800bd131
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800bd11e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800bd0c2
mov rdx, r11
test rax, rax
je 0x1800bd100
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800bd0e0
cmp r9d, 0x7c5cc931
je 0x1800bd10b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800bd0b1
jmp 0x1800bd11e
lea r8, str.m_nPlayerCond
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180243fb0], r11d
lea rcx, [0x180243f88]
call fcn.180190560
movsxd rax, dword [0x180243fb0]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800bd150
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180243f80], edx
jle 0x1800bd231
lea rcx, [0x180243f80]
call fcn.1801905cc
cmp dword [0x180243f80], 0xffffffff
jne 0x1800bd231
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800bd21e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800bd1c2
mov rdx, r11
test rax, rax
je 0x1800bd200
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800bd1e0
cmp r9d, 0x7c5cc931
je 0x1800bd20b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800bd1b1
jmp 0x1800bd21e
lea r8, str.m_bFeignDeathReady
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180243f84], r11d
lea rcx, [0x180243f80]
call fcn.180190560
movsxd rax, dword [0x180243f84]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800bd250
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180243f7c], edx
jle 0x1800bd331
lea rcx, [0x180243f7c]
call fcn.1801905cc
cmp dword [0x180243f7c], 0xffffffff
jne 0x1800bd331
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800bd31e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800bd2c2
mov rdx, r11
test rax, rax
je 0x1800bd300
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800bd2e0
cmp r9d, 0x7c5cc931
je 0x1800bd30b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800bd2b1
jmp 0x1800bd31e
lea r8, str.m_nPlayerCondEx2
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180243f98], r11d
lea rcx, [0x180243f7c]
call fcn.180190560
movsxd rax, dword [0x180243f98]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800bdce0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180243fb4], edx
jle 0x1800bddc1
lea rcx, [0x180243fb4]
call fcn.1801905cc
cmp dword [0x180243fb4], 0xffffffff
jne 0x1800bddc1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800bddae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800bdd52
mov rdx, r11
test rax, rax
je 0x1800bdd90
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800bdd70
cmp r9d, 0x9dc483b8
je 0x1800bdd9b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800bdd41
jmp 0x1800bddae
lea r8, str.m_vecOrigin
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x18024403c], r11d
lea rcx, [0x180243fb4]
call fcn.180190560
movsxd rax, dword [0x18024403c]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800bdde0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180244004], edx
jle 0x1800bdec1
lea rcx, [0x180244004]
call fcn.1801905cc
cmp dword [0x180244004], 0xffffffff
jne 0x1800bdec1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800bdeae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800bde52
mov rdx, r11
test rax, rax
je 0x1800bde90
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800bde70
cmp r9d, 0x9dc483b8
je 0x1800bde9b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800bde41
jmp 0x1800bdeae
lea r8, str.m_iTeamNum
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180244010], r11d
lea rcx, [0x180244004]
call fcn.180190560
movsxd rax, dword [0x180244010]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800bdee0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180243fb8], edx
jle 0x1800bdfc1
lea rcx, [0x180243fb8]
call fcn.1801905cc
cmp dword [0x180243fb8], 0xffffffff
jne 0x1800bdfc1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800bdfae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800bdf52
mov rdx, r11
test rax, rax
je 0x1800bdf90
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800bdf70
cmp r9d, 0x9dc483b8
je 0x1800bdf9b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800bdf41
jmp 0x1800bdfae
lea r8, str.m_vecMins
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180243ff8], r11d
lea rcx, [0x180243fb8]
call fcn.180190560
movsxd rax, dword [0x180243ff8]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800bdfe0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180243ffc], edx
jle 0x1800be0c1
lea rcx, [0x180243ffc]
call fcn.1801905cc
cmp dword [0x180243ffc], 0xffffffff
jne 0x1800be0c1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800be0ae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800be052
mov rdx, r11
test rax, rax
je 0x1800be090
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800be070
cmp r9d, 0x9dc483b8
je 0x1800be09b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800be041
jmp 0x1800be0ae
lea r8, str.m_vecMaxs
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180244028], r11d
lea rcx, [0x180243ffc]
call fcn.180190560
movsxd rax, dword [0x180244028]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800be0e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180243fc8], edx
jle 0x1800be1c1
lea rcx, [0x180243fc8]
call fcn.1801905cc
cmp dword [0x180243fc8], 0xffffffff
jne 0x1800be1c1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800be1ae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800be152
mov rdx, r11
test rax, rax
je 0x1800be190
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800be170
cmp r9d, 0x7a1c884e
je 0x1800be19b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800be141
jmp 0x1800be1ae
lea r8, str.m_vecViewOffset_0_
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x18024400c], r11d
lea rcx, [0x180243fc8]
call fcn.180190560
movsxd rax, dword [0x18024400c]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800be1e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x18024401c], edx
jle 0x1800be2c1
lea rcx, [0x18024401c]
call fcn.1801905cc
cmp dword [0x18024401c], 0xffffffff
jne 0x1800be2c1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800be2ae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800be252
mov rdx, r11
test rax, rax
je 0x1800be290
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800be270
cmp r9d, 0x7a1c884e
je 0x1800be29b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800be241
jmp 0x1800be2ae
lea r8, str.m_fFlags
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180244040], r11d
lea rcx, [0x18024401c]
call fcn.180190560
movsxd rax, dword [0x180244040]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800be2e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x18024402c], edx
jle 0x1800be3c1
lea rcx, [0x18024402c]
call fcn.1801905cc
cmp dword [0x18024402c], 0xffffffff
jne 0x1800be3c1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800be3ae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800be352
mov rdx, r11
test rax, rax
je 0x1800be390
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800be370
cmp r9d, 0x7c5cc931
je 0x1800be39b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800be341
jmp 0x1800be3ae
lea r8, str.m_iClass
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180243ff4], r11d
lea rcx, [0x18024402c]
call fcn.180190560
movsxd rax, dword [0x180243ff4]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800be3e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180244020], edx
jle 0x1800be4c1
lea rcx, [0x180244020]
call fcn.1801905cc
cmp dword [0x180244020], 0xffffffff
jne 0x1800be4c1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800be4ae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800be452
mov rdx, r11
test rax, rax
je 0x1800be490
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800be470
cmp r9d, 0x7c5cc931
je 0x1800be49b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800be441
jmp 0x1800be4ae
lea r8, str._condition_bits
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180244044], r11d
lea rcx, [0x180244020]
call fcn.180190560
movsxd rax, dword [0x180244044]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800be4e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180243ff0], edx
jle 0x1800be5c1
lea rcx, [0x180243ff0]
call fcn.1801905cc
cmp dword [0x180243ff0], 0xffffffff
jne 0x1800be5c1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800be5ae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800be552
mov rdx, r11
test rax, rax
je 0x1800be590
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800be570
cmp r9d, 0x7c5cc931
je 0x1800be59b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800be541
jmp 0x1800be5ae
lea r8, str.m_nPlayerCondEx
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180244038], r11d
lea rcx, [0x180243ff0]
call fcn.180190560
movsxd rax, dword [0x180244038]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800be5e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180243fe0], edx
jle 0x1800be6c1
lea rcx, [0x180243fe0]
call fcn.1801905cc
cmp dword [0x180243fe0], 0xffffffff
jne 0x1800be6c1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800be6ae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800be652
mov rdx, r11
test rax, rax
je 0x1800be690
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800be670
cmp r9d, 0x7c5cc931
je 0x1800be69b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800be641
jmp 0x1800be6ae
lea r8, str.m_nPlayerCondEx3
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180244030], r11d
lea rcx, [0x180243fe0]
call fcn.180190560
movsxd rax, dword [0x180244030]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800be6e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180244024], edx
jle 0x1800be7c1
lea rcx, [0x180244024]
call fcn.1801905cc
cmp dword [0x180244024], 0xffffffff
jne 0x1800be7c1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800be7ae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800be752
mov rdx, r11
test rax, rax
je 0x1800be790
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800be770
cmp r9d, 0x7c5cc931
je 0x1800be79b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800be741
jmp 0x1800be7ae
lea r8, str.m_nPlayerCondEx4
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180244008], r11d
lea rcx, [0x180244024]
call fcn.180190560
movsxd rax, dword [0x180244008]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800be7e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180244000], edx
jle 0x1800be8c4
lea rcx, [0x180244000]
call fcn.1801905cc
cmp dword [0x180244000], 0xffffffff
jne 0x1800be8c4
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800be8ae
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800be852
mov rdx, r11
test rax, rax
je 0x1800be890
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800be870
cmp r9d, 0x7c5cc931
je 0x1800be89b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800be841
jmp 0x1800be8ae
lea r8, str.m_flInvisChangeCompleteTime
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
lea eax, [r11 - 8]
mov dword [0x180244014], eax
lea rcx, [0x180244000]
call fcn.180190560
movsxd rax, dword [0x180244014]
add rax, rbx
add rsp, 0x20
pop rbx
ret