joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1802f8eb0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.xs_prop_arena_goal_sf
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802f8fdd
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802f8f00
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802f8f38
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802f8f17
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802f8fd7
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802f8f87
mov dword [0x180568820], ebx
inc r15d
add r14, 8
cmp r15d, 0x295
jb 0x1802f8ee3
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802f9010
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.prop_a4_pile_01
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802f913d
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802f9060
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802f9098
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802f9077
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802f9137
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802f90e7
mov dword [0x180568820], ebx
inc r15d
add r14, 8
cmp r15d, 0x1b3e
jb 0x1802f9043
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802f9170
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.vw_prop_casino_champset
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802f929d
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802f91c0
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802f91f8
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802f91d7
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802f9297
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802f9247
mov dword [0x180568820], ebx
inc r15d
add r14, 8
cmp r15d, 0x467
jb 0x1802f91a3
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802fcc60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.stt_prop_race_start_line_01
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802fcd8d
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802fccb0
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802fcce8
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802fccc7
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802fcd87
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802fcd37
mov dword [0x180568888], ebx
inc r15d
add r14, 8
cmp r15d, 0x71
jb 0x1802fcc93
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802fcdc0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.stt_prop_race_start_line_01
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802fceed
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802fce10
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802fce48
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802fce27
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802fcee7
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802fce97
mov dword [0x1805687f4], ebx
inc r15d
add r14, 8
cmp r15d, 0x71
jb 0x1802fcdf3
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802fcf20
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.stt_prop_race_start_line_01
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802fd04d
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802fcf70
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802fcfa8
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802fcf87
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802fd047
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802fcff7
mov dword [0x180568884], ebx
inc r15d
add r14, 8
cmp r15d, 0x71
jb 0x1802fcf53
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802fd080
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.prop_weed_01
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802fd1ad
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802fd0d0
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802fd108
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802fd0e7
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802fd1a7
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802fd157
mov dword [0x180568888], ebx
inc r15d
add r14, 8
cmp r15d, 0x94
jb 0x1802fd0b3
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802fd1e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.prop_weed_01
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802fd30d
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802fd230
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802fd268
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802fd247
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802fd307
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802fd2b7
mov dword [0x1805687f4], ebx
inc r15d
add r14, 8
cmp r15d, 0x94
jb 0x1802fd213
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802fd340
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.prop_weed_01
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802fd46d
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802fd390
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802fd3c8
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802fd3a7
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802fd467
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802fd417
mov dword [0x180568884], ebx
inc r15d
add r14, 8
cmp r15d, 0x94
jb 0x1802fd373
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802fd4a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.prop_a4_pile_01
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802fd5cd
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802fd4f0
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802fd528
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802fd507
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802fd5c7
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802fd577
mov dword [0x180568888], ebx
inc r15d
add r14, 8
cmp r15d, 0x1b3e
jb 0x1802fd4d3
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802fd600
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.vw_prop_casino_champset
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802fd72d
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802fd650
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802fd688
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802fd667
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802fd727
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802fd6d7
mov dword [0x180568888], ebx
inc r15d
add r14, 8
cmp r15d, 0x467
jb 0x1802fd633
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802fd760
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.prop_a4_pile_01
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802fd88d
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802fd7b0
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802fd7e8
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802fd7c7
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802fd887
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802fd837
mov dword [0x1805687f4], ebx
inc r15d
add r14, 8
cmp r15d, 0x1b3e
jb 0x1802fd793
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802fd8c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.vw_prop_casino_champset
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802fd9ed
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802fd910
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802fd948
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802fd927
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802fd9e7
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802fd997
mov dword [0x1805687f4], ebx
inc r15d
add r14, 8
cmp r15d, 0x467
jb 0x1802fd8f3
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1802fda20
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
lea r14, str.xs_prop_arena_goal_sf
mov r15d, r12d
movabs r13, 0x98a4eb5d89a0c952
mov rcx, qword [r14]
call fcn.1801ddc30
test al, al
je 0x1802fdb4d
mov rsi, qword [r14]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], r12b
jne 0x1802fda70
mov ebp, r12d
mov edi, r12d
test rbx, rbx
je 0x1802fdaa8
mov rax, r12
movsx ecx, byte [rax + rsi]
call fcn.180370a88
add eax, edi
inc ebp
imul edi, eax, 0x401
mov eax, edi
shr eax, 6
xor edi, eax
mov eax, ebp
cmp rax, rbx
jb 0x1802fda87
lea eax, [rdi + rdi*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
imul ebx, ecx, 0x8001
mov ecx, ebx
call qword [0x1805b1b28]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
jne 0x1802fdb47
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x1805b1c88]
mov dword [0x1805b1c90], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov qword [0x180587120], rax
mov dword [0x1805870f8], r12d
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], r12d
je 0x1802fdaf7
mov dword [0x180568888], ebx
inc r15d
add r14, 8
cmp r15d, 0x295
jb 0x1802fda53
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret