joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180135fb0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180234f9c], edx
jle 0x180136091
lea rcx, [0x180234f9c]
call fcn.180184dbc
cmp dword [0x180234f9c], 0xffffffff
jne 0x180136091
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18013607e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180136022
mov rdx, r11
test rax, rax
je 0x180136060
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180136040
cmp r9d, 0x7a1c884e
je 0x18013606b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180136011
jmp 0x18013607e
lea r8, str.m_nWaterLevel
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
mov dword [0x180234f7c], r11d
lea rcx, [0x180234f9c]
call fcn.180184d50
movsxd rax, dword [0x180234f7c]
cmp byte [rax + rbx], 1
seta al
add rsp, 0x20
pop rbx
ret

Function at 0x1801360b0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180234fbc], edx
jle 0x180136194
lea rcx, [0x180234fbc]
call fcn.180184dbc
cmp dword [0x180234fbc], 0xffffffff
jne 0x180136194
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18013617e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180136122
mov rdx, r11
test rax, rax
je 0x180136160
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180136140
cmp r9d, 0x7c5cc931
je 0x18013616b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180136111
jmp 0x18013617e
lea r8, str.m_nWaterLevel
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
lea eax, [r11 - 4]
mov dword [0x180234f88], eax
lea rcx, [0x180234fbc]
call fcn.180184d50
movsxd rax, dword [0x180234f88]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1801361b0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov ebx, edx
mov rdi, rcx
mov r8d, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x180234fb0], r8d
jle 0x1801362a1
lea rcx, [0x180234fb0]
call fcn.180184dbc
cmp dword [0x180234fb0], 0xffffffff
jne 0x1801362a1
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18013628e
nop word [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180136231
mov rdx, r11
test rax, rax
je 0x180136270
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180136250
cmp r9d, 0x3369e751
je 0x18013627b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180136220
jmp 0x18013628e
lea r8, str.m_iPing
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
mov dword [0x180234f84], r11d
lea rcx, [0x180234fb0]
call fcn.180184d50
lea eax, [rbx*4]
cdqe
movsxd rdx, dword [0x180234f84]
add rax, rdi
mov eax, dword [rdx + rax]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1801394b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x20
mov qword [rsp + 0x50], rbp
mov r15, r9
lea rbp, [r8 - 1]
mov qword [rsp + 0x58], r13
sar rbp, 1
mov r14, r8
mov rsi, rdx
mov rdi, rcx
mov r12, rdx
mov r10, rdx
cmp rdx, rbp
jge 0x180139542
nop dword [rax]
lea rbx, [r10 + r10]
lea rax, [rbx + 2]
lea rax, [rax + rax*2]
lea rdx, [rdi + rax*4]
lea r8, [rdx - 0xc]
lea rcx, [rsp + 0x70]
call fcn.180138fb0
movzx eax, al
lea rcx, [rsi + rsi*2]
xor rax, 1
lea r10, [rbx + 1]
add r10, rax
mov rsi, r10
lea rdx, [r10 + r10*2]
mov eax, dword [rdi + rdx*4]
mov dword [rdi + rcx*4], eax
mov eax, dword [rdi + rdx*4 + 4]
mov dword [rdi + rcx*4 + 4], eax
mov eax, dword [rdi + rdx*4 + 8]
mov dword [rdi + rcx*4 + 8], eax
cmp r10, rbp
jl 0x1801394f0
cmp r10, rbp
mov rbp, qword [rsp + 0x50]
jne 0x180139575
test r14b, 1
jne 0x180139575
lea rcx, [rsi + rsi*2]
lea rdx, [r14 + r14*2]
mov eax, dword [rdi + rdx*4 - 0xc]
lea rsi, [r14 - 1]
mov dword [rdi + rcx*4], eax
mov eax, dword [rdi + rdx*4 - 8]
mov dword [rdi + rcx*4 + 4], eax
mov eax, dword [rdi + rdx*4 - 4]
mov dword [rdi + rcx*4 + 8], eax
mov rax, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
mov qword [rsp + 0x70], rax
cmp r12, rsi
jge 0x1801395d5
nop dword [rax]
lea rbx, [rsi - 1]
mov r8, r15
sar rbx, 1
lea rcx, [rsp + 0x70]
lea rax, [rbx + rbx*2]
lea r14, [rdi + rax*4]
mov rdx, r14
call fcn.180138fb0
test al, al
je 0x1801395d5
mov eax, dword [r14]
lea rcx, [rsi + rsi*2]
mov dword [rdi + rcx*4], eax
mov rsi, rbx
mov eax, dword [r14 + 4]
mov dword [rdi + rcx*4 + 4], eax
mov eax, dword [r14 + 8]
mov dword [rdi + rcx*4 + 8], eax
cmp r12, rbx
jl 0x180139590
mov eax, dword [r15]
lea rcx, [rsi + rsi*2]
mov rbx, qword [rsp + 0x60]
mov dword [rdi + rcx*4], eax
mov eax, dword [r15 + 4]
mov dword [rdi + rcx*4 + 4], eax
mov eax, dword [r15 + 8]
mov dword [rdi + rcx*4 + 8], eax
add rsp, 0x20
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
Function at 0x18013e070
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
test rdx, rdx
je 0x18013e2ed
mov qword [rsp + 8], rcx
push rbx
push rsi
push r15
mov eax, 0x13b0
call fcn.180186ca0
sub rsp, rax
mov r15, r9
mov qword [rsp + 0x13d8], rdi
mov rsi, r8
mov rbx, rdx
call fcn.18013dec0
mov rcx, rbx
call fcn.1800b54c0
cmp byte [rax], 0
jne 0x18013e15e
mov rcx, rbx
call fcn.1800b57d0
mov ecx, dword [rax]
shr ecx, 0xd
test cl, 1
jne 0x18013e15e
mov edi, dword [0x18023ed04]
lea rcx, [rbx + 0x10]
mov rax, qword [rcx]
shr edi, 1
and dil, 1
call qword [rax + 0x10]
test rax, rax
je 0x18013e147
cmp dword [rax + 0x28], 0xf7
jne 0x18013e147
mov rcx, rbx
call fcn.1800c3780
mov rcx, qword [0x180234ba0]
mov eax, dword [rax]
mov rdx, qword [rcx]
mov dword [rsp + 0x13d0], eax
mov r8, qword [rdx + 0x20]
lea rdx, [rsp + 0x13d0]
call r8
test rax, rax
jne 0x18013e12c
mov rcx, rbx
call fcn.1800b6760
test byte [rax], 1
je 0x18013e147
mov rcx, rbx
call fcn.1800b6760
mov ecx, dword [rax]
shr ecx, 1
test cl, 1
je 0x18013e147
test byte [rsi + 0x28], 4
jne 0x18013e147
mov al, 1
jmp 0x18013e149
xor al, al
test dil, dil
je 0x18013e156
test al, al
je 0x18013e156
mov al, 1
jmp 0x18013e158
xor al, al
mov byte [0x180230695], al
mov ecx, dword [0x18023eb84]
sub ecx, 1
je 0x18013e26a
sub ecx, 1
je 0x18013e18a
cmp ecx, 1
jne 0x18013e276
mov dword [0x180234e98], 0x16
jmp 0x18013e276
cmp dword [0x180234e98], 0
jne 0x18013e276
mov edi, dword [0x18023eb0c]
mov qword [rsp + 0x13e0], r14
mov r14d, dword [0x18023eb08]
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x13a4], 0xffffffff
mov edx, 1
mov dword [rsp + 0x24], eax
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x24], eax
inc rdx
cmp rdx, 0x270
jb 0x18013e1d0
btc r14d, 0x1f
mov dword [rsp + 0x20], 0x270
btc edi, 0x1f
lea rcx, [rsp + 0x20]
sub edi, r14d
cmp edi, 0xffffffff
jne 0x18013e216
call fcn.180182730
mov ecx, eax
jmp 0x18013e258
inc edi
call fcn.180182730
mov ecx, eax
mov esi, edi
imul rcx, rsi
cmp ecx, edi
jae 0x18013e254
mov eax, edi
xor edx, edx
neg eax
div edi
mov edi, edx
cmp ecx, edx
jae 0x18013e254
nop word [rax + rax]
lea rcx, [rsp + 0x20]
call fcn.180182730
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x18013e240
shr rcx, 0x20
lea eax, [r14 + rcx]
mov r14, qword [rsp + 0x13e0]
btc eax, 0x1f
jmp 0x18013e270
mov eax, dword [0x18023ed84]
mov dword [0x180234e98], eax
mov rdx, rbx
call fcn.18013dca0
mov rdi, qword [rsp + 0x13d8]
test al, al
jne 0x18013e2d8
mov rcx, rbx
call fcn.1800bbb10
movss xmm0, dword [rax]
movss dword [0x180230688], xmm0
movss xmm1, dword [rax + 4]
movss dword [0x18023068c], xmm1
movss xmm0, dword [rax + 8]
xor eax, eax
mov dword [0x180234e98], eax
mov dword [0x180234e94], eax
mov byte [0x180230695], al
movss dword [0x180230690], xmm0
add rsp, 0x13b0
pop r15
pop rsi
pop rbx
ret
inc dword [0x180234e94]
mov byte [r15], 0
add rsp, 0x13b0
pop r15
pop rsi
pop rbx
ret
Function at 0x180140220
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov ebx, edx
mov rdi, rcx
mov r8d, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x180234ffc], r8d
jle 0x180140311
lea rcx, [0x180234ffc]
call fcn.180184dbc
cmp dword [0x180234ffc], 0xffffffff
jne 0x180140311
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1801402fe
nop word [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1801402a1
mov rdx, r11
test rax, rax
je 0x1801402e0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1801402c0
cmp r9d, 0x3369e751
je 0x1801402eb
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180140290
jmp 0x1801402fe
lea r8, str.m_iTeam
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
mov dword [0x180234fdc], r11d
lea rcx, [0x180234ffc]
call fcn.180184d50
lea eax, [rbx*4]
cdqe
movsxd rdx, dword [0x180234fdc]
add rax, rdi
mov eax, dword [rdx + rax]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret

Function at 0x180140340
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
movsxd rbx, edx
mov rdi, rcx
mov r8d, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x180234fd4], r8d
jle 0x180140431
lea rcx, [0x180234fd4]
call fcn.180184dbc
cmp dword [0x180234fd4], 0xffffffff
jne 0x180140431
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18014041e
nop dword [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1801403c1
mov rdx, r11
test rax, rax
je 0x180140400
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1801403e0
cmp r9d, 0x3369e751
je 0x18014040b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1801403b0
jmp 0x18014041e
lea r8, str.m_bValid
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
mov dword [0x180234fe0], r11d
lea rcx, [0x180234fd4]
call fcn.180184d50
movsxd rax, dword [0x180234fe0]
add rax, rdi
movzx eax, byte [rbx + rax]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180140450
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x30
mov rsi, r8
mov rbx, rdx
mov rdx, qword [rdx + 0x10]
test rdx, rdx
je 0x180140517
lea rdi, [rcx + 0x90]
mov r10, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x18014048b
mov r10, qword [rbx]
xor ecx, ecx
movabs r9, 0xcbf29ce484222325
test rdx, rdx
je 0x1801404c4
movabs r8, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [r10 + rcx]
xor r9, rax
imul r9, r8
inc rcx
cmp rcx, rdx
jb 0x1801404b0
mov r8, rbx
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1800955b0
cmp qword [rax + 8], 0
je 0x180140517
mov r8, rbx
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.18012a7a0
mov rax, qword [rax]
movsd xmm0, qword [rax + 0x30]
movsd qword [rsi], xmm0
mov eax, dword [rax + 0x38]
mov dword [rsi + 8], eax
mov rcx, rbx
call fcn.180091c20
mov al, 1
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
mov rcx, rbx
call fcn.180091c20
xor al, al
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
Function at 0x180140770
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov r14, r8
mov r15, rcx
mov r12, qword [rbp + 0x70]
test edx, edx
je 0x1801409f2
add rcx, 0x50
lea r8, [rbp + 0x58]
lea rdx, [rsp + 0x30]
call fcn.18012aa30
mov rsi, qword [rax]
mov rax, qword [rsi + 0x18]
mov rcx, qword [rsi + 0x20]
cmp rax, rcx
je 0x1801409f2
nop word [rax + rax]
mov r10, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1801407dd
mov r10, qword [rax]
mov rdx, 0xffffffffffffffff
mov r11d, 0x811c9dc5
nop word [rax + rax]
inc rdx
cmp byte [r10 + rdx], 0
jne 0x1801407f0
xor r9d, r9d
test rdx, rdx
je 0x18014083a
nop dword [rax]
nop word [rax + rax]
movsx r8d, byte [r10 + r9]
xor r8d, r11d
imul r11d, r8d, 0x1000193
inc r9
cmp r9, rdx
jb 0x180140810
test r11d, r11d
jne 0x18014083a
add rax, 0x20
cmp rax, rcx
jne 0x1801407d0
jmp 0x1801409f2
mov rdi, rcx
lea rbx, [rax + 0x20]
cmp rbx, rcx
je 0x180140865
nop word [rax + rax]
lea rcx, [rbx - 0x20]
mov rdx, rbx
call fcn.1800917c0
add rbx, 0x20
cmp rbx, rdi
jne 0x180140850
mov rcx, qword [rsi + 0x20]
sub rcx, 0x20
call fcn.180091c20
add qword [rsi + 0x20], 0xffffffffffffffe0
mov byte [r15 + 0x129], 1
cmp qword [r12 + 0x10], 0
je 0x1801409f2
mov dword [rsp + 0x30], 0xffffffff
mov rdx, r14
lea rcx, [rbp - 0x58]
call fcn.180091890
lea r8, [rsp + 0x30]
mov rdx, rax
mov rcx, r15
call fcn.180140450
test al, al
je 0x1801409f2
lea rax, [rbp - 0x30]
mov qword [rsp + 0x70], rax
mov rdx, r14
lea rcx, [rbp - 0x30]
call fcn.180091890
mov rbx, rax
lea rax, [rbp - 0x58]
mov qword [rbp - 0x38], rax
lea rax, str._b:02X:02X:02X:02X
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0x19
movzx ecx, byte [rsp + 0x30]
mov dword [rbp - 0x68], ecx
movabs rax, 0x2000000000000000
mov qword [rsp + 0x78], rax
movzx eax, byte [rsp + 0x31]
mov dword [rbp - 0x64], eax
movabs rax, 0x2000000000000004
mov qword [rbp - 0x80], rax
movzx eax, byte [rsp + 0x32]
mov dword [rbp - 0x60], eax
movabs rax, 0x2000000000000008
mov qword [rbp - 0x78], rax
movzx eax, byte [rsp + 0x33]
mov dword [rbp - 0x5c], eax
movabs rax, 0x200000000000000c
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x30], 4
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movaps xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x58]
call fcn.1800a98a0
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x68], 0xf
mov rax, qword [str.Removed]
mov dword [rsp + 0x50], eax
movzx eax, word [0x180204a34]
mov word [rsp + 0x54], ax
movzx eax, byte [0x180204a36]
mov byte [rsp + 0x56], al
mov byte [rsp + 0x57], 0
mov rdx, r12
lea rcx, [rbp - 0x10]
call fcn.180091890
nop
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x58]
lea r8, [rsp + 0x50]
mov rdx, rax
call fcn.1801359d0
nop
mov rcx, r14
call fcn.180091c20
nop
mov rcx, r12
call fcn.180091c20
add rsp, 0x110
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
Function at 0x180140a20
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
sub rsp, 0x30
mov rsi, r8
mov r9, rcx
test edx, edx
jne 0x180140a56
mov rcx, r8
call fcn.180091c20
xor al, al
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
pop rsi
pop rbp
ret
cmp qword [r8 + 0x18], 0xf
jbe 0x180140a60
mov r8, qword [r8]
mov edi, 0x811c9dc5
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [r8 + rcx], 0
jne 0x180140a70
xor edx, edx
test rcx, rcx
je 0x180140aa5
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [r8 + rdx]
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x180140a90
lea rbp, [r9 + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x20]
mov rcx, rbp
call fcn.18012aa30
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
mov rbx, qword [rcx + 0x18]
cmp rbx, r10
je 0x180140b26
nop dword [rax + rax]
mov r8, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180140add
mov r8, qword [rbx]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
nop word [rax + rax]
inc rax
cmp byte [r8 + rax], 0
jne 0x180140af0
xor edx, edx
test rax, rax
je 0x180140b18
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180140b01
cmp edi, r9d
je 0x180140b26
add rbx, 0x20
cmp rbx, r10
jne 0x180140ad0
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x20]
mov rcx, rbp
call fcn.18012aa30
mov rcx, qword [rax]
cmp rbx, qword [rcx + 0x20]
setne bl
mov rcx, rsi
call fcn.180091c20
movzx eax, bl
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
pop rsi
pop rbp
ret
Function at 0x180142e10
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180235008], edx
jle 0x180142ef1
lea rcx, [0x180235008]
call fcn.180184dbc
cmp dword [0x180235008], 0xffffffff
jne 0x180142ef1
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x180142ede
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180142e82
mov rdx, r11
test rax, rax
je 0x180142ec0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180142ea0
cmp r9d, 0x9dc483b8
je 0x180142ecb
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180142e71
jmp 0x180142ede
lea r8, str.m_hOwnerEntity
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
mov dword [0x18023500c], r11d
lea rcx, [0x180235008]
call fcn.180184d50
movsxd rax, dword [0x18023500c]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x180142f10
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180235014], edx
jle 0x180142ff4
lea rcx, [0x180235014]
call fcn.180184dbc
cmp dword [0x180235014], 0xffffffff
jne 0x180142ff4
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x180142fde
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180142f82
mov rdx, r11
test rax, rax
je 0x180142fc0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180142fa0
cmp r9d, 0x7c5cc931
je 0x180142fcb
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180142f71
jmp 0x180142fde
lea r8, str.m_hItem
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
lea eax, [r11 - 0x58]
mov dword [0x180235010], eax
lea rcx, [0x180235014]
call fcn.180184d50
movsxd rax, dword [0x180235010]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x180143010
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x70
movabs rax, 0xcbf29ce484222325
movzx r9d, r8b
xor r9, rax
mov rsi, rdx
movabs rdx, 0x100000001b3
mov rax, r8
imul r9, rdx
shr rax, 8
mov rdi, r8
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x10
imul r9, rdx
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x18
imul r9, rdx
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x20
imul r9, rdx
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x28
imul r9, rdx
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x30
imul r9, rdx
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x38
mov rcx, qword [0x180244170]
imul r9, rdx
xor r9, rax
imul r9, rdx
mov rdx, qword [0x180244158]
and rcx, r9
add rcx, rcx
mov rax, qword [rdx + rcx*8 + 8]
cmp rax, qword [0x180244148]
je 0x1801430f5
mov rcx, qword [rdx + rcx*8]
cmp r8, qword [rax + 0x10]
je 0x1801430f7
cmp rax, rcx
je 0x1801430f5
mov rax, qword [rax + 8]
cmp rdi, qword [rax + 0x10]
jne 0x1801430e4
jmp 0x1801430f7
xor eax, eax
test rax, rax
je 0x1801431f3
mov qword [rsp + 0x88], rbx
lea r8, [rsp + 0x80]
movaps xmmword [rsp + 0x60], xmm6
lea rdx, [rsp + 0x30]
movaps xmmword [rsp + 0x50], xmm7
lea rcx, [0x180244140]
movaps xmmword [rsp + 0x40], xmm8
mov qword [rsp + 0x80], rdi
call fcn.180144a80
mov rcx, qword [rax]
mov rax, qword [rdi]
movss xmm6, dword [rcx + 0x18]
movss xmm7, dword [rcx + 0x1c]
movss xmm8, dword [rcx + 0x20]
mov rcx, rdi
call qword [rax + 0x48]
mov rcx, rdi
mov rbx, rax
call fcn.1800b6660
movss xmm1, dword [rbx + 4]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x24], 0
mov dword [rsp + 0x20], 0
movss xmm0, dword [rax]
addss xmm0, dword [rbx]
addss xmm1, dword [rax + 4]
subss xmm6, xmm0
movss xmm0, dword [rbx + 8]
addss xmm0, dword [rax + 8]
subss xmm7, xmm1
movss dword [rsp + 0x30], xmm6
subss xmm8, xmm0
movss dword [rsp + 0x34], xmm7
movss dword [rsp + 0x38], xmm8
call fcn.1800ca760
movss xmm0, dword [rsp + 0x20]
mov rax, rsi
movaps xmm8, xmmword [rsp + 0x40]
movaps xmm7, xmmword [rsp + 0x50]
movaps xmm6, xmmword [rsp + 0x60]
mov rbx, qword [rsp + 0x88]
movss dword [rsi], xmm0
mov byte [rsi + 4], 1
mov rsi, qword [rsp + 0x90]
add rsp, 0x70
pop rdi
ret
mov byte [rsi + 4], 0
mov rax, rsi
mov rsi, qword [rsp + 0x90]
add rsp, 0x70
pop rdi
ret
Function at 0x180144da0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x1802350c4], edx
jle 0x180144e81
lea rcx, [0x1802350c4]
call fcn.180184dbc
cmp dword [0x1802350c4], 0xffffffff
jne 0x180144e81
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x180144e6e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180144e12
mov rdx, r11
test rax, rax
je 0x180144e50
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180144e30
cmp r9d, 0x7a1c884e
je 0x180144e5b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180144e01
jmp 0x180144e6e
lea r8, str.m_bDucked
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
mov dword [0x180235054], r11d
lea rcx, [0x1802350c4]
call fcn.180184d50
movsxd rax, dword [0x180235054]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x180144ea0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x1802350d8], edx
jle 0x180144f81
lea rcx, [0x1802350d8]
call fcn.180184dbc
cmp dword [0x1802350d8], 0xffffffff
jne 0x180144f81
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x180144f6e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180144f12
mov rdx, r11
test rax, rax
je 0x180144f50
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180144f30
cmp r9d, 0x7a1c884e
je 0x180144f5b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180144f01
jmp 0x180144f6e
lea r8, str.m_bDucking
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
mov dword [0x1802350d0], r11d
lea rcx, [0x1802350d8]
call fcn.180184d50
movsxd rax, dword [0x1802350d0]
add rax, rbx
add rsp, 0x20
pop rbx
ret