132 lines
9.2 KiB
Plaintext
132 lines
9.2 KiB
Plaintext
===== 0x19990 (Prepare core) =====
|
|
000000019990: push rbp
|
|
000000019991: push rbx
|
|
000000019992: mov rbx, rdi
|
|
000000019995: sub rsp, 0x58
|
|
000000019999: mov rax, qword ptr fs:[0x28]
|
|
0000000199a2: mov qword ptr [rsp + 0x48], rax
|
|
0000000199a7: xor eax, eax
|
|
0000000199a9: call 0x193f0
|
|
0000000199ae: test eax, eax
|
|
0000000199b0: jne 0x199d0
|
|
0000000199b2: mov rcx, qword ptr [rsp + 0x48]
|
|
0000000199b7: xor rcx, qword ptr fs:[0x28]
|
|
0000000199c0: jne 0x19a3a
|
|
0000000199c2: add rsp, 0x58
|
|
0000000199c6: pop rbx
|
|
0000000199c7: pop rbp
|
|
0000000199c8: ret
|
|
0000000199c9: nop dword ptr [rax]
|
|
0000000199d0: lea rbp, [rsp + 0x10]
|
|
0000000199d5: mov rdi, rbp
|
|
0000000199d8: call 0x64d0
|
|
0000000199dd: mov edx, eax
|
|
0000000199df: mov eax, 0xffffffff
|
|
0000000199e4: test edx, edx
|
|
0000000199e6: jne 0x199b2
|
|
0000000199e8: mov esi, 1
|
|
0000000199ed: mov rdi, rbp
|
|
0000000199f0: call 0x6790
|
|
0000000199f5: test eax, eax
|
|
0000000199f7: jne 0x19a28
|
|
0000000199f9: lea rdi, [rsp + 8]
|
|
0000000199fe: lea rdx, [rip + 0x3fb]
|
|
000000019a05: mov rcx, rbx
|
|
000000019a08: mov rsi, rbp
|
|
000000019a0b: call 0x60e0
|
|
000000019a10: test eax, eax
|
|
000000019a12: jne 0x19a28
|
|
000000019a14: mov rdi, rbp
|
|
000000019a17: call 0x6030
|
|
000000019a1c: mov eax, 1
|
|
000000019a21: jmp 0x199b2
|
|
000000019a23: nop dword ptr [rax + rax]
|
|
000000019a28: mov rdi, rbp
|
|
000000019a2b: call 0x6030
|
|
000000019a30: mov eax, 0xffffffff
|
|
000000019a35: jmp 0x199b2
|
|
000000019a3a: call 0x63b0
|
|
000000019a3f: nop
|
|
000000019a40: push r15
|
|
000000019a42: push r14
|
|
000000019a44: push r13
|
|
000000019a46: push r12
|
|
000000019a48: push rbp
|
|
000000019a49: push rbx
|
|
000000019a4a: mov rbx, rdi
|
|
000000019a4d: sub rsp, 0x68
|
|
000000019a51: mov qword ptr [rdi + 0xb70], 0
|
|
000000019a5c: mov qword ptr [rdi + 0xb78], 0
|
|
000000019a67: mov qword ptr [rsp + 0x18], rsi
|
|
000000019a6c: mov esi, 0x6bb6b670
|
|
000000019a71: call 0x18ad0
|
|
000000019a76: test eax, eax
|
|
000000019a78: je 0x19a84
|
|
000000019a7a: mov eax, dword ptr [rbx + 0xb70]
|
|
000000019a80: test eax, eax
|
|
000000019a82: jne 0x19ab8
|
|
000000019a84: mov rax, qword ptr [rbx + 0x58]
|
|
000000019a88: test rax, rax
|
|
000000019a8b: je 0x19c40
|
|
000000019a91: mov rcx, qword ptr [rbx + 0x60]
|
|
000000019a95: mov edi, dword ptr [rbx + 0x33c]
|
|
000000019a9b: xor edx, edx
|
|
000000019a9d: mov esi, 0xffffffff
|
|
000000019aa2: call rax
|
|
000000019aa4: xor eax, eax
|
|
000000019aa6: add rsp, 0x68
|
|
000000019aaa: pop rbx
|
|
000000019aab: pop rbp
|
|
000000019aac: pop r12
|
|
000000019aae: pop r13
|
|
000000019ab0: pop r14
|
|
000000019ab2: pop r15
|
|
000000019ab4: ret
|
|
000000019ab5: nop dword ptr [rax]
|
|
000000019ab8: mov eax, dword ptr [rbx + 0xb70]
|
|
000000019abe: cmp eax, 0x6400000
|
|
000000019ac3: ja 0x19a84
|
|
000000019ac5: mov r13d, dword ptr [rbx + 0xb70]
|
|
000000019acc: movsxd rax, r13d
|
|
000000019acf: mov rdi, rax
|
|
000000019ad2: mov qword ptr [rsp + 8], rax
|
|
000000019ad7: call 0x5e40
|
|
000000019adc: test rax, rax
|
|
000000019adf: mov qword ptr [rsp + 0x20], rax
|
|
000000019ae4: je 0x19a84
|
|
000000019ae6: lea rax, [rsp + 0x40]
|
|
000000019aeb: mov esi, 2
|
|
000000019af0: mov dword ptr [rsp + 0x3c], 0
|
|
000000019af8: mov rdi, rax
|
|
000000019afb: mov r15, rax
|
|
000000019afe: mov qword ptr [rsp + 0x28], rax
|
|
000000019b03: call 0x13aa0
|
|
000000019b08: lea rsi, [rip + 0x18401]
|
|
000000019b0f: mov rdi, r15
|
|
000000019b12: call 0x16630
|
|
000000019b17: mov rdi, r15
|
|
000000019b1a: call 0x13b30
|
|
000000019b1f: mov rax, qword ptr [rbx + 0x58]
|
|
000000019b23: test rax, rax
|
|
000000019b26: je 0x19b38
|
|
000000019b28: mov rcx, qword ptr [rbx + 0x60]
|
|
000000019b2c: mov edi, dword ptr [rbx + 0x33c]
|
|
000000019b32: xor edx, edx
|
|
000000019b34: xor esi, esi
|
|
000000019b36: call rax
|
|
000000019b38: test r13d, r13d
|
|
000000019b3b: mov r14d, r13d
|
|
000000019b3e: jle 0x19d0b
|
|
000000019b44: mov rax, rbx
|
|
000000019b47: mov rbp, qword ptr [rsp + 0x20]
|
|
000000019b4c: mov ebx, r13d
|
|
000000019b4f: xor r12d, r12d
|
|
000000019b52: lea r15, [rsp + 0x3c]
|
|
000000019b57: mov r13, rax
|
|
000000019b5a: jmp 0x19b69
|
|
000000019b5c: nop dword ptr [rax]
|
|
000000019b60: test r14d, r14d
|
|
000000019b63: jle 0x19c08
|
|
000000019b69: mov rdi, qword ptr [r13 + 0x68]
|
|
000000019b6d: cmp r14d, 0x80000
|