121 lines
8.4 KiB
Plaintext
121 lines
8.4 KiB
Plaintext
000000018440: push r15
|
|
000000018442: push r14
|
|
000000018444: push r13
|
|
000000018446: push r12
|
|
000000018448: push rbp
|
|
000000018449: push rbx
|
|
00000001844a: mov rbx, rdi
|
|
00000001844d: sub rsp, 0x48
|
|
000000018451: mov eax, dword ptr [rdi + 0x7c]
|
|
000000018454: test eax, eax
|
|
000000018456: je 0x185b0
|
|
00000001845c: mov eax, dword ptr [rdi + 0x80]
|
|
000000018462: test eax, eax
|
|
000000018464: je 0x18488
|
|
000000018466: call 0x6390
|
|
00000001846b: mov dword ptr [rax], 0xe4ae0003
|
|
000000018471: xor eax, eax
|
|
000000018473: add rsp, 0x48
|
|
000000018477: pop rbx
|
|
000000018478: pop rbp
|
|
000000018479: pop r12
|
|
00000001847b: pop r13
|
|
00000001847d: pop r14
|
|
00000001847f: pop r15
|
|
000000018481: ret
|
|
000000018482: nop word ptr [rax + rax]
|
|
000000018488: mov rdi, qword ptr [rdi + 0x70]
|
|
00000001848c: mov r13d, dword ptr [rsi]
|
|
00000001848f: lea rsi, [rsp + 0x18]
|
|
000000018494: call 0x5f00
|
|
000000018499: test rax, rax
|
|
00000001849c: js 0x185e8
|
|
0000000184a2: mov rax, r13
|
|
0000000184a5: mov r12d, r13d
|
|
0000000184a8: xor r14d, r14d
|
|
0000000184ab: movzx eax, ah
|
|
0000000184ae: shr r12d, 0x10
|
|
0000000184b2: lea rbp, [rsp + 0x20]
|
|
0000000184b7: mov dword ptr [rsp + 8], eax
|
|
0000000184bb: movzx eax, r13b
|
|
0000000184bf: mov dword ptr [rsp + 0xc], eax
|
|
0000000184c3: jmp 0x184cc
|
|
0000000184c5: nop dword ptr [rax]
|
|
0000000184c8: add r14, 8
|
|
0000000184cc: mov rax, qword ptr [rsp + 0x18]
|
|
0000000184d1: mov r15, qword ptr [rax + r14]
|
|
0000000184d5: test r15, r15
|
|
0000000184d8: je 0x185d0
|
|
0000000184de: mov rsi, rbp
|
|
0000000184e1: mov rdi, r15
|
|
0000000184e4: call 0x6450
|
|
0000000184e9: test eax, eax
|
|
0000000184eb: jne 0x184c8
|
|
0000000184ed: cmp word ptr [rsp + 0x28], 0x833c
|
|
0000000184f4: jne 0x184c8
|
|
0000000184f6: test r13d, r13d
|
|
0000000184f9: je 0x185fa
|
|
0000000184ff: movzx eax, word ptr [rsp + 0x2a]
|
|
000000018504: cmp eax, r12d
|
|
000000018507: jne 0x184c8
|
|
000000018509: mov rdi, r15
|
|
00000001850c: call 0x6090
|
|
000000018511: movzx eax, al
|
|
000000018514: cmp eax, dword ptr [rsp + 8]
|
|
000000018518: jne 0x184c8
|
|
00000001851a: mov rdi, r15
|
|
00000001851d: call 0x5d30
|
|
000000018522: movzx eax, al
|
|
000000018525: cmp eax, dword ptr [rsp + 0xc]
|
|
000000018529: jne 0x184c8
|
|
00000001852b: nop dword ptr [rax + rax]
|
|
000000018530: lea rsi, [rbx + 0x68]
|
|
000000018534: mov rdi, r15
|
|
000000018537: call 0x5db0
|
|
00000001853c: test eax, eax
|
|
00000001853e: js 0x18681
|
|
000000018544: mov rdi, qword ptr [rsp + 0x18]
|
|
000000018549: mov esi, 1
|
|
00000001854e: call 0x5eb0
|
|
000000018553: mov rdi, qword ptr [rbx + 0x68]
|
|
000000018557: mov esi, 1
|
|
00000001855c: call 0x6280
|
|
000000018561: mov rdi, qword ptr [rbx + 0x68]
|
|
000000018565: mov esi, 2
|
|
00000001856a: call 0x5e10
|
|
00000001856f: test eax, eax
|
|
000000018571: js 0x1865b
|
|
000000018577: mov rdi, qword ptr [rbx + 0x68]
|
|
00000001857b: xor esi, esi
|
|
00000001857d: call 0x5de0
|
|
000000018582: test eax, eax
|
|
000000018584: jns 0x18630
|
|
00000001858a: call 0x6390
|
|
00000001858f: mov dword ptr [rax], 0xe4ae0206
|
|
000000018595: mov rdi, qword ptr [rbx + 0x68]
|
|
000000018599: call 0x5d60
|
|
00000001859e: mov qword ptr [rbx + 0x68], 0
|
|
0000000185a6: xor eax, eax
|
|
0000000185a8: jmp 0x18473
|
|
0000000185ad: nop dword ptr [rax]
|
|
0000000185b0: call 0x6390
|
|
0000000185b5: mov dword ptr [rax], 0xe4ae0004
|
|
0000000185bb: add rsp, 0x48
|
|
0000000185bf: xor eax, eax
|
|
0000000185c1: pop rbx
|
|
0000000185c2: pop rbp
|
|
0000000185c3: pop r12
|
|
0000000185c5: pop r13
|
|
0000000185c7: pop r14
|
|
0000000185c9: pop r15
|
|
0000000185cb: ret
|
|
0000000185cc: nop dword ptr [rax]
|
|
0000000185d0: call 0x6390
|
|
0000000185d5: mov dword ptr [rax], 0xe4ae0001
|
|
0000000185db: xor eax, eax
|
|
0000000185dd: jmp 0x18473
|
|
0000000185e2: nop word ptr [rax + rax]
|
|
0000000185e8: call 0x6390
|
|
0000000185ed: mov dword ptr [rax], 0xe4ae0101
|
|
0000000185f3: xor eax, eax
|