275 lines
20 KiB
Plaintext
275 lines
20 KiB
Plaintext
0000000186b0: push r12
|
|
0000000186b2: mov r11, rdx
|
|
0000000186b5: mov r12d, r9d
|
|
0000000186b8: mov r10d, 0x110
|
|
0000000186be: push rbp
|
|
0000000186bf: lea rbp, [rdi + 0x1f0]
|
|
0000000186c6: test bpl, 1
|
|
0000000186ca: push rbx
|
|
0000000186cb: mov rbx, rdi
|
|
0000000186ce: mov rdi, rbp
|
|
0000000186d1: jne 0x18798
|
|
0000000186d7: test dil, 2
|
|
0000000186db: jne 0x187b8
|
|
0000000186e1: test dil, 4
|
|
0000000186e5: jne 0x187d0
|
|
0000000186eb: mov ecx, r10d
|
|
0000000186ee: xor eax, eax
|
|
0000000186f0: shr ecx, 3
|
|
0000000186f3: test r10b, 4
|
|
0000000186f7: rep stosq qword ptr [rdi], rax
|
|
0000000186fa: je 0x18706
|
|
0000000186fc: mov dword ptr [rdi], 0
|
|
000000018702: add rdi, 4
|
|
000000018706: test r10b, 2
|
|
00000001870a: je 0x18716
|
|
00000001870c: xor eax, eax
|
|
00000001870e: add rdi, 2
|
|
000000018712: mov word ptr [rdi - 2], ax
|
|
000000018716: and r10d, 1
|
|
00000001871a: je 0x1871f
|
|
00000001871c: mov byte ptr [rdi], 0
|
|
00000001871f: lea rdi, [rbx + 0x1fc]
|
|
000000018726: mov dword ptr [rbx + 0x1f4], r8d
|
|
00000001872d: mov dword ptr [rbx + 0x1f0], esi
|
|
000000018733: mov dword ptr [rbx + 0x1f8], 0
|
|
00000001873d: mov rsi, r11
|
|
000000018740: mov edx, 0x40
|
|
000000018745: call 0x64c0
|
|
00000001874a: mov rsi, qword ptr [rsp + 0x20]
|
|
00000001874f: mov dword ptr [rbx + 0x27c], r12d
|
|
000000018756: lea rdi, [rbx + 0x280]
|
|
00000001875d: lea r12, [rbx + 0x1c0]
|
|
000000018764: mov edx, 0x40
|
|
000000018769: call 0x64c0
|
|
00000001876e: mov rdi, r12
|
|
000000018771: call 0x65d0
|
|
000000018776: mov rsi, rbp
|
|
000000018779: mov rdi, rbx
|
|
00000001877c: call 0x18440
|
|
000000018781: mov rdi, r12
|
|
000000018784: mov ebx, eax
|
|
000000018786: call 0x66d0
|
|
00000001878b: mov eax, ebx
|
|
00000001878d: pop rbx
|
|
00000001878e: pop rbp
|
|
00000001878f: pop r12
|
|
000000018791: ret
|
|
000000018792: nop word ptr [rax + rax]
|
|
000000018798: lea rdi, [rbx + 0x1f1]
|
|
00000001879f: mov byte ptr [rbx + 0x1f0], 0
|
|
0000000187a6: mov r10b, 0xf
|
|
0000000187a9: test dil, 2
|
|
0000000187ad: je 0x186e1
|
|
0000000187b3: nop dword ptr [rax + rax]
|
|
0000000187b8: xor edx, edx
|
|
0000000187ba: add rdi, 2
|
|
0000000187be: sub r10d, 2
|
|
0000000187c2: mov word ptr [rdi - 2], dx
|
|
0000000187c6: test dil, 4
|
|
0000000187ca: je 0x186eb
|
|
0000000187d0: mov dword ptr [rdi], 0
|
|
0000000187d6: sub r10d, 4
|
|
0000000187da: add rdi, 4
|
|
0000000187de: jmp 0x186eb
|
|
0000000187e3: nop
|
|
0000000187e4: nop word ptr cs:[rax + rax]
|
|
0000000187f0: push r14
|
|
0000000187f2: mov r14d, ecx
|
|
0000000187f5: push r13
|
|
0000000187f7: mov r13, rdx
|
|
0000000187fa: push r12
|
|
0000000187fc: mov r12d, esi
|
|
0000000187ff: push rbp
|
|
000000018800: lea rbp, [rdi + 0xd8]
|
|
000000018807: push rbx
|
|
000000018808: mov rbx, rdi
|
|
00000001880b: mov rdi, rbp
|
|
00000001880e: call 0x65d0
|
|
000000018813: cmp r12d, 0x5bb5b55c
|
|
00000001881a: je 0x18880
|
|
00000001881c: jg 0x18848
|
|
00000001881e: cmp r12d, 0x5bb5b55b
|
|
000000018825: jne 0x18831
|
|
000000018827: cmp r14d, 0x38
|
|
00000001882b: je 0x188e0
|
|
000000018831: pop rbx
|
|
000000018832: mov rdi, rbp
|
|
000000018835: pop rbp
|
|
000000018836: pop r12
|
|
000000018838: pop r13
|
|
00000001883a: pop r14
|
|
00000001883c: jmp 0x66d0
|
|
000000018841: nop dword ptr [rax]
|
|
000000018848: cmp r12d, 0x5bb5b55e
|
|
00000001884f: jg 0x18831
|
|
000000018851: mov rax, qword ptr [r13]
|
|
000000018855: mov rdi, rbp
|
|
000000018858: mov qword ptr [rbx + 0xb70], rax
|
|
00000001885f: mov rax, qword ptr [r13 + 8]
|
|
000000018863: mov qword ptr [rbx + 0xb78], rax
|
|
00000001886a: pop rbx
|
|
00000001886b: pop rbp
|
|
00000001886c: pop r12
|
|
00000001886e: pop r13
|
|
000000018870: pop r14
|
|
000000018872: jmp 0x66d0
|
|
000000018877: nop word ptr [rax + rax]
|
|
000000018880: cmp r14d, 0x38
|
|
000000018884: jne 0x18831
|
|
000000018886: mov rdx, qword ptr [r13]
|
|
00000001888a: mov qword ptr [rbx + 0xb38], rdx
|
|
000000018891: mov rdx, qword ptr [r13 + 8]
|
|
000000018895: mov qword ptr [rbx + 0xb40], rdx
|
|
00000001889c: mov rdx, qword ptr [r13 + 0x10]
|
|
0000000188a0: mov qword ptr [rbx + 0xb48], rdx
|
|
0000000188a7: mov rdx, qword ptr [r13 + 0x18]
|
|
0000000188ab: mov qword ptr [rbx + 0xb50], rdx
|
|
0000000188b2: mov rdx, qword ptr [r13 + 0x20]
|
|
0000000188b6: mov qword ptr [rbx + 0xb58], rdx
|
|
0000000188bd: mov rdx, qword ptr [r13 + 0x28]
|
|
0000000188c1: mov qword ptr [rbx + 0xb60], rdx
|
|
0000000188c8: mov rdx, qword ptr [r13 + 0x30]
|
|
0000000188cc: mov qword ptr [rbx + 0xb68], rdx
|
|
0000000188d3: jmp 0x18831
|
|
0000000188d8: nop dword ptr [rax + rax]
|
|
0000000188e0: mov rdx, qword ptr [r13]
|
|
0000000188e4: mov qword ptr [rbx + 0xb00], rdx
|
|
0000000188eb: mov rdx, qword ptr [r13 + 8]
|
|
0000000188ef: mov qword ptr [rbx + 0xb08], rdx
|
|
0000000188f6: mov rdx, qword ptr [r13 + 0x10]
|
|
0000000188fa: mov qword ptr [rbx + 0xb10], rdx
|
|
000000018901: mov rdx, qword ptr [r13 + 0x18]
|
|
000000018905: mov eax, dword ptr [rbx + 0xb10]
|
|
00000001890b: mov qword ptr [rbx + 0xb18], rdx
|
|
000000018912: mov rdx, qword ptr [r13 + 0x20]
|
|
000000018916: test eax, eax
|
|
000000018918: mov qword ptr [rbx + 0xb20], rdx
|
|
00000001891f: mov rdx, qword ptr [r13 + 0x28]
|
|
000000018923: mov qword ptr [rbx + 0xb28], rdx
|
|
00000001892a: mov rdx, qword ptr [r13 + 0x30]
|
|
00000001892e: mov qword ptr [rbx + 0xb30], rdx
|
|
000000018935: je 0x18831
|
|
00000001893b: mov eax, dword ptr [rbx + 0xb14]
|
|
000000018941: test eax, eax
|
|
000000018943: je 0x18831
|
|
000000018949: lea r14, [rbx + 0xac8]
|
|
000000018950: mov rdi, rbp
|
|
000000018953: call 0x66d0
|
|
000000018958: mov rdi, r14
|
|
00000001895b: call 0x65d0
|
|
000000018960: mov eax, dword ptr [rbx + 0xac0]
|
|
000000018966: test eax, eax
|
|
000000018968: je 0x189d0
|
|
00000001896a: lea r12, [rbx + 0x340]
|
|
000000018971: xor r13d, r13d
|
|
000000018974: jmp 0x18993
|
|
000000018976: nop word ptr cs:[rax + rax]
|
|
000000018980: mov eax, dword ptr [rbx + 0xac0]
|
|
000000018986: add r13d, 1
|
|
00000001898a: add r12, 0x3c
|
|
00000001898e: cmp eax, r13d
|
|
000000018991: jbe 0x189d0
|
|
000000018993: mov eax, dword ptr [rbx + 0x78]
|
|
000000018996: cmp dword ptr [r12 + 0x24], eax
|
|
00000001899b: jne 0x18980
|
|
00000001899d: mov eax, dword ptr [rbx + 0xb00]
|
|
0000000189a3: lea rcx, [rip + 0x195e4]
|
|
0000000189aa: mov edx, 0x20
|
|
0000000189af: mov esi, 1
|
|
0000000189b4: mov rdi, r12
|
|
0000000189b7: mov dword ptr [r12 + 0x28], eax
|
|
0000000189bc: mov r8d, dword ptr [rbx + 0xb00]
|
|
0000000189c3: xor eax, eax
|
|
0000000189c5: call 0x6530
|
|
0000000189ca: jmp 0x18980
|
|
0000000189cc: nop dword ptr [rax]
|
|
0000000189d0: mov rdi, r14
|
|
0000000189d3: call 0x66d0
|
|
0000000189d8: mov rdi, rbp
|
|
0000000189db: call 0x65d0
|
|
0000000189e0: jmp 0x18831
|
|
0000000189e5: nop
|
|
0000000189e6: nop word ptr cs:[rax + rax]
|
|
0000000189f0: push r14
|
|
0000000189f2: push r13
|
|
0000000189f4: mov r13, rsi
|
|
0000000189f7: push r12
|
|
0000000189f9: mov r12d, edx
|
|
0000000189fc: push rbp
|
|
0000000189fd: lea rbp, [rdi + 0xb0]
|
|
000000018a04: push rbx
|
|
000000018a05: mov rbx, rdi
|
|
000000018a08: mov rdi, rbp
|
|
000000018a0b: sub rsp, 0x1010
|
|
000000018a12: call 0x65d0
|
|
000000018a17: mov eax, dword ptr [rbx + 0x80]
|
|
000000018a1d: test eax, eax
|
|
000000018a1f: je 0x18a4e
|
|
000000018a21: lea r14, [rsp + 0xc]
|
|
000000018a26: mov rdi, qword ptr [rbx + 0x68]
|
|
000000018a2a: mov r9d, 0x1f4
|
|
000000018a30: mov ecx, r12d
|
|
000000018a33: mov rdx, r13
|
|
000000018a36: mov esi, 3
|
|
000000018a3b: mov r8, r14
|
|
000000018a3e: call 0x65b0
|
|
000000018a43: test eax, eax
|
|
000000018a45: js 0x18a4e
|
|
000000018a47: cmp r12d, dword ptr [rsp + 0xc]
|
|
000000018a4c: je 0x18a70
|
|
000000018a4e: xor ebx, ebx
|
|
000000018a50: mov rdi, rbp
|
|
000000018a53: call 0x66d0
|
|
000000018a58: add rsp, 0x1010
|
|
000000018a5f: mov eax, ebx
|
|
000000018a61: pop rbx
|
|
000000018a62: pop rbp
|
|
000000018a63: pop r12
|
|
000000018a65: pop r13
|
|
000000018a67: pop r14
|
|
000000018a69: ret
|
|
000000018a6a: nop word ptr [rax + rax]
|
|
000000018a70: lea r12, [rsp + 0x10]
|
|
000000018a75: mov rdi, qword ptr [rbx + 0x68]
|
|
000000018a79: mov r9d, 0x7d0
|
|
000000018a7f: mov r8, r14
|
|
000000018a82: mov ecx, 0x1000
|
|
000000018a87: mov esi, 0x82
|
|
000000018a8c: mov rdx, r12
|
|
000000018a8f: call 0x65b0
|
|
000000018a94: test eax, eax
|
|
000000018a96: js 0x18a4e
|
|
000000018a98: mov ecx, dword ptr [rsp + 0xc]
|
|
000000018a9c: cmp ecx, 3
|
|
000000018a9f: jle 0x18a4e
|
|
000000018aa1: mov esi, dword ptr [rsp + 0x10]
|
|
000000018aa5: lea rdx, [r12 + 4]
|
|
000000018aaa: mov rdi, rbx
|
|
000000018aad: sub ecx, 4
|
|
000000018ab0: mov ebx, 1
|
|
000000018ab5: call 0x187f0
|
|
000000018aba: jmp 0x18a50
|
|
000000018abc: mov rbx, rax
|
|
000000018abf: mov rdi, rbp
|
|
000000018ac2: call 0x66d0
|
|
000000018ac7: mov rdi, rbx
|
|
000000018aca: call 0x6680
|
|
000000018acf: nop
|
|
000000018ad0: sub rsp, 0x18
|
|
000000018ad4: mov eax, dword ptr [rdi + 0x80]
|
|
000000018ada: mov dword ptr [rsp + 0xc], esi
|
|
000000018ade: test eax, eax
|
|
000000018ae0: jne 0x18af8
|
|
000000018ae2: call 0x6390
|
|
000000018ae7: mov dword ptr [rax], 0xe4ae0005
|
|
000000018aed: xor eax, eax
|
|
000000018aef: add rsp, 0x18
|
|
000000018af3: ret
|
|
000000018af4: nop dword ptr [rax]
|
|
000000018af8: lea rsi, [rsp + 0xc]
|
|
000000018afd: mov edx, 4
|
|
000000018b02: call 0x189f0
|
|
000000018b07: add rsp, 0x18
|
|
000000018b0b: ret
|