273 lines
20 KiB
Plaintext
273 lines
20 KiB
Plaintext
00000001d8b0: push r15
|
|
00000001d8b2: push r14
|
|
00000001d8b4: push r13
|
|
00000001d8b6: push r12
|
|
00000001d8b8: push rbp
|
|
00000001d8b9: push rbx
|
|
00000001d8ba: mov rbx, rsi
|
|
00000001d8bd: sub rsp, 0x178
|
|
00000001d8c4: mov rax, qword ptr fs:[0x28]
|
|
00000001d8cd: mov qword ptr [rsp + 0x168], rax
|
|
00000001d8d5: xor eax, eax
|
|
00000001d8d7: test rsi, rsi
|
|
00000001d8da: je 0x1d8e9
|
|
00000001d8dc: test rdx, rdx
|
|
00000001d8df: mov rbp, rdx
|
|
00000001d8e2: je 0x1d8e9
|
|
00000001d8e4: cmp ecx, 2
|
|
00000001d8e7: je 0x1d928
|
|
00000001d8e9: call 0x6390
|
|
00000001d8ee: xor r13d, r13d
|
|
00000001d8f1: mov dword ptr [rax], 0xe4ae0001
|
|
00000001d8f7: mov rsi, qword ptr [rsp + 0x168]
|
|
00000001d8ff: xor rsi, qword ptr fs:[0x28]
|
|
00000001d908: mov eax, r13d
|
|
00000001d90b: jne 0x1d9ca
|
|
00000001d911: add rsp, 0x178
|
|
00000001d918: pop rbx
|
|
00000001d919: pop rbp
|
|
00000001d91a: pop r12
|
|
00000001d91c: pop r13
|
|
00000001d91e: pop r14
|
|
00000001d920: pop r15
|
|
00000001d922: ret
|
|
00000001d923: nop dword ptr [rax + rax]
|
|
00000001d928: mov r12d, edi
|
|
00000001d92b: lea rcx, [rip + 0x22342e]
|
|
00000001d932: mov edx, dword ptr [rsi]
|
|
00000001d934: imul rax, r12, 0x4a8
|
|
00000001d93b: mov r14d, edi
|
|
00000001d93e: add rax, rcx
|
|
00000001d941: cmp edx, dword ptr [rax]
|
|
00000001d943: jne 0x1d8e9
|
|
00000001d945: mov ecx, dword ptr [rsi + 4]
|
|
00000001d948: cmp ecx, dword ptr [rax + 4]
|
|
00000001d94b: jne 0x1d8e9
|
|
00000001d94d: test dl, 3
|
|
00000001d950: jne 0x1d8e9
|
|
00000001d952: mov eax, dword ptr [rsi + 8]
|
|
00000001d955: test al, 3
|
|
00000001d957: jne 0x1d8e9
|
|
00000001d959: test byte ptr [rsi + 0x10], 3
|
|
00000001d95d: jne 0x1d8e9
|
|
00000001d95f: cmp edx, eax
|
|
00000001d961: ja 0x1d8e9
|
|
00000001d963: mov eax, dword ptr [rsi + 0xc]
|
|
00000001d966: cmp ecx, eax
|
|
00000001d968: ja 0x1d8e9
|
|
00000001d96e: test ecx, ecx
|
|
00000001d970: je 0x1d8e9
|
|
00000001d976: test eax, eax
|
|
00000001d978: je 0x1d8e9
|
|
00000001d97e: mov eax, dword ptr [rsi + 0x14]
|
|
00000001d981: test eax, eax
|
|
00000001d983: je 0x1d8e9
|
|
00000001d989: imul rdx, r12, 0x4a8
|
|
00000001d990: lea rax, [rip + 0x223389]
|
|
00000001d997: add rax, rdx
|
|
00000001d99a: cmp dword ptr [rax], 0
|
|
00000001d99d: jne 0x1dafd
|
|
00000001d9a3: lea rdi, [rip + 0x223366]
|
|
00000001d9aa: mov rcx, qword ptr [rdi + rdx]
|
|
00000001d9ae: mov r13d, dword ptr [rcx + 0x80]
|
|
00000001d9b5: test r13d, r13d
|
|
00000001d9b8: jne 0x1d9cf
|
|
00000001d9ba: call 0x6390
|
|
00000001d9bf: mov dword ptr [rax], 0xe4ae0005
|
|
00000001d9c5: jmp 0x1d8f7
|
|
00000001d9ca: call 0x63b0
|
|
00000001d9cf: mov dword ptr [rax + 4], 2
|
|
00000001d9d6: lea rax, [rip + 0x223793]
|
|
00000001d9dd: mov ecx, 6
|
|
00000001d9e2: lea r13, [rip + 0x223347]
|
|
00000001d9e9: mov r15d, r8d
|
|
00000001d9ec: add rax, rdx
|
|
00000001d9ef: mov dword ptr [rax + 8], 0
|
|
00000001d9f6: mov dword ptr [rax + 4], 0
|
|
00000001d9fd: lea rax, [rip + 0x2232fc]
|
|
00000001da04: lea rax, [rax + rdx + 0x40]
|
|
00000001da09: add rdx, r13
|
|
00000001da0c: mov rdi, rax
|
|
00000001da0f: rep movsd dword ptr [rdi], dword ptr [rsi]
|
|
00000001da11: mov eax, dword ptr [rbx]
|
|
00000001da13: mov rdi, qword ptr [rdx]
|
|
00000001da16: imul eax, dword ptr [rbx + 4]
|
|
00000001da1a: add eax, eax
|
|
00000001da1c: test rdi, rdi
|
|
00000001da1f: mov dword ptr [rsp + 0x14], eax
|
|
00000001da23: je 0x1da3b
|
|
00000001da25: mov qword ptr [rsp + 0x18], rdx
|
|
00000001da2a: call 0x6440
|
|
00000001da2f: mov rdx, qword ptr [rsp + 0x18]
|
|
00000001da34: mov qword ptr [rdx], 0
|
|
00000001da3b: mov edi, dword ptr [rsp + 0x14]
|
|
00000001da3f: imul r12, r12, 0x4a8
|
|
00000001da46: add rdi, 0x98
|
|
00000001da4d: call 0x5e40
|
|
00000001da52: add r13, r12
|
|
00000001da55: test rax, rax
|
|
00000001da58: mov qword ptr [r13], rax
|
|
00000001da5c: je 0x1dbe8
|
|
00000001da62: mov eax, dword ptr [rbx]
|
|
00000001da64: mov dword ptr [rsp + 0x48], 4
|
|
00000001da6c: mov dword ptr [rsp + 0x4c], 1
|
|
00000001da74: mov dword ptr [rsp + 0x50], 1
|
|
00000001da7c: mov dword ptr [rsp + 0x54], 5
|
|
00000001da84: mov dword ptr [rsp + 0x30], eax
|
|
00000001da88: mov eax, dword ptr [rbx + 4]
|
|
00000001da8b: mov dword ptr [rsp + 0x34], eax
|
|
00000001da8f: mov eax, dword ptr [rbx + 8]
|
|
00000001da92: mov dword ptr [rsp + 0x38], eax
|
|
00000001da96: mov eax, dword ptr [rbx + 0xc]
|
|
00000001da99: mov dword ptr [rsp + 0x3c], eax
|
|
00000001da9d: mov eax, dword ptr [rbx + 0x10]
|
|
00000001daa0: mov dword ptr [rsp + 0x40], eax
|
|
00000001daa4: mov eax, dword ptr [rbx + 0x14]
|
|
00000001daa7: mov dword ptr [rsp + 0x44], eax
|
|
00000001daab: lea rax, [rip + 0x22325e]
|
|
00000001dab2: add rax, r12
|
|
00000001dab5: mov rdi, qword ptr [rax]
|
|
00000001dab8: mov qword ptr [rsp + 0x18], rax
|
|
00000001dabd: call 0x19d90
|
|
00000001dac2: test eax, eax
|
|
00000001dac4: je 0x1db08
|
|
00000001dac6: lea rax, [rip + 0x223233]
|
|
00000001dacd: lea rsi, [rsp + 0x30]
|
|
00000001dad2: add rax, r12
|
|
00000001dad5: mov rdi, qword ptr [rax + 8]
|
|
00000001dad9: mov qword ptr [rsp + 0x20], rax
|
|
00000001dade: call 0x9670
|
|
00000001dae3: test eax, eax
|
|
00000001dae5: jne 0x1db10
|
|
00000001dae7: mov rdi, qword ptr [r13]
|
|
00000001daeb: test rdi, rdi
|
|
00000001daee: je 0x1dafd
|
|
00000001daf0: call 0x6440
|
|
00000001daf5: mov qword ptr [r13], 0
|
|
00000001dafd: call 0x6390
|
|
00000001db02: mov dword ptr [rax], 0xe4ae0003
|
|
00000001db08: xor r13d, r13d
|
|
00000001db0b: jmp 0x1d8f7
|
|
00000001db10: mov rax, qword ptr [rsp + 0x18]
|
|
00000001db15: lea rcx, [rsp + 0x60]
|
|
00000001db1a: mov edx, 0x100
|
|
00000001db1f: mov rsi, rcx
|
|
00000001db22: mov qword ptr [rsp + 0x28], rcx
|
|
00000001db27: mov rdi, qword ptr [rax]
|
|
00000001db2a: call 0x19380
|
|
00000001db2f: mov rax, qword ptr [rsp + 0x20]
|
|
00000001db34: mov rcx, qword ptr [rsp + 0x28]
|
|
00000001db39: mov rdi, qword ptr [rax + 8]
|
|
00000001db3d: mov rsi, rcx
|
|
00000001db40: call 0x12bc0
|
|
00000001db45: test eax, eax
|
|
00000001db47: je 0x1dafd
|
|
00000001db49: lea rax, [rip + 0x223600]
|
|
00000001db50: lea r10, [rax + r12]
|
|
00000001db54: mov dword ptr [r10], 0xffffffff
|
|
00000001db5b: mov qword ptr [rsp + 0x20], r10
|
|
00000001db60: call 0x6390
|
|
00000001db65: mov dword ptr [rax], 0xe4ae0007
|
|
00000001db6b: lea rax, [rip + 0x22322e]
|
|
00000001db72: mov edx, dword ptr [rbx + 0x10]
|
|
00000001db75: mov esi, 1
|
|
00000001db7a: mov edi, r14d
|
|
00000001db7d: add rax, r12
|
|
00000001db80: mov dword ptr [rax + 8], edx
|
|
00000001db83: mov edx, dword ptr [rbx + 0x14]
|
|
00000001db86: mov dword ptr [rax + 0xc], edx
|
|
00000001db89: call 0x1b850
|
|
00000001db8e: mov rax, qword ptr [rsp + 0x18]
|
|
00000001db93: mov dword ptr [rsp + 8], r15d
|
|
00000001db98: lea r9, [rip - 0x22bf]
|
|
00000001db9f: mov dword ptr [rsp], 0
|
|
00000001dba6: mov edx, dword ptr [rsp + 0x14]
|
|
00000001dbaa: xor ecx, ecx
|
|
00000001dbac: mov r8, qword ptr [r13]
|
|
00000001dbb0: mov esi, 1
|
|
00000001dbb5: mov rdi, qword ptr [rax]
|
|
00000001dbb8: call 0x191a0
|
|
00000001dbbd: test eax, eax
|
|
00000001dbbf: mov r10, qword ptr [rsp + 0x20]
|
|
00000001dbc4: jne 0x1dbfb
|
|
00000001dbc6: mov rdi, qword ptr [r13]
|
|
00000001dbca: test rdi, rdi
|
|
00000001dbcd: je 0x1db08
|
|
00000001dbd3: call 0x6440
|
|
00000001dbd8: mov qword ptr [r13], 0
|
|
00000001dbe0: xor r13d, r13d
|
|
00000001dbe3: jmp 0x1d8f7
|
|
00000001dbe8: call 0x6390
|
|
00000001dbed: xor r13d, r13d
|
|
00000001dbf0: mov dword ptr [rax], 0xe4ae0002
|
|
00000001dbf6: jmp 0x1d8f7
|
|
00000001dbfb: lea rax, [rip + 0x22355e]
|
|
00000001dc02: mov qword ptr [r13 + 8], rbp
|
|
00000001dc06: mov dword ptr [r10 + 8], 0
|
|
00000001dc0e: mov dword ptr [r10 + 4], r15d
|
|
00000001dc12: mov dword ptr [r10 + 0xc], 0
|
|
00000001dc1a: mov r13d, 1
|
|
00000001dc20: mov dword ptr [rax + r12 + 0xc], 0
|
|
00000001dc29: lea rax, [rip + 0x223540]
|
|
00000001dc30: mov dword ptr [rax + r12], 0xffffffff
|
|
00000001dc38: lea rax, [rip + 0x2230e1]
|
|
00000001dc3f: mov dword ptr [rax + r12], 1
|
|
00000001dc47: jmp 0x1d8f7
|
|
00000001dc4c: nop dword ptr [rax]
|
|
00000001dc50: push r14
|
|
00000001dc52: mov r14, r8
|
|
00000001dc55: push r13
|
|
00000001dc57: mov r13d, ecx
|
|
00000001dc5a: push r12
|
|
00000001dc5c: mov r12, rdx
|
|
00000001dc5f: push rbp
|
|
00000001dc60: mov rbp, rsi
|
|
00000001dc63: push rbx
|
|
00000001dc64: mov ebx, edi
|
|
00000001dc66: call 0x6400
|
|
00000001dc6b: test eax, eax
|
|
00000001dc6d: jne 0x1dc80
|
|
00000001dc6f: pop rbx
|
|
00000001dc70: pop rbp
|
|
00000001dc71: pop r12
|
|
00000001dc73: pop r13
|
|
00000001dc75: xor eax, eax
|
|
00000001dc77: pop r14
|
|
00000001dc79: ret
|
|
00000001dc7a: nop word ptr [rax + rax]
|
|
00000001dc80: mov eax, ebx
|
|
00000001dc82: lea rdx, [rip + 0x223087]
|
|
00000001dc89: mov edi, ebx
|
|
00000001dc8b: imul rax, rax, 0x4a8
|
|
00000001dc92: mov rsi, rbp
|
|
00000001dc95: mov ecx, r13d
|
|
00000001dc98: xor r8d, r8d
|
|
00000001dc9b: mov qword ptr [rdx + rax + 8], r14
|
|
00000001dca0: mov rdx, r12
|
|
00000001dca3: pop rbx
|
|
00000001dca4: pop rbp
|
|
00000001dca5: pop r12
|
|
00000001dca7: pop r13
|
|
00000001dca9: pop r14
|
|
00000001dcab: jmp 0x1d8b0
|
|
00000001dcb0: push r14
|
|
00000001dcb2: mov r14, r8
|
|
00000001dcb5: push r13
|
|
00000001dcb7: mov r13d, ecx
|
|
00000001dcba: push r12
|
|
00000001dcbc: mov r12, rdx
|
|
00000001dcbf: push rbp
|
|
00000001dcc0: mov rbp, rsi
|
|
00000001dcc3: push rbx
|
|
00000001dcc4: mov ebx, edi
|
|
00000001dcc6: call 0x6400
|
|
00000001dccb: test eax, eax
|
|
00000001dccd: jne 0x1dce0
|
|
00000001dccf: pop rbx
|
|
00000001dcd0: pop rbp
|
|
00000001dcd1: pop r12
|
|
00000001dcd3: pop r13
|
|
00000001dcd5: xor eax, eax
|
|
00000001dcd7: pop r14
|
|
00000001dcd9: ret
|