176 lines
9.9 KiB
NASM
176 lines
9.9 KiB
NASM
|
Disassembly of section .data:
|
||
|
|
|
||
|
|
000000019e745df0 <.data>:
|
||
|
|
19e745df0: 56 push rsi
|
||
|
|
19e745df1: 57 push rdi
|
||
|
|
19e745df2: 53 push rbx
|
||
|
|
19e745df3: 48 83 ec 30 sub rsp,0x30
|
||
|
|
19e745df7: 48 89 d7 mov rdi,rdx
|
||
|
|
19e745dfa: 48 89 ce mov rsi,rcx
|
||
|
|
19e745dfd: 48 c7 44 24 28 00 00 mov QWORD PTR [rsp+0x28],0x0
|
||
|
|
19e745e04: 00 00
|
||
|
|
19e745e06: 48 8b 0d a3 04 13 eb mov rcx,QWORD PTR [rip+0xffffffffeb1304a3] # 0x1898762b0
|
||
|
|
19e745e0d: e8 be cb 81 e5 call 0x183f629d0
|
||
|
|
19e745e12: 48 89 07 mov QWORD PTR [rdi],rax
|
||
|
|
19e745e15: 48 8b 0d 4c 16 13 eb mov rcx,QWORD PTR [rip+0xffffffffeb13164c] # 0x189877468
|
||
|
|
19e745e1c: 80 b9 b7 00 00 00 00 cmp BYTE PTR [rcx+0xb7],0x0
|
||
|
|
19e745e23: 0f 84 c0 01 00 00 je 0x19e745fe9
|
||
|
|
19e745e29: 48 89 f1 mov rcx,rsi
|
||
|
|
19e745e2c: e8 ff 55 b8 ff call 0x19e2cb430
|
||
|
|
19e745e31: 48 8b 0f mov rcx,QWORD PTR [rdi]
|
||
|
|
19e745e34: 48 85 c9 test rcx,rcx
|
||
|
|
19e745e37: 0f 84 cf 01 00 00 je 0x19e74600c
|
||
|
|
19e745e3d: 89 c2 mov edx,eax
|
||
|
|
19e745e3f: d1 ea shr edx,1
|
||
|
|
19e745e41: 83 e0 01 and eax,0x1
|
||
|
|
19e745e44: f7 d8 neg eax
|
||
|
|
19e745e46: 31 d0 xor eax,edx
|
||
|
|
19e745e48: 88 41 30 mov BYTE PTR [rcx+0x30],al
|
||
|
|
19e745e4b: 48 8b 1f mov rbx,QWORD PTR [rdi]
|
||
|
|
19e745e4e: 48 85 db test rbx,rbx
|
||
|
|
19e745e51: 0f 84 ba 01 00 00 je 0x19e746011
|
||
|
|
19e745e57: 0f b6 43 30 movzx eax,BYTE PTR [rbx+0x30]
|
||
|
|
19e745e5b: 48 83 f8 05 cmp rax,0x5
|
||
|
|
19e745e5f: 0f 87 51 01 00 00 ja 0x19e745fb6
|
||
|
|
19e745e65: 48 8d 0d 34 02 00 00 lea rcx,[rip+0x234] # 0x19e7460a0
|
||
|
|
19e745e6c: 48 63 04 81 movsxd rax,DWORD PTR [rcx+rax*4]
|
||
|
|
19e745e70: 48 01 c8 add rax,rcx
|
||
|
|
19e745e73: ff e0 jmp rax
|
||
|
|
19e745e75: 48 8b 0d ec 15 13 eb mov rcx,QWORD PTR [rip+0xffffffffeb1315ec] # 0x189877468
|
||
|
|
19e745e7c: 80 b9 b7 00 00 00 00 cmp BYTE PTR [rcx+0xb7],0x0
|
||
|
|
19e745e83: 0f 84 8d 01 00 00 je 0x19e746016
|
||
|
|
19e745e89: 48 89 f1 mov rcx,rsi
|
||
|
|
19e745e8c: e8 9f 55 b8 ff call 0x19e2cb430
|
||
|
|
19e745e91: 48 8b 0f mov rcx,QWORD PTR [rdi]
|
||
|
|
19e745e94: 48 85 c9 test rcx,rcx
|
||
|
|
19e745e97: 0f 84 9c 01 00 00 je 0x19e746039
|
||
|
|
19e745e9d: 48 89 c2 mov rdx,rax
|
||
|
|
19e745ea0: 48 d1 ea shr rdx,1
|
||
|
|
19e745ea3: 83 e0 01 and eax,0x1
|
||
|
|
19e745ea6: 48 f7 d8 neg rax
|
||
|
|
19e745ea9: 48 31 d0 xor rax,rdx
|
||
|
|
19e745eac: 48 89 41 28 mov QWORD PTR [rcx+0x28],rax
|
||
|
|
19e745eb0: e9 01 01 00 00 jmp 0x19e745fb6
|
||
|
|
19e745eb5: 48 8b 0d ac 15 13 eb mov rcx,QWORD PTR [rip+0xffffffffeb1315ac] # 0x189877468
|
||
|
|
19e745ebc: 80 b9 b7 00 00 00 00 cmp BYTE PTR [rcx+0xb7],0x0
|
||
|
|
19e745ec3: 0f 84 75 01 00 00 je 0x19e74603e
|
||
|
|
19e745ec9: 48 8d 54 24 28 lea rdx,[rsp+0x28]
|
||
|
|
19e745ece: 48 89 f1 mov rcx,rsi
|
||
|
|
19e745ed1: e8 6a 2b bc ff call 0x19e308a40
|
||
|
|
19e745ed6: 48 8b 07 mov rax,QWORD PTR [rdi]
|
||
|
|
19e745ed9: 48 85 c0 test rax,rax
|
||
|
|
19e745edc: 0f 84 66 01 00 00 je 0x19e746048
|
||
|
|
19e745ee2: f2 0f 10 44 24 28 movsd xmm0,QWORD PTR [rsp+0x28]
|
||
|
|
19e745ee8: f2 0f 11 40 28 movsd QWORD PTR [rax+0x28],xmm0
|
||
|
|
19e745eed: e9 c4 00 00 00 jmp 0x19e745fb6
|
||
|
|
19e745ef2: 48 8b 0d 6f 15 13 eb mov rcx,QWORD PTR [rip+0xffffffffeb13156f] # 0x189877468
|
||
|
|
19e745ef9: 80 b9 b7 00 00 00 00 cmp BYTE PTR [rcx+0xb7],0x0
|
||
|
|
19e745f00: 0f 84 47 01 00 00 je 0x19e74604d
|
||
|
|
19e745f06: 48 85 f6 test rsi,rsi
|
||
|
|
19e745f09: 0f 84 4c 01 00 00 je 0x19e74605b
|
||
|
|
19e745f0f: 48 8b 4e 10 mov rcx,QWORD PTR [rsi+0x10]
|
||
|
|
19e745f13: 8b 56 18 mov edx,DWORD PTR [rsi+0x18]
|
||
|
|
19e745f16: e8 b5 41 9c fe call 0x19d10a0d0
|
||
|
|
19e745f1b: 89 c3 mov ebx,eax
|
||
|
|
19e745f1d: 48 89 f1 mov rcx,rsi
|
||
|
|
19e745f20: ba 01 00 00 00 mov edx,0x1
|
||
|
|
19e745f25: e8 46 39 6d 00 call 0x19ee19870
|
||
|
|
19e745f2a: 48 8b 07 mov rax,QWORD PTR [rdi]
|
||
|
|
19e745f2d: 48 85 c0 test rax,rax
|
||
|
|
19e745f30: 0f 84 61 01 00 00 je 0x19e746097
|
||
|
|
19e745f36: 0f b6 cb movzx ecx,bl
|
||
|
|
19e745f39: 48 89 48 28 mov QWORD PTR [rax+0x28],rcx
|
||
|
|
19e745f3d: eb 77 jmp 0x19e745fb6
|
||
|
|
19e745f3f: 48 8b 3d 42 ae 27 eb mov rdi,QWORD PTR [rip+0xffffffffeb27ae42] # 0x1899c0d88
|
||
|
|
19e745f46: 48 83 c3 20 add rbx,0x20
|
||
|
|
19e745f4a: 48 8b 0d 17 15 13 eb mov rcx,QWORD PTR [rip+0xffffffffeb131517] # 0x189877468
|
||
|
|
19e745f51: 80 b9 b7 00 00 00 00 cmp BYTE PTR [rcx+0xb7],0x0
|
||
|
|
19e745f58: 0f 84 02 01 00 00 je 0x19e746060
|
||
|
|
19e745f5e: 4c 8b 0d 43 ae 27 eb mov r9,QWORD PTR [rip+0xffffffffeb27ae43] # 0x1899c0da8
|
||
|
|
19e745f65: 48 89 f1 mov rcx,rsi
|
||
|
|
19e745f68: 48 89 fa mov rdx,rdi
|
||
|
|
19e745f6b: 49 89 d8 mov r8,rbx
|
||
|
|
19e745f6e: 48 83 c4 30 add rsp,0x30
|
||
|
|
19e745f72: 5b pop rbx
|
||
|
|
19e745f73: 5f pop rdi
|
||
|
|
19e745f74: 5e pop rsi
|
||
|
|
19e745f75: e9 66 ed 5a f9 jmp 0x197cf4ce0
|
||
|
|
19e745f7a: 48 8b 3d 07 ae 27 eb mov rdi,QWORD PTR [rip+0xffffffffeb27ae07] # 0x1899c0d88
|
||
|
|
19e745f81: 48 83 c3 18 add rbx,0x18
|
||
|
|
19e745f85: 48 8b 0d dc 14 13 eb mov rcx,QWORD PTR [rip+0xffffffffeb1314dc] # 0x189877468
|
||
|
|
19e745f8c: 80 b9 b7 00 00 00 00 cmp BYTE PTR [rcx+0xb7],0x0
|
||
|
|
19e745f93: 0f 84 d1 00 00 00 je 0x19e74606a
|
||
|
|
19e745f99: 48 8b 05 f8 ad 27 eb mov rax,QWORD PTR [rip+0xffffffffeb27adf8] # 0x1899c0d98
|
||
|
|
19e745fa0: 48 89 44 24 20 mov QWORD PTR [rsp+0x20],rax
|
||
|
|
19e745fa5: 48 89 f1 mov rcx,rsi
|
||
|
|
19e745fa8: 48 89 fa mov rdx,rdi
|
||
|
|
19e745fab: 49 89 f8 mov r8,rdi
|
||
|
|
19e745fae: 49 89 d9 mov r9,rbx
|
||
|
|
19e745fb1: e8 6a 00 5e f9 call 0x197d26020
|
||
|
|
19e745fb6: 90 nop
|
||
|
|
19e745fb7: 48 83 c4 30 add rsp,0x30
|
||
|
|
19e745fbb: 5b pop rbx
|
||
|
|
19e745fbc: 5f pop rdi
|
||
|
|
19e745fbd: 5e pop rsi
|
||
|
|
19e745fbe: c3 ret
|
||
|
|
19e745fbf: 48 83 c3 10 add rbx,0x10
|
||
|
|
19e745fc3: 48 8b 0d 9e 14 13 eb mov rcx,QWORD PTR [rip+0xffffffffeb13149e] # 0x189877468
|
||
|
|
19e745fca: 80 b9 b7 00 00 00 00 cmp BYTE PTR [rcx+0xb7],0x0
|
||
|
|
19e745fd1: 0f 84 9d 00 00 00 je 0x19e746074
|
||
|
|
19e745fd7: 48 89 f1 mov rcx,rsi
|
||
|
|
19e745fda: 48 89 da mov rdx,rbx
|
||
|
|
19e745fdd: 48 83 c4 30 add rsp,0x30
|
||
|
|
19e745fe1: 5b pop rbx
|
||
|
|
19e745fe2: 5f pop rdi
|
||
|
|
19e745fe3: 5e pop rsi
|
||
|
|
19e745fe4: e9 07 1e bb ff jmp 0x19e2f7df0
|
||
|
|
19e745fe9: e8 32 e6 80 e5 call 0x183f54620
|
||
|
|
19e745fee: 48 8b 0d 73 14 13 eb mov rcx,QWORD PTR [rip+0xffffffffeb131473] # 0x189877468
|
||
|
|
19e745ff5: 80 b9 b7 00 00 00 00 cmp BYTE PTR [rcx+0xb7],0x0
|
||
|
|
19e745ffc: 0f 85 27 fe ff ff jne 0x19e745e29
|
||
|
|
19e746002: e8 19 e6 80 e5 call 0x183f54620
|
||
|
|
19e746007: e9 1d fe ff ff jmp 0x19e745e29
|
||
|
|
19e74600c: e8 df a8 7a e5 call 0x183ef08f0
|
||
|
|
19e746011: e8 da a8 7a e5 call 0x183ef08f0
|
||
|
|
19e746016: e8 05 e6 80 e5 call 0x183f54620
|
||
|
|
19e74601b: 48 8b 0d 46 14 13 eb mov rcx,QWORD PTR [rip+0xffffffffeb131446] # 0x189877468
|
||
|
|
19e746022: 80 b9 b7 00 00 00 00 cmp BYTE PTR [rcx+0xb7],0x0
|
||
|
|
19e746029: 0f 85 5a fe ff ff jne 0x19e745e89
|
||
|
|
19e74602f: e8 ec e5 80 e5 call 0x183f54620
|
||
|
|
19e746034: e9 50 fe ff ff jmp 0x19e745e89
|
||
|
|
19e746039: e8 b2 a8 7a e5 call 0x183ef08f0
|
||
|
|
19e74603e: e8 dd e5 80 e5 call 0x183f54620
|
||
|
|
19e746043: e9 81 fe ff ff jmp 0x19e745ec9
|
||
|
|
19e746048: e8 a3 a8 7a e5 call 0x183ef08f0
|
||
|
|
19e74604d: e8 ce e5 80 e5 call 0x183f54620
|
||
|
|
19e746052: 48 85 f6 test rsi,rsi
|
||
|
|
19e746055: 0f 85 b4 fe ff ff jne 0x19e745f0f
|
||
|
|
19e74605b: e8 90 a8 7a e5 call 0x183ef08f0
|
||
|
|
19e746060: e8 bb e5 80 e5 call 0x183f54620
|
||
|
|
19e746065: e9 f4 fe ff ff jmp 0x19e745f5e
|
||
|
|
19e74606a: e8 b1 e5 80 e5 call 0x183f54620
|
||
|
|
19e74606f: e9 25 ff ff ff jmp 0x19e745f99
|
||
|
|
19e746074: e8 a7 e5 80 e5 call 0x183f54620
|
||
|
|
19e746079: 48 8b 0d e8 13 13 eb mov rcx,QWORD PTR [rip+0xffffffffeb1313e8] # 0x189877468
|
||
|
|
19e746080: 80 b9 b7 00 00 00 00 cmp BYTE PTR [rcx+0xb7],0x0
|
||
|
|
19e746087: 0f 85 4a ff ff ff jne 0x19e745fd7
|
||
|
|
19e74608d: e8 8e e5 80 e5 call 0x183f54620
|
||
|
|
19e746092: e9 40 ff ff ff jmp 0x19e745fd7
|
||
|
|
19e746097: e8 54 a8 7a e5 call 0x183ef08f0
|
||
|
|
19e74609c: cc int3
|
||
|
|
19e74609d: 0f 1f 00 nop DWORD PTR [rax]
|
||
|
|
19e7460a0: d5 fd ff ff {rex2 0xfd} ud0 r31,r31
|
||
|
|
19e7460a4: 15 fe ff ff 52 adc eax,0x52fffffe
|
||
|
|
19e7460a9: fe (bad)
|
||
|
|
19e7460aa: ff (bad)
|
||
|
|
19e7460ab: ff 9f fe ff ff da call FWORD PTR [rdi-0x25000002]
|
||
|
|
19e7460b1: fe (bad)
|
||
|
|
19e7460b2: ff (bad)
|
||
|
|
19e7460b3: ff 1f call FWORD PTR [rdi]
|
||
|
|
19e7460b5: ff (bad)
|
||
|
|
19e7460b6: ff (bad)
|
||
|
|
19e7460b7: ff 0f dec DWORD PTR [rdi]
|
||
|
|
19e7460b9: 1f (bad)
|
||
|
|
19e7460ba: 84 00 test BYTE PTR [rax],al
|
||
|
|
19e7460bc: 00 00 add BYTE PTR [rax],al
|
||
|
|
...
|