Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- .text:00000001400011E0 sub_1400011E0 proc near ; DATA XREF: sub_140001300+125o
- .text:00000001400011E0 ; .pdata:000000014001B024o
- .text:00000001400011E0
- .text:00000001400011E0 var_28 = dword ptr -28h
- .text:00000001400011E0 var_20 = dword ptr -20h
- .text:00000001400011E0 arg_0 = dword ptr 8
- .text:00000001400011E0
- .text:00000001400011E0 mov r11, rsp
- .text:00000001400011E3 mov [r11+10h], rbx
- .text:00000001400011E7 mov [r11+18h], rsi
- .text:00000001400011EB push rdi
- .text:00000001400011EC sub rsp, 40h
- .text:00000001400011F0 mov rax, 6578652E35415447h
- .text:00000001400011FA lea rcx, [r11-18h]
- .text:00000001400011FE mov [r11-18h], rax
- .text:0000000140001202 xor ebx, ebx
- .text:0000000140001204 mov rax, 0FFFF7FFFFFFFFFFFh
- .text:000000014000120E mov [r11-10h], rbx
- .text:0000000140001212 mov edi, ebx
- .text:0000000140001214 call rax
- .text:0000000140001216 mov rcx, rax
- .text:0000000140001219 cmp rax, 0FFFFFFFFFFFFFFFFh
- .text:000000014000121D jnb short loc_14000128C
- .text:000000014000121F
- .text:000000014000121F loc_14000121F: ; CODE XREF: sub_1400011E0+7Bj
- .text:000000014000121F cmp dword ptr [rcx], 245C8948h
- .text:0000000140001225 jnz short loc_140001252
- .text:0000000140001227 cmp dword ptr [rcx+5], 246C8948h
- .text:000000014000122E jnz short loc_140001252
- .text:0000000140001230 cmp dword ptr [rcx+0Ah], 24748948h
- .text:0000000140001237 jnz short loc_140001252
- .text:0000000140001239 mov rdx, 0EC83485741564157h
- .text:0000000140001243 cmp [rcx+0Fh], rdx
- .text:0000000140001247 jnz short loc_140001252
- .text:0000000140001249 cmp dword ptr [rcx+17h], 0F18B4550h
- .text:0000000140001250 jz short loc_14000125D
- .text:0000000140001252
- .text:0000000140001252 loc_140001252: ; CODE XREF: sub_1400011E0+45j
- .text:0000000140001252 ; sub_1400011E0+4Ej ...
- .text:0000000140001252 inc rcx
- .text:0000000140001255 cmp rcx, 0FFFFFFFFFFFFFFFFh
- .text:0000000140001259 jnb short loc_140001260
- .text:000000014000125B jmp short loc_14000121F
- .text:000000014000125D ; ---------------------------------------------------------------------------
- .text:000000014000125D
- .text:000000014000125D loc_14000125D: ; CODE XREF: sub_1400011E0+70j
- .text:000000014000125D mov rbx, rcx
- .text:0000000140001260
- .text:0000000140001260 loc_140001260: ; CODE XREF: sub_1400011E0+79j
- .text:0000000140001260 ; sub_1400011E0+A7j
- .text:0000000140001260 cmp rax, 0FFFFFFFFFFFFFFFFh
- .text:0000000140001264 jnb short loc_14000128C
- .text:0000000140001266 mov rcx, 0D98B20EC83485340h
- .text:0000000140001270 cmp [rax], rcx
- .text:0000000140001273 jnz short loc_140001284
- .text:0000000140001275 cmp byte ptr [rax+8], 0E8h
- .text:0000000140001279 jnz short loc_140001284
- .text:000000014000127B cmp dword ptr [rax+0Dh], 675C084h
- .text:0000000140001282 jz short loc_140001289
- .text:0000000140001284
- .text:0000000140001284 loc_140001284: ; CODE XREF: sub_1400011E0+93j
- .text:0000000140001284 ; sub_1400011E0+99j
- .text:0000000140001284 inc rax
- .text:0000000140001287 jmp short loc_140001260
- .text:0000000140001289 ; ---------------------------------------------------------------------------
- .text:0000000140001289
- .text:0000000140001289 loc_140001289: ; CODE XREF: sub_1400011E0+A2j
- .text:0000000140001289 mov rdi, rax
- .text:000000014000128C
- .text:000000014000128C loc_14000128C: ; CODE XREF: sub_1400011E0+3Dj
- .text:000000014000128C ; sub_1400011E0+84j
- .text:000000014000128C mov rsi, 77FFFFFFFFFFFFFFh
- .text:0000000140001296
- .text:0000000140001296 loc_140001296: ; CODE XREF: sub_1400011E0+115j
- .text:0000000140001296 mov ecx, 78h
- .text:000000014000129B mov rax, 8956FFFFFFFFFFFFh
- .text:00000001400012A5 call rax
- .text:00000001400012A7 mov ecx, 8000h
- .text:00000001400012AC test cx, ax
- .text:00000001400012AF jz short loc_1400012EE
- .text:00000001400012B1 mov [rsp+48h+var_20], 4
- .text:00000001400012B9 lea rcx, [rsp+48h+arg_0]
- .text:00000001400012BE mov edx, 57DE404Eh
- .text:00000001400012C3 mov [rsp+48h+var_28], 989687h
- .text:00000001400012CB mov r9d, 562592BBh
- .text:00000001400012D1 mov [rsp+48h+arg_0], 7FFFFFFFh
- .text:00000001400012D9 mov r8d, 0A174F633h
- .text:00000001400012DF call rbx
- .text:00000001400012E1 mov ecx, [rsp+48h+arg_0]
- .text:00000001400012E5 call rdi
- .text:00000001400012E7 mov ecx, 7D0h
- .text:00000001400012EC call rsi
- .text:00000001400012EE
- .text:00000001400012EE loc_1400012EE: ; CODE XREF: sub_1400011E0+CFj
- .text:00000001400012EE mov ecx, 1
- .text:00000001400012F3 call rsi
- .text:00000001400012F5 jmp short loc_140001296
- .text:00000001400012F5 sub_1400011E0 endp
Add Comment
Please, Sign In to add comment
