Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- .text:000000014017A5C0 ; DATA XREF: .pdata:0000000142BF6EE8↓o
- .text:000000014017A5C0
- .text:000000014017A5C0 arg_0 = qword ptr 8
- .text:000000014017A5C0 arg_10 = qword ptr 18h
- .text:000000014017A5C0 arg_50F5 = qword ptr 50FDh
- .text:000000014017A5C0 arg_5105 = qword ptr 510Dh
- .text:000000014017A5C0 arg_510D = qword ptr 5115h
- .text:000000014017A5C0 arg_511D = qword ptr 5125h
- .text:000000014017A5C0
- .text:000000014017A5C0 000 48 89 7C 24 08 mov [rsp+arg_0], rdi
- .text:000000014017A5C5 000 4C 8B C2 mov r8, rdx
- .text:000000014017A5C8 000 0F 1F 84 00 00 00 00 00 nop dword ptr [rax+rax+00000000h] ; No Operation
- .text:000000014017A5D0 000 78 14 js short near ptr loc_14017A5E0+6 ; Jump if Sign (SF=1)
- .text:000000014017A5D2 000 86 C9 xchg cl, cl ; Exchange Register/Memory with Register
- .text:000000014017A5D4 000 C0 FC 00 sar ah, 0 ; Shift Arithmetic Right
- .text:000000014017A5D7 000 79 0D jns short near ptr loc_14017A5E0+6 ; Jump if Not Sign (SF=0)
- .text:000000014017A5D9 000 59 pop rcx
- .text:000000014017A5DA -08 80 C0 2A add al, 2Ah ; '*' ; Add
- .text:000000014017A5DD -08 80 C1 F8 add cl, 0F8h ; 'ø' ; CODE XREF: sub_140173D90+1D98↑p
- .text:000000014017A5DD ; Add
- .text:000000014017A5E0
- .text:000000014017A5E0 loc_14017A5E0: ; CODE XREF: sub_14017A5C0+10↑j
- .text:000000014017A5E0 ; sub_14017A5C0+17↑j
- .text:000000014017A5E0 -08 80 A1 02 26 8F 1D B8 and byte ptr [rcx+1D8F2602h], 0B8h ; Logical AND
- .text:000000014017A5E7 -08 25 9F DB 9C 48 and eax, 489CDB9Fh ; Logical AND
- .text:000000014017A5EC -08 89 44 24 10 mov dword ptr [rsp-8+arg_10], eax
- .text:000000014017A5F0 -08 48 8B 44 24 10 mov rax, [rsp-8+arg_10]
- .text:000000014017A5F5 -08 48 89 44 24 10 mov [rsp-8+arg_10], rax
- .text:000000014017A5FA -08 48 8B 44 24 10 mov rax, [rsp-8+arg_10]
- .text:000000014017A5FF -08 89 02 mov [rdx], eax
- .text:000000014017A601 -08 0F 1F 40 00 nop dword ptr [rax+00h] ; No Operation
- .text:000000014017A605 db 66h, 66h
- .text:000000014017A605 -08 66 66 66 0F 1F 84 00 00 00 00+ nop word ptr [rax+rax+00000000h] ; No Operation
- .text:000000014017A610 -08 71 07 jno short near ptr loc_14017A618+1 ; Jump if Not Overflow (OF=0)
- .text:000000014017A612 -08 8A E4 mov ah, ah
- .text:000000014017A614 -08 86 ED xchg ch, ch ; Exchange Register/Memory with Register
- .text:000000014017A616 -08 70 13 jo short near ptr loc_14017A629+2 ; Jump if Overflow (OF=1)
- .text:000000014017A618
- .text:000000014017A618 loc_14017A618: ; CODE XREF: sub_14017A5C0+50↑j
- .text:000000014017A618 -08 E8 71 04 01 00 call loc_14018AA8E ; Call Procedure
- .text:000000014017A61D -08 81 C0 71 05 1F 32 add eax, 321F0571h ; Add
- .text:000000014017A623 -08 81 ED 9C 90 71 36 sub ebp, 3671909Ch ; Integer Subtraction
- .text:000000014017A629
- .text:000000014017A629 loc_14017A629: ; CODE XREF: sub_14017A5C0+56↑j
- .text:000000014017A629 -08 0F 86 70 32 00 00 jbe near ptr loc_14017D89E+1 ; Jump if Below or Equal (CF=1 | ZF=1)
- .text:000000014017A62F -08 0F 81 4A 98 01 00 jno near ptr loc_140193E77+8 ; Jump if Not Overflow (OF=0)
- .text:000000014017A635 -08 C7 C6 FF 2E E8 34 mov esi, 34E82EFFh
- .text:000000014017A63B -08 53 push rbx
- .text:000000014017A63C 000 80 EE 17 sub dh, 17h ; Integer Subtraction
- .text:000000014017A63F 000 C6 C7 79 mov bh, 79h ; 'y'
- .text:000000014017A642 000 F6 D8 neg al ; Two's Complement Negation
- .text:000000014017A644 000 E8 92 39 00 00 call near ptr loc_14017DFD8+3 ; Call Procedure
- .text:000000014017A649 000 5D pop rbp
- .text:000000014017A64A -08 81 ED 89 77 C8 7A sub ebp, 7AC87789h ; Integer Subtraction
- .text:000000014017A650 -08 81 C6 D4 9A 28 33 add esi, 33289AD4h ; Add
- .text:000000014017A656 -08 E8 DD 80 01 00 call near ptr loc_140192736+2 ; Call Procedure
- .text:000000014017A65B -50ED 80 B9 1B 3E B8 12 46 cmp byte ptr [rcx+12B83E1Bh], 46h ; 'F' ; Compare Two Operands
- .text:000000014017A662 -50ED 93 xchg eax, ebx ; Exchange Register/Memory with Register
- .text:000000014017A663 -50ED A3 48 89 44 24 10 48 8B 44 mov ds:448B481024448948h, eax
- .text:000000014017A66C -50ED 24 10 and al, 10h ; Logical AND
- .text:000000014017A66E -50ED 48 35 CF 03 00 00 xor rax, 3CFh ; Logical Exclusive OR
- .text:000000014017A674 -50ED 48 89 44 24 10 mov [rsp-50EDh+arg_50F5], rax
- .text:000000014017A679 -50ED 48 8B 44 24 10 mov rax, [rsp-50EDh+arg_50F5]
- .text:000000014017A67E -50ED 89 42 04 mov [rdx+4], eax
- .text:000000014017A681 -50ED 0F 1F 40 00 nop dword ptr [rax+00h] ; No Operation
- .text:000000014017A685 db 66h, 66h
- .text:000000014017A685 -50ED 66 66 66 0F 1F 84 00 00 00 00+ nop word ptr [rax+rax+00000000h] ; No Operation
- .text:000000014017A690 -50ED A8 B9 test al, 0B9h ; Logical Compare
- .text:000000014017A692 -50ED 71 02 jno short near ptr loc_14017A694+2 ; Jump if Not Overflow (OF=0)
- .text:000000014017A694
- .text:000000014017A694 loc_14017A694: ; CODE XREF: sub_14017A5C0+D2↑j
- .text:000000014017A694 -50ED 0F 87 71 5E 00 00 ja loc_14018050B ; Jump if Above (CF=0 & ZF=0)
- .text:000000014017A69A -50ED 83 C6 D5 add esi, 0FFFFFFD5h ; Add
- .text:000000014017A69D -50ED 5A pop rdx
- .text:000000014017A69E -50F5 E8 69 00 00 00 call near ptr loc_14017A70B+1 ; Call Procedure
- .text:000000014017A6A3 -50F5 C6 C5 87 mov ch, 87h ; '‡'
- .text:000000014017A6A6 -50F5 76 1A jbe short near ptr loc_14017A6C1+1 ; Jump if Below or Equal (CF=1 | ZF=1)
- .text:000000014017A6A8 -50F5 C6 C1 F3 mov cl, 0F3h ; 'ó'
- .text:000000014017A6AB -50F5 83 C7 FC add edi, 0FFFFFFFCh ; Add
- .text:000000014017A6AE -50F5 70 78 jo short near ptr loc_14017A725+3 ; Jump if Overflow (OF=1)
- .text:000000014017A6B0 -50F5 83 C7 E0 add edi, 0FFFFFFE0h ; Add
- .text:000000014017A6B3 -50F5 83 C6 E7 add esi, 0FFFFFFE7h ; Add
- .text:000000014017A6B6 -50F5 83 C6 B1 add esi, 0FFFFFFB1h ; Add
- .text:000000014017A6B9 -50F5 77 7C ja short near ptr loc_14017A735+2 ; Jump if Above (CF=0 & ZF=0)
- .text:000000014017A6BB -50F5 81 C1 BE 62 26 DE add ecx, 0DE2662BEh ; Add
- .text:000000014017A6C1
- .text:000000014017A6C1 loc_14017A6C1: ; CODE XREF: sub_14017A5C0+E6↑j
- .text:000000014017A6C1 -50F5 80 EB E3 sub bl, 0E3h ; 'ã' ; Integer Subtraction
- .text:000000014017A6C4 -50F5 F6 D8 neg al ; Two's Complement Negation
- .text:000000014017A6C6 -50F5 C7 C2 EF 6A 3C 68 mov edx, 683C6AEFh
- .text:000000014017A6CC -50F5 81 C1 FE 74 DD C7 add ecx, 0C7DD74FEh ; Add
- .text:000000014017A6D2 -50F5 E8 4D 37 00 00 call near ptr loc_14017DE22+2 ; Call Procedure
- .text:000000014017A6D7 -50F5 74 13 jz short loc_14017A6EC ; Jump if Zero (ZF=1)
- .text:000000014017A6D9 -50F5 5E pop rsi
- .text:000000014017A6DA -50FD 81 EA 9A CE 2E 8F sub edx, 8F2ECE9Ah ; Integer Subtraction
- .text:000000014017A6E0 -50FD 0F 8E AC F9 00 00 jle near ptr loc_14018A08A+8 ; Jump if Less or Equal (ZF=1 | SF!=OF)
- .text:000000014017A6E6 -50FD 0F 8E 88 29 01 00 jle near ptr loc_14018D071+3 ; Jump if Less or Equal (ZF=1 | SF!=OF)
- .text:000000014017A6EC
- .text:000000014017A6EC loc_14017A6EC: ; CODE XREF: sub_14017A5C0+117↑j
- .text:000000014017A6EC -50FD 81 E8 D4 5F 19 27 sub eax, 27195FD4h ; Integer Subtraction
- .text:000000014017A6F2 -50FD C0 BD 0E 5E B8 89 6A sar byte ptr [rbp-7647A1F2h], 6Ah
- .text:000000014017A6F2 ; CODE XREF: sub_140173D90+4E9↑p
- .text:000000014017A6F2 ; Shift Arithmetic Right
- .text:000000014017A6F9 -50FD 3D BB 48 89 44 cmp eax, 448948BBh ; Compare Two Operands
- .text:000000014017A6FE -50FD 24 10 and al, 10h ; Logical AND
- .text:000000014017A700 -50FD 48 8B 44 24 10 mov rax, [rsp-50FDh+arg_5105]
- .text:000000014017A705 -50FD 48 35 F7 07 00 00 xor rax, 7F7h ; Logical Exclusive OR
- .text:000000014017A70B
- .text:000000014017A70B loc_14017A70B: ; CODE XREF: sub_14017A5C0+DE↑p
- .text:000000014017A70B -50FD 48 89 44 24 10 mov [rsp-50FDh+arg_5105], rax
- .text:000000014017A710 -50FD 48 8B 44 24 10 mov rax, [rsp-50FDh+arg_5105]
- .text:000000014017A715 -50FD 48 05 B6 0C 00 00 add rax, 0CB6h ; Add
- .text:000000014017A71B -50FD 48 89 44 24 10 mov [rsp-50FDh+arg_5105], rax
- .text:000000014017A720 -50FD 48 8B 44 24 10 mov rax, [rsp-50FDh+arg_5105]
- .text:000000014017A725
- .text:000000014017A725 loc_14017A725: ; CODE XREF: sub_14017A5C0+EE↑j
- .text:000000014017A725 -50FD 48 05 C6 07 00 00 add rax, 7C6h ; Add
- .text:000000014017A72B -50FD 48 89 44 24 10 mov [rsp-50FDh+arg_5105], rax
- .text:000000014017A730 -50FD 48 8B 44 24 10 mov rax, [rsp-50FDh+arg_5105]
- .text:000000014017A735
- .text:000000014017A735 loc_14017A735: ; CODE XREF: sub_14017A5C0+F9↑j
- .text:000000014017A735 -50FD 89 42 08 mov [rdx+8], eax
- .text:000000014017A738 -50FD 48 8B 14 24 mov rdx, [rsp-50FDh+arg_50F5]
- .text:000000014017A73C -50FD 0F 1F 40 00 nop dword ptr [rax+00h] ; No Operation
- .text:000000014017A740 -50FD F8 clc ; Clear Carry Flag
- .text:000000014017A741 -50FD 86 DB xchg bl, bl ; Exchange Register/Memory with Register
- .text:000000014017A743 -50FD 73 12 jnb short near ptr loc_14017A751+6 ; Jump if Not Below (CF=0)
- .text:000000014017A745 -50FD 50 push rax
- .text:000000014017A746 -50F5 C7 C2 D8 50 D3 09 mov edx, 9D350D8h
- .text:000000014017A74C -50F5 F6 D9 neg cl ; Two's Complement Negation
- .text:000000014017A74E -50F5 80 E8 5E sub al, 5Eh ; '^' ; Integer Subtraction
- .text:000000014017A751
- .text:000000014017A751 loc_14017A751: ; CODE XREF: sub_14017A5C0+183↑j
- .text:000000014017A751 -50F5 6B 8A 00 2C C6 47 48 imul ecx, [rdx+47C62C00h], 48h ; 'H' ; Signed Multiply
- .text:000000014017A758 -50F5 8B 3D 42 4B F4 01 mov edi, dword ptr cs:off_1420BF2A0
- .text:000000014017A75E -50F5 66 90 xchg ax, ax ; Exchange Register/Memory with Register
- .text:000000014017A760 -50F5 77 33 ja short near ptr loc_14017A790+5 ; Jump if Above (CF=0 & ZF=0)
- .text:000000014017A762 -50F5 8A FF mov bh, bh
- .text:000000014017A764 -50F5 76 2F jbe short near ptr loc_14017A790+5 ; Jump if Below or Equal (CF=1 | ZF=1)
- .text:000000014017A766 -50F5 5D pop rbp
- .text:000000014017A767 -50FD 80 E8 11 sub al, 11h ; Integer Subtraction
- .text:000000014017A76A -50FD 54 push rsp
- .text:000000014017A76B -50F5 0F 8B D6 E1 00 00 jnp near ptr loc_140188944+3
- .text:000000014017A76B ; CODE XREF: sub_14017A5C0+1C8↓j
- .text:000000014017A76B ; Jump if Not Parity (PF=0)
- .text:000000014017A771 -50F5 80 C0 A5 add al, 0A5h ; '¥' ; Add
- .text:000000014017A774 -50F5 80 ED 89 sub ch, 89h ; '‰' ; Integer Subtraction
- .text:000000014017A777 -50F5 5A pop rdx
- .text:000000014017A778 -50FD 80 E9 23 sub cl, 23h ; '#' ; Integer Subtraction
- .text:000000014017A77B -50FD 55 push rbp
- .text:000000014017A77C -50F5 83 C2 57 add edx, 57h ; 'W' ; Add
- .text:000000014017A77F -50F5 C7 C5 7E 81 FC 17 mov ebp, 17FC817Eh
- .text:000000014017A785 -50F5 83 C1 A0 add ecx, 0FFFFFFA0h ; Add
- .text:000000014017A788 -50F5 77 E6 ja short near ptr loc_14017A76B+5 ; Jump if Above (CF=0 & ZF=0)
- .text:000000014017A78A -50F5 83 C0 DD add eax, 0FFFFFFDDh ; Add
- .text:000000014017A78D -50F5 80 C0 54 add al, 54h ; 'T' ; Add
- .text:000000014017A790
- .text:000000014017A790 loc_14017A790: ; CODE XREF: sub_14017A5C0+1A0↑j
- .text:000000014017A790 ; sub_14017A5C0+1A4↑j
- .text:000000014017A790 -50F5 69 8C C6 FF 03 8B 05 0D 4B F4+ imul ecx, [rsi+rax*8+58B03FFh], 1F44B0Dh ; Signed Multiply
- .text:000000014017A79B -50F5 8B C8 mov ecx, eax
- .text:000000014017A79D -50F5 48 89 54 24 20 mov [rsp-50F5h+arg_510D], rdx
- .text:000000014017A7A2 -50F5 48 03 C7 add rax, rdi ; Add
- .text:000000014017A7A5 -50F5 48 3B D7 cmp rdx, rdi ; Compare Two Operands
- .text:000000014017A7A8 -50F5 0F 82 22 02 00 00 jb loc_14017A9D0 ; Jump if Below (CF=1)
- .text:000000014017A7AE -50F5 48 3B D0 cmp rdx, rax ; Compare Two Operands
- .text:000000014017A7B1 -50F5 0F 83 19 02 00 00 jnb loc_14017A9D0 ; Jump if Not Below (CF=0)
- .text:000000014017A7B7 -50F5 66 0F 1F 84 00 00 00 00 00 nop word ptr [rax+rax+00000000h] ; No Operation
- .text:000000014017A7C0 -50F5 F9 stc ; Set Carry Flag
- .text:000000014017A7C1 -50F5 76 71 jbe short near ptr loc_14017A830+4 ; Jump if Below or Equal (CF=1 | ZF=1)
- .text:000000014017A7C3 -50F5 0F 81 00 6C 00 00 jno loc_1401813C9 ; Jump if Not Overflow (OF=0)
- .text:000000014017A7C9 -50F5 81 ED EB 6B CB 38 sub ebp, 38CB6BEBh ; Integer Subtraction
- .text:000000014017A7CF -50F5 80 EE 39 sub dh, 39h ; '9' ; Integer Subtraction
- .text:000000014017A7D2 -50F5 C7 C5 22 39 C5 F9 mov ebp, 0F9C53922h
- .text:000000014017A7D8 -50F5 80 C1 9E add cl, 9Eh ; 'ž' ; Add
- .text:000000014017A7DB -50F5 5B pop rbx
- .text:000000014017A7DC -50FD 0F 86 12 E2 00 00 jbe near ptr loc_1401889F3+1 ; Jump if Below or Equal (CF=1 | ZF=1)
- .text:000000014017A7E2 -50FD C6 C2 D5 mov dl, 0D5h ; 'Õ'
- .text:000000014017A7E5 -50FD C6 C7 D9 mov bh, 0D9h ; 'Ù'
- .text:000000014017A7E8 -50FD 0F 89 A3 82 01 00 jns loc_140192A91 ; Jump if Not Sign (SF=0)
- .text:000000014017A7EE -50FD 6A 9A push 0FFFFFFFFFFFFFF9Ah
- .text:000000014017A7F0 -50F5 52 push rdx
- .text:000000014017A7F1 -50ED 81 E9 D0 F8 80 B5 sub ecx, 0B580F8D0h ; Integer Subtraction
- .text:000000014017A7F7 -50ED 83 C1 D1 add ecx, 0FFFFFFD1h ; Add
- .text:000000014017A7FA -50ED 58 pop rax
- .text:000000014017A7FB -50F5 80 C6 5D add dh, 5Dh ; ']' ; Add
- .text:000000014017A7FE -50F5 F6 D8 neg al ; Two's Complement Negation
- .text:000000014017A800 -50F5 81 C2 36 7F 13 54 add edx, 54137F36h ; Add
- .text:000000014017A806 -50F5 81 EE 71 27 EE B4 sub esi, 0B4EE2771h ; Integer Subtraction
- .text:000000014017A80C -50F5 0F 85 92 33 00 00 jnz near ptr loc_14017DBA2+2 ; Jump if Not Zero (ZF=0)
- .text:000000014017A812 -50F5 81 EA 71 EB 54 55 sub edx, 5554EB71h ; Integer Subtraction
- .text:000000014017A818 -50F5 83 C6 07 add esi, 7 ; Add
- .text:000000014017A81B -50F5 0F 87 9F A5 01 00 ja loc_140194DC0 ; Jump if Above (CF=0 & ZF=0)
- .text:000000014017A821 -50F5 0F 8B 4D 13 01 00 jnp near ptr loc_14018BB73+1 ; Jump if Not Parity (PF=0)
- .text:000000014017A827 -50F5 C7 C1 07 FE B7 EA mov ecx, 0EAB7FE07h
- .text:000000014017A82D -50F5 C6 C6 66 mov dh, 66h ; 'f'
- .text:000000014017A830
- .text:000000014017A830 loc_14017A830: ; CODE XREF: sub_14017A5C0+201↑j
- .text:000000014017A830 -50F5 4B C1 A1 73 0F B6 4A FB shl qword ptr [r9+4AB60F73h], 0FBh ; Shift Logical Left
- .text:000000014017A838 -50F5 80 F9 E8 cmp cl, 0E8h ; 'è' ; Compare Two Operands
- .text:000000014017A83B -50F5 0F 84 9F 00 00 00 jz loc_14017A8E0 ; Jump if Zero (ZF=1)
- .text:000000014017A841 -50F5 80 7A F9 FF cmp byte ptr [rdx-7], 0FFh ; Compare Two Operands
- .text:000000014017A845 -50F5 0F B6 42 FA movzx eax, byte ptr [rdx-6] ; Move with Zero-Extend
- .text:000000014017A849 -50F5 75 18 jnz short loc_14017A863 ; Jump if Not Zero (ZF=0)
- .text:000000014017A84B -50F5 0F B6 F8 movzx edi, al ; Move with Zero-Extend
- .text:000000014017A84E -50F5 40 80 E7 38 and dil, 38h ; Logical AND
- .text:000000014017A852 -50F5 40 80 FF 10 cmp dil, 10h ; Compare Two Operands
- .text:000000014017A856 -50F5 74 06 jz short loc_14017A85E ; Jump if Zero (ZF=1)
- .text:000000014017A858 -50F5 40 80 FF 18 cmp dil, 18h ; Compare Two Operands
- .text:000000014017A85C -50F5 75 05 jnz short loc_14017A863 ; Jump if Not Zero (ZF=0)
- .text:000000014017A85E
- .text:000000014017A85E loc_14017A85E: ; CODE XREF: sub_14017A5C0+296↑j
- .text:000000014017A85E -50F5 40 B7 01 mov dil, 1
- .text:000000014017A861 -50F5 EB 03 jmp short loc_14017A866 ; Jump
- .text:000000014017A863 ; ---------------------------------------------------------------------------
- .text:000000014017A863
- .text:000000014017A863 loc_14017A863: ; CODE XREF: sub_14017A5C0+289↑j
- .text:000000014017A863 ; sub_14017A5C0+29C↑j
- .text:000000014017A863 -50F5 40 32 FF xor dil, dil ; Logical Exclusive OR
- .text:000000014017A866
- .text:000000014017A866 loc_14017A866: ; CODE XREF: sub_14017A5C0+2A1↑j
- .text:000000014017A866 -50F5 3C FF cmp al, 0FFh ; Compare Two Operands
- .text:000000014017A868 -50F5 75 0F jnz short loc_14017A879 ; Jump if Not Zero (ZF=0)
- .text:000000014017A86A -50F5 80 E1 38 and cl, 38h ; Logical AND
- .text:000000014017A86D -50F5 80 E9 10 sub cl, 10h ; Integer Subtraction
- .text:000000014017A870 -50F5 F6 C1 F7 test cl, 0F7h ; Logical Compare
- .text:000000014017A873 -50F5 75 04 jnz short loc_14017A879 ; Jump if Not Zero (ZF=0)
- .text:000000014017A875 -50F5 B1 01 mov cl, 1
- .text:000000014017A877 -50F5 EB 02 jmp short loc_14017A87B ; Jump
- .text:000000014017A879 ; ---------------------------------------------------------------------------
- .text:000000014017A879
- .text:000000014017A879 loc_14017A879: ; CODE XREF: sub_14017A5C0+2A8↑j
- .text:000000014017A879 ; sub_14017A5C0+2B3↑j
- .text:000000014017A879 -50F5 32 C9 xor cl, cl ; Logical Exclusive OR
- .text:000000014017A87B
- .text:000000014017A87B loc_14017A87B: ; CODE XREF: sub_14017A5C0+2B7↑j
- .text:000000014017A87B -50F5 0F B6 42 FD movzx eax, byte ptr [rdx-3] ; Move with Zero-Extend
- .text:000000014017A87F -50F5 40 0A CF or cl, dil ; Logical Inclusive OR
- .text:000000014017A882 -50F5 80 7A FC FF cmp byte ptr [rdx-4], 0FFh ; Compare Two Operands
- .text:000000014017A886 -50F5 75 15 jnz short loc_14017A89D ; Jump if Not Zero (ZF=0)
- .text:000000014017A888 -50F5 0F B6 F8 movzx edi, al ; Move with Zero-Extend
- .text:000000014017A88B -50F5 40 80 E7 38 and dil, 38h ; Logical AND
- .text:000000014017A88F -50F5 40 80 FF 10 cmp dil, 10h ; Compare Two Operands
- .text:000000014017A893 -50F5 74 06 jz short loc_14017A89B ; Jump if Zero (ZF=1)
- .text:000000014017A895 -50F5 40 80 FF 18 cmp dil, 18h ; Compare Two Operands
- .text:000000014017A899 -50F5 75 02 jnz short loc_14017A89D ; Jump if Not Zero (ZF=0)
- .text:000000014017A89B
- .text:000000014017A89B loc_14017A89B: ; CODE XREF: sub_14017A5C0+2D3↑j
- .text:000000014017A89B -50F5 B1 01 mov cl, 1
- .text:000000014017A89D
- .text:000000014017A89D loc_14017A89D: ; CODE XREF: sub_14017A5C0+2C6↑j
- .text:000000014017A89D ; sub_14017A5C0+2D9↑j
- .text:000000014017A89D -50F5 3C FF cmp al, 0FFh ; Compare Two Operands
- .text:000000014017A89F -50F5 0F B6 42 FE movzx eax, byte ptr [rdx-2] ; Move with Zero-Extend
- .text:000000014017A8A3 -50F5 75 18 jnz short loc_14017A8BD ; Jump if Not Zero (ZF=0)
- .text:000000014017A8A5 -50F5 0F B6 F8 movzx edi, al ; Move with Zero-Extend
- .text:000000014017A8A8 -50F5 40 80 E7 38 and dil, 38h ; Logical AND
- .text:000000014017A8AC -50F5 40 80 FF 10 cmp dil, 10h ; Compare Two Operands
- .text:000000014017A8B0 -50F5 74 06 jz short loc_14017A8B8 ; Jump if Zero (ZF=1)
- .text:000000014017A8B2 -50F5 40 80 FF 18 cmp dil, 18h ; Compare Two Operands
- .text:000000014017A8B6 -50F5 75 05 jnz short loc_14017A8BD ; Jump if Not Zero (ZF=0)
- .text:000000014017A8B8
- .text:000000014017A8B8 loc_14017A8B8: ; CODE XREF: sub_14017A5C0+2F0↑j
- .text:000000014017A8B8 -50F5 40 B7 01 mov dil, 1
- .text:000000014017A8BB -50F5 EB 03 jmp short loc_14017A8C0 ; Jump
- .text:000000014017A8BD ; ---------------------------------------------------------------------------
- .text:000000014017A8BD
- .text:000000014017A8BD loc_14017A8BD: ; CODE XREF: sub_14017A5C0+2E3↑j
- .text:000000014017A8BD ; sub_14017A5C0+2F6↑j
- .text:000000014017A8BD -50F5 40 32 FF xor dil, dil ; Logical Exclusive OR
- .text:000000014017A8C0
- .text:000000014017A8C0 loc_14017A8C0: ; CODE XREF: sub_14017A5C0+2FB↑j
- .text:000000014017A8C0 -50F5 40 0A CF or cl, dil ; Logical Inclusive OR
- .text:000000014017A8C3 -50F5 3C FF cmp al, 0FFh ; Compare Two Operands
- .text:000000014017A8C5 -50F5 75 0C jnz short loc_14017A8D3 ; Jump if Not Zero (ZF=0)
- .text:000000014017A8C7 -50F5 0F B6 42 FF movzx eax, byte ptr [rdx-1] ; Move with Zero-Extend
- .text:000000014017A8CB -50F5 24 38 and al, 38h ; Logical AND
- .text:000000014017A8CD -50F5 2C 10 sub al, 10h ; Integer Subtraction
- .text:000000014017A8CF -50F5 A8 F7 test al, 0F7h ; Logical Compare
- .text:000000014017A8D1 -50F5 74 0D jz short loc_14017A8E0 ; Jump if Zero (ZF=1)
- .text:000000014017A8D3
- .text:000000014017A8D3 loc_14017A8D3: ; CODE XREF: sub_14017A5C0+305↑j
- .text:000000014017A8D3 -50F5 84 C9 test cl, cl ; Logical Compare
- .text:000000014017A8D5 -50F5 0F 84 F5 00 00 00 jz loc_14017A9D0 ; Jump if Zero (ZF=1)
- .text:000000014017A8DB -50F5 0F 1F 44 00 00 nop dword ptr [rax+rax+00h] ; No Operation
- .text:000000014017A8E0
- .text:000000014017A8E0 loc_14017A8E0: ; CODE XREF: sub_14017A5C0+27B↑j
- .text:000000014017A8E0 ; sub_14017A5C0+311↑j
- .text:000000014017A8E0 -50F5 79 08 jns short near ptr loc_14017A8E7+3 ; Jump if Not Sign (SF=0)
- .text:000000014017A8E2 -50F5 C0 F8 00 sar al, 0 ; Shift Arithmetic Right
- .text:000000014017A8E5 -50F5 78 09 js short near ptr loc_14017A8ED+3
- .text:000000014017A8E5 ; CODE XREF: sub_14016A2C0+1A2↑j
- .text:000000014017A8E5 ; Jump if Sign (SF=1)
- .text:000000014017A8E7
- .text:000000014017A8E7 loc_14017A8E7: ; CODE XREF: sub_14017A5C0:loc_14017A8E0↑j
- .text:000000014017A8E7 -50F5 81 C7 BE 90 79 5C add edi, 5C7990BEh ; Add
- .text:000000014017A8ED
- .text:000000014017A8ED loc_14017A8ED: ; CODE XREF: sub_14017A5C0+325↑j
- .text:000000014017A8ED -50F5 C7 C3 5B 90 78 56 mov ebx, 5678905Bh
- .text:000000014017A8F3 -50F5 5E pop rsi
- .text:000000014017A8F4 -50FD 0F 8F 8F 06 00 00 jg near ptr loc_14017AF88+1 ; Jump if Greater (ZF=0 & SF=OF)
- .text:000000014017A8FA -50FD 80 C5 76 add ch, 76h ; 'v' ; Add
- .text:000000014017A8FD -50FD F6 D8 neg al ; Two's Complement Negation
- .text:000000014017A8FF -50FD 50 push rax
- .text:000000014017A900 -50F5 C6 C5 88 mov ch, 88h ; 'ˆ'
- .text:000000014017A903 -50F5 C7 C0 3C E9 71 75 mov eax, 7571E93Ch
- .text:000000014017A909 -50F5 83 C7 2D add edi, 2Dh ; '-' ; Add
- .text:000000014017A90C -50F5 80 C0 27 add al, 27h ; ''' ; Add
- .text:000000014017A90F -50F5 E8 3F F2 01 00 call near ptr loc_140199B52+1 ; Call Procedure
- .text:000000014017A914 -50F5 0F 85 60 3C 01 00 jnz loc_14018E57A ; Jump if Not Zero (ZF=0)
- .text:000000014017A91A -50F5 C6 C0 86 mov al, 86h ; '†'
- .text:000000014017A91D -50F5 E8 EF 01 01 00 call near ptr loc_14018AB0C+5 ; Call Procedure
- .text:000000014017A922 -50F5 54 push rsp
- .text:000000014017A923 -50ED C7 C7 2B 7D 68 E5 mov edi, 0E5687D2Bh
- .text:000000014017A929 -50ED 68 FE 16 D9 96 push 0FFFFFFFF96D916FEh
- .text:000000014017A92E -50E5 50 push rax
- .text:000000014017A92F -50DD 80 E8 0D sub al, 0Dh ; Integer Subtraction
- .text:000000014017A932 -50DD C6 C5 A8 mov ch, 0A8h ; '¨'
- .text:000000014017A935 -50DD 59 pop rcx
- .text:000000014017A936 -50E5 0F 81 EC AC 00 00 jno near ptr loc_140185627+1 ; Jump if Not Overflow (OF=0)
- .text:000000014017A93C
- .text:000000014017A93C loc_14017A93C: ; CODE XREF: sub_14016B310+2688↑j
- .text:000000014017A93C -50E5 80 C6 93 add dh, 93h ; '“' ; Add
- .text:000000014017A93F -50E5 5F pop rdi
- .text:000000014017A940 -50ED 81 E9 88 8A 05 E0 sub ecx, 0E0058A88h ; Integer Subtraction
- .text:000000014017A946 -50ED 22 99 CD 48 C7 44 and bl, [rcx+44C748CDh] ; Logical AND
- .text:000000014017A94C -50ED 24 10 and al, 10h ; Logical AND
- .text:000000014017A94E -50ED 44 CB retfq ; Return Far from Procedure (use64)
- .text:000000014017A94E ; ---------------------------------------------------------------------------
- .text:000000014017A950 -50F5 86 47 48 8B 44 24 10 48 89 44+ dq 481024448B484786h, 24448B4810244489h, 48FFFFFDE1054810h
- .text:000000014017A950 -50F5 24 10 48 8B 44 24 10 48 05 E1+ dq 24448B4810244489h, 4489488FC0834810h, 481024448B481024h
- .text:000000014017A950 -50F5 FD FF FF 48 89 44 24 10 48 8B+ dq 4489480000018605h, 411024448B481024h, 6600401F0F0C4089h
- .text:000000014017A998 -50F5 0F 1F 84 00 00 db 0Fh, 1Fh, 84h, 2 dup(0)
- .text:000000014017A99D ; ---------------------------------------------------------------------------
- .text:000000014017A99D
- .text:000000014017A99D loc_14017A99D: ; CODE XREF: sub_14017A5C0+417↓j
- .text:000000014017A99D -50F5 00 00 add [rax], al ; Add
- .text:000000014017A99F -50F5 00 80 F0 00 71 01 add [rax+17100F0h], al ; Add
- .text:000000014017A9A5 -50F5 E8 71 21 00 00 call near ptr loc_14017CB18+3 ; Call Procedure
- .text:000000014017A9AA -50F5 83 C5 37 add ebp, 37h ; '7' ; Add
- .text:000000014017A9AD -50F5 80 C6 A8 add dh, 0A8h ; '¨' ; Add
- .text:000000014017A9B0 -50F5 0F 82 72 FE 01 00 jb loc_14019A828 ; Jump if Below (CF=1)
- .text:000000014017A9B6 -50F5 80 C5 CE add ch, 0CEh ; 'Î' ; Add
- .text:000000014017A9B9 -50F5 83 C5 AE add ebp, 0FFFFFFAEh ; Add
- .text:000000014017A9BC -50F5 80 C3 1A add bl, 1Ah ; Add
- .text:000000014017A9BF -50F5 E8 A9 27 00 00 call near ptr loc_14017D169+4 ; Call Procedure
- .text:000000014017A9C4 -50F5 83 A2 12 B1 6F 48 8B and dword ptr [rdx+486FB112h], 0FFFFFF8Bh ; Logical AND
- .text:000000014017A9CB -50F5 7C 24 jl short near ptr loc_14017A9F0+1 ; Jump if Less (SF!=OF)
- .text:000000014017A9CD -50F5 08 C3 or bl, al ; Logical Inclusive OR
- .text:000000014017A9CF -50F5 90 nop ; No Operation
- .text:000000014017A9D0
- .text:000000014017A9D0 loc_14017A9D0: ; CODE XREF: sub_14017A5C0+1E8↑j
- .text:000000014017A9D0 ; sub_14017A5C0+1F1↑j ...
- .text:000000014017A9D0 -50F5 7C 13 jl short near ptr loc_14017A9E0+5 ; Jump if Less (SF!=OF)
- .text:000000014017A9D2 -50F5 C0 E4 00 shl ah, 0 ; Shift Logical Left
- .text:000000014017A9D5 -50F5 7D 0E jge short near ptr loc_14017A9E0+5 ; Jump if Greater or Equal (SF=OF)
- .text:000000014017A9D7 -50F5 7A C4 jp short loc_14017A99D ; Jump if Parity (PF=1)
- .text:000000014017A9D9 -50F5 59 pop rcx
- .text:000000014017A9DA -50FD 80 C3 66 add bl, 66h ; 'f' ; Add
- .text:000000014017A9DD -50FD 5B pop rbx
- .text:000000014017A9DE -5105 F6 D9 neg cl ; Two's Complement Negation
- .text:000000014017A9E0
- .text:000000014017A9E0 loc_14017A9E0: ; CODE XREF: sub_14016B310+27EC↑j
- .text:000000014017A9E0 ; sub_14017A5C0:loc_14017A9D0↑j ...
- .text:000000014017A9E0 -5105 C0 9E D4 89 89 48 C7 rcr byte ptr [rsi+488989D4h], 0C7h ; Rotate Through Carry Right
- .text:000000014017A9E7 -5105 44 24 10 and al, 10h ; Logical AND
- .text:000000014017A9EA -5105 93 xchg eax, ebx ; Exchange Register/Memory with Register
- .text:000000014017A9EB -5105 0D 00 00 33 D2 or eax, 0D2330000h ; CODE XREF: sub_140170F70+18C↑p
- .text:000000014017A9EB ; Logical Inclusive OR
- .text:000000014017A9F0
- .text:000000014017A9F0 loc_14017A9F0: ; CODE XREF: sub_14017A5C0+40B↑j
- .text:000000014017A9F0 -5105 48 8B 44 24 10 mov rax, [rsp-5105h+arg_510D]
- .text:000000014017A9F5 -5105 48 89 44 24 10 mov [rsp-5105h+arg_510D], rax
- .text:000000014017A9FA -5105 48 8B 44 24 10 mov rax, [rsp-5105h+arg_510D]
- .text:000000014017A9FF -5105 33 C0 xor eax, eax ; Logical Exclusive OR
- .text:000000014017AA01 -5105 48 89 44 24 10 mov [rsp-5105h+arg_510D], rax
- .text:000000014017AA06 -5105 48 8B 44 24 10 mov rax, [rsp-5105h+arg_510D]
- .text:000000014017AA0B -5105 48 89 44 24 10 mov [rsp-5105h+arg_510D], rax
- .text:000000014017AA10 -5105 48 8B 4C 24 10 mov rcx, [rsp-5105h+arg_510D]
- .text:000000014017AA15 -5105 48 8B 7C 24 20 mov rdi, [rsp-5105h+arg_511D]
- .text:000000014017AA1A -5105 48 8B C7 mov rax, rdi
- .text:000000014017AA1D -5105 48 F7 F1 div rcx ; Unsigned Divide
- .text:000000014017AA20 -5105 88 07 mov [rdi], al
- .text:000000014017AA22 -5105 0F 1F 40 00 nop dword ptr [rax+00h] ; No Operation
- .text:000000014017AA26 db 66h, 66h
- .text:000000014017AA26 -5105 66 66 0F 1F 84 00 00 00 00 00 nop word ptr [rax+rax+00000000h] ; No Operation
- .text:000000014017AA30 -5105 F8 clc ; Clear Carry Flag
- .text:000000014017AA31 -5105 C0 FC 00 sar ah, 0 ; Shift Arithmetic Right
- .text:000000014017AA34 -5105 73 04 jnb short near ptr loc_14017AA36+4 ; Jump if Not Below (CF=0)
- .text:000000014017AA36
- .text:000000014017AA36 loc_14017AA36: ; CODE XREF: sub_14017A5C0+474↑j
- .text:000000014017AA36 -5105 81 EA D3 A7 73 40 sub edx, 4073A7D3h ; Integer Subtraction
- .text:000000014017AA3C -5105 80 ED 51 sub ch, 51h ; 'Q' ; Integer Subtraction
- .text:000000014017AA3F -5105 81 E8 78 F8 98 C0 sub eax, 0C098F878h ; Integer Subtraction
- .text:000000014017AA45 -5105 E8 D8 51 01 00 call near ptr loc_14018FC20+2 ; Call Procedure
- .text:000000014017AA4A -5105 C6 C6 58 mov dh, 58h ; 'X'
- .text:000000014017AA4D -5105 80 ED 60 sub ch, 60h ; '`' ; Integer Subtraction
- .text:000000014017AA50 -5105 83 C5 6D add ebp, 6Dh ; 'm' ; Add
- .text:000000014017AA53 -5105 81 C5 6F DB AF EB add ebp, 0EBAFDB6Fh ; Add
- .text:000000014017AA59 -5105 81 C0 EF D1 89 AC add eax, 0AC89D1EFh ; Add
- .text:000000014017AA5F -5105 80 EF 10 sub bh, 10h ; Integer Subtraction
- .text:000000014017AA62 -5105 52 push rdx
- .text:000000014017AA63 -50FD C7 C6 74 D5 59 73 mov esi, 7359D574h
- .text:000000014017AA69 -50FD 0F 8F 5E 1B 00 00 jg near ptr loc_14017C5C8+5 ; Jump if Greater (ZF=0 & SF=OF)
- .text:000000014017AA6F -50FD 81 C5 F0 D6 F4 46 add ebp, 46F4D6F0h ; CODE XREF: sub_140173D90+E06↑p
- .text:000000014017AA6F ; Add
- .text:000000014017AA75 -50FD 0F 31 rdtsc ; Read Time Stamp Counter
- .text:000000014017AA77 -50FD 81 9F 8D B1 D3 48 C7 44 24 10 sbb dword ptr [rdi+48D3B18Dh], 102444C7h
- .text:000000014017AA77 -50FD ; CODE XREF: sub_140173D90+E0F↑p
- .text:000000014017AA77 ; Integer Subtraction with Borrow
- .text:000000014017AA81 -50FD 4B 12 00 adc al, [r8] ; Add with Carry
- .text:000000014017AA84 -50FD 00 48 8D add [rax-73h], cl ; Add
- .text:000000014017AA87 -50FD 7C 24 jl short near ptr loc_14017AAA9+4 ; Jump if Less (SF!=OF)
- .text:000000014017AA89 -50FD 28 48 8B sub [rax-75h], cl ; Integer Subtraction
- .text:000000014017AA8C -50FD 44 24 10 and al, 10h ; Logical AND
- .text:000000014017AA8F -50FD 48 89 44 24 10 mov [rsp-50FDh+arg_5105], rax
- .text:000000014017AA94 -50FD 48 8B 44 24 10 mov rax, [rsp-50FDh+arg_5105]
- .text:000000014017AA99 -50FD 48 89 44 24 10 mov [rsp-50FDh+arg_5105], rax
- .text:000000014017AA9E -50FD 48 8B 44 24 10 mov rax, [rsp-50FDh+arg_5105]
- .text:000000014017AAA3 -50FD 48 35 82 13 00 00 xor rax, 1382h ; Logical Exclusive OR
- .text:000000014017AAA9
- .text:000000014017AAA9 loc_14017AAA9: ; CODE XREF: sub_14017A5C0+4C7↑j
- .text:000000014017AAA9 -50FD 48 89 44 24 10 mov [rsp-50FDh+arg_5105], rax
- .text:000000014017AAAE -50FD 48 8B 44 24 10 mov rax, [rsp-50FDh+arg_5105]
- .text:000000014017AAB3 -50FD 48 35 C9 11 00 00 xor rax, 11C9h ; Logical Exclusive OR
- .text:000000014017AAB9 -50FD 48 89 44 24 10 mov [rsp-50FDh+arg_5105], rax
- .text:000000014017AABE -50FD 48 C7 44 24 18 4B 02 00 00 mov [rsp-50FDh+arg_510D], 24Bh
- .text:000000014017AAC7 -50FD 48 8B 44 24 18 mov rax, [rsp-50FDh+arg_510D]
- .text:000000014017AACC -50FD 48 89 44 24 18 mov [rsp-50FDh+arg_510D], rax
- .text:000000014017AAD1 -50FD 48 8B 44 24 18 mov rax, [rsp-50FDh+arg_510D]
- .text:000000014017AAD6 -50FD 48 89 44 24 18 mov [rsp-50FDh+arg_510D], rax
- .text:000000014017AADB -50FD 48 8B 44 24 18 mov rax, [rsp-50FDh+arg_510D]
- .text:000000014017AAE0 -50FD 48 35 82 13 00 00 xor rax, 1382h ; Logical Exclusive OR
- .text:000000014017AAE6 -50FD 48 89 44 24 18 mov [rsp-50FDh+arg_510D], rax
- .text:000000014017AAEB -50FD 48 8B 44 24 18 mov rax, [rsp-50FDh+arg_510D]
- .text:000000014017AAF0 -50FD 48 35 C9 11 00 00 xor rax, 11C9h ; Logical Exclusive OR
- .text:000000014017AAF6 -50FD 48 89 44 24 18 mov [rsp-50FDh+arg_510D], rax
- .text:000000014017AAFB -50FD 48 8B 4C 24 10 mov rcx, [rsp-50FDh+arg_5105]
- .text:000000014017AB00 -50FD 48 8B 44 24 18 mov rax, [rsp-50FDh+arg_510D]
- .text:000000014017AB05 -50FD F3 AA rep stosb ; Store String
- .text:000000014017AB07 -50FD E9 C4 FE FF FF jmp loc_14017A9D0 ; Jump
- .text:000000014017AB07 sub_14017A5C0 endp ; sp-analysis failed
- .text:000000014017AB07
- .text:000000014017AB07 ; ---------------------------------------------------------------------------
- .text:000000014017AB0C algn_14017AB0C: ; DATA XREF: .pdata:0000000142BF6EE8↓o
- .
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement