Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 00007FF60BFA1040 | 48:895C24 18 | mov qword ptr ss:[rsp+18],rbx | ostream:761
- 00007FF60BFA1045 | 48:895424 10 | mov qword ptr ss:[rsp+10],rdx |
- 00007FF60BFA104A | 48:894C24 08 | mov qword ptr ss:[rsp+8],rcx |
- 00007FF60BFA104F | 56 | push rsi |
- 00007FF60BFA1050 | 57 | push rdi |
- 00007FF60BFA1051 | 41:56 | push r14 |
- 00007FF60BFA1053 | 48:83EC 30 | sub rsp,30 |
- 00007FF60BFA1057 | 48:8BF1 | mov rsi,rcx |
- 00007FF60BFA105A | 33DB | xor ebx,ebx | ostream:766
- 00007FF60BFA105C | 895C24 58 | mov dword ptr ss:[rsp+58],ebx |
- 00007FF60BFA1060 | 48:8B01 | mov rax,qword ptr ds:[rcx] | ostream:768
- 00007FF60BFA1063 | 48:6350 04 | movsxd rdx,dword ptr ds:[rax+4] |
- 00007FF60BFA1067 | 48:8B7C0A 28 | mov rdi,qword ptr ds:[rdx+rcx+28] |
- 00007FF60BFA106C | 48:83FF 17 | cmp rdi,17 |
- 00007FF60BFA1070 | 7C 06 | jl functionshook.7FF60BFA1078 |
- 00007FF60BFA1072 | 48:83C7 EA | add rdi,FFFFFFFFFFFFFFEA |
- 00007FF60BFA1076 | EB 02 | jmp functionshook.7FF60BFA107A |
- 00007FF60BFA1078 | 33FF | xor edi,edi |
- 00007FF60BFA107A | 4C:8BF6 | mov r14,rsi | ostream:769
- 00007FF60BFA107D | 48:897424 20 | mov qword ptr ss:[rsp+20],rsi |
- 00007FF60BFA1082 | 48:8B4C0A 48 | mov rcx,qword ptr ds:[rdx+rcx+48] |
- 00007FF60BFA1087 | 48:85C9 | test rcx,rcx |
- 00007FF60BFA108A | 74 07 | je functionshook.7FF60BFA1093 |
- 00007FF60BFA108C | 48:8B01 | mov rax,qword ptr ds:[rcx] |
- 00007FF60BFA108F | FF50 08 | call qword ptr ds:[rax+8] |
- 00007FF60BFA1092 | 90 | nop |
- 00007FF60BFA1093 | 48:8B0E | mov rcx,qword ptr ds:[rsi] |
- 00007FF60BFA1096 | 48:6341 04 | movsxd rax,dword ptr ds:[rcx+4] |
- 00007FF60BFA109A | 837C30 10 00 | cmp dword ptr ds:[rax+rsi+10],0 |
- 00007FF60BFA109F | 74 04 | je functionshook.7FF60BFA10A5 |
- 00007FF60BFA10A1 | 32C0 | xor al,al |
- 00007FF60BFA10A3 | EB 2B | jmp functionshook.7FF60BFA10D0 |
- 00007FF60BFA10A5 | 48:8B4430 50 | mov rax,qword ptr ds:[rax+rsi+50] |
- 00007FF60BFA10AA | 48:85C0 | test rax,rax |
- 00007FF60BFA10AD | 74 1F | je functionshook.7FF60BFA10CE |
- 00007FF60BFA10AF | 48:3BC6 | cmp rax,rsi |
- 00007FF60BFA10B2 | 74 1A | je functionshook.7FF60BFA10CE |
- 00007FF60BFA10B4 | 48:8BC8 | mov rcx,rax |
- 00007FF60BFA10B7 | FF15 E31F0000 | call qword ptr ds:[<&public: class std::basic_ostream<w |
- 00007FF60BFA10BD | 48:8B0E | mov rcx,qword ptr ds:[rsi] |
- 00007FF60BFA10C0 | 48:6341 04 | movsxd rax,dword ptr ds:[rcx+4] |
- 00007FF60BFA10C4 | 837C30 10 00 | cmp dword ptr ds:[rax+rsi+10],0 |
- 00007FF60BFA10C9 | 0F94C0 | sete al |
- 00007FF60BFA10CC | EB 02 | jmp functionshook.7FF60BFA10D0 |
- 00007FF60BFA10CE | B0 01 | mov al,1 |
- 00007FF60BFA10D0 | 884424 28 | mov byte ptr ss:[rsp+28],al |
- 00007FF60BFA10D4 | 84C0 | test al,al | ostream:771
- 00007FF60BFA10D6 | 75 0A | jne functionshook.7FF60BFA10E2 |
- 00007FF60BFA10D8 | BB 04000000 | mov ebx,4 | ostream:772
- 00007FF60BFA10DD | E9 B0000000 | jmp functionshook.7FF60BFA1192 | ostream:773
- 00007FF60BFA10E2 | 48:6341 04 | movsxd rax,dword ptr ds:[rcx+4] | ostream:775
- 00007FF60BFA10E6 | 8B4C30 18 | mov ecx,dword ptr ds:[rax+rsi+18] |
- 00007FF60BFA10EA | 81E1 C0010000 | and ecx,1C0 |
- 00007FF60BFA10F0 | 83F9 40 | cmp ecx,40 | 40:'@'
- 00007FF60BFA10F3 | 74 2B | je functionshook.7FF60BFA1120 |
- 00007FF60BFA10F5 | 48:85FF | test rdi,rdi | ostream:776
- 00007FF60BFA10F8 | 7E 26 | jle functionshook.7FF60BFA1120 |
- 00007FF60BFA10FA | 48:8B06 | mov rax,qword ptr ds:[rsi] | ostream:777
- 00007FF60BFA10FD | 48:6348 04 | movsxd rcx,dword ptr ds:[rax+4] |
- 00007FF60BFA1101 | 0FB65431 58 | movzx edx,byte ptr ds:[rcx+rsi+58] |
- 00007FF60BFA1106 | 48:8B4C31 48 | mov rcx,qword ptr ds:[rcx+rsi+48] |
- 00007FF60BFA110B | FF15 871F0000 | call qword ptr ds:[<&public: int __cdecl std::basic_str |
- 00007FF60BFA1111 | 83F8 FF | cmp eax,FFFFFFFF |
- 00007FF60BFA1114 | 75 05 | jne functionshook.7FF60BFA111B |
- 00007FF60BFA1116 | 8D58 05 | lea ebx,qword ptr ds:[rax+5] | ostream:778
- 00007FF60BFA1119 | EB 53 | jmp functionshook.7FF60BFA116E | ostream:779
- 00007FF60BFA111B | 48:FFCF | dec rdi | ostream:776
- 00007FF60BFA111E | EB D5 | jmp functionshook.7FF60BFA10F5 |
- 00007FF60BFA1120 | 48:8B06 | mov rax,qword ptr ds:[rsi] | ostream:784
- 00007FF60BFA1123 | 48:6348 04 | movsxd rcx,dword ptr ds:[rax+4] |
- 00007FF60BFA1127 | 41:B8 16000000 | mov r8d,16 |
- 00007FF60BFA112D | 48:8D15 8C210000 | lea rdx,qword ptr ds:[<"CALLED FUNCTION auth()"...>] | 00007FF60BFA32C0:"CALLED FUNCTION auth()"
- 00007FF60BFA1134 | 48:8B4C31 48 | mov rcx,qword ptr ds:[rcx+rsi+48] |
- 00007FF60BFA1139 | FF15 811F0000 | call qword ptr ds:[<&public: __int64 __cdecl std::basic |
- 00007FF60BFA113F | 48:83F8 16 | cmp rax,16 |
- 00007FF60BFA1143 | 75 26 | jne functionshook.7FF60BFA116B |
- 00007FF60BFA1145 | 48:85FF | test rdi,rdi | ostream:789
- 00007FF60BFA1148 | 7E 28 | jle functionshook.7FF60BFA1172 |
- 00007FF60BFA114A | 48:8B06 | mov rax,qword ptr ds:[rsi] | ostream:790
- 00007FF60BFA114D | 48:6348 04 | movsxd rcx,dword ptr ds:[rax+4] |
- 00007FF60BFA1151 | 0FB65431 58 | movzx edx,byte ptr ds:[rcx+rsi+58] |
- 00007FF60BFA1156 | 48:8B4C31 48 | mov rcx,qword ptr ds:[rcx+rsi+48] |
- 00007FF60BFA115B | FF15 371F0000 | call qword ptr ds:[<&public: int __cdecl std::basic_str |
- 00007FF60BFA1161 | 83F8 FF | cmp eax,FFFFFFFF |
- 00007FF60BFA1164 | 74 05 | je functionshook.7FF60BFA116B |
- 00007FF60BFA1166 | 48:FFCF | dec rdi | ostream:789
- 00007FF60BFA1169 | EB DA | jmp functionshook.7FF60BFA1145 |
- 00007FF60BFA116B | 83CB 04 | or ebx,4 | ostream:797
- 00007FF60BFA116E | 895C24 58 | mov dword ptr ss:[rsp+58],ebx |
- 00007FF60BFA1172 | 48:8B06 | mov rax,qword ptr ds:[rsi] |
- 00007FF60BFA1175 | 48:6348 04 | movsxd rcx,dword ptr ds:[rax+4] |
- 00007FF60BFA1179 | 48:C74431 28 00000000 | mov qword ptr ds:[rcx+rsi+28],0 |
- 00007FF60BFA1182 | EB 0E | jmp functionshook.7FF60BFA1192 | ostream:16707566
- 00007FF60BFA1184 | 48:8B7424 50 | mov rsi,qword ptr ss:[rsp+50] |
- 00007FF60BFA1189 | 8B5C24 58 | mov ebx,dword ptr ss:[rsp+58] |
- 00007FF60BFA118D | 4C:8B7424 20 | mov r14,qword ptr ss:[rsp+20] |
- 00007FF60BFA1192 | 48:8B06 | mov rax,qword ptr ds:[rsi] | ostream:801
- 00007FF60BFA1195 | 48:6348 04 | movsxd rcx,dword ptr ds:[rax+4] |
- 00007FF60BFA1199 | 48:03CE | add rcx,rsi |
- 00007FF60BFA119C | 45:33C0 | xor r8d,r8d |
- 00007FF60BFA119F | 8BD3 | mov edx,ebx |
- 00007FF60BFA11A1 | FF15 111F0000 | call qword ptr ds:[<&public: void __cdecl std::basic_io |
- 00007FF60BFA11A7 | 90 | nop |
- 00007FF60BFA11A8 | FF15 DA1E0000 | call qword ptr ds:[<&bool __cdecl std::uncaught_excepti | ostream:802
- 00007FF60BFA11AE | 84C0 | test al,al |
- 00007FF60BFA11B0 | 75 0A | jne functionshook.7FF60BFA11BC |
- 00007FF60BFA11B2 | 49:8BCE | mov rcx,r14 |
- 00007FF60BFA11B5 | FF15 0D1F0000 | call qword ptr ds:[<&public: void __cdecl std::basic_os |
- 00007FF60BFA11BB | 90 | nop |
- 00007FF60BFA11BC | 49:8B06 | mov rax,qword ptr ds:[r14] |
- 00007FF60BFA11BF | 48:6348 04 | movsxd rcx,dword ptr ds:[rax+4] |
- 00007FF60BFA11C3 | 4A:8B4C31 48 | mov rcx,qword ptr ds:[rcx+r14+48] |
- 00007FF60BFA11C8 | 48:85C9 | test rcx,rcx |
- 00007FF60BFA11CB | 74 07 | je functionshook.7FF60BFA11D4 |
- 00007FF60BFA11CD | 48:8B01 | mov rax,qword ptr ds:[rcx] |
- 00007FF60BFA11D0 | FF50 10 | call qword ptr ds:[rax+10] |
- 00007FF60BFA11D3 | 90 | nop |
- 00007FF60BFA11D4 | 48:8BC6 | mov rax,rsi |
- 00007FF60BFA11D7 | 48:8B5C24 60 | mov rbx,qword ptr ss:[rsp+60] | ostream:803, [rsp+60]:__scrt_common_main_seh+10C
- 00007FF60BFA11DC | 48:83C4 30 | add rsp,30 |
- 00007FF60BFA11E0 | 41:5E | pop r14 |
- 00007FF60BFA11E2 | 5F | pop rdi |
- 00007FF60BFA11E3 | 5E | pop rsi |
- 00007FF60BFA11E4 | C3 | ret |
Advertisement
Add Comment
Please, Sign In to add comment
