Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- .text:0000000180014F70 ; =============== S U B R O U T I N E =======================================
- .text:0000000180014F70
- .text:0000000180014F70
- .text:0000000180014F70 sub_180014F70 proc near ; CODE XREF: sub_180015050:loc_18001507Ap
- .text:0000000180014F70
- .text:0000000180014F70 var_28 = qword ptr -28h
- .text:0000000180014F70 SystemTimeAsFileTime= _FILETIME ptr -20h
- .text:0000000180014F70 PerformanceCount= LARGE_INTEGER ptr -18h
- .text:0000000180014F70
- .text:0000000180014F70 000 sub rsp, 48h
- .text:0000000180014F74 048 mov qword ptr [rsp+28h], 0
- .text:0000000180014F7D 048 lea rcx, [rsp+28h] ; lpSystemTimeAsFileTime
- .text:0000000180014F82 048 call cs:GetSystemTimeAsFileTime
- .text:0000000180014F82
- .text:0000000180014F88 048 mov rax, [rsp+28h]
- .text:0000000180014F8D 048 mov [rsp+20h], rax
- .text:0000000180014F92 048 call cs:GetCurrentThreadId
- .text:0000000180014F92
- .text:0000000180014F98 048 mov eax, eax
- .text:0000000180014F9A 048 mov rcx, [rsp+20h]
- .text:0000000180014F9F 048 xor rcx, rax
- .text:0000000180014FA2 048 mov rax, rcx
- .text:0000000180014FA5 048 mov [rsp+20h], rax
- .text:0000000180014FAA 048 call cs:GetCurrentProcessId
- .text:0000000180014FAA
- .text:0000000180014FB0 048 mov eax, eax
- .text:0000000180014FB2 048 mov rcx, [rsp+20h]
- .text:0000000180014FB7 048 xor rcx, rax
- .text:0000000180014FBA 048 mov rax, rcx
- .text:0000000180014FBD 048 mov [rsp+20h], rax
- .text:0000000180014FC2 048 lea rcx, [rsp+30h] ; lpPerformanceCount
- .text:0000000180014FC7 048 call cs:QueryPerformanceCounter
- .text:0000000180014FC7
- .text:0000000180014FCD 048 mov eax, [rsp+30h]
- .text:0000000180014FD1 048 shl rax, 20h
- .text:0000000180014FD5 048 xor rax, [rsp+30h]
- .text:0000000180014FDA 048 mov rcx, [rsp+20h]
- .text:0000000180014FDF 048 xor rcx, rax
- .text:0000000180014FE2 048 mov rax, rcx
- .text:0000000180014FE5 048 mov [rsp+20h], rax
- .text:0000000180014FEA 048 lea rax, [rsp+20h]
- .text:0000000180014FEF 048 mov rcx, [rsp+20h]
- .text:0000000180014FF4 048 xor rcx, rax
- .text:0000000180014FF7 048 mov rax, rcx
- .text:0000000180014FFA 048 mov [rsp+20h], rax
- .text:0000000180014FFF 048 mov rax, 0FFFFFFFFFFFFh
- .text:0000000180015009 048 mov rcx, [rsp+20h]
- .text:000000018001500E 048 and rcx, rax
- .text:0000000180015011 048 mov rax, rcx
- .text:0000000180015014 048 mov [rsp+20h], rax
- .text:0000000180015019 048 mov rax, [rsp+20h]
- .text:000000018001501E 048 add rsp, 48h
- .text:0000000180015022 000 retn
- .text:0000000180015022
- .text:0000000180015022 sub_180014F70 endp
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement