Advertisement
Guest User

Untitled

a guest
Nov 19th, 2017
372
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.27 KB | None | 0 0
  1. .text:0000000180014F70 ; =============== S U B R O U T I N E =======================================
  2. .text:0000000180014F70
  3. .text:0000000180014F70
  4. .text:0000000180014F70 sub_180014F70 proc near ; CODE XREF: sub_180015050:loc_18001507Ap
  5. .text:0000000180014F70
  6. .text:0000000180014F70 var_28 = qword ptr -28h
  7. .text:0000000180014F70 SystemTimeAsFileTime= _FILETIME ptr -20h
  8. .text:0000000180014F70 PerformanceCount= LARGE_INTEGER ptr -18h
  9. .text:0000000180014F70
  10. .text:0000000180014F70 000 sub rsp, 48h
  11. .text:0000000180014F74 048 mov qword ptr [rsp+28h], 0
  12. .text:0000000180014F7D 048 lea rcx, [rsp+28h] ; lpSystemTimeAsFileTime
  13. .text:0000000180014F82 048 call cs:GetSystemTimeAsFileTime
  14. .text:0000000180014F82
  15. .text:0000000180014F88 048 mov rax, [rsp+28h]
  16. .text:0000000180014F8D 048 mov [rsp+20h], rax
  17. .text:0000000180014F92 048 call cs:GetCurrentThreadId
  18. .text:0000000180014F92
  19. .text:0000000180014F98 048 mov eax, eax
  20. .text:0000000180014F9A 048 mov rcx, [rsp+20h]
  21. .text:0000000180014F9F 048 xor rcx, rax
  22. .text:0000000180014FA2 048 mov rax, rcx
  23. .text:0000000180014FA5 048 mov [rsp+20h], rax
  24. .text:0000000180014FAA 048 call cs:GetCurrentProcessId
  25. .text:0000000180014FAA
  26. .text:0000000180014FB0 048 mov eax, eax
  27. .text:0000000180014FB2 048 mov rcx, [rsp+20h]
  28. .text:0000000180014FB7 048 xor rcx, rax
  29. .text:0000000180014FBA 048 mov rax, rcx
  30. .text:0000000180014FBD 048 mov [rsp+20h], rax
  31. .text:0000000180014FC2 048 lea rcx, [rsp+30h] ; lpPerformanceCount
  32. .text:0000000180014FC7 048 call cs:QueryPerformanceCounter
  33. .text:0000000180014FC7
  34. .text:0000000180014FCD 048 mov eax, [rsp+30h]
  35. .text:0000000180014FD1 048 shl rax, 20h
  36. .text:0000000180014FD5 048 xor rax, [rsp+30h]
  37. .text:0000000180014FDA 048 mov rcx, [rsp+20h]
  38. .text:0000000180014FDF 048 xor rcx, rax
  39. .text:0000000180014FE2 048 mov rax, rcx
  40. .text:0000000180014FE5 048 mov [rsp+20h], rax
  41. .text:0000000180014FEA 048 lea rax, [rsp+20h]
  42. .text:0000000180014FEF 048 mov rcx, [rsp+20h]
  43. .text:0000000180014FF4 048 xor rcx, rax
  44. .text:0000000180014FF7 048 mov rax, rcx
  45. .text:0000000180014FFA 048 mov [rsp+20h], rax
  46. .text:0000000180014FFF 048 mov rax, 0FFFFFFFFFFFFh
  47. .text:0000000180015009 048 mov rcx, [rsp+20h]
  48. .text:000000018001500E 048 and rcx, rax
  49. .text:0000000180015011 048 mov rax, rcx
  50. .text:0000000180015014 048 mov [rsp+20h], rax
  51. .text:0000000180015019 048 mov rax, [rsp+20h]
  52. .text:000000018001501E 048 add rsp, 48h
  53. .text:0000000180015022 000 retn
  54. .text:0000000180015022
  55. .text:0000000180015022 sub_180014F70 endp
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement