Created
October 27, 2023 20:49
-
-
Save edmcman/e08e27047762ee7d87f79ffae6cc5287 to your computer and use it in GitHub Desktop.
Ghidra Operand Info
This file has been truncated, but you can view the full file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Hey! | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __setdefaultprecision | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413d40 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413d40 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function FID_conflict:__wsetargv | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413de0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413de0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?good@ios_base@std@@QBE_NXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412718 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412718 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RTC_GetErrDesc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413a00 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413a00 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __security_check_cookie | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412740 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412740 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _IsDebuggerPresent@0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a0c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a0c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function operator= | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412a80 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412a80 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RTC_Terminate | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413e20 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413e20 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func3 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411b60 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411b60 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _WideCharToMultiByte@32 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a12 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a12 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function @_RTC_AllocaHelper@12 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412810 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412810 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RTC_GetErrorFuncW | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413ac0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413ac0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RTC_NumErrors | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004139f0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004139f0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004126f4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004126f4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ___setusermatherr | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413dc2 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413dc2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _Sleep@4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149e2 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149e2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ~type_info | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149ac has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149ac | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004126dc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004126dc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function * | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004124f0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004124f0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _GetModuleFileNameW@12 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a6c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a6c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ___security_init_cookie | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413fc0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413fc0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _SetUnhandledExceptionFilter@4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a06 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a06 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __cexit | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004140e4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004140e4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __CrtDbgReportW | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414376 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414376 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _VirtualQuery@12 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a72 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a72 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _atexit | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413f80 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413f80 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _MultiByteToWideChar@24 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a18 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a18 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004126d6 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004126d6 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __RTC_SetErrorType | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413a20 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413a20 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __except_handler4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414390 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414390 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411a90 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411a90 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411940 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411940 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __lock | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149ca has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149ca | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _GetProcAddress@8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a2a has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a2a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function @_RTC_CheckStackVars@8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412790 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412790 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function length | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004121e0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004121e0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function operator_delete | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x0041272a has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041272a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function eq_int_type | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412230 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412230 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ~type_info | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149ac has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149ac | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?uncaught_exception@std@@YA_NXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412724 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412724 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __report_gsfailure | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412f80 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412f80 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function terminate | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149a6 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149a6 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __exit | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004140d8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004140d8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004126e8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004126e8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _GetCurrentThreadId@0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a48 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a48 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __initterm | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x0041437c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041437c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _strlen | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412a96 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412a96 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?width@ios_base@std@@QBE_JXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412706 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412706 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412712 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412712 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _GetCurrentProcess@0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149fa has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149fa | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004126ee has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004126ee | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004118c0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004118c0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __RTC_UninitUse | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004138c0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004138c0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RTC_Shutdown | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004129a0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004129a0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function `vector_deleting_destructor' | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004129f0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004129f0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __FindPESection | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414180 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414180 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _LoadLibraryW@4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a30 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a30 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _HeapSetInformation@16 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149ee has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149ee | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __configthreadlocale | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413d3a has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413d3a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RTC_InitBase | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412960 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412960 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function Cls2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411b10 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411b10 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function Cls3 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411830 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411830 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function Cls1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411a40 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411a40 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?_RTC_StackFailure@@YAXPAXPBD@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413570 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413570 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RaiseException@16 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a1e has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a1e | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __crt_debugger_hook | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004143c4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004143c4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __ValidateImageBase | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414100 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414100 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _InterlockedCompareExchange@12 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149e8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149e8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004117b0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004117b0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function eof | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412280 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412280 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ~sentry | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412420 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412420 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _GetProcessHeap@0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a66 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a66 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RTC_SetErrorFuncW | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413a80 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413a80 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __onexit | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413e50 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413e50 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _NtCurrentTeb | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412ee0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412ee0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _HeapFree@12 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a5a has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a5a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function char_traits<char>_> | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411be0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411be0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RTC_SetErrorFunc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413a50 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413a50 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __invoke_watson_if_error | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413d90 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413d90 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004126d0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004126d0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ~_Sentry_base | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412610 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412610 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _TerminateProcess@8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149f4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149f4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x0041270c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041270c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function entry | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412bc0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412bc0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?__CxxUnhandledExceptionFilter@@YGJPAU_EXCEPTION_POINTERS@@@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413ca0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413ca0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __CxxSetUnhandledExceptionFilter | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413d20 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413d20 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _QueryPerformanceCounter@4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a3c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a3c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __unlock | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149be has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149be | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _GetCurrentProcessId@0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a4e has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a4e | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function @_RTC_CheckStackVars2@12 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412850 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412850 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ___set_app_type | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413fa4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413fa4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __RTC_CheckEsp | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412760 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412760 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function main | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411530 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411530 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _EncodePointer@4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149d6 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149d6 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __RTC_Initialize | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413df0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413df0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?width@ios_base@std@@QAE_J_J@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004126e2 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004126e2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __controlfp_s | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149b2 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149b2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _GetSystemTimeAsFileTime@4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a54 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a54 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _DecodePointer@4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a36 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a36 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __invoke_watson | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149b8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149b8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?_RTC_GetSrcLine@@YAHPAEPA_WKPAH1K@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004143d0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004143d0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func3 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004119c0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004119c0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __CRT_RTC_INITW | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413ac6 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413ac6 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _GetTickCount@0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a42 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a42 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __IsNonwritableInCurrentImage | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414220 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414220 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ___CxxFrameHandler3 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412736 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412736 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _HeapAlloc@12 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a60 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a60 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __amsg_exit | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413faa has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413faa | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function operator_new | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412730 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412730 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __XcptFilter | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004140de has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004140de | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __CrtSetCheckCount | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004140f0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004140f0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _InterlockedExchange@8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149dc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149dc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _UnhandledExceptionFilter@4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a00 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a00 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function sentry | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004122c0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004122c0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function type_info | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004129c0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004129c0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __except_handler4_common | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149d0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149d0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _matherr | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413dd0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413dd0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004126fa has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004126fa | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ___getmainargs | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413fb0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413fb0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?__ArrayUnwind@@YGXPAXIHP6EX0@Z@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413bb0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413bb0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _lstrlenA@4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a24 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a24 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?_RTC_Failure@@YAXPAXH@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004130e0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004130e0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?flags@ios_base@std@@QBEHXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412700 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412700 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?_RTC_AllocaFailure@@YAXPAXPAU_RTC_ALLOCA_NODE@@H@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004136b0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004136b0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _exit | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004140ea has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004140ea | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _Sentry_base | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412540 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412540 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ___dllonexit | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004149c4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004149c4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _FreeLibrary@4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414a78 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414a78 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ??_M@YGXPAXIHP6EX0@Z@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413ad0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413ad0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __initterm_e | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00414382 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00414382 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x0041271e has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041271e | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RTC_GetErrorFunc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00413ab0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00413ab0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function main | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH -0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep -0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x4159bc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4159bc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,FS:[0x0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0x148 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x148 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xfffffeac] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x52 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x52 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041a048] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041a048] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EAX,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EAX,[EBP + -0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + -0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV FS:[0x0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x54 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x54 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411221 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411221 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffec0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffec0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + 0xfffffec0],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffec0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x004115a0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004115a0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffec0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffec0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411136 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411136 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeac],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004115aa has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004115aa | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeac],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0xfffffeac] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeb4],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeb4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0xffffffff has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xffffffff | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffeb4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeb4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x14],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x54 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x54 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411221 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411221 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffed8],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffed8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + 0xfffffed8],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffed8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x004115f9 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004115f9 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffed8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffed8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411136 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411136 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeac],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411603 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411603 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeac],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0xfffffeac] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffecc],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffecc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0xffffffff has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xffffffff | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffecc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffecc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x20],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x20] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0xc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0xc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411221 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411221 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffee4],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffee4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + 0xfffffee4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffee4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x0041164b has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041164b | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffee4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffee4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041113b has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041113b | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeac],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411655 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411655 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeac],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0xfffffeac] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x2c],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x2c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x2c] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x2c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411159 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411159 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EDX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ECX,0xc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EAX + 0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX + 0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EDX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ECX,0xc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EAX + 0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX + 0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EDX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x20] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x20] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x20] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x20] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EDX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffef0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffef0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffef0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffef0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004110b9 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110b9 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x20] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x20] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffefc],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffefc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffefc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffefc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004110b9 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110b9 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x2c] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x2c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xffffff08],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xffffff08] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xffffff08] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xffffff08] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004110b9 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110b9 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr FS:[0x0],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x154 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x154 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041b320] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041b320] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x417830 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x417830 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [0x0041b324] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041b324] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411181 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411181 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b310] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b310] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function Cls3 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041113b has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041113b | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ECX,0xc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411131 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411131 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EAX],0x417854 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x417854 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EAX + 0xc],0x417844 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EAX + 0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x417844 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EAX + 0x50],0x2a has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EAX + 0x50] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x2a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041b320] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041b320] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x41785c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x41785c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [0x0041b324] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041b324] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411181 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411181 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b310] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b310] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041b320] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041b320] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x41786c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x41786c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [0x0041b324] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041b324] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411181 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411181 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b310] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b310] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func3 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041b320] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041b320] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x41787c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x41787c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [0x0041b324] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041b324] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411181 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411181 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b310] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b310] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function Cls1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EAX],0x417890 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x417890 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041b320] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041b320] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x417898 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x417898 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [0x0041b324] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041b324] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411181 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411181 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b310] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b310] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function Cls2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EAX],0x4178ac has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4178ac | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function func3 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041b320] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041b320] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x4178b8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4178b8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [0x0041b324] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041b324] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411181 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411181 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b310] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b310] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function char_traits<char>_> | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH -0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep -0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x4159f8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4159f8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,FS:[0x0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0x150 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x150 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xfffffea0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xfffffea0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x54 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x54 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041a048] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041a048] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EAX,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EAX,[EBP + -0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + -0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV FS:[0x0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x10],ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x10] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x18],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004110b4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110b4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR ECX,ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x28],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x28] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x24],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x24] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b2fc] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2fc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeb0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeb0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeb4],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeb4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + 0xfffffeb4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeb4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JL 0x00411ce6 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411ce6 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JG 0x00411c78 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411c78 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + 0xfffffeb0],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeb0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JBE 0x00411ce6 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411ce6 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b2fc] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2fc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffea8],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffea8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeac],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0xfffffeac] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EAX,dword ptr [EBP + -0x24] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x24] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JL 0x00411ce6 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411ce6 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JG 0x00411cb8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411cb8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffea8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffea8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ECX,dword ptr [EBP + -0x28] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x28] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JBE 0x00411ce6 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411ce6 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EDX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ECX,dword ptr [EAX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b2fc] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2fc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB EAX,dword ptr [EBP + -0x28] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x28] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SBB EDX,dword ptr [EBP + -0x24] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x24] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffea0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffea0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffea4],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffea4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411cfa has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411cfa | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffea0],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffea0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffea4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffea4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffea0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffea0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x38],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x38] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0xfffffea4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffea4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x34],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA ECX,[EBP + -0x48] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + -0x48] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041123a has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041123a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA ECX,[EBP + -0x48] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + -0x48] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041105f has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041105f | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EAX,-0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep -0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00411d3a has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411d3a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x18] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: OR EAX,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x18],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x0041201e has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041201e | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV byte ptr [EBP + -0x4],0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep byte ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b300] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b300] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeb4],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeb4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0xfffffeb4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeb4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: AND EAX,0x1c0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1c0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EAX,0x40 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x40 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00411e5f has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411e5f | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411d88 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411d88 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x38] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x38] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB EAX,0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SBB ECX,0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x38],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x38] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x34],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + -0x34],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JL 0x00411e5f has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411e5f | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JG 0x00411d9e has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411d9e | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + -0x38],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x38] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JBE 0x00411e5f has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411e5f | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b304] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b304] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV byte ptr [EBP + 0xfffffeb7],AL has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep byte ptr [EBP + 0xfffffeb7] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep AL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b308] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b308] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeb0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeb0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOVZX EAX,byte ptr [EBP + 0xfffffeb7] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep byte ptr [EBP + 0xfffffeb7] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffeb0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeb0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b30c] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b30c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeac],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffeac] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffebc],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffebc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041115e has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041115e | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffea8],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffea8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0xfffffea8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffea8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffec8],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffec8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EAX,[EBP + 0xfffffebc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xfffffebc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA ECX,[EBP + 0xfffffec8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xfffffec8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004110be has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110be | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV byte ptr [EBP + 0xfffffea7],AL has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep byte ptr [EBP + 0xfffffea7] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep AL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOVZX EDX,byte ptr [EBP + 0xfffffea7] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep byte ptr [EBP + 0xfffffea7] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EDX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00411e5a has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411e5a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x18] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: OR EAX,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x18],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411e5f has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411e5f | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411d76 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411d76 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + -0x18],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00411ed3 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411ed3 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b308] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b308] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeb4],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeb4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x24] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x24] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x28] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x28] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffeb4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeb4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b314] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b314] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeac],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeb0],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeb0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0xfffffeac] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EAX,dword ptr [EBP + -0x28] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x28] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00411eca has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411eca | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffeb0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeb0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ECX,dword ptr [EBP + -0x24] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x24] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00411ed3 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411ed3 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x18] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: OR EAX,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x18],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + -0x18],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00411fc8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411fc8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411ef1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411ef1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x38] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x38] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB EAX,0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SBB ECX,0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x38],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x38] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x34],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + -0x34],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JL 0x00411fc8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411fc8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JG 0x00411f07 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411f07 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + -0x38],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x38] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JBE 0x00411fc8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411fc8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b304] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b304] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV byte ptr [EBP + 0xfffffeb7],AL has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep byte ptr [EBP + 0xfffffeb7] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep AL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b308] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b308] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeb0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeb0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOVZX EAX,byte ptr [EBP + 0xfffffeb7] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep byte ptr [EBP + 0xfffffeb7] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffeb0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeb0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b30c] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b30c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeac],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xfffffeac] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffed4],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffed4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041115e has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041115e | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffea8],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffea8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0xfffffea8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffea8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffee0],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffee0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EAX,[EBP + 0xfffffed4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xfffffed4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA ECX,[EBP + 0xfffffee0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xfffffee0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004110be has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110be | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV byte ptr [EBP + 0xfffffea7],AL has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep byte ptr [EBP + 0xfffffea7] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep AL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOVZX EDX,byte ptr [EBP + 0xfffffea7] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep byte ptr [EBP + 0xfffffea7] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EDX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00411fc3 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411fc3 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x18] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: OR EAX,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x18],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411fc8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411fc8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00411edf has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411edf | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b318] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b318] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412017 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412017 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x18] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [ECX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ECX,dword ptr [EDX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b31c] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b31c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xfffffeec],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xfffffeec] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0xffffffff has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xffffffff | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA ECX,[EBP + -0x48] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + -0x48] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411163 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411163 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0xfffffeec] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xfffffeec] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDX,[0x41208c] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x41208c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004110af has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110af | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr FS:[0x0],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x160 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x160 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function Catch_All@00411fea | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b31c] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b31c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0x41201e has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x41201e | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function length | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xc0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff40] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff40] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x30 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x30 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004110eb has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110eb | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xc0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function eq_int_type | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xc0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff40] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff40] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x30 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x30 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EDX,dword ptr [ECX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SETZ AL has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep AL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function eof | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xc0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff40] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff40] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x30 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x30 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: OR EAX,0xffffffff has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xffffffff | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function sentry | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH -0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep -0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x415a28 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x415a28 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,FS:[0x0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff28] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff28] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041a048] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041a048] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EAX,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EAX,[EBP + -0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + -0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV FS:[0x0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x14],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411276 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411276 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b2f0] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2f0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOVZX EAX,AL has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep AL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412385 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412385 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b2f4] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2f4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412385 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412385 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b2f4] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2f4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b2f8] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2f8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,dword ptr [ECX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b2f0] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2f0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV byte ptr [ECX + 0x4],AL has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep byte ptr [ECX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep AL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0xffffffff has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xffffffff | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr FS:[0x0],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xd8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xd8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET 0x4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ~sentry | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH -0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep -0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x415a58 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x415a58 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,FS:[0x0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff28] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff28] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041a048] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041a048] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EAX,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EAX,[EBP + -0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + -0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV FS:[0x0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x14],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b2e8] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2e8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOVZX EAX,AL has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep AL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412493 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412493 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b2ec] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2ec] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0xffffffff has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xffffffff | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x14] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411195 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411195 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr FS:[0x0],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xd8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xd8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function * | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff34] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff34] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x33 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x33 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOVZX EAX,byte ptr [EAX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep byte ptr [EAX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: NEG EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SBB EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: NEG EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB EAX,0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _Sentry_base | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xd0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xd0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff30] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff30] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x34 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x34 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EAX],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [ECX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ECX,dword ptr [EDX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b308] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b308] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x004125cd has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004125cd | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [ECX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ECX,dword ptr [EDX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b308] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b308] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xffffff30],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xffffff30] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xffffff30] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xffffff30] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [ECX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xffffff30] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xffffff30] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EDX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xd0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xd0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET 0x4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ~_Sentry_base | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0xd0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xd0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EDI,[EBP + 0xffffff30] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + 0xffffff30] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,0x34 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x34 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSD.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x8],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [ECX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ECX,dword ptr [EDX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b308] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b308] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412695 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412695 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [ECX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ECX,dword ptr [EDX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b308] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b308] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + 0xffffff30],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + 0xffffff30] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xffffff30] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xffffff30] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [ECX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0xffffff30] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0xffffff30] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EDX + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDX + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xd0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xd0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b310] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b310] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b320] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b320] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b31c] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b31c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?width@ios_base@std@@QAE_J_J@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b318] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b318] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b314] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b314] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b30c] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b30c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b308] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b308] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b304] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b304] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?flags@ios_base@std@@QBEHXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b300] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b300] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?width@ios_base@std@@QBE_JXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b2fc] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2fc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b2f8] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2f8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b2f4] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2f4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?good@ios_base@std@@QBE_NXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b2f0] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2f0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b2ec] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2ec] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ?uncaught_exception@std@@YA_NXZ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b2e8] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2e8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function operator_delete | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b3d4] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b3d4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function operator_new | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b3d0] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b3d0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ___CxxFrameHandler3 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b3cc] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b3cc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __security_check_cookie | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ECX,dword ptr [0x0041a048] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041a048] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x0041274a has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041274a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004110cd has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110cd | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function __RTC_CheckEsp | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412763 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412763 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411262 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411262 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function @_RTC_CheckStackVars@8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBX,ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [ESI],EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ESI] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JLE 0x004127ee has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004127ee | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004127b0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004127b0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [ESI + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ESI + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX + EDI*0x1] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX + EDI*0x1] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [ECX + EBX*0x1 + -0x4],0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ECX + EBX*0x1 + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x004127cf has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004127cf | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EAX + EDI*0x1 + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX + EDI*0x1 + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDX,ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EDX + EBX*0x1],0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EDX + EBX*0x1] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x004127e0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004127e0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX + EDI*0x1 + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX + EDI*0x1 + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411140 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411140 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: INC EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDI,0xc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EAX,dword ptr [ESI] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ESI] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JL 0x004127b0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004127b0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function @_RTC_AllocaHelper@12 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST ESI,ESI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x0041283d has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041283d | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EDX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x0041283d has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041283d | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EBX,EBX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x0041283c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041283c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV AL,0xcc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep AL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,ESI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: STOSB.REP ES:EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ES:EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [ESI + 0x4],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ESI + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [ESI + 0xc],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ESI + 0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBX],ESI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET 0x4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function @_RTC_CheckStackVars2@12 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBX,ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ESI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x004128b5 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004128b5 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [ESI],EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ESI] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JLE 0x004128b5 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004128b5 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EBX,[EBX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [ESI + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ESI + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EAX + EDI*0x1] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX + EDI*0x1] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [ECX + EBX*0x1 + -0x4],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ECX + EBX*0x1 + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x0041288c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041288c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EAX + EDI*0x1 + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX + EDI*0x1 + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EAX,ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EAX + EBX*0x1],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EAX + EBX*0x1] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x004128a5 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004128a5 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [ESI + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ESI + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EDI + ECX*0x1 + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EDI + ECX*0x1 + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411140 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411140 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: INC EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD EDI,0xc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EAX,dword ptr [ESI] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ESI] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JL 0x00412870 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412870 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x004128ba has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004128ba | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,ESI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST ESI,ESI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x0041291b has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041291b | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EAX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: INC EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x004128c5 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004128c5 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST ESI,ESI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x0041291b has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041291b | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [ESI],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ESI] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x004128e4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004128e4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [ESI + 0x14],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ESI + 0x14] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x004128e4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004128e4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [ESI + 0x18],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ESI + 0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x004128e4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004128e4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [ESI + 0x1c],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ESI + 0x1c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x004128f7 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004128f7 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041126c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041126c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [ESI + 0xc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ESI + 0xc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EAX + ESI*0x1 + -0x4],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EAX + ESI*0x1 + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412913 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412913 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041126c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041126c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,0xcccccccc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xcccccccc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESI,dword ptr [ESI + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ESI + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: DEC EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST ESI,ESI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x004128d1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004128d1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET 0x4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RTC_InitBase | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP byte ptr [0x0041a1a0],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep byte ptr [0x0041a1a0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412988 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412988 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV byte ptr [0x0041a1a0],0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep byte ptr [0x0041a1a0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411203 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411203 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041116d has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041116d | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x18 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x18 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _RTC_Shutdown | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411203 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411203 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x14 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x14 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function type_info | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EAX],0x4178cc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4178cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET 0x4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function `vector_deleting_destructor' | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: AND EAX,0x2 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412a37 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412a37 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x411055 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x411055 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [ECX + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [ECX + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0xc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0xc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411285 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411285 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: AND ECX,0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412a2f has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412a2f | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB EDX,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004110b9 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110b9 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB EAX,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412a56 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412a56 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411055 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411055 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + 0x8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + 0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: AND EAX,0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412a53 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412a53 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004110b9 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110b9 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET 0x4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function operator= | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET 0x4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _strlen | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP dword ptr [0x0041b3c8] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b3c8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type INDIRECTION | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | IND | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _pre_c_init | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00412ef0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412ef0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV [0x0041a1b0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep [0x0041a1b0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b3b0] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b3b0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH -0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep -0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b2a4] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b2a4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV [0x0041a5d0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep [0x0041a5d0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041a5d0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041a5d0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV [0x0041a5e0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep [0x0041a5e0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [0x0041b3b4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041b3b4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [0x0041a5a8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041a5a8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [ECX],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ECX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041b3b8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041b3b8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [0x0041a5a4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041a5a4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EAX],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111db has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111db | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041100a has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041100a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [0x0041a088],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a088] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412b0d has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412b0d | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x411249 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x411249 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b3bc] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b3bc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411005 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411005 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [0x0041a084],-0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a084] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep -0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412b26 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412b26 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH -0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep -0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b3c0] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b3c0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _pre_cpp_init | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x411028 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x411028 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411082 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411082 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041a5b0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041a5b0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV [0x0041a1b8],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep [0x0041a1b8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x41a1b8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x41a1b8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [0x0041a5ac] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041a5ac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x41a1a8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x41a1a8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x41a1ac has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x41a1ac | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x41a1a4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x41a1a4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b3a8] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b3a8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x14 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x14 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV [0x0041a1b4],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep [0x0041a1b4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [0x0041a1b4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a1b4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JGE 0x00412ba8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412ba8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041121c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041121c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function FID_conflict:_wmainCRTStartup | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411069 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411069 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00412be0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412be0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function ___tmainCRTStartup | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH -0x2 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep -0x2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x419088 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x419088 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x411096 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x411096 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,FS:[0x0] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,-0x1c has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep -0x1c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041a048] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041a048] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR dword ptr [EBP + -0x8],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EAX,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: LEA EAX,[EBP + -0x10] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [EBP + -0x10] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV FS:[0x0],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x18],ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [0x0041a5e4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a5e4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412c2c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412c2c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b244] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b244] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x24],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x24] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x00411177 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00411177 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EAX + 0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EAX + 0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x20],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x20] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x1c],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x1c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x20] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x20] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x41a5cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x41a5cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b240] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b240] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x24],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x24] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + -0x24],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x24] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412c84 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412c84 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + -0x24] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x24] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EDX,dword ptr [EBP + -0x20] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x20] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412c77 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412c77 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x1c],0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x1c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412c84 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412c84 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x3e8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x3e8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b23c] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b23c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412c4c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412c4c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [0x0041a5bc],0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a5bc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412c99 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412c99 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x1f has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x1f | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041121c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041121c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412ce4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412ce4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [0x0041a5bc],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a5bc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412cda has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412cda | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [0x0041a5bc],0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a5bc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x417618 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x417618 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x41730c has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x41730c | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041128a has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041128a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412cd8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412cd8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x2c],0xff has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x2c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xff | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0xfffffffe has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xfffffffe | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x2c] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x2c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412e2b has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412e2b | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412ce4 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412ce4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [0x0041a1c0],0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a1c0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [0x0041a5bc],0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a5bc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412d09 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412d09 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x417208 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x417208 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x417000 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x417000 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004110e6 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004110e6 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [0x0041a5bc],0x2 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a5bc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [0x0041a5bc],0x2 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a5bc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412d34 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412d34 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x417950 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x417950 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x1dc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x1dc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x4178d8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x4178d8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x2 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b38c] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b38c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x14 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x14 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP EAX,0x1 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412d34 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412d34 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: INT3 has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [EBP + -0x1c],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x1c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412d47 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412d47 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x41a5cc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x41a5cc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b238] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b238] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [0x0041a5e8],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a5e8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412d6d has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412d6d | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x41a5e8 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x41a5e8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x0041120d has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0041120d | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: TEST EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412d6d has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412d6d | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x2 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x2 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x0 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041a5e8] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a5e8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH 0x1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b390] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b390] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0x4 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x4 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [0x0041b394] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041b394] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [0x0041a1a8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041a1a8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [ECX],EDX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [ECX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041a1a8] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041a1a8] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [0x0041a1ac] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041a1ac] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [0x0041a1a4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [0x0041a1a4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EDX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL 0x004111d1 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x004111d1 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_CALL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: ADD ESP,0xc has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV [0x0041a1bc],EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep [0x0041a1bc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [0x0041a1b0],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a1b0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412dbc has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412dbc | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041a1bc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041a1bc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EAX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b398] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b398] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP dword ptr [0x0041a1c0],0x0 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041a1c0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x0 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JNZ 0x00412dcb has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412dcb | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CALL dword ptr [0x0041b39c] has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [0x0041b39c] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0xfffffffe has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0xfffffffe | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412e26 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412e26 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,[0x0041a1bc] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep [0x0041a1bc] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ECX,dword ptr [EBP + -0x10] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x10] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr FS:[0x0],ECX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr FS:[0x0] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ECX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EDI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP ESI has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBX has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV ESP,EBP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _NtCurrentTeb | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,FS:[0x18] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep FS:[0x18] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: POP EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: RET has 0 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Function _check_managed_app | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDI,EDI has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EDI | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: PUSH EBP has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EBP,ESP has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EBP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: SUB ESP,0x8 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ESP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x8 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV dword ptr [EBP + -0x4],0x400000 has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x400000 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EAX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep dword ptr [EBP + -0x4] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOVZX ECX,word ptr [EAX] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep word ptr [EAX] | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type ADDR | DYN | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: CMP ECX,0x5a4d has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep ECX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep 0x5a4d | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type DATA | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type SCAL | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JZ 0x00412f11 has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412f11 | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type CONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: XOR EAX,EAX has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type READ_WRITE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 default rep EAX | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 ref type READ | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 1 op type REG | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: JMP 0x00412f5a has 1 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 default rep 0x00412f5a | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 ref type UNCONDITIONAL_JUMP | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Operand 0 op type ADDR | CODE | |
| 2023-10-27 16:28:50 INFO (GhidraScript) InstructionOps.scala> Insn: MOV EDX,dword ptr [EBP + -0x4] has 2 operands | |
| 2023-10-27 16:28:50 INFO (GhidraScrip |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment