Last active
March 28, 2016 16:48
-
-
Save mrexodia/ce3846b51ead222bc6ca to your computer and use it in GitHub Desktop.
VMProtect tracing fun :)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- TRACER STARTED --- | |
| Process 7332 created with entry 0x00007FF6CDF9251E | |
| DLL loaded at 0x00007FFDCD1D0000 | |
| DLL loaded at 0x00007FFDCB2B0000 | |
| DLL loaded at 0x00007FFDCA680000 | |
| DLL loaded at 0x00007FFDCA8B0000 | |
| DLL loaded at 0x00007FFDC8F30000 | |
| DLL loaded at 0x00007FFDCB870000 | |
| DLL loaded at 0x00007FFDCD070000 | |
| DLL loaded at 0x00007FFDCAE50000 | |
| DLL loaded at 0x00007FFDCA850000 | |
| DLL loaded at 0x00007FFDCB160000 | |
| System breakpoint reached, GIP: 0x00007FFDCD291B91 | |
| DLL loaded at 0x00007FFDCBAA0000 | |
| DLL loaded at 0x00007FFDCB460000 | |
| Breakpoint on 0x00007FF6CDF9251E! | |
| Entry breakpoint! | |
| 00007FF6CDF9251E 68 8D C0 2B A0 push -0x5fd43f73 | |
| 00007FF6CDF92523 E8 5F 47 03 00 call 0x7ff6cdfc6c87 | |
| 00007FF6CDFC6C87 41 55 push r13 | |
| 00007FF6CDFC6C89 E9 00 00 00 00 jmp 0x7ff6cdfc6c8e | |
| 00007FF6CDFC6C8E 41 57 push r15 | |
| 00007FF6CDFC6C90 E9 00 00 00 00 jmp 0x7ff6cdfc6c95 | |
| 00007FF6CDFC6C95 56 push rsi | |
| 00007FF6CDFC6C96 0F B7 F5 movzx esi, bp | |
| 00007FF6CDFC6C99 55 push rbp | |
| 00007FF6CDFC6C9A 48 0F B7 F4 movzx rsi, sp | |
| 00007FF6CDFC6C9E 40 0F 9A C6 setp sil | |
| 00007FF6CDFC6CA2 52 push rdx | |
| 00007FF6CDFC6CA3 9C pushfq | |
| 00007FF6CDFC6CA4 41 51 push r9 | |
| 00007FF6CDFC6CA6 48 0F CE bswap rsi | |
| 00007FF6CDFC6CA9 E9 00 00 00 00 jmp 0x7ff6cdfc6cae | |
| 00007FF6CDFC6CAE 57 push rdi | |
| 00007FF6CDFC6CAF 0F BF E9 movsx ebp, cx | |
| 00007FF6CDFC6CB2 41 54 push r12 | |
| 00007FF6CDFC6CB4 51 push rcx | |
| 00007FF6CDFC6CB5 E9 08 00 00 00 jmp 0x7ff6cdfc6cc2 | |
| 00007FF6CDFC6CC2 50 push rax | |
| 00007FF6CDFC6CC3 98 cwde | |
| 00007FF6CDFC6CC4 48 F7 D7 not rdi | |
| 00007FF6CDFC6CC7 66 45 8B E6 mov r12w, r14w | |
| 00007FF6CDFC6CCB 53 push rbx | |
| 00007FF6CDFC6CCC 49 63 DB movsxd rbx, r11d | |
| 00007FF6CDFC6CCF 44 0F B7 E1 movzx r12d, cx | |
| 00007FF6CDFC6CD3 49 0F B7 F8 movzx rdi, r8w | |
| 00007FF6CDFC6CD7 41 56 push r14 | |
| 00007FF6CDFC6CD9 40 0F 9D C7 setge dil | |
| 00007FF6CDFC6CDD 41 53 push r11 | |
| 00007FF6CDFC6CDF 41 0F 41 F1 cmovno esi, r9d | |
| 00007FF6CDFC6CE3 96 xchg eax, esi | |
| 00007FF6CDFC6CE4 41 52 push r10 | |
| 00007FF6CDFC6CE6 49 0F B7 D9 movzx rbx, r9w | |
| 00007FF6CDFC6CEA 66 41 0F BE DF movsx bx, r15b | |
| 00007FF6CDFC6CEF 48 FF CF dec rdi | |
| 00007FF6CDFC6CF2 41 50 push r8 | |
| 00007FF6CDFC6CF4 66 44 87 E3 xchg bx, r12w | |
| 00007FF6CDFC6CF8 48 B8 00 00 A2 movabs rax, 0x7ff58da20000 | |
| 00007FF6CDFC6D02 40 B5 88 mov bpl, 0x88 | |
| 00007FF6CDFC6D05 50 push rax | |
| 00007FF6CDFC6D06 44 0F 49 E5 cmovns r12d, ebp | |
| 00007FF6CDFC6D0A 48 8B B4 24 90 mov rsi, qword ptr [rsp + 0x90] | |
| 00007FF6CDFC6D12 45 8B E2 mov r12d, r10d | |
| 00007FF6CDFC6D15 F7 D6 not esi | |
| 00007FF6CDFC6D17 0F B7 FB movzx edi, bx | |
| 00007FF6CDFC6D1A FF C6 inc esi | |
| 00007FF6CDFC6D1C 66 81 D5 8C 3D adc bp, 0x3d8c | |
| 00007FF6CDFC6D21 49 0F BF E9 movsx rbp, r9w | |
| 00007FF6CDFC6D25 F7 DE neg esi | |
| 00007FF6CDFC6D27 40 F6 D5 not bpl | |
| 00007FF6CDFC6D2A 48 0F B7 D9 movzx rbx, cx | |
| 00007FF6CDFC6D2E 66 0F B6 F9 movzx di, cl | |
| 00007FF6CDFC6D32 FF C6 inc esi | |
| 00007FF6CDFC6D34 66 0F B3 DB btr bx, bx | |
| 00007FF6CDFC6D38 41 0F BA FC 23 btc r12d, 0x23 | |
| 00007FF6CDFC6D3D D1 C6 rol esi, 1 | |
| 00007FF6CDFC6D3F 49 0F BD FE bsr rdi, r14 | |
| 00007FF6CDFC6D43 41 F6 C6 73 test r14b, 0x73 | |
| 00007FF6CDFC6D47 49 D3 CC ror r12, cl | |
| 00007FF6CDFC6D4A 48 03 F0 add rsi, rax | |
| 00007FF6CDFC6D4D 49 0F CC bswap r12 | |
| 00007FF6CDFC6D50 48 B8 00 00 00 movabs rax, 0x100000000 | |
| 00007FF6CDFC6D5A 40 0F C0 DF xadd dil, bl | |
| 00007FF6CDFC6D5E 48 0F AB E7 bts rdi, rsp | |
| 00007FF6CDFC6D62 40 D2 E5 shl bpl, cl | |
| 00007FF6CDFC6D65 48 8D 34 06 lea rsi, [rsi + rax] | |
| 00007FF6CDFC6D69 49 0F BF EC movsx rbp, r12w | |
| 00007FF6CDFC6D6D 41 33 FC xor edi, r12d | |
| 00007FF6CDFC6D70 48 8B EC mov rbp, rsp | |
| 00007FF6CDFC6D73 66 45 0F BE E0 movsx r12w, r8b | |
| 00007FF6CDFC6D78 41 0F C0 FC xadd r12b, dil | |
| 00007FF6CDFC6D7C 44 02 E1 add r12b, cl | |
| 00007FF6CDFC6D7F 48 81 EC 80 01 sub rsp, 0x180 | |
| 00007FF6CDFC6D86 D3 D8 rcr eax, cl | |
| 00007FF6CDFC6D88 48 81 E4 F0 FF and rsp, 0xfffffffffffffff0 | |
| 00007FF6CDFC6D8F 66 FF C7 inc di | |
| 00007FF6CDFC6D92 48 8B DE mov rbx, rsi | |
| 00007FF6CDFC6D95 48 B8 00 00 A2 movabs rax, 0x7ff58da20000 | |
| 00007FF6CDFC6D9F 48 2B D8 sub rbx, rax | |
| 00007FF6CDFC6DA2 40 80 E7 9B and dil, 0x9b | |
| 00007FF6CDFC6DA6 0F C0 E0 xadd al, ah | |
| 00007FF6CDFC6DA9 66 D3 E0 shl ax, cl | |
| 00007FF6CDFC6DAC 4C 8D 25 4D 92 lea r12, [rip - 0x405a6db3] | |
| 00007FF6CDFC6DB3 48 0F B7 C0 movzx rax, ax | |
| 00007FF6CDFC6DB7 40 D2 F7 sal dil, cl | |
| 00007FF6CDFC6DBA 48 8D 3D F9 FF lea rdi, [rip - 7] | |
| 00007FF6CDFC6DC1 2A E3 sub ah, bl | |
| 00007FF6CDFC6DC3 44 0F A3 C8 bt eax, r9d | |
| 00007FF6CDFC6DC7 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFC6DC9 66 45 85 CA test r9w, r10w | |
| 00007FF6CDFC6DCD 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFC6DD4 45 85 EC test r13d, r12d | |
| 00007FF6CDFC6DD7 33 C3 xor eax, ebx | |
| 00007FF6CDFC6DD9 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFC6DDE F8 clc | |
| 00007FF6CDFC6DDF F7 D0 not eax | |
| 00007FF6CDFC6DE1 E9 01 00 00 00 jmp 0x7ff6cdfc6de7 | |
| 00007FF6CDFC6DE7 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFC6DEA E9 00 00 00 00 jmp 0x7ff6cdfc6def | |
| 00007FF6CDFC6DEF FF C0 inc eax | |
| 00007FF6CDFC6DF1 41 3A CF cmp cl, r15b | |
| 00007FF6CDFC6DF4 41 F6 C2 63 test r10b, 0x63 | |
| 00007FF6CDFC6DF8 53 push rbx | |
| 00007FF6CDFC6DF9 66 33 DB xor bx, bx | |
| 00007FF6CDFC6DFC 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFC6DFF F8 clc | |
| 00007FF6CDFC6E00 5B pop rbx | |
| 00007FF6CDFC6E01 F8 clc | |
| 00007FF6CDFC6E02 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFC6E05 66 41 81 FE 07 cmp r14w, 0xe07 | |
| 00007FF6CDFC6E0B 48 03 F8 add rdi, rax | |
| 00007FF6CDFC6E0E E9 00 00 00 00 jmp 0x7ff6cdfc6e13 | |
| 00007FF6CDFC6E13 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFC72E0 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFC72E3 48 0F A4 C1 ED shld rcx, rax, -0x13 | |
| 00007FF6CDFC72E8 85 D9 test ebx, ecx | |
| 00007FF6CDFC72EA 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFC72F1 66 87 C9 xchg cx, cx | |
| 00007FF6CDFC72F4 66 C1 F1 42 sal cx, 0x42 | |
| 00007FF6CDFC72F8 32 C3 xor al, bl | |
| 00007FF6CDFC72FA D0 C0 rol al, 1 | |
| 00007FF6CDFC72FC 34 49 xor al, 0x49 | |
| 00007FF6CDFC72FE 66 0F BA F9 45 btc cx, 0x45 | |
| 00007FF6CDFC7303 66 0F BA F1 95 btr cx, -0x6b | |
| 00007FF6CDFC7308 D0 C8 ror al, 1 | |
| 00007FF6CDFC730A FE C8 dec al | |
| 00007FF6CDFC730C 32 D8 xor bl, al | |
| 00007FF6CDFC730E 41 0F B7 CA movzx ecx, r10w | |
| 00007FF6CDFC7312 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFC7317 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFC731E F5 cmc | |
| 00007FF6CDFC731F 84 FA test bh, dl | |
| 00007FF6CDFC7321 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFC7325 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFC7327 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFC732E F8 clc | |
| 00007FF6CDFC732F F9 stc | |
| 00007FF6CDFC7330 33 C3 xor eax, ebx | |
| 00007FF6CDFC7332 41 3A F4 cmp sil, r12b | |
| 00007FF6CDFC7335 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFC733A F8 clc | |
| 00007FF6CDFC733B F7 D0 not eax | |
| 00007FF6CDFC733D E9 01 00 00 00 jmp 0x7ff6cdfc7343 | |
| 00007FF6CDFC7343 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFC7346 E9 00 00 00 00 jmp 0x7ff6cdfc734b | |
| 00007FF6CDFC734B FF C0 inc eax | |
| 00007FF6CDFC734D 53 push rbx | |
| 00007FF6CDFC734E 66 0F C1 DB xadd bx, bx | |
| 00007FF6CDFC7352 86 FB xchg bl, bh | |
| 00007FF6CDFC7354 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFC7357 5B pop rbx | |
| 00007FF6CDFC7358 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFC735B 41 F6 C1 EE test r9b, 0xee | |
| 00007FF6CDFC735F 48 03 F8 add rdi, rax | |
| 00007FF6CDFC7362 E9 00 00 00 00 jmp 0x7ff6cdfc7367 | |
| 00007FF6CDFC7367 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC491 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC494 41 02 CD add cl, r13b | |
| 00007FF6CDFCC497 0A EC or ch, ah | |
| 00007FF6CDFCC499 F9 stc | |
| 00007FF6CDFCC49A 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC4A1 D2 E5 shl ch, cl | |
| 00007FF6CDFCC4A3 4D 3B CB cmp r9, r11 | |
| 00007FF6CDFCC4A6 32 C3 xor al, bl | |
| 00007FF6CDFCC4A8 D0 C0 rol al, 1 | |
| 00007FF6CDFCC4AA 48 13 CF adc rcx, rdi | |
| 00007FF6CDFCC4AD D2 F1 sal cl, cl | |
| 00007FF6CDFCC4AF 34 49 xor al, 0x49 | |
| 00007FF6CDFCC4B1 4C 0F BB E1 btc rcx, r12 | |
| 00007FF6CDFCC4B5 D0 C8 ror al, 1 | |
| 00007FF6CDFCC4B7 66 B9 FC 1D mov cx, 0x1dfc | |
| 00007FF6CDFCC4BB 41 0F BF CE movsx ecx, r14w | |
| 00007FF6CDFCC4BF FE C8 dec al | |
| 00007FF6CDFCC4C1 66 C1 F9 3E sar cx, 0x3e | |
| 00007FF6CDFCC4C5 66 F7 D1 not cx | |
| 00007FF6CDFCC4C8 32 D8 xor bl, al | |
| 00007FF6CDFCC4CA 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC4CF F8 clc | |
| 00007FF6CDFCC4D0 66 85 D4 test dx, sp | |
| 00007FF6CDFCC4D3 66 41 81 F9 09 cmp r9w, 0xf09 | |
| 00007FF6CDFCC4D9 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC4E0 F5 cmc | |
| 00007FF6CDFCC4E1 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC4E5 40 32 C4 xor al, spl | |
| 00007FF6CDFCC4E8 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC4EA E9 03 00 00 00 jmp 0x7ff6cdfcc4f2 | |
| 00007FF6CDFCC4F2 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC4F9 40 84 F4 test sil, spl | |
| 00007FF6CDFCC4FC E9 00 00 00 00 jmp 0x7ff6cdfcc501 | |
| 00007FF6CDFCC501 33 C3 xor eax, ebx | |
| 00007FF6CDFCC503 F9 stc | |
| 00007FF6CDFCC504 F5 cmc | |
| 00007FF6CDFCC505 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC50A F5 cmc | |
| 00007FF6CDFCC50B F7 D0 not eax | |
| 00007FF6CDFCC50D C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC510 FF C0 inc eax | |
| 00007FF6CDFCC512 F9 stc | |
| 00007FF6CDFCC513 53 push rbx | |
| 00007FF6CDFCC514 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC517 5B pop rbx | |
| 00007FF6CDFCC518 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC51B 48 81 F9 7D 6C cmp rcx, 0x47dc6c7d | |
| 00007FF6CDFCC522 49 F7 C0 D7 6F test r8, 0x28a76fd7 | |
| 00007FF6CDFCC529 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC52C E9 00 00 00 00 jmp 0x7ff6cdfcc531 | |
| 00007FF6CDFCC531 57 push rdi | |
| 00007FF6CDFCC532 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC533 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC536 49 0F 49 CD cmovns rcx, r13 | |
| 00007FF6CDFCC53A 48 0F AB E1 bts rcx, rsp | |
| 00007FF6CDFCC53E 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC545 66 03 CC add cx, sp | |
| 00007FF6CDFCC548 FE C5 inc ch | |
| 00007FF6CDFCC54A 48 0F B7 CA movzx rcx, dx | |
| 00007FF6CDFCC54E 32 C3 xor al, bl | |
| 00007FF6CDFCC550 66 0F BA F9 1E btc cx, 0x1e | |
| 00007FF6CDFCC555 E9 00 00 00 00 jmp 0x7ff6cdfcc55a | |
| 00007FF6CDFCC55A D0 C0 rol al, 1 | |
| 00007FF6CDFCC55C 34 49 xor al, 0x49 | |
| 00007FF6CDFCC55E D0 C8 ror al, 1 | |
| 00007FF6CDFCC560 48 FF C1 inc rcx | |
| 00007FF6CDFCC563 66 0F 47 CB cmova cx, bx | |
| 00007FF6CDFCC567 C6 C5 9F mov ch, 0x9f | |
| 00007FF6CDFCC56A FE C8 dec al | |
| 00007FF6CDFCC56C 80 E1 83 and cl, 0x83 | |
| 00007FF6CDFCC56F 32 D8 xor bl, al | |
| 00007FF6CDFCC571 48 63 CF movsxd rcx, edi | |
| 00007FF6CDFCC574 66 41 33 CE xor cx, r14w | |
| 00007FF6CDFCC578 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC57D 41 85 C8 test ecx, r8d | |
| 00007FF6CDFCC580 F5 cmc | |
| 00007FF6CDFCC581 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC588 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC58C 41 84 D7 test dl, r15b | |
| 00007FF6CDFCC58F 66 98 cbw | |
| 00007FF6CDFCC591 49 0F B7 C1 movzx rax, r9w | |
| 00007FF6CDFCC595 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC597 F5 cmc | |
| 00007FF6CDFCC598 F6 C5 37 test ch, 0x37 | |
| 00007FF6CDFCC59B 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC5A2 3A C4 cmp al, ah | |
| 00007FF6CDFCC5A4 F9 stc | |
| 00007FF6CDFCC5A5 33 C3 xor eax, ebx | |
| 00007FF6CDFCC5A7 F8 clc | |
| 00007FF6CDFCC5A8 49 85 F5 test rsi, r13 | |
| 00007FF6CDFCC5AB 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC5B0 F7 D0 not eax | |
| 00007FF6CDFCC5B2 E9 01 00 00 00 jmp 0x7ff6cdfcc5b8 | |
| 00007FF6CDFCC5B8 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC5BB FF C0 inc eax | |
| 00007FF6CDFCC5BD F9 stc | |
| 00007FF6CDFCC5BE 40 84 ED test bpl, bpl | |
| 00007FF6CDFCC5C1 53 push rbx | |
| 00007FF6CDFCC5C2 45 3A C0 cmp r8b, r8b | |
| 00007FF6CDFCC5C5 41 0A D8 or bl, r8b | |
| 00007FF6CDFCC5C8 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC5CB 81 D3 01 13 35 adc ebx, 0x48351301 | |
| 00007FF6CDFCC5D1 5B pop rbx | |
| 00007FF6CDFCC5D2 E9 00 00 00 00 jmp 0x7ff6cdfcc5d7 | |
| 00007FF6CDFCC5D7 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC5DA F9 stc | |
| 00007FF6CDFCC5DB 66 85 F7 test si, di | |
| 00007FF6CDFCC5DE 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC5E1 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC5E3 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC5E6 49 0F BF CA movsx rcx, r10w | |
| 00007FF6CDFCC5EA D2 CD ror ch, cl | |
| 00007FF6CDFCC5EC 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC5F3 32 C3 xor al, bl | |
| 00007FF6CDFCC5F5 48 0F BF CC movsx rcx, sp | |
| 00007FF6CDFCC5F9 D0 C0 rol al, 1 | |
| 00007FF6CDFCC5FB E9 00 00 00 00 jmp 0x7ff6cdfcc600 | |
| 00007FF6CDFCC600 34 49 xor al, 0x49 | |
| 00007FF6CDFCC602 66 41 8B CF mov cx, r15w | |
| 00007FF6CDFCC606 66 87 C9 xchg cx, cx | |
| 00007FF6CDFCC609 66 0F C9 bswap cx | |
| 00007FF6CDFCC60C D0 C8 ror al, 1 | |
| 00007FF6CDFCC60E E9 00 00 00 00 jmp 0x7ff6cdfcc613 | |
| 00007FF6CDFCC613 FE C8 dec al | |
| 00007FF6CDFCC615 32 D8 xor bl, al | |
| 00007FF6CDFCC617 48 0F C9 bswap rcx | |
| 00007FF6CDFCC61A 12 E8 adc ch, al | |
| 00007FF6CDFCC61C 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC621 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC628 F5 cmc | |
| 00007FF6CDFCC629 E9 00 00 00 00 jmp 0x7ff6cdfcc62e | |
| 00007FF6CDFCC62E 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC632 48 90 nop | |
| 00007FF6CDFCC634 F5 cmc | |
| 00007FF6CDFCC635 41 12 C4 adc al, r12b | |
| 00007FF6CDFCC638 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC63A 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC641 33 C3 xor eax, ebx | |
| 00007FF6CDFCC643 E9 01 00 00 00 jmp 0x7ff6cdfcc649 | |
| 00007FF6CDFCC649 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC64E F8 clc | |
| 00007FF6CDFCC64F E9 00 00 00 00 jmp 0x7ff6cdfcc654 | |
| 00007FF6CDFCC654 F7 D0 not eax | |
| 00007FF6CDFCC656 F8 clc | |
| 00007FF6CDFCC657 E9 00 00 00 00 jmp 0x7ff6cdfcc65c | |
| 00007FF6CDFCC65C C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC65F E9 00 00 00 00 jmp 0x7ff6cdfcc664 | |
| 00007FF6CDFCC664 FF C0 inc eax | |
| 00007FF6CDFCC666 F9 stc | |
| 00007FF6CDFCC667 40 F6 C4 D1 test spl, 0xd1 | |
| 00007FF6CDFCC66B F5 cmc | |
| 00007FF6CDFCC66C 53 push rbx | |
| 00007FF6CDFCC66D 66 81 D3 0E 0E adc bx, 0xe0e | |
| 00007FF6CDFCC672 86 FF xchg bh, bh | |
| 00007FF6CDFCC674 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC677 66 44 0F BB F3 btc bx, r14w | |
| 00007FF6CDFCC67C 49 0F 42 DB cmovb rbx, r11 | |
| 00007FF6CDFCC680 5B pop rbx | |
| 00007FF6CDFCC681 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC684 45 3A D3 cmp r10b, r11b | |
| 00007FF6CDFCC687 66 F7 C2 58 7D test dx, 0x7d58 | |
| 00007FF6CDFCC68C 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC68F FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC691 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC694 66 81 E9 65 1E sub cx, 0x1e65 | |
| 00007FF6CDFCC699 66 41 23 C9 and cx, r9w | |
| 00007FF6CDFCC69D C0 D1 56 rcl cl, 0x56 | |
| 00007FF6CDFCC6A0 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC6A7 48 0F BB C9 btc rcx, rcx | |
| 00007FF6CDFCC6AB 44 0F B3 C9 btr ecx, r9d | |
| 00007FF6CDFCC6AF 32 C3 xor al, bl | |
| 00007FF6CDFCC6B1 D0 C0 rol al, 1 | |
| 00007FF6CDFCC6B3 D3 D9 rcr ecx, cl | |
| 00007FF6CDFCC6B5 34 49 xor al, 0x49 | |
| 00007FF6CDFCC6B7 D0 C8 ror al, 1 | |
| 00007FF6CDFCC6B9 49 0F BF C9 movsx rcx, r9w | |
| 00007FF6CDFCC6BD 0F 93 C1 setae cl | |
| 00007FF6CDFCC6C0 66 40 0F BE CE movsx cx, sil | |
| 00007FF6CDFCC6C5 FE C8 dec al | |
| 00007FF6CDFCC6C7 32 D8 xor bl, al | |
| 00007FF6CDFCC6C9 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC6CE F9 stc | |
| 00007FF6CDFCC6CF 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC6D6 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC6DA 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC6DC 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC6E3 40 80 FC D8 cmp spl, 0xd8 | |
| 00007FF6CDFCC6E7 F8 clc | |
| 00007FF6CDFCC6E8 33 C3 xor eax, ebx | |
| 00007FF6CDFCC6EA 66 81 FE E1 2E cmp si, 0x2ee1 | |
| 00007FF6CDFCC6EF 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC6F4 F7 D0 not eax | |
| 00007FF6CDFCC6F6 F9 stc | |
| 00007FF6CDFCC6F7 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC6FA E9 00 00 00 00 jmp 0x7ff6cdfcc6ff | |
| 00007FF6CDFCC6FF FF C0 inc eax | |
| 00007FF6CDFCC701 F9 stc | |
| 00007FF6CDFCC702 48 3B D4 cmp rdx, rsp | |
| 00007FF6CDFCC705 53 push rbx | |
| 00007FF6CDFCC706 40 80 FE 4D cmp sil, 0x4d | |
| 00007FF6CDFCC70A 41 02 DE add bl, r14b | |
| 00007FF6CDFCC70D 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC710 5B pop rbx | |
| 00007FF6CDFCC711 40 84 E5 test spl, bpl | |
| 00007FF6CDFCC714 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC717 F9 stc | |
| 00007FF6CDFCC718 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC71B E9 00 00 00 00 jmp 0x7ff6cdfcc720 | |
| 00007FF6CDFCC720 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC722 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC725 41 0F B7 C8 movzx ecx, r8w | |
| 00007FF6CDFCC729 0F BB D9 btc ecx, ebx | |
| 00007FF6CDFCC72C 66 0F B6 CA movzx cx, dl | |
| 00007FF6CDFCC730 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC737 0F BA F9 28 btc ecx, 0x28 | |
| 00007FF6CDFCC73B 32 C3 xor al, bl | |
| 00007FF6CDFCC73D C0 DD 35 rcr ch, 0x35 | |
| 00007FF6CDFCC740 66 0F BA F1 24 btr cx, 0x24 | |
| 00007FF6CDFCC745 48 63 CD movsxd rcx, ebp | |
| 00007FF6CDFCC748 D0 C0 rol al, 1 | |
| 00007FF6CDFCC74A 40 02 CF add cl, dil | |
| 00007FF6CDFCC74D 34 49 xor al, 0x49 | |
| 00007FF6CDFCC74F 66 0F BA E1 47 bt cx, 0x47 | |
| 00007FF6CDFCC754 49 0F BF C9 movsx rcx, r9w | |
| 00007FF6CDFCC758 D0 C8 ror al, 1 | |
| 00007FF6CDFCC75A B9 26 75 66 22 mov ecx, 0x22667526 | |
| 00007FF6CDFCC75F E9 02 00 00 00 jmp 0x7ff6cdfcc766 | |
| 00007FF6CDFCC766 FE C8 dec al | |
| 00007FF6CDFCC768 66 C1 E9 FD shr cx, -3 | |
| 00007FF6CDFCC76C 32 D8 xor bl, al | |
| 00007FF6CDFCC76E 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC773 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC77A 3C C5 cmp al, 0xc5 | |
| 00007FF6CDFCC77C 45 84 EE test r13b, r14b | |
| 00007FF6CDFCC77F 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC783 40 1A C4 sbb al, spl | |
| 00007FF6CDFCC786 98 cwde | |
| 00007FF6CDFCC787 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC789 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC790 66 F7 C3 E1 6B test bx, 0x6be1 | |
| 00007FF6CDFCC795 33 C3 xor eax, ebx | |
| 00007FF6CDFCC797 66 45 3B FC cmp r15w, r12w | |
| 00007FF6CDFCC79B 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC7A0 E9 01 00 00 00 jmp 0x7ff6cdfcc7a6 | |
| 00007FF6CDFCC7A6 F7 D0 not eax | |
| 00007FF6CDFCC7A8 F9 stc | |
| 00007FF6CDFCC7A9 F5 cmc | |
| 00007FF6CDFCC7AA C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC7AD E9 00 00 00 00 jmp 0x7ff6cdfcc7b2 | |
| 00007FF6CDFCC7B2 FF C0 inc eax | |
| 00007FF6CDFCC7B4 41 80 FD B5 cmp r13b, 0xb5 | |
| 00007FF6CDFCC7B8 53 push rbx | |
| 00007FF6CDFCC7B9 0F B7 D8 movzx ebx, ax | |
| 00007FF6CDFCC7BC 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC7BF D2 FF sar bh, cl | |
| 00007FF6CDFCC7C1 66 41 0F 41 DD cmovno bx, r13w | |
| 00007FF6CDFCC7C6 48 0F BA E3 68 bt rbx, 0x68 | |
| 00007FF6CDFCC7CB 5B pop rbx | |
| 00007FF6CDFCC7CC 41 3A CC cmp cl, r12b | |
| 00007FF6CDFCC7CF F8 clc | |
| 00007FF6CDFCC7D0 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC7D3 F9 stc | |
| 00007FF6CDFCC7D4 E9 00 00 00 00 jmp 0x7ff6cdfcc7d9 | |
| 00007FF6CDFCC7D9 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC7DC E9 00 00 00 00 jmp 0x7ff6cdfcc7e1 | |
| 00007FF6CDFCC7E1 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC7E3 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC7E6 48 0F BF CD movsx rcx, bp | |
| 00007FF6CDFCC7EA 66 87 C9 xchg cx, cx | |
| 00007FF6CDFCC7ED 66 44 0F BB C9 btc cx, r9w | |
| 00007FF6CDFCC7F2 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC7F9 48 81 E9 00 52 sub rcx, 0x1e6a5200 | |
| 00007FF6CDFCC800 48 C1 F1 12 sal rcx, 0x12 | |
| 00007FF6CDFCC804 32 C3 xor al, bl | |
| 00007FF6CDFCC806 D0 C0 rol al, 1 | |
| 00007FF6CDFCC808 34 49 xor al, 0x49 | |
| 00007FF6CDFCC80A 48 D3 D1 rcl rcx, cl | |
| 00007FF6CDFCC80D D0 C8 ror al, 1 | |
| 00007FF6CDFCC80F 49 63 C9 movsxd rcx, r9d | |
| 00007FF6CDFCC812 66 0F B6 CA movzx cx, dl | |
| 00007FF6CDFCC816 FE C8 dec al | |
| 00007FF6CDFCC818 D2 F5 sal ch, cl | |
| 00007FF6CDFCC81A 32 D8 xor bl, al | |
| 00007FF6CDFCC81C 66 F7 D9 neg cx | |
| 00007FF6CDFCC81F 48 0F BA F1 9B btr rcx, -0x65 | |
| 00007FF6CDFCC824 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC829 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC830 41 F6 C3 7E test r11b, 0x7e | |
| 00007FF6CDFCC834 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC838 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC83A F5 cmc | |
| 00007FF6CDFCC83B F8 clc | |
| 00007FF6CDFCC83C 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC843 33 C3 xor eax, ebx | |
| 00007FF6CDFCC845 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC84A F7 D0 not eax | |
| 00007FF6CDFCC84C F5 cmc | |
| 00007FF6CDFCC84D C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC850 E9 00 00 00 00 jmp 0x7ff6cdfcc855 | |
| 00007FF6CDFCC855 FF C0 inc eax | |
| 00007FF6CDFCC857 F8 clc | |
| 00007FF6CDFCC858 41 3A EF cmp bpl, r15b | |
| 00007FF6CDFCC85B 53 push rbx | |
| 00007FF6CDFCC85C 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC85F 66 0F BD DC bsr bx, sp | |
| 00007FF6CDFCC863 80 C7 B7 add bh, 0xb7 | |
| 00007FF6CDFCC866 66 41 0F BC DF bsf bx, r15w | |
| 00007FF6CDFCC86B 5B pop rbx | |
| 00007FF6CDFCC86C 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC86F E9 04 00 00 00 jmp 0x7ff6cdfcc878 | |
| 00007FF6CDFCC878 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC87B E9 00 00 00 00 jmp 0x7ff6cdfcc880 | |
| 00007FF6CDFCC880 57 push rdi | |
| 00007FF6CDFCC881 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC882 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC885 48 0F BA E1 A5 bt rcx, -0x5b | |
| 00007FF6CDFCC88A 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC891 48 0F B7 CA movzx rcx, dx | |
| 00007FF6CDFCC895 66 C1 E1 F0 shl cx, -0x10 | |
| 00007FF6CDFCC899 32 C3 xor al, bl | |
| 00007FF6CDFCC89B 66 44 0F BB F9 btc cx, r15w | |
| 00007FF6CDFCC8A0 F5 cmc | |
| 00007FF6CDFCC8A1 D0 C0 rol al, 1 | |
| 00007FF6CDFCC8A3 34 49 xor al, 0x49 | |
| 00007FF6CDFCC8A5 66 C1 C1 DB rol cx, -0x25 | |
| 00007FF6CDFCC8A9 66 44 0F AB F1 bts cx, r14w | |
| 00007FF6CDFCC8AE 44 0F BB E9 btc ecx, r13d | |
| 00007FF6CDFCC8B2 D0 C8 ror al, 1 | |
| 00007FF6CDFCC8B4 66 41 0F BE CB movsx cx, r11b | |
| 00007FF6CDFCC8B9 FE C8 dec al | |
| 00007FF6CDFCC8BB 32 D8 xor bl, al | |
| 00007FF6CDFCC8BD 66 41 0F 45 CB cmovne cx, r11w | |
| 00007FF6CDFCC8C2 C0 C5 5F rol ch, 0x5f | |
| 00007FF6CDFCC8C5 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC8CA 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC8D1 F9 stc | |
| 00007FF6CDFCC8D2 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC8D6 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC8D8 41 84 CC test cl, r12b | |
| 00007FF6CDFCC8DB 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC8E2 33 C3 xor eax, ebx | |
| 00007FF6CDFCC8E4 41 80 FB 04 cmp r11b, 4 | |
| 00007FF6CDFCC8E8 45 3A F6 cmp r14b, r14b | |
| 00007FF6CDFCC8EB F5 cmc | |
| 00007FF6CDFCC8EC 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC8F1 F5 cmc | |
| 00007FF6CDFCC8F2 F7 D0 not eax | |
| 00007FF6CDFCC8F4 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC8F7 E9 00 00 00 00 jmp 0x7ff6cdfcc8fc | |
| 00007FF6CDFCC8FC FF C0 inc eax | |
| 00007FF6CDFCC8FE 53 push rbx | |
| 00007FF6CDFCC8FF 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC902 5B pop rbx | |
| 00007FF6CDFCC903 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC906 F5 cmc | |
| 00007FF6CDFCC907 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC90A E9 00 00 00 00 jmp 0x7ff6cdfcc90f | |
| 00007FF6CDFCC90F FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC911 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC914 C0 C5 E6 rol ch, 0xe6 | |
| 00007FF6CDFCC917 66 41 0F 4C CE cmovl cx, r14w | |
| 00007FF6CDFCC91C 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC923 48 C1 D9 DA rcr rcx, -0x26 | |
| 00007FF6CDFCC927 66 81 F9 1E 20 cmp cx, 0x201e | |
| 00007FF6CDFCC92C 66 41 0F BE CB movsx cx, r11b | |
| 00007FF6CDFCC931 32 C3 xor al, bl | |
| 00007FF6CDFCC933 0F 9B C1 setnp cl | |
| 00007FF6CDFCC936 D0 C0 rol al, 1 | |
| 00007FF6CDFCC938 34 49 xor al, 0x49 | |
| 00007FF6CDFCC93A 40 8A CD mov cl, bpl | |
| 00007FF6CDFCC93D F8 clc | |
| 00007FF6CDFCC93E 66 0F AB C1 bts cx, ax | |
| 00007FF6CDFCC942 D0 C8 ror al, 1 | |
| 00007FF6CDFCC944 FE C8 dec al | |
| 00007FF6CDFCC946 66 D3 F9 sar cx, cl | |
| 00007FF6CDFCC949 48 81 E1 18 7B and rcx, 0x76f07b18 | |
| 00007FF6CDFCC950 44 3A CA cmp r9b, dl | |
| 00007FF6CDFCC953 32 D8 xor bl, al | |
| 00007FF6CDFCC955 85 FF test edi, edi | |
| 00007FF6CDFCC957 C0 D1 9B rcl cl, 0x9b | |
| 00007FF6CDFCC95A 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC95F 41 80 FA 61 cmp r10b, 0x61 | |
| 00007FF6CDFCC963 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC96A 41 80 FF 24 cmp r15b, 0x24 | |
| 00007FF6CDFCC96E 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC972 0F BF C1 movsx eax, cx | |
| 00007FF6CDFCC975 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC977 40 3A E8 cmp bpl, al | |
| 00007FF6CDFCC97A 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC981 33 C3 xor eax, ebx | |
| 00007FF6CDFCC983 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC988 F9 stc | |
| 00007FF6CDFCC989 F8 clc | |
| 00007FF6CDFCC98A F7 D0 not eax | |
| 00007FF6CDFCC98C C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC98F FF C0 inc eax | |
| 00007FF6CDFCC991 44 85 F2 test r14d, edx | |
| 00007FF6CDFCC994 53 push rbx | |
| 00007FF6CDFCC995 49 0F B7 DB movzx rbx, r11w | |
| 00007FF6CDFCC999 66 41 81 F8 8B cmp r8w, 0x4c8b | |
| 00007FF6CDFCC99F 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC9A2 66 41 0F BD DE bsr bx, r14w | |
| 00007FF6CDFCC9A7 C1 CB 67 ror ebx, 0x67 | |
| 00007FF6CDFCC9AA 5B pop rbx | |
| 00007FF6CDFCC9AB 66 81 FB 28 14 cmp bx, 0x1428 | |
| 00007FF6CDFCC9B0 F9 stc | |
| 00007FF6CDFCC9B1 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC9B4 F8 clc | |
| 00007FF6CDFCC9B5 66 44 85 C9 test r9w, cx | |
| 00007FF6CDFCC9B9 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC9BC E9 00 00 00 00 jmp 0x7ff6cdfcc9c1 | |
| 00007FF6CDFCC9C1 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC9C3 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC9C6 D2 D9 rcr cl, cl | |
| 00007FF6CDFCC9C8 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC9CF 49 0F BF CF movsx rcx, r15w | |
| 00007FF6CDFCC9D3 32 C3 xor al, bl | |
| 00007FF6CDFCC9D5 C0 CD E6 ror ch, 0xe6 | |
| 00007FF6CDFCC9D8 41 0F 4E CB cmovle ecx, r11d | |
| 00007FF6CDFCC9DC D0 C0 rol al, 1 | |
| 00007FF6CDFCC9DE E9 05 00 00 00 jmp 0x7ff6cdfcc9e8 | |
| 00007FF6CDFCC9E8 34 49 xor al, 0x49 | |
| 00007FF6CDFCC9EA 48 0F 4C CC cmovl rcx, rsp | |
| 00007FF6CDFCC9EE D0 C8 ror al, 1 | |
| 00007FF6CDFCC9F0 FE C8 dec al | |
| 00007FF6CDFCC9F2 49 0F BD CB bsr rcx, r11 | |
| 00007FF6CDFCC9F6 32 D8 xor bl, al | |
| 00007FF6CDFCC9F8 0F B7 CA movzx ecx, dx | |
| 00007FF6CDFCC9FB 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCCA00 F9 stc | |
| 00007FF6CDFCCA01 66 85 FC test di, sp | |
| 00007FF6CDFCCA04 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCCA0B F9 stc | |
| 00007FF6CDFCCA0C 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCCA10 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCCA12 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCCA19 E9 00 00 00 00 jmp 0x7ff6cdfcca1e | |
| 00007FF6CDFCCA1E 33 C3 xor eax, ebx | |
| 00007FF6CDFCCA20 41 F6 C7 87 test r15b, 0x87 | |
| 00007FF6CDFCCA24 84 C4 test al, ah | |
| 00007FF6CDFCCA26 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCCA2B F8 clc | |
| 00007FF6CDFCCA2C F7 D0 not eax | |
| 00007FF6CDFCCA2E E9 00 00 00 00 jmp 0x7ff6cdfcca33 | |
| 00007FF6CDFCCA33 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCCA36 E9 00 00 00 00 jmp 0x7ff6cdfcca3b | |
| 00007FF6CDFCCA3B FF C0 inc eax | |
| 00007FF6CDFCCA3D F9 stc | |
| 00007FF6CDFCCA3E E9 00 00 00 00 jmp 0x7ff6cdfcca43 | |
| 00007FF6CDFCCA43 53 push rbx | |
| 00007FF6CDFCCA44 4C 0F BB D3 btc rbx, r10 | |
| 00007FF6CDFCCA48 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCCA4B F9 stc | |
| 00007FF6CDFCCA4C 0F 90 C3 seto bl | |
| 00007FF6CDFCCA4F 5B pop rbx | |
| 00007FF6CDFCCA50 F9 stc | |
| 00007FF6CDFCCA51 E9 00 00 00 00 jmp 0x7ff6cdfcca56 | |
| 00007FF6CDFCCA56 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCCA59 66 41 81 FA 19 cmp r10w, 0x5c19 | |
| 00007FF6CDFCCA5F 48 03 F8 add rdi, rax | |
| 00007FF6CDFCCA62 E9 00 00 00 00 jmp 0x7ff6cdfcca67 | |
| 00007FF6CDFCCA67 57 push rdi | |
| 00007FF6CDFCCA68 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCCA69 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCCA6C 80 DD C0 sbb ch, 0xc0 | |
| 00007FF6CDFCCA6F 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCCA76 48 C1 E9 6E shr rcx, 0x6e | |
| 00007FF6CDFCCA7A 4C 0F A3 F1 bt rcx, r14 | |
| 00007FF6CDFCCA7E 32 C3 xor al, bl | |
| 00007FF6CDFCCA80 D0 C0 rol al, 1 | |
| 00007FF6CDFCCA82 34 49 xor al, 0x49 | |
| 00007FF6CDFCCA84 86 C9 xchg cl, cl | |
| 00007FF6CDFCCA86 D0 C8 ror al, 1 | |
| 00007FF6CDFCCA88 FE C1 inc cl | |
| 00007FF6CDFCCA8A 48 63 CA movsxd rcx, edx | |
| 00007FF6CDFCCA8D 49 0F BF CF movsx rcx, r15w | |
| 00007FF6CDFCCA91 FE C8 dec al | |
| 00007FF6CDFCCA93 66 44 0F A4 E9 shld cx, r13w, 0x5f | |
| 00007FF6CDFCCA99 32 D8 xor bl, al | |
| 00007FF6CDFCCA9B 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCCAA0 66 41 81 FF A9 cmp r15w, 0x63a9 | |
| 00007FF6CDFCCAA6 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCCAAD 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCCAB1 66 41 0F B6 C6 movzx ax, r14b | |
| 00007FF6CDFCCAB6 40 84 D4 test dl, spl | |
| 00007FF6CDFCCAB9 C1 C8 93 ror eax, -0x6d | |
| 00007FF6CDFCCABC 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCCABE 41 F6 C2 2E test r10b, 0x2e | |
| 00007FF6CDFCCAC2 44 3A EC cmp r13b, spl | |
| 00007FF6CDFCCAC5 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCCACC 66 41 3B E0 cmp sp, r8w | |
| 00007FF6CDFCCAD0 41 80 FB 72 cmp r11b, 0x72 | |
| 00007FF6CDFCCAD4 48 85 E7 test rsp, rdi | |
| 00007FF6CDFCCAD7 33 C3 xor eax, ebx | |
| 00007FF6CDFCCAD9 F9 stc | |
| 00007FF6CDFCCADA 45 3A D9 cmp r11b, r9b | |
| 00007FF6CDFCCADD F8 clc | |
| 00007FF6CDFCCADE 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCCAE3 F7 D0 not eax | |
| 00007FF6CDFCCAE5 E9 00 00 00 00 jmp 0x7ff6cdfccaea | |
| 00007FF6CDFCCAEA C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCCAED FF C0 inc eax | |
| 00007FF6CDFCCAEF F8 clc | |
| 00007FF6CDFCCAF0 41 3A FD cmp dil, r13b | |
| 00007FF6CDFCCAF3 E9 00 00 00 00 jmp 0x7ff6cdfccaf8 | |
| 00007FF6CDFCCAF8 53 push rbx | |
| 00007FF6CDFCCAF9 66 C1 CB E9 ror bx, -0x17 | |
| 00007FF6CDFCCAFD 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCCB00 48 81 C3 9A 50 add rbx, 0x1501509a | |
| 00007FF6CDFCCB07 5B pop rbx | |
| 00007FF6CDFCCB08 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCCB0B 48 03 F8 add rdi, rax | |
| 00007FF6CDFCCB0E FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFC72E0 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFC72E3 48 0F A4 C1 ED shld rcx, rax, -0x13 | |
| 00007FF6CDFC72E8 85 D9 test ebx, ecx | |
| 00007FF6CDFC72EA 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFC72F1 66 87 C9 xchg cx, cx | |
| 00007FF6CDFC72F4 66 C1 F1 42 sal cx, 0x42 | |
| 00007FF6CDFC72F8 32 C3 xor al, bl | |
| 00007FF6CDFC72FA D0 C0 rol al, 1 | |
| 00007FF6CDFC72FC 34 49 xor al, 0x49 | |
| 00007FF6CDFC72FE 66 0F BA F9 45 btc cx, 0x45 | |
| 00007FF6CDFC7303 66 0F BA F1 95 btr cx, -0x6b | |
| 00007FF6CDFC7308 D0 C8 ror al, 1 | |
| 00007FF6CDFC730A FE C8 dec al | |
| 00007FF6CDFC730C 32 D8 xor bl, al | |
| 00007FF6CDFC730E 41 0F B7 CA movzx ecx, r10w | |
| 00007FF6CDFC7312 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFC7317 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFC731E F5 cmc | |
| 00007FF6CDFC731F 84 FA test bh, dl | |
| 00007FF6CDFC7321 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFC7325 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFC7327 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFC732E F8 clc | |
| 00007FF6CDFC732F F9 stc | |
| 00007FF6CDFC7330 33 C3 xor eax, ebx | |
| 00007FF6CDFC7332 41 3A F4 cmp sil, r12b | |
| 00007FF6CDFC7335 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFC733A F8 clc | |
| 00007FF6CDFC733B F7 D0 not eax | |
| 00007FF6CDFC733D E9 01 00 00 00 jmp 0x7ff6cdfc7343 | |
| 00007FF6CDFC7343 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFC7346 E9 00 00 00 00 jmp 0x7ff6cdfc734b | |
| 00007FF6CDFC734B FF C0 inc eax | |
| 00007FF6CDFC734D 53 push rbx | |
| 00007FF6CDFC734E 66 0F C1 DB xadd bx, bx | |
| 00007FF6CDFC7352 86 FB xchg bl, bh | |
| 00007FF6CDFC7354 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFC7357 5B pop rbx | |
| 00007FF6CDFC7358 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFC735B 41 F6 C1 EE test r9b, 0xee | |
| 00007FF6CDFC735F 48 03 F8 add rdi, rax | |
| 00007FF6CDFC7362 E9 00 00 00 00 jmp 0x7ff6cdfc7367 | |
| 00007FF6CDFC7367 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC491 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC494 41 02 CD add cl, r13b | |
| 00007FF6CDFCC497 0A EC or ch, ah | |
| 00007FF6CDFCC499 F9 stc | |
| 00007FF6CDFCC49A 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC4A1 D2 E5 shl ch, cl | |
| 00007FF6CDFCC4A3 4D 3B CB cmp r9, r11 | |
| 00007FF6CDFCC4A6 32 C3 xor al, bl | |
| 00007FF6CDFCC4A8 D0 C0 rol al, 1 | |
| 00007FF6CDFCC4AA 48 13 CF adc rcx, rdi | |
| 00007FF6CDFCC4AD D2 F1 sal cl, cl | |
| 00007FF6CDFCC4AF 34 49 xor al, 0x49 | |
| 00007FF6CDFCC4B1 4C 0F BB E1 btc rcx, r12 | |
| 00007FF6CDFCC4B5 D0 C8 ror al, 1 | |
| 00007FF6CDFCC4B7 66 B9 FC 1D mov cx, 0x1dfc | |
| 00007FF6CDFCC4BB 41 0F BF CE movsx ecx, r14w | |
| 00007FF6CDFCC4BF FE C8 dec al | |
| 00007FF6CDFCC4C1 66 C1 F9 3E sar cx, 0x3e | |
| 00007FF6CDFCC4C5 66 F7 D1 not cx | |
| 00007FF6CDFCC4C8 32 D8 xor bl, al | |
| 00007FF6CDFCC4CA 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC4CF F8 clc | |
| 00007FF6CDFCC4D0 66 85 D4 test dx, sp | |
| 00007FF6CDFCC4D3 66 41 81 F9 09 cmp r9w, 0xf09 | |
| 00007FF6CDFCC4D9 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC4E0 F5 cmc | |
| 00007FF6CDFCC4E1 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC4E5 40 32 C4 xor al, spl | |
| 00007FF6CDFCC4E8 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC4EA E9 03 00 00 00 jmp 0x7ff6cdfcc4f2 | |
| 00007FF6CDFCC4F2 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC4F9 40 84 F4 test sil, spl | |
| 00007FF6CDFCC4FC E9 00 00 00 00 jmp 0x7ff6cdfcc501 | |
| 00007FF6CDFCC501 33 C3 xor eax, ebx | |
| 00007FF6CDFCC503 F9 stc | |
| 00007FF6CDFCC504 F5 cmc | |
| 00007FF6CDFCC505 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC50A F5 cmc | |
| 00007FF6CDFCC50B F7 D0 not eax | |
| 00007FF6CDFCC50D C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC510 FF C0 inc eax | |
| 00007FF6CDFCC512 F9 stc | |
| 00007FF6CDFCC513 53 push rbx | |
| 00007FF6CDFCC514 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC517 5B pop rbx | |
| 00007FF6CDFCC518 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC51B 48 81 F9 7D 6C cmp rcx, 0x47dc6c7d | |
| 00007FF6CDFCC522 49 F7 C0 D7 6F test r8, 0x28a76fd7 | |
| 00007FF6CDFCC529 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC52C E9 00 00 00 00 jmp 0x7ff6cdfcc531 | |
| 00007FF6CDFCC531 57 push rdi | |
| 00007FF6CDFCC532 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC533 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC536 49 0F 49 CD cmovns rcx, r13 | |
| 00007FF6CDFCC53A 48 0F AB E1 bts rcx, rsp | |
| 00007FF6CDFCC53E 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC545 66 03 CC add cx, sp | |
| 00007FF6CDFCC548 FE C5 inc ch | |
| 00007FF6CDFCC54A 48 0F B7 CA movzx rcx, dx | |
| 00007FF6CDFCC54E 32 C3 xor al, bl | |
| 00007FF6CDFCC550 66 0F BA F9 1E btc cx, 0x1e | |
| 00007FF6CDFCC555 E9 00 00 00 00 jmp 0x7ff6cdfcc55a | |
| 00007FF6CDFCC55A D0 C0 rol al, 1 | |
| 00007FF6CDFCC55C 34 49 xor al, 0x49 | |
| 00007FF6CDFCC55E D0 C8 ror al, 1 | |
| 00007FF6CDFCC560 48 FF C1 inc rcx | |
| 00007FF6CDFCC563 66 0F 47 CB cmova cx, bx | |
| 00007FF6CDFCC567 C6 C5 9F mov ch, 0x9f | |
| 00007FF6CDFCC56A FE C8 dec al | |
| 00007FF6CDFCC56C 80 E1 83 and cl, 0x83 | |
| 00007FF6CDFCC56F 32 D8 xor bl, al | |
| 00007FF6CDFCC571 48 63 CF movsxd rcx, edi | |
| 00007FF6CDFCC574 66 41 33 CE xor cx, r14w | |
| 00007FF6CDFCC578 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC57D 41 85 C8 test ecx, r8d | |
| 00007FF6CDFCC580 F5 cmc | |
| 00007FF6CDFCC581 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC588 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC58C 41 84 D7 test dl, r15b | |
| 00007FF6CDFCC58F 66 98 cbw | |
| 00007FF6CDFCC591 49 0F B7 C1 movzx rax, r9w | |
| 00007FF6CDFCC595 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC597 F5 cmc | |
| 00007FF6CDFCC598 F6 C5 37 test ch, 0x37 | |
| 00007FF6CDFCC59B 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC5A2 3A C4 cmp al, ah | |
| 00007FF6CDFCC5A4 F9 stc | |
| 00007FF6CDFCC5A5 33 C3 xor eax, ebx | |
| 00007FF6CDFCC5A7 F8 clc | |
| 00007FF6CDFCC5A8 49 85 F5 test rsi, r13 | |
| 00007FF6CDFCC5AB 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC5B0 F7 D0 not eax | |
| 00007FF6CDFCC5B2 E9 01 00 00 00 jmp 0x7ff6cdfcc5b8 | |
| 00007FF6CDFCC5B8 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC5BB FF C0 inc eax | |
| 00007FF6CDFCC5BD F9 stc | |
| 00007FF6CDFCC5BE 40 84 ED test bpl, bpl | |
| 00007FF6CDFCC5C1 53 push rbx | |
| 00007FF6CDFCC5C2 45 3A C0 cmp r8b, r8b | |
| 00007FF6CDFCC5C5 41 0A D8 or bl, r8b | |
| 00007FF6CDFCC5C8 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC5CB 81 D3 01 13 35 adc ebx, 0x48351301 | |
| 00007FF6CDFCC5D1 5B pop rbx | |
| 00007FF6CDFCC5D2 E9 00 00 00 00 jmp 0x7ff6cdfcc5d7 | |
| 00007FF6CDFCC5D7 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC5DA F9 stc | |
| 00007FF6CDFCC5DB 66 85 F7 test si, di | |
| 00007FF6CDFCC5DE 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC5E1 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC5E3 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC5E6 49 0F BF CA movsx rcx, r10w | |
| 00007FF6CDFCC5EA D2 CD ror ch, cl | |
| 00007FF6CDFCC5EC 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC5F3 32 C3 xor al, bl | |
| 00007FF6CDFCC5F5 48 0F BF CC movsx rcx, sp | |
| 00007FF6CDFCC5F9 D0 C0 rol al, 1 | |
| 00007FF6CDFCC5FB E9 00 00 00 00 jmp 0x7ff6cdfcc600 | |
| 00007FF6CDFCC600 34 49 xor al, 0x49 | |
| 00007FF6CDFCC602 66 41 8B CF mov cx, r15w | |
| 00007FF6CDFCC606 66 87 C9 xchg cx, cx | |
| 00007FF6CDFCC609 66 0F C9 bswap cx | |
| 00007FF6CDFCC60C D0 C8 ror al, 1 | |
| 00007FF6CDFCC60E E9 00 00 00 00 jmp 0x7ff6cdfcc613 | |
| 00007FF6CDFCC613 FE C8 dec al | |
| 00007FF6CDFCC615 32 D8 xor bl, al | |
| 00007FF6CDFCC617 48 0F C9 bswap rcx | |
| 00007FF6CDFCC61A 12 E8 adc ch, al | |
| 00007FF6CDFCC61C 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC621 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC628 F5 cmc | |
| 00007FF6CDFCC629 E9 00 00 00 00 jmp 0x7ff6cdfcc62e | |
| 00007FF6CDFCC62E 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC632 48 90 nop | |
| 00007FF6CDFCC634 F5 cmc | |
| 00007FF6CDFCC635 41 12 C4 adc al, r12b | |
| 00007FF6CDFCC638 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC63A 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC641 33 C3 xor eax, ebx | |
| 00007FF6CDFCC643 E9 01 00 00 00 jmp 0x7ff6cdfcc649 | |
| 00007FF6CDFCC649 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC64E F8 clc | |
| 00007FF6CDFCC64F E9 00 00 00 00 jmp 0x7ff6cdfcc654 | |
| 00007FF6CDFCC654 F7 D0 not eax | |
| 00007FF6CDFCC656 F8 clc | |
| 00007FF6CDFCC657 E9 00 00 00 00 jmp 0x7ff6cdfcc65c | |
| 00007FF6CDFCC65C C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC65F E9 00 00 00 00 jmp 0x7ff6cdfcc664 | |
| 00007FF6CDFCC664 FF C0 inc eax | |
| 00007FF6CDFCC666 F9 stc | |
| 00007FF6CDFCC667 40 F6 C4 D1 test spl, 0xd1 | |
| 00007FF6CDFCC66B F5 cmc | |
| 00007FF6CDFCC66C 53 push rbx | |
| 00007FF6CDFCC66D 66 81 D3 0E 0E adc bx, 0xe0e | |
| 00007FF6CDFCC672 86 FF xchg bh, bh | |
| 00007FF6CDFCC674 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC677 66 44 0F BB F3 btc bx, r14w | |
| 00007FF6CDFCC67C 49 0F 42 DB cmovb rbx, r11 | |
| 00007FF6CDFCC680 5B pop rbx | |
| 00007FF6CDFCC681 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC684 45 3A D3 cmp r10b, r11b | |
| 00007FF6CDFCC687 66 F7 C2 58 7D test dx, 0x7d58 | |
| 00007FF6CDFCC68C 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC68F FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC691 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC694 66 81 E9 65 1E sub cx, 0x1e65 | |
| 00007FF6CDFCC699 66 41 23 C9 and cx, r9w | |
| 00007FF6CDFCC69D C0 D1 56 rcl cl, 0x56 | |
| 00007FF6CDFCC6A0 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC6A7 48 0F BB C9 btc rcx, rcx | |
| 00007FF6CDFCC6AB 44 0F B3 C9 btr ecx, r9d | |
| 00007FF6CDFCC6AF 32 C3 xor al, bl | |
| 00007FF6CDFCC6B1 D0 C0 rol al, 1 | |
| 00007FF6CDFCC6B3 D3 D9 rcr ecx, cl | |
| 00007FF6CDFCC6B5 34 49 xor al, 0x49 | |
| 00007FF6CDFCC6B7 D0 C8 ror al, 1 | |
| 00007FF6CDFCC6B9 49 0F BF C9 movsx rcx, r9w | |
| 00007FF6CDFCC6BD 0F 93 C1 setae cl | |
| 00007FF6CDFCC6C0 66 40 0F BE CE movsx cx, sil | |
| 00007FF6CDFCC6C5 FE C8 dec al | |
| 00007FF6CDFCC6C7 32 D8 xor bl, al | |
| 00007FF6CDFCC6C9 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC6CE F9 stc | |
| 00007FF6CDFCC6CF 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC6D6 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC6DA 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC6DC 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC6E3 40 80 FC D8 cmp spl, 0xd8 | |
| 00007FF6CDFCC6E7 F8 clc | |
| 00007FF6CDFCC6E8 33 C3 xor eax, ebx | |
| 00007FF6CDFCC6EA 66 81 FE E1 2E cmp si, 0x2ee1 | |
| 00007FF6CDFCC6EF 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC6F4 F7 D0 not eax | |
| 00007FF6CDFCC6F6 F9 stc | |
| 00007FF6CDFCC6F7 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC6FA E9 00 00 00 00 jmp 0x7ff6cdfcc6ff | |
| 00007FF6CDFCC6FF FF C0 inc eax | |
| 00007FF6CDFCC701 F9 stc | |
| 00007FF6CDFCC702 48 3B D4 cmp rdx, rsp | |
| 00007FF6CDFCC705 53 push rbx | |
| 00007FF6CDFCC706 40 80 FE 4D cmp sil, 0x4d | |
| 00007FF6CDFCC70A 41 02 DE add bl, r14b | |
| 00007FF6CDFCC70D 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC710 5B pop rbx | |
| 00007FF6CDFCC711 40 84 E5 test spl, bpl | |
| 00007FF6CDFCC714 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC717 F9 stc | |
| 00007FF6CDFCC718 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC71B E9 00 00 00 00 jmp 0x7ff6cdfcc720 | |
| 00007FF6CDFCC720 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC722 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC725 41 0F B7 C8 movzx ecx, r8w | |
| 00007FF6CDFCC729 0F BB D9 btc ecx, ebx | |
| 00007FF6CDFCC72C 66 0F B6 CA movzx cx, dl | |
| 00007FF6CDFCC730 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC737 0F BA F9 28 btc ecx, 0x28 | |
| 00007FF6CDFCC73B 32 C3 xor al, bl | |
| 00007FF6CDFCC73D C0 DD 35 rcr ch, 0x35 | |
| 00007FF6CDFCC740 66 0F BA F1 24 btr cx, 0x24 | |
| 00007FF6CDFCC745 48 63 CD movsxd rcx, ebp | |
| 00007FF6CDFCC748 D0 C0 rol al, 1 | |
| 00007FF6CDFCC74A 40 02 CF add cl, dil | |
| 00007FF6CDFCC74D 34 49 xor al, 0x49 | |
| 00007FF6CDFCC74F 66 0F BA E1 47 bt cx, 0x47 | |
| 00007FF6CDFCC754 49 0F BF C9 movsx rcx, r9w | |
| 00007FF6CDFCC758 D0 C8 ror al, 1 | |
| 00007FF6CDFCC75A B9 26 75 66 22 mov ecx, 0x22667526 | |
| 00007FF6CDFCC75F E9 02 00 00 00 jmp 0x7ff6cdfcc766 | |
| 00007FF6CDFCC766 FE C8 dec al | |
| 00007FF6CDFCC768 66 C1 E9 FD shr cx, -3 | |
| 00007FF6CDFCC76C 32 D8 xor bl, al | |
| 00007FF6CDFCC76E 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC773 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC77A 3C C5 cmp al, 0xc5 | |
| 00007FF6CDFCC77C 45 84 EE test r13b, r14b | |
| 00007FF6CDFCC77F 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC783 40 1A C4 sbb al, spl | |
| 00007FF6CDFCC786 98 cwde | |
| 00007FF6CDFCC787 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC789 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC790 66 F7 C3 E1 6B test bx, 0x6be1 | |
| 00007FF6CDFCC795 33 C3 xor eax, ebx | |
| 00007FF6CDFCC797 66 45 3B FC cmp r15w, r12w | |
| 00007FF6CDFCC79B 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC7A0 E9 01 00 00 00 jmp 0x7ff6cdfcc7a6 | |
| 00007FF6CDFCC7A6 F7 D0 not eax | |
| 00007FF6CDFCC7A8 F9 stc | |
| 00007FF6CDFCC7A9 F5 cmc | |
| 00007FF6CDFCC7AA C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC7AD E9 00 00 00 00 jmp 0x7ff6cdfcc7b2 | |
| 00007FF6CDFCC7B2 FF C0 inc eax | |
| 00007FF6CDFCC7B4 41 80 FD B5 cmp r13b, 0xb5 | |
| 00007FF6CDFCC7B8 53 push rbx | |
| 00007FF6CDFCC7B9 0F B7 D8 movzx ebx, ax | |
| 00007FF6CDFCC7BC 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC7BF D2 FF sar bh, cl | |
| 00007FF6CDFCC7C1 66 41 0F 41 DD cmovno bx, r13w | |
| 00007FF6CDFCC7C6 48 0F BA E3 68 bt rbx, 0x68 | |
| 00007FF6CDFCC7CB 5B pop rbx | |
| 00007FF6CDFCC7CC 41 3A CC cmp cl, r12b | |
| 00007FF6CDFCC7CF F8 clc | |
| 00007FF6CDFCC7D0 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC7D3 F9 stc | |
| 00007FF6CDFCC7D4 E9 00 00 00 00 jmp 0x7ff6cdfcc7d9 | |
| 00007FF6CDFCC7D9 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC7DC E9 00 00 00 00 jmp 0x7ff6cdfcc7e1 | |
| 00007FF6CDFCC7E1 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC7E3 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC7E6 48 0F BF CD movsx rcx, bp | |
| 00007FF6CDFCC7EA 66 87 C9 xchg cx, cx | |
| 00007FF6CDFCC7ED 66 44 0F BB C9 btc cx, r9w | |
| 00007FF6CDFCC7F2 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC7F9 48 81 E9 00 52 sub rcx, 0x1e6a5200 | |
| 00007FF6CDFCC800 48 C1 F1 12 sal rcx, 0x12 | |
| 00007FF6CDFCC804 32 C3 xor al, bl | |
| 00007FF6CDFCC806 D0 C0 rol al, 1 | |
| 00007FF6CDFCC808 34 49 xor al, 0x49 | |
| 00007FF6CDFCC80A 48 D3 D1 rcl rcx, cl | |
| 00007FF6CDFCC80D D0 C8 ror al, 1 | |
| 00007FF6CDFCC80F 49 63 C9 movsxd rcx, r9d | |
| 00007FF6CDFCC812 66 0F B6 CA movzx cx, dl | |
| 00007FF6CDFCC816 FE C8 dec al | |
| 00007FF6CDFCC818 D2 F5 sal ch, cl | |
| 00007FF6CDFCC81A 32 D8 xor bl, al | |
| 00007FF6CDFCC81C 66 F7 D9 neg cx | |
| 00007FF6CDFCC81F 48 0F BA F1 9B btr rcx, -0x65 | |
| 00007FF6CDFCC824 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC829 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC830 41 F6 C3 7E test r11b, 0x7e | |
| 00007FF6CDFCC834 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC838 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC83A F5 cmc | |
| 00007FF6CDFCC83B F8 clc | |
| 00007FF6CDFCC83C 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC843 33 C3 xor eax, ebx | |
| 00007FF6CDFCC845 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC84A F7 D0 not eax | |
| 00007FF6CDFCC84C F5 cmc | |
| 00007FF6CDFCC84D C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC850 E9 00 00 00 00 jmp 0x7ff6cdfcc855 | |
| 00007FF6CDFCC855 FF C0 inc eax | |
| 00007FF6CDFCC857 F8 clc | |
| 00007FF6CDFCC858 41 3A EF cmp bpl, r15b | |
| 00007FF6CDFCC85B 53 push rbx | |
| 00007FF6CDFCC85C 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC85F 66 0F BD DC bsr bx, sp | |
| 00007FF6CDFCC863 80 C7 B7 add bh, 0xb7 | |
| 00007FF6CDFCC866 66 41 0F BC DF bsf bx, r15w | |
| 00007FF6CDFCC86B 5B pop rbx | |
| 00007FF6CDFCC86C 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC86F E9 04 00 00 00 jmp 0x7ff6cdfcc878 | |
| 00007FF6CDFCC878 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC87B E9 00 00 00 00 jmp 0x7ff6cdfcc880 | |
| 00007FF6CDFCC880 57 push rdi | |
| 00007FF6CDFCC881 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC882 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC885 48 0F BA E1 A5 bt rcx, -0x5b | |
| 00007FF6CDFCC88A 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC891 48 0F B7 CA movzx rcx, dx | |
| 00007FF6CDFCC895 66 C1 E1 F0 shl cx, -0x10 | |
| 00007FF6CDFCC899 32 C3 xor al, bl | |
| 00007FF6CDFCC89B 66 44 0F BB F9 btc cx, r15w | |
| 00007FF6CDFCC8A0 F5 cmc | |
| 00007FF6CDFCC8A1 D0 C0 rol al, 1 | |
| 00007FF6CDFCC8A3 34 49 xor al, 0x49 | |
| 00007FF6CDFCC8A5 66 C1 C1 DB rol cx, -0x25 | |
| 00007FF6CDFCC8A9 66 44 0F AB F1 bts cx, r14w | |
| 00007FF6CDFCC8AE 44 0F BB E9 btc ecx, r13d | |
| 00007FF6CDFCC8B2 D0 C8 ror al, 1 | |
| 00007FF6CDFCC8B4 66 41 0F BE CB movsx cx, r11b | |
| 00007FF6CDFCC8B9 FE C8 dec al | |
| 00007FF6CDFCC8BB 32 D8 xor bl, al | |
| 00007FF6CDFCC8BD 66 41 0F 45 CB cmovne cx, r11w | |
| 00007FF6CDFCC8C2 C0 C5 5F rol ch, 0x5f | |
| 00007FF6CDFCC8C5 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC8CA 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC8D1 F9 stc | |
| 00007FF6CDFCC8D2 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC8D6 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC8D8 41 84 CC test cl, r12b | |
| 00007FF6CDFCC8DB 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC8E2 33 C3 xor eax, ebx | |
| 00007FF6CDFCC8E4 41 80 FB 04 cmp r11b, 4 | |
| 00007FF6CDFCC8E8 45 3A F6 cmp r14b, r14b | |
| 00007FF6CDFCC8EB F5 cmc | |
| 00007FF6CDFCC8EC 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC8F1 F5 cmc | |
| 00007FF6CDFCC8F2 F7 D0 not eax | |
| 00007FF6CDFCC8F4 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC8F7 E9 00 00 00 00 jmp 0x7ff6cdfcc8fc | |
| 00007FF6CDFCC8FC FF C0 inc eax | |
| 00007FF6CDFCC8FE 53 push rbx | |
| 00007FF6CDFCC8FF 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC902 5B pop rbx | |
| 00007FF6CDFCC903 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC906 F5 cmc | |
| 00007FF6CDFCC907 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC90A E9 00 00 00 00 jmp 0x7ff6cdfcc90f | |
| 00007FF6CDFCC90F FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCE24C 48 8B 06 mov rax, qword ptr [rsi] | |
| 00007FF6CDFCE24F E9 00 00 00 00 jmp 0x7ff6cdfce254 | |
| 00007FF6CDFCE254 48 81 C6 08 00 add rsi, 8 | |
| 00007FF6CDFCE25B 48 33 C3 xor rax, rbx | |
| 00007FF6CDFCE25E F9 stc | |
| 00007FF6CDFCE25F E9 00 00 00 00 jmp 0x7ff6cdfce264 | |
| 00007FF6CDFCE264 48 05 01 51 9E add rax, 0x19e5101 | |
| 00007FF6CDFCE26A E9 00 00 00 00 jmp 0x7ff6cdfce26f | |
| 00007FF6CDFCE26F 48 C1 C0 07 rol rax, 7 | |
| 00007FF6CDFCE273 48 2D C0 7F 8C sub rax, 0x1d8c7fc0 | |
| 00007FF6CDFCE279 48 F7 D0 not rax | |
| 00007FF6CDFCE27C 45 84 C4 test r8b, r12b | |
| 00007FF6CDFCE27F E9 00 00 00 00 jmp 0x7ff6cdfce284 | |
| 00007FF6CDFCE284 48 35 71 2D BC xor rax, 0x5abc2d71 | |
| 00007FF6CDFCE28A E9 04 00 00 00 jmp 0x7ff6cdfce293 | |
| 00007FF6CDFCE293 48 33 D8 xor rbx, rax | |
| 00007FF6CDFCE296 E9 03 00 00 00 jmp 0x7ff6cdfce29e | |
| 00007FF6CDFCE29E 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFCE2A5 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFCE2AA 66 44 0F BB C8 btc ax, r9w | |
| 00007FF6CDFCE2AF 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCE2B1 41 F6 C5 34 test r13b, 0x34 | |
| 00007FF6CDFCE2B5 F9 stc | |
| 00007FF6CDFCE2B6 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCE2BD E9 03 00 00 00 jmp 0x7ff6cdfce2c5 | |
| 00007FF6CDFCE2C5 33 C3 xor eax, ebx | |
| 00007FF6CDFCE2C7 F8 clc | |
| 00007FF6CDFCE2C8 F9 stc | |
| 00007FF6CDFCE2C9 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCE2CE F7 D0 not eax | |
| 00007FF6CDFCE2D0 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCE2D3 E9 00 00 00 00 jmp 0x7ff6cdfce2d8 | |
| 00007FF6CDFCE2D8 FF C0 inc eax | |
| 00007FF6CDFCE2DA 53 push rbx | |
| 00007FF6CDFCE2DB 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCE2DE 40 1A DD sbb bl, bpl | |
| 00007FF6CDFCE2E1 66 C1 D3 DB rcl bx, -0x25 | |
| 00007FF6CDFCE2E5 48 81 C3 FC 7A add rbx, 0x6167afc | |
| 00007FF6CDFCE2EC 5B pop rbx | |
| 00007FF6CDFCE2ED 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCE2F0 45 84 CA test r9b, r10b | |
| 00007FF6CDFCE2F3 41 80 F8 99 cmp r8b, 0x99 | |
| 00007FF6CDFCE2F7 F9 stc | |
| 00007FF6CDFCE2F8 48 03 F8 add rdi, rax | |
| 00007FF6CDFCE2FB E9 00 00 00 00 jmp 0x7ff6cdfce300 | |
| 00007FF6CDFCE300 E9 12 8B FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCAABF 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCAAC2 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCAAC9 32 C3 xor al, bl | |
| 00007FF6CDFCAACB F9 stc | |
| 00007FF6CDFCAACC F8 clc | |
| 00007FF6CDFCAACD D0 C0 rol al, 1 | |
| 00007FF6CDFCAACF 66 45 85 C4 test r8w, r12w | |
| 00007FF6CDFCAAD3 E9 00 00 00 00 jmp 0x7ff6cdfcaad8 | |
| 00007FF6CDFCAAD8 34 49 xor al, 0x49 | |
| 00007FF6CDFCAADA F5 cmc | |
| 00007FF6CDFCAADB D0 C8 ror al, 1 | |
| 00007FF6CDFCAADD E9 00 00 00 00 jmp 0x7ff6cdfcaae2 | |
| 00007FF6CDFCAAE2 FE C8 dec al | |
| 00007FF6CDFCAAE4 E9 00 00 00 00 jmp 0x7ff6cdfcaae9 | |
| 00007FF6CDFCAAE9 32 D8 xor bl, al | |
| 00007FF6CDFCAAEB E9 07 00 00 00 jmp 0x7ff6cdfcaaf7 | |
| 00007FF6CDFCAAF7 48 8B 04 04 mov rax, qword ptr [rsp + rax] | |
| 00007FF6CDFCAAFB E9 01 00 00 00 jmp 0x7ff6cdfcab01 | |
| 00007FF6CDFCAB01 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFCAB08 F5 cmc | |
| 00007FF6CDFCAB09 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFCAB0E 41 1A C1 sbb al, r9b | |
| 00007FF6CDFCAB11 66 F7 D0 not ax | |
| 00007FF6CDFCAB14 C0 D0 D9 rcl al, 0xd9 | |
| 00007FF6CDFCAB17 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCAB19 66 44 85 CD test r9w, bp | |
| 00007FF6CDFCAB1D 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCAB24 33 C3 xor eax, ebx | |
| 00007FF6CDFCAB26 40 3A DD cmp bl, bpl | |
| 00007FF6CDFCAB29 F9 stc | |
| 00007FF6CDFCAB2A 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCAB2F F7 D0 not eax | |
| 00007FF6CDFCAB31 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCAB34 E9 00 00 00 00 jmp 0x7ff6cdfcab39 | |
| 00007FF6CDFCAB39 FF C0 inc eax | |
| 00007FF6CDFCAB3B 41 81 F8 C9 46 cmp r8d, 0x5c5546c9 | |
| 00007FF6CDFCAB42 53 push rbx | |
| 00007FF6CDFCAB43 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCAB46 66 41 0F BE DC movsx bx, r12b | |
| 00007FF6CDFCAB4B D3 D3 rcl ebx, cl | |
| 00007FF6CDFCAB4D 5B pop rbx | |
| 00007FF6CDFCAB4E 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCAB51 F8 clc | |
| 00007FF6CDFCAB52 E9 00 00 00 00 jmp 0x7ff6cdfcab57 | |
| 00007FF6CDFCAB57 48 03 F8 add rdi, rax | |
| 00007FF6CDFCAB5A E9 00 00 00 00 jmp 0x7ff6cdfcab5f | |
| 00007FF6CDFCAB5F E9 B3 C2 FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFD5F47 48 8B 44 25 00 mov rax, qword ptr [rbp] | |
| 00007FF6CDFD5F4C 66 44 0F B3 F1 btr cx, r14w | |
| 00007FF6CDFD5F51 48 8B 4C 25 08 mov rcx, qword ptr [rbp + 8] | |
| 00007FF6CDFD5F56 41 3B D6 cmp edx, r14d | |
| 00007FF6CDFD5F59 48 03 C1 add rax, rcx | |
| 00007FF6CDFD5F5C E9 00 00 00 00 jmp 0x7ff6cdfd5f61 | |
| 00007FF6CDFD5F61 48 89 44 25 08 mov qword ptr [rbp + 8], rax | |
| 00007FF6CDFD5F66 C6 C4 E7 mov ah, 0xe7 | |
| 00007FF6CDFD5F69 41 0F BF C3 movsx eax, r11w | |
| 00007FF6CDFD5F6D 9C pushfq | |
| 00007FF6CDFD5F6E D2 D0 rcl al, cl | |
| 00007FF6CDFD5F70 66 40 0F B6 C7 movzx ax, dil | |
| 00007FF6CDFD5F75 8F 44 25 00 pop qword ptr [rbp] | |
| 00007FF6CDFD5F79 48 0F A3 F8 bt rax, rdi | |
| 00007FF6CDFD5F7D 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFD5F7F 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFD5F86 66 44 85 EF test r13w, di | |
| 00007FF6CDFD5F8A 48 3B DE cmp rbx, rsi | |
| 00007FF6CDFD5F8D 33 C3 xor eax, ebx | |
| 00007FF6CDFD5F8F A9 7C 66 DF 35 test eax, 0x35df667c | |
| 00007FF6CDFD5F94 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFD5F99 F9 stc | |
| 00007FF6CDFD5F9A E9 00 00 00 00 jmp 0x7ff6cdfd5f9f | |
| 00007FF6CDFD5F9F F7 D0 not eax | |
| 00007FF6CDFD5FA1 F5 cmc | |
| 00007FF6CDFD5FA2 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFD5FA5 E9 00 00 00 00 jmp 0x7ff6cdfd5faa | |
| 00007FF6CDFD5FAA FF C0 inc eax | |
| 00007FF6CDFD5FAC F6 C1 E9 test cl, 0xe9 | |
| 00007FF6CDFD5FAF F5 cmc | |
| 00007FF6CDFD5FB0 53 push rbx | |
| 00007FF6CDFD5FB1 66 0F BA F3 F3 btr bx, -0xd | |
| 00007FF6CDFD5FB6 B3 D1 mov bl, 0xd1 | |
| 00007FF6CDFD5FB8 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFD5FBB FE CB dec bl | |
| 00007FF6CDFD5FBD 5B pop rbx | |
| 00007FF6CDFD5FBE 41 80 FC 99 cmp r12b, 0x99 | |
| 00007FF6CDFD5FC2 45 84 F5 test r14b, r13b | |
| 00007FF6CDFD5FC5 A8 C8 test al, 0xc8 | |
| 00007FF6CDFD5FC7 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFD5FCA 44 85 F0 test r14d, eax | |
| 00007FF6CDFD5FCD 48 03 F8 add rdi, rax | |
| 00007FF6CDFD5FD0 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC911 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC914 C0 C5 E6 rol ch, 0xe6 | |
| 00007FF6CDFCC917 66 41 0F 4C CE cmovl cx, r14w | |
| 00007FF6CDFCC91C 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC923 48 C1 D9 DA rcr rcx, -0x26 | |
| 00007FF6CDFCC927 66 81 F9 1E 20 cmp cx, 0x201e | |
| 00007FF6CDFCC92C 66 41 0F BE CB movsx cx, r11b | |
| 00007FF6CDFCC931 32 C3 xor al, bl | |
| 00007FF6CDFCC933 0F 9B C1 setnp cl | |
| 00007FF6CDFCC936 D0 C0 rol al, 1 | |
| 00007FF6CDFCC938 34 49 xor al, 0x49 | |
| 00007FF6CDFCC93A 40 8A CD mov cl, bpl | |
| 00007FF6CDFCC93D F8 clc | |
| 00007FF6CDFCC93E 66 0F AB C1 bts cx, ax | |
| 00007FF6CDFCC942 D0 C8 ror al, 1 | |
| 00007FF6CDFCC944 FE C8 dec al | |
| 00007FF6CDFCC946 66 D3 F9 sar cx, cl | |
| 00007FF6CDFCC949 48 81 E1 18 7B and rcx, 0x76f07b18 | |
| 00007FF6CDFCC950 44 3A CA cmp r9b, dl | |
| 00007FF6CDFCC953 32 D8 xor bl, al | |
| 00007FF6CDFCC955 85 FF test edi, edi | |
| 00007FF6CDFCC957 C0 D1 9B rcl cl, 0x9b | |
| 00007FF6CDFCC95A 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC95F 41 80 FA 61 cmp r10b, 0x61 | |
| 00007FF6CDFCC963 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC96A 41 80 FF 24 cmp r15b, 0x24 | |
| 00007FF6CDFCC96E 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC972 0F BF C1 movsx eax, cx | |
| 00007FF6CDFCC975 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC977 40 3A E8 cmp bpl, al | |
| 00007FF6CDFCC97A 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC981 33 C3 xor eax, ebx | |
| 00007FF6CDFCC983 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC988 F9 stc | |
| 00007FF6CDFCC989 F8 clc | |
| 00007FF6CDFCC98A F7 D0 not eax | |
| 00007FF6CDFCC98C C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC98F FF C0 inc eax | |
| 00007FF6CDFCC991 44 85 F2 test r14d, edx | |
| 00007FF6CDFCC994 53 push rbx | |
| 00007FF6CDFCC995 49 0F B7 DB movzx rbx, r11w | |
| 00007FF6CDFCC999 66 41 81 F8 8B cmp r8w, 0x4c8b | |
| 00007FF6CDFCC99F 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC9A2 66 41 0F BD DE bsr bx, r14w | |
| 00007FF6CDFCC9A7 C1 CB 67 ror ebx, 0x67 | |
| 00007FF6CDFCC9AA 5B pop rbx | |
| 00007FF6CDFCC9AB 66 81 FB 28 14 cmp bx, 0x1428 | |
| 00007FF6CDFCC9B0 F9 stc | |
| 00007FF6CDFCC9B1 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC9B4 F8 clc | |
| 00007FF6CDFCC9B5 66 44 85 C9 test r9w, cx | |
| 00007FF6CDFCC9B9 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC9BC E9 00 00 00 00 jmp 0x7ff6cdfcc9c1 | |
| 00007FF6CDFCC9C1 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC9C3 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC9C6 D2 D9 rcr cl, cl | |
| 00007FF6CDFCC9C8 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC9CF 49 0F BF CF movsx rcx, r15w | |
| 00007FF6CDFCC9D3 32 C3 xor al, bl | |
| 00007FF6CDFCC9D5 C0 CD E6 ror ch, 0xe6 | |
| 00007FF6CDFCC9D8 41 0F 4E CB cmovle ecx, r11d | |
| 00007FF6CDFCC9DC D0 C0 rol al, 1 | |
| 00007FF6CDFCC9DE E9 05 00 00 00 jmp 0x7ff6cdfcc9e8 | |
| 00007FF6CDFCC9E8 34 49 xor al, 0x49 | |
| 00007FF6CDFCC9EA 48 0F 4C CC cmovl rcx, rsp | |
| 00007FF6CDFCC9EE D0 C8 ror al, 1 | |
| 00007FF6CDFCC9F0 FE C8 dec al | |
| 00007FF6CDFCC9F2 49 0F BD CB bsr rcx, r11 | |
| 00007FF6CDFCC9F6 32 D8 xor bl, al | |
| 00007FF6CDFCC9F8 0F B7 CA movzx ecx, dx | |
| 00007FF6CDFCC9FB 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCCA00 F9 stc | |
| 00007FF6CDFCCA01 66 85 FC test di, sp | |
| 00007FF6CDFCCA04 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCCA0B F9 stc | |
| 00007FF6CDFCCA0C 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCCA10 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCCA12 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCCA19 E9 00 00 00 00 jmp 0x7ff6cdfcca1e | |
| 00007FF6CDFCCA1E 33 C3 xor eax, ebx | |
| 00007FF6CDFCCA20 41 F6 C7 87 test r15b, 0x87 | |
| 00007FF6CDFCCA24 84 C4 test al, ah | |
| 00007FF6CDFCCA26 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCCA2B F8 clc | |
| 00007FF6CDFCCA2C F7 D0 not eax | |
| 00007FF6CDFCCA2E E9 00 00 00 00 jmp 0x7ff6cdfcca33 | |
| 00007FF6CDFCCA33 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCCA36 E9 00 00 00 00 jmp 0x7ff6cdfcca3b | |
| 00007FF6CDFCCA3B FF C0 inc eax | |
| 00007FF6CDFCCA3D F9 stc | |
| 00007FF6CDFCCA3E E9 00 00 00 00 jmp 0x7ff6cdfcca43 | |
| 00007FF6CDFCCA43 53 push rbx | |
| 00007FF6CDFCCA44 4C 0F BB D3 btc rbx, r10 | |
| 00007FF6CDFCCA48 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCCA4B F9 stc | |
| 00007FF6CDFCCA4C 0F 90 C3 seto bl | |
| 00007FF6CDFCCA4F 5B pop rbx | |
| 00007FF6CDFCCA50 F9 stc | |
| 00007FF6CDFCCA51 E9 00 00 00 00 jmp 0x7ff6cdfcca56 | |
| 00007FF6CDFCCA56 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCCA59 66 41 81 FA 19 cmp r10w, 0x5c19 | |
| 00007FF6CDFCCA5F 48 03 F8 add rdi, rax | |
| 00007FF6CDFCCA62 E9 00 00 00 00 jmp 0x7ff6cdfcca67 | |
| 00007FF6CDFCCA67 57 push rdi | |
| 00007FF6CDFCCA68 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFD3F30 48 8B C5 mov rax, rbp | |
| 00007FF6CDFD3F33 F8 clc | |
| 00007FF6CDFD3F34 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFD3F3B 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFD3F40 66 44 0F B3 F8 btr ax, r15w | |
| 00007FF6CDFD3F45 D2 EC shr ah, cl | |
| 00007FF6CDFD3F47 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFD3F49 E9 00 00 00 00 jmp 0x7ff6cdfd3f4e | |
| 00007FF6CDFD3F4E 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFD3F55 F5 cmc | |
| 00007FF6CDFD3F56 44 85 D4 test r10d, esp | |
| 00007FF6CDFD3F59 33 C3 xor eax, ebx | |
| 00007FF6CDFD3F5B 84 D9 test bl, cl | |
| 00007FF6CDFD3F5D 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFD3F62 F9 stc | |
| 00007FF6CDFD3F63 E9 00 00 00 00 jmp 0x7ff6cdfd3f68 | |
| 00007FF6CDFD3F68 F7 D0 not eax | |
| 00007FF6CDFD3F6A C1 C8 02 ror eax, 2 | |
| 00007FF6CDFD3F6D FF C0 inc eax | |
| 00007FF6CDFD3F6F 53 push rbx | |
| 00007FF6CDFD3F70 D2 DF rcr bh, cl | |
| 00007FF6CDFD3F72 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFD3F75 80 CF 37 or bh, 0x37 | |
| 00007FF6CDFD3F78 41 32 D8 xor bl, r8b | |
| 00007FF6CDFD3F7B 41 02 DF add bl, r15b | |
| 00007FF6CDFD3F7E 5B pop rbx | |
| 00007FF6CDFD3F7F 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFD3F82 E9 00 00 00 00 jmp 0x7ff6cdfd3f87 | |
| 00007FF6CDFD3F87 48 03 F8 add rdi, rax | |
| 00007FF6CDFD3F8A E9 00 00 00 00 jmp 0x7ff6cdfd3f8f | |
| 00007FF6CDFD3F8F E9 83 2E FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCCA69 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCCA6C 80 DD C0 sbb ch, 0xc0 | |
| 00007FF6CDFCCA6F 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCCA76 48 C1 E9 6E shr rcx, 0x6e | |
| 00007FF6CDFCCA7A 4C 0F A3 F1 bt rcx, r14 | |
| 00007FF6CDFCCA7E 32 C3 xor al, bl | |
| 00007FF6CDFCCA80 D0 C0 rol al, 1 | |
| 00007FF6CDFCCA82 34 49 xor al, 0x49 | |
| 00007FF6CDFCCA84 86 C9 xchg cl, cl | |
| 00007FF6CDFCCA86 D0 C8 ror al, 1 | |
| 00007FF6CDFCCA88 FE C1 inc cl | |
| 00007FF6CDFCCA8A 48 63 CA movsxd rcx, edx | |
| 00007FF6CDFCCA8D 49 0F BF CF movsx rcx, r15w | |
| 00007FF6CDFCCA91 FE C8 dec al | |
| 00007FF6CDFCCA93 66 44 0F A4 E9 shld cx, r13w, 0x5f | |
| 00007FF6CDFCCA99 32 D8 xor bl, al | |
| 00007FF6CDFCCA9B 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCCAA0 66 41 81 FF A9 cmp r15w, 0x63a9 | |
| 00007FF6CDFCCAA6 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCCAAD 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCCAB1 66 41 0F B6 C6 movzx ax, r14b | |
| 00007FF6CDFCCAB6 40 84 D4 test dl, spl | |
| 00007FF6CDFCCAB9 C1 C8 93 ror eax, -0x6d | |
| 00007FF6CDFCCABC 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCCABE 41 F6 C2 2E test r10b, 0x2e | |
| 00007FF6CDFCCAC2 44 3A EC cmp r13b, spl | |
| 00007FF6CDFCCAC5 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCCACC 66 41 3B E0 cmp sp, r8w | |
| 00007FF6CDFCCAD0 41 80 FB 72 cmp r11b, 0x72 | |
| 00007FF6CDFCCAD4 48 85 E7 test rsp, rdi | |
| 00007FF6CDFCCAD7 33 C3 xor eax, ebx | |
| 00007FF6CDFCCAD9 F9 stc | |
| 00007FF6CDFCCADA 45 3A D9 cmp r11b, r9b | |
| 00007FF6CDFCCADD F8 clc | |
| 00007FF6CDFCCADE 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCCAE3 F7 D0 not eax | |
| 00007FF6CDFCCAE5 E9 00 00 00 00 jmp 0x7ff6cdfccaea | |
| 00007FF6CDFCCAEA C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCCAED FF C0 inc eax | |
| 00007FF6CDFCCAEF F8 clc | |
| 00007FF6CDFCCAF0 41 3A FD cmp dil, r13b | |
| 00007FF6CDFCCAF3 E9 00 00 00 00 jmp 0x7ff6cdfccaf8 | |
| 00007FF6CDFCCAF8 53 push rbx | |
| 00007FF6CDFCCAF9 66 C1 CB E9 ror bx, -0x17 | |
| 00007FF6CDFCCAFD 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCCB00 48 81 C3 9A 50 add rbx, 0x1501509a | |
| 00007FF6CDFCCB07 5B pop rbx | |
| 00007FF6CDFCCB08 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCCB0B 48 03 F8 add rdi, rax | |
| 00007FF6CDFCCB0E FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCAB64 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCAB67 F5 cmc | |
| 00007FF6CDFCAB68 40 F6 C6 3D test sil, 0x3d | |
| 00007FF6CDFCAB6C 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCAB73 80 FF 5A cmp bh, 0x5a | |
| 00007FF6CDFCAB76 49 F7 C4 2D 71 test r12, 0x4d01712d | |
| 00007FF6CDFCAB7D 32 C3 xor al, bl | |
| 00007FF6CDFCAB7F F5 cmc | |
| 00007FF6CDFCAB80 D0 C0 rol al, 1 | |
| 00007FF6CDFCAB82 41 80 FA B8 cmp r10b, 0xb8 | |
| 00007FF6CDFCAB86 41 F6 C6 76 test r14b, 0x76 | |
| 00007FF6CDFCAB8A 34 49 xor al, 0x49 | |
| 00007FF6CDFCAB8C E9 01 00 00 00 jmp 0x7ff6cdfcab92 | |
| 00007FF6CDFCAB92 D0 C8 ror al, 1 | |
| 00007FF6CDFCAB94 E9 00 00 00 00 jmp 0x7ff6cdfcab99 | |
| 00007FF6CDFCAB99 FE C8 dec al | |
| 00007FF6CDFCAB9B 32 D8 xor bl, al | |
| 00007FF6CDFCAB9D 66 41 85 ED test bp, r13w | |
| 00007FF6CDFCABA1 E9 01 00 00 00 jmp 0x7ff6cdfcaba7 | |
| 00007FF6CDFCABA7 48 8B 04 04 mov rax, qword ptr [rsp + rax] | |
| 00007FF6CDFCABAB 41 F6 C2 5E test r10b, 0x5e | |
| 00007FF6CDFCABAF 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFCABB6 44 3A FD cmp r15b, bpl | |
| 00007FF6CDFCABB9 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFCABBE 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCABC0 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCABC7 33 C3 xor eax, ebx | |
| 00007FF6CDFCABC9 41 80 FF 8A cmp r15b, 0x8a | |
| 00007FF6CDFCABCD F9 stc | |
| 00007FF6CDFCABCE 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCABD3 F9 stc | |
| 00007FF6CDFCABD4 F7 D0 not eax | |
| 00007FF6CDFCABD6 F8 clc | |
| 00007FF6CDFCABD7 F5 cmc | |
| 00007FF6CDFCABD8 E9 00 00 00 00 jmp 0x7ff6cdfcabdd | |
| 00007FF6CDFCABDD C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCABE0 E9 00 00 00 00 jmp 0x7ff6cdfcabe5 | |
| 00007FF6CDFCABE5 FF C0 inc eax | |
| 00007FF6CDFCABE7 53 push rbx | |
| 00007FF6CDFCABE8 F9 stc | |
| 00007FF6CDFCABE9 41 23 DA and ebx, r10d | |
| 00007FF6CDFCABEC 66 41 0F BE D9 movsx bx, r9b | |
| 00007FF6CDFCABF1 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCABF4 5B pop rbx | |
| 00007FF6CDFCABF5 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCABF8 48 03 F8 add rdi, rax | |
| 00007FF6CDFCABFB E9 00 00 00 00 jmp 0x7ff6cdfcac00 | |
| 00007FF6CDFCAC00 E9 12 C2 FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFC72E0 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFC72E3 48 0F A4 C1 ED shld rcx, rax, -0x13 | |
| 00007FF6CDFC72E8 85 D9 test ebx, ecx | |
| 00007FF6CDFC72EA 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFC72F1 66 87 C9 xchg cx, cx | |
| 00007FF6CDFC72F4 66 C1 F1 42 sal cx, 0x42 | |
| 00007FF6CDFC72F8 32 C3 xor al, bl | |
| 00007FF6CDFC72FA D0 C0 rol al, 1 | |
| 00007FF6CDFC72FC 34 49 xor al, 0x49 | |
| 00007FF6CDFC72FE 66 0F BA F9 45 btc cx, 0x45 | |
| 00007FF6CDFC7303 66 0F BA F1 95 btr cx, -0x6b | |
| 00007FF6CDFC7308 D0 C8 ror al, 1 | |
| 00007FF6CDFC730A FE C8 dec al | |
| 00007FF6CDFC730C 32 D8 xor bl, al | |
| 00007FF6CDFC730E 41 0F B7 CA movzx ecx, r10w | |
| 00007FF6CDFC7312 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFC7317 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFC731E F5 cmc | |
| 00007FF6CDFC731F 84 FA test bh, dl | |
| 00007FF6CDFC7321 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFC7325 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFC7327 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFC732E F8 clc | |
| 00007FF6CDFC732F F9 stc | |
| 00007FF6CDFC7330 33 C3 xor eax, ebx | |
| 00007FF6CDFC7332 41 3A F4 cmp sil, r12b | |
| 00007FF6CDFC7335 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFC733A F8 clc | |
| 00007FF6CDFC733B F7 D0 not eax | |
| 00007FF6CDFC733D E9 01 00 00 00 jmp 0x7ff6cdfc7343 | |
| 00007FF6CDFC7343 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFC7346 E9 00 00 00 00 jmp 0x7ff6cdfc734b | |
| 00007FF6CDFC734B FF C0 inc eax | |
| 00007FF6CDFC734D 53 push rbx | |
| 00007FF6CDFC734E 66 0F C1 DB xadd bx, bx | |
| 00007FF6CDFC7352 86 FB xchg bl, bh | |
| 00007FF6CDFC7354 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFC7357 5B pop rbx | |
| 00007FF6CDFC7358 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFC735B 41 F6 C1 EE test r9b, 0xee | |
| 00007FF6CDFC735F 48 03 F8 add rdi, rax | |
| 00007FF6CDFC7362 E9 00 00 00 00 jmp 0x7ff6cdfc7367 | |
| 00007FF6CDFC7367 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCAC05 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCAC08 F6 C6 7F test dh, 0x7f | |
| 00007FF6CDFCAC0B F8 clc | |
| 00007FF6CDFCAC0C E9 00 00 00 00 jmp 0x7ff6cdfcac11 | |
| 00007FF6CDFCAC11 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCAC18 32 C3 xor al, bl | |
| 00007FF6CDFCAC1A F8 clc | |
| 00007FF6CDFCAC1B F9 stc | |
| 00007FF6CDFCAC1C D0 C0 rol al, 1 | |
| 00007FF6CDFCAC1E 66 44 3B FD cmp r15w, bp | |
| 00007FF6CDFCAC22 F9 stc | |
| 00007FF6CDFCAC23 34 49 xor al, 0x49 | |
| 00007FF6CDFCAC25 F9 stc | |
| 00007FF6CDFCAC26 E9 00 00 00 00 jmp 0x7ff6cdfcac2b | |
| 00007FF6CDFCAC2B D0 C8 ror al, 1 | |
| 00007FF6CDFCAC2D FE C8 dec al | |
| 00007FF6CDFCAC2F F5 cmc | |
| 00007FF6CDFCAC30 32 D8 xor bl, al | |
| 00007FF6CDFCAC32 F9 stc | |
| 00007FF6CDFCAC33 48 8B 04 04 mov rax, qword ptr [rsp + rax] | |
| 00007FF6CDFCAC37 41 81 FB 54 48 cmp r11d, 0x7b4854 | |
| 00007FF6CDFCAC3E F8 clc | |
| 00007FF6CDFCAC3F F5 cmc | |
| 00007FF6CDFCAC40 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFCAC47 F5 cmc | |
| 00007FF6CDFCAC48 F8 clc | |
| 00007FF6CDFCAC49 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFCAC4E 66 C1 F0 88 sal ax, -0x78 | |
| 00007FF6CDFCAC52 48 0F B7 C2 movzx rax, dx | |
| 00007FF6CDFCAC56 66 0F AC F8 29 shrd ax, di, 0x29 | |
| 00007FF6CDFCAC5B 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCAC5D 49 81 FF 84 05 cmp r15, 0x413e0584 | |
| 00007FF6CDFCAC64 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCAC6B E9 04 00 00 00 jmp 0x7ff6cdfcac74 | |
| 00007FF6CDFCAC74 33 C3 xor eax, ebx | |
| 00007FF6CDFCAC76 41 F6 C6 EF test r14b, 0xef | |
| 00007FF6CDFCAC7A F8 clc | |
| 00007FF6CDFCAC7B 3C 91 cmp al, 0x91 | |
| 00007FF6CDFCAC7D 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCAC82 F7 D0 not eax | |
| 00007FF6CDFCAC84 F5 cmc | |
| 00007FF6CDFCAC85 F8 clc | |
| 00007FF6CDFCAC86 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCAC89 FF C0 inc eax | |
| 00007FF6CDFCAC8B 44 84 F2 test r14b, dl | |
| 00007FF6CDFCAC8E F9 stc | |
| 00007FF6CDFCAC8F 53 push rbx | |
| 00007FF6CDFCAC90 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCAC93 FE CF dec bh | |
| 00007FF6CDFCAC95 87 DB xchg ebx, ebx | |
| 00007FF6CDFCAC97 66 81 EB 0C 78 sub bx, 0x780c | |
| 00007FF6CDFCAC9C 5B pop rbx | |
| 00007FF6CDFCAC9D 66 45 3B DE cmp r11w, r14w | |
| 00007FF6CDFCACA1 F8 clc | |
| 00007FF6CDFCACA2 F5 cmc | |
| 00007FF6CDFCACA3 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCACA6 48 03 F8 add rdi, rax | |
| 00007FF6CDFCACA9 E9 00 00 00 00 jmp 0x7ff6cdfcacae | |
| 00007FF6CDFCACAE E9 64 C1 FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC491 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC494 41 02 CD add cl, r13b | |
| 00007FF6CDFCC497 0A EC or ch, ah | |
| 00007FF6CDFCC499 F9 stc | |
| 00007FF6CDFCC49A 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC4A1 D2 E5 shl ch, cl | |
| 00007FF6CDFCC4A3 4D 3B CB cmp r9, r11 | |
| 00007FF6CDFCC4A6 32 C3 xor al, bl | |
| 00007FF6CDFCC4A8 D0 C0 rol al, 1 | |
| 00007FF6CDFCC4AA 48 13 CF adc rcx, rdi | |
| 00007FF6CDFCC4AD D2 F1 sal cl, cl | |
| 00007FF6CDFCC4AF 34 49 xor al, 0x49 | |
| 00007FF6CDFCC4B1 4C 0F BB E1 btc rcx, r12 | |
| 00007FF6CDFCC4B5 D0 C8 ror al, 1 | |
| 00007FF6CDFCC4B7 66 B9 FC 1D mov cx, 0x1dfc | |
| 00007FF6CDFCC4BB 41 0F BF CE movsx ecx, r14w | |
| 00007FF6CDFCC4BF FE C8 dec al | |
| 00007FF6CDFCC4C1 66 C1 F9 3E sar cx, 0x3e | |
| 00007FF6CDFCC4C5 66 F7 D1 not cx | |
| 00007FF6CDFCC4C8 32 D8 xor bl, al | |
| 00007FF6CDFCC4CA 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC4CF F8 clc | |
| 00007FF6CDFCC4D0 66 85 D4 test dx, sp | |
| 00007FF6CDFCC4D3 66 41 81 F9 09 cmp r9w, 0xf09 | |
| 00007FF6CDFCC4D9 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC4E0 F5 cmc | |
| 00007FF6CDFCC4E1 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC4E5 40 32 C4 xor al, spl | |
| 00007FF6CDFCC4E8 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC4EA E9 03 00 00 00 jmp 0x7ff6cdfcc4f2 | |
| 00007FF6CDFCC4F2 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC4F9 40 84 F4 test sil, spl | |
| 00007FF6CDFCC4FC E9 00 00 00 00 jmp 0x7ff6cdfcc501 | |
| 00007FF6CDFCC501 33 C3 xor eax, ebx | |
| 00007FF6CDFCC503 F9 stc | |
| 00007FF6CDFCC504 F5 cmc | |
| 00007FF6CDFCC505 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC50A F5 cmc | |
| 00007FF6CDFCC50B F7 D0 not eax | |
| 00007FF6CDFCC50D C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC510 FF C0 inc eax | |
| 00007FF6CDFCC512 F9 stc | |
| 00007FF6CDFCC513 53 push rbx | |
| 00007FF6CDFCC514 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC517 5B pop rbx | |
| 00007FF6CDFCC518 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC51B 48 81 F9 7D 6C cmp rcx, 0x47dc6c7d | |
| 00007FF6CDFCC522 49 F7 C0 D7 6F test r8, 0x28a76fd7 | |
| 00007FF6CDFCC529 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC52C E9 00 00 00 00 jmp 0x7ff6cdfcc531 | |
| 00007FF6CDFCC531 57 push rdi | |
| 00007FF6CDFCC532 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCACB3 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCACB6 E9 04 00 00 00 jmp 0x7ff6cdfcacbf | |
| 00007FF6CDFCACBF 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCACC6 E9 00 00 00 00 jmp 0x7ff6cdfcaccb | |
| 00007FF6CDFCACCB 32 C3 xor al, bl | |
| 00007FF6CDFCACCD F9 stc | |
| 00007FF6CDFCACCE D0 C0 rol al, 1 | |
| 00007FF6CDFCACD0 40 F6 C6 21 test sil, 0x21 | |
| 00007FF6CDFCACD4 34 49 xor al, 0x49 | |
| 00007FF6CDFCACD6 F8 clc | |
| 00007FF6CDFCACD7 E9 01 00 00 00 jmp 0x7ff6cdfcacdd | |
| 00007FF6CDFCACDD D0 C8 ror al, 1 | |
| 00007FF6CDFCACDF E9 00 00 00 00 jmp 0x7ff6cdfcace4 | |
| 00007FF6CDFCACE4 FE C8 dec al | |
| 00007FF6CDFCACE6 32 D8 xor bl, al | |
| 00007FF6CDFCACE8 F5 cmc | |
| 00007FF6CDFCACE9 48 8B 04 04 mov rax, qword ptr [rsp + rax] | |
| 00007FF6CDFCACED 45 3B D9 cmp r11d, r9d | |
| 00007FF6CDFCACF0 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFCACF7 44 84 C4 test r8b, spl | |
| 00007FF6CDFCACFA F9 stc | |
| 00007FF6CDFCACFB 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFCAD00 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCAD02 F8 clc | |
| 00007FF6CDFCAD03 41 80 F8 07 cmp r8b, 7 | |
| 00007FF6CDFCAD07 40 84 FF test dil, dil | |
| 00007FF6CDFCAD0A 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCAD11 66 41 81 FB 9D cmp r11w, 0x3b9d | |
| 00007FF6CDFCAD17 F8 clc | |
| 00007FF6CDFCAD18 33 C3 xor eax, ebx | |
| 00007FF6CDFCAD1A F9 stc | |
| 00007FF6CDFCAD1B 49 81 F8 21 68 cmp r8, 0x780f6821 | |
| 00007FF6CDFCAD22 44 3A FD cmp r15b, bpl | |
| 00007FF6CDFCAD25 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCAD2A F7 D0 not eax | |
| 00007FF6CDFCAD2C F5 cmc | |
| 00007FF6CDFCAD2D F9 stc | |
| 00007FF6CDFCAD2E C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCAD31 E9 00 00 00 00 jmp 0x7ff6cdfcad36 | |
| 00007FF6CDFCAD36 FF C0 inc eax | |
| 00007FF6CDFCAD38 53 push rbx | |
| 00007FF6CDFCAD39 C0 EB 99 shr bl, 0x99 | |
| 00007FF6CDFCAD3C 48 C1 F3 62 sal rbx, 0x62 | |
| 00007FF6CDFCAD40 FE C7 inc bh | |
| 00007FF6CDFCAD42 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCAD45 5B pop rbx | |
| 00007FF6CDFCAD46 F9 stc | |
| 00007FF6CDFCAD47 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCAD4A 44 3A F7 cmp r14b, dil | |
| 00007FF6CDFCAD4D 48 03 F8 add rdi, rax | |
| 00007FF6CDFCAD50 E9 00 00 00 00 jmp 0x7ff6cdfcad55 | |
| 00007FF6CDFCAD55 E9 BD C0 FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC533 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC536 49 0F 49 CD cmovns rcx, r13 | |
| 00007FF6CDFCC53A 48 0F AB E1 bts rcx, rsp | |
| 00007FF6CDFCC53E 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC545 66 03 CC add cx, sp | |
| 00007FF6CDFCC548 FE C5 inc ch | |
| 00007FF6CDFCC54A 48 0F B7 CA movzx rcx, dx | |
| 00007FF6CDFCC54E 32 C3 xor al, bl | |
| 00007FF6CDFCC550 66 0F BA F9 1E btc cx, 0x1e | |
| 00007FF6CDFCC555 E9 00 00 00 00 jmp 0x7ff6cdfcc55a | |
| 00007FF6CDFCC55A D0 C0 rol al, 1 | |
| 00007FF6CDFCC55C 34 49 xor al, 0x49 | |
| 00007FF6CDFCC55E D0 C8 ror al, 1 | |
| 00007FF6CDFCC560 48 FF C1 inc rcx | |
| 00007FF6CDFCC563 66 0F 47 CB cmova cx, bx | |
| 00007FF6CDFCC567 C6 C5 9F mov ch, 0x9f | |
| 00007FF6CDFCC56A FE C8 dec al | |
| 00007FF6CDFCC56C 80 E1 83 and cl, 0x83 | |
| 00007FF6CDFCC56F 32 D8 xor bl, al | |
| 00007FF6CDFCC571 48 63 CF movsxd rcx, edi | |
| 00007FF6CDFCC574 66 41 33 CE xor cx, r14w | |
| 00007FF6CDFCC578 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC57D 41 85 C8 test ecx, r8d | |
| 00007FF6CDFCC580 F5 cmc | |
| 00007FF6CDFCC581 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC588 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC58C 41 84 D7 test dl, r15b | |
| 00007FF6CDFCC58F 66 98 cbw | |
| 00007FF6CDFCC591 49 0F B7 C1 movzx rax, r9w | |
| 00007FF6CDFCC595 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC597 F5 cmc | |
| 00007FF6CDFCC598 F6 C5 37 test ch, 0x37 | |
| 00007FF6CDFCC59B 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC5A2 3A C4 cmp al, ah | |
| 00007FF6CDFCC5A4 F9 stc | |
| 00007FF6CDFCC5A5 33 C3 xor eax, ebx | |
| 00007FF6CDFCC5A7 F8 clc | |
| 00007FF6CDFCC5A8 49 85 F5 test rsi, r13 | |
| 00007FF6CDFCC5AB 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC5B0 F7 D0 not eax | |
| 00007FF6CDFCC5B2 E9 01 00 00 00 jmp 0x7ff6cdfcc5b8 | |
| 00007FF6CDFCC5B8 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC5BB FF C0 inc eax | |
| 00007FF6CDFCC5BD F9 stc | |
| 00007FF6CDFCC5BE 40 84 ED test bpl, bpl | |
| 00007FF6CDFCC5C1 53 push rbx | |
| 00007FF6CDFCC5C2 45 3A C0 cmp r8b, r8b | |
| 00007FF6CDFCC5C5 41 0A D8 or bl, r8b | |
| 00007FF6CDFCC5C8 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC5CB 81 D3 01 13 35 adc ebx, 0x48351301 | |
| 00007FF6CDFCC5D1 5B pop rbx | |
| 00007FF6CDFCC5D2 E9 00 00 00 00 jmp 0x7ff6cdfcc5d7 | |
| 00007FF6CDFCC5D7 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC5DA F9 stc | |
| 00007FF6CDFCC5DB 66 85 F7 test si, di | |
| 00007FF6CDFCC5DE 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC5E1 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCAD5A 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCAD5D 44 3A FB cmp r15b, bl | |
| 00007FF6CDFCAD60 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCAD67 F5 cmc | |
| 00007FF6CDFCAD68 41 81 FB 26 35 cmp r11d, 0x1d1a3526 | |
| 00007FF6CDFCAD6F 32 C3 xor al, bl | |
| 00007FF6CDFCAD71 F8 clc | |
| 00007FF6CDFCAD72 D0 C0 rol al, 1 | |
| 00007FF6CDFCAD74 F9 stc | |
| 00007FF6CDFCAD75 41 80 FF CB cmp r15b, 0xcb | |
| 00007FF6CDFCAD79 34 49 xor al, 0x49 | |
| 00007FF6CDFCAD7B F5 cmc | |
| 00007FF6CDFCAD7C F8 clc | |
| 00007FF6CDFCAD7D D0 C8 ror al, 1 | |
| 00007FF6CDFCAD7F FE C8 dec al | |
| 00007FF6CDFCAD81 32 D8 xor bl, al | |
| 00007FF6CDFCAD83 F5 cmc | |
| 00007FF6CDFCAD84 F8 clc | |
| 00007FF6CDFCAD85 41 F6 C6 B1 test r14b, 0xb1 | |
| 00007FF6CDFCAD89 48 8B 04 04 mov rax, qword ptr [rsp + rax] | |
| 00007FF6CDFCAD8D 66 41 3B D7 cmp dx, r15w | |
| 00007FF6CDFCAD91 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFCAD98 66 41 3B DF cmp bx, r15w | |
| 00007FF6CDFCAD9C 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFCADA1 66 D3 C0 rol ax, cl | |
| 00007FF6CDFCADA4 48 C1 F0 FE sal rax, -2 | |
| 00007FF6CDFCADA8 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCADAA F9 stc | |
| 00007FF6CDFCADAB F8 clc | |
| 00007FF6CDFCADAC 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCADB3 33 C3 xor eax, ebx | |
| 00007FF6CDFCADB5 80 FC ED cmp ah, 0xed | |
| 00007FF6CDFCADB8 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCADBD F7 D0 not eax | |
| 00007FF6CDFCADBF F8 clc | |
| 00007FF6CDFCADC0 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCADC3 E9 00 00 00 00 jmp 0x7ff6cdfcadc8 | |
| 00007FF6CDFCADC8 FF C0 inc eax | |
| 00007FF6CDFCADCA F6 C2 44 test dl, 0x44 | |
| 00007FF6CDFCADCD 53 push rbx | |
| 00007FF6CDFCADCE D2 D3 rcl bl, cl | |
| 00007FF6CDFCADD0 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCADD3 0F BA FB 74 btc ebx, 0x74 | |
| 00007FF6CDFCADD7 C0 E7 E6 shl bh, 0xe6 | |
| 00007FF6CDFCADDA 5B pop rbx | |
| 00007FF6CDFCADDB F8 clc | |
| 00007FF6CDFCADDC 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCADDF 41 F6 C6 4C test r14b, 0x4c | |
| 00007FF6CDFCADE3 F9 stc | |
| 00007FF6CDFCADE4 48 03 F8 add rdi, rax | |
| 00007FF6CDFCADE7 E9 00 00 00 00 jmp 0x7ff6cdfcadec | |
| 00007FF6CDFCADEC E9 26 C0 FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC5E3 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC5E6 49 0F BF CA movsx rcx, r10w | |
| 00007FF6CDFCC5EA D2 CD ror ch, cl | |
| 00007FF6CDFCC5EC 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC5F3 32 C3 xor al, bl | |
| 00007FF6CDFCC5F5 48 0F BF CC movsx rcx, sp | |
| 00007FF6CDFCC5F9 D0 C0 rol al, 1 | |
| 00007FF6CDFCC5FB E9 00 00 00 00 jmp 0x7ff6cdfcc600 | |
| 00007FF6CDFCC600 34 49 xor al, 0x49 | |
| 00007FF6CDFCC602 66 41 8B CF mov cx, r15w | |
| 00007FF6CDFCC606 66 87 C9 xchg cx, cx | |
| 00007FF6CDFCC609 66 0F C9 bswap cx | |
| 00007FF6CDFCC60C D0 C8 ror al, 1 | |
| 00007FF6CDFCC60E E9 00 00 00 00 jmp 0x7ff6cdfcc613 | |
| 00007FF6CDFCC613 FE C8 dec al | |
| 00007FF6CDFCC615 32 D8 xor bl, al | |
| 00007FF6CDFCC617 48 0F C9 bswap rcx | |
| 00007FF6CDFCC61A 12 E8 adc ch, al | |
| 00007FF6CDFCC61C 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC621 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC628 F5 cmc | |
| 00007FF6CDFCC629 E9 00 00 00 00 jmp 0x7ff6cdfcc62e | |
| 00007FF6CDFCC62E 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC632 48 90 nop | |
| 00007FF6CDFCC634 F5 cmc | |
| 00007FF6CDFCC635 41 12 C4 adc al, r12b | |
| 00007FF6CDFCC638 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC63A 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC641 33 C3 xor eax, ebx | |
| 00007FF6CDFCC643 E9 01 00 00 00 jmp 0x7ff6cdfcc649 | |
| 00007FF6CDFCC649 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC64E F8 clc | |
| 00007FF6CDFCC64F E9 00 00 00 00 jmp 0x7ff6cdfcc654 | |
| 00007FF6CDFCC654 F7 D0 not eax | |
| 00007FF6CDFCC656 F8 clc | |
| 00007FF6CDFCC657 E9 00 00 00 00 jmp 0x7ff6cdfcc65c | |
| 00007FF6CDFCC65C C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC65F E9 00 00 00 00 jmp 0x7ff6cdfcc664 | |
| 00007FF6CDFCC664 FF C0 inc eax | |
| 00007FF6CDFCC666 F9 stc | |
| 00007FF6CDFCC667 40 F6 C4 D1 test spl, 0xd1 | |
| 00007FF6CDFCC66B F5 cmc | |
| 00007FF6CDFCC66C 53 push rbx | |
| 00007FF6CDFCC66D 66 81 D3 0E 0E adc bx, 0xe0e | |
| 00007FF6CDFCC672 86 FF xchg bh, bh | |
| 00007FF6CDFCC674 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC677 66 44 0F BB F3 btc bx, r14w | |
| 00007FF6CDFCC67C 49 0F 42 DB cmovb rbx, r11 | |
| 00007FF6CDFCC680 5B pop rbx | |
| 00007FF6CDFCC681 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC684 45 3A D3 cmp r10b, r11b | |
| 00007FF6CDFCC687 66 F7 C2 58 7D test dx, 0x7d58 | |
| 00007FF6CDFCC68C 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC68F FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCADF1 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCADF4 45 3A FC cmp r15b, r12b | |
| 00007FF6CDFCADF7 66 44 85 CD test r9w, bp | |
| 00007FF6CDFCADFB 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCAE02 32 C3 xor al, bl | |
| 00007FF6CDFCAE04 D0 C0 rol al, 1 | |
| 00007FF6CDFCAE06 34 49 xor al, 0x49 | |
| 00007FF6CDFCAE08 E9 00 00 00 00 jmp 0x7ff6cdfcae0d | |
| 00007FF6CDFCAE0D D0 C8 ror al, 1 | |
| 00007FF6CDFCAE0F E9 00 00 00 00 jmp 0x7ff6cdfcae14 | |
| 00007FF6CDFCAE14 FE C8 dec al | |
| 00007FF6CDFCAE16 E9 07 00 00 00 jmp 0x7ff6cdfcae22 | |
| 00007FF6CDFCAE22 32 D8 xor bl, al | |
| 00007FF6CDFCAE24 48 8B 04 04 mov rax, qword ptr [rsp + rax] | |
| 00007FF6CDFCAE28 F8 clc | |
| 00007FF6CDFCAE29 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFCAE30 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFCAE35 66 41 0F BE C7 movsx ax, r15b | |
| 00007FF6CDFCAE3A E9 00 00 00 00 jmp 0x7ff6cdfcae3f | |
| 00007FF6CDFCAE3F 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCAE41 40 F6 C6 CA test sil, 0xca | |
| 00007FF6CDFCAE45 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCAE4C F5 cmc | |
| 00007FF6CDFCAE4D 33 C3 xor eax, ebx | |
| 00007FF6CDFCAE4F 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCAE54 F8 clc | |
| 00007FF6CDFCAE55 E9 00 00 00 00 jmp 0x7ff6cdfcae5a | |
| 00007FF6CDFCAE5A F7 D0 not eax | |
| 00007FF6CDFCAE5C F9 stc | |
| 00007FF6CDFCAE5D E9 00 00 00 00 jmp 0x7ff6cdfcae62 | |
| 00007FF6CDFCAE62 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCAE65 E9 00 00 00 00 jmp 0x7ff6cdfcae6a | |
| 00007FF6CDFCAE6A FF C0 inc eax | |
| 00007FF6CDFCAE6C 45 3A C2 cmp r8b, r10b | |
| 00007FF6CDFCAE6F 40 80 FF D2 cmp dil, 0xd2 | |
| 00007FF6CDFCAE73 53 push rbx | |
| 00007FF6CDFCAE74 41 0A DC or bl, r12b | |
| 00007FF6CDFCAE77 44 0F A4 E3 5A shld ebx, r12d, 0x5a | |
| 00007FF6CDFCAE7C F6 DF neg bh | |
| 00007FF6CDFCAE7E 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCAE81 F8 clc | |
| 00007FF6CDFCAE82 80 E3 4B and bl, 0x4b | |
| 00007FF6CDFCAE85 5B pop rbx | |
| 00007FF6CDFCAE86 E9 00 00 00 00 jmp 0x7ff6cdfcae8b | |
| 00007FF6CDFCAE8B 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCAE8E 66 F7 C1 35 30 test cx, 0x3035 | |
| 00007FF6CDFCAE93 48 03 F8 add rdi, rax | |
| 00007FF6CDFCAE96 E9 00 00 00 00 jmp 0x7ff6cdfcae9b | |
| 00007FF6CDFCAE9B E9 77 BF FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFC7E5A 48 8B C5 mov rax, rbp | |
| 00007FF6CDFC7E5D F5 cmc | |
| 00007FF6CDFC7E5E F9 stc | |
| 00007FF6CDFC7E5F 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFC7E66 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFC7E6B 66 D3 E0 shl ax, cl | |
| 00007FF6CDFC7E6E C0 F0 BD sal al, 0xbd | |
| 00007FF6CDFC7E71 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFC7E73 E9 01 00 00 00 jmp 0x7ff6cdfc7e79 | |
| 00007FF6CDFC7E79 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFC7E80 33 C3 xor eax, ebx | |
| 00007FF6CDFC7E82 F5 cmc | |
| 00007FF6CDFC7E83 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFC7E88 F7 D0 not eax | |
| 00007FF6CDFC7E8A F8 clc | |
| 00007FF6CDFC7E8B E9 00 00 00 00 jmp 0x7ff6cdfc7e90 | |
| 00007FF6CDFC7E90 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFC7E93 E9 00 00 00 00 jmp 0x7ff6cdfc7e98 | |
| 00007FF6CDFC7E98 FF C0 inc eax | |
| 00007FF6CDFC7E9A 84 EF test ch, bh | |
| 00007FF6CDFC7E9C 53 push rbx | |
| 00007FF6CDFC7E9D 66 C1 FB A6 sar bx, -0x5a | |
| 00007FF6CDFC7EA1 66 C1 F3 D5 sal bx, -0x2b | |
| 00007FF6CDFC7EA5 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFC7EA8 48 D3 C3 rol rbx, cl | |
| 00007FF6CDFC7EAB 5B pop rbx | |
| 00007FF6CDFC7EAC E9 00 00 00 00 jmp 0x7ff6cdfc7eb1 | |
| 00007FF6CDFC7EB1 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFC7EB4 66 41 F7 C0 00 test r8w, 0x4100 | |
| 00007FF6CDFC7EBA F8 clc | |
| 00007FF6CDFC7EBB 66 41 81 FE 8D cmp r14w, 0xa8d | |
| 00007FF6CDFC7EC1 48 03 F8 add rdi, rax | |
| 00007FF6CDFC7EC4 E9 00 00 00 00 jmp 0x7ff6cdfc7ec9 | |
| 00007FF6CDFC7EC9 E9 49 EF FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC691 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC694 66 81 E9 65 1E sub cx, 0x1e65 | |
| 00007FF6CDFCC699 66 41 23 C9 and cx, r9w | |
| 00007FF6CDFCC69D C0 D1 56 rcl cl, 0x56 | |
| 00007FF6CDFCC6A0 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC6A7 48 0F BB C9 btc rcx, rcx | |
| 00007FF6CDFCC6AB 44 0F B3 C9 btr ecx, r9d | |
| 00007FF6CDFCC6AF 32 C3 xor al, bl | |
| 00007FF6CDFCC6B1 D0 C0 rol al, 1 | |
| 00007FF6CDFCC6B3 D3 D9 rcr ecx, cl | |
| 00007FF6CDFCC6B5 34 49 xor al, 0x49 | |
| 00007FF6CDFCC6B7 D0 C8 ror al, 1 | |
| 00007FF6CDFCC6B9 49 0F BF C9 movsx rcx, r9w | |
| 00007FF6CDFCC6BD 0F 93 C1 setae cl | |
| 00007FF6CDFCC6C0 66 40 0F BE CE movsx cx, sil | |
| 00007FF6CDFCC6C5 FE C8 dec al | |
| 00007FF6CDFCC6C7 32 D8 xor bl, al | |
| 00007FF6CDFCC6C9 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC6CE F9 stc | |
| 00007FF6CDFCC6CF 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC6D6 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC6DA 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC6DC 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC6E3 40 80 FC D8 cmp spl, 0xd8 | |
| 00007FF6CDFCC6E7 F8 clc | |
| 00007FF6CDFCC6E8 33 C3 xor eax, ebx | |
| 00007FF6CDFCC6EA 66 81 FE E1 2E cmp si, 0x2ee1 | |
| 00007FF6CDFCC6EF 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC6F4 F7 D0 not eax | |
| 00007FF6CDFCC6F6 F9 stc | |
| 00007FF6CDFCC6F7 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC6FA E9 00 00 00 00 jmp 0x7ff6cdfcc6ff | |
| 00007FF6CDFCC6FF FF C0 inc eax | |
| 00007FF6CDFCC701 F9 stc | |
| 00007FF6CDFCC702 48 3B D4 cmp rdx, rsp | |
| 00007FF6CDFCC705 53 push rbx | |
| 00007FF6CDFCC706 40 80 FE 4D cmp sil, 0x4d | |
| 00007FF6CDFCC70A 41 02 DE add bl, r14b | |
| 00007FF6CDFCC70D 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC710 5B pop rbx | |
| 00007FF6CDFCC711 40 84 E5 test spl, bpl | |
| 00007FF6CDFCC714 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC717 F9 stc | |
| 00007FF6CDFCC718 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC71B E9 00 00 00 00 jmp 0x7ff6cdfcc720 | |
| 00007FF6CDFCC720 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFD3B58 48 8B C5 mov rax, rbp | |
| 00007FF6CDFD3B5B 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFD3B62 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFD3B67 66 0F BC C5 bsf ax, bp | |
| 00007FF6CDFD3B6B 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFD3B6D F9 stc | |
| 00007FF6CDFD3B6E 49 81 F8 75 5D cmp r8, 0x41895d75 | |
| 00007FF6CDFD3B75 41 F6 C4 18 test r12b, 0x18 | |
| 00007FF6CDFD3B79 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFD3B80 F8 clc | |
| 00007FF6CDFD3B81 33 C3 xor eax, ebx | |
| 00007FF6CDFD3B83 40 80 FC E8 cmp spl, 0xe8 | |
| 00007FF6CDFD3B87 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFD3B8C F8 clc | |
| 00007FF6CDFD3B8D F7 D0 not eax | |
| 00007FF6CDFD3B8F F9 stc | |
| 00007FF6CDFD3B90 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFD3B93 E9 00 00 00 00 jmp 0x7ff6cdfd3b98 | |
| 00007FF6CDFD3B98 FF C0 inc eax | |
| 00007FF6CDFD3B9A F9 stc | |
| 00007FF6CDFD3B9B 53 push rbx | |
| 00007FF6CDFD3B9C 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFD3B9F 5B pop rbx | |
| 00007FF6CDFD3BA0 F9 stc | |
| 00007FF6CDFD3BA1 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFD3BA4 41 F6 C1 F7 test r9b, 0xf7 | |
| 00007FF6CDFD3BA8 48 03 F8 add rdi, rax | |
| 00007FF6CDFD3BAB E9 00 00 00 00 jmp 0x7ff6cdfd3bb0 | |
| 00007FF6CDFD3BB0 E9 62 32 FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCE305 48 8B 06 mov rax, qword ptr [rsi] | |
| 00007FF6CDFCE308 A8 B0 test al, 0xb0 | |
| 00007FF6CDFCE30A F8 clc | |
| 00007FF6CDFCE30B 48 81 C6 08 00 add rsi, 8 | |
| 00007FF6CDFCE312 F8 clc | |
| 00007FF6CDFCE313 44 84 E8 test r13b, al | |
| 00007FF6CDFCE316 44 3B E1 cmp r12d, ecx | |
| 00007FF6CDFCE319 48 33 C3 xor rax, rbx | |
| 00007FF6CDFCE31C F9 stc | |
| 00007FF6CDFCE31D 48 05 01 51 9E add rax, 0x19e5101 | |
| 00007FF6CDFCE323 48 C1 C0 07 rol rax, 7 | |
| 00007FF6CDFCE327 84 C2 test al, dl | |
| 00007FF6CDFCE329 F9 stc | |
| 00007FF6CDFCE32A 48 2D C0 7F 8C sub rax, 0x1d8c7fc0 | |
| 00007FF6CDFCE330 48 F7 D0 not rax | |
| 00007FF6CDFCE333 F9 stc | |
| 00007FF6CDFCE334 44 84 FC test r15b, spl | |
| 00007FF6CDFCE337 41 81 FE FD 62 cmp r14d, 0x643062fd | |
| 00007FF6CDFCE33E 48 35 71 2D BC xor rax, 0x5abc2d71 | |
| 00007FF6CDFCE344 F8 clc | |
| 00007FF6CDFCE345 66 45 85 D3 test r10w, r11w | |
| 00007FF6CDFCE349 48 33 D8 xor rbx, rax | |
| 00007FF6CDFCE34C 48 81 FA C6 36 cmp rdx, 0x51fe36c6 | |
| 00007FF6CDFCE353 45 84 CC test r9b, r12b | |
| 00007FF6CDFCE356 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFCE35D 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFCE362 41 80 F8 71 cmp r8b, 0x71 | |
| 00007FF6CDFCE366 48 81 E0 E0 77 and rax, 0x27bc77e0 | |
| 00007FF6CDFCE36D 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCE36F 44 84 DE test r11b, sil | |
| 00007FF6CDFCE372 66 41 81 F9 C1 cmp r9w, 0x13c1 | |
| 00007FF6CDFCE378 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCE37F 33 C3 xor eax, ebx | |
| 00007FF6CDFCE381 66 F7 C3 94 4B test bx, 0x4b94 | |
| 00007FF6CDFCE386 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCE38B E9 00 00 00 00 jmp 0x7ff6cdfce390 | |
| 00007FF6CDFCE390 F7 D0 not eax | |
| 00007FF6CDFCE392 F5 cmc | |
| 00007FF6CDFCE393 F9 stc | |
| 00007FF6CDFCE394 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCE397 E9 00 00 00 00 jmp 0x7ff6cdfce39c | |
| 00007FF6CDFCE39C FF C0 inc eax | |
| 00007FF6CDFCE39E 41 80 FB D0 cmp r11b, 0xd0 | |
| 00007FF6CDFCE3A2 53 push rbx | |
| 00007FF6CDFCE3A3 F6 D7 not bh | |
| 00007FF6CDFCE3A5 FE CF dec bh | |
| 00007FF6CDFCE3A7 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCE3AA 48 63 DF movsxd rbx, edi | |
| 00007FF6CDFCE3AD 0F B7 DE movzx ebx, si | |
| 00007FF6CDFCE3B0 5B pop rbx | |
| 00007FF6CDFCE3B1 F5 cmc | |
| 00007FF6CDFCE3B2 44 3A F1 cmp r14b, cl | |
| 00007FF6CDFCE3B5 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCE3B8 66 41 81 FD 55 cmp r13w, 0x1a55 | |
| 00007FF6CDFCE3BE 66 41 F7 C5 E2 test r13w, 0xce2 | |
| 00007FF6CDFCE3C4 48 03 F8 add rdi, rax | |
| 00007FF6CDFCE3C7 E9 00 00 00 00 jmp 0x7ff6cdfce3cc | |
| 00007FF6CDFCE3CC E9 46 8A FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFC8192 48 8B 44 25 00 mov rax, qword ptr [rbp] | |
| 00007FF6CDFC8197 66 0F BB F9 btc cx, di | |
| 00007FF6CDFC819B 44 0F AC E9 2D shrd ecx, r13d, 0x2d | |
| 00007FF6CDFC81A0 48 8B 4C 25 08 mov rcx, qword ptr [rbp + 8] | |
| 00007FF6CDFC81A5 44 3A DA cmp r11b, dl | |
| 00007FF6CDFC81A8 48 03 C1 add rax, rcx | |
| 00007FF6CDFC81AB 48 89 44 25 08 mov qword ptr [rbp + 8], rax | |
| 00007FF6CDFC81B0 49 0F 4B C1 cmovnp rax, r9 | |
| 00007FF6CDFC81B4 9C pushfq | |
| 00007FF6CDFC81B5 48 0F BD C2 bsr rax, rdx | |
| 00007FF6CDFC81B9 8F 44 25 00 pop qword ptr [rbp] | |
| 00007FF6CDFC81BD 66 0F AB F0 bts ax, si | |
| 00007FF6CDFC81C1 F7 D0 not eax | |
| 00007FF6CDFC81C3 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFC81C5 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFC81CC 33 C3 xor eax, ebx | |
| 00007FF6CDFC81CE 40 84 FB test dil, bl | |
| 00007FF6CDFC81D1 48 81 FB BA 44 cmp rbx, 0x6c5e44ba | |
| 00007FF6CDFC81D8 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFC81DD F7 D0 not eax | |
| 00007FF6CDFC81DF E9 00 00 00 00 jmp 0x7ff6cdfc81e4 | |
| 00007FF6CDFC81E4 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFC81E7 E9 00 00 00 00 jmp 0x7ff6cdfc81ec | |
| 00007FF6CDFC81EC FF C0 inc eax | |
| 00007FF6CDFC81EE 53 push rbx | |
| 00007FF6CDFC81EF 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFC81F2 1B DB sbb ebx, ebx | |
| 00007FF6CDFC81F4 66 41 0F 43 D9 cmovae bx, r9w | |
| 00007FF6CDFC81F9 80 F7 E2 xor bh, 0xe2 | |
| 00007FF6CDFC81FC 5B pop rbx | |
| 00007FF6CDFC81FD 49 81 F8 1F 34 cmp r8, 0x2d3e341f | |
| 00007FF6CDFC8204 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFC8207 E9 00 00 00 00 jmp 0x7ff6cdfc820c | |
| 00007FF6CDFC820C 48 03 F8 add rdi, rax | |
| 00007FF6CDFC820F E9 00 00 00 00 jmp 0x7ff6cdfc8214 | |
| 00007FF6CDFC8214 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC722 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC725 41 0F B7 C8 movzx ecx, r8w | |
| 00007FF6CDFCC729 0F BB D9 btc ecx, ebx | |
| 00007FF6CDFCC72C 66 0F B6 CA movzx cx, dl | |
| 00007FF6CDFCC730 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC737 0F BA F9 28 btc ecx, 0x28 | |
| 00007FF6CDFCC73B 32 C3 xor al, bl | |
| 00007FF6CDFCC73D C0 DD 35 rcr ch, 0x35 | |
| 00007FF6CDFCC740 66 0F BA F1 24 btr cx, 0x24 | |
| 00007FF6CDFCC745 48 63 CD movsxd rcx, ebp | |
| 00007FF6CDFCC748 D0 C0 rol al, 1 | |
| 00007FF6CDFCC74A 40 02 CF add cl, dil | |
| 00007FF6CDFCC74D 34 49 xor al, 0x49 | |
| 00007FF6CDFCC74F 66 0F BA E1 47 bt cx, 0x47 | |
| 00007FF6CDFCC754 49 0F BF C9 movsx rcx, r9w | |
| 00007FF6CDFCC758 D0 C8 ror al, 1 | |
| 00007FF6CDFCC75A B9 26 75 66 22 mov ecx, 0x22667526 | |
| 00007FF6CDFCC75F E9 02 00 00 00 jmp 0x7ff6cdfcc766 | |
| 00007FF6CDFCC766 FE C8 dec al | |
| 00007FF6CDFCC768 66 C1 E9 FD shr cx, -3 | |
| 00007FF6CDFCC76C 32 D8 xor bl, al | |
| 00007FF6CDFCC76E 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC773 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC77A 3C C5 cmp al, 0xc5 | |
| 00007FF6CDFCC77C 45 84 EE test r13b, r14b | |
| 00007FF6CDFCC77F 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC783 40 1A C4 sbb al, spl | |
| 00007FF6CDFCC786 98 cwde | |
| 00007FF6CDFCC787 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC789 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC790 66 F7 C3 E1 6B test bx, 0x6be1 | |
| 00007FF6CDFCC795 33 C3 xor eax, ebx | |
| 00007FF6CDFCC797 66 45 3B FC cmp r15w, r12w | |
| 00007FF6CDFCC79B 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC7A0 E9 01 00 00 00 jmp 0x7ff6cdfcc7a6 | |
| 00007FF6CDFCC7A6 F7 D0 not eax | |
| 00007FF6CDFCC7A8 F9 stc | |
| 00007FF6CDFCC7A9 F5 cmc | |
| 00007FF6CDFCC7AA C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC7AD E9 00 00 00 00 jmp 0x7ff6cdfcc7b2 | |
| 00007FF6CDFCC7B2 FF C0 inc eax | |
| 00007FF6CDFCC7B4 41 80 FD B5 cmp r13b, 0xb5 | |
| 00007FF6CDFCC7B8 53 push rbx | |
| 00007FF6CDFCC7B9 0F B7 D8 movzx ebx, ax | |
| 00007FF6CDFCC7BC 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC7BF D2 FF sar bh, cl | |
| 00007FF6CDFCC7C1 66 41 0F 41 DD cmovno bx, r13w | |
| 00007FF6CDFCC7C6 48 0F BA E3 68 bt rbx, 0x68 | |
| 00007FF6CDFCC7CB 5B pop rbx | |
| 00007FF6CDFCC7CC 41 3A CC cmp cl, r12b | |
| 00007FF6CDFCC7CF F8 clc | |
| 00007FF6CDFCC7D0 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC7D3 F9 stc | |
| 00007FF6CDFCC7D4 E9 00 00 00 00 jmp 0x7ff6cdfcc7d9 | |
| 00007FF6CDFCC7D9 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC7DC E9 00 00 00 00 jmp 0x7ff6cdfcc7e1 | |
| 00007FF6CDFCC7E1 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC7E3 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC7E6 48 0F BF CD movsx rcx, bp | |
| 00007FF6CDFCC7EA 66 87 C9 xchg cx, cx | |
| 00007FF6CDFCC7ED 66 44 0F BB C9 btc cx, r9w | |
| 00007FF6CDFCC7F2 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC7F9 48 81 E9 00 52 sub rcx, 0x1e6a5200 | |
| 00007FF6CDFCC800 48 C1 F1 12 sal rcx, 0x12 | |
| 00007FF6CDFCC804 32 C3 xor al, bl | |
| 00007FF6CDFCC806 D0 C0 rol al, 1 | |
| 00007FF6CDFCC808 34 49 xor al, 0x49 | |
| 00007FF6CDFCC80A 48 D3 D1 rcl rcx, cl | |
| 00007FF6CDFCC80D D0 C8 ror al, 1 | |
| 00007FF6CDFCC80F 49 63 C9 movsxd rcx, r9d | |
| 00007FF6CDFCC812 66 0F B6 CA movzx cx, dl | |
| 00007FF6CDFCC816 FE C8 dec al | |
| 00007FF6CDFCC818 D2 F5 sal ch, cl | |
| 00007FF6CDFCC81A 32 D8 xor bl, al | |
| 00007FF6CDFCC81C 66 F7 D9 neg cx | |
| 00007FF6CDFCC81F 48 0F BA F1 9B btr rcx, -0x65 | |
| 00007FF6CDFCC824 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC829 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC830 41 F6 C3 7E test r11b, 0x7e | |
| 00007FF6CDFCC834 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC838 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC83A F5 cmc | |
| 00007FF6CDFCC83B F8 clc | |
| 00007FF6CDFCC83C 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC843 33 C3 xor eax, ebx | |
| 00007FF6CDFCC845 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC84A F7 D0 not eax | |
| 00007FF6CDFCC84C F5 cmc | |
| 00007FF6CDFCC84D C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC850 E9 00 00 00 00 jmp 0x7ff6cdfcc855 | |
| 00007FF6CDFCC855 FF C0 inc eax | |
| 00007FF6CDFCC857 F8 clc | |
| 00007FF6CDFCC858 41 3A EF cmp bpl, r15b | |
| 00007FF6CDFCC85B 53 push rbx | |
| 00007FF6CDFCC85C 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC85F 66 0F BD DC bsr bx, sp | |
| 00007FF6CDFCC863 80 C7 B7 add bh, 0xb7 | |
| 00007FF6CDFCC866 66 41 0F BC DF bsf bx, r15w | |
| 00007FF6CDFCC86B 5B pop rbx | |
| 00007FF6CDFCC86C 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC86F E9 04 00 00 00 jmp 0x7ff6cdfcc878 | |
| 00007FF6CDFCC878 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC87B E9 00 00 00 00 jmp 0x7ff6cdfcc880 | |
| 00007FF6CDFCC880 57 push rdi | |
| 00007FF6CDFCC881 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCE3D1 48 8B 06 mov rax, qword ptr [rsi] | |
| 00007FF6CDFCE3D4 4C 3B EC cmp r13, rsp | |
| 00007FF6CDFCE3D7 48 F7 C2 BF 0E test rdx, 0x760e0ebf | |
| 00007FF6CDFCE3DE 48 81 C6 08 00 add rsi, 8 | |
| 00007FF6CDFCE3E5 66 F7 C5 3A 7D test bp, 0x7d3a | |
| 00007FF6CDFCE3EA 48 85 D6 test rdx, rsi | |
| 00007FF6CDFCE3ED 48 33 C3 xor rax, rbx | |
| 00007FF6CDFCE3F0 48 05 01 51 9E add rax, 0x19e5101 | |
| 00007FF6CDFCE3F6 F9 stc | |
| 00007FF6CDFCE3F7 48 C1 C0 07 rol rax, 7 | |
| 00007FF6CDFCE3FB E9 00 00 00 00 jmp 0x7ff6cdfce400 | |
| 00007FF6CDFCE400 48 2D C0 7F 8C sub rax, 0x1d8c7fc0 | |
| 00007FF6CDFCE406 48 F7 D0 not rax | |
| 00007FF6CDFCE409 41 84 D3 test dl, r11b | |
| 00007FF6CDFCE40C 48 35 71 2D BC xor rax, 0x5abc2d71 | |
| 00007FF6CDFCE412 4D 3B D1 cmp r10, r9 | |
| 00007FF6CDFCE415 F8 clc | |
| 00007FF6CDFCE416 F6 C5 48 test ch, 0x48 | |
| 00007FF6CDFCE419 48 33 D8 xor rbx, rax | |
| 00007FF6CDFCE41C 41 80 FC 53 cmp r12b, 0x53 | |
| 00007FF6CDFCE420 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFCE427 41 F6 C7 38 test r15b, 0x38 | |
| 00007FF6CDFCE42B 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFCE430 48 0F BA F0 F3 btr rax, -0xd | |
| 00007FF6CDFCE435 66 40 0F BE C4 movsx ax, spl | |
| 00007FF6CDFCE43A 0F BB C8 btc eax, ecx | |
| 00007FF6CDFCE43D 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCE43F F8 clc | |
| 00007FF6CDFCE440 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCE447 E9 00 00 00 00 jmp 0x7ff6cdfce44c | |
| 00007FF6CDFCE44C 33 C3 xor eax, ebx | |
| 00007FF6CDFCE44E F8 clc | |
| 00007FF6CDFCE44F F5 cmc | |
| 00007FF6CDFCE450 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCE455 F7 D0 not eax | |
| 00007FF6CDFCE457 F8 clc | |
| 00007FF6CDFCE458 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCE45B FF C0 inc eax | |
| 00007FF6CDFCE45D 41 80 FC 32 cmp r12b, 0x32 | |
| 00007FF6CDFCE461 E9 00 00 00 00 jmp 0x7ff6cdfce466 | |
| 00007FF6CDFCE466 53 push rbx | |
| 00007FF6CDFCE467 2A DA sub bl, dl | |
| 00007FF6CDFCE469 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCE46C 48 81 E3 95 70 and rbx, 0x1c997095 | |
| 00007FF6CDFCE473 41 02 DC add bl, r12b | |
| 00007FF6CDFCE476 81 C3 6F 3A BA add ebx, 0x6fba3a6f | |
| 00007FF6CDFCE47C 5B pop rbx | |
| 00007FF6CDFCE47D 41 80 FA 49 cmp r10b, 0x49 | |
| 00007FF6CDFCE481 F6 C3 EF test bl, 0xef | |
| 00007FF6CDFCE484 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCE487 44 3A F1 cmp r14b, cl | |
| 00007FF6CDFCE48A 48 03 F8 add rdi, rax | |
| 00007FF6CDFCE48D E9 00 00 00 00 jmp 0x7ff6cdfce492 | |
| 00007FF6CDFCE492 E9 80 89 FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFD3BB5 48 8B C5 mov rax, rbp | |
| 00007FF6CDFD3BB8 41 F6 C1 91 test r9b, 0x91 | |
| 00007FF6CDFD3BBC 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFD3BC3 F9 stc | |
| 00007FF6CDFD3BC4 80 FE D6 cmp dh, 0xd6 | |
| 00007FF6CDFD3BC7 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFD3BCC 03 C4 add eax, esp | |
| 00007FF6CDFD3BCE 66 41 0F B6 C3 movzx ax, r11b | |
| 00007FF6CDFD3BD3 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFD3BD5 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFD3BDC E9 00 00 00 00 jmp 0x7ff6cdfd3be1 | |
| 00007FF6CDFD3BE1 33 C3 xor eax, ebx | |
| 00007FF6CDFD3BE3 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFD3BE8 F7 D0 not eax | |
| 00007FF6CDFD3BEA C1 C8 02 ror eax, 2 | |
| 00007FF6CDFD3BED FF C0 inc eax | |
| 00007FF6CDFD3BEF F9 stc | |
| 00007FF6CDFD3BF0 53 push rbx | |
| 00007FF6CDFD3BF1 44 0F A3 D3 bt ebx, r10d | |
| 00007FF6CDFD3BF5 66 45 3B E9 cmp r13w, r9w | |
| 00007FF6CDFD3BF9 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFD3BFC D2 F7 sal bh, cl | |
| 00007FF6CDFD3BFE 0F BA E3 EC bt ebx, -0x14 | |
| 00007FF6CDFD3C02 5B pop rbx | |
| 00007FF6CDFD3C03 49 3B F7 cmp rsi, r15 | |
| 00007FF6CDFD3C06 66 81 FA 7E 09 cmp dx, 0x97e | |
| 00007FF6CDFD3C0B 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFD3C0E 66 85 DB test bx, bx | |
| 00007FF6CDFD3C11 F6 C4 FF test ah, 0xff | |
| 00007FF6CDFD3C14 48 03 F8 add rdi, rax | |
| 00007FF6CDFD3C17 E9 00 00 00 00 jmp 0x7ff6cdfd3c1c | |
| 00007FF6CDFD3C1C E9 F6 31 FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCE497 48 8B 06 mov rax, qword ptr [rsi] | |
| 00007FF6CDFCE49A F5 cmc | |
| 00007FF6CDFCE49B 48 81 C6 08 00 add rsi, 8 | |
| 00007FF6CDFCE4A2 45 3A E6 cmp r12b, r14b | |
| 00007FF6CDFCE4A5 48 33 C3 xor rax, rbx | |
| 00007FF6CDFCE4A8 48 05 01 51 9E add rax, 0x19e5101 | |
| 00007FF6CDFCE4AE F9 stc | |
| 00007FF6CDFCE4AF F5 cmc | |
| 00007FF6CDFCE4B0 48 C1 C0 07 rol rax, 7 | |
| 00007FF6CDFCE4B4 48 2D C0 7F 8C sub rax, 0x1d8c7fc0 | |
| 00007FF6CDFCE4BA 48 F7 D0 not rax | |
| 00007FF6CDFCE4BD 48 35 71 2D BC xor rax, 0x5abc2d71 | |
| 00007FF6CDFCE4C3 44 3A D5 cmp r10b, bpl | |
| 00007FF6CDFCE4C6 E9 00 00 00 00 jmp 0x7ff6cdfce4cb | |
| 00007FF6CDFCE4CB 48 33 D8 xor rbx, rax | |
| 00007FF6CDFCE4CE F9 stc | |
| 00007FF6CDFCE4CF 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFCE4D6 40 80 FF 3E cmp dil, 0x3e | |
| 00007FF6CDFCE4DA 40 84 ED test bpl, bpl | |
| 00007FF6CDFCE4DD 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFCE4E2 35 03 71 E3 2D xor eax, 0x2de37103 | |
| 00007FF6CDFCE4E7 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCE4E9 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCE4F0 F9 stc | |
| 00007FF6CDFCE4F1 33 C3 xor eax, ebx | |
| 00007FF6CDFCE4F3 48 81 FB F9 57 cmp rbx, 0x12e757f9 | |
| 00007FF6CDFCE4FA 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCE4FF F7 D0 not eax | |
| 00007FF6CDFCE501 E9 02 00 00 00 jmp 0x7ff6cdfce508 | |
| 00007FF6CDFCE508 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCE50B E9 00 00 00 00 jmp 0x7ff6cdfce510 | |
| 00007FF6CDFCE510 FF C0 inc eax | |
| 00007FF6CDFCE512 40 80 FC 97 cmp spl, 0x97 | |
| 00007FF6CDFCE516 53 push rbx | |
| 00007FF6CDFCE517 66 2B D8 sub bx, ax | |
| 00007FF6CDFCE51A 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCE51D 5B pop rbx | |
| 00007FF6CDFCE51E 40 80 FF B0 cmp dil, 0xb0 | |
| 00007FF6CDFCE522 3A DB cmp bl, bl | |
| 00007FF6CDFCE524 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCE527 66 41 3B D8 cmp bx, r8w | |
| 00007FF6CDFCE52B 48 03 F8 add rdi, rax | |
| 00007FF6CDFCE52E E9 00 00 00 00 jmp 0x7ff6cdfce533 | |
| 00007FF6CDFCE533 E9 DF 88 FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFD5A91 48 8B 44 25 00 mov rax, qword ptr [rbp] | |
| 00007FF6CDFD5A96 F9 stc | |
| 00007FF6CDFD5A97 44 0F A4 E9 DB shld ecx, r13d, -0x25 | |
| 00007FF6CDFD5A9C D2 E5 shl ch, cl | |
| 00007FF6CDFD5A9E 48 8B 4C 25 08 mov rcx, qword ptr [rbp + 8] | |
| 00007FF6CDFD5AA3 F5 cmc | |
| 00007FF6CDFD5AA4 F8 clc | |
| 00007FF6CDFD5AA5 48 03 C1 add rax, rcx | |
| 00007FF6CDFD5AA8 48 89 44 25 08 mov qword ptr [rbp + 8], rax | |
| 00007FF6CDFD5AAD 66 41 0F 4E C0 cmovle ax, r8w | |
| 00007FF6CDFD5AB2 9C pushfq | |
| 00007FF6CDFD5AB3 8F 44 25 00 pop qword ptr [rbp] | |
| 00007FF6CDFD5AB7 0F C0 E0 xadd al, ah | |
| 00007FF6CDFD5ABA 66 44 0F B3 E0 btr ax, r12w | |
| 00007FF6CDFD5ABF 1A C5 sbb al, ch | |
| 00007FF6CDFD5AC1 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFD5AC3 F9 stc | |
| 00007FF6CDFD5AC4 66 F7 C2 B4 2C test dx, 0x2cb4 | |
| 00007FF6CDFD5AC9 F8 clc | |
| 00007FF6CDFD5ACA 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFD5AD1 45 3A F4 cmp r14b, r12b | |
| 00007FF6CDFD5AD4 40 84 C4 test al, spl | |
| 00007FF6CDFD5AD7 33 C3 xor eax, ebx | |
| 00007FF6CDFD5AD9 F8 clc | |
| 00007FF6CDFD5ADA E9 04 00 00 00 jmp 0x7ff6cdfd5ae3 | |
| 00007FF6CDFD5AE3 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFD5AE8 F7 D0 not eax | |
| 00007FF6CDFD5AEA C1 C8 02 ror eax, 2 | |
| 00007FF6CDFD5AED E9 00 00 00 00 jmp 0x7ff6cdfd5af2 | |
| 00007FF6CDFD5AF2 FF C0 inc eax | |
| 00007FF6CDFD5AF4 66 45 3B FA cmp r15w, r10w | |
| 00007FF6CDFD5AF8 53 push rbx | |
| 00007FF6CDFD5AF9 40 32 DD xor bl, bpl | |
| 00007FF6CDFD5AFC 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFD5AFF 66 0F A4 E3 C3 shld bx, sp, -0x3d | |
| 00007FF6CDFD5B04 66 0F BE DF movsx bx, bh | |
| 00007FF6CDFD5B08 D2 DB rcr bl, cl | |
| 00007FF6CDFD5B0A 5B pop rbx | |
| 00007FF6CDFD5B0B 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFD5B0E 45 3A F9 cmp r15b, r9b | |
| 00007FF6CDFD5B11 48 03 F8 add rdi, rax | |
| 00007FF6CDFD5B14 E9 00 00 00 00 jmp 0x7ff6cdfd5b19 | |
| 00007FF6CDFD5B19 FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCC882 0F B6 06 movzx eax, byte ptr [rsi] | |
| 00007FF6CDFCC885 48 0F BA E1 A5 bt rcx, -0x5b | |
| 00007FF6CDFCC88A 48 81 C6 01 00 add rsi, 1 | |
| 00007FF6CDFCC891 48 0F B7 CA movzx rcx, dx | |
| 00007FF6CDFCC895 66 C1 E1 F0 shl cx, -0x10 | |
| 00007FF6CDFCC899 32 C3 xor al, bl | |
| 00007FF6CDFCC89B 66 44 0F BB F9 btc cx, r15w | |
| 00007FF6CDFCC8A0 F5 cmc | |
| 00007FF6CDFCC8A1 D0 C0 rol al, 1 | |
| 00007FF6CDFCC8A3 34 49 xor al, 0x49 | |
| 00007FF6CDFCC8A5 66 C1 C1 DB rol cx, -0x25 | |
| 00007FF6CDFCC8A9 66 44 0F AB F1 bts cx, r14w | |
| 00007FF6CDFCC8AE 44 0F BB E9 btc ecx, r13d | |
| 00007FF6CDFCC8B2 D0 C8 ror al, 1 | |
| 00007FF6CDFCC8B4 66 41 0F BE CB movsx cx, r11b | |
| 00007FF6CDFCC8B9 FE C8 dec al | |
| 00007FF6CDFCC8BB 32 D8 xor bl, al | |
| 00007FF6CDFCC8BD 66 41 0F 45 CB cmovne cx, r11w | |
| 00007FF6CDFCC8C2 C0 C5 5F rol ch, 0x5f | |
| 00007FF6CDFCC8C5 48 8B 4C 25 00 mov rcx, qword ptr [rbp] | |
| 00007FF6CDFCC8CA 48 81 C5 08 00 add rbp, 8 | |
| 00007FF6CDFCC8D1 F9 stc | |
| 00007FF6CDFCC8D2 48 89 0C 04 mov qword ptr [rsp + rax], rcx | |
| 00007FF6CDFCC8D6 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCC8D8 41 84 CC test cl, r12b | |
| 00007FF6CDFCC8DB 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCC8E2 33 C3 xor eax, ebx | |
| 00007FF6CDFCC8E4 41 80 FB 04 cmp r11b, 4 | |
| 00007FF6CDFCC8E8 45 3A F6 cmp r14b, r14b | |
| 00007FF6CDFCC8EB F5 cmc | |
| 00007FF6CDFCC8EC 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCC8F1 F5 cmc | |
| 00007FF6CDFCC8F2 F7 D0 not eax | |
| 00007FF6CDFCC8F4 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCC8F7 E9 00 00 00 00 jmp 0x7ff6cdfcc8fc | |
| 00007FF6CDFCC8FC FF C0 inc eax | |
| 00007FF6CDFCC8FE 53 push rbx | |
| 00007FF6CDFCC8FF 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCC902 5B pop rbx | |
| 00007FF6CDFCC903 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCC906 F5 cmc | |
| 00007FF6CDFCC907 48 03 F8 add rdi, rax | |
| 00007FF6CDFCC90A E9 00 00 00 00 jmp 0x7ff6cdfcc90f | |
| 00007FF6CDFCC90F FF E7 jmp rdi | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFD3C21 48 8B C5 mov rax, rbp | |
| 00007FF6CDFD3C24 41 F6 C4 56 test r12b, 0x56 | |
| 00007FF6CDFD3C28 E9 00 00 00 00 jmp 0x7ff6cdfd3c2d | |
| 00007FF6CDFD3C2D 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFD3C34 F8 clc | |
| 00007FF6CDFD3C35 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFD3C3A 15 C1 5A 9E 34 adc eax, 0x349e5ac1 | |
| 00007FF6CDFD3C3F D2 CC ror ah, cl | |
| 00007FF6CDFD3C41 F6 D8 neg al | |
| 00007FF6CDFD3C43 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFD3C45 40 80 FC DF cmp spl, 0xdf | |
| 00007FF6CDFD3C49 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFD3C50 48 81 FE E1 5B cmp rsi, 0x58ec5be1 | |
| 00007FF6CDFD3C57 45 3A F5 cmp r14b, r13b | |
| 00007FF6CDFD3C5A 33 C3 xor eax, ebx | |
| 00007FF6CDFD3C5C 41 84 D8 test bl, r8b | |
| 00007FF6CDFD3C5F 44 3A FE cmp r15b, sil | |
| 00007FF6CDFD3C62 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFD3C67 E9 00 00 00 00 jmp 0x7ff6cdfd3c6c | |
| 00007FF6CDFD3C6C F7 D0 not eax | |
| 00007FF6CDFD3C6E F5 cmc | |
| 00007FF6CDFD3C6F C1 C8 02 ror eax, 2 | |
| 00007FF6CDFD3C72 E9 00 00 00 00 jmp 0x7ff6cdfd3c77 | |
| 00007FF6CDFD3C77 FF C0 inc eax | |
| 00007FF6CDFD3C79 F8 clc | |
| 00007FF6CDFD3C7A 53 push rbx | |
| 00007FF6CDFD3C7B 66 3D F7 48 cmp ax, 0x48f7 | |
| 00007FF6CDFD3C7F 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFD3C82 48 C7 C3 C0 70 mov rbx, 0x759b70c0 | |
| 00007FF6CDFD3C89 66 F7 D3 not bx | |
| 00007FF6CDFD3C8C 5B pop rbx | |
| 00007FF6CDFD3C8D 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFD3C90 80 F9 48 cmp cl, 0x48 | |
| 00007FF6CDFD3C93 48 03 F8 add rdi, rax | |
| 00007FF6CDFD3C96 E9 00 00 00 00 jmp 0x7ff6cdfd3c9b | |
| 00007FF6CDFD3C9B E9 77 31 FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| 00007FF6CDFCE538 48 8B 06 mov rax, qword ptr [rsi] | |
| 00007FF6CDFCE53B 48 81 C6 08 00 add rsi, 8 | |
| 00007FF6CDFCE542 48 33 C3 xor rax, rbx | |
| 00007FF6CDFCE545 F8 clc | |
| 00007FF6CDFCE546 48 05 01 51 9E add rax, 0x19e5101 | |
| 00007FF6CDFCE54C F8 clc | |
| 00007FF6CDFCE54D 48 C1 C0 07 rol rax, 7 | |
| 00007FF6CDFCE551 40 84 E4 test spl, spl | |
| 00007FF6CDFCE554 66 3B C6 cmp ax, si | |
| 00007FF6CDFCE557 48 2D C0 7F 8C sub rax, 0x1d8c7fc0 | |
| 00007FF6CDFCE55D F8 clc | |
| 00007FF6CDFCE55E F5 cmc | |
| 00007FF6CDFCE55F 48 F7 D0 not rax | |
| 00007FF6CDFCE562 F8 clc | |
| 00007FF6CDFCE563 48 35 71 2D BC xor rax, 0x5abc2d71 | |
| 00007FF6CDFCE569 48 33 D8 xor rbx, rax | |
| 00007FF6CDFCE56C E9 04 00 00 00 jmp 0x7ff6cdfce575 | |
| 00007FF6CDFCE575 48 81 ED 08 00 sub rbp, 8 | |
| 00007FF6CDFCE57C 45 3A C8 cmp r9b, r8b | |
| 00007FF6CDFCE57F F5 cmc | |
| 00007FF6CDFCE580 48 89 44 25 00 mov qword ptr [rbp], rax | |
| 00007FF6CDFCE585 49 1B C6 sbb rax, r14 | |
| 00007FF6CDFCE588 C0 D0 12 rcl al, 0x12 | |
| 00007FF6CDFCE58B B0 B3 mov al, 0xb3 | |
| 00007FF6CDFCE58D 8B 06 mov eax, dword ptr [rsi] | |
| 00007FF6CDFCE58F 45 84 F9 test r15b, r9b | |
| 00007FF6CDFCE592 F5 cmc | |
| 00007FF6CDFCE593 48 81 C6 04 00 add rsi, 4 | |
| 00007FF6CDFCE59A 33 C3 xor eax, ebx | |
| 00007FF6CDFCE59C F7 C6 02 7D E3 test esi, 0x21e37d02 | |
| 00007FF6CDFCE5A2 F9 stc | |
| 00007FF6CDFCE5A3 2D 86 7A AF 10 sub eax, 0x10af7a86 | |
| 00007FF6CDFCE5A8 F7 D0 not eax | |
| 00007FF6CDFCE5AA F8 clc | |
| 00007FF6CDFCE5AB F5 cmc | |
| 00007FF6CDFCE5AC E9 00 00 00 00 jmp 0x7ff6cdfce5b1 | |
| 00007FF6CDFCE5B1 C1 C8 02 ror eax, 2 | |
| 00007FF6CDFCE5B4 FF C0 inc eax | |
| 00007FF6CDFCE5B6 E9 00 00 00 00 jmp 0x7ff6cdfce5bb | |
| 00007FF6CDFCE5BB 53 push rbx | |
| 00007FF6CDFCE5BC 31 04 24 xor dword ptr [rsp], eax | |
| 00007FF6CDFCE5BF 5B pop rbx | |
| 00007FF6CDFCE5C0 48 63 C0 movsxd rax, eax | |
| 00007FF6CDFCE5C3 E9 03 00 00 00 jmp 0x7ff6cdfce5cb | |
| 00007FF6CDFCE5CB 48 03 F8 add rdi, rax | |
| 00007FF6CDFCE5CE E9 00 00 00 00 jmp 0x7ff6cdfce5d3 | |
| 00007FF6CDFCE5D3 E9 3F 88 FF FF jmp 0x7ff6cdfc6e17 | |
| 00007FF6CDFC6E17 48 8D 84 24 40 lea rax, [rsp + 0x140] | |
| 00007FF6CDFC6E1F 48 3B E8 cmp rbp, rax | |
| 00007FF6CDFC6E22 0F 87 ED FF FF ja 0x7ff6cdfc6e15 | |
| 00007FF6CDFC6E15 57 push rdi | |
| 00007FF6CDFC6E16 C3 ret | |
| --- FINISHED TRACING HANDLER -- | |
| functionadd 00007FF6CDFC6C87, 00007FF6CDFC6E13 | |
| functionadd 00007FF6CDFC72E0, 00007FF6CDFC7367 | |
| functionadd 00007FF6CDFCC491, 00007FF6CDFCC532 | |
| functionadd 00007FF6CDFCC533, 00007FF6CDFCC5E1 | |
| functionadd 00007FF6CDFCC5E3, 00007FF6CDFCC68F | |
| functionadd 00007FF6CDFCC691, 00007FF6CDFCC720 | |
| functionadd 00007FF6CDFCC722, 00007FF6CDFCC7E1 | |
| functionadd 00007FF6CDFCC7E3, 00007FF6CDFCC881 | |
| functionadd 00007FF6CDFCC882, 00007FF6CDFCC90F | |
| functionadd 00007FF6CDFCC911, 00007FF6CDFCC9C1 | |
| functionadd 00007FF6CDFCC9C3, 00007FF6CDFCCA68 | |
| functionadd 00007FF6CDFCCA69, 00007FF6CDFCCB0E | |
| functionadd 00007FF6CDFC72E0, 00007FF6CDFC7367 | |
| functionadd 00007FF6CDFCC491, 00007FF6CDFCC532 | |
| functionadd 00007FF6CDFCC533, 00007FF6CDFCC5E1 | |
| functionadd 00007FF6CDFCC5E3, 00007FF6CDFCC68F | |
| functionadd 00007FF6CDFCC691, 00007FF6CDFCC720 | |
| functionadd 00007FF6CDFCC722, 00007FF6CDFCC7E1 | |
| functionadd 00007FF6CDFCC7E3, 00007FF6CDFCC881 | |
| functionadd 00007FF6CDFCC882, 00007FF6CDFCC90F | |
| functionadd 00007FF6CDFCE24C, Press any key to continue . . . | |
| [ScyllaHide] Reading NT API Information c:\Users\Admin\Documents\Visual Studio 2013\Projects\Denuject\bin\Debug\x64\ScyllaHide\NtApiCollection.ini | |
| [ScyllaHide] Hook Injection successful, Imagebase 00000058991C0000 | |
| 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFCAABF, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFD5F47, 00007FF6CDFD5FD0 | |
| functionadd 00007FF6CDFCC911, 00007FF6CDFCC9C1 | |
| functionadd 00007FF6CDFCC9C3, 00007FF6CDFCCA68 | |
| functionadd 00007FF6CDFD3F30, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFCCA69, 00007FF6CDFCCB0E | |
| functionadd 00007FF6CDFCAB64, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFC72E0, 00007FF6CDFC7367 | |
| functionadd 00007FF6CDFCAC05, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFCC491, 00007FF6CDFCC532 | |
| functionadd 00007FF6CDFCACB3, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFCC533, 00007FF6CDFCC5E1 | |
| functionadd 00007FF6CDFCAD5A, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFCC5E3, 00007FF6CDFCC68F | |
| functionadd 00007FF6CDFCADF1, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFC7E5A, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFCC691, 00007FF6CDFCC720 | |
| functionadd 00007FF6CDFD3B58, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFCE305, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFC8192, 00007FF6CDFC8214 | |
| functionadd 00007FF6CDFCC722, 00007FF6CDFCC7E1 | |
| functionadd 00007FF6CDFCC7E3, 00007FF6CDFCC881 | |
| functionadd 00007FF6CDFCE3D1, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFD3BB5, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFCE497, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFD5A91, 00007FF6CDFD5B19 | |
| functionadd 00007FF6CDFCC882, 00007FF6CDFCC90F | |
| functionadd 00007FF6CDFD3C21, 00007FF6CDFC6E16 | |
| functionadd 00007FF6CDFCE538, 00007FF6CDFC6E16 | |
| ---- TRACER ENDED ---- |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment