Skip to content

Instantly share code, notes, and snippets.

@vitallium
Last active March 20, 2016 17:20
Show Gist options
  • Save vitallium/367d8d2ba8b61882b6eb to your computer and use it in GitHub Desktop.
Save vitallium/367d8d2ba8b61882b6eb to your computer and use it in GitHub Desktop.
Disassembly for ?fastMalloc@WTF@@YAPAXI@Z (0x00000000`10BF66D0)
;********************************************************************************
; ?fastMalloc@WTF@@YAPAXI@Z (0x00000000`10BF66D0)
; Starting RVA: 00000000`00BF66D0
; Section: .text + 0x00BF56D0
; Export Symbol: ?fastMalloc@WTF@@YAPAXI@Z (715)
0x00000000`10BF66D0: 56 PUSH ESI
0x00000000`10BF66D1: FF742408 PUSH DWORD PTR [ESP+0x8]
0x00000000`10BF66D5: FF15BC33C010 CALL DWORD PTR DS:[MSVCR120.dll!malloc] ; (0x00000000`10C033BC)
0x00000000`10BF66DB: 8BF0 MOV ESI,EAX
0x00000000`10BF66DD: 83C404 ADD ESP,0x4
0x00000000`10BF66E0: 85F6 TEST ESI,ESI
0x00000000`10BF66E2: 7507 JNE 0x10BF66EB ; (*+0x0009)
;
0x00000000`10BF66E4: E8470E0000 CALL WTFCrash ; (0x00000000`10BF7530)
0x00000000`10BF66E9: 8BC6 MOV EAX,ESI
;
0x00000000`10BF66EB: 5E POP ESI ; <=== 0x00000000`10BF66E2
0x00000000`10BF66EC: C3 RET
;********************************************************************************
;
Disassembly for ?childFrames@QWebFrameAdapter@@QBE?AV?$QList@PAVQObject@@@@XZ (0x00000000`100112B0)
;********************************************************************************
; ?childFrames@QWebFrameAdapter@@QBE?AV?$QList@PAVQObject@@@@XZ (0x00000000`100112B0)
; Starting RVA: 00000000`000112B0
; Section: .text + 0x000102B0
; Export Symbol: ?childFrames@QWebFrameAdapter@@QBE?AV?$QList@PAVQObject@@@@XZ (421)
0x00000000`100112B0: A11440C010 MOV EAX,DWORD PTR [Qt5Core.dll!?shared_null@QListData@@2UData@1@B] ; (0x00000000`10C04014)
0x00000000`100112B5: 56 PUSH ESI
0x00000000`100112B6: 57 PUSH EDI
0x00000000`100112B7: 8B7C240C MOV EDI,DWORD PTR [ESP+0x0C]
0x00000000`100112BB: 8907 MOV DWORD PTR [EDI],EAX
0x00000000`100112BD: 8B7124 MOV ESI,DWORD PTR [ECX+0x24]
0x00000000`100112C0: 85F6 TEST ESI,ESI
0x00000000`100112C2: 744C JE 0x10011310 ; (*+0x004E)
;
0x00000000`100112C4: 8B7638 MOV ESI,DWORD PTR [ESI+0x38]
0x00000000`100112C7: 85F6 TEST ESI,ESI
0x00000000`100112C9: 7445 JE 0x10011310 ; (*+0x0047)
;
0x00000000`100112CB: 53 PUSH EBX
0x00000000`100112CC: 55 PUSH EBP
0x00000000`100112CD: 8B2D5040C010 MOV EBP,DWORD PTR DS:[Qt5Core.dll!?append@QListData@@QAEPAPAXXZ] ; (0x00000000`10C04050)
;
0x00000000`100112D3: 8D4E48 LEA ECX,[ESI+0x48] ; <=== 0x00000000`1001130C
0x00000000`100112D6: E895802900 CALL 0x102A9370 ; (.text + 0x2A8370)
0x00000000`100112DB: 8BC8 MOV ECX,EAX
0x00000000`100112DD: 8B10 MOV EDX,DWORD PTR [EAX]
0x00000000`100112DF: FF520C CALL DWORD PTR [EDX+0x0C]
0x00000000`100112E2: 8BD8 MOV EBX,EAX
0x00000000`100112E4: 8B07 MOV EAX,DWORD PTR [EDI]
0x00000000`100112E6: 8B00 MOV EAX,DWORD PTR [EAX]
0x00000000`100112E8: 83F801 CMP EAX,0x1
0x00000000`100112EB: 7414 JE 0x10011301 ; (*+0x0016)
;
0x00000000`100112ED: 85C0 TEST EAX,EAX
0x00000000`100112EF: 7410 JE 0x10011301 ; (*+0x0012)
;
0x00000000`100112F1: 6A01 PUSH 0x1
0x00000000`100112F3: 68FFFFFF7F PUSH 0x7FFFFFFF
0x00000000`100112F8: 8BCF MOV ECX,EDI
0x00000000`100112FA: E811030000 CALL 0x10011610 ; (.text + 0x10610)
0x00000000`100112FF: EB04 JMP 0x10011305 ; (*+0x0006)
;********************************************************************************
0x00000000`10011301: 8BCF MOV ECX,EDI ; <=== 0x00000000`100112EB ; <=== 0x00000000`100112EF
0x00000000`10011303: FFD5 CALL EBP
;
0x00000000`10011305: 8918 MOV DWORD PTR [EAX],EBX ; <=== 0x00000000`100112FF
0x00000000`10011307: 8B7630 MOV ESI,DWORD PTR [ESI+0x30]
0x00000000`1001130A: 85F6 TEST ESI,ESI
0x00000000`1001130C: 75C5 JNE 0x100112D3 ; (*-0x0039)
;
0x00000000`1001130E: 5D POP EBP
0x00000000`1001130F: 5B POP EBX
;
0x00000000`10011310: 8BC7 MOV EAX,EDI ; <=== 0x00000000`100112C2 ; <=== 0x00000000`100112C9
0x00000000`10011312: 5F POP EDI
0x00000000`10011313: 5E POP ESI
0x00000000`10011314: C20400 RET 0x4
;********************************************************************************
;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment