|
|
发表于 2023-9-28 22:47:05
|
查看: 1947 |
回复: 0
视频地址
https://www.douyin.com/user/self?modal_id=7283885879314189580
n从0 开始
[[[[B2.0+5D3B238]+0x560]+0x40]+0x758]+18+8 背包数组起始地址
[[[[B2.0+5D3B238]+0x560]+0x40]+0x758]+18+18 背包格子最大 WORD
[[[[B2.0+5D3B238]+0x560]+0x40]+0x758]+8 背包格子当前 WORD
[[[[[[B2.0+5D3B238]+0x560]+0x40]+0x758]+18+8]+n*8]+20 物品数量 DWROD
[[[[[[B2.0+5D3B238]+0x560]+0x40]+0x758]+18+8]+n*8]+8 背包物品位置 从1开始 BYTE
[[[[[[B2.0+5D3B238]+0x560]+0x40]+0x758]+18+8]+n*8]+10 背包物品名字ID QWORD
[[[[[[B2.0+5D3B238]+0x560]+0x40]+0x758]+18+8]+n*8]+18 背包物品系统ID 调CALL用 QWORD
[[[[[[B2.0+5D3B238]+0x560]+0x40]+0x758]+18+8]+n*8]+58 装备标志位 1为已装备 0为未装备BYTE
定位到头部
Address of signature = B2.exe + 0x013978D0
"\x4C\x8B\x00\x55\x57\x49\x8D\x00\x00\x00\x00\x00\x48\x81\xEC\x00\x00\x00\x00\x48\x8B\x00\x00\x00\x00\x00\x48\x33\x00\x48\x89\x00\x00\x00\x00\x00\x48\x8B\x00\x00\x00\x00\x00\x48\x8B\x00\x48\x85\x00\x0F\x84\x00\x00\x00\x00\x4D\x89", "xx??xxxx??????????xxx????????xx??????????xx??xx??????????xx??????????xx??xx??xx????????xx"
"4C 8B ?? 55 57 49 8D ?? ?? ?? ?? ?? 48 81 EC ?? ?? ?? ?? 48 8B ?? ?? ?? ?? ?? 48 33 ?? 48 89 ?? ?? ?? ?? ?? 48 8B ?? ?? ?? ?? ?? 48 8B ?? 48 85 ?? 0F 84 ?? ?? ?? ?? 4D 89"
Address of signature = B2.exe + 0x013978D0
"\x4C\x8B\x00\x55\x57\x49\x8D\x00\x00\x00\x00\x00\x48\x81\xEC\x00\x00\x00\x00\x48\x8B\x00\x00\x00\x00\x00\x48\x33\x00\x48\x89\x00\x00\x00\x00\x00\x48\x8B\x00\x00\x00\x00\x00\x48\x8B\x00\x48\x85\x00\x0F\x84\x00\x00\x00\x00\x4D\x89", "xx?xxxx?????xxx????xx?????xx?xx?????xx?????xx?xx?xx????xx"
"4C 8B ? 55 57 49 8D ? ? ? ? ? 48 81 EC ? ? ? ? 48 8B ? ? ? ? ? 48 33 ? 48 89 ? ? ? ? ? 48 8B ? ? ? ? ? 48 8B ? 48 85 ? 0F 84 ? ? ? ? 4D 89"
Address of signature = B2.exe + 0x013978EA
"\x48\x33\x00\x48\x89\x00\x00\x00\x00\x00\x48\x8B\x00\x00\x00\x00\x00\x48\x8B\x00\x48\x85\x00\x0F\x84\x00\x00\x00\x00\x4D\x89", "xx?xx?????xx?????xx?xx?xx????xx"
"48 33 ? 48 89 ? ? ? ? ? 48 8B ? ? ? ? ? 48 8B ? 48 85 ? 0F 84 ? ? ? ? 4D 89"
上面都是头部位置的定位特征
00007FF769EA78D0 | 4C:8BDC | mov r11,rsp |
00007FF769EA78D3 | 55 | push rbp |
00007FF769EA78D4 | 57 | push rdi |
00007FF769EA78D5 | 49:8DAB 38FBFFFF | lea rbp,qword ptr ds:[r11-0x4C8] |
00007FF769EA78DC | 48:81EC B8050000 | sub rsp,0x5B8 |
00007FF769EA78E3 | 48:8B05 EE107C04 | mov rax,qword ptr ds:[0x7FF76E6689D8] |
00007FF769EA78EA | 48:33C4 | xor rax,rsp |
00007FF769EA78ED | 48:8985 80040000 | mov qword ptr ss:[rbp+0x480],rax |
00007FF769EA78F4 | 48:8B05 3D399A04 | mov rax,qword ptr ds:[0x7FF76E84B238] | [[[[[[B2.0+5D3B238]+0x560]+0x40]+0x758] + 0x18 +0x8]+ N *8-0x8]
00007FF769EA78FB | 48:8BF9 | mov rdi,rcx |
00007FF769EA78FE | 48:85C0 | test rax,rax |
00007FF769EA7901 | 0F84 301B0000 | je b2.7FF769EA9437 |
00007FF769EA7907 | 4D:897B D8 | mov qword ptr ds:[r11-0x28],r15 |
00007FF769EA790B | 4C:8BB8 E8040000 | mov r15,qword ptr ds:[rax+0x4E8] |
00007FF769EA7912 | 4D:85FF | test r15,r15 |
00007FF769EA7915 | 0F84 141B0000 | je b2.7FF769EA942F |
00007FF769EA791B | 48:8B88 60050000 | mov rcx,qword ptr ds:[rax+0x560] | [[[[[rax+0x560]+0x40]+0x758] + 0x18 +0x8]+ N *8-0x8]
00007FF769EA7922 | 49:8973 18 | mov qword ptr ds:[r11+0x18],rsi |
00007FF769EA7926 | 48:8BB0 68050000 | mov rsi,qword ptr ds:[rax+0x568] |
00007FF769EA792D | 4D:8973 E0 | mov qword ptr ds:[r11-0x20],r14 |
00007FF769EA7931 | 48:897424 40 | mov qword ptr ss:[rsp+0x40],rsi |
00007FF769EA7936 | 48:85F6 | test rsi,rsi |
00007FF769EA7939 | 74 03 | je b2.7FF769EA793E |
00007FF769EA793B | FF46 08 | inc dword ptr ds:[rsi+0x8] |
00007FF769EA793E | 41:BE 01000000 | mov r14d,0x1 |
00007FF769EA7944 | 48:85C9 | test rcx,rcx |
00007FF769EA7947 | 0F84 AD1A0000 | je b2.7FF769EA93FA |
00007FF769EA794D | 48:8B41 48 | mov rax,qword ptr ds:[rcx+0x48] |
00007FF769EA7951 | 48:899C24 D8050000 | mov qword ptr ss:[rsp+0x5D8],rbx |
00007FF769EA7959 | 48:8B59 40 | mov rbx,qword ptr ds:[rcx+0x40] | [[[[rcx+0x40]+0x758] + 0x18 +0x8]+ N *8-0x8]
00007FF769EA795D | 48:895D B0 | mov qword ptr ss:[rbp-0x50],rbx |
00007FF769EA7961 | 48:8945 B8 | mov qword ptr ss:[rbp-0x48],rax |
00007FF769EA7965 | 48:85C0 | test rax,rax |
00007FF769EA7968 | 74 03 | je b2.7FF769EA796D |
00007FF769EA796A | FF40 08 | inc dword ptr ds:[rax+0x8] |
00007FF769EA796D | 48:85DB | test rbx,rbx |
00007FF769EA7970 | 0F84 731A0000 | je b2.7FF769EA93E9 |
00007FF769EA7976 | 48:8B05 23469A04 | mov rax,qword ptr ds:[0x7FF76E84BFA0] |
00007FF769EA797D | 48:85C0 | test rax,rax |
00007FF769EA7980 | 0F84 631A0000 | je b2.7FF769EA93E9 |
00007FF769EA7986 | 48:83C0 38 | add rax,0x38 |
00007FF769EA798A | 0F84 591A0000 | je b2.7FF769EA93E9 |
00007FF769EA7990 | 48:8D5424 70 | lea rdx,qword ptr ss:[rsp+0x70] |
00007FF769EA7995 | E8 C69477FF | call b2.7FF769620E60 |
00007FF769EA799A | 48:837C24 70 00 | cmp qword ptr ss:[rsp+0x70],0x0 |
00007FF769EA79A0 | 0F84 391A0000 | je b2.7FF769EA93DF |
00007FF769EA79A6 | 48:8B83 60070000 | mov rax,qword ptr ds:[rbx+0x760] |
00007FF769EA79AD | 4C:89A424 E8050000 | mov qword ptr ss:[rsp+0x5E8],r12 |
00007FF769EA79B5 | 4C:8BA3 58070000 | mov r12,qword ptr ds:[rbx+0x758] | [[[rbx+0x758] + 0x18 +0x8]+ N *8-0x8]
00007FF769EA79BC | 4C:8965 A0 | mov qword ptr ss:[rbp-0x60],r12 |
00007FF769EA79C0 | 48:8945 A8 | mov qword ptr ss:[rbp-0x58],rax |
00007FF769EA79C4 | 48:85C0 | test rax,rax |
00007FF769EA79C7 | 74 03 | je b2.7FF769EA79CC |
00007FF769EA79C9 | FF40 08 | inc dword ptr ds:[rax+0x8] |
00007FF769EA79CC | 4D:85E4 | test r12,r12 |
00007FF769EA79CF | 0F84 F9190000 | je b2.7FF769EA93CE |
00007FF769EA79D5 | 48:8B83 F0060000 | mov rax,qword ptr ds:[rbx+0x6F0] |
00007FF769EA79DC | 4C:89AC24 B0050000 | mov qword ptr ss:[rsp+0x5B0],r13 |
00007FF769EA79E4 | 4C:8BAB E8060000 | mov r13,qword ptr ds:[rbx+0x6E8] |
00007FF769EA79EB | 4C:896C24 58 | mov qword ptr ss:[rsp+0x58],r13 |
00007FF769EA79F0 | 4C:896D 90 | mov qword ptr ss:[rbp-0x70],r13 |
00007FF769EA79F4 | 48:8945 98 | mov qword ptr ss:[rbp-0x68],rax |
00007FF769EA79F8 | 48:85C0 | test rax,rax |
00007FF769EA79FB | 74 03 | je b2.7FF769EA7A00 |
00007FF769EA79FD | FF40 08 | inc dword ptr ds:[rax+0x8] |
00007FF769EA7A00 | 4D:85ED | test r13,r13 |
00007FF769EA7A03 | 0F84 B4190000 | je b2.7FF769EA93BD |
00007FF769EA7A09 | 48:8B83 D8100000 | mov rax,qword ptr ds:[rbx+0x10D8] |
00007FF769EA7A10 | 48:8B8B D0100000 | mov rcx,qword ptr ds:[rbx+0x10D0] |
00007FF769EA7A17 | 48:894D 80 | mov qword ptr ss:[rbp-0x80],rcx |
00007FF769EA7A1B | 48:8945 88 | mov qword ptr ss:[rbp-0x78],rax |
00007FF769EA7A1F | 48:85C0 | test rax,rax |
00007FF769EA7A22 | 74 03 | je b2.7FF769EA7A27 |
00007FF769EA7A24 | FF40 08 | inc dword ptr ds:[rax+0x8] |
00007FF769EA7A27 | 48:85C9 | test rcx,rcx |
00007FF769EA7A2A | 0F84 84190000 | je b2.7FF769EA93B4 |
00007FF769EA7A30 | 48:837F 08 00 | cmp qword ptr ds:[rdi+0x8],0x0 |
00007FF769EA7A35 | 0F84 79190000 | je b2.7FF769EA93B4 |
00007FF769EA7A3B | 48:8B47 10 | mov rax,qword ptr ds:[rdi+0x10] |
00007FF769EA7A3F | 48:85C0 | test rax,rax |
00007FF769EA7A42 | 0F84 6C190000 | je b2.7FF769EA93B4 |
00007FF769EA7A48 | 8378 08 00 | cmp dword ptr ds:[rax+0x8],0x0 |
00007FF769EA7A4C | 0F8E 62190000 | jle b2.7FF769EA93B4 |
00007FF769EA7A52 | 48:837F 18 00 | cmp qword ptr ds:[rdi+0x18],0x0 |
00007FF769EA7A57 | 0F84 57190000 | je b2.7FF769EA93B4 |
00007FF769EA7A5D | 48:8B47 20 | mov rax,qword ptr ds:[rdi+0x20] |
00007FF769EA7A61 | 48:85C0 | test rax,rax |
00007FF769EA7A64 | 0F84 4A190000 | je b2.7FF769EA93B4 |
00007FF769EA7A6A | 8378 08 00 | cmp dword ptr ds:[rax+0x8],0x0 |
00007FF769EA7A6E | 0F8E 40190000 | jle b2.7FF769EA93B4 |
00007FF769EA7A74 | 48:837F 28 00 | cmp qword ptr ds:[rdi+0x28],0x0 |
00007FF769EA7A79 | 0F84 35190000 | je b2.7FF769EA93B4 |
00007FF769EA7A7F | 48:8B47 30 | mov rax,qword ptr ds:[rdi+0x30] |
00007FF769EA7A83 | 48:85C0 | test rax,rax |
00007FF769EA7A86 | 0F84 28190000 | je b2.7FF769EA93B4 |
00007FF769EA7A8C | 8378 08 00 | cmp dword ptr ds:[rax+0x8],0x0 |
00007FF769EA7A90 | 0F8E 1E190000 | jle b2.7FF769EA93B4 |
00007FF769EA7A96 | 48:837F 48 00 | cmp qword ptr ds:[rdi+0x48],0x0 |
00007FF769EA7A9B | 0F84 13190000 | je b2.7FF769EA93B4 |
00007FF769EA7AA1 | 48:8B47 50 | mov rax,qword ptr ds:[rdi+0x50] |
00007FF769EA7AA5 | 48:85C0 | test rax,rax |
00007FF769EA7AA8 | 0F84 06190000 | je b2.7FF769EA93B4 |
00007FF769EA7AAE | 8378 08 00 | cmp dword ptr ds:[rax+0x8],0x0 |
00007FF769EA7AB2 | 0F8E FC180000 | jle b2.7FF769EA93B4 |
00007FF769EA7AB8 | 48:837F 38 00 | cmp qword ptr ds:[rdi+0x38],0x0 |
00007FF769EA7ABD | 0F84 F1180000 | je b2.7FF769EA93B4 |
00007FF769EA7AC3 | 48:8B47 40 | mov rax,qword ptr ds:[rdi+0x40] |
00007FF769EA7AC7 | 48:85C0 | test rax,rax |
00007FF769EA7ACA | 0F84 E4180000 | je b2.7FF769EA93B4 |
00007FF769EA7AD0 | 8378 08 00 | cmp dword ptr ds:[rax+0x8],0x0 |
00007FF769EA7AD4 | 0F8E DA180000 | jle b2.7FF769EA93B4 |
00007FF769EA7ADA | 33F6 | xor esi,esi |
00007FF769EA7ADC | 48:39B7 B8000000 | cmp qword ptr ds:[rdi+0xB8],rsi |
00007FF769EA7AE3 | 0F84 A2000000 | je b2.7FF769EA7B8B |
00007FF769EA7AE9 | 48:8B9F C0000000 | mov rbx,qword ptr ds:[rdi+0xC0] |
00007FF769EA7AF0 | 48:85DB | test rbx,rbx |
00007FF769EA7AF3 | 0F84 92000000 | je b2.7FF769EA7B8B |
00007FF769EA7AF9 | 8B4B 08 | mov ecx,dword ptr ds:[rbx+0x8] |
00007FF769EA7AFC | 85C9 | test ecx,ecx |
00007FF769EA7AFE | 0F8E 87000000 | jle b2.7FF769EA7B8B |
00007FF769EA7B04 | 44:0FB637 | movzx r14d,byte ptr ds:[rdi] |
00007FF769EA7B08 | B8 CDCCCCCC | mov eax,0xCCCCCCCD |
00007FF769EA7B0D | 41:FFC6 | inc r14d |
00007FF769EA7B10 | 41:F7E6 | mul r14d |
00007FF769EA7B13 | C1EA 03 | shr edx,0x3 |
00007FF769EA7B16 | 8D0492 | lea eax,qword ptr ds:[rdx+rdx*4] |
00007FF769EA7B19 | 03C0 | add eax,eax |
00007FF769EA7B1B | 44:2BF0 | sub r14d,eax |
00007FF769EA7B1E | 44:3AB7 79030000 | cmp r14b,byte ptr ds:[rdi+0x379] |
00007FF769EA7B25 | 74 64 | je b2.7FF769EA7B8B |
00007FF769EA7B27 | 44:8BC6 | mov r8d,esi |
00007FF769EA7B2A | 48:85DB | test rbx,rbx |
00007FF769EA7B2D | 74 22 | je b2.7FF769EA7B51 |
00007FF769EA7B2F | 85C9 | test ecx,ecx |
00007FF769EA7B31 | 75 04 | jne b2.7FF769EA7B37 |
00007FF769EA7B33 | 32C0 | xor al,al |
00007FF769EA7B35 | EB 08 | jmp b2.7FF769EA7B3F |
00007FF769EA7B37 | 8D41 01 | lea eax,qword ptr ds:[rcx+0x1] |
00007FF769EA7B3A | 8943 08 | mov dword ptr ds:[rbx+0x8],eax |
00007FF769EA7B3D | B0 01 | mov al,0x1 |
00007FF769EA7B3F | 84C0 | test al,al |
00007FF769EA7B41 | 48:0F44DE | cmove rbx,rsi |
00007FF769EA7B45 | 48:85DB | test rbx,rbx |
00007FF769EA7B48 | 74 07 | je b2.7FF769EA7B51 |
00007FF769EA7B4A | 4C:8B87 B8000000 | mov r8,qword ptr ds:[rdi+0xB8] |
00007FF769EA7B51 | 41:0FBED6 | movsx edx,r14b |
00007FF769EA7B55 | 49:8BC8 | mov rcx,r8 |
00007FF769EA7B58 | E8 33A42600 | call b2.7FF76A111F90 |
00007FF769EA7B5D | 48:85DB | test rbx,rbx |
00007FF769EA7B60 | 74 22 | je b2.7FF769EA7B84 |
00007FF769EA7B62 | 836B 08 01 | sub dword ptr ds:[rbx+0x8],0x1 |
00007FF769EA7B66 | 75 1C | jne b2.7FF769EA7B84 |
00007FF769EA7B68 | 48:8B03 | mov rax,qword ptr ds:[rbx] |
00007FF769EA7B6B | 48:8BCB | mov rcx,rbx |
00007FF769EA7B6E | FF10 | call qword ptr ds:[rax] |
00007FF769EA7B70 | 836B 0C 01 | sub dword ptr ds:[rbx+0xC],0x1 |
00007FF769EA7B74 | 75 0E | jne b2.7FF769EA7B84 |
00007FF769EA7B76 | 48:8B03 | mov rax,qword ptr ds:[rbx] |
00007FF769EA7B79 | BA 01000000 | mov edx,0x1 |
00007FF769EA7B7E | 48:8BCB | mov rcx,rbx |
00007FF769EA7B81 | FF50 08 | call qword ptr ds:[rax+0x8] |
00007FF769EA7B84 | 44:88B7 79030000 | mov byte ptr ds:[rdi+0x379],r14b |
00007FF769EA7B8B | 48:8B1D A6369A04 | mov rbx,qword ptr ds:[0x7FF76E84B238] |
00007FF769EA7B92 | 48:85DB | test rbx,rbx |
00007FF769EA7B95 | 74 18 | je b2.7FF769EA7BAF |
00007FF769EA7B97 | 4C:8BB3 60050000 | mov r14,qword ptr ds:[rbx+0x560] |
00007FF769EA7B9E | 48:8B9B 68050000 | mov rbx,qword ptr ds:[rbx+0x568] |
00007FF769EA7BA5 | 48:85DB | test rbx,rbx |
00007FF769EA7BA8 | 74 0B | je b2.7FF769EA7BB5 |
00007FF769EA7BAA | FF43 08 | inc dword ptr ds:[rbx+0x8] |
00007FF769EA7BAD | EB 06 | jmp b2.7FF769EA7BB5 |
00007FF769EA7BAF | 48:8BDE | mov rbx,rsi |
00007FF769EA7BB2 | 4C:8BF6 | mov r14,rsi |
00007FF769EA7BB5 | 49:8B4E 40 | mov rcx,qword ptr ds:[r14+0x40] |
00007FF769EA7BB9 | 4D:8B76 48 | mov r14,qword ptr ds:[r14+0x48] |
00007FF769EA7BBD | 4D:85F6 | test r14,r14 |
00007FF769EA7BC0 | 74 04 | je b2.7FF769EA7BC6 |
00007FF769EA7BC2 | 41:FF46 08 | inc dword ptr ds:[r14+0x8] |
00007FF769EA7BC6 | 44:0FB607 | movzx r8d,byte ptr ds:[rdi] |
00007FF769EA7BCA | 48:8D55 10 | lea rdx,qword ptr ss:[rbp+0x10] |
00007FF769EA7BCE | E8 DD188FFF | call b2.7FF7697994B0 |
00007FF769EA7BD3 | 4D:85F6 | test r14,r14 |
00007FF769EA7BD6 | 74 24 | je b2.7FF769EA7BFC |
00007FF769EA7BD8 | 41:836E 08 01 | sub dword ptr ds:[r14+0x8],0x1 |
00007FF769EA7BDD | 75 1D | jne b2.7FF769EA7BFC |
00007FF769EA7BDF | 49:8B06 | mov rax,qword ptr ds:[r14] |
00007FF769EA7BE2 | 49:8BCE | mov rcx,r14 |
00007FF769EA7BE5 | FF10 | call qword ptr ds:[rax] |
00007FF769EA7BE7 | 41:836E 0C 01 | sub dword ptr ds:[r14+0xC],0x1 |
00007FF769EA7BEC | 75 0E | jne b2.7FF769EA7BFC |
00007FF769EA7BEE | 49:8B06 | mov rax,qword ptr ds:[r14] |
00007FF769EA7BF1 | BA 01000000 | mov edx,0x1 |
00007FF769EA7BF6 | 49:8BCE | mov rcx,r14 |
00007FF769EA7BF9 | FF50 08 | call qword ptr ds:[rax+0x8] |
......
在同一个CALL里中间没用挺长 就忽略了
......
00007FF769EA84C9 | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA84CE | 48:8BCE | mov rcx,rsi |
00007FF769EA84D1 | 4C:8BC6 | mov r8,rsi |
00007FF769EA84D4 | 48:85C9 | test rcx,rcx |
00007FF769EA84D7 | 74 09 | je b2.7FF769EA84E2 |
00007FF769EA84D9 | 4C:8B47 38 | mov r8,qword ptr ds:[rdi+0x38] |
00007FF769EA84DD | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA84E2 | 49:8B00 | mov rax,qword ptr ds:[r8] |
00007FF769EA84E5 | B2 04 | mov dl,0x4 |
00007FF769EA84E7 | 49:8BC8 | mov rcx,r8 |
00007FF769EA84EA | FF50 10 | call qword ptr ds:[rax+0x10] |
00007FF769EA84ED | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA84F2 | E8 59BD2DFF | call b2.7FF769184250 |
00007FF769EA84F7 | 48:8B4F 50 | mov rcx,qword ptr ds:[rdi+0x50] |
00007FF769EA84FB | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA8500 | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA8505 | 48:85C9 | test rcx,rcx |
00007FF769EA8508 | 74 16 | je b2.7FF769EA8520 |
00007FF769EA850A | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA850D | 85C0 | test eax,eax |
00007FF769EA850F | 74 07 | je b2.7FF769EA8518 |
00007FF769EA8511 | FFC0 | inc eax |
00007FF769EA8513 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA8516 | EB 08 | jmp b2.7FF769EA8520 |
00007FF769EA8518 | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA851D | 48:8BCE | mov rcx,rsi |
00007FF769EA8520 | 4C:8BC6 | mov r8,rsi |
00007FF769EA8523 | 48:85C9 | test rcx,rcx |
00007FF769EA8526 | 74 09 | je b2.7FF769EA8531 |
00007FF769EA8528 | 4C:8B47 48 | mov r8,qword ptr ds:[rdi+0x48] |
00007FF769EA852C | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA8531 | 49:8B00 | mov rax,qword ptr ds:[r8] |
00007FF769EA8534 | B2 04 | mov dl,0x4 |
00007FF769EA8536 | 49:8BC8 | mov rcx,r8 |
00007FF769EA8539 | FF50 10 | call qword ptr ds:[rax+0x10] |
00007FF769EA853C | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA8541 | E8 0ABD2DFF | call b2.7FF769184250 |
00007FF769EA8546 | 48:8B4F 10 | mov rcx,qword ptr ds:[rdi+0x10] |
00007FF769EA854A | 4C:8BC6 | mov r8,rsi |
00007FF769EA854D | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA8552 | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA8557 | 48:85C9 | test rcx,rcx |
00007FF769EA855A | 74 1E | je b2.7FF769EA857A |
00007FF769EA855C | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA855F | 85C0 | test eax,eax |
00007FF769EA8561 | 0F84 48010000 | je b2.7FF769EA86AF |
00007FF769EA8567 | FFC0 | inc eax |
00007FF769EA8569 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA856C | 48:85C9 | test rcx,rcx |
00007FF769EA856F | 74 09 | je b2.7FF769EA857A |
00007FF769EA8571 | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA8575 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA857A | 48:8B15 D7349C04 | mov rdx,qword ptr ds:[0x7FF76E86BA58] |
00007FF769EA8581 | 49:8BC8 | mov rcx,r8 |
00007FF769EA8584 | E8 371B2400 | call b2.7FF76A0EA0C0 |
00007FF769EA8589 | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA858E | E8 BDBC2DFF | call b2.7FF769184250 |
00007FF769EA8593 | 48:8B4F 10 | mov rcx,qword ptr ds:[rdi+0x10] |
00007FF769EA8597 | 4C:8BC6 | mov r8,rsi |
00007FF769EA859A | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA859F | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA85A4 | 48:85C9 | test rcx,rcx |
00007FF769EA85A7 | 74 1E | je b2.7FF769EA85C7 |
00007FF769EA85A9 | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA85AC | 85C0 | test eax,eax |
00007FF769EA85AE | 0F84 05010000 | je b2.7FF769EA86B9 |
00007FF769EA85B4 | FFC0 | inc eax |
00007FF769EA85B6 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA85B9 | 48:85C9 | test rcx,rcx |
00007FF769EA85BC | 74 09 | je b2.7FF769EA85C7 |
00007FF769EA85BE | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA85C2 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA85C7 | 48:8B15 A2349C04 | mov rdx,qword ptr ds:[0x7FF76E86BA70] |
00007FF769EA85CE | 49:8BC8 | mov rcx,r8 |
00007FF769EA85D1 | E8 EA1A2400 | call b2.7FF76A0EA0C0 |
00007FF769EA85D6 | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA85DB | E8 70BC2DFF | call b2.7FF769184250 |
00007FF769EA85E0 | 48:8B4D 18 | mov rcx,qword ptr ss:[rbp+0x18] |
00007FF769EA85E4 | 0FB645 10 | movzx eax,byte ptr ss:[rbp+0x10] |
00007FF769EA85E8 | 898F 08010000 | mov dword ptr ds:[rdi+0x108],ecx |
00007FF769EA85EE | 8887 47030000 | mov byte ptr ds:[rdi+0x347],al |
00007FF769EA85F4 | 40:88B7 46030000 | mov byte ptr ds:[rdi+0x346],sil |
00007FF769EA85FB | 66:89B7 40030000 | mov word ptr ds:[rdi+0x340],si |
00007FF769EA8602 | C687 78030000 FF | mov byte ptr ds:[rdi+0x378],0xFF |
00007FF769EA8609 | 48:C787 7C030000 FFFFFFFF | mov qword ptr ds:[rdi+0x37C],0xFFFFFFFFF |
00007FF769EA8614 | E8 07B486FF | call b2.7FF769713A20 |
00007FF769EA8619 | 84C0 | test al,al |
00007FF769EA861B | 74 4D | je b2.7FF769EA866A |
00007FF769EA861D | 48:8B4F 10 | mov rcx,qword ptr ds:[rdi+0x10] |
00007FF769EA8621 | 4C:8BC6 | mov r8,rsi |
00007FF769EA8624 | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA8629 | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA862E | 48:85C9 | test rcx,rcx |
00007FF769EA8631 | 74 1E | je b2.7FF769EA8651 |
00007FF769EA8633 | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA8636 | 85C0 | test eax,eax |
00007FF769EA8638 | 0F84 85000000 | je b2.7FF769EA86C3 |
00007FF769EA863E | FFC0 | inc eax |
00007FF769EA8640 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA8643 | 48:85C9 | test rcx,rcx |
00007FF769EA8646 | 74 09 | je b2.7FF769EA8651 |
00007FF769EA8648 | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA864C | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA8651 | 48:8B15 F8339C04 | mov rdx,qword ptr ds:[0x7FF76E86BA50] |
00007FF769EA8658 | 49:8BC8 | mov rcx,r8 |
00007FF769EA865B | E8 601A2400 | call b2.7FF76A0EA0C0 |
00007FF769EA8660 | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA8665 | E8 E6BB2DFF | call b2.7FF769184250 |
00007FF769EA866A | 8B4D 18 | mov ecx,dword ptr ss:[rbp+0x18] |
00007FF769EA866D | E8 3EB386FF | call b2.7FF7697139B0 |
00007FF769EA8672 | 48:8B4F 10 | mov rcx,qword ptr ds:[rdi+0x10] |
00007FF769EA8676 | 4C:8BC6 | mov r8,rsi |
00007FF769EA8679 | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA867E | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA8683 | 84C0 | test al,al |
00007FF769EA8685 | 74 51 | je b2.7FF769EA86D8 |
00007FF769EA8687 | 48:85C9 | test rcx,rcx |
00007FF769EA868A | 74 1A | je b2.7FF769EA86A6 |
00007FF769EA868C | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA868F | 85C0 | test eax,eax |
00007FF769EA8691 | 74 37 | je b2.7FF769EA86CA |
00007FF769EA8693 | FFC0 | inc eax |
00007FF769EA8695 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA8698 | 48:85C9 | test rcx,rcx |
00007FF769EA869B | 74 09 | je b2.7FF769EA86A6 |
00007FF769EA869D | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA86A1 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA86A6 | 48:8B15 CB339C04 | mov rdx,qword ptr ds:[0x7FF76E86BA78] |
00007FF769EA86AD | EB 53 | jmp b2.7FF769EA8702 |
00007FF769EA86AF | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA86B4 | E9 C1FEFFFF | jmp b2.7FF769EA857A |
00007FF769EA86B9 | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA86BE | E9 04FFFFFF | jmp b2.7FF769EA85C7 |
00007FF769EA86C3 | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA86C8 | EB 87 | jmp b2.7FF769EA8651 |
00007FF769EA86CA | 48:8B15 A7339C04 | mov rdx,qword ptr ds:[0x7FF76E86BA78] |
00007FF769EA86D1 | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA86D6 | EB 2A | jmp b2.7FF769EA8702 |
00007FF769EA86D8 | 48:85C9 | test rcx,rcx |
00007FF769EA86DB | 74 1E | je b2.7FF769EA86FB |
00007FF769EA86DD | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA86E0 | 85C0 | test eax,eax |
00007FF769EA86E2 | 0F84 80000000 | je b2.7FF769EA8768 |
00007FF769EA86E8 | FFC0 | inc eax |
00007FF769EA86EA | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA86ED | 48:85C9 | test rcx,rcx |
00007FF769EA86F0 | 74 09 | je b2.7FF769EA86FB |
00007FF769EA86F2 | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA86F6 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA86FB | 48:8B15 7E339C04 | mov rdx,qword ptr ds:[0x7FF76E86BA80] |
00007FF769EA8702 | 49:8BC8 | mov rcx,r8 |
00007FF769EA8705 | E8 B6192400 | call b2.7FF76A0EA0C0 |
00007FF769EA870A | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA870F | E8 3CBB2DFF | call b2.7FF769184250 |
00007FF769EA8714 | 48:8B55 18 | mov rdx,qword ptr ss:[rbp+0x18] |
00007FF769EA8718 | 49:8BCC | mov rcx,r12 |
00007FF769EA871B | E8 20EC68FF | call b2.7FF769537340 | [[rcx + 0x18 +0x8]+ N *8-0x8]
00007FF769EA8720 | 48:8BD8 | mov rbx,rax |
00007FF769EA8723 | 48:85C0 | test rax,rax |
00007FF769EA8726 | 0F85 3B030000 | jne b2.7FF769EA8A67 |
00007FF769EA872C | 39B7 80030000 | cmp dword ptr ds:[rdi+0x380],esi |
00007FF769EA8732 | 0F84 770C0000 | je b2.7FF769EA93AF |
00007FF769EA8738 | 48:3977 48 | cmp qword ptr ds:[rdi+0x48],rsi |
00007FF769EA873C | 74 5F | je b2.7FF769EA879D |
00007FF769EA873E | 48:8B4F 50 | mov rcx,qword ptr ds:[rdi+0x50] |
00007FF769EA8742 | 48:85C9 | test rcx,rcx |
00007FF769EA8745 | 74 56 | je b2.7FF769EA879D |
00007FF769EA8747 | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA874A | 85C0 | test eax,eax |
00007FF769EA874C | 7E 4F | jle b2.7FF769EA879D |
00007FF769EA874E | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA8753 | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA8758 | 48:85C9 | test rcx,rcx |
00007FF769EA875B | 74 1A | je b2.7FF769EA8777 |
00007FF769EA875D | 85C0 | test eax,eax |
00007FF769EA875F | 74 0E | je b2.7FF769EA876F |
00007FF769EA8761 | FFC0 | inc eax |
00007FF769EA8763 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA8766 | EB 0F | jmp b2.7FF769EA8777 |
00007FF769EA8768 | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA876D | EB 8C | jmp b2.7FF769EA86FB |
00007FF769EA876F | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA8774 | 48:8BCE | mov rcx,rsi |
00007FF769EA8777 | 4C:8BC6 | mov r8,rsi |
00007FF769EA877A | 48:85C9 | test rcx,rcx |
00007FF769EA877D | 74 09 | je b2.7FF769EA8788 |
00007FF769EA877F | 4C:8B47 48 | mov r8,qword ptr ds:[rdi+0x48] |
00007FF769EA8783 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA8788 | 49:8B00 | mov rax,qword ptr ds:[r8] |
00007FF769EA878B | B2 04 | mov dl,0x4 |
00007FF769EA878D | 49:8BC8 | mov rcx,r8 |
00007FF769EA8790 | FF50 10 | call qword ptr ds:[rax+0x10] |
00007FF769EA8793 | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA8798 | E8 B3BA2DFF | call b2.7FF769184250 |
00007FF769EA879D | 48:3977 38 | cmp qword ptr ds:[rdi+0x38],rsi |
00007FF769EA87A1 | 74 58 | je b2.7FF769EA87FB |
00007FF769EA87A3 | 48:8B4F 40 | mov rcx,qword ptr ds:[rdi+0x40] |
00007FF769EA87A7 | 48:85C9 | test rcx,rcx |
00007FF769EA87AA | 74 4F | je b2.7FF769EA87FB |
00007FF769EA87AC | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA87AF | 85C0 | test eax,eax |
00007FF769EA87B1 | 7E 48 | jle b2.7FF769EA87FB |
00007FF769EA87B3 | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA87B8 | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA87BD | 48:85C9 | test rcx,rcx |
00007FF769EA87C0 | 74 13 | je b2.7FF769EA87D5 |
00007FF769EA87C2 | 85C0 | test eax,eax |
00007FF769EA87C4 | 74 07 | je b2.7FF769EA87CD |
00007FF769EA87C6 | FFC0 | inc eax |
00007FF769EA87C8 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA87CB | EB 08 | jmp b2.7FF769EA87D5 |
00007FF769EA87CD | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA87D2 | 48:8BCE | mov rcx,rsi |
00007FF769EA87D5 | 4C:8BC6 | mov r8,rsi |
00007FF769EA87D8 | 48:85C9 | test rcx,rcx |
00007FF769EA87DB | 74 09 | je b2.7FF769EA87E6 |
00007FF769EA87DD | 4C:8B47 38 | mov r8,qword ptr ds:[rdi+0x38] |
00007FF769EA87E1 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA87E6 | 49:8B00 | mov rax,qword ptr ds:[r8] |
00007FF769EA87E9 | B2 04 | mov dl,0x4 |
00007FF769EA87EB | 49:8BC8 | mov rcx,r8 |
00007FF769EA87EE | FF50 10 | call qword ptr ds:[rax+0x10] |
00007FF769EA87F1 | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA87F6 | E8 55BA2DFF | call b2.7FF769184250 |
00007FF769EA87FB | 48:8B55 18 | mov rdx,qword ptr ss:[rbp+0x18] |
00007FF769EA87FF | 48:85D2 | test rdx,rdx |
00007FF769EA8802 | 0F8E 04020000 | jle b2.7FF769EA8A0C |
00007FF769EA8808 | 48:8D4D C0 | lea rcx,qword ptr ss:[rbp-0x40] |
00007FF769EA880C | E8 BF36E2FF | call b2.7FF769CCBED0 |
00007FF769EA8811 | 48:3977 28 | cmp qword ptr ds:[rdi+0x28],rsi |
00007FF769EA8815 | 0F84 B7000000 | je b2.7FF769EA88D2 |
00007FF769EA881B | 48:8B47 30 | mov rax,qword ptr ds:[rdi+0x30] |
00007FF769EA881F | 48:85C0 | test rax,rax |
00007FF769EA8822 | 0F84 AA000000 | je b2.7FF769EA88D2 |
00007FF769EA8828 | 3970 08 | cmp dword ptr ds:[rax+0x8],esi |
00007FF769EA882B | 0F8E A1000000 | jle b2.7FF769EA88D2 |
00007FF769EA8831 | 48:8D8F 60030000 | lea rcx,qword ptr ds:[rdi+0x360] |
00007FF769EA8838 | 48:8D55 D0 | lea rdx,qword ptr ss:[rbp-0x30] |
00007FF769EA883C | E8 CF04B500 | call b2.7FF76A9F8D10 |
00007FF769EA8841 | 84C0 | test al,al |
00007FF769EA8843 | 0F85 89000000 | jne b2.7FF769EA88D2 |
00007FF769EA8849 | 48:8B45 C0 | mov rax,qword ptr ss:[rbp-0x40] |
00007FF769EA884D | 48:8D8F 68030000 | lea rcx,qword ptr ds:[rdi+0x368] |
00007FF769EA8854 | 48:8987 50030000 | mov qword ptr ds:[rdi+0x350],rax |
00007FF769EA885B | 48:8D55 D8 | lea rdx,qword ptr ss:[rbp-0x28] |
00007FF769EA885F | 8B45 C8 | mov eax,dword ptr ss:[rbp-0x38] |
00007FF769EA8862 | 8987 58030000 | mov dword ptr ds:[rdi+0x358],eax |
00007FF769EA8868 | 48:8B45 D0 | mov rax,qword ptr ss:[rbp-0x30] |
00007FF769EA886C | 48:8987 60030000 | mov qword ptr ds:[rdi+0x360],rax |
00007FF769EA8873 | E8 E8C92DFF | call b2.7FF769185260 |
00007FF769EA8878 | 48:8B4F 30 | mov rcx,qword ptr ds:[rdi+0x30] |
00007FF769EA887C | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA8881 | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA8886 | 48:85C9 | test rcx,rcx |
00007FF769EA8889 | 74 16 | je b2.7FF769EA88A1 |
00007FF769EA888B | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA888E | 85C0 | test eax,eax |
00007FF769EA8890 | 74 07 | je b2.7FF769EA8899 |
00007FF769EA8892 | FFC0 | inc eax |
00007FF769EA8894 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA8897 | EB 08 | jmp b2.7FF769EA88A1 |
00007FF769EA8899 | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA889E | 48:8BCE | mov rcx,rsi |
00007FF769EA88A1 | 48:8BC6 | mov rax,rsi |
00007FF769EA88A4 | 48:85C9 | test rcx,rcx |
00007FF769EA88A7 | 74 09 | je b2.7FF769EA88B2 |
00007FF769EA88A9 | 48:8B47 28 | mov rax,qword ptr ds:[rdi+0x28] |
00007FF769EA88AD | 48:894424 20 | mov qword ptr ss:[rsp+0x20],rax |
00007FF769EA88B2 | 48:8B48 18 | mov rcx,qword ptr ds:[rax+0x18] |
00007FF769EA88B6 | 48:85C9 | test rcx,rcx |
00007FF769EA88B9 | 74 0D | je b2.7FF769EA88C8 |
00007FF769EA88BB | 48:8B01 | mov rax,qword ptr ds:[rcx] |
00007FF769EA88BE | 48:8D97 50030000 | lea rdx,qword ptr ds:[rdi+0x350] |
00007FF769EA88C5 | FF50 60 | call qword ptr ds:[rax+0x60] |
00007FF769EA88C8 | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA88CD | E8 7EB92DFF | call b2.7FF769184250 |
00007FF769EA88D2 | 48:39B7 98000000 | cmp qword ptr ds:[rdi+0x98],rsi |
00007FF769EA88D9 | 74 57 | je b2.7FF769EA8932 |
00007FF769EA88DB | 48:8B8F A0000000 | mov rcx,qword ptr ds:[rdi+0xA0] |
00007FF769EA88E2 | 48:85C9 | test rcx,rcx |
00007FF769EA88E5 | 74 4B | je b2.7FF769EA8932 |
00007FF769EA88E7 | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA88EA | 85C0 | test eax,eax |
00007FF769EA88EC | 7E 44 | jle b2.7FF769EA8932 |
00007FF769EA88EE | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA88F3 | 4C:8BC6 | mov r8,rsi |
00007FF769EA88F6 | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA88FB | 48:85C9 | test rcx,rcx |
00007FF769EA88FE | 74 1E | je b2.7FF769EA891E |
00007FF769EA8900 | 85C0 | test eax,eax |
00007FF769EA8902 | 0F84 E9000000 | je b2.7FF769EA89F1 |
00007FF769EA8908 | FFC0 | inc eax |
00007FF769EA890A | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA890D | 48:85C9 | test rcx,rcx |
00007FF769EA8910 | 74 0C | je b2.7FF769EA891E |
00007FF769EA8912 | 4C:8B87 98000000 | mov r8,qword ptr ds:[rdi+0x98] |
00007FF769EA8919 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA891E | 33D2 | xor edx,edx |
00007FF769EA8920 | 49:8BC8 | mov rcx,r8 |
00007FF769EA8923 | E8 68962600 | call b2.7FF76A111F90 |
00007FF769EA8928 | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA892D | E8 1EB92DFF | call b2.7FF769184250 |
00007FF769EA8932 | 48:8B4F 10 | mov rcx,qword ptr ds:[rdi+0x10] |
00007FF769EA8936 | 4C:8BC6 | mov r8,rsi |
00007FF769EA8939 | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA893E | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA8943 | 48:85C9 | test rcx,rcx |
00007FF769EA8946 | 74 1E | je b2.7FF769EA8966 |
00007FF769EA8948 | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA894B | 85C0 | test eax,eax |
00007FF769EA894D | 0F84 A8000000 | je b2.7FF769EA89FB |
00007FF769EA8953 | FFC0 | inc eax |
00007FF769EA8955 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA8958 | 48:85C9 | test rcx,rcx |
00007FF769EA895B | 74 09 | je b2.7FF769EA8966 |
00007FF769EA895D | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA8961 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA8966 | 48:8B15 6B309C04 | mov rdx,qword ptr ds:[0x7FF76E86B9D8] |
00007FF769EA896D | 49:8BC8 | mov rcx,r8 |
00007FF769EA8970 | E8 4B172400 | call b2.7FF76A0EA0C0 |
00007FF769EA8975 | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA897A | E8 D1B82DFF | call b2.7FF769184250 |
00007FF769EA897F | 40:38B7 40030000 | cmp byte ptr ds:[rdi+0x340],sil |
00007FF769EA8986 | 75 50 | jne b2.7FF769EA89D8 |
00007FF769EA8988 | 48:8B4F 10 | mov rcx,qword ptr ds:[rdi+0x10] |
00007FF769EA898C | 4C:8BC6 | mov r8,rsi |
00007FF769EA898F | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA8994 | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA8999 | 48:85C9 | test rcx,rcx |
00007FF769EA899C | 74 1A | je b2.7FF769EA89B8 |
00007FF769EA899E | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA89A1 | 85C0 | test eax,eax |
00007FF769EA89A3 | 74 60 | je b2.7FF769EA8A05 |
00007FF769EA89A5 | FFC0 | inc eax |
00007FF769EA89A7 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA89AA | 48:85C9 | test rcx,rcx |
00007FF769EA89AD | 74 09 | je b2.7FF769EA89B8 |
00007FF769EA89AF | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA89B3 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA89B8 | 48:8B15 31309C04 | mov rdx,qword ptr ds:[0x7FF76E86B9F0] |
00007FF769EA89BF | 49:8BC8 | mov rcx,r8 |
00007FF769EA89C2 | E8 F9162400 | call b2.7FF76A0EA0C0 |
00007FF769EA89C7 | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA89CC | E8 7FB82DFF | call b2.7FF769184250 |
00007FF769EA89D1 | C687 40030000 01 | mov byte ptr ds:[rdi+0x340],0x1 |
00007FF769EA89D8 | 48:8B4D D8 | mov rcx,qword ptr ss:[rbp-0x28] |
00007FF769EA89DC | 48:85C9 | test rcx,rcx |
00007FF769EA89DF | 74 74 | je b2.7FF769EA8A55 |
00007FF769EA89E1 | E8 2A558A00 | call b2.7FF76A74DF10 |
00007FF769EA89E6 | 89B7 80030000 | mov dword ptr ds:[rdi+0x380],esi |
00007FF769EA89EC | E9 BE090000 | jmp b2.7FF769EA93AF |
00007FF769EA89F1 | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA89F6 | E9 23FFFFFF | jmp b2.7FF769EA891E |
00007FF769EA89FB | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA8A00 | E9 61FFFFFF | jmp b2.7FF769EA8966 |
00007FF769EA8A05 | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA8A0A | EB AC | jmp b2.7FF769EA89B8 |
00007FF769EA8A0C | 48:8B4F 10 | mov rcx,qword ptr ds:[rdi+0x10] |
00007FF769EA8A10 | 4C:8BC6 | mov r8,rsi |
00007FF769EA8A13 | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA8A18 | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA8A1D | 48:85C9 | test rcx,rcx |
00007FF769EA8A20 | 74 1A | je b2.7FF769EA8A3C |
00007FF769EA8A22 | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA8A25 | 85C0 | test eax,eax |
00007FF769EA8A27 | 74 37 | je b2.7FF769EA8A60 |
00007FF769EA8A29 | FFC0 | inc eax |
00007FF769EA8A2B | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA8A2E | 48:85C9 | test rcx,rcx |
00007FF769EA8A31 | 74 09 | je b2.7FF769EA8A3C |
00007FF769EA8A33 | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA8A37 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA8A3C | 48:8B15 452F9C04 | mov rdx,qword ptr ds:[0x7FF76E86B988] |
00007FF769EA8A43 | 49:8BC8 | mov rcx,r8 |
00007FF769EA8A46 | E8 75162400 | call b2.7FF76A0EA0C0 |
00007FF769EA8A4B | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA8A50 | E8 FBB72DFF | call b2.7FF769184250 |
00007FF769EA8A55 | 89B7 80030000 | mov dword ptr ds:[rdi+0x380],esi |
00007FF769EA8A5B | E9 4F090000 | jmp b2.7FF769EA93AF |
00007FF769EA8A60 | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA8A65 | EB D5 | jmp b2.7FF769EA8A3C |
00007FF769EA8A67 | 48:8B00 | mov rax,qword ptr ds:[rax] |
00007FF769EA8A6A | 48:8BCB | mov rcx,rbx | rcx+0x20
00007FF769EA8A6D | FF50 40 | call qword ptr ds:[rax+0x40] | mov eax, dword ptr ds:[rcx+0x20]
00007FF769EA8A70 | 3987 80030000 | cmp dword ptr ds:[rdi+0x380],eax |
00007FF769EA8A76 | 0F84 6A010000 | je b2.7FF769EA8BE6 | 1111
00007FF769EA8A7C | 48:8B03 | mov rax,qword ptr ds:[rbx] |
00007FF769EA8A7F | 48:8BCB | mov rcx,rbx |
00007FF769EA8A82 | FF50 40 | call qword ptr ds:[rax+0x40] |
00007FF769EA8A85 | 48:8B4F 10 | mov rcx,qword ptr ds:[rdi+0x10] |
00007FF769EA8A89 | 4C:8BC6 | mov r8,rsi |
00007FF769EA8A8C | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA8A91 | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA8A96 | 85C0 | test eax,eax |
00007FF769EA8A98 | 0F85 AF000000 | jne b2.7FF769EA8B4D |
00007FF769EA8A9E | 48:85C9 | test rcx,rcx |
00007FF769EA8AA1 | 74 1E | je b2.7FF769EA8AC1 |
00007FF769EA8AA3 | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA8AA6 | 85C0 | test eax,eax |
00007FF769EA8AA8 | 0F84 8E000000 | je b2.7FF769EA8B3C |
00007FF769EA8AAE | FFC0 | inc eax |
00007FF769EA8AB0 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA8AB3 | 48:85C9 | test rcx,rcx |
00007FF769EA8AB6 | 74 09 | je b2.7FF769EA8AC1 |
00007FF769EA8AB8 | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA8ABC | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA8AC1 | 48:8B15 102F9C04 | mov rdx,qword ptr ds:[0x7FF76E86B9D8] |
00007FF769EA8AC8 | 49:8BC8 | mov rcx,r8 |
00007FF769EA8ACB | E8 F0152400 | call b2.7FF76A0EA0C0 |
00007FF769EA8AD0 | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA8AD5 | E8 76B72DFF | call b2.7FF769184250 |
00007FF769EA8ADA | 40:38B7 40030000 | cmp byte ptr ds:[rdi+0x340],sil |
00007FF769EA8AE1 | 0F85 FF000000 | jne b2.7FF769EA8BE6 |
00007FF769EA8AE7 | 48:8B4F 10 | mov rcx,qword ptr ds:[rdi+0x10] |
00007FF769EA8AEB | 4C:8BC6 | mov r8,rsi |
00007FF769EA8AEE | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA8AF3 | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA8AF8 | 48:85C9 | test rcx,rcx |
00007FF769EA8AFB | 74 1A | je b2.7FF769EA8B17 |
00007FF769EA8AFD | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA8B00 | 85C0 | test eax,eax |
00007FF769EA8B02 | 74 42 | je b2.7FF769EA8B46 |
00007FF769EA8B04 | FFC0 | inc eax |
00007FF769EA8B06 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA8B09 | 48:85C9 | test rcx,rcx |
00007FF769EA8B0C | 74 09 | je b2.7FF769EA8B17 |
00007FF769EA8B0E | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA8B12 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA8B17 | 48:8B15 D22E9C04 | mov rdx,qword ptr ds:[0x7FF76E86B9F0] |
00007FF769EA8B1E | 49:8BC8 | mov rcx,r8 |
00007FF769EA8B21 | E8 9A152400 | call b2.7FF76A0EA0C0 |
00007FF769EA8B26 | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA8B2B | E8 20B72DFF | call b2.7FF769184250 |
00007FF769EA8B30 | C687 40030000 01 | mov byte ptr ds:[rdi+0x340],0x1 |
00007FF769EA8B37 | E9 AA000000 | jmp b2.7FF769EA8BE6 |
00007FF769EA8B3C | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA8B41 | E9 7BFFFFFF | jmp b2.7FF769EA8AC1 |
00007FF769EA8B46 | 48:897424 28 | mov qword ptr ss:[rsp+0x28],rsi |
00007FF769EA8B4B | EB CA | jmp b2.7FF769EA8B17 |
00007FF769EA8B4D | 48:85C9 | test rcx,rcx |
00007FF769EA8B50 | 74 1E | je b2.7FF769EA8B70 |
00007FF769EA8B52 | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA8B55 | 85C0 | test eax,eax |
00007FF769EA8B57 | 0F84 EB020000 | je b2.7FF769EA8E48 |
00007FF769EA8B5D | FFC0 | inc eax |
00007FF769EA8B5F | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA8B62 | 48:85C9 | test rcx,rcx |
00007FF769EA8B65 | 74 09 | je b2.7FF769EA8B70 |
00007FF769EA8B67 | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA8B6B | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA8B70 | 48:8B15 592E9C04 | mov rdx,qword ptr ds:[0x7FF76E86B9D0] |
00007FF769EA8B77 | 49:8BC8 | mov rcx,r8 |
00007FF769EA8B7A | E8 41152400 | call b2.7FF76A0EA0C0 |
00007FF769EA8B7F | 48:8D4C24 20 | lea rcx,qword ptr ss:[rsp+0x20] |
00007FF769EA8B84 | E8 C7B62DFF | call b2.7FF769184250 |
00007FF769EA8B89 | 40:38B7 40030000 | cmp byte ptr ds:[rdi+0x340],sil |
00007FF769EA8B90 | 74 54 | je b2.7FF769EA8BE6 |
00007FF769EA8B92 | 48:8B4F 10 | mov rcx,qword ptr ds:[rdi+0x10] |
00007FF769EA8B96 | 4C:8BC6 | mov r8,rsi |
00007FF769EA8B99 | 48:897424 20 | mov qword ptr ss:[rsp+0x20],rsi |
00007FF769EA8B9E | 48:894C24 28 | mov qword ptr ss:[rsp+0x28],rcx |
00007FF769EA8BA3 | 48:85C9 | test rcx,rcx |
00007FF769EA8BA6 | 74 1E | je b2.7FF769EA8BC6 |
00007FF769EA8BA8 | 8B41 08 | mov eax,dword ptr ds:[rcx+0x8] |
00007FF769EA8BAB | 85C0 | test eax,eax |
00007FF769EA8BAD | 0F84 9F020000 | je b2.7FF769EA8E52 |
00007FF769EA8BB3 | FFC0 | inc eax |
00007FF769EA8BB5 | 8941 08 | mov dword ptr ds:[rcx+0x8],eax |
00007FF769EA8BB8 | 48:85C9 | test rcx,rcx |
00007FF769EA8BBB | 74 09 | je b2.7FF769EA8BC6 |
00007FF769EA8BBD | 4C:8B47 08 | mov r8,qword ptr ds:[rdi+0x8] |
00007FF769EA8BC1 | 4C:894424 20 | mov qword ptr ss:[rsp+0x20],r8 |
00007FF769EA8BC6 | 48:8B15 2B2E9C04 | mov rdx,qword ptr ds:[0x7FF76E86B9F8] |
00007FF769EA8BCD | 49:8BC8 | mov rcx,r8 |
|
|
游戏安全课程 学员办理咨询联系QQ150330575 手机 139 9636 2600 免费课程 在 www.bilibili.com 搜 郁金香灬老师
|
|
