1762 lines
127 KiB
Plaintext
1762 lines
127 KiB
Plaintext
# EF-CHEETO RECONSTRUCTION FEED — PART 3A/3
|
||
# This part: Named function hex dumps (actual machine code bytes)
|
||
# 33 key functions, all annotated with RVA and function name.
|
||
# Use with Parts 1, 2, and 3B.
|
||
|
||
# EF-Cheeto.dll — Named Function Hex Dumps
|
||
# All addresses are RVAs (add 0x180000000 for VA)
|
||
# Generated from .text section (raw offset 0x400)
|
||
|
||
========================================================================
|
||
FUNCTION: DllMain
|
||
RVA: 0x01000–0x02000 Size: 4096 bytes
|
||
180001000 48 8D 0D 89 ED 0A 00 E9 D8 AB 0A 00 CC CC CC CC H...............
|
||
180001010 48 89 5C 24 08 48 89 74 24 10 48 89 7C 24 18 4C H.\$.H.t$.H.|$.L
|
||
180001020 89 64 24 20 55 41 56 41 57 48 8D AC 24 70 FA FF .d$ UAVAWH..$p..
|
||
180001030 FF 48 81 EC 90 06 00 00 C6 44 24 40 02 48 8D 05 .H.......D$@.H..
|
||
180001040 54 E6 3A 00 48 89 44 24 48 C6 44 24 50 04 48 8D T.:.H.D$H.D$P.H.
|
||
180001050 05 4B E6 3A 00 48 89 44 24 58 C6 44 24 60 05 48 .K.:.H.D$X.D$`.H
|
||
180001060 8D 05 42 E6 3A 00 48 89 44 24 68 C6 44 24 70 06 ..B.:.H.D$h.D$p.
|
||
180001070 48 8D 05 39 E6 3A 00 48 89 44 24 78 C6 45 80 08 H..9.:.H.D$x.E..
|
||
180001080 48 8D 05 31 E6 3A 00 48 89 45 88 C6 45 90 09 48 H..1.:.H.E..E..H
|
||
180001090 8D 05 2E E6 3A 00 48 89 45 98 C6 45 A0 0C 48 8D ....:.H.E..E..H.
|
||
1800010A0 05 23 E6 3A 00 48 89 45 A8 C6 45 B0 0D 48 8D 05 .#.:.H.E..E..H..
|
||
1800010B0 1C E6 3A 00 48 89 45 B8 C6 45 C0 10 48 8D 05 15 ..:.H.E..E..H...
|
||
1800010C0 E6 3A 00 48 89 45 C8 C6 45 D0 11 48 8D 05 0E E6 .:.H.E..E..H....
|
||
1800010D0 3A 00 48 89 45 D8 C6 45 E0 12 48 8D 05 07 E6 3A :.H.E..E..H....:
|
||
1800010E0 00 48 89 45 E8 C6 45 F0 13 48 8D 05 FC E5 3A 00 .H.E..E..H....:.
|
||
1800010F0 48 89 45 F8 C6 45 00 14 48 8D 05 F9 E5 3A 00 48 H.E..E..H....:.H
|
||
180001100 89 45 08 C6 45 10 1B 48 8D 05 F6 E5 3A 00 48 89 .E..E..H....:.H.
|
||
180001110 45 18 C6 45 20 20 48 8D 05 EB E5 3A 00 48 89 45 E..E H....:.H.E
|
||
180001120 28 C6 45 30 21 48 8D 05 E4 E5 3A 00 48 89 45 38 (.E0!H....:.H.E8
|
||
180001130 C6 45 40 22 48 8D 05 DD E5 3A 00 48 89 45 48 C6 .E@"H....:.H.EH.
|
||
180001140 45 50 23 48 8D 05 D6 E5 3A 00 48 89 45 58 C6 45 EP#H....:.H.EX.E
|
||
180001150 60 24 48 8D 05 CB E5 3A 00 48 89 45 68 C6 45 70 `$H....:.H.Eh.Ep
|
||
180001160 25 48 8D 05 C4 E5 3A 00 48 89 45 78 C6 85 80 00 %H....:.H.Ex....
|
||
180001170 00 00 26 48 8D 05 BA E5 3A 00 48 89 85 88 00 00 ..&H....:.H.....
|
||
180001180 00 C6 85 90 00 00 00 27 48 8D 05 A9 E5 3A 00 48 .......'H....:.H
|
||
180001190 89 85 98 00 00 00 C6 85 A0 00 00 00 28 48 8D 05 ............(H..
|
||
1800011A0 9C E5 3A 00 48 89 85 A8 00 00 00 C6 85 B0 00 00 ..:.H...........
|
||
1800011B0 00 2D 48 8D 05 8F E5 3A 00 48 89 85 B8 00 00 00 .-H....:.H......
|
||
1800011C0 C6 85 C0 00 00 00 2E 48 8D 05 7E E5 3A 00 48 89 .......H..~.:.H.
|
||
1800011D0 85 C8 00 00 00 C6 85 D0 00 00 00 2C 48 8D 05 6D ...........,H..m
|
||
1800011E0 E5 3A 00 48 89 85 D8 00 00 00 C6 85 E0 00 00 00 .:.H............
|
||
1800011F0 30 48 8D 05 EC 03 0D 00 48 89 85 E8 00 00 00 C6 0H......H.......
|
||
180001200 85 F0 00 00 00 31 48 8D 05 27 B1 3A 00 48 89 85 .....1H..'.:.H..
|
||
180001210 F8 00 00 00 C6 85 00 01 00 00 32 48 8D 05 16 B1 ..........2H....
|
||
180001220 3A 00 48 89 85 08 01 00 00 C6 85 10 01 00 00 33 :.H............3
|
||
180001230 48 8D 05 05 B1 3A 00 48 89 85 18 01 00 00 C6 85 H....:.H........
|
||
180001240 20 01 00 00 34 48 8D 05 F4 B0 3A 00 48 89 85 28 ...4H....:.H..(
|
||
180001250 01 00 00 C6 85 30 01 00 00 35 48 8D 05 E3 B0 3A .....0...5H....:
|
||
180001260 00 48 89 85 38 01 00 00 C6 85 40 01 00 00 36 48 .H..8.....@...6H
|
||
180001270 8D 05 D2 B0 3A 00 48 89 85 48 01 00 00 C6 85 50 ....:.H..H.....P
|
||
180001280 01 00 00 37 48 8D 05 C1 B0 3A 00 48 89 85 58 01 ...7H....:.H..X.
|
||
180001290 00 00 C6 85 60 01 00 00 38 48 8D 05 B0 B0 3A 00 ....`...8H....:.
|
||
1800012A0 48 89 85 68 01 00 00 C6 85 70 01 00 00 39 48 8D H..h.....p...9H.
|
||
1800012B0 05 9F B0 3A 00 48 89 85 78 01 00 00 C6 85 80 01 ...:.H..x.......
|
||
1800012C0 00 00 41 48 8D 05 8E B0 3A 00 48 89 85 88 01 00 ..AH....:.H.....
|
||
1800012D0 00 C6 85 90 01 00 00 42 48 8D 05 7D B0 3A 00 48 .......BH..}.:.H
|
||
1800012E0 89 85 98 01 00 00 C6 85 A0 01 00 00 43 48 8D 05 ............CH..
|
||
1800012F0 6C B0 3A 00 48 89 85 A8 01 00 00 C6 85 B0 01 00 l.:.H...........
|
||
180001300 00 44 48 8D 05 5B B0 3A 00 48 89 85 B8 01 00 00 .DH..[.:.H......
|
||
180001310 C6 85 C0 01 00 00 45 48 8D 05 4A B0 3A 00 48 89 ......EH..J.:.H.
|
||
180001320 85 C8 01 00 00 C6 85 D0 01 00 00 46 48 8D 05 39 ...........FH..9
|
||
180001330 B0 3A 00 48 89 85 D8 01 00 00 C6 85 E0 01 00 00 .:.H............
|
||
180001340 47 48 8D 05 28 B0 3A 00 48 89 85 E8 01 00 00 C6 GH..(.:.H.......
|
||
180001350 85 F0 01 00 00 48 48 8D 05 17 B0 3A 00 48 89 85 .....HH....:.H..
|
||
180001360 F8 01 00 00 C6 85 00 02 00 00 49 48 8D 05 06 B0 ..........IH....
|
||
180001370 3A 00 48 89 85 08 02 00 00 C6 85 10 02 00 00 4A :.H............J
|
||
180001380 48 8D 05 F5 AF 3A 00 48 89 85 18 02 00 00 C6 85 H....:.H........
|
||
180001390 20 02 00 00 4B 48 8D 05 E4 AF 3A 00 48 89 85 28 ...KH....:.H..(
|
||
1800013A0 02 00 00 C6 85 30 02 00 00 4C 48 8D 05 D3 AF 3A .....0...LH....:
|
||
1800013B0 00 48 89 85 38 02 00 00 C6 85 40 02 00 00 4D 48 .H..8.....@...MH
|
||
1800013C0 8D 05 C2 AF 3A 00 48 89 85 48 02 00 00 C6 85 50 ....:.H..H.....P
|
||
1800013D0 02 00 00 4E 48 8D 05 B1 AF 3A 00 48 89 85 58 02 ...NH....:.H..X.
|
||
1800013E0 00 00 C6 85 60 02 00 00 4F 48 8D 05 A0 AF 3A 00 ....`...OH....:.
|
||
1800013F0 48 89 85 68 02 00 00 C6 85 70 02 00 00 50 48 8D H..h.....p...PH.
|
||
180001400 05 8F AF 3A 00 48 89 85 78 02 00 00 C6 85 80 02 ...:.H..x.......
|
||
180001410 00 00 51 48 8D 05 7E AF 3A 00 48 89 85 88 02 00 ..QH..~.:.H.....
|
||
180001420 00 C6 85 90 02 00 00 52 48 8D 05 6D AF 3A 00 48 .......RH..m.:.H
|
||
180001430 89 85 98 02 00 00 C6 85 A0 02 00 00 53 48 8D 05 ............SH..
|
||
180001440 5C AF 3A 00 48 89 85 A8 02 00 00 C6 85 B0 02 00 \.:.H...........
|
||
180001450 00 54 48 8D 05 4B AF 3A 00 48 89 85 B8 02 00 00 .TH..K.:.H......
|
||
180001460 C6 85 C0 02 00 00 55 48 8D 05 3A AF 3A 00 48 89 ......UH..:.:.H.
|
||
180001470 85 C8 02 00 00 C6 85 D0 02 00 00 56 48 8D 05 29 ...........VH..)
|
||
180001480 AF 3A 00 48 89 85 D8 02 00 00 C6 85 E0 02 00 00 .:.H............
|
||
180001490 57 48 8D 05 18 AF 3A 00 48 89 85 E8 02 00 00 C6 WH....:.H.......
|
||
1800014A0 85 F0 02 00 00 58 48 8D 05 07 AF 3A 00 48 89 85 .....XH....:.H..
|
||
1800014B0 F8 02 00 00 C6 85 00 03 00 00 59 48 8D 05 F6 AE ..........YH....
|
||
1800014C0 3A 00 48 89 85 08 03 00 00 C6 85 10 03 00 00 5A :.H............Z
|
||
1800014D0 48 8D 05 E5 AE 3A 00 48 89 85 18 03 00 00 C6 85 H....:.H........
|
||
1800014E0 20 03 00 00 5B 48 8D 05 6C E2 3A 00 48 89 85 28 ...[H..l.:.H..(
|
||
1800014F0 03 00 00 C6 85 30 03 00 00 5C 48 89 85 38 03 00 .....0...\H..8..
|
||
180001500 00 C6 85 40 03 00 00 60 48 8D 05 51 E2 3A 00 48 ...@...`H..Q.:.H
|
||
180001510 89 85 48 03 00 00 C6 85 50 03 00 00 61 48 8D 05 ..H.....P...aH..
|
||
180001520 44 E2 3A 00 48 89 85 58 03 00 00 C6 85 60 03 00 D.:.H..X.....`..
|
||
180001530 00 62 48 8D 05 37 E2 3A 00 48 89 85 68 03 00 00 .bH..7.:.H..h...
|
||
180001540 C6 85 70 03 00 00 63 48 8D 05 2A E2 3A 00 48 89 ..p...cH..*.:.H.
|
||
180001550 85 78 03 00 00 C6 85 80 03 00 00 64 48 8D 05 1D .x.........dH...
|
||
180001560 E2 3A 00 48 89 85 88 03 00 00 C6 85 90 03 00 00 .:.H............
|
||
180001570 65 48 8D 05 10 E2 3A 00 48 89 85 98 03 00 00 C6 eH....:.H.......
|
||
180001580 85 A0 03 00 00 66 48 8D 05 03 E2 3A 00 48 89 85 .....fH....:.H..
|
||
180001590 A8 03 00 00 C6 85 B0 03 00 00 67 48 8D 05 F6 E1 ..........gH....
|
||
1800015A0 3A 00 48 89 85 B8 03 00 00 C6 85 C0 03 00 00 68 :.H............h
|
||
1800015B0 48 8D 05 E9 E1 3A 00 48 89 85 C8 03 00 00 C6 85 H....:.H........
|
||
1800015C0 D0 03 00 00 69 48 8D 05 DC E1 3A 00 48 89 85 D8 ....iH....:.H...
|
||
1800015D0 03 00 00 C6 85 E0 03 00 00 6A 48 8D 05 CF E1 3A .........jH....:
|
||
1800015E0 00 48 89 85 E8 03 00 00 C6 85 F0 03 00 00 6B 48 .H............kH
|
||
1800015F0 8D 05 C6 E1 3A 00 48 89 85 F8 03 00 00 C6 85 00 ....:.H.........
|
||
180001600 04 00 00 6C 48 8D 05 B5 E1 3A 00 48 89 85 08 04 ...lH....:.H....
|
||
180001610 00 00 C6 85 10 04 00 00 6D 48 8D 05 B0 E1 3A 00 ........mH....:.
|
||
180001620 48 89 85 18 04 00 00 C6 85 20 04 00 00 6E 48 8D H........ ...nH.
|
||
180001630 05 AB E1 3A 00 48 89 85 28 04 00 00 C6 85 30 04 ...:.H..(.....0.
|
||
180001640 00 00 6F 48 8D 05 9E E1 3A 00 48 89 85 38 04 00 ..oH....:.H..8..
|
||
180001650 00 C6 85 40 04 00 00 70 48 8D 05 61 AD 3A 00 48 ...@...pH..a.:.H
|
||
180001660 89 85 48 04 00 00 C6 85 50 04 00 00 71 48 8D 05 ..H.....P...qH..
|
||
180001670 50 AD 3A 00 48 89 85 58 04 00 00 C6 85 60 04 00 P.:.H..X.....`..
|
||
180001680 00 72 48 8D 05 3F AD 3A 00 48 89 85 68 04 00 00 .rH..?.:.H..h...
|
||
180001690 C6 85 70 04 00 00 73 48 8D 05 2E AD 3A 00 48 89 ..p...sH....:.H.
|
||
1800016A0 85 78 04 00 00 C6 85 80 04 00 00 74 48 8D 05 1D .x.........tH...
|
||
1800016B0 AD 3A 00 48 89 85 88 04 00 00 C6 85 90 04 00 00 .:.H............
|
||
1800016C0 75 48 8D 05 0C AD 3A 00 48 89 85 98 04 00 00 C6 uH....:.H.......
|
||
1800016D0 85 A0 04 00 00 76 48 8D 05 FB AC 3A 00 48 89 85 .....vH....:.H..
|
||
1800016E0 A8 04 00 00 C6 85 B0 04 00 00 77 48 8D 05 EA AC ..........wH....
|
||
1800016F0 3A 00 48 89 85 B8 04 00 00 C6 85 C0 04 00 00 78 :.H............x
|
||
180001700 48 8D 05 D9 AC 3A 00 48 89 85 C8 04 00 00 C6 85 H....:.H........
|
||
180001710 D0 04 00 00 79 48 8D 05 C8 AC 3A 00 48 89 85 D8 ....yH....:.H...
|
||
180001720 04 00 00 C6 85 E0 04 00 00 7A 48 8D 05 B7 AC 3A .........zH....:
|
||
180001730 00 48 89 85 E8 04 00 00 C6 85 F0 04 00 00 7B 48 .H............{H
|
||
180001740 8D 05 A6 AC 3A 00 48 89 85 F8 04 00 00 C6 85 00 ....:.H.........
|
||
180001750 05 00 00 A0 48 8D 05 95 E0 3A 00 48 89 85 08 05 ....H....:.H....
|
||
180001760 00 00 C6 85 10 05 00 00 A1 48 8D 05 88 E0 3A 00 .........H....:.
|
||
180001770 48 89 85 18 05 00 00 C6 85 20 05 00 00 A2 48 8D H........ ....H.
|
||
180001780 05 7B E0 3A 00 48 89 85 28 05 00 00 C6 85 30 05 .{.:.H..(.....0.
|
||
180001790 00 00 A3 48 8D 05 6E E0 3A 00 48 89 85 38 05 00 ...H..n.:.H..8..
|
||
1800017A0 00 C6 85 40 05 00 00 A4 48 8D 05 61 E0 3A 00 48 ...@....H..a.:.H
|
||
1800017B0 89 85 48 05 00 00 C6 85 50 05 00 00 A5 48 8D 05 ..H.....P....H..
|
||
1800017C0 54 E0 3A 00 48 89 85 58 05 00 00 B9 30 00 00 00 T.:.H..X....0...
|
||
1800017D0 E8 1B 9F 0A 00 48 8B F0 48 89 00 48 89 40 08 48 .....H..H..H.@.H
|
||
1800017E0 89 40 10 66 C7 40 18 01 01 48 89 05 A8 56 3C 00 .@.f.@...H...V<.
|
||
1800017F0 48 8D 5C 24 40 49 BC 55 55 55 55 55 55 55 05 4C H.\$@I.UUUUUUU.L
|
||
180001800 8D 35 92 56 3C 00 45 33 FF 0F 1F 80 00 00 00 00 .5.V<.E3........
|
||
180001810 4C 8B CB 4C 8B C6 48 8D 95 78 05 00 00 E8 9E 20 L..L..H..x.....
|
||
180001820 08 00 0F 10 00 0F 11 44 24 20 F2 0F 10 40 10 F2 .......D$ ...@..
|
||
180001830 0F 11 85 70 05 00 00 80 BD 70 05 00 00 00 75 60 ...p.....p....u`
|
||
180001840 4C 39 25 59 56 3C 00 0F 84 93 00 00 00 48 8B 3D L9%YV<.......H.=
|
||
180001850 44 56 3C 00 4C 89 74 24 30 4C 89 7C 24 38 B9 30 DV<.L.t$0L.|$8.0
|
||
180001860 00 00 00 E8 88 9E 0A 00 90 0F 10 03 0F 11 40 20 ..............@
|
||
180001870 48 89 38 48 89 78 08 48 89 78 10 66 C7 40 18 00 H.8H.x.H.x.f.@..
|
||
180001880 00 4C 89 7C 24 38 0F 10 44 24 20 0F 29 44 24 20 .L.|$8..D$ .)D$
|
||
180001890 4C 8B C0 48 8D 54 24 20 49 8B CE E8 90 22 08 00 L..H.T$ I...."..
|
||
1800018A0 48 83 C3 10 48 8D 85 60 05 00 00 48 3B D8 0F 85 H...H..`...H;...
|
||
1800018B0 5C FF FF FF 48 8D 0D A5 E5 0A 00 4C 8D 9C 24 90 \...H......L..$.
|
||
1800018C0 06 00 00 49 8B 5B 20 49 8B 73 28 49 8B 7B 30 4D ...I.[ I.s(I.{0M
|
||
1800018D0 8B 63 38 49 8B E3 41 5F 41 5E 5D E9 04 A3 0A 00 .c8I..A_A^].....
|
||
1800018E0 E8 7B 1E 08 00 90 CC CC CC CC CC CC CC CC CC CC .{..............
|
||
1800018F0 48 83 EC 28 B9 18 00 00 00 E8 F2 9D 0A 00 48 8D H..(..........H.
|
||
180001900 0D DB E5 0A 00 48 89 00 48 89 40 08 48 89 05 BD .....H..H.@.H...
|
||
180001910 5B 3C 00 48 83 C4 28 E9 C8 A2 0A 00 CC CC CC CC [<.H..(.........
|
||
180001920 48 8D 0D 19 E6 0A 00 E9 B8 A2 0A 00 CC CC CC CC H...............
|
||
180001930 48 8D 0D 19 E6 0A 00 E9 A8 A2 0A 00 CC CC CC CC H...............
|
||
180001940 48 81 EC 88 00 00 00 8B 0D 8F 51 3C 00 65 48 8B H.........Q<.eH.
|
||
180001950 04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B .%X........H....
|
||
180001960 0C 02 39 0D 68 5A 3C 00 7E 2D 48 8D 0D 5F 5A 3C ..9.hZ<.~-H.._Z<
|
||
180001970 00 E8 9A 9E 0A 00 83 3D 53 5A 3C 00 FF 75 18 48 .......=SZ<..u.H
|
||
180001980 8D 0D 0A E6 0A 00 E8 59 A2 0A 00 48 8D 0D 3E 5A .......Y...H..>Z
|
||
180001990 3C 00 E8 0D 9E 0A 00 48 8D 44 24 40 48 89 84 24 <......H.D$@H..$
|
||
1800019A0 90 00 00 00 48 8D 05 FD F4 3A 00 48 89 44 24 40 ....H....:.H.D$@
|
||
1800019B0 48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44 H.D$@H.D$x.W...D
|
||
1800019C0 24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 0B 00 00 $ .W....L$0A....
|
||
1800019D0 00 48 8D 15 40 F3 3A 00 48 8D 4C 24 20 E8 CE E2 .H..@.:.H.L$ ...
|
||
1800019E0 00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D ...L.D$@H.T$ H..
|
||
1800019F0 C4 59 3C 00 E8 C7 98 09 00 90 48 8D 4C 24 20 E8 .Y<.......H.L$ .
|
||
180001A00 5C E0 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC \...H...........
|
||
180001A10 48 81 EC 88 00 00 00 8B 0D BF 50 3C 00 65 48 8B H.........P<.eH.
|
||
180001A20 04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B .%X........H....
|
||
180001A30 0C 02 39 0D 98 59 3C 00 7E 2D 48 8D 0D 8F 59 3C ..9..Y<.~-H...Y<
|
||
180001A40 00 E8 CA 9D 0A 00 83 3D 83 59 3C 00 FF 75 18 48 .......=.Y<..u.H
|
||
180001A50 8D 0D 3A E5 0A 00 E8 89 A1 0A 00 48 8D 0D 6E 59 ..:........H..nY
|
||
180001A60 3C 00 E8 3D 9D 0A 00 48 8D 44 24 40 48 89 84 24 <..=...H.D$@H..$
|
||
180001A70 90 00 00 00 48 8D 05 9D F4 3A 00 48 89 44 24 40 ....H....:.H.D$@
|
||
180001A80 48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44 H.D$@H.D$x.W...D
|
||
180001A90 24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 09 00 00 $ .W....L$0A....
|
||
180001AA0 00 48 8D 15 80 DD 3A 00 48 8D 4C 24 20 E8 FE E1 .H....:.H.L$ ...
|
||
180001AB0 00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D ...L.D$@H.T$ H..
|
||
180001AC0 F4 58 3C 00 E8 F7 97 09 00 90 48 8D 4C 24 20 E8 .X<.......H.L$ .
|
||
180001AD0 8C DF 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC ....H...........
|
||
180001AE0 48 81 EC 88 00 00 00 8B 0D EF 4F 3C 00 65 48 8B H.........O<.eH.
|
||
180001AF0 04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B .%X........H....
|
||
180001B00 0C 02 39 0D C8 58 3C 00 7E 2D 48 8D 0D BF 58 3C ..9..X<.~-H...X<
|
||
180001B10 00 E8 FA 9C 0A 00 83 3D B3 58 3C 00 FF 75 18 48 .......=.X<..u.H
|
||
180001B20 8D 0D 6A E4 0A 00 E8 B9 A0 0A 00 48 8D 0D 9E 58 ..j........H...X
|
||
180001B30 3C 00 E8 6D 9C 0A 00 48 8D 44 24 40 48 89 84 24 <..m...H.D$@H..$
|
||
180001B40 90 00 00 00 48 8D 05 05 F4 3A 00 48 89 44 24 40 ....H....:.H.D$@
|
||
180001B50 48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44 H.D$@H.D$x.W...D
|
||
180001B60 24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 09 00 00 $ .W....L$0A....
|
||
180001B70 00 48 8D 15 C8 F1 3A 00 48 8D 4C 24 20 E8 2E E1 .H....:.H.L$ ...
|
||
180001B80 00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D ...L.D$@H.T$ H..
|
||
180001B90 24 58 3C 00 E8 27 97 09 00 90 48 8D 4C 24 20 E8 $X<..'....H.L$ .
|
||
180001BA0 BC DE 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC ....H...........
|
||
180001BB0 48 81 EC 88 00 00 00 8B 0D 1F 4F 3C 00 65 48 8B H.........O<.eH.
|
||
180001BC0 04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B .%X........H....
|
||
180001BD0 0C 02 39 0D F8 57 3C 00 7E 2D 48 8D 0D EF 57 3C ..9..W<.~-H...W<
|
||
180001BE0 00 E8 2A 9C 0A 00 83 3D E3 57 3C 00 FF 75 18 48 ..*....=.W<..u.H
|
||
180001BF0 8D 0D 9A E3 0A 00 E8 E9 9F 0A 00 48 8D 0D CE 57 ...........H...W
|
||
180001C00 3C 00 E8 9D 9B 0A 00 48 8D 44 24 40 48 89 84 24 <......H.D$@H..$
|
||
180001C10 90 00 00 00 48 8D 05 E5 F1 3A 00 48 89 44 24 40 ....H....:.H.D$@
|
||
180001C20 48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44 H.D$@H.D$x.W...D
|
||
180001C30 24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 09 00 00 $ .W....L$0A....
|
||
180001C40 00 48 8D 15 40 E5 3A 00 48 8D 4C 24 20 E8 5E E0 .H..@.:.H.L$ .^.
|
||
180001C50 00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D ...L.D$@H.T$ H..
|
||
180001C60 54 57 3C 00 E8 57 96 09 00 90 48 8D 4C 24 20 E8 TW<..W....H.L$ .
|
||
180001C70 EC DD 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC ....H...........
|
||
180001C80 48 81 EC 88 00 00 00 8B 0D 4F 4E 3C 00 65 48 8B H........ON<.eH.
|
||
180001C90 04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B .%X........H....
|
||
180001CA0 0C 02 39 0D 28 57 3C 00 7E 2D 48 8D 0D 1F 57 3C ..9.(W<.~-H...W<
|
||
180001CB0 00 E8 5A 9B 0A 00 83 3D 13 57 3C 00 FF 75 18 48 ..Z....=.W<..u.H
|
||
180001CC0 8D 0D CA E2 0A 00 E8 19 9F 0A 00 48 8D 0D FE 56 ...........H...V
|
||
180001CD0 3C 00 E8 CD 9A 0A 00 48 8D 44 24 40 48 89 84 24 <......H.D$@H..$
|
||
180001CE0 90 00 00 00 48 8D 05 6D F0 3A 00 48 89 44 24 40 ....H..m.:.H.D$@
|
||
180001CF0 48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44 H.D$@H.D$x.W...D
|
||
180001D00 24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 07 00 00 $ .W....L$0A....
|
||
180001D10 00 48 8D 15 90 DF 3A 00 48 8D 4C 24 20 E8 8E DF .H....:.H.L$ ...
|
||
180001D20 00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D ...L.D$@H.T$ H..
|
||
180001D30 84 56 3C 00 E8 87 95 09 00 90 48 8D 4C 24 20 E8 .V<.......H.L$ .
|
||
180001D40 1C DD 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC ....H...........
|
||
180001D50 48 81 EC 88 00 00 00 8B 0D 7F 4D 3C 00 65 48 8B H.........M<.eH.
|
||
180001D60 04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B .%X........H....
|
||
180001D70 0C 02 39 0D 58 56 3C 00 7E 2D 48 8D 0D 4F 56 3C ..9.XV<.~-H..OV<
|
||
180001D80 00 E8 8A 9A 0A 00 83 3D 43 56 3C 00 FF 75 18 48 .......=CV<..u.H
|
||
180001D90 8D 0D FA E1 0A 00 E8 49 9E 0A 00 48 8D 0D 2E 56 .......I...H...V
|
||
180001DA0 3C 00 E8 FD 99 0A 00 48 8D 44 24 40 48 89 84 24 <......H.D$@H..$
|
||
180001DB0 90 00 00 00 48 8D 05 B5 F0 3A 00 48 89 44 24 40 ....H....:.H.D$@
|
||
180001DC0 48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44 H.D$@H.D$x.W...D
|
||
180001DD0 24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 09 00 00 $ .W....L$0A....
|
||
180001DE0 00 48 8D 15 18 E4 3A 00 48 8D 4C 24 20 E8 BE DE .H....:.H.L$ ...
|
||
180001DF0 00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D ...L.D$@H.T$ H..
|
||
180001E00 B4 55 3C 00 E8 B7 94 09 00 90 48 8D 4C 24 20 E8 .U<.......H.L$ .
|
||
180001E10 4C DC 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC L...H...........
|
||
180001E20 48 81 EC 88 00 00 00 8B 0D AF 4C 3C 00 65 48 8B H.........L<.eH.
|
||
180001E30 04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B .%X........H....
|
||
180001E40 0C 02 39 0D 88 55 3C 00 7E 2D 48 8D 0D 7F 55 3C ..9..U<.~-H...U<
|
||
180001E50 00 E8 BA 99 0A 00 83 3D 73 55 3C 00 FF 75 18 48 .......=sU<..u.H
|
||
180001E60 8D 0D 2A E1 0A 00 E8 79 9D 0A 00 48 8D 0D 5E 55 ..*....y...H..^U
|
||
180001E70 3C 00 E8 2D 99 0A 00 48 8D 44 24 40 48 89 84 24 <..-...H.D$@H..$
|
||
180001E80 90 00 00 00 48 8D 05 55 F0 3A 00 48 89 44 24 40 ....H..U.:.H.D$@
|
||
180001E90 48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44 H.D$@H.D$x.W...D
|
||
180001EA0 24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 0D 00 00 $ .W....L$0A....
|
||
180001EB0 00 48 8D 15 08 E0 3A 00 48 8D 4C 24 20 E8 EE DD .H....:.H.L$ ...
|
||
180001EC0 00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D ...L.D$@H.T$ H..
|
||
180001ED0 E4 54 3C 00 E8 E7 93 09 00 90 48 8D 4C 24 20 E8 .T<.......H.L$ .
|
||
180001EE0 7C DB 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC |...H...........
|
||
180001EF0 48 81 EC 88 00 00 00 8B 0D DF 4B 3C 00 65 48 8B H.........K<.eH.
|
||
180001F00 04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B .%X........H....
|
||
180001F10 0C 02 39 0D B8 54 3C 00 7E 2D 48 8D 0D AF 54 3C ..9..T<.~-H...T<
|
||
180001F20 00 E8 EA 98 0A 00 83 3D A3 54 3C 00 FF 75 18 48 .......=.T<..u.H
|
||
180001F30 8D 0D 5A E0 0A 00 E8 A9 9C 0A 00 48 8D 0D 8E 54 ..Z........H...T
|
||
180001F40 3C 00 E8 5D 98 0A 00 48 8D 44 24 40 48 89 84 24 <..]...H.D$@H..$
|
||
180001F50 90 00 00 00 48 8D 05 35 EE 3A 00 48 89 44 24 40 ....H..5.:.H.D$@
|
||
180001F60 48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44 H.D$@H.D$x.W...D
|
||
180001F70 24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 06 00 00 $ .W....L$0A....
|
||
180001F80 00 48 8D 15 D8 DE 3A 00 48 8D 4C 24 20 E8 1E DD .H....:.H.L$ ...
|
||
180001F90 00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D ...L.D$@H.T$ H..
|
||
180001FA0 14 54 3C 00 E8 17 93 09 00 90 48 8D 4C 24 20 E8 .T<.......H.L$ .
|
||
180001FB0 AC DA 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC ....H...........
|
||
180001FC0 48 81 EC 88 00 00 00 8B 0D 0F 4B 3C 00 65 48 8B H.........K<.eH.
|
||
180001FD0 04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B .%X........H....
|
||
180001FE0 0C 02 39 0D E8 53 3C 00 7E 2D 48 8D 0D DF 53 3C ..9..S<.~-H...S<
|
||
180001FF0 00 E8 1A 98 0A 00 83 3D D3 53 3C 00 FF 75 18 48 .......=.S<..u.H
|
||
|
||
========================================================================
|
||
FUNCTION: LoaderThread
|
||
RVA: 0x05000–0x06000 Size: 4096 bytes
|
||
180005000 8D 4D 00 48 89 4D B0 48 8D 4D 20 48 89 4D B8 48 .M.H.M.H.M H.M.H
|
||
180005010 8D 4D 40 48 89 4D C0 48 8D 4D 3C 48 89 4D C8 48 .M@H.M.H.M<H.M.H
|
||
180005020 8D 4D 28 48 89 4D D0 48 8D 4D 10 48 89 4D D8 48 .M(H.M.H.M.H.M.H
|
||
180005030 8D 4D 31 48 89 4D E0 48 8D 4D 08 48 89 4D E8 48 .M1H.M.H.M.H.M.H
|
||
180005040 8D 4D 38 48 89 4D F0 84 C0 74 13 4C 8B C3 48 8B .M8H.M...t.L..H.
|
||
180005050 54 24 50 48 8D 4D 80 E8 04 F7 FF FF EB 1D 48 8D T$PH.M........H.
|
||
180005060 45 80 48 89 44 24 28 4D 8B CD 45 8B C2 48 8B D3 E.H.D$(M..E..H..
|
||
180005070 48 8B 4C 24 50 E8 D6 2B 00 00 90 48 8D 4D 40 E8 H.L$P..+...H.M@.
|
||
180005080 DC A9 00 00 48 8B 44 24 50 48 8B 8D D0 05 00 00 ....H.D$PH......
|
||
180005090 48 33 CC E8 38 66 0A 00 48 8B 9C 24 38 07 00 00 H3..8f..H..$8...
|
||
1800050A0 0F 28 B4 24 E0 06 00 00 48 81 C4 F0 06 00 00 41 .(.$....H......A
|
||
1800050B0 5F 41 5E 41 5D 41 5C 5F 5E 5D C3 90 4D 4B 00 00 _A^A]A\_^]..MK..
|
||
1800050C0 5C 4B 00 00 70 4B 00 00 87 4B 00 00 51 4B 00 00 \K..pK...K..QK..
|
||
1800050D0 60 4B 00 00 74 4B 00 00 8B 4B 00 00 9F 4B 00 00 `K..tK...K...K..
|
||
1800050E0 00 08 08 08 01 02 03 08 08 08 08 08 08 08 08 08 ................
|
||
1800050F0 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ................
|
||
180005100 04 08 08 08 05 06 07 CC CC CC CC CC CC CC CC CC ................
|
||
180005110 48 89 5C 24 10 55 56 57 41 54 41 55 41 56 41 57 H.\$.UVWATAUAVAW
|
||
180005120 48 8D AC 24 10 FA FF FF 48 81 EC F0 06 00 00 0F H..$....H.......
|
||
180005130 29 B4 24 E0 06 00 00 48 8B 05 02 FF 3B 00 48 33 ).$....H....;.H3
|
||
180005140 C4 48 89 85 D0 05 00 00 4D 8B E9 0F 28 F2 48 8B .H......M...(.H.
|
||
180005150 DA 48 89 4C 24 50 33 FF 41 0F B6 41 0A 88 45 30 .H.L$P3.A..A..E0
|
||
180005160 84 C0 75 04 C6 45 30 02 40 32 F6 41 BE 03 00 00 ..u..E0.@2.A....
|
||
180005170 00 41 B4 65 41 8B 51 04 45 32 FF 41 0F BE 41 08 .A.eA.Q.E2.A..A.
|
||
180005180 83 C0 BF 41 B9 01 00 00 00 83 F8 26 77 71 48 98 ...A.......&wqH.
|
||
180005190 4C 8D 05 69 AE FF FF 41 0F B6 84 00 40 57 00 00 L..i...A....@W..
|
||
1800051A0 41 8B 8C 80 1C 57 00 00 49 03 C8 FF E1 41 0F B6 A....W..I....A..
|
||
1800051B0 F1 41 BE 04 00 00 00 41 B4 70 EB 47 41 0F B6 F1 .A.....A.p.GA...
|
||
1800051C0 B8 06 00 00 00 83 FA FF 0F 44 D0 45 8B F1 EB 33 .........D.E...3
|
||
1800051D0 41 0F B6 F1 B8 06 00 00 00 83 FA FF 0F 44 D0 41 A............D.A
|
||
1800051E0 BE 02 00 00 00 EB 1C 41 0F B6 F1 83 FA FF 75 07 .......A......u.
|
||
1800051F0 BA 06 00 00 00 EB 0C 85 D2 41 0F 44 D1 EB 04 45 .........A.D...E
|
||
180005200 0F B6 F9 8B C2 B9 32 04 00 00 3B D1 0F 4F C1 89 ......2...;..O..
|
||
180005210 44 24 38 8D 82 CE FB FF FF 0F 4E C7 89 44 24 34 D$8.......N..D$4
|
||
180005220 0F 28 C6 FF 15 3F C5 0A 00 8B D0 85 C0 0F 95 45 .(...?.........E
|
||
180005230 32 66 0F 2E F6 0F 9A C0 3C 01 75 33 48 8D 45 60 2f......<.u3H.E`
|
||
180005240 48 8D 4D 61 85 D2 48 0F 44 C8 48 89 4D 10 8B 05 H.Ma..H.D.H.M...
|
||
180005250 D8 F0 0C 00 66 89 01 0F B6 05 D0 F0 0C 00 88 41 ....f..........A
|
||
180005260 02 48 8B 55 10 48 83 C2 03 48 89 55 10 EB 50 8B .H.U.H...H.U..P.
|
||
180005270 44 24 38 0F 28 DE 4C 8D 85 C9 05 00 00 48 8D 55 D$8.(.L......H.U
|
||
180005280 60 48 8D 4C 24 40 83 F8 FF 75 18 45 84 FF 74 07 `H.L$@...u.E..t.
|
||
180005290 E8 9B 5C 00 00 EB 1A 44 89 74 24 20 E8 9F 4B 00 ..\....D.t$ ..K.
|
||
1800052A0 00 EB 0E 89 44 24 28 44 89 74 24 20 E8 AF 49 00 ....D$(D.t$ ..I.
|
||
1800052B0 00 0F 28 44 24 40 0F 29 45 10 66 48 0F 7E C2 4C ..(D$@.)E.fH.~.L
|
||
1800052C0 8D 45 60 4C 89 45 00 44 8B D2 45 2B D0 44 89 55 .E`L.E.D..E+.D.U
|
||
1800052D0 34 40 38 7D 32 74 0A 4C 8D 45 61 4C 89 45 00 EB 4@8}2t.L.EaL.E..
|
||
1800052E0 0D 80 7D 30 02 74 07 41 FF C2 44 89 55 34 40 84 ..}0.t.A..D.U4@.
|
||
1800052F0 F6 74 2E 4C 3B C2 74 25 41 0F B6 00 3C 61 7C 09 .t.L;.t%A...<a|.
|
||
180005300 3C 7A 7F 05 2C 20 41 88 00 49 FF C0 4C 3B C2 75 <z.., A..I..L;.u
|
||
180005310 E7 48 8B 55 10 4C 8B 45 00 44 8B 55 34 41 80 C4 .H.U.L.E.D.U4A..
|
||
180005320 E0 66 48 0F 7E F0 48 C1 E8 34 25 FF 07 00 00 3D .fH.~.H..4%....=
|
||
180005330 FF 07 00 00 0F 95 C0 34 01 88 44 24 30 40 0F B6 .......4..D$0@..
|
||
180005340 F7 40 88 7D 31 48 8B CA 48 89 55 08 4C 8B DA 48 .@.}1H..H.U.L..H
|
||
180005350 89 55 28 48 89 55 20 89 7D 38 89 7D 3C 0F 57 C0 .U(H.U .}8.}<.W.
|
||
180005360 0F 11 45 40 48 89 7D 50 48 C7 45 58 0F 00 00 00 ..E@H.}PH.EX....
|
||
180005370 40 88 7D 40 0F 85 94 02 00 00 45 0F B6 7D 0B 45 @.}@......E..}.E
|
||
180005380 84 FF 75 0A 45 38 7D 0C 0F 84 AC 01 00 00 49 8B ..u.E8}.......I.
|
||
180005390 C0 4C 3B C2 73 27 44 0F B6 08 41 80 F9 2E 75 09 .L;.s'D...A...u.
|
||
1800053A0 4C 8B D8 48 89 45 28 EB 0C 45 3A CC 75 07 48 8B L..H.E(..E:.u.H.
|
||
1800053B0 C8 48 89 45 08 48 FF C0 48 3B C2 72 D9 49 8B C3 .H.E.H..H;.r.I..
|
||
1800053C0 49 3B CB 48 0F 42 C1 48 89 45 20 45 84 FF 74 13 I;.H.B.H.E E..t.
|
||
1800053D0 4C 3B DA 75 0E 41 FF C2 44 89 55 34 40 B6 01 40 L;.u.A..D.U4@..@
|
||
1800053E0 88 75 31 41 80 7D 0C 00 0F 84 4C 01 00 00 48 8B .u1A.}....L...H.
|
||
1800053F0 85 50 06 00 00 48 85 C0 74 11 48 8B 48 08 48 89 .P...H..t.H.H.H.
|
||
180005400 4C 24 48 48 8B 01 FF 50 08 EB 0D B1 01 FF 15 85 L$HH...P........
|
||
180005410 BF 0A 00 48 89 44 24 48 48 8D 4C 24 40 E8 DE 89 ...H.D$HH.L$@...
|
||
180005420 00 00 48 8B C8 48 8B 00 48 8D 54 24 58 FF 50 28 ..H..H..H.T$X.P(
|
||
180005430 48 8B 55 58 48 83 FA 0F 76 43 48 FF C2 48 8B 4D H.UXH...vCH..H.M
|
||
180005440 40 48 8B C1 48 81 FA 00 10 00 00 72 2B 48 83 C2 @H..H......r+H..
|
||
180005450 27 48 8B 49 F8 48 2B C1 48 83 E8 08 48 83 F8 1F 'H.I.H+.H...H...
|
||
180005460 76 16 48 89 7C 24 20 45 33 C9 45 33 C0 33 D2 33 v.H.|$ E3.E3.3.3
|
||
180005470 C9 FF 15 C9 C3 0A 00 CC E8 DB 62 0A 00 0F 10 44 ..........b....D
|
||
180005480 24 58 0F 11 45 40 0F 10 4C 24 68 0F 11 4D 50 48 $X..E@..L$h..MPH
|
||
180005490 89 7C 24 68 48 C7 44 24 70 0F 00 00 00 C6 44 24 .|$hH.D$p.....D$
|
||
1800054A0 58 00 48 8D 4C 24 58 E8 B4 A5 00 00 90 48 8B 4C X.H.L$X......H.L
|
||
1800054B0 24 48 48 85 C9 74 18 48 8B 01 FF 50 10 48 8B C8 $HH..t.H...P.H..
|
||
1800054C0 48 85 C0 74 0A 48 8B 00 BA 01 00 00 00 FF 10 48 H..t.H.........H
|
||
1800054D0 8D 45 40 48 83 7D 58 0F 48 0F 47 45 40 4C 8B 4D .E@H.}X.H.GE@L.M
|
||
1800054E0 20 4C 8B 45 00 4D 2B C8 48 8B 55 50 48 85 D2 74 L.E.M+.H.UPH..t
|
||
1800054F0 2C 4C 0F BE 10 4D 3B CA 76 23 48 8D 0C 02 66 90 ,L...M;.v#H...f.
|
||
180005500 49 0F BE D2 4C 2B CA FF C7 48 8D 50 01 48 3B D1 I...L+...H.P.H;.
|
||
180005510 48 0F 45 C2 4C 0F BE 10 4D 3B CA 77 E3 89 7D 3C H.E.L...M;.w..}<
|
||
180005520 44 8B 55 34 44 03 D7 44 89 55 34 48 8B 55 10 0F D.U4D..D.U4H.U..
|
||
180005530 B6 75 31 48 8B 4D 08 8B 7D 38 41 83 EE 01 0F 84 .u1H.M..}8A.....
|
||
180005540 9A 00 00 00 41 83 EE 01 0F 84 B4 00 00 00 41 83 ....A.........A.
|
||
180005550 FE 01 0F 85 86 00 00 00 41 80 7D 0B 00 0F 84 A6 ........A.}.....
|
||
180005560 00 00 00 41 0F B6 45 08 3C 67 74 08 3C 47 0F 85 ...A..E.<gt.<G..
|
||
180005570 95 00 00 00 8B C1 41 2B C0 40 84 F6 75 02 FF C8 ......A+.@..u...
|
||
180005580 44 8B 4C 24 34 44 2B C8 44 03 4C 24 38 41 8B F9 D.L$4D+.D.L$8A..
|
||
180005590 44 89 4D 38 48 3B CA 75 70 0F 28 CE 0F 54 0D 4D D.M8H;.up.(..T.M
|
||
1800055A0 E0 3A 00 F2 0F 10 05 DD DC 3A 00 66 0F 2F C1 76 .:.......:.f./.v
|
||
1800055B0 58 0F 57 C0 66 0F 2E F0 7A 02 74 4D 4C 3B C2 73 X.W.f...z.tML;.s
|
||
1800055C0 48 41 0F B6 00 3C 30 75 07 FF C7 89 7D 38 EB 04 HA...<0u....}8..
|
||
1800055D0 3C 2E 75 35 49 FF C0 4C 3B C2 72 E5 EB 2B 8B 7C <.u5I..L;.r..+.|
|
||
1800055E0 24 34 85 FF 74 20 41 80 7D 0B 00 75 19 41 80 7D $4..t A.}..u.A.}
|
||
1800055F0 0C 00 75 12 48 FF C9 48 89 4D 08 44 38 21 75 F4 ..u.H..H.M.D8!u.
|
||
180005600 EB 04 8B 7C 24 34 89 7D 38 0F B6 44 24 30 44 03 ...|$4.}8..D$0D.
|
||
180005610 D7 44 89 55 34 41 80 7D 0D 00 74 0F 41 80 7D 09 .D.U4A.}..t.A.}.
|
||
180005620 00 75 08 84 C0 75 04 B0 01 EB 02 32 C0 88 45 33 .u...u.....2..E3
|
||
180005630 48 8D 4D 30 48 89 4D 80 48 8D 4D 32 48 89 4D 88 H.M0H.M.H.M2H.M.
|
||
180005640 48 8D 4D 33 48 89 4D 90 48 8D 4D 34 48 89 4D 98 H.M3H.M.H.M4H.M.
|
||
180005650 4C 89 6D A0 48 8D 8D 50 06 00 00 48 89 4D A8 48 L.m.H..P...H.M.H
|
||
180005660 8D 4D 00 48 89 4D B0 48 8D 4D 20 48 89 4D B8 48 .M.H.M.H.M H.M.H
|
||
180005670 8D 4D 40 48 89 4D C0 48 8D 4D 3C 48 89 4D C8 48 .M@H.M.H.M<H.M.H
|
||
180005680 8D 4D 28 48 89 4D D0 48 8D 4D 10 48 89 4D D8 48 .M(H.M.H.M.H.M.H
|
||
180005690 8D 4D 31 48 89 4D E0 48 8D 4D 08 48 89 4D E8 48 .M1H.M.H.M.H.M.H
|
||
1800056A0 8D 4D 38 48 89 4D F0 84 C0 74 13 4C 8B C3 48 8B .M8H.M...t.L..H.
|
||
1800056B0 54 24 50 48 8D 4D 80 E8 A4 F0 FF FF EB 1D 48 8D T$PH.M........H.
|
||
1800056C0 45 80 48 89 44 24 28 4D 8B CD 45 8B C2 48 8B D3 E.H.D$(M..E..H..
|
||
1800056D0 48 8B 4C 24 50 E8 76 25 00 00 90 48 8D 4D 40 E8 H.L$P.v%...H.M@.
|
||
1800056E0 7C A3 00 00 48 8B 44 24 50 48 8B 8D D0 05 00 00 |...H.D$PH......
|
||
1800056F0 48 33 CC E8 D8 5F 0A 00 48 8B 9C 24 38 07 00 00 H3..._..H..$8...
|
||
180005700 0F 28 B4 24 E0 06 00 00 48 81 C4 F0 06 00 00 41 .(.$....H......A
|
||
180005710 5F 41 5E 41 5D 41 5C 5F 5E 5D C3 90 AD 51 00 00 _A^A]A\_^]...Q..
|
||
180005720 BC 51 00 00 D0 51 00 00 E7 51 00 00 B1 51 00 00 .Q...Q...Q...Q..
|
||
180005730 C0 51 00 00 D4 51 00 00 EB 51 00 00 FF 51 00 00 .Q...Q...Q...Q..
|
||
180005740 00 08 08 08 01 02 03 08 08 08 08 08 08 08 08 08 ................
|
||
180005750 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ................
|
||
180005760 04 08 08 08 05 06 07 CC CC CC CC CC CC CC CC CC ................
|
||
180005770 40 53 56 57 41 54 41 57 48 83 EC 30 48 8B 05 BD @SVWATAWH..0H...
|
||
180005780 F8 3B 00 48 33 C4 48 89 44 24 20 48 8B 39 49 8B .;.H3.H.D$ H.9I.
|
||
180005790 D8 4C 89 74 24 78 4C 8B E2 4C 8B F9 4C 8D 77 02 .L.t$xL..L..L.w.
|
||
1800057A0 49 3B FE 74 40 48 89 6C 24 70 66 0F 1F 44 00 00 I;.t@H.l$pf..D..
|
||
1800057B0 48 8B 53 10 0F B6 2F 48 FF C2 48 3B 53 18 76 08 H.S.../H..H;S.v.
|
||
1800057C0 48 8B 03 48 8B CB FF 10 48 8B 4B 10 48 FF C7 48 H..H....H.K.H..H
|
||
1800057D0 8B 43 08 40 88 2C 01 48 FF 43 10 49 3B FE 75 D0 .C.@.,.H.C.I;.u.
|
||
1800057E0 48 8B 6C 24 70 49 8B 47 08 4C 8B 74 24 78 80 38 H.l$pI.G.L.t$x.8
|
||
1800057F0 00 74 4B 49 8B 47 18 8B 08 49 8B 47 10 8B 10 3B .tKI.G...I.G...;
|
||
180005800 D1 7D 3B 2B CA 48 63 F9 85 C9 7E 32 0F 1F 40 00 .};+.Hc...~2..@.
|
||
180005810 48 8B 53 10 48 FF C2 48 3B 53 18 76 08 48 8B 03 H.S.H..H;S.v.H..
|
||
180005820 48 8B CB FF 10 4C 8B 43 10 48 FF CF 48 8B 4B 08 H....L.C.H..H.K.
|
||
180005830 41 C6 04 08 30 48 FF 43 10 48 85 FF 7F D2 4D 8B A...0H.C.H....M.
|
||
180005840 47 28 4C 8B CB 49 8B 57 20 49 8B CC 4D 8B 00 E8 G(L..I.W I..M...
|
||
180005850 6C 23 00 00 49 8B C4 48 8B 4C 24 20 48 33 CC E8 l#..I..H.L$ H3..
|
||
180005860 6C 5E 0A 00 48 83 C4 30 41 5F 41 5C 5F 5E 5B C3 l^..H..0A_A\_^[.
|
||
180005870 40 53 55 56 57 41 55 41 56 41 57 48 81 EC 80 00 @SUVWAUAVAWH....
|
||
180005880 00 00 48 8B 05 B7 F7 3B 00 48 33 C4 48 89 44 24 ..H....;.H3.H.D$
|
||
180005890 70 41 8B 71 04 4D 8B E9 48 8B DA 4C 8B F9 85 F6 pA.q.M..H..L....
|
||
1800058A0 79 56 41 83 39 00 7F 50 49 8B 38 49 8B 68 08 48 yVA.9..PI.8I.h.H
|
||
1800058B0 03 EF 48 3B FD 74 39 66 0F 1F 84 00 00 00 00 00 ..H;.t9f........
|
||
1800058C0 48 8B 53 10 0F B6 37 48 FF C2 48 3B 53 18 76 08 H.S...7H..H;S.v.
|
||
1800058D0 48 8B 03 48 8B CB FF 10 48 8B 53 10 48 FF C7 48 H..H....H.S.H..H
|
||
1800058E0 8B 4B 08 40 88 34 0A 48 FF 43 10 48 3B FD 75 D0 .K.@.4.H.C.H;.u.
|
||
1800058F0 49 89 1F E9 83 01 00 00 41 0F 10 08 33 FF 4C 89 I.......A...3.L.
|
||
180005900 A4 24 C8 00 00 00 4D 8B 60 08 44 8B CF 66 49 0F .$....M.`.D..fI.
|
||
180005910 7E CA 48 89 7C 24 64 4D 03 E2 89 7C 24 6C 4C 89 ~.H.|$dM...|$lL.
|
||
180005920 54 24 48 49 8B C4 48 89 44 24 50 48 89 7C 24 58 T$HI..H.D$PH.|$X
|
||
180005930 89 7C 24 60 4D 3B D4 74 2C 4C 8D 4C 24 60 4D 8B .|$`M;.t,L.L$`M.
|
||
180005940 C4 49 8B D2 48 8D 4C 24 30 E8 C2 85 00 00 44 8B .I..H.L$0.....D.
|
||
180005950 4C 24 60 4C 8B 54 24 48 48 8B 08 48 8B 44 24 50 L$`L.T$HH..H.D$P
|
||
180005960 48 89 4C 24 58 40 88 7C 24 68 4C 3B D0 0F 84 D6 H.L$X@.|$hL;....
|
||
180005970 00 00 00 BD FF FF FF 7F 48 8D 15 59 E2 0C 00 44 ........H..Y...D
|
||
180005980 8B DF 48 8D 0D 27 DF 0C 00 3B FE 75 08 85 F6 0F ..H..'...;.u....
|
||
180005990 89 B4 00 00 00 41 81 F9 FD 25 00 00 73 1D B8 01 .....A...%..s...
|
||
1800059A0 00 00 00 44 3B 09 72 66 83 F0 03 48 83 C1 04 48 ...D;.rf...H...H
|
||
1800059B0 3B CA 75 EF B8 01 00 00 00 EB 53 48 8B C1 BA CA ;.u.......SH....
|
||
1800059C0 00 00 00 0F 1F 40 00 66 0F 1F 84 00 00 00 00 00 .....@.f........
|
||
1800059D0 4C 8B C2 49 D1 E8 46 3B 0C 80 4A 8D 0C 80 73 05 L..I..F;..J...s.
|
||
1800059E0 49 8B D0 EB 11 48 8D 41 04 48 C7 C1 FF FF FF FF I....H.A.H......
|
||
1800059F0 49 2B C8 48 03 D1 48 85 D2 7F D5 48 8D 0D AE DE I+.H..H....H....
|
||
180005A00 0C 00 48 2B C1 48 C1 F8 02 83 E0 01 FF C0 8B CD ..H+.H..........
|
||
180005A10 2B C8 3B CF 7C 2F 03 F8 3B FE 7E 04 85 F6 79 20 +.;.|/..;.~...y
|
||
180005A20 48 8D 4C 24 48 E8 86 2E 00 00 4C 8B 54 24 48 4C H.L$H.....L.T$HL
|
||
180005A30 3B 54 24 50 74 13 44 8B 4C 24 60 E9 38 FF FF FF ;T$Pt.D.L$`.8...
|
||
180005A40 41 8B FB EB 04 85 F6 78 05 8B EF 4D 8B E2 48 8D A......x...M..H.
|
||
180005A50 44 24 30 4C 89 64 24 40 4D 8B CD 48 89 44 24 28 D$0L.d$@M..H.D$(
|
||
180005A60 44 8B C5 48 8B D3 49 8B CF 0F 11 4C 24 30 E8 DD D..H..I....L$0..
|
||
180005A70 25 00 00 4C 8B A4 24 C8 00 00 00 49 8B C7 48 8B %..L..$....I..H.
|
||
180005A80 4C 24 70 48 33 CC E8 45 5C 0A 00 48 81 C4 80 00 L$pH3..E\..H....
|
||
180005A90 00 00 41 5F 41 5E 41 5D 5F 5E 5D 5B C3 CC CC CC ..A_A^A]_^][....
|
||
180005AA0 48 89 5C 24 18 48 89 7C 24 20 41 56 48 83 EC 30 H.\$.H.|$ AVH..0
|
||
180005AB0 4D 8B F0 49 8B D9 4C 8B 41 10 48 8B F9 4C 3B C2 M..I..L.A.H..L;.
|
||
180005AC0 0F 82 D2 00 00 00 4C 8B 49 18 49 8B C1 49 2B C0 ......L.I.I..I+.
|
||
180005AD0 48 3B D8 0F 87 99 00 00 00 48 89 74 24 40 49 8D H;.......H.t$@I.
|
||
180005AE0 04 18 48 89 41 10 4C 89 7C 24 48 49 83 F9 0F 76 ..H.A.L.|$HI...v
|
||
180005AF0 03 48 8B 09 4C 8D 3C 11 49 8D 04 1E 49 3B C7 76 .H..L.<.I...I;.v
|
||
180005B00 1A 49 8D 04 08 4C 3B F0 77 11 4D 3B FE 77 04 33 .I...L;.w.M;.w.3
|
||
180005B10 F6 EB 0B 49 8B F7 49 2B F6 EB 03 48 8B F3 4C 2B ...I..I+...H..L+
|
||
180005B20 C2 49 8D 0C 1F 49 FF C0 49 8B D7 E8 8E 6E 0A 00 .I...I..I....n..
|
||
180005B30 4C 8B C6 49 8B D6 49 8B CF E8 26 6D 0A 00 4C 8B L..I..I...&m..L.
|
||
180005B40 C3 4A 8D 14 36 4C 2B C6 4A 8D 0C 3E 48 03 D3 E8 .J..6L+.J..>H...
|
||
180005B50 10 6D 0A 00 4C 8B 7C 24 48 48 8B C7 48 8B 74 24 .m..L.|$HH..H.t$
|
||
180005B60 40 48 8B 5C 24 50 48 8B 7C 24 58 48 83 C4 30 41 @H.\$PH.|$XH..0A
|
||
180005B70 5E C3 4C 8B CA 48 89 5C 24 28 48 8B D3 4C 89 74 ^.L..H.\$(H..L.t
|
||
180005B80 24 20 E8 99 26 00 00 48 8B 5C 24 50 48 8B 7C 24 $ ..&..H.\$PH.|$
|
||
180005B90 58 48 83 C4 30 41 5E C3 E8 33 8C 00 00 CC CC CC XH..0A^..3......
|
||
180005BA0 48 89 5C 24 08 57 48 83 EC 60 48 8B D9 0F B6 09 H.\$.WH..`H.....
|
||
180005BB0 80 F9 7D 0F 84 C0 00 00 00 80 F9 3A 0F 84 B7 00 ..}........:....
|
||
180005BC0 00 00 8D 41 D0 3C 09 0F 87 1F 01 00 00 33 C0 80 ...A.<.......3..
|
||
180005BD0 F9 30 75 0C 48 FF C3 EB 3E 0F 1F 80 00 00 00 00 .0u.H...>.......
|
||
180005BE0 3D CC CC CC 0C 0F 87 F4 00 00 00 8D 0C 80 0F BE =...............
|
||
180005BF0 03 48 FF C3 8D 04 48 83 C0 D0 48 3B DA 74 0D 0F .H....H...H;.t..
|
||
180005C00 B6 0B 80 F9 30 7C 05 80 F9 39 7E D4 3D FF FF FF ....0|...9~.=...
|
||
180005C10 7F 0F 87 C8 00 00 00 48 3B DA 0F 84 CC 00 00 00 .......H;.......
|
||
180005C20 0F B6 0B 80 F9 7D 74 09 80 F9 3A 0F 85 BB 00 00 .....}t...:.....
|
||
180005C30 00 49 8B 38 48 8B 4F 08 48 83 79 18 00 0F 8F 8F .I.8H.O.H.y.....
|
||
180005C40 00 00 00 48 C7 41 18 FF FF FF FF 48 8D 4C 24 20 ...H.A.....H.L$
|
||
180005C50 48 8B 57 10 44 8B C0 E8 E4 D9 FF FF 0F 10 44 24 H.W.D.........D$
|
||
180005C60 20 48 8D 4C 24 40 F2 0F 10 4C 24 30 0F 29 44 24 H.L$@...L$0.)D$
|
||
180005C70 40 F2 0F 11 4C 24 50 EB 41 49 8B 38 48 8B 4F 08 @...L$P.AI.8H.O.
|
||
180005C80 4C 8B 41 18 4D 85 C0 78 70 49 8D 40 01 48 89 41 L.A.M..xpI.@.H.A
|
||
180005C90 18 48 8D 4C 24 40 48 8B 57 10 E8 A1 D9 FF FF 0F .H.L$@H.W.......
|
||
180005CA0 10 44 24 40 48 8D 4C 24 20 F2 0F 10 4C 24 50 0F .D$@H.L$ ...L$P.
|
||
180005CB0 29 44 24 20 F2 0F 11 4C 24 30 E8 51 2F 00 00 48 )D$ ...L$0.Q/..H
|
||
180005CC0 8B 0F 89 01 48 8B C3 48 8B 5C 24 70 48 83 C4 60 ....H..H.\$pH..`
|
||
180005CD0 5F C3 48 8D 0D 17 B8 0C 00 E8 12 85 00 00 CC 48 _.H............H
|
||
180005CE0 8D 0D BA B5 0C 00 E8 05 85 00 00 CC 48 8D 0D 1D ............H...
|
||
180005CF0 B5 0C 00 E8 F8 84 00 00 CC 48 8D 0D 68 B5 0C 00 .........H..h...
|
||
180005D00 E8 EB 84 00 00 CC CC CC CC CC CC CC CC CC CC CC ................
|
||
180005D10 48 89 5C 24 08 57 48 83 EC 60 44 0F B6 09 48 8B H.\$.WH..`D...H.
|
||
180005D20 D9 41 80 F9 7D 0F 84 EB 00 00 00 41 80 F9 3A 0F .A..}......A..:.
|
||
180005D30 84 E1 00 00 00 41 8D 41 D0 3C 09 0F 87 4F 01 00 .....A.A.<...O..
|
||
180005D40 00 33 C9 41 80 F9 30 75 07 48 FF C3 EB 39 66 90 .3.A..0u.H...9f.
|
||
180005D50 81 F9 CC CC CC 0C 0F 87 27 01 00 00 0F BE 03 8D ........'.......
|
||
180005D60 0C 89 48 FF C3 8D 49 E8 8D 0C 48 48 3B DA 74 0B ..H...I...HH;.t.
|
||
180005D70 0F B6 03 3C 30 7C 04 3C 39 7E D5 81 F9 FF FF FF ...<0|.<9~......
|
||
180005D80 7F 0F 87 FC 00 00 00 48 3B DA 0F 84 00 01 00 00 .......H;.......
|
||
180005D90 0F B6 03 3C 7D 74 08 3C 3A 0F 85 F1 00 00 00 49 ...<}t.<:......I
|
||
180005DA0 8B 38 0F B6 57 18 8D 42 FF 3C 05 0F 86 B8 00 00 .8..W..B.<......
|
||
180005DB0 00 80 FA 0A 0F 84 AF 00 00 00 48 8B 47 08 48 83 ..........H.G.H.
|
||
180005DC0 78 18 00 0F 8F AD 00 00 00 48 C7 40 18 FF FF FF x........H.@....
|
||
180005DD0 FF 48 8B 57 10 44 8B C1 48 8D 4C 24 20 E8 5E D8 .H.W.D..H.L$ .^.
|
||
180005DE0 FF FF 0F 10 44 24 20 48 8D 4C 24 40 F2 0F 10 4C ....D$ H.L$@...L
|
||
180005DF0 24 30 0F 29 44 24 40 F2 0F 11 4C 24 50 E8 4E 2F $0.)D$@...L$P.N/
|
||
180005E00 00 00 48 8B 0F 89 41 04 48 8B C3 48 8B 5C 24 70 ..H...A.H..H.\$p
|
||
180005E10 48 83 C4 60 5F C3 49 8B 38 0F B6 4F 18 8D 41 FF H..`_.I.8..O..A.
|
||
180005E20 3C 05 76 45 80 F9 0A 74 40 48 8B 4F 08 4C 8B 41 <.vE...t@H.O.L.A
|
||
180005E30 18 4D 85 C0 78 67 49 8D 40 01 48 89 41 18 48 8D .M..xgI.@.H.A.H.
|
||
180005E40 4C 24 40 48 8B 57 10 E8 F4 D7 FF FF 0F 10 44 24 L$@H.W........D$
|
||
180005E50 40 48 8D 4C 24 20 F2 0F 10 4C 24 50 0F 29 44 24 @H.L$ ...L$P.)D$
|
||
180005E60 20 F2 0F 11 4C 24 30 EB 94 48 8D 0D 78 B7 0C 00 ...L$0..H..x...
|
||
180005E70 E8 7B 83 00 00 CC 48 8D 0D 73 B6 0C 00 E8 6E 83 .{....H..s....n.
|
||
180005E80 00 00 CC 48 8D 0D 16 B4 0C 00 E8 61 83 00 00 CC ...H.......a....
|
||
180005E90 48 8D 0D 79 B3 0C 00 E8 54 83 00 00 CC 48 8D 0D H..y....T....H..
|
||
180005EA0 C4 B3 0C 00 E8 47 83 00 00 CC CC CC CC CC CC CC .....G..........
|
||
180005EB0 40 55 53 56 57 41 54 41 56 41 57 48 8D 6C 24 90 @USVWATAVAWH.l$.
|
||
180005EC0 48 81 EC 70 01 00 00 48 8B 05 72 F1 3B 00 48 33 H..p...H..r.;.H3
|
||
180005ED0 C4 48 89 45 60 4D 8B F1 48 8B DA 4C 8B E1 44 88 .H.E`M..H..L..D.
|
||
180005EE0 45 C8 33 FF 41 0F B6 41 08 3C 63 75 3D 41 80 F8 E.3.A..A.<cu=A..
|
||
180005EF0 7F 0F 87 94 03 00 00 41 88 79 0B 41 0F 10 01 0F .......A.y.A....
|
||
180005F00 29 44 24 30 41 8B 49 10 89 4C 24 40 48 8B 8D D0 )D$0A.I..L$@H...
|
||
180005F10 00 00 00 48 89 4C 24 20 4C 8D 4C 24 30 49 8B CC ...H.L$ L.L$0I..
|
||
180005F20 E8 3B E1 FF FF E9 40 03 00 00 41 38 79 0A 75 05 .;....@...A8y.u.
|
||
180005F30 41 C6 41 0A 02 B9 0A 00 00 00 BE 02 00 00 00 3C A.A............<
|
||
180005F40 42 74 1E 3C 58 74 0C 3C 62 74 16 3C 6F 74 0B 3C Bt.<Xt.<bt.<ot.<
|
||
180005F50 78 75 10 B9 10 00 00 00 EB 09 B9 08 00 00 00 EB xu..............
|
||
180005F60 02 8B CE 89 4C 24 20 45 0F B6 C8 4C 8D 45 51 48 ....L$ E...L.EQH
|
||
180005F70 8D 55 10 48 8D 4C 24 30 E8 13 2F 00 00 48 8D 4D .U.H.L$0../..H.M
|
||
180005F80 10 48 89 4D C0 4C 8B 7C 24 30 41 8B C7 2B C1 89 .H.M.L.|$0A..+..
|
||
180005F90 45 D4 41 38 76 0A 74 05 FF C0 89 45 D4 41 80 7E E.A8v.t....E.A.~
|
||
180005FA0 08 58 75 27 48 8D 4D 10 48 8D 55 10 49 3B D7 74 .Xu'H.M.H.U.I;.t
|
||
180005FB0 1A 0F B6 01 3C 61 7C 08 3C 7A 7F 04 2C 20 88 01 ....<a|.<z.., ..
|
||
180005FC0 48 FF C1 49 3B CF 75 E9 8B 45 D4 48 89 7D 00 48 H..I;.u..E.H.}.H
|
||
180005FD0 89 7D 08 41 38 7E 0B 0F 84 84 00 00 00 41 0F B6 .}.A8~.......A..
|
||
180005FE0 4E 08 80 F9 42 74 5A 80 F9 58 74 4C 80 F9 62 74 N...BtZ..XtL..bt
|
||
180005FF0 3E 80 F9 6F 74 1C 80 F9 78 74 0E 48 89 7C 24 30 >..ot...xt.H.|$0
|
||
|
||
========================================================================
|
||
FUNCTION: WndProc
|
||
RVA: 0x826A0–0x827A0 Size: 256 bytes
|
||
1800826A0 48 89 5C 24 08 48 89 6C 24 10 48 89 74 24 18 57 H.\$.H.l$.H.t$.W
|
||
1800826B0 48 83 EC 30 48 8B 05 45 45 34 00 49 8B F1 49 8B H..0H..EE4.I..I.
|
||
1800826C0 F8 8B DA 48 8B E9 48 85 C0 74 1D 48 83 C0 30 48 ...H..H..t.H..0H
|
||
1800826D0 89 44 24 20 E8 47 50 FD FF 48 85 C0 74 0A B8 01 .D$ .GP..H..t...
|
||
1800826E0 00 00 00 E9 9B 00 00 00 83 FB 02 0F 84 88 00 00 ................
|
||
1800826F0 00 83 FB 05 74 2B 81 FB 12 01 00 00 75 10 48 8B ....t+......u.H.
|
||
180082700 C7 25 F0 FF 00 00 48 3D 00 F1 00 00 74 73 4C 8B .%....H=....tsL.
|
||
180082710 CE 4C 8B C7 8B D3 48 8B CD FF 15 21 EE 02 00 EB .L....H....!....
|
||
180082720 62 48 83 3D 0F 45 34 00 00 74 56 48 83 FF 01 74 bH.=.E4..tVH...t
|
||
180082730 50 48 8B 0D E8 44 34 00 33 DB 48 85 C9 74 0D 48 PH...D4.3.H..t.H
|
||
180082740 8B 01 FF 50 10 48 89 1D D4 44 34 00 48 8B 0D DD ...P.H...D4.H...
|
||
180082750 44 34 00 48 8B C6 48 C1 E8 10 33 D2 44 0F B7 C8 D4.H..H...3.D...
|
||
180082760 44 0F B7 C6 48 8B 01 89 5C 24 28 89 5C 24 20 FF D...H...\$(.\$ .
|
||
180082770 50 68 E8 39 FE FF FF EB 08 33 C9 FF 15 6F ED 02 Ph.9.....3...o..
|
||
180082780 00 33 C0 48 8B 5C 24 40 48 8B 6C 24 48 48 8B 74 .3.H.\$@H.l$HH.t
|
||
180082790 24 50 48 83 C4 30 5F C3 CC CC CC CC CC CC CC CC $PH..0_.........
|
||
|
||
========================================================================
|
||
FUNCTION: OverlayWindowInit
|
||
RVA: 0x827A0–0x8301A Size: 2170 bytes
|
||
1800827A0 48 8B C4 48 89 58 08 48 89 70 10 48 89 78 18 55 H..H.X.H.p.H.x.U
|
||
1800827B0 41 54 41 55 41 56 41 57 48 8D A8 F8 FC FF FF 48 ATAUAVAWH......H
|
||
1800827C0 81 EC E0 03 00 00 0F 29 70 C8 48 8B 05 6F 28 34 .......)p.H..o(4
|
||
1800827D0 00 48 33 C4 48 89 85 C0 02 00 00 48 8B 05 1E 44 .H3.H......H...D
|
||
1800827E0 34 00 48 85 C0 74 10 48 8B 88 D0 00 00 00 48 85 4.H..t.H......H.
|
||
1800827F0 C9 74 04 C6 41 30 01 41 BF 04 00 00 00 33 D2 B9 .t..A0.A.....3..
|
||
180082800 0A 00 00 00 E8 37 5C FD FF 8B 3D CD 42 34 00 85 .....7\...=.B4..
|
||
180082810 C0 74 75 65 48 8B 04 25 58 00 00 00 48 8B 0C F8 .tueH..%X...H...
|
||
180082820 41 8B 04 0F 39 05 16 4C 34 00 7E 35 48 8D 0D 0D A...9..L4.~5H...
|
||
180082830 4C 34 00 E8 D8 8F 02 00 83 3D 01 4C 34 00 FF 75 L4.......=.L4..u
|
||
180082840 20 48 8D 0D 28 C4 32 00 FF 15 92 E8 02 00 48 89 H..(.2.......H.
|
||
180082850 05 FB 4B 34 00 48 8D 0D E4 4B 34 00 E8 43 8F 02 ..K4.H...K4..C..
|
||
180082860 00 48 8D 15 18 C4 32 00 48 8B 0D E1 4B 34 00 FF .H....2.H...K4..
|
||
180082870 15 13 E8 02 00 48 85 C0 74 0E 48 C7 C1 FC FF FF .....H..t.H.....
|
||
180082880 FF FF D0 E9 89 00 00 00 BA 03 00 00 00 B9 06 00 ................
|
||
180082890 00 00 E8 A9 5B FD FF 85 C0 74 70 65 48 8B 04 25 ....[....tpeH..%
|
||
1800828A0 58 00 00 00 48 8B 0C F8 41 8B 04 0F 39 05 96 4B X...H...A...9..K
|
||
1800828B0 34 00 7E 35 48 8D 0D 8D 4B 34 00 E8 50 8F 02 00 4.~5H...K4..P...
|
||
1800828C0 83 3D 81 4B 34 00 FF 75 20 48 8D 0D D0 C3 32 00 .=.K4..u H....2.
|
||
1800828D0 FF 15 0A E8 02 00 48 89 05 53 4B 34 00 48 8D 0D ......H..SK4.H..
|
||
1800828E0 64 4B 34 00 E8 BB 8E 02 00 48 8D 15 C0 C3 32 00 dK4......H....2.
|
||
1800828F0 48 8B 0D 39 4B 34 00 FF 15 8B E7 02 00 48 85 C0 H..9K4.......H..
|
||
180082900 74 09 B9 02 00 00 00 FF D0 EB 06 FF 15 8F EC 02 t...............
|
||
180082910 00 48 83 3D FF 42 34 00 00 75 0F 33 D2 48 8D 0D .H.=.B4..u.3.H..
|
||
180082920 AC 0C 00 00 FF 15 76 EB 02 00 45 33 E4 4C 89 A5 ......v...E3.L..
|
||
180082930 A0 00 00 00 C7 85 90 00 00 00 50 00 00 00 33 C9 ..........P...3.
|
||
180082940 FF 15 D2 E6 02 00 48 89 85 C0 00 00 00 BA 00 7F ......H.........
|
||
180082950 00 00 33 C9 FF 15 6E EC 02 00 48 89 85 B8 00 00 ..3...n...H.....
|
||
180082960 00 BA 00 7F 00 00 33 C9 FF 15 7A EB 02 00 48 89 ......3...z...H.
|
||
180082970 85 B0 00 00 00 BA 00 7F 00 00 33 C9 FF 15 66 EB ..........3...f.
|
||
180082980 02 00 48 89 85 D8 00 00 00 33 C9 FF 15 FF E8 02 ..H......3......
|
||
180082990 00 48 89 85 A8 00 00 00 48 8D 05 01 FD FF FF 48 .H......H......H
|
||
1800829A0 89 85 98 00 00 00 48 8D 35 3B CC 32 00 48 89 B5 ......H.5;.2.H..
|
||
1800829B0 D0 00 00 00 4C 89 A5 C8 00 00 00 C7 85 94 00 00 ....L...........
|
||
1800829C0 00 03 00 00 00 48 8D 8D 90 00 00 00 FF 15 66 EC .....H........f.
|
||
1800829D0 02 00 B9 01 00 00 00 FF 15 03 EB 02 00 8B D8 33 ...............3
|
||
1800829E0 C9 FF 15 F9 EA 02 00 4C 89 64 24 58 48 8B 8D A8 .......L.d$XH...
|
||
1800829F0 00 00 00 48 89 4C 24 50 4C 89 64 24 48 4C 89 64 ...H.L$PL.d$HL.d
|
||
180082A00 24 40 89 5C 24 38 89 44 24 30 44 89 64 24 28 44 $@.\$8.D$0D.d$(D
|
||
180082A10 89 64 24 20 41 B9 00 00 00 80 4C 8B C6 48 8B 95 .d$ A.....L..H..
|
||
180082A20 D0 00 00 00 B9 28 00 00 08 FF 15 21 EC 02 00 4C .....(.....!...L
|
||
180082A30 8B F0 41 B9 02 00 00 00 41 B0 FF 33 D2 48 8B C8 ..A.....A..3.H..
|
||
180082A40 FF 15 9A EB 02 00 66 0F 6F 05 62 09 33 00 F3 0F ......f.o.b.3...
|
||
180082A50 7F 85 08 01 00 00 48 8D 95 08 01 00 00 49 8B CE ......H......I..
|
||
180082A60 FF 15 B2 EE 02 00 4C 89 65 14 48 C7 45 28 02 00 ......L.e.H.E(..
|
||
180082A70 00 00 48 C7 45 40 02 00 00 00 4C 89 65 00 C7 45 ..H.E@....L.e..E
|
||
180082A80 10 1C 00 00 00 C7 45 08 3C 00 00 00 C7 45 0C 01 ......E.<....E..
|
||
180082A90 00 00 00 C7 45 24 20 00 00 00 4C 89 75 30 48 C7 ....E$ ...L.u0H.
|
||
180082AA0 45 1C 01 00 00 00 48 C7 45 38 01 00 00 00 C7 85 E.....H.E8......
|
||
180082AB0 18 01 00 00 00 B0 00 00 C7 85 1C 01 00 00 00 A0 ................
|
||
180082AC0 00 00 48 8D 1D 5F 41 34 00 48 89 5C 24 58 48 8D ..H.._A4.H.\$XH.
|
||
180082AD0 85 E0 00 00 00 48 89 44 24 50 48 8D 35 57 41 34 .....H.D$PH.5WA4
|
||
180082AE0 00 48 89 74 24 48 4C 8D 25 43 41 34 00 4C 89 64 .H.t$HL.%CA4.L.d
|
||
180082AF0 24 40 48 8D 45 00 48 89 44 24 38 C7 44 24 30 07 $@H.E.H.D$8.D$0.
|
||
180082B00 00 00 00 C7 44 24 28 02 00 00 00 48 8D 85 18 01 ....D$(....H....
|
||
180082B10 00 00 48 89 44 24 20 45 33 C9 45 33 C0 BA 01 00 ..H.D$ E3.E3....
|
||
180082B20 00 00 33 C9 FF 15 DE ED 02 00 3D 04 00 7A 88 75 ..3.......=..z.u
|
||
180082B30 53 48 89 5C 24 58 48 8D 85 E0 00 00 00 48 89 44 SH.\$XH......H.D
|
||
180082B40 24 50 48 89 74 24 48 4C 89 64 24 40 48 8D 45 00 $PH.t$HL.d$@H.E.
|
||
180082B50 48 89 44 24 38 C7 44 24 30 07 00 00 00 C7 44 24 H.D$8.D$0.....D$
|
||
180082B60 28 02 00 00 00 48 8D 85 18 01 00 00 48 89 44 24 (....H......H.D$
|
||
180082B70 20 45 33 C9 45 33 C0 BA 05 00 00 00 33 C9 FF 15 E3.E3......3...
|
||
180082B80 84 ED 02 00 85 C0 0F 85 EC 09 00 00 E8 1F FA FF ................
|
||
180082B90 FF 48 89 BD 28 01 00 00 65 48 8B 0C 25 58 00 00 .H..(...eH..%X..
|
||
180082BA0 00 4C 8B 2C F9 43 8B 04 2F 39 05 F9 4B 34 00 7E .L.,.C../9..K4.~
|
||
180082BB0 2D 48 8D 0D F0 4B 34 00 E8 53 8C 02 00 83 3D E4 -H...K4..S....=.
|
||
180082BC0 4B 34 00 FF 75 18 48 8D 0D D3 D4 02 00 E8 12 90 K4..u.H.........
|
||
180082BD0 02 00 48 8D 0D CF 4B 34 00 E8 C6 8B 02 00 48 8D ..H...K4......H.
|
||
180082BE0 0D B3 47 34 00 E8 26 80 01 00 BA 0A 00 00 00 49 ..G4..&........I
|
||
180082BF0 8B CE FF 15 30 EA 02 00 49 8B CE FF 15 D7 E8 02 ....0...I.......
|
||
180082C00 00 48 8B 3D F8 3F 34 00 B9 B0 2C 00 00 FF 15 0D .H.=.?4...,.....
|
||
180082C10 EB 02 00 4C 8B C8 4C 8B 05 E3 3F 34 00 4D 85 C0 ...L..L...?4.M..
|
||
180082C20 74 5D 45 8B 50 04 49 0F BF 90 1C 2B 00 00 49 8D t]E.P.I....+..I.
|
||
180082C30 80 20 2B 00 00 48 8D 04 D0 44 39 10 74 36 8D 4A . +..H...D9.t6.J
|
||
180082C40 01 B8 AB AA AA 2A F7 E9 8B C2 C1 E8 1F 03 D0 8D .....*..........
|
||
180082C50 04 52 03 C0 2B C8 66 41 89 88 1C 2B 00 00 48 0F .R..+.fA...+..H.
|
||
180082C60 BF C1 48 05 64 05 00 00 49 8D 04 C0 44 89 10 33 ..H.d...I...D..3
|
||
180082C70 C9 89 48 04 66 FF 40 04 41 FF 80 14 2B 00 00 4C ..H.f.@.A...+..L
|
||
180082C80 89 8D 18 01 00 00 48 8D 44 24 60 48 89 85 E0 00 ......H.D$`H....
|
||
180082C90 00 00 4C 89 8D E8 00 00 00 4D 85 C9 74 0E 33 D2 ..L......M..t.3.
|
||
180082CA0 49 8B C9 E8 A8 23 F9 FF 33 DB EB 04 33 DB 8B C3 I....#..3...3...
|
||
180082CB0 48 89 05 49 3F 34 00 E8 A4 3B F9 FF 48 85 FF 74 H..I?4...;..H..t
|
||
180082CC0 09 48 89 3D 38 3F 34 00 EB 07 48 8B 3D 2F 3F 34 .H.=8?4...H.=/?4
|
||
180082CD0 00 83 4F 30 21 33 C9 E8 14 33 FC FF 0F 57 F6 0F ..O0!3...3...W..
|
||
180082CE0 11 75 30 0F 11 75 50 0F 11 75 60 0F 11 75 70 C7 .u0..uP..u`..up.
|
||
180082CF0 45 5C FF FF 7F 7F C7 45 6C 00 00 80 3F C7 45 70 E\.....El...?.Ep
|
||
180082D00 00 00 80 3F 66 89 5D 3A C6 45 34 00 4C 8B 67 68 ...?f.]:.E4.L.gh
|
||
180082D10 B9 48 1B 32 00 E8 76 61 F9 FF 4C 8B F8 48 8D 05 .H.2..va..L..H..
|
||
180082D20 DC 82 0A 00 48 89 05 AD 41 34 00 49 8D B7 48 1B ....H...A4.I..H.
|
||
180082D30 32 00 48 89 35 A7 41 34 00 4C 89 3D A8 41 34 00 2.H.5.A4.L.=.A4.
|
||
180082D40 4C 89 3D A9 41 34 00 48 8D 1D C2 82 0A 00 48 8B L.=.A4.H......H.
|
||
180082D50 CB E8 BA FD FC FF 48 3B C3 74 1E 0F 1F 44 00 00 ......H;.t...D..
|
||
180082D60 48 39 35 89 41 34 00 77 10 48 8B D8 48 8B C8 E8 H95.A4.w.H..H...
|
||
180082D70 9C FD FC FF 48 3B C3 75 E7 0F 28 45 30 0F 29 45 ....H;.u..(E0.)E
|
||
180082D80 A0 0F 28 4D 50 0F 28 55 60 0F 28 5D 70 C6 45 A4 ..(MP.(U`.(]p.E.
|
||
180082D90 01 0F 29 75 00 0F 29 75 10 0F 29 75 20 0F 28 45 ..)u..)u..)u .(E
|
||
180082DA0 A0 0F 29 45 30 0F 29 75 40 0F 29 4D 50 0F 29 55 ..)E0.)u@.)MP.)U
|
||
180082DB0 60 0F 29 5D 70 0F 29 B5 80 00 00 00 4C 89 7D 28 `.)]p.).....L.}(
|
||
180082DC0 C7 45 30 48 1B 32 00 C7 45 3C 00 00 70 41 48 8D .E0H.2..E<..pAH.
|
||
180082DD0 05 5B B8 32 00 48 89 45 40 48 8D 55 00 49 8B CC .[.2.H.E@H.U.I..
|
||
180082DE0 E8 BB 89 FC FF 48 89 47 70 0F 57 F6 0F 11 75 30 .....H.Gp.W...u0
|
||
180082DF0 0F 11 75 50 0F 11 75 60 0F 11 75 70 C7 45 5C FF ..uP..u`..up.E\.
|
||
180082E00 FF 7F 7F C7 45 6C 00 00 80 3F C7 45 70 00 00 80 ....El...?.Ep...
|
||
180082E10 3F 45 33 E4 66 44 89 65 3A 66 C7 45 34 00 01 C6 ?E3.fD.e:f.E4...
|
||
180082E20 45 36 01 4C 8B 7F 68 B9 78 B2 08 00 E8 5F 60 F9 E6.L..h.x...._`.
|
||
180082E30 FF 48 8B F0 48 8D 05 15 5B 05 00 48 89 05 96 40 .H..H...[..H...@
|
||
180082E40 34 00 48 8D BE 78 B2 08 00 48 89 3D 90 40 34 00 4.H..x...H.=.@4.
|
||
180082E50 48 89 35 91 40 34 00 48 89 35 92 40 34 00 48 8D H.5.@4.H.5.@4.H.
|
||
180082E60 1D FB 5A 05 00 48 8B CB E8 A3 FC FC FF 48 3B C3 ..Z..H.......H;.
|
||
180082E70 74 19 48 39 3D 77 40 34 00 77 10 48 8B D8 48 8B t.H9=w@4.w.H..H.
|
||
180082E80 C8 E8 8A FC FC FF 48 3B C3 75 E7 0F 28 45 30 0F ......H;.u..(E0.
|
||
180082E90 29 45 A0 0F 28 4D 50 0F 28 55 60 0F 28 5D 70 C6 )E..(MP.(U`.(]p.
|
||
180082EA0 45 A4 01 0F 29 75 00 0F 29 75 10 0F 29 75 20 0F E...)u..)u..)u .
|
||
180082EB0 28 45 A0 0F 29 45 30 0F 29 75 40 0F 29 4D 50 0F (E..)E0.)u@.)MP.
|
||
180082EC0 29 55 60 0F 29 5D 70 0F 29 B5 80 00 00 00 48 89 )U`.)]p.).....H.
|
||
180082ED0 75 28 C7 45 30 78 B2 08 00 C7 45 3C 00 00 70 41 u(.E0x....E<..pA
|
||
180082EE0 48 8D 05 91 C7 32 00 48 89 45 40 48 8D 55 00 49 H....2.H.E@H.U.I
|
||
180082EF0 8B CF E8 A9 88 FC FF 48 8B 05 02 3D 34 00 4C 89 .......H...=4.L.
|
||
180082F00 60 50 8B 0D E4 21 34 00 85 C9 74 24 83 E9 01 74 `P...!4...t$...t
|
||
180082F10 18 83 E9 01 74 0C 83 F9 01 75 15 E8 30 57 01 00 ....t....u..0W..
|
||
180082F20 EB 13 E8 49 38 01 00 EB 0C E8 62 19 01 00 EB 05 ...I8.....b.....
|
||
180082F30 E8 BB 12 01 00 49 8B CE E8 F3 2D FD FF E8 EE 23 .....I....-....#
|
||
180082F40 FD FF 32 DB 0F 57 C0 0F 11 85 E8 00 00 00 0F 57 ..2..W.........W
|
||
180082F50 C9 F3 0F 7F 8D F8 00 00 00 41 B8 0B 00 00 00 48 .........A.....H
|
||
180082F60 8D 15 AA C6 32 00 48 8D 8D E8 00 00 00 E8 3E CD ....2.H.......>.
|
||
180082F70 F8 FF 90 E8 D8 B4 F8 FF 48 8D 8D E8 00 00 00 48 ........H......H
|
||
180082F80 89 4C 24 20 41 BF 01 00 00 00 45 8B CF 41 B8 F8 .L$ A.....E..A..
|
||
180082F90 00 00 00 48 8D 15 86 C6 32 00 48 8B C8 E8 3E AF ...H....2.H...>.
|
||
180082FA0 FF FF 90 48 8D 8D E8 00 00 00 E8 B1 CA F8 FF 48 ...H...........H
|
||
180082FB0 8B BD 28 01 00 00 65 48 8B 34 25 58 00 00 00 90 ..(...eH.4%X....
|
||
180082FC0 44 89 7C 24 20 45 33 C9 45 33 C0 33 D2 48 8D 4D D.|$ E3.E3.3.H.M
|
||
180082FD0 00 FF 15 F9 E4 02 00 85 C0 74 3F 0F 1F 44 00 00 .........t?..D..
|
||
180082FE0 48 8D 4D 00 FF 15 DE E4 02 00 48 8D 4D 00 FF 15 H.M.......H.M...
|
||
180082FF0 CC E4 02 00 0F B6 DB 83 7D 08 12 41 0F 44 DF 44 ........}..A.D.D
|
||
180083000 89 7C 24 20 45 33 C9 45 33 C0 33 D2 48 8D 4D 00 .|$ E3.E3.3.H.M.
|
||
180083010 FF 15 BA E4 02 00 85 C0 75 C6 ........u.
|
||
|
||
========================================================================
|
||
FUNCTION: ModuleManager_RenderFrame
|
||
RVA: 0x82FC0–0x8301A Size: 90 bytes
|
||
180082FC0 44 89 7C 24 20 45 33 C9 45 33 C0 33 D2 48 8D 4D D.|$ E3.E3.3.H.M
|
||
180082FD0 00 FF 15 F9 E4 02 00 85 C0 74 3F 0F 1F 44 00 00 .........t?..D..
|
||
180082FE0 48 8D 4D 00 FF 15 DE E4 02 00 48 8D 4D 00 FF 15 H.M.......H.M...
|
||
180082FF0 CC E4 02 00 0F B6 DB 83 7D 08 12 41 0F 44 DF 44 ........}..A.D.D
|
||
180083000 89 7C 24 20 45 33 C9 45 33 C0 33 D2 48 8D 4D 00 .|$ E3.E3.3.H.M.
|
||
180083010 FF 15 BA E4 02 00 85 C0 75 C6 ........u.
|
||
|
||
========================================================================
|
||
FUNCTION: ESPModule_Init
|
||
RVA: 0x83E00–0x83FA0 Size: 416 bytes
|
||
180083E00 40 53 48 83 EC 40 48 8D 1D 63 31 34 00 0F 57 C0 @SH..@H..c14..W.
|
||
180083E10 0F 11 44 24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 ..D$ .W....L$0A.
|
||
180083E20 09 00 00 00 48 8D 15 FD B9 32 00 48 8D 4C 24 20 ....H....2.H.L$
|
||
180083E30 E8 7B BE F8 FF 90 48 8D 05 FB BB 32 00 48 89 05 .{....H....2.H..
|
||
180083E40 2C 31 34 00 48 8D 54 24 20 48 8D 0D 28 31 34 00 ,14.H.T$ H..(14.
|
||
180083E50 E8 7B B9 F8 FF C6 05 3C 31 34 00 00 48 8D 4C 24 .{.....<14..H.L$
|
||
180083E60 20 E8 FA BB F8 FF 48 8D 05 73 BB 32 00 48 89 05 .....H..s.2.H..
|
||
180083E70 FC 30 34 00 66 0F 6F 05 94 F6 32 00 0F 29 05 2D .04.f.o...2..).-
|
||
180083E80 31 34 00 66 0F 6F 0D 95 F6 32 00 0F 29 0D 2E 31 14.f.o...2..)..1
|
||
180083E90 34 00 66 0F 6F 05 A6 F6 32 00 0F 29 05 2F 31 34 4.f.o...2..)./14
|
||
180083EA0 00 66 0F 6F 0D 87 F6 32 00 0F 29 0D 30 31 34 00 .f.o...2..).014.
|
||
180083EB0 66 0F 6F 05 D8 F6 32 00 0F 29 05 31 31 34 00 66 f.o...2..).114.f
|
||
180083EC0 0F 6F 0D D9 F6 32 00 0F 29 0D 32 31 34 00 66 0F .o...2..).214.f.
|
||
180083ED0 6F 05 AA F6 32 00 0F 29 05 33 31 34 00 66 0F 6F o...2..).314.f.o
|
||
180083EE0 0D CB F6 32 00 0F 29 0D 34 31 34 00 66 0F 6F 05 ...2..).414.f.o.
|
||
180083EF0 6C F6 32 00 0F 29 05 35 31 34 00 66 0F 6F 0D 6D l.2..).514.f.o.m
|
||
180083F00 F6 32 00 0F 29 0D 36 31 34 00 66 0F 6F 05 EE F5 .2..).614.f.o...
|
||
180083F10 32 00 0F 29 05 37 31 34 00 66 0F 6F 0D 2F F6 32 2..).714.f.o./.2
|
||
180083F20 00 0F 29 0D 38 31 34 00 C7 05 72 30 34 00 01 01 ..).814...r04...
|
||
180083F30 01 01 C7 05 6C 30 34 00 00 01 01 00 C6 05 69 30 ....l04.......i0
|
||
180083F40 34 00 00 C7 05 53 30 34 00 2C 01 00 00 48 8B C3 4....S04.,...H..
|
||
180083F50 48 83 C4 40 5B C3 CC CC CC CC CC CC CC CC CC CC H..@[...........
|
||
180083F60 48 89 5C 24 08 57 48 83 EC 20 48 8B F9 8B DA 48 H.\$.WH.. H....H
|
||
180083F70 83 C1 08 E8 E8 BA F8 FF F6 C3 01 74 0D BA 00 01 ...........t....
|
||
180083F80 00 00 48 8B CF E8 CE 77 02 00 48 8B 5C 24 30 48 ..H....w..H.\$0H
|
||
180083F90 8B C7 48 83 C4 20 5F C3 CC CC CC CC CC CC CC CC ..H.. _.........
|
||
|
||
========================================================================
|
||
FUNCTION: ESPModule_RenderOverlay
|
||
RVA: 0x83FA0–0x849A0 Size: 2560 bytes
|
||
180083FA0 48 8B C4 48 89 58 08 48 89 70 18 48 89 78 20 55 H..H.X.H.p.H.x U
|
||
180083FB0 41 56 41 57 48 8D 68 A1 48 81 EC B0 00 00 00 0F AVAWH.h.H.......
|
||
180083FC0 29 70 D8 48 8B F1 8B 15 10 2B 34 00 65 48 8B 04 )p.H.....+4.eH..
|
||
180083FD0 25 58 00 00 00 41 BF 04 00 00 00 48 8B 3C D0 45 %X...A.....H.<.E
|
||
180083FE0 33 F6 42 8B 04 3F 39 05 C0 37 34 00 7E 4A 48 8D 3.B..?9..74.~JH.
|
||
180083FF0 0D B7 37 34 00 E8 16 78 02 00 83 3D AB 37 34 00 ..74...x...=.74.
|
||
180084000 FF 75 35 44 89 35 A6 37 34 00 33 D2 48 8D 0D A5 .u5D.5.74.3.H...
|
||
180084010 37 34 00 E8 78 46 02 00 90 E8 42 96 01 00 90 48 74..xF....B....H
|
||
180084020 8D 0D 0A C1 02 00 E8 B9 7B 02 00 90 48 8D 0D 79 ........{...H..y
|
||
180084030 37 34 00 E8 6C 77 02 00 0F 57 C0 0F 11 45 B7 0F 74..lw...W...E..
|
||
180084040 57 C9 F3 0F 7F 4D C7 41 B8 0C 00 00 00 48 8D 15 W....M.A.....H..
|
||
180084050 E4 B7 32 00 48 8D 4D B7 E8 53 BC F8 FF 90 4C 8D ..2.H.M..S....L.
|
||
180084060 45 B7 48 8D 55 D7 48 8D 0D 43 37 34 00 E8 5E 97 E.H.U.H..C74..^.
|
||
180084070 01 00 90 48 83 78 18 0F 76 03 48 8B 00 33 D2 48 ...H.x..v.H..3.H
|
||
180084080 8B C8 E8 99 C7 FE FF 0F B6 D8 48 8D 4D D7 E8 CD ..........H.M...
|
||
180084090 B9 F8 FF 90 48 8D 4D B7 E8 C3 B9 F8 FF 84 DB 0F ....H.M.........
|
||
1800840A0 84 28 09 00 00 48 8B 0D 54 2B 34 00 48 8B 81 D8 .(...H..T+4.H...
|
||
1800840B0 15 00 00 C6 80 03 01 00 00 01 48 8B 81 D8 15 00 ..........H.....
|
||
1800840C0 00 F3 0F 10 81 0C 0E 00 00 F3 0F 58 80 94 01 00 ...........X....
|
||
1800840D0 00 F3 0F 11 80 94 01 00 00 F3 0F 58 40 58 F3 0F ...........X@X..
|
||
1800840E0 58 80 98 01 00 00 F3 0F 11 80 50 01 00 00 42 8B X.........P...B.
|
||
1800840F0 04 3F 39 05 B4 36 34 00 7E 4A 48 8D 0D AB 36 34 .?9..64.~JH...64
|
||
180084100 00 E8 0A 77 02 00 83 3D 9F 36 34 00 FF 75 35 44 ...w...=.64..u5D
|
||
180084110 89 35 9A 36 34 00 33 D2 48 8D 0D 99 36 34 00 E8 .5.64.3.H...64..
|
||
180084120 6C 45 02 00 90 E8 36 95 01 00 90 48 8D 0D FE BF lE....6....H....
|
||
180084130 02 00 E8 AD 7A 02 00 90 48 8D 0D 6D 36 34 00 E8 ....z...H..m64..
|
||
180084140 60 76 02 00 0F 57 C0 0F 11 45 B7 0F 57 C9 F3 0F `v...W...E..W...
|
||
180084150 7F 4D C7 41 B8 08 00 00 00 48 8D 15 E8 B6 32 00 .M.A.....H....2.
|
||
180084160 48 8D 4D B7 E8 47 BB F8 FF 90 4C 8D 45 B7 48 8D H.M..G....L.E.H.
|
||
180084170 55 D7 48 8D 0D 37 36 34 00 E8 52 96 01 00 90 48 U.H..764..R....H
|
||
180084180 83 78 18 0F 76 03 48 8B 00 48 8D 56 28 48 8B C8 .x..v.H..H.V(H..
|
||
180084190 E8 8B 11 00 00 90 48 8D 4D D7 E8 C1 B8 F8 FF 90 ......H.M.......
|
||
1800841A0 48 8D 4D B7 E8 B7 B8 F8 FF 80 7E 28 00 0F 84 D1 H.M.......~(....
|
||
1800841B0 07 00 00 48 8B 0D 46 2A 34 00 48 8B 81 D8 15 00 ...H..F*4.H.....
|
||
1800841C0 00 C6 80 03 01 00 00 01 48 8B 81 D8 15 00 00 F3 ........H.......
|
||
1800841D0 0F 10 35 91 F1 32 00 80 B8 06 01 00 00 00 75 14 ..5..2........u.
|
||
1800841E0 48 C7 45 6F 00 00 00 00 0F 28 CE 48 8D 4D 6F E8 H.Eo.....(.H.Mo.
|
||
1800841F0 0C 4A FA FF 42 8B 04 3F 39 05 AE 35 34 00 7E 4A .J..B..?9..54.~J
|
||
180084200 48 8D 0D A5 35 34 00 E8 04 76 02 00 83 3D 99 35 H...54...v...=.5
|
||
180084210 34 00 FF 75 35 44 89 35 94 35 34 00 33 D2 48 8D 4..u5D.5.54.3.H.
|
||
180084220 0D 93 35 34 00 E8 66 44 02 00 90 E8 30 94 01 00 ..54..fD....0...
|
||
180084230 90 48 8D 0D F8 BE 02 00 E8 A7 79 02 00 90 48 8D .H........y...H.
|
||
180084240 0D 67 35 34 00 E8 5A 75 02 00 0F 57 C0 0F 11 45 .g54..Zu...W...E
|
||
180084250 B7 0F 57 C9 F3 0F 7F 4D C7 41 B8 0D 00 00 00 48 ..W....M.A.....H
|
||
180084260 8D 15 F2 B5 32 00 48 8D 4D B7 E8 41 BA F8 FF 90 ....2.H.M..A....
|
||
180084270 4C 8D 45 B7 48 8D 55 F7 48 8D 0D 31 35 34 00 E8 L.E.H.U.H..154..
|
||
180084280 4C 95 01 00 90 48 83 78 18 0F 76 03 48 8B 00 48 L....H.x..v.H..H
|
||
180084290 8B C8 E8 89 A9 FE FF 0F B6 D8 48 8D 4D F7 E8 BD ..........H.M...
|
||
1800842A0 B7 F8 FF 90 48 8D 4D B7 E8 B3 B7 F8 FF 84 DB 0F ....H.M.........
|
||
1800842B0 84 CD 03 00 00 42 8B 04 3F 39 05 ED 34 34 00 7E .....B..?9..44.~
|
||
1800842C0 4A 48 8D 0D E4 34 34 00 E8 43 75 02 00 83 3D D8 JH...44..Cu...=.
|
||
1800842D0 34 34 00 FF 75 35 44 89 35 D3 34 34 00 33 D2 48 44..u5D.5.44.3.H
|
||
1800842E0 8D 0D D2 34 34 00 E8 A5 43 02 00 90 E8 6F 93 01 ...44...C....o..
|
||
1800842F0 00 90 48 8D 0D 37 BE 02 00 E8 E6 78 02 00 90 48 ..H..7.....x...H
|
||
180084300 8D 0D A6 34 34 00 E8 99 74 02 00 0F 57 C0 0F 11 ...44...t...W...
|
||
180084310 45 B7 0F 57 C9 F3 0F 7F 4D C7 41 B8 0D 00 00 00 E..W....M.A.....
|
||
180084320 48 8D 15 41 B5 32 00 48 8D 4D B7 E8 80 B9 F8 FF H..A.2.H.M......
|
||
180084330 90 4C 8D 45 B7 48 8D 55 F7 48 8D 0D 70 34 34 00 .L.E.H.U.H..p44.
|
||
180084340 E8 8B 94 01 00 90 48 83 78 18 0F 76 03 48 8B 00 ......H.x..v.H..
|
||
180084350 48 8D 56 34 48 8B C8 E8 84 DC FD FF 90 48 8D 4D H.V4H........H.M
|
||
180084360 F7 E8 FA B6 F8 FF 90 48 8D 4D B7 E8 F0 B6 F8 FF .......H.M......
|
||
180084370 0F 28 CE 0F 57 C0 E8 F5 49 FA FF 42 8B 04 3F 39 .(..W...I..B..?9
|
||
180084380 05 27 34 34 00 7E 4A 48 8D 0D 1E 34 34 00 E8 7D .'44.~JH...44..}
|
||
180084390 74 02 00 83 3D 12 34 34 00 FF 75 35 44 89 35 0D t...=.44..u5D.5.
|
||
1800843A0 34 34 00 33 D2 48 8D 0D 0C 34 34 00 E8 DF 42 02 44.3.H...44...B.
|
||
1800843B0 00 90 E8 A9 92 01 00 90 48 8D 0D 71 BD 02 00 E8 ........H..q....
|
||
1800843C0 20 78 02 00 90 48 8D 0D E0 33 34 00 E8 D3 73 02 x...H...34...s.
|
||
1800843D0 00 0F 57 C0 0F 11 45 B7 0F 57 C9 F3 0F 7F 4D C7 ..W...E..W....M.
|
||
1800843E0 41 B8 08 00 00 00 48 8D 15 8B B4 32 00 48 8D 4D A.....H....2.H.M
|
||
1800843F0 B7 E8 BA B8 F8 FF 90 4C 8D 45 B7 48 8D 55 F7 48 .......L.E.H.U.H
|
||
180084400 8D 0D AA 33 34 00 E8 C5 93 01 00 90 48 83 78 18 ...34.......H.x.
|
||
180084410 0F 76 03 48 8B 00 48 8D 56 35 48 8B C8 E8 BE DB .v.H..H.V5H.....
|
||
180084420 FD FF 90 48 8D 4D F7 E8 34 B6 F8 FF 90 48 8D 4D ...H.M..4....H.M
|
||
180084430 B7 E8 2A B6 F8 FF 0F 28 CE 0F 57 C0 E8 2F 49 FA ..*....(..W../I.
|
||
180084440 FF 42 8B 04 3F 39 05 61 33 34 00 7E 4A 48 8D 0D .B..?9.a34.~JH..
|
||
180084450 58 33 34 00 E8 B7 73 02 00 83 3D 4C 33 34 00 FF X34...s...=L34..
|
||
180084460 75 35 44 89 35 47 33 34 00 33 D2 48 8D 0D 46 33 u5D.5G34.3.H..F3
|
||
180084470 34 00 E8 19 42 02 00 90 E8 E3 91 01 00 90 48 8D 4...B.........H.
|
||
180084480 0D AB BC 02 00 E8 5A 77 02 00 90 48 8D 0D 1A 33 ......Zw...H...3
|
||
180084490 34 00 E8 0D 73 02 00 0F 57 C0 0F 11 45 B7 0F 57 4...s...W...E..W
|
||
1800844A0 C9 F3 0F 7F 4D C7 41 B8 0D 00 00 00 48 8D 15 D5 ....M.A.....H...
|
||
1800844B0 B3 32 00 48 8D 4D B7 E8 F4 B7 F8 FF 90 4C 8D 45 .2.H.M.......L.E
|
||
1800844C0 B7 48 8D 55 F7 48 8D 0D E4 32 34 00 E8 FF 92 01 .H.U.H...24.....
|
||
1800844D0 00 90 48 83 78 18 0F 76 03 48 8B 00 48 8D 56 36 ..H.x..v.H..H.V6
|
||
1800844E0 48 8B C8 E8 F8 DA FD FF 90 48 8D 4D F7 E8 6E B5 H........H.M..n.
|
||
1800844F0 F8 FF 90 48 8D 4D B7 E8 64 B5 F8 FF 42 8B 04 3F ...H.M..d...B..?
|
||
180084500 39 05 A6 32 34 00 7E 4A 48 8D 0D 9D 32 34 00 E8 9..24.~JH...24..
|
||
180084510 FC 72 02 00 83 3D 91 32 34 00 FF 75 35 44 89 35 .r...=.24..u5D.5
|
||
180084520 8C 32 34 00 33 D2 48 8D 0D 8B 32 34 00 E8 5E 41 .24.3.H...24..^A
|
||
180084530 02 00 90 E8 28 91 01 00 90 48 8D 0D F0 BB 02 00 ....(....H......
|
||
180084540 E8 9F 76 02 00 90 48 8D 0D 5F 32 34 00 E8 52 72 ..v...H.._24..Rr
|
||
180084550 02 00 0F 57 C0 0F 11 45 B7 0F 57 C9 F3 0F 7F 4D ...W...E..W....M
|
||
180084560 C7 41 B8 0C 00 00 00 48 8D 15 2A B3 32 00 48 8D .A.....H..*.2.H.
|
||
180084570 4D B7 E8 39 B7 F8 FF 90 4C 8D 45 B7 48 8D 55 F7 M..9....L.E.H.U.
|
||
180084580 48 8D 0D 29 32 34 00 E8 44 92 01 00 90 48 83 78 H..)24..D....H.x
|
||
180084590 18 0F 76 03 48 8B 00 48 8D 56 37 48 8B C8 E8 3D ..v.H..H.V7H...=
|
||
1800845A0 DA FD FF 90 48 8D 4D F7 E8 B3 B4 F8 FF 90 48 8D ....H.M.......H.
|
||
1800845B0 4D B7 E8 A9 B4 F8 FF 0F 28 CE 0F 57 C0 E8 AE 47 M.......(..W...G
|
||
1800845C0 FA FF 42 8B 04 3F 39 05 E0 31 34 00 7E 4A 48 8D ..B..?9..14.~JH.
|
||
1800845D0 0D D7 31 34 00 E8 36 72 02 00 83 3D CB 31 34 00 ..14..6r...=.14.
|
||
1800845E0 FF 75 35 44 89 35 C6 31 34 00 33 D2 48 8D 0D C5 .u5D.5.14.3.H...
|
||
1800845F0 31 34 00 E8 98 40 02 00 90 E8 62 90 01 00 90 48 14...@....b....H
|
||
180084600 8D 0D 2A BB 02 00 E8 D9 75 02 00 90 48 8D 0D 99 ..*.....u...H...
|
||
180084610 31 34 00 E8 8C 71 02 00 0F 57 C0 0F 11 45 B7 0F 14...q...W...E..
|
||
180084620 57 C9 F3 0F 7F 4D C7 41 B8 08 00 00 00 48 8D 15 W....M.A.....H..
|
||
180084630 74 B2 32 00 48 8D 4D B7 E8 73 B6 F8 FF 90 4C 8D t.2.H.M..s....L.
|
||
180084640 45 B7 48 8D 55 F7 48 8D 0D 63 31 34 00 E8 7E 91 E.H.U.H..c14..~.
|
||
180084650 01 00 90 48 83 78 18 0F 76 03 48 8B 00 48 8D 56 ...H.x..v.H..H.V
|
||
180084660 38 48 8B C8 E8 77 D9 FD FF 90 48 8D 4D F7 E8 ED 8H...w....H.M...
|
||
180084670 B3 F8 FF 90 48 8D 4D B7 E8 E3 B3 F8 FF E8 AE BF ....H.M.........
|
||
180084680 FE FF 42 8B 04 3F 39 05 20 31 34 00 7E 4A 48 8D ..B..?9. 14.~JH.
|
||
180084690 0D 17 31 34 00 E8 76 71 02 00 83 3D 0B 31 34 00 ..14..vq...=.14.
|
||
1800846A0 FF 75 35 44 89 35 06 31 34 00 33 D2 48 8D 0D 05 .u5D.5.14.3.H...
|
||
1800846B0 31 34 00 E8 D8 3F 02 00 90 E8 A2 8F 01 00 90 48 14...?.........H
|
||
1800846C0 8D 0D 6A BA 02 00 E8 19 75 02 00 90 48 8D 0D D9 ..j.....u...H...
|
||
1800846D0 30 34 00 E8 CC 70 02 00 0F 57 C0 0F 11 45 B7 0F 04...p...W...E..
|
||
1800846E0 57 C9 F3 0F 7F 4D C7 41 B8 0C 00 00 00 48 8D 15 W....M.A.....H..
|
||
1800846F0 C4 B1 32 00 48 8D 4D B7 E8 B3 B5 F8 FF 90 4C 8D ..2.H.M.......L.
|
||
180084700 45 B7 48 8D 55 F7 48 8D 0D A3 30 34 00 E8 BE 90 E.H.U.H...04....
|
||
180084710 01 00 90 48 83 78 18 0F 76 03 48 8B 00 48 8B C8 ...H.x..v.H..H..
|
||
180084720 E8 FB A4 FE FF 0F B6 D8 48 8D 4D F7 E8 2F B3 F8 ........H.M../..
|
||
180084730 FF 90 48 8D 4D B7 E8 25 B3 F8 FF 84 DB 0F 84 41 ..H.M..%.......A
|
||
180084740 02 00 00 42 8B 04 3F 39 05 5F 30 34 00 7E 4A 48 ...B..?9._04.~JH
|
||
180084750 8D 0D 56 30 34 00 E8 B5 70 02 00 83 3D 4A 30 34 ..V04...p...=J04
|
||
180084760 00 FF 75 35 44 89 35 45 30 34 00 33 D2 48 8D 0D ..u5D.5E04.3.H..
|
||
180084770 44 30 34 00 E8 17 3F 02 00 90 E8 E1 8E 01 00 90 D04...?.........
|
||
180084780 48 8D 0D A9 B9 02 00 E8 58 74 02 00 90 48 8D 0D H.......Xt...H..
|
||
180084790 18 30 34 00 E8 0B 70 02 00 0F 57 C0 0F 11 45 B7 .04...p...W...E.
|
||
1800847A0 0F 57 C9 F3 0F 7F 4D C7 41 B8 0D 00 00 00 48 8D .W....M.A.....H.
|
||
1800847B0 15 13 B1 32 00 48 8D 4D B7 E8 F2 B4 F8 FF 90 4C ...2.H.M.......L
|
||
1800847C0 8D 45 B7 48 8D 55 17 48 8D 0D E2 2F 34 00 E8 FD .E.H.U.H.../4...
|
||
1800847D0 8F 01 00 90 48 83 78 18 0F 76 03 48 8B 00 48 8D ....H.x..v.H..H.
|
||
1800847E0 56 39 48 8B C8 E8 F6 D7 FD FF 90 48 8D 4D 17 E8 V9H........H.M..
|
||
1800847F0 6C B2 F8 FF 90 48 8D 4D B7 E8 62 B2 F8 FF 0F 28 l....H.M..b....(
|
||
180084800 CE 0F 57 C0 E8 67 45 FA FF 42 8B 04 3F 39 05 99 ..W..gE..B..?9..
|
||
180084810 2F 34 00 7E 4A 48 8D 0D 90 2F 34 00 E8 EF 6F 02 /4.~JH.../4...o.
|
||
180084820 00 83 3D 84 2F 34 00 FF 75 35 44 89 35 7F 2F 34 ..=./4..u5D.5./4
|
||
180084830 00 33 D2 48 8D 0D 7E 2F 34 00 E8 51 3E 02 00 90 .3.H..~/4..Q>...
|
||
180084840 E8 1B 8E 01 00 90 48 8D 0D E3 B8 02 00 E8 92 73 ......H........s
|
||
180084850 02 00 90 48 8D 0D 52 2F 34 00 E8 45 6F 02 00 0F ...H..R/4..Eo...
|
||
180084860 57 C0 0F 11 45 B7 0F 57 C9 F3 0F 7F 4D C7 41 B8 W...E..W....M.A.
|
||
180084870 09 00 00 00 48 8D 15 5D B0 32 00 48 8D 4D B7 E8 ....H..].2.H.M..
|
||
180084880 2C B4 F8 FF 90 4C 8D 45 B7 48 8D 55 17 48 8D 0D ,....L.E.H.U.H..
|
||
180084890 1C 2F 34 00 E8 37 8F 01 00 90 48 83 78 18 0F 76 ./4..7....H.x..v
|
||
1800848A0 03 48 8B 00 48 8D 56 3A 48 8B C8 E8 30 D7 FD FF .H..H.V:H...0...
|
||
1800848B0 90 48 8D 4D 17 E8 A6 B1 F8 FF 90 48 8D 4D B7 E8 .H.M.......H.M..
|
||
1800848C0 9C B1 F8 FF 42 8B 04 3F 39 05 DE 2E 34 00 7E 4A ....B..?9...4.~J
|
||
1800848D0 48 8D 0D D5 2E 34 00 E8 34 6F 02 00 83 3D C9 2E H....4..4o...=..
|
||
1800848E0 34 00 FF 75 35 44 89 35 C4 2E 34 00 33 D2 48 8D 4..u5D.5..4.3.H.
|
||
1800848F0 0D C3 2E 34 00 E8 96 3D 02 00 90 E8 60 8D 01 00 ...4...=....`...
|
||
180084900 90 48 8D 0D 28 B8 02 00 E8 D7 72 02 00 90 48 8D .H..(.....r...H.
|
||
180084910 0D 97 2E 34 00 E8 8A 6E 02 00 0F 57 C0 0F 11 45 ...4...n...W...E
|
||
180084920 B7 0F 57 C9 F3 0F 7F 4D C7 41 B8 09 00 00 00 48 ..W....M.A.....H
|
||
180084930 8D 15 B2 AF 32 00 48 8D 4D B7 E8 71 B3 F8 FF 90 ....2.H.M..q....
|
||
180084940 4C 8D 45 B7 48 8D 55 17 48 8D 0D 61 2E 34 00 E8 L.E.H.U.H..a.4..
|
||
180084950 7C 8E 01 00 90 48 83 78 18 0F 76 03 48 8B 00 48 |....H.x..v.H..H
|
||
180084960 8D 56 3C 48 8B C8 E8 75 D6 FD FF 90 48 8D 4D 17 .V<H...u....H.M.
|
||
180084970 E8 EB B0 F8 FF 90 48 8D 4D B7 E8 E1 B0 F8 FF E8 ......H.M.......
|
||
180084980 AC BC FE FF 48 8B 0D 75 22 34 00 48 8B 81 D8 15 ....H..u"4.H....
|
||
180084990 00 00 C6 80 03 01 00 00 01 48 8B 81 D8 15 00 00 .........H......
|
||
|
||
========================================================================
|
||
FUNCTION: ESPModule_Update
|
||
RVA: 0x84A00–0x852B0 Size: 2224 bytes
|
||
180084A00 48 8B C4 48 89 58 08 48 89 70 10 48 89 78 18 55 H..H.X.H.p.H.x.U
|
||
180084A10 41 54 41 55 41 56 41 57 48 8D A8 68 FE FF FF 48 ATAUAVAWH..h...H
|
||
180084A20 81 EC 70 02 00 00 0F 29 70 C8 0F 29 78 B8 44 0F ..p....)p..)x.D.
|
||
180084A30 29 40 A8 44 0F 29 48 98 44 0F 29 50 88 44 0F 29 )@.D.)H.D.)P.D.)
|
||
180084A40 98 78 FF FF FF 44 0F 29 A0 68 FF FF FF 44 0F 29 .x...D.).h...D.)
|
||
180084A50 A8 58 FF FF FF 48 8B 05 E4 05 34 00 48 33 C4 48 .X...H....4.H3.H
|
||
180084A60 89 85 E0 00 00 00 48 8B F9 45 33 F6 48 8B 05 B5 ......H..E3.H...
|
||
180084A70 22 34 00 33 C9 FF D0 48 85 C0 0F 84 2B 08 00 00 "4.3...H....+...
|
||
180084A80 48 8B 40 10 48 85 C0 0F 84 1E 08 00 00 48 8B 00 H.@.H........H..
|
||
180084A90 48 8B 88 B8 00 00 00 48 8B 89 00 02 00 00 48 85 H......H......H.
|
||
180084AA0 C9 0F 84 04 08 00 00 48 8B 05 82 22 34 00 33 D2 .......H..."4.3.
|
||
180084AB0 FF D0 48 85 C0 0F 84 F0 07 00 00 48 8B 48 10 48 ..H........H.H.H
|
||
180084AC0 8B 59 10 44 8B 78 20 44 89 7C 24 50 48 8B 05 45 .Y.D.x D.|$PH..E
|
||
180084AD0 22 34 00 33 D2 48 8D 4D 50 FF D0 F2 44 0F 10 28 "4.3.H.MP...D..(
|
||
180084AE0 8B 40 08 89 44 24 60 4C 89 74 24 58 45 85 FF 0F .@..D$`L.t$XE...
|
||
180084AF0 84 B6 07 00 00 4C 8D 7B 20 4C 89 7D 90 66 44 0F .....L.{ L.}.fD.
|
||
180084B00 6F 0D DA E8 32 00 F3 44 0F 10 25 D5 E6 32 00 45 o...2..D..%..2.E
|
||
180084B10 0F 57 C0 F3 44 0F 10 15 BC E7 32 00 F3 44 0F 10 .W..D.....2..D..
|
||
180084B20 1D 3F E7 32 00 41 8B DE 0F 1F 84 00 00 00 00 00 .?.2.A..........
|
||
180084B30 4D 8B 3F 4D 85 FF 0F 84 4D 07 00 00 48 8B 05 DD M.?M....M...H...
|
||
180084B40 21 34 00 33 D2 49 8B CF FF D0 8B F0 83 F8 08 0F !4.3.I..........
|
||
180084B50 84 87 00 00 00 83 F8 10 74 68 83 F8 20 74 49 3D ........th.. tI=
|
||
180084B60 00 01 00 00 74 25 3D 10 40 00 00 74 55 0F 10 87 ....t%=.@..tU...
|
||
180084B70 B0 00 00 00 0F 11 44 24 74 0F B6 47 38 88 44 24 ......D$t..G8.D$
|
||
180084B80 70 84 C0 0F 84 00 07 00 00 EB 6F 0F 10 87 80 00 p.........o.....
|
||
180084B90 00 00 0F 11 44 24 74 80 7F 38 00 75 58 80 7F 35 ....D$t..8.uX..5
|
||
180084BA0 00 75 52 E9 E1 06 00 00 0F 10 47 50 0F 11 44 24 .uR.......GP..D$
|
||
180084BB0 74 80 7F 38 00 75 3E 80 7F 37 00 75 38 E9 C7 06 t..8.u>..7.u8...
|
||
180084BC0 00 00 0F 10 47 40 0F 11 44 24 74 80 7F 38 00 75 ....G@..D$t..8.u
|
||
180084BD0 24 80 7F 34 00 75 1E E9 AD 06 00 00 0F 10 47 70 $..4.u........Gp
|
||
180084BE0 0F 11 44 24 74 80 7F 38 00 75 0A 80 7F 36 00 0F ..D$t..8.u...6..
|
||
180084BF0 84 94 06 00 00 C6 44 24 70 01 48 8B 05 07 21 34 ......D$p.H...!4
|
||
180084C00 00 33 C9 FF D0 44 8B E8 48 8B 15 01 21 34 00 33 .3...D..H...!4.3
|
||
180084C10 C9 FF D2 44 8B E0 4C 8B 0D DB 20 34 00 45 33 C0 ...D..L... 4.E3.
|
||
180084C20 49 8B D7 48 8D 4D 60 41 FF D1 F2 0F 10 30 44 8B I..H.M`A.....0D.
|
||
180084C30 70 08 4C 8B 0D C7 20 34 00 F2 0F 11 75 C0 44 89 p.L... 4....u.D.
|
||
180084C40 75 C8 F2 44 0F 11 6D D0 8B 44 24 60 89 45 D8 45 u..D..m..D$`.E.E
|
||
180084C50 33 C0 48 8D 55 C0 48 8D 4D D0 41 FF D1 0F 28 F8 3.H.U.H.M.A...(.
|
||
180084C60 66 0F 6E 4F 30 0F 5B C9 0F 2F F9 0F 87 18 06 00 f.nO0.[../......
|
||
180084C70 00 48 8B 1D 70 20 34 00 48 8B 05 71 20 34 00 F2 .H..p 4.H..q 4..
|
||
180084C80 0F 11 75 E0 44 89 75 E8 33 C9 FF D0 48 8B D0 45 ..u.D.u.3...H..E
|
||
180084C90 33 C9 4C 8D 45 E0 48 8D 4D 70 FF D3 F2 0F 10 00 3.L.E.H.Mp......
|
||
180084CA0 F2 0F 11 45 F0 44 0F 2F 60 08 0F 87 D4 05 00 00 ...E.D./`.......
|
||
180084CB0 0F 57 C0 0F 11 85 C0 00 00 00 45 33 F6 4C 89 B5 .W........E3.L..
|
||
180084CC0 D0 00 00 00 4C 89 B5 D8 00 00 00 45 33 C0 48 8D ....L......E3.H.
|
||
180084CD0 15 DB F6 04 00 48 8D 8D C0 00 00 00 E8 CF AF F8 .....H..........
|
||
180084CE0 FF 90 44 38 77 39 0F 84 88 01 00 00 8B 15 EA 1D ..D8w9..........
|
||
180084CF0 34 00 65 48 8B 04 25 58 00 00 00 B9 04 00 00 00 4.eH..%X........
|
||
180084D00 48 8B 04 D0 8B 0C 01 39 0D 9F 2A 34 00 7E 4A 48 H......9..*4.~JH
|
||
180084D10 8D 0D 96 2A 34 00 E8 F5 6A 02 00 83 3D 8A 2A 34 ...*4...j...=.*4
|
||
180084D20 00 FF 75 35 44 89 35 85 2A 34 00 33 D2 48 8D 0D ..u5D.5.*4.3.H..
|
||
180084D30 84 2A 34 00 E8 57 39 02 00 90 E8 21 89 01 00 90 .*4..W9....!....
|
||
180084D40 48 8D 0D E9 B3 02 00 E8 98 6E 02 00 90 48 8D 0D H........n...H..
|
||
180084D50 58 2A 34 00 E8 4B 6A 02 00 0F 57 C0 0F 11 45 98 X*4..Kj...W...E.
|
||
180084D60 0F 57 C9 F3 0F 7F 4D A8 41 B8 01 00 00 00 48 8D .W....M.A.....H.
|
||
180084D70 15 7F AB 32 00 48 8D 4D 98 E8 32 AF F8 FF 90 4C ...2.H.M..2....L
|
||
180084D80 8D 45 98 48 8D 95 80 00 00 00 48 8D 0D 1F 2A 34 .E.H......H...*4
|
||
180084D90 00 E8 3A 8A 01 00 48 8B D8 48 83 78 18 0F 76 03 ..:...H..H.x..v.
|
||
180084DA0 48 8B 18 F3 0F 2C D7 48 8D 4D 30 E8 10 A8 FF FF H....,.H.M0.....
|
||
180084DB0 90 49 C7 C0 FF FF FF FF 0F 1F 84 00 00 00 00 00 .I..............
|
||
180084DC0 49 FF C0 42 80 3C 03 00 75 F6 48 8B D3 48 8D 4D I..B.<..u.H..H.M
|
||
180084DD0 30 E8 7A A9 F8 FF 0F 10 00 0F 11 85 A0 00 00 00 0.z.............
|
||
180084DE0 0F 10 48 10 0F 11 8D B0 00 00 00 C6 00 00 4C 89 ..H...........L.
|
||
180084DF0 70 10 48 C7 40 18 0F 00 00 00 48 8D 95 A0 00 00 p.H.@.....H.....
|
||
180084E00 00 66 48 0F 7E C1 66 0F 6F C1 66 0F 73 D8 08 66 .fH.~.f.o.f.s..f
|
||
180084E10 48 0F 7E C0 48 83 F8 0F 48 0F 47 D1 66 49 0F 7E H.~.H...H.G.fI.~
|
||
180084E20 C8 48 8D 8D C0 00 00 00 E8 23 A9 F8 FF 48 8D 95 .H.......#...H..
|
||
180084E30 C0 00 00 00 48 8D 4D 10 E8 93 A9 F8 FF 48 8D 4D ....H.M......H.M
|
||
180084E40 10 E8 1A AC F8 FF 90 48 8D 8D A0 00 00 00 E8 0D .......H........
|
||
180084E50 AC F8 FF 90 48 8D 4D 30 E8 03 AC F8 FF 90 48 8D ....H.M0......H.
|
||
180084E60 8D 80 00 00 00 E8 F6 AB F8 FF 90 48 8D 4D 98 E8 ...........H.M..
|
||
180084E70 EC AB F8 FF 80 7F 3A 00 0F 84 2E 01 00 00 0F 57 ......:........W
|
||
180084E80 C0 0F 11 85 A0 00 00 00 4C 89 B5 B0 00 00 00 4C ........L......L
|
||
180084E90 89 B5 B8 00 00 00 41 B8 07 00 00 00 48 8D 15 55 ......A.....H..U
|
||
180084EA0 AA 32 00 48 8D 8D A0 00 00 00 E8 01 AE F8 FF 90 .2.H............
|
||
180084EB0 48 8B 05 29 1E 34 00 33 D2 49 8B CF FF D0 48 85 H..).4.3.I....H.
|
||
180084EC0 C0 74 76 48 8B D0 48 8D 4D 98 E8 A1 6B 01 00 48 .tvH..H.M...k..H
|
||
180084ED0 8B 95 B8 00 00 00 48 83 FA 0F 76 34 48 FF C2 48 ......H...v4H..H
|
||
180084EE0 8B 8D A0 00 00 00 48 8B C1 48 81 FA 00 10 00 00 ......H..H......
|
||
180084EF0 72 19 48 83 C2 27 48 8B 49 F8 48 2B C1 48 83 E8 r.H..'H.I.H+.H..
|
||
180084F00 08 48 83 F8 1F 0F 87 F8 03 00 00 E8 48 68 02 00 .H..........Hh..
|
||
180084F10 0F 10 45 98 0F 11 85 A0 00 00 00 0F 10 4D A8 0F ..E..........M..
|
||
180084F20 11 8D B0 00 00 00 F3 44 0F 7F 4D A8 C6 45 98 00 .......D..M..E..
|
||
180084F30 48 8D 4D 98 E8 27 AB F8 FF 48 83 BD D0 00 00 00 H.M..'...H......
|
||
180084F40 00 74 19 41 B8 03 00 00 00 48 8D 15 B0 A9 32 00 .t.A.....H....2.
|
||
180084F50 48 8D 8D C0 00 00 00 E8 F4 A7 F8 FF 48 8D 95 A0 H...........H...
|
||
180084F60 00 00 00 48 83 BD B8 00 00 00 0F 48 0F 47 95 A0 ...H.......H.G..
|
||
180084F70 00 00 00 4C 8B 85 B0 00 00 00 48 8D 8D C0 00 00 ...L......H.....
|
||
180084F80 00 E8 CA A7 F8 FF 48 8D 95 C0 00 00 00 48 8D 4D ......H......H.M
|
||
180084F90 10 E8 3A A8 F8 FF 48 8D 4D 10 E8 C1 AA F8 FF 90 ..:...H.M.......
|
||
180084FA0 48 8D 8D A0 00 00 00 E8 B4 AA F8 FF 80 7F 3C 00 H.............<.
|
||
180084FB0 0F 84 DE 00 00 00 49 8B C6 48 8D 0D 40 B0 F7 FF ......I..H..@...
|
||
180084FC0 39 B4 81 08 F9 3A 00 74 15 48 FF C0 48 83 F8 06 9....:.t.H..H...
|
||
180084FD0 72 EE 48 8D 15 0B A6 32 00 4D 8B C6 EB 1E 48 03 r.H....2.M....H.
|
||
180084FE0 C0 0F 10 8C C1 20 F9 3A 00 66 0F 6F C1 66 0F 73 ..... .:.f.o.f.s
|
||
180084FF0 D8 08 66 49 0F 7E C0 66 48 0F 7E CA 0F 57 C0 0F ..fI.~.fH.~..W..
|
||
180085000 11 85 A0 00 00 00 4C 89 B5 B0 00 00 00 4C 89 B5 ......L......L..
|
||
180085010 B8 00 00 00 48 8D 8D A0 00 00 00 E8 90 AC F8 FF ....H...........
|
||
180085020 90 48 83 BD D0 00 00 00 00 74 19 41 B8 03 00 00 .H.......t.A....
|
||
180085030 00 48 8D 15 C8 A8 32 00 48 8D 8D C0 00 00 00 E8 .H....2.H.......
|
||
180085040 0C A7 F8 FF 48 8D 95 A0 00 00 00 48 83 BD B8 00 ....H......H....
|
||
180085050 00 00 0F 48 0F 47 95 A0 00 00 00 4C 8B 85 B0 00 ...H.G.....L....
|
||
180085060 00 00 48 8D 8D C0 00 00 00 E8 E2 A6 F8 FF 48 8D ..H...........H.
|
||
180085070 95 C0 00 00 00 48 8D 4D 10 E8 52 A7 F8 FF 48 8D .....H.M..R...H.
|
||
180085080 4D 10 E8 D9 A9 F8 FF 90 48 8D 8D A0 00 00 00 E8 M.......H.......
|
||
180085090 CC A9 F8 FF 48 83 BD D0 00 00 00 00 0F 84 D6 01 ....H...........
|
||
1800850A0 00 00 F3 0F 10 45 F0 F3 0F 11 44 24 68 66 41 0F .....E....D$hfA.
|
||
1800850B0 6E CC 0F 5B C9 F3 0F 5C 4D F4 F3 0F 11 4C 24 6C n..[...\M....L$l
|
||
1800850C0 48 8B 1D 39 1B 34 00 48 8B 73 70 48 85 F6 74 07 H..9.4.H.spH..t.
|
||
1800850D0 F3 0F 10 76 1C EB 0B 41 0F 28 F0 48 8B B3 E0 12 ...v...A.(.H....
|
||
1800850E0 00 00 48 8B 83 E0 12 00 00 48 89 45 00 F3 0F 10 ..H......H.E....
|
||
1800850F0 83 F4 12 00 00 F3 0F 11 45 08 F3 0F 10 8B F0 12 ........E.......
|
||
180085100 00 00 F3 0F 11 4D 0C 48 8D 8B C8 20 00 00 48 8D .....M.H... ..H.
|
||
180085110 55 00 E8 19 8E FB FF 41 0F 2E F0 7A 0A 75 08 F3 U......A...z.u..
|
||
180085120 0F 10 B3 F4 12 00 00 41 0F 28 D0 0F 28 CE 48 8B .......A.(..(.H.
|
||
180085130 CE E8 FA F8 F9 FF 48 8B 05 C3 1A 34 00 48 8B 88 ......H....4.H..
|
||
180085140 D8 15 00 00 4C 8D 05 C5 6D 32 00 BA 01 00 00 00 ....L...m2......
|
||
180085150 48 8B 49 40 E8 D7 3D F9 FF 4C 8B D0 4C 8D 85 C0 H.I@..=..L..L...
|
||
180085160 00 00 00 48 83 BD D8 00 00 00 0F 4C 0F 47 85 C0 ...H.......L.G..
|
||
180085170 00 00 00 48 8D 4C 24 74 E8 E3 D2 F8 FF 8B F0 A9 ...H.L$t........
|
||
180085180 00 00 00 FF 74 52 4D 85 C0 74 4D 41 80 38 00 74 ....tRM..tMA.8.t
|
||
180085190 47 41 0F 10 42 60 0F 11 44 24 70 49 8B 4A 38 44 GA..B`..D$pI.J8D
|
||
1800851A0 89 74 24 48 F3 44 0F 11 44 24 40 4C 89 74 24 38 .t$H.D..D$@L.t$8
|
||
1800851B0 4C 89 44 24 30 48 8D 44 24 70 48 89 44 24 28 89 L.D$0H.D$pH.D$(.
|
||
1800851C0 74 24 20 4C 8D 4C 24 68 41 0F 28 D2 49 8B D2 48 t$ L.L$hA.(.I..H
|
||
1800851D0 8B 49 18 E8 A8 C3 FC FF 48 8B 1D 21 1A 34 00 48 .I......H..!.4.H
|
||
1800851E0 63 83 C8 20 00 00 85 C0 7F 0E 48 8D 0D EF 6F 32 c.. ......H...o2
|
||
1800851F0 00 E8 3A 30 FA FF EB 26 48 03 C0 48 8B 8B D0 20 ..:0...&H..H...
|
||
180085200 00 00 F3 0F 10 54 C1 FC F3 0F 10 4C C1 F8 48 8B .....T.....L..H.
|
||
180085210 4C C1 F0 E8 18 F8 F9 FF FF 8B C8 20 00 00 48 8B L.......... ..H.
|
||
180085220 05 DB 19 34 00 48 8B 88 D8 15 00 00 4C 8D 05 DD ...4.H......L...
|
||
180085230 6C 32 00 BA 01 00 00 00 48 8B 49 40 E8 EF 3C F9 l2......H.I@..<.
|
||
180085240 FF 48 8B C8 41 8B C5 99 2B C2 D1 F8 66 0F 6E C0 .H..A...+...f.n.
|
||
180085250 0F 5B C0 F3 0F 11 45 88 C7 45 8C 00 00 00 00 F3 .[....E..E......
|
||
180085260 44 0F 11 5C 24 20 44 8B CE 4C 8D 44 24 68 48 8D D..\$ D..L.D$hH.
|
||
180085270 55 88 E8 A9 45 FC FF 90 48 8D 8D C0 00 00 00 E8 U...E...H.......
|
||
180085280 DC A7 F8 FF 48 8B 5C 24 58 48 FF C3 48 89 5C 24 ....H.\$XH..H.\$
|
||
180085290 58 4C 8B 7D 90 49 83 C7 08 4C 89 7D 90 48 63 44 XL.}.I...L.}.HcD
|
||
1800852A0 24 50 48 3B D8 0F 82 85 F8 FF FF 48 8B 8D E0 00 $PH;.......H....
|
||
|
||
========================================================================
|
||
FUNCTION: FPSModule_RenderOverlay
|
||
RVA: 0x85700–0x85900 Size: 512 bytes
|
||
180085700 00 48 8D 15 80 A3 32 00 48 8D 4C 24 20 E8 9E A5 .H....2.H.L$ ...
|
||
180085710 F8 FF 90 4C 8D 44 24 20 48 8D 54 24 40 48 8D 0D ...L.D$ H.T$@H..
|
||
180085720 8C 20 34 00 E8 A7 80 01 00 90 48 83 78 18 0F 76 . 4.......H.x..v
|
||
180085730 03 48 8B 00 33 D2 48 8B C8 E8 E2 B0 FE FF 0F B6 .H..3.H.........
|
||
180085740 D8 48 8D 4C 24 40 E8 15 A3 F8 FF 90 48 8D 4C 24 .H.L$@......H.L$
|
||
180085750 20 E8 0A A3 F8 FF 84 DB 0F 84 57 01 00 00 48 8B .........W...H.
|
||
180085760 0D 9B 14 34 00 48 8B 81 D8 15 00 00 C6 80 03 01 ...4.H..........
|
||
180085770 00 00 01 48 8B 81 D8 15 00 00 F3 0F 10 81 0C 0E ...H............
|
||
180085780 00 00 F3 0F 58 80 94 01 00 00 F3 0F 11 80 94 01 ....X...........
|
||
180085790 00 00 F3 0F 58 40 58 F3 0F 58 80 98 01 00 00 F3 ....X@X..X......
|
||
1800857A0 0F 11 80 50 01 00 00 42 8B 04 37 39 05 FB 1F 34 ...P...B..79...4
|
||
1800857B0 00 7E 4D 48 8D 0D F2 1F 34 00 E8 51 60 02 00 83 .~MH....4..Q`...
|
||
1800857C0 3D E6 1F 34 00 FF 75 38 C7 05 DE 1F 34 00 00 00 =..4..u8....4...
|
||
1800857D0 00 00 33 D2 48 8D 0D DD 1F 34 00 E8 B0 2E 02 00 ..3.H....4......
|
||
1800857E0 90 E8 7A 7E 01 00 90 48 8D 0D 42 A9 02 00 E8 F1 ..z~...H..B.....
|
||
1800857F0 63 02 00 90 48 8D 0D B1 1F 34 00 E8 A4 5F 02 00 c...H....4..._..
|
||
180085800 0F 57 C0 0F 11 44 24 20 0F 57 C9 F3 0F 7F 4C 24 .W...D$ .W....L$
|
||
180085810 30 41 B8 10 00 00 00 48 8D 15 7A A2 32 00 48 8D 0A.....H..z.2.H.
|
||
180085820 4C 24 20 E8 88 A4 F8 FF 90 4C 8D 44 24 20 48 8D L$ ......L.D$ H.
|
||
180085830 54 24 40 48 8D 0D 76 1F 34 00 E8 91 7F 01 00 90 T$@H..v.4.......
|
||
180085840 48 83 78 18 0F 76 03 48 8B 00 48 8D 56 28 48 8B H.x..v.H..H.V(H.
|
||
180085850 C8 E8 CA FA FF FF 90 48 8D 4C 24 40 E8 FF A1 F8 .......H.L$@....
|
||
180085860 FF 90 48 8D 4C 24 20 E8 F4 A1 F8 FF 48 8B 0D 8D ..H.L$ .....H...
|
||
180085870 13 34 00 48 8B 81 D8 15 00 00 C6 80 03 01 00 00 .4.H............
|
||
180085880 01 48 8B 81 D8 15 00 00 F3 0F 10 80 94 01 00 00 .H..............
|
||
180085890 F3 0F 5C 81 0C 0E 00 00 F3 0F 11 80 94 01 00 00 ..\.............
|
||
1800858A0 F3 0F 58 40 58 F3 0F 58 80 98 01 00 00 F3 0F 11 ..X@X..X........
|
||
1800858B0 80 50 01 00 00 48 8B 5C 24 70 48 8B 74 24 78 48 .P...H.\$pH.t$xH
|
||
1800858C0 8B BC 24 80 00 00 00 48 83 C4 60 41 5E C3 CC CC ..$....H..`A^...
|
||
1800858D0 48 8B C4 48 89 58 10 48 89 78 18 55 48 8D 68 A1 H..H.X.H.x.UH.h.
|
||
1800858E0 48 81 EC F0 00 00 00 0F 29 70 E8 33 FF 40 38 79 H.......)p.3.@8y
|
||
1800858F0 28 0F 84 26 02 00 00 48 8B 05 3A 14 34 00 33 C9 (..&...H..:.4.3.
|
||
|
||
========================================================================
|
||
FUNCTION: PreventScreenshot_Init
|
||
RVA: 0x8AD70–0x8AE60 Size: 240 bytes
|
||
18008AD70 48 83 EC 48 8B 0D 62 BD 33 00 65 48 8B 04 25 58 H..H..b.3.eH..%X
|
||
18008AD80 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B 0C 02 39 ........H......9
|
||
18008AD90 0D FB C5 33 00 0F 8E A7 00 00 00 48 8D 0D EE C5 ...3.......H....
|
||
18008ADA0 33 00 E8 69 0A 02 00 83 3D E2 C5 33 00 FF 0F 85 3..i....=..3....
|
||
18008ADB0 8E 00 00 00 0F 57 C0 0F 11 44 24 20 0F 57 C9 F3 .....W...D$ .W..
|
||
18008ADC0 0F 7F 4C 24 30 41 B8 12 00 00 00 48 8D 15 E6 52 ..L$0A.....H...R
|
||
18008ADD0 32 00 48 8D 4C 24 20 E8 D4 4E F8 FF 90 48 8D 05 2.H.L$ ..N...H..
|
||
18008ADE0 54 4C 32 00 48 89 05 6D C5 33 00 48 8D 54 24 20 TL2.H..m.3.H.T$
|
||
18008ADF0 48 8D 0D 69 C5 33 00 E8 D4 49 F8 FF C6 05 7D C5 H..i.3...I....}.
|
||
18008AE00 33 00 00 48 8D 4C 24 20 E8 53 4C F8 FF 48 8D 05 3..H.L$ .SL..H..
|
||
18008AE10 FC 52 32 00 48 89 05 3D C5 33 00 C6 05 5E C5 33 .R2.H..=.3...^.3
|
||
18008AE20 00 00 C6 05 5F C5 33 00 00 48 8D 0D A0 50 02 00 ...._.3..H...P..
|
||
18008AE30 E8 AF 0D 02 00 90 48 8D 0D 53 C5 33 00 E8 62 09 ......H..S.3..b.
|
||
18008AE40 02 00 48 8D 05 0F C5 33 00 48 83 C4 48 C3 CC CC ..H....3.H..H...
|
||
18008AE50 48 8D 15 69 01 00 00 E9 A4 B1 FF FF CC CC CC CC H..i............
|
||
|
||
========================================================================
|
||
FUNCTION: PreventScreenshot_OsCheck
|
||
RVA: 0x8B220–0x8B490 Size: 624 bytes
|
||
18008B220 48 89 5C 24 10 57 48 81 EC 70 02 00 00 48 8B 05 H.\$.WH..p...H..
|
||
18008B230 0C 9E 33 00 48 33 C4 48 89 84 24 60 02 00 00 48 ..3.H3.H..$`...H
|
||
18008B240 8B F9 8B 0D 94 B8 33 00 65 48 8B 04 25 58 00 00 ......3.eH..%X..
|
||
18008B250 00 BA 04 00 00 00 48 8B 04 C8 8B 0C 02 39 0D 7D ......H......9.}
|
||
18008B260 C2 33 00 0F 8E FB 01 00 00 48 8D 0D 70 C2 33 00 .3.......H..p.3.
|
||
18008B270 E8 9B 05 02 00 83 3D 64 C2 33 00 FF 0F 85 E2 01 ......=d.3......
|
||
18008B280 00 00 48 8D 0D 47 4E 32 00 FF 15 01 60 02 00 48 ..H..GN2....`..H
|
||
18008B290 85 C0 0F 84 BC 00 00 00 48 8D 15 49 4E 32 00 48 ........H..IN2.H
|
||
18008B2A0 8B C8 FF 15 E0 5D 02 00 48 8B D8 48 85 C0 0F 84 .....]..H..H....
|
||
18008B2B0 A0 00 00 00 33 D2 41 B8 18 01 00 00 48 8D 8C 24 ....3.A.....H..$
|
||
18008B2C0 44 01 00 00 E8 A1 15 02 00 C7 84 24 40 01 00 00 D..........$@...
|
||
18008B2D0 1C 01 00 00 48 8D 8C 24 40 01 00 00 FF D3 85 C0 ....H..$@.......
|
||
18008B2E0 75 72 48 8D 4C 24 20 48 8D 94 24 40 01 00 00 41 urH.L$ H..$@...A
|
||
18008B2F0 B8 02 00 00 00 41 8B C0 0F 1F 84 00 00 00 00 00 .....A..........
|
||
18008B300 0F 10 02 0F 11 01 0F 10 4A 10 0F 11 49 10 0F 10 ........J...I...
|
||
18008B310 42 20 0F 11 41 20 0F 10 4A 30 0F 11 49 30 0F 10 B ..A ..J0..I0..
|
||
18008B320 42 40 0F 11 41 40 0F 10 4A 50 0F 11 49 50 0F 10 B@..A@..JP..IP..
|
||
18008B330 42 60 0F 11 41 60 48 8D 89 80 00 00 00 0F 10 4A B`..A`H........J
|
||
18008B340 70 0F 11 49 F0 48 8D 92 80 00 00 00 48 83 E8 01 p..I.H......H...
|
||
18008B350 75 AE EB 7E 33 D2 41 B8 1C 01 00 00 48 8D 8C 24 u..~3.A.....H..$
|
||
18008B360 40 01 00 00 E8 01 15 02 00 48 8D 4C 24 20 48 8D @........H.L$ H.
|
||
18008B370 94 24 40 01 00 00 41 B8 02 00 00 00 41 8B C0 90 .$@...A.....A...
|
||
18008B380 0F 10 02 0F 11 01 0F 10 4A 10 0F 11 49 10 0F 10 ........J...I...
|
||
18008B390 42 20 0F 11 41 20 0F 10 4A 30 0F 11 49 30 0F 10 B ..A ..J0..I0..
|
||
18008B3A0 42 40 0F 11 41 40 0F 10 4A 50 0F 11 49 50 0F 10 B@..A@..JP..IP..
|
||
18008B3B0 42 60 0F 11 41 60 48 8D 89 80 00 00 00 0F 10 4A B`..A`H........J
|
||
18008B3C0 70 0F 11 49 F0 48 8D 92 80 00 00 00 48 83 E8 01 p..I.H......H...
|
||
18008B3D0 75 AE 0F 10 02 0F 11 01 48 8B 42 10 48 89 41 10 u.......H.B.H.A.
|
||
18008B3E0 8B 42 18 89 41 18 48 8D 0D 03 C1 33 00 48 8D 54 .B..A.H....3.H.T
|
||
18008B3F0 24 20 0F 10 02 0F 11 01 0F 10 4A 10 0F 11 49 10 $ ........J...I.
|
||
18008B400 0F 10 42 20 0F 11 41 20 0F 10 4A 30 0F 11 49 30 ..B ..A ..J0..I0
|
||
18008B410 0F 10 42 40 0F 11 41 40 0F 10 4A 50 0F 11 49 50 ..B@..A@..JP..IP
|
||
18008B420 0F 10 42 60 0F 11 41 60 48 8D 89 80 00 00 00 0F ..B`..A`H.......
|
||
18008B430 10 4A 70 0F 11 49 F0 48 8D 92 80 00 00 00 49 83 .Jp..I.H......I.
|
||
18008B440 E8 01 75 AE 0F 10 02 0F 11 01 48 8B 42 10 48 89 ..u.......H.B.H.
|
||
18008B450 41 10 8B 42 18 89 41 18 48 8D 0D 81 C0 33 00 E8 A..B..A.H....3..
|
||
18008B460 40 03 02 00 E8 07 F9 FF FF 44 0F B6 40 28 48 8B @........D..@(H.
|
||
18008B470 CF 81 3D 81 C0 33 00 61 4A 00 00 73 0A 33 D2 45 ..=..3.aJ..s.3.E
|
||
18008B480 84 C0 0F 95 C2 EB 08 41 F6 D8 1B D2 83 E2 11 FF .......A........
|
||
|
||
========================================================================
|
||
FUNCTION: ModulePathScanner
|
||
RVA: 0x8B650–0x8BAF0 Size: 1184 bytes
|
||
18008B650 40 55 53 56 57 41 54 41 55 41 56 41 57 48 8D AC @USVWATAUAVAWH..
|
||
18008B660 24 48 FE FF FF 48 81 EC B8 02 00 00 48 8B 05 CD $H...H......H...
|
||
18008B670 99 33 00 48 33 C4 48 89 85 A0 01 00 00 49 8B F1 .3.H3.H......I..
|
||
18008B680 4C 89 4C 24 40 41 8B D8 4C 8B EA 48 8B F9 48 89 L.L$@A..L..H..H.
|
||
18008B690 4C 24 38 E8 68 64 FF FF 4C 8B D0 4C 8D 0D AE FF L$8.hd..L..L....
|
||
18008B6A0 FF FF 4D 8B C1 49 C1 E8 08 41 0F B6 D0 41 0F B6 ..M..I...A...A..
|
||
18008B6B0 C9 48 B8 25 23 22 84 E4 9C F2 CB 48 33 C8 49 B8 .H.%#".....H3.I.
|
||
18008B6C0 B3 01 00 00 00 01 00 00 49 0F AF C8 48 33 D1 49 ........I...H3.I
|
||
18008B6D0 0F AF D0 49 8B C1 48 C1 E8 10 0F B6 C8 48 33 D1 ...I..H......H3.
|
||
18008B6E0 49 0F AF D0 49 8B C1 48 C1 E8 18 0F B6 C8 48 33 I...I..H......H3
|
||
18008B6F0 D1 49 0F AF D0 49 8B C1 48 C1 E8 20 0F B6 C8 48 .I...I..H.. ...H
|
||
18008B700 33 D1 49 0F AF D0 49 8B C1 48 C1 E8 28 0F B6 C8 3.I...I..H..(...
|
||
18008B710 48 33 D1 49 0F AF D0 49 8B C1 48 C1 E8 30 0F B6 H3.I...I..H..0..
|
||
18008B720 C8 48 33 CA 49 0F AF C8 49 8B C1 48 C1 E8 38 48 .H3.I...I..H..8H
|
||
18008B730 33 C8 49 0F AF C8 49 23 4A 48 48 C1 E1 04 49 03 3.I...I#JHH...I.
|
||
18008B740 4A 30 48 8B 41 08 49 8B 52 20 48 3B C2 74 1A 48 J0H.A.I.R H;.t.H
|
||
18008B750 8B 09 4C 3B 48 10 74 13 48 3B C1 74 0C 48 8B 40 ..L;H.t.H;.t.H.@
|
||
18008B760 08 4C 3B 48 10 75 F1 EB 02 33 C0 48 85 C0 48 0F .L;H.u...3.H..H.
|
||
18008B770 44 C2 48 3B C2 0F 84 49 03 00 00 4C 8B 50 18 4D D.H;...I...L.P.M
|
||
18008B780 85 D2 0F 84 3C 03 00 00 4C 8B CE 44 8B C3 49 8B ....<...L..D..I.
|
||
18008B790 D5 48 8B CF 41 FF D2 8B C8 89 44 24 30 85 C0 0F .H..A.....D$0...
|
||
18008B7A0 84 21 03 00 00 4D 85 ED 0F 84 18 03 00 00 48 85 .!...M........H.
|
||
18008B7B0 F6 0F 84 0F 03 00 00 8B 06 C1 E8 03 89 44 24 34 .............D$4
|
||
18008B7C0 45 33 FF 45 33 F6 85 C0 0F 84 E6 02 00 00 89 4C E3.E3..........L
|
||
18008B7D0 24 30 4E 8D 24 F5 00 00 00 00 41 B9 04 01 00 00 $0N.$.....A.....
|
||
18008B7E0 4C 8D 45 90 4B 8B 14 2C 48 8B CF FF 15 77 59 02 L.E.K..,H....wY.
|
||
18008B7F0 00 85 C0 0F 84 48 02 00 00 0F 57 C0 0F 11 44 24 .....H....W...D$
|
||
18008B800 68 48 C7 44 24 78 00 00 00 00 48 C7 45 80 00 00 hH.D$x....H.E...
|
||
18008B810 00 00 48 8D 45 90 49 C7 C0 FF FF FF FF 0F 1F 00 ..H.E.I.........
|
||
18008B820 49 FF C0 66 42 83 3C 40 00 75 F5 48 8D 55 90 48 I..fB.<@.u.H.U.H
|
||
18008B830 8D 4C 24 68 E8 D7 32 F8 FF 90 48 8D 15 F7 9A 33 .L$h..2...H....3
|
||
18008B840 00 48 8D 4C 24 48 E8 95 FC FF FF 4C 8B 48 10 48 .H.L$H.....L.H.H
|
||
18008B850 83 78 18 07 76 03 48 8B 00 48 8D 74 24 68 48 83 .x..v.H..H.t$hH.
|
||
18008B860 7D 80 07 48 0F 47 74 24 68 48 8B 4C 24 78 4C 3B }..H.Gt$hH.L$xL;
|
||
18008B870 C9 77 2B 4D 85 C9 75 04 33 FF EB 29 48 8D 1C 4E .w+M..u.3..)H..N
|
||
18008B880 4C 8B C0 48 8B D3 48 8B CE E8 12 FE 01 00 48 8B L..H..H.......H.
|
||
18008B890 F8 48 3B C3 74 08 48 2B FE 48 D1 FF EB 07 48 C7 .H;.t.H+.H....H.
|
||
18008B8A0 C7 FF FF FF FF 48 8B 54 24 60 48 83 FA 07 76 37 .....H.T$`H...v7
|
||
18008B8B0 48 8D 14 55 02 00 00 00 48 8B 4C 24 48 48 8B C1 H..U....H.L$HH..
|
||
18008B8C0 48 81 FA 00 10 00 00 72 19 48 83 C2 27 48 8B 49 H......r.H..'H.I
|
||
18008B8D0 F8 48 2B C1 48 83 E8 08 48 83 F8 1F 0F 87 7F 01 .H+.H...H.......
|
||
18008B8E0 00 00 E8 71 FE 01 00 48 83 FF FF 74 4A 48 8B 55 ...q...H...tJH.U
|
||
18008B8F0 80 48 83 FA 07 0F 86 52 01 00 00 48 8D 14 55 02 .H.....R...H..U.
|
||
18008B900 00 00 00 48 8B 4C 24 68 48 81 FA 00 10 00 00 48 ...H.L$hH......H
|
||
18008B910 8B C1 72 19 48 83 C2 27 48 8B 49 F8 48 2B C1 48 ..r.H..'H.I.H+.H
|
||
18008B920 83 E8 08 48 83 F8 1F 0F 87 68 01 00 00 E8 26 FE ...H.....h....&.
|
||
18008B930 01 00 E9 16 01 00 00 48 8D 15 1A 9A 33 00 48 8D .......H....3.H.
|
||
18008B940 4C 24 48 E8 98 FB FF FF 4C 8B C0 4C 8B 48 10 48 L$H.....L..L.H.H
|
||
18008B950 83 78 18 07 76 03 4C 8B 00 48 8D 74 24 68 48 8B .x..v.L..H.t$hH.
|
||
18008B960 45 80 48 83 F8 07 48 0F 47 74 24 68 48 8B 4C 24 E.H...H.Gt$hH.L$
|
||
18008B970 78 4C 3B C9 77 2C 4D 85 C9 75 04 33 FF EB 2A 48 xL;.w,M..u.3..*H
|
||
18008B980 8D 1C 4E 48 8B D3 48 8B CE E8 12 FD 01 00 48 8B ..NH..H.......H.
|
||
18008B990 F8 48 3B C3 48 8B 45 80 74 08 48 2B FE 48 D1 FF .H;.H.E.t.H+.H..
|
||
18008B9A0 EB 07 48 C7 C7 FF FF FF FF 48 8B 54 24 60 48 83 ..H......H.T$`H.
|
||
18008B9B0 FA 07 76 3B 48 8D 14 55 02 00 00 00 48 8B 4C 24 ..v;H..U....H.L$
|
||
18008B9C0 48 48 8B C1 48 81 FA 00 10 00 00 72 19 48 83 C2 HH..H......r.H..
|
||
18008B9D0 27 48 8B 49 F8 48 2B C1 48 83 E8 08 48 83 F8 1F 'H.I.H+.H...H...
|
||
18008B9E0 0F 87 95 00 00 00 E8 6D FD 01 00 48 8B 45 80 48 .......m...H.E.H
|
||
18008B9F0 83 FF FF 74 13 48 83 F8 07 76 52 48 8D 14 45 02 ...t.H...vRH..E.
|
||
18008BA00 00 00 00 E9 FB FE FF FF 48 83 F8 07 76 33 48 8D ........H...v3H.
|
||
18008BA10 14 45 02 00 00 00 48 8B 4C 24 68 48 8B C1 48 81 .E....H.L$hH..H.
|
||
18008BA20 FA 00 10 00 00 72 15 48 83 C2 27 48 8B 49 F8 48 .....r.H..'H.I.H
|
||
18008BA30 2B C1 48 83 E8 08 48 83 F8 1F 77 59 E8 17 FD 01 +.H...H...wY....
|
||
18008BA40 00 4B 8B 04 2C 4B 89 44 FD 00 41 FF C7 41 FF C6 .K..,K.D..A..A..
|
||
18008BA50 44 3B 74 24 34 73 58 48 8B 7C 24 38 E9 71 FD FF D;t$4sXH.|$8.q..
|
||
18008BA60 FF 48 C7 44 24 20 00 00 00 00 45 33 C9 45 33 C0 .H.D$ ....E3.E3.
|
||
18008BA70 33 D2 33 C9 FF 15 C6 5D 02 00 CC 48 C7 44 24 20 3.3....]...H.D$
|
||
18008BA80 00 00 00 00 45 33 C9 45 33 C0 33 D2 33 C9 FF 15 ....E3.E3.3.3...
|
||
18008BA90 AC 5D 02 00 90 48 C7 44 24 20 00 00 00 00 45 33 .]...H.D$ ....E3
|
||
18008BAA0 C9 45 33 C0 33 D2 33 C9 FF 15 92 5D 02 00 CC 48 .E3.3.3....]...H
|
||
18008BAB0 8B 74 24 40 42 8D 0C FD 00 00 00 00 89 0E 8B 44 .t$@B..........D
|
||
18008BAC0 24 30 EB 02 33 C0 48 8B 8D A0 01 00 00 48 33 CC $0..3.H......H3.
|
||
18008BAD0 E8 FB FB 01 00 48 81 C4 B8 02 00 00 41 5F 41 5E .....H......A_A^
|
||
18008BAE0 41 5D 41 5C 5F 5E 5B 5D C3 CC CC CC CC CC CC CC A]A\_^[]........
|
||
|
||
========================================================================
|
||
FUNCTION: SkillHack_Render_HookInstaller
|
||
RVA: 0x8D1F0–0x8D240 Size: 80 bytes
|
||
18008D1F0 48 83 EC 28 48 8B 0D 65 9C 33 00 48 8D 15 AE 02 H..(H..e.3.H....
|
||
18008D200 00 00 E8 99 06 00 00 48 8B 0D 5A 9C 33 00 48 8D .......H..Z.3.H.
|
||
18008D210 15 9B 02 00 00 E8 86 06 00 00 E8 01 10 00 00 E8 ................
|
||
18008D220 9C 19 00 00 E8 37 23 00 00 48 8B 0D 18 9C 33 00 .....7#..H....3.
|
||
18008D230 48 8D 15 79 02 00 00 48 83 C4 28 E9 60 06 00 00 H..y...H..(.`...
|
||
|
||
========================================================================
|
||
FUNCTION: SkillHack_Dispatcher
|
||
RVA: 0x8D4B0–0x8D500 Size: 80 bytes
|
||
18008D4B0 48 89 5C 24 08 57 48 83 EC 20 48 8B DA 48 8B F9 H.\$.WH.. H..H..
|
||
18008D4C0 E8 3B 3E FF FF 80 78 28 00 74 0D B0 01 48 8B 5C .;>...x(.t...H.\
|
||
18008D4D0 24 30 48 83 C4 20 5F C3 E8 23 46 FF FF 4C 8B CB $0H.. _..#F..L..
|
||
18008D4E0 48 8D 15 C9 FF FF FF 4C 8B C7 48 8B C8 48 8B 5C H......L..H..H.\
|
||
18008D4F0 24 30 48 83 C4 20 5F E9 04 2A 00 00 CC CC CC CC $0H.. _..*......
|
||
|
||
========================================================================
|
||
FUNCTION: SkillHack_CooldownBypass
|
||
RVA: 0x8D500–0x8D550 Size: 80 bytes
|
||
18008D500 48 89 5C 24 18 57 48 83 EC 20 48 8B FA 48 8B D9 H.\$.WH.. H..H..
|
||
18008D510 E8 EB 3D FF FF 80 78 28 00 74 13 F3 0F 10 05 E5 ..=...x(.t......
|
||
18008D520 5D 32 00 48 8B 5C 24 40 48 83 C4 20 5F C3 E8 CD ]2.H.\$@H.. _...
|
||
18008D530 45 FF FF 4C 8B C0 4C 8D 1D C3 FF FF FF 49 BA B3 E..L..L......I..
|
||
18008D540 01 00 00 00 01 00 00 45 0F B6 CB 48 B8 25 23 22 .......E...H.%#"
|
||
|
||
========================================================================
|
||
FUNCTION: SkillHack_SkillAvailable
|
||
RVA: 0x8D640–0x8D780 Size: 320 bytes
|
||
18008D640 48 89 5C 24 18 57 48 83 EC 20 48 8B FA 48 8B D9 H.\$.WH.. H..H..
|
||
18008D650 E8 AB 3C FF FF 80 78 28 00 74 0D B0 01 48 8B 5C ..<...x(.t...H.\
|
||
18008D660 24 40 48 83 C4 20 5F C3 E8 93 44 FF FF 4C 8B C8 $@H.. _...D..L..
|
||
18008D670 4C 8D 1D C9 FF FF FF 49 BA B3 01 00 00 00 01 00 L......I........
|
||
18008D680 00 45 0F B6 C3 48 B8 25 23 22 84 E4 9C F2 CB 49 .E...H.%#".....I
|
||
18008D690 8B CB 4C 33 C0 48 C1 E9 08 0F B6 D1 49 8B C3 48 ..L3.H......I..H
|
||
18008D6A0 C1 E8 10 0F B6 C8 49 8B C3 4D 0F AF C2 48 C1 E8 ......I..M...H..
|
||
18008D6B0 18 4C 33 C2 49 8B 51 20 4D 0F AF C2 4C 33 C1 0F .L3.I.Q M...L3..
|
||
18008D6C0 B6 C8 4D 0F AF C2 49 8B C3 4C 33 C1 48 C1 E8 20 ..M...I..L3.H..
|
||
18008D6D0 0F B6 C8 49 8B C3 48 C1 E8 28 4D 0F AF C2 4C 33 ...I..H..(M...L3
|
||
18008D6E0 C1 0F B6 C8 4D 0F AF C2 49 8B C3 4C 33 C1 48 C1 ....M...I..L3.H.
|
||
18008D6F0 E8 30 0F B6 C8 49 8B C3 48 C1 E8 38 4D 0F AF C2 .0...I..H..8M...
|
||
18008D700 49 33 C8 49 0F AF CA 48 33 C8 49 0F AF CA 49 23 I3.I...H3.I...I#
|
||
18008D710 49 48 48 C1 E1 04 49 03 49 30 48 8B 41 08 48 3B IHH...I.I0H.A.H;
|
||
18008D720 C2 74 1E 48 8B 09 4C 3B 58 10 74 17 0F 1F 40 00 .t.H..L;X.t...@.
|
||
18008D730 48 3B C1 74 0C 48 8B 40 08 4C 3B 58 10 75 F1 EB H;.t.H.@.L;X.u..
|
||
18008D740 02 33 C0 48 85 C0 48 0F 44 C2 48 3B C2 74 1C 4C .3.H..H.D.H;.t.L
|
||
18008D750 8B 40 18 4D 85 C0 74 13 48 8B D7 48 8B CB 48 8B .@.M..t.H..H..H.
|
||
18008D760 5C 24 40 48 83 C4 20 5F 49 FF E0 48 8B 5C 24 40 \$@H.. _I..H.\$@
|
||
18008D770 32 C0 48 83 C4 20 5F C3 CC CC CC CC CC CC CC CC 2.H.. _.........
|
||
|
||
========================================================================
|
||
FUNCTION: SkillHack_CostBypass
|
||
RVA: 0x8D780–0x8D8A0 Size: 288 bytes
|
||
18008D780 48 89 5C 24 18 57 48 83 EC 20 48 8B FA 48 8B D9 H.\$.WH.. H..H..
|
||
18008D790 E8 6B 3B FF FF 80 78 28 00 0F 85 F5 00 00 00 E8 .k;...x(........
|
||
18008D7A0 5C 43 FF FF 4C 8B C8 4C 8D 1D D2 FF FF FF 49 BA \C..L..L......I.
|
||
18008D7B0 B3 01 00 00 00 01 00 00 45 0F B6 C3 48 B8 25 23 ........E...H.%#
|
||
18008D7C0 22 84 E4 9C F2 CB 49 8B CB 4C 33 C0 48 C1 E9 08 ".....I..L3.H...
|
||
18008D7D0 0F B6 D1 49 8B C3 48 C1 E8 10 0F B6 C8 49 8B C3 ...I..H......I..
|
||
18008D7E0 4D 0F AF C2 48 C1 E8 18 4C 33 C2 49 8B 51 20 4D M...H...L3.I.Q M
|
||
18008D7F0 0F AF C2 4C 33 C1 0F B6 C8 4D 0F AF C2 49 8B C3 ...L3....M...I..
|
||
18008D800 4C 33 C1 48 C1 E8 20 0F B6 C8 49 8B C3 48 C1 E8 L3.H.. ...I..H..
|
||
18008D810 28 4D 0F AF C2 4C 33 C1 0F B6 C8 4D 0F AF C2 49 (M...L3....M...I
|
||
18008D820 8B C3 4C 33 C1 48 C1 E8 30 0F B6 C8 49 8B C3 48 ..L3.H..0...I..H
|
||
18008D830 C1 E8 38 4D 0F AF C2 49 33 C8 49 0F AF CA 48 33 ..8M...I3.I...H3
|
||
18008D840 C8 49 0F AF CA 49 23 49 48 48 C1 E1 04 49 03 49 .I...I#IHH...I.I
|
||
18008D850 30 48 8B 41 08 48 3B C2 74 1A 48 8B 09 4C 3B 58 0H.A.H;.t.H..L;X
|
||
18008D860 10 74 13 48 3B C1 74 0C 48 8B 40 08 4C 3B 58 10 .t.H;.t.H.@.L;X.
|
||
18008D870 75 F1 EB 02 33 C0 48 85 C0 48 0F 44 C2 48 3B C2 u...3.H..H.D.H;.
|
||
18008D880 74 12 4C 8B 40 18 4D 85 C0 74 09 48 8B D7 48 8B t.L.@.M..t.H..H.
|
||
18008D890 CB 41 FF D0 48 8B 5C 24 40 48 83 C4 20 5F C3 CC .A..H.\$@H.. _..
|
||
|
||
========================================================================
|
||
FUNCTION: SkillHack_TrampolineDispatch
|
||
RVA: 0x8FF00–0x8FF80 Size: 128 bytes
|
||
18008FF00 48 89 5C 24 08 57 4D 8B D8 48 BF B3 01 00 00 00 H.\$.WM..H......
|
||
18008FF10 01 00 00 4C 8B D2 44 0F B6 C2 48 B8 25 23 22 84 ...L..D...H.%#".
|
||
18008FF20 E4 9C F2 CB 49 8B D9 4C 33 C0 4C 8B C9 4C 0F AF ....I..L3.L..L..
|
||
18008FF30 C7 48 8B C2 48 C1 E8 08 0F B6 D0 49 8B C2 48 C1 .H..H......I..H.
|
||
18008FF40 E8 10 4C 33 C2 49 8B 51 20 0F B6 C8 49 8B C2 48 ..L3.I.Q ...I..H
|
||
18008FF50 C1 E8 18 4C 0F AF C7 4C 33 C1 0F B6 C8 4C 0F AF ...L...L3....L..
|
||
18008FF60 C7 49 8B C2 4C 33 C1 48 C1 E8 20 0F B6 C8 49 8B .I..L3.H.. ...I.
|
||
18008FF70 C2 48 C1 E8 28 4C 0F AF C7 4C 33 C1 0F B6 C8 4C .H..(L...L3....L
|
||
|
||
========================================================================
|
||
FUNCTION: FNV1a_hash
|
||
RVA: 0x8D555–0x8D640 Size: 235 bytes
|
||
18008D555 49 8B CB 4C 33 C8 48 C1 E9 08 4D 0F AF CA 0F B6 I..L3.H...M.....
|
||
18008D565 D1 49 8B C3 4C 33 CA 48 C1 E8 10 49 8B 50 20 4D .I..L3.H...I.P M
|
||
18008D575 0F AF CA 0F B6 C8 49 8B C3 4C 33 C9 48 C1 E8 18 ......I..L3.H...
|
||
18008D585 4D 0F AF CA 0F B6 C8 49 8B C3 4C 33 C9 48 C1 E8 M......I..L3.H..
|
||
18008D595 20 4D 0F AF CA 0F B6 C8 49 8B C3 4C 33 C9 48 C1 M......I..L3.H.
|
||
18008D5A5 E8 28 4D 0F AF CA 0F B6 C8 49 8B C3 4C 33 C9 48 .(M......I..L3.H
|
||
18008D5B5 C1 E8 30 4D 0F AF CA 0F B6 C8 49 8B C3 4C 33 C9 ..0M......I..L3.
|
||
18008D5C5 48 C1 E8 38 49 8B 48 30 4D 0F AF CA 4C 33 C8 4D H..8I.H0M...L3.M
|
||
18008D5D5 0F AF CA 4D 23 48 48 4D 03 C9 4A 8B 44 C9 08 48 ...M#HHM..J.D..H
|
||
18008D5E5 3B C2 74 1B 4A 8B 0C C9 4C 3B 58 10 74 13 48 3B ;.t.J...L;X.t.H;
|
||
18008D5F5 C1 74 0C 48 8B 40 08 4C 3B 58 10 75 F1 EB 02 33 .t.H.@.L;X.u...3
|
||
18008D605 C0 48 85 C0 48 0F 44 C2 48 3B C2 74 1C 4C 8B 40 .H..H.D.H;.t.L.@
|
||
18008D615 18 4D 85 C0 74 13 48 8B D7 48 8B CB 48 8B 5C 24 .M..t.H..H..H.\$
|
||
18008D625 40 48 83 C4 20 5F 49 FF E0 48 8B 5C 24 40 0F 57 @H.. _I..H.\$@.W
|
||
18008D635 C0 48 83 C4 20 5F C3 CC CC CC CC .H.. _.....
|
||
|
||
========================================================================
|
||
FUNCTION: ModuleManager_Init
|
||
RVA: 0x9AC10–0x9AE00 Size: 496 bytes
|
||
18009AC10 48 89 4C 24 08 53 56 57 41 56 41 57 48 83 EC 70 H.L$.SVWAVAWH..p
|
||
18009AC20 4C 8B F1 48 8D 41 18 48 89 44 24 38 80 38 00 74 L..H.A.H.D$8.8.t
|
||
18009AC30 2F 48 8D 15 50 5F 31 00 48 8B 0D 99 67 01 00 E8 /H..P_1.H...g...
|
||
18009AC40 5C 51 F7 FF 48 8D 15 65 46 FE FF 48 8B C8 48 83 \Q..H..eF..H..H.
|
||
18009AC50 C4 70 41 5F 41 5E 5F 5E 5B 48 FF 25 80 66 01 00 .pA_A^_^[H.%.f..
|
||
18009AC60 0F 57 C0 0F 11 44 24 48 0F 57 C9 F3 0F 7F 4C 24 .W...D$H.W....L$
|
||
18009AC70 58 41 B8 1A 00 00 00 48 8D 15 8A 5F 31 00 48 8D XA.....H..._1.H.
|
||
18009AC80 4C 24 48 E8 28 50 F7 FF 90 E8 C2 37 F7 FF 48 8D L$H.(P.....7..H.
|
||
18009AC90 4C 24 48 48 89 4C 24 20 41 B9 01 00 00 00 41 B8 L$HH.L$ A.....A.
|
||
18009ACA0 22 00 00 00 48 8D 15 15 5F 31 00 48 8B C8 E8 2D "...H..._1.H...-
|
||
18009ACB0 32 FE FF 90 48 8D 4C 24 48 E8 A2 4D F7 FF 49 8D 2...H.L$H..M..I.
|
||
18009ACC0 76 08 48 89 74 24 30 49 8B 06 48 3B 06 74 03 48 v.H.t$0I..H;.t.H
|
||
18009ACD0 89 06 8B 0D 04 BE 32 00 65 48 8B 04 25 58 00 00 ......2.eH..%X..
|
||
18009ACE0 00 BA 04 00 00 00 48 8B 04 C8 8B 0C 02 39 0D DD ......H......9..
|
||
18009ACF0 C6 32 00 7E 2D 48 8D 0D D4 C6 32 00 E8 0F 0B 01 .2.~-H....2.....
|
||
18009AD00 00 83 3D C8 C6 32 00 FF 75 18 48 8D 0D 7F 52 01 ..=..2..u.H...R.
|
||
18009AD10 00 E8 CE 0E 01 00 48 8D 0D B3 C6 32 00 E8 82 0A ......H....2....
|
||
18009AD20 01 00 48 8B 1D 8F C6 32 00 4C 8B 3D 90 C6 32 00 ..H....2.L.=..2.
|
||
18009AD30 4C 89 BC 24 B8 00 00 00 48 89 9C 24 A8 00 00 00 L..$....H..$....
|
||
18009AD40 49 3B DF 0F 84 C2 00 00 00 48 8B 4B 58 48 85 C9 I;.......H.KXH..
|
||
18009AD50 75 06 FF 15 70 65 01 00 48 8B 01 FF 50 10 48 8B u...pe..H...P.H.
|
||
18009AD60 F8 48 89 84 24 B0 00 00 00 48 8B 16 49 3B 56 10 .H..$....H..I;V.
|
||
18009AD70 74 09 48 89 02 48 83 06 08 EB 10 4C 8D 84 24 B0 t.H..H.....L..$.
|
||
18009AD80 00 00 00 49 8B CE E8 45 03 00 00 48 8B 07 48 8B ...I...E...H..H.
|
||
18009AD90 CF FF 50 08 0F 57 C0 0F 11 44 24 48 0F 57 C9 F3 ..P..W...D$H.W..
|
||
18009ADA0 0F 7F 4C 24 58 41 B8 15 00 00 00 48 8D 15 96 5E ..L$XA.....H...^
|
||
18009ADB0 31 00 48 8D 4C 24 48 E8 F4 4E F7 FF 90 48 8D 47 1.H.L$H..N...H.G
|
||
18009ADC0 08 48 89 44 24 20 4C 8D 4C 24 48 E8 10 02 00 00 .H.D$ L.L$H.....
|
||
18009ADD0 90 48 8D 4C 24 48 E8 85 4C F7 FF 90 48 83 C3 60 .H.L$H..L...H..`
|
||
18009ADE0 E9 53 FF FF FF 4C 8B B4 24 A0 00 00 00 48 8B 9C .S...L..$....H..
|
||
18009ADF0 24 A8 00 00 00 4C 8B BC 24 B8 00 00 00 48 8B 74 $....L..$....H.t
|
||
|
||
========================================================================
|
||
FUNCTION: ModuleManager_DispatchRender
|
||
RVA: 0x9AE80–0x9AEF0 Size: 112 bytes
|
||
18009AE80 48 89 5C 24 20 57 48 83 EC 30 80 79 18 00 74 46 H.\$ WH..0.y..tF
|
||
18009AE90 48 8B 19 48 8B 79 08 48 89 7C 24 50 48 89 5C 24 H..H.y.H.|$PH.\$
|
||
18009AEA0 40 48 3B DF 74 30 48 8B 0B 48 89 4C 24 48 48 85 @H;.t0H..H.L$HH.
|
||
18009AEB0 C9 74 1D 80 79 28 00 74 17 48 8B 01 FF 50 18 90 .t..y(.t.H...P..
|
||
18009AEC0 48 83 C3 08 EB D6 48 8B 5C 24 40 48 8B 7C 24 50 H.....H.\$@H.|$P
|
||
18009AED0 48 83 C3 08 EB C6 48 8B 5C 24 58 48 83 C4 30 5F H.....H.\$XH..0_
|
||
18009AEE0 C3 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................
|
||
|
||
========================================================================
|
||
FUNCTION: ModuleManager_DispatchHotkeys
|
||
RVA: 0x9AEF0–0x9AF60 Size: 112 bytes
|
||
18009AEF0 48 89 5C 24 20 57 48 83 EC 30 80 79 18 00 74 46 H.\$ WH..0.y..tF
|
||
18009AF00 48 8B 19 48 8B 79 08 48 89 7C 24 50 48 89 5C 24 H..H.y.H.|$PH.\$
|
||
18009AF10 40 48 3B DF 74 30 48 8B 0B 48 89 4C 24 48 48 85 @H;.t0H..H.L$HH.
|
||
18009AF20 C9 74 1D 80 79 28 00 74 17 48 8B 01 FF 50 30 90 .t..y(.t.H...P0.
|
||
18009AF30 48 83 C3 08 EB D6 48 8B 5C 24 40 48 8B 7C 24 50 H.....H.\$@H.|$P
|
||
18009AF40 48 83 C3 08 EB C6 48 8B 5C 24 58 48 83 C4 30 5F H.....H.\$XH..0_
|
||
18009AF50 C3 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................
|
||
|
||
========================================================================
|
||
FUNCTION: ModuleManager_DispatchRegistrarInit
|
||
RVA: 0x9AF60–0x9B000 Size: 160 bytes
|
||
18009AF60 48 89 5C 24 20 57 48 83 EC 30 80 79 18 00 74 5C H.\$ WH..0.y..t\
|
||
18009AF70 48 8B 19 48 8B 79 08 48 89 7C 24 50 48 89 5C 24 H..H.y.H.|$PH.\$
|
||
18009AF80 40 48 3B DF 74 2A 48 8B 0B 48 89 4C 24 48 48 85 @H;.t*H..H.L$HH.
|
||
18009AF90 C9 74 17 48 8B 01 FF 50 38 90 48 83 C3 08 EB DC .t.H...P8.H.....
|
||
18009AFA0 48 8B 5C 24 40 48 8B 7C 24 50 48 83 C3 08 EB CC H.\$@H.|$PH.....
|
||
18009AFB0 0F 10 05 51 BF 32 00 0F 11 05 6A BF 32 00 0F 10 ...Q.2....j.2...
|
||
18009AFC0 0D 53 BF 32 00 0F 11 0D 6C BF 32 00 48 8B 5C 24 .S.2....l.2.H.\$
|
||
18009AFD0 58 48 83 C4 30 5F C3 CC CC CC CC CC CC CC CC CC XH..0_..........
|
||
18009AFE0 48 81 EC B8 00 00 00 48 8B 05 52 A0 32 00 48 33 H......H..R.2.H3
|
||
18009AFF0 C4 48 89 84 24 A0 00 00 00 4C 89 4C 24 58 48 8B .H..$....L.L$XH.
|
||
|
||
========================================================================
|
||
FUNCTION: GABypass_Patch
|
||
RVA: 0x9D1E0–0x9D800 Size: 1568 bytes
|
||
18009D1E0 48 83 EC 58 48 83 3D 04 7F 32 00 00 74 67 0F 57 H..XH.=..2..tg.W
|
||
18009D1F0 C0 0F 11 44 24 30 0F 57 C9 F3 0F 7F 4C 24 40 41 ...D$0.W....L$@A
|
||
18009D200 B8 17 00 00 00 48 8D 15 7C 3D 31 00 48 8D 4C 24 .....H..|=1.H.L$
|
||
18009D210 30 E8 9A 2A F7 FF 90 E8 34 12 F7 FF 48 8D 4C 24 0..*....4...H.L$
|
||
18009D220 30 48 89 4C 24 20 41 B9 01 00 00 00 41 B8 14 00 0H.L$ A.....A...
|
||
18009D230 00 00 48 8D 15 67 3D 31 00 48 8B C8 E8 9F 0C FE ..H..g=1.H......
|
||
18009D240 FF 90 48 8D 4C 24 30 E8 14 28 F7 FF 48 8B 15 9D ..H.L$0..(..H...
|
||
18009D250 7E 32 00 EB 10 48 8D 0D 04 2F 31 00 FF 15 2E 40 ~2...H.../1....@
|
||
18009D260 01 00 48 8B D0 48 8D 8A 80 AD 18 00 48 89 0D FD ..H..H......H...
|
||
18009D270 99 32 00 48 8D 8A C0 CE 18 00 48 89 0D CF 99 32 .2.H......H....2
|
||
18009D280 00 48 8D 8A 60 3A D9 00 48 89 0D F1 9B 32 00 48 .H..`:..H....2.H
|
||
18009D290 8D 8A 80 74 00 00 48 89 0D DB 99 32 00 48 8D 8A ...t..H....2.H..
|
||
18009D2A0 10 4C D9 00 48 89 0D C5 9B 32 00 48 8D 8A A0 4D .L..H....2.H...M
|
||
18009D2B0 D9 00 48 89 0D BF 9B 32 00 48 8D 82 F0 9A 41 03 ..H....2.H....A.
|
||
18009D2C0 48 89 05 79 9A 32 00 48 8D 82 60 E8 78 04 48 89 H..y.2.H..`.x.H.
|
||
18009D2D0 05 53 9A 32 00 48 8D 82 30 54 F8 03 48 89 05 F5 .S.2.H..0T..H...
|
||
18009D2E0 9A 32 00 48 8D 82 F0 E9 E9 00 48 89 05 27 9B 32 .2.H......H..'.2
|
||
18009D2F0 00 48 8D 82 40 2D 5E 02 48 89 05 31 9A 32 00 48 .H..@-^.H..1.2.H
|
||
18009D300 8D 8A 80 DA F3 02 48 89 0D CB 99 32 00 48 8D 82 ......H....2.H..
|
||
18009D310 A0 1A 9D 03 48 89 05 FD 99 32 00 48 8D 82 10 7E ....H....2.H...~
|
||
18009D320 F2 00 48 89 05 B7 99 32 00 48 8D 82 F0 E9 6D 02 ..H....2.H....m.
|
||
18009D330 48 89 05 E9 99 32 00 48 8D 82 50 BB E9 03 48 89 H....2.H..P...H.
|
||
18009D340 05 B3 99 32 00 48 8D 82 C0 53 EA 03 48 89 05 CD ...2.H...S..H...
|
||
18009D350 9A 32 00 48 89 0D 9E 9A 32 00 48 8D 82 C0 D2 E0 .2.H....2.H.....
|
||
18009D360 03 48 89 05 A0 9A 32 00 48 8D 82 30 DF D9 03 48 .H....2.H..0...H
|
||
18009D370 89 05 9A 9A 32 00 48 8D 82 C0 14 DC 03 48 89 05 ....2.H......H..
|
||
18009D380 7C 9A 32 00 48 8D 82 40 2A 7F 03 48 89 05 CE 9A |.2.H..@*..H....
|
||
18009D390 32 00 48 8D 82 E0 D7 7F 03 48 89 05 C8 9A 32 00 2.H......H....2.
|
||
18009D3A0 48 8D 82 40 A6 6E 03 48 89 05 A2 9A 32 00 48 8D H..@.n.H....2.H.
|
||
18009D3B0 82 E0 30 EC 03 48 89 05 9C 9A 32 00 48 8D 82 C0 ..0..H....2.H...
|
||
18009D3C0 31 EC 03 48 89 05 76 9A 32 00 48 8D 82 D0 8C 7F 1..H..v.2.H.....
|
||
18009D3D0 03 48 89 05 70 9A 32 00 48 8D 82 F0 A8 6A 03 48 .H..p.2.H....j.H
|
||
18009D3E0 89 05 52 9A 32 00 48 8D 82 C0 0E CA 0A 48 89 05 ..R.2.H......H..
|
||
18009D3F0 34 9A 32 00 48 8D 82 B0 CA 33 0B 48 89 05 06 99 4.2.H....3.H....
|
||
18009D400 32 00 48 8D 82 00 CB 33 0B 48 89 05 00 99 32 00 2.H....3.H....2.
|
||
18009D410 48 8D 82 80 9D 32 0B 48 89 05 D2 98 32 00 48 8D H....2.H....2.H.
|
||
18009D420 82 00 90 32 0B 48 89 05 BC 98 32 00 48 8D 82 B0 ...2.H....2.H...
|
||
18009D430 66 32 0B 48 89 05 3E 99 32 00 48 8D 82 60 66 32 f2.H..>.2.H..`f2
|
||
18009D440 0B 48 89 05 28 99 32 00 48 8D 82 30 B0 32 0B 48 .H..(.2.H..0.2.H
|
||
18009D450 89 05 5A 99 32 00 48 8D 82 D0 2C 7C 08 48 89 05 ..Z.2.H...,|.H..
|
||
18009D460 D4 98 32 00 48 8D 82 20 6A 39 0B 48 89 05 DE 98 ..2.H.. j9.H....
|
||
18009D470 32 00 48 8D 82 00 77 39 0B 48 89 05 D8 98 32 00 2.H...w9.H....2.
|
||
18009D480 48 8D 82 30 88 39 0B 48 89 05 0A 98 32 00 48 8D H..0.9.H....2.H.
|
||
18009D490 82 80 0F 39 0B 48 89 05 2C 99 32 00 48 8D 82 F0 ...9.H..,.2.H...
|
||
18009D4A0 11 39 0B 48 89 05 F6 97 32 00 48 8D 82 40 12 39 .9.H....2.H..@.9
|
||
18009D4B0 0B 48 89 05 00 99 32 00 48 8D 82 40 04 39 0B 48 .H....2.H..@.9.H
|
||
18009D4C0 89 05 FA 98 32 00 48 8D 82 90 1D 39 0B 48 89 05 ....2.H....9.H..
|
||
18009D4D0 DC 97 32 00 48 8D 82 40 1D 39 0B 48 89 05 4E 99 ..2.H..@.9.H..N.
|
||
18009D4E0 32 00 48 8D 82 00 07 39 0B 48 89 05 68 97 32 00 2.H....9.H..h.2.
|
||
18009D4F0 48 8D 82 20 01 DC 09 48 89 05 4A 97 32 00 48 8D H.. ...H..J.2.H.
|
||
18009D500 82 B0 1F 3A 0B 48 89 05 9C 98 32 00 48 8D 82 40 ...:.H....2.H..@
|
||
18009D510 23 3A 0B 48 89 05 76 98 32 00 48 8D 82 D0 26 3A #:.H..v.2.H...&:
|
||
18009D520 0B 48 89 05 78 98 32 00 48 8D 82 60 2A 3A 0B 48 .H..x.2.H..`*:.H
|
||
18009D530 89 05 32 98 32 00 48 8D 82 A0 19 3A 0B 48 89 05 ..2.2.H....:.H..
|
||
18009D540 8C 98 32 00 48 8D 82 10 1A 3A 0B 48 89 05 36 98 ..2.H....:.H..6.
|
||
18009D550 32 00 48 8D 82 70 1A 3A 0B 48 89 05 28 97 32 00 2.H..p.:.H..(.2.
|
||
18009D560 48 8D 82 E0 1A 3A 0B 48 89 05 12 97 32 00 48 8D H....:.H....2.H.
|
||
18009D570 82 90 1C 3A 0B 48 89 05 6C 98 32 00 48 8D 82 30 ...:.H..l.2.H..0
|
||
18009D580 1D 3A 0B 48 89 05 56 98 32 00 48 8D 82 D0 59 3A .:.H..V.2.H...Y:
|
||
18009D590 0B 48 89 05 10 97 32 00 48 8D 82 D0 51 3A 0B 48 .H....2.H...Q:.H
|
||
18009D5A0 89 05 EA 96 32 00 48 8D 82 B0 2C 3A 0B 48 89 05 ....2.H...,:.H..
|
||
18009D5B0 B4 96 32 00 48 8D 82 20 2D 3A 0B 48 89 05 9E 96 ..2.H.. -:.H....
|
||
18009D5C0 32 00 48 8D 82 10 68 76 03 48 89 05 90 97 32 00 2.H...hv.H....2.
|
||
18009D5D0 48 8D 82 00 18 42 0B 48 89 05 BA 97 32 00 48 8D H....B.H....2.H.
|
||
18009D5E0 82 F0 2C E9 00 48 89 05 04 98 32 00 48 8D 82 00 ..,..H....2.H...
|
||
18009D5F0 32 38 0B 48 89 05 86 97 32 00 48 8D 82 60 3F 38 28.H....2.H..`?8
|
||
18009D600 0B 48 89 05 F8 96 32 00 48 8D 82 10 24 3B 0B 48 .H....2.H...$;.H
|
||
18009D610 89 05 A2 96 32 00 48 8D 82 B0 40 3B 0B 48 89 05 ....2.H...@;.H..
|
||
18009D620 A4 96 32 00 48 8D 82 20 21 3B 0B 48 89 05 8E 96 ..2.H.. !;.H....
|
||
18009D630 32 00 48 8D 82 B0 2F 32 0B 48 89 05 08 97 32 00 2.H.../2.H....2.
|
||
18009D640 48 8D 82 80 79 39 0B 48 89 05 82 96 32 00 48 83 H...y9.H....2.H.
|
||
18009D650 C4 58 C3 CC CC CC CC CC CC CC CC CC CC CC CC CC .X..............
|
||
18009D660 48 89 5C 24 08 48 89 74 24 10 57 48 83 EC 50 48 H.\$.H.t$.WH..PH
|
||
18009D670 8B 05 CA 79 32 00 48 33 C4 48 89 44 24 40 0F 57 ...y2.H3.H.D$@.W
|
||
18009D680 C0 0F 11 44 24 20 0F 57 C9 F3 0F 7F 4C 24 30 48 ...D$ .W....L$0H
|
||
18009D690 8B 3D 32 98 32 00 48 8D 35 1B 98 32 00 48 83 3D .=2.2.H.5..2.H.=
|
||
18009D6A0 2B 98 32 00 0F 48 0F 47 35 0B 98 32 00 48 BB FF +.2..H.G5..2.H..
|
||
18009D6B0 FF FF FF FF FF FF 7F 48 3B FB 0F 87 98 00 00 00 .......H;.......
|
||
18009D6C0 48 83 FF 0F 77 18 48 89 7C 24 30 48 C7 44 24 38 H...w.H.|$0H.D$8
|
||
18009D6D0 0F 00 00 00 0F 10 06 0F 11 44 24 20 EB 43 48 8B .........D$ .CH.
|
||
18009D6E0 C7 48 83 C8 0F 48 3B C3 77 0F 48 8B D8 B9 16 00 .H...H;.w.H.....
|
||
18009D6F0 00 00 48 3B C1 48 0F 42 D9 48 8D 4B 01 E8 3E 25 ..H;.H.B.H.K..>%
|
||
18009D700 F7 FF 48 89 44 24 20 48 89 7C 24 30 48 89 5C 24 ..H.D$ H.|$0H.\$
|
||
18009D710 38 4C 8D 47 01 48 8B D6 48 8B C8 E8 44 F1 00 00 8L.G.H..H...D...
|
||
18009D720 90 48 8D 54 24 20 E8 35 00 00 00 0F B6 D8 48 8D .H.T$ .5......H.
|
||
18009D730 4C 24 20 E8 28 23 F7 FF 0F B6 C3 48 8B 4C 24 40 L$ .(#.....H.L$@
|
||
18009D740 48 33 CC E8 88 DF 00 00 48 8B 5C 24 60 48 8B 74 H3......H.\$`H.t
|
||
18009D750 24 68 48 83 C4 50 5F C3 E8 93 23 F7 FF CC CC CC $hH..P_...#.....
|
||
18009D760 48 81 EC 98 00 00 00 48 C7 44 24 78 00 00 00 00 H......H.D$x....
|
||
18009D770 4C 8D 44 24 40 48 8D 4C 24 30 E8 51 04 00 00 0F L.D$@H.L$0.Q....
|
||
18009D780 B6 15 32 A0 32 00 0F B6 08 88 0D 29 A0 32 00 88 ..2.2......).2..
|
||
18009D790 10 48 8D 48 08 4C 8B 05 24 A0 32 00 48 8B 11 48 .H.H.L..$.2.H..H
|
||
18009D7A0 89 15 1A A0 32 00 4C 89 01 0F B6 10 E8 0F B5 00 ....2.L.........
|
||
18009D7B0 00 90 B0 01 EB 02 32 C0 48 81 C4 98 00 00 00 C3 ......2.H.......
|
||
18009D7C0 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................
|
||
18009D7D0 40 53 56 57 41 54 41 55 41 56 41 57 48 81 EC 70 @SVWATAUAVAWH..p
|
||
18009D7E0 01 00 00 48 8B 05 56 78 32 00 48 33 C4 48 89 84 ...H..Vx2.H3.H..
|
||
18009D7F0 24 60 01 00 00 49 8B F8 48 8B DA 4C 8B F9 48 89 $`...I..H..L..H.
|
||
|
||
========================================================================
|
||
FUNCTION: Startup_main
|
||
RVA: 0xA9190–0xA9500 Size: 880 bytes
|
||
1800A9190 48 89 5C 24 08 48 89 74 24 10 48 89 7C 24 18 55 H.\$.H.t$.H.|$.U
|
||
1800A91A0 41 56 41 57 48 8B EC 48 83 EC 70 48 8B 05 8E BE AVAWH..H..pH....
|
||
1800A91B0 31 00 48 33 C4 48 89 45 F0 E8 92 52 F6 FF 48 8B 1.H3.H.E...R..H.
|
||
1800A91C0 F8 80 B8 C0 00 00 00 00 0F 85 E3 00 00 00 FF 15 ................
|
||
1800A91D0 34 7F 00 00 33 C9 FF 15 C4 86 00 00 48 8B D8 33 4...3.......H..3
|
||
1800A91E0 C9 FF 15 B9 86 00 00 4C 8B CB 4C 8D 05 1F 60 30 .......L..L...`0
|
||
1800A91F0 00 48 8D 15 1C 60 30 00 48 8B C8 FF 15 77 86 00 .H...`0.H....w..
|
||
1800A9200 00 B9 01 00 00 00 FF 15 94 86 00 00 48 8B D8 B9 ............H...
|
||
1800A9210 01 00 00 00 FF 15 86 86 00 00 4C 8B CB 4C 8D 05 ..........L..L..
|
||
1800A9220 F8 5F 30 00 48 8D 15 F5 5F 30 00 48 8B C8 FF 15 ._0.H..._0.H....
|
||
1800A9230 44 86 00 00 B9 02 00 00 00 FF 15 61 86 00 00 48 D..........a...H
|
||
1800A9240 8B D8 B9 02 00 00 00 FF 15 53 86 00 00 4C 8B CB .........S...L..
|
||
1800A9250 4C 8D 05 C5 5F 30 00 48 8D 15 C2 5F 30 00 48 8B L..._0.H..._0.H.
|
||
1800A9260 C8 FF 15 11 86 00 00 B9 E9 FD 00 00 FF 15 9E 7E ...............~
|
||
1800A9270 00 00 B9 F5 FF FF FF FF 15 9B 7E 00 00 48 8B D8 ..........~..H..
|
||
1800A9280 C7 45 E8 00 00 00 00 48 8D 55 E8 48 8B C8 FF 15 .E.....H.U.H....
|
||
1800A9290 8C 7E 00 00 85 C0 74 12 8B 55 E8 83 CA 04 89 55 .~....t..U.....U
|
||
1800A92A0 E8 48 8B CB FF 15 7E 7E 00 00 C6 87 C0 00 00 00 .H....~~........
|
||
1800A92B0 01 E8 9A 51 F6 FF 66 C7 00 01 01 C7 40 04 01 00 ...Q..f.....@...
|
||
1800A92C0 00 00 C6 40 03 01 48 8D 0D 13 9E 30 00 FF 15 CD ...@..H....0....
|
||
1800A92D0 7F 00 00 FF 15 9F 7E 00 00 48 85 C0 74 17 0F B6 ......~..H..t...
|
||
1800A92E0 0D 05 BE 31 00 F6 D9 1B D2 83 E2 05 48 8B C8 FF ...1........H...
|
||
1800A92F0 15 33 83 00 00 33 D2 48 8D 0D 5A 63 30 00 FF 15 .3...3.H..Zc0...
|
||
1800A9300 74 81 00 00 48 85 C0 0F 85 B8 00 00 00 48 BF 00 t...H........H..
|
||
1800A9310 00 4F 91 94 4E 00 00 48 BE DB 34 B6 D7 82 DE 1B .O..N..H..4.....
|
||
1800A9320 43 49 BF FE 35 65 C4 FF FF FF 7F 49 BE FF FF FF CI..5e.....I....
|
||
1800A9330 FF FF FF FF 7F 48 8D 4D E8 E8 D2 A7 FE FF 48 8B .....H.M......H.
|
||
1800A9340 5D E8 49 3B DF 7F 09 48 81 C3 00 CA 9A 3B EB 03 ].I;...H.....;..
|
||
1800A9350 49 8B DE 48 8D 4D E0 E8 B4 A7 FE FF 48 8B 45 E0 I..H.M......H.E.
|
||
1800A9360 48 3B D8 74 48 7C 46 48 8B CB 48 2B C8 48 3B CF H;.tH|FH..H+.H;.
|
||
1800A9370 74 10 7C 0E BA 00 5C 26 05 8B CA E8 2C 23 00 00 t.|...\&....,#..
|
||
1800A9380 EB D1 48 8B C6 48 F7 E9 48 C1 FA 12 48 8B C2 48 ..H..H..H...H..H
|
||
1800A9390 C1 E8 3F 48 03 D0 48 69 C2 40 42 0F 00 48 3B C1 ..?H..Hi.@B..H;.
|
||
1800A93A0 7D 02 FF C2 8B CA E8 01 23 00 00 EB A6 33 D2 48 }.......#....3.H
|
||
1800A93B0 8D 0D A2 62 30 00 FF 15 BC 80 00 00 48 85 C0 0F ...b0.......H...
|
||
1800A93C0 84 70 FF FF FF 48 8B 0D A4 7D 00 00 E8 1F 27 FE .p...H...}....'.
|
||
1800A93D0 FF 0F 57 C0 0F 11 45 C0 0F 57 C9 F3 0F 7F 4D D0 ..W...E..W....M.
|
||
1800A93E0 41 B8 0E 00 00 00 48 8D 15 4B 9D 30 00 48 8D 4D A.....H..K.0.H.M
|
||
1800A93F0 C0 E8 BA 68 F6 FF 90 E8 54 50 F6 FF 48 8D 4D C0 ...h....TP..H.M.
|
||
1800A9400 48 89 4C 24 20 41 B9 01 00 00 00 41 B8 35 00 00 H.L$ A.....A.5..
|
||
1800A9410 00 48 8D 15 30 9D 30 00 48 8B C8 E8 C0 4A FD FF .H..0.0.H....J..
|
||
1800A9420 90 48 8D 4D C0 E8 36 66 F6 FF E8 B1 3D FF FF FF .H.M..6f....=...
|
||
1800A9430 15 4B DA 31 00 48 8B D8 0F 57 C0 0F 57 C9 48 8D .K.1.H...W..W.H.
|
||
1800A9440 4D C0 0F 11 45 C0 F3 0F 7F 4D D0 48 85 C0 0F 84 M...E....M.H....
|
||
1800A9450 EB 00 00 00 41 B8 15 00 00 00 48 8D 15 97 9C 30 ....A.....H....0
|
||
1800A9460 00 E8 4A 68 F6 FF 90 E8 E4 4F F6 FF 48 8D 4D C0 ..Jh.....O..H.M.
|
||
1800A9470 48 89 4C 24 20 41 B9 01 00 00 00 41 B8 42 00 00 H.L$ A.....A.B..
|
||
1800A9480 00 48 8D 15 C0 9C 30 00 48 8B C8 E8 50 4A FD FF .H....0.H...PJ..
|
||
1800A9490 90 48 8D 4D C0 E8 C6 65 F6 FF 48 8B 05 D7 D9 31 .H.M...e..H....1
|
||
1800A94A0 00 48 8B CB FF D0 0F 57 C0 0F 57 C9 48 8D 4D C0 .H.....W..W.H.M.
|
||
1800A94B0 0F 11 45 C0 F3 0F 7F 4D D0 48 85 C0 74 42 41 B8 ..E....M.H..tBA.
|
||
1800A94C0 25 00 00 00 48 8D 15 45 9C 30 00 E8 E0 67 F6 FF %...H..E.0...g..
|
||
1800A94D0 90 E8 7A 4F F6 FF 48 8D 4D C0 48 89 4C 24 20 41 ..zO..H.M.H.L$ A
|
||
1800A94E0 B9 01 00 00 00 41 B8 49 00 00 00 48 8D 15 56 9C .....A.I...H..V.
|
||
1800A94F0 30 00 48 8B C8 E8 E6 49 FD FF 90 E9 7C 00 00 00 0.H....I....|...
|
||
|
||
========================================================================
|
||
FUNCTION: CollectProcessThreads
|
||
RVA: 0xA9600–0xA9A20 Size: 1056 bytes
|
||
1800A9600 49 8B E3 41 5F 41 5E 5D C3 CC CC CC 48 83 EC 28 I..A_A^]....H..(
|
||
1800A9610 4C 8B 05 C9 E1 31 00 4D 85 C0 75 30 48 8B 0D 6D L....1.M..u0H..m
|
||
1800A9620 D8 31 00 33 D2 41 B8 00 07 00 00 C7 05 B3 E1 31 .1.3.A.........1
|
||
1800A9630 00 20 00 00 00 FF 15 85 7B 00 00 48 89 05 9E E1 . ......{..H....
|
||
1800A9640 31 00 4C 8B C0 48 85 C0 74 30 EB 47 8B 15 9A E1 1.L..H..t0.G....
|
||
1800A9650 31 00 8B 05 90 E1 31 00 3B D0 72 3D 8D 0C 00 33 1.....1.;.r=...3
|
||
1800A9660 D2 4C 6B C9 38 48 8B 0D 24 D8 31 00 FF 15 46 7B .Lk.8H..$.1...F{
|
||
1800A9670 00 00 4C 8B C0 48 85 C0 75 04 33 C0 EB 2C 8B 05 ..L..H..u.3..,..
|
||
1800A9680 64 E1 31 00 03 C0 4C 89 05 53 E1 31 00 89 05 55 d.1...L..S.1...U
|
||
1800A9690 E1 31 00 8B 15 53 E1 31 00 8B C2 48 6B C0 38 49 .1...S.1...Hk.8I
|
||
1800A96A0 03 C0 FF C2 89 15 42 E1 31 00 48 83 C4 28 C3 CC ......B.1.H..(..
|
||
1800A96B0 48 8B C4 48 89 58 10 48 89 70 18 48 89 78 20 55 H..H.X.H.p.H.x U
|
||
1800A96C0 41 54 41 55 41 56 41 57 48 8D A8 A8 FB FF FF 48 ATAUAVAWH......H
|
||
1800A96D0 81 EC 30 05 00 00 48 8B 05 63 B9 31 00 48 33 C4 ..0...H..c.1.H3.
|
||
1800A96E0 48 89 85 20 04 00 00 33 DB 89 54 24 24 44 8B FA H.. ...3..T$$D..
|
||
1800A96F0 48 89 4C 24 28 48 8B F9 48 89 19 48 89 59 08 33 H.L$(H..H..H.Y.3
|
||
1800A9700 D2 8D 4B 04 44 89 44 24 20 8B F3 FF 15 4F 7A 00 ..K.D.D$ ....Oz.
|
||
1800A9710 00 4C 8B F0 48 83 F8 FF 0F 84 C8 02 00 00 44 8D .L..H.........D.
|
||
1800A9720 63 1C 48 8B C8 48 8D 54 24 30 44 89 64 24 30 FF c.H..H.T$0D.d$0.
|
||
1800A9730 15 7B 7A 00 00 85 C0 0F 84 D5 00 00 00 8D 73 01 .{z...........s.
|
||
1800A9740 83 7C 24 30 10 0F 82 85 00 00 00 FF 15 07 7A 00 .|$0..........z.
|
||
1800A9750 00 39 44 24 3C 75 79 FF 15 0B 7B 00 00 39 44 24 .9D$<uy...{..9D$
|
||
1800A9760 38 74 6D 48 8B 17 48 85 D2 75 27 48 8B 0D 1E D7 8tmH..H..u'H....
|
||
1800A9770 31 00 41 B8 00 02 00 00 C7 47 08 80 00 00 00 FF 1.A......G......
|
||
1800A9780 15 3B 7A 00 00 48 89 07 48 8B D0 48 85 C0 74 66 .;z..H..H..H..tf
|
||
1800A9790 EB 31 8B 47 08 39 47 0C 72 29 48 8B 0D EF D6 31 .1.G.9G.r)H....1
|
||
1800A97A0 00 03 C0 44 8B C8 4C 8B C2 49 C1 E1 02 33 D2 89 ...D..L..I...3..
|
||
1800A97B0 47 08 FF 15 00 7A 00 00 48 8B D0 48 85 C0 74 36 G....z..H..H..t6
|
||
1800A97C0 48 89 07 8B 4F 0C 8B 44 24 38 89 04 8A FF 47 0C H...O..D$8....G.
|
||
1800A97D0 48 8D 54 24 30 44 89 64 24 30 49 8B CE FF 15 C5 H.T$0D.d$0I.....
|
||
1800A97E0 79 00 00 85 C0 0F 85 55 FF FF FF FF 15 6F 78 00 y......U.....ox.
|
||
1800A97F0 00 83 F8 12 74 1C 8B F3 48 39 1F 74 15 4C 8B 07 ....t...H9.t.L..
|
||
1800A9800 33 D2 48 8B 0D 87 D6 31 00 FF 15 71 7A 00 00 48 3.H....1...qz..H
|
||
1800A9810 89 1F 49 8B CE FF 15 75 79 00 00 85 F6 0F 84 C3 ..I....uy.......
|
||
1800A9820 01 00 00 48 39 1F 0F 84 BF 01 00 00 8B F3 39 5F ...H9.........9_
|
||
1800A9830 0C 0F 86 B4 01 00 00 41 83 CC FF 4C 8B 07 33 D2 .......A...L..3.
|
||
1800A9840 8B C6 8D 4A 5A 45 8B 04 80 FF 15 81 79 00 00 4C ...JZE......y..L
|
||
1800A9850 8B F0 44 8B EB 48 85 C0 0F 84 11 01 00 00 48 8B ..D..H........H.
|
||
1800A9860 C8 FF 15 E9 77 00 00 41 3B C4 0F 84 F1 00 00 00 ....w..A;.......
|
||
1800A9870 48 8D 54 24 50 C7 45 80 01 00 10 00 49 8B CE 41 H.T$P.E.....I..A
|
||
1800A9880 BD 01 00 00 00 FF 15 DD 77 00 00 85 C0 0F 84 CE ........w.......
|
||
1800A9890 00 00 00 8B 0D 53 DF 31 00 45 3B FC 74 04 41 8D .....S.1.E;.t.A.
|
||
1800A98A0 4F 01 8B D3 41 0F 45 D7 3B D1 0F 83 B1 00 00 00 O...A.E.;.......
|
||
1800A98B0 4C 8B 55 48 8B 7C 24 20 8B C2 4C 6B F8 38 2B CA L.UH.|$ ..Lk.8+.
|
||
1800A98C0 44 8B E1 48 8B 15 16 DF 31 00 8B C7 49 03 D7 85 D..H....1...I...
|
||
1800A98D0 FF 74 16 41 3B C5 74 0C 0F B6 4A 20 C1 E9 02 41 .t.A;.t...J ...A
|
||
1800A98E0 23 CD EB 07 41 8B CD EB 02 8B CB 44 0F B6 42 20 #...A......D..B
|
||
1800A98F0 41 8B C0 D1 E8 41 23 C5 3B C1 74 4A 85 C9 0F 84 A....A#.;.tJ....
|
||
1800A9900 8C 00 00 00 44 8B 42 24 8B CB 41 83 E0 0F 76 18 ....D.B$..A...v.
|
||
1800A9910 44 8B C9 41 0F B6 44 11 28 48 03 02 4C 3B D0 74 D..A..D.(H..L;.t
|
||
1800A9920 63 FF C1 41 3B C8 72 E8 48 8B CB 48 85 C9 74 16 c..A;.r.H..H..t.
|
||
1800A9930 48 89 4D 48 48 8D 54 24 50 49 8B CE FF 15 36 77 H.MHH.T$PI....6w
|
||
1800A9940 00 00 4C 8B 55 48 49 83 C7 38 4D 2B E5 0F 85 70 ..L.UHI..8M+...p
|
||
1800A9950 FF FF FF 48 8B 7C 24 28 41 83 CC FF 44 8B 7C 24 ...H.|$(A...D.|$
|
||
1800A9960 24 49 8B CE FF 15 26 78 00 00 45 85 ED 75 08 48 $I....&x..E..u.H
|
||
1800A9970 8B 07 8B CE 89 1C 88 FF C6 3B 77 0C 0F 82 B9 FE .........;w.....
|
||
1800A9980 FF FF EB 67 41 0F B6 4C 11 30 48 03 4A 10 EB 9B ...gA..L.0H.J...
|
||
1800A9990 45 84 C5 74 0C 48 8B 0A 48 8D 41 FB 4C 3B D0 74 E..t.H..H.A.L;.t
|
||
1800A99A0 8A 44 8B 42 24 8B CB 41 83 E0 0F 76 19 44 8B C9 .D.B$..A...v.D..
|
||
1800A99B0 41 0F B6 44 11 30 48 03 42 10 4C 3B D0 74 19 FF A..D.0H.B.L;.t..
|
||
1800A99C0 C1 41 3B C8 72 E7 4C 3B 52 08 0F 85 58 FF FF FF .A;.r.L;R...X...
|
||
1800A99D0 48 8B 0A E9 53 FF FF FF 41 0F B6 4C 11 28 48 03 H...S...A..L.(H.
|
||
1800A99E0 0A E9 45 FF FF FF BB 09 00 00 00 8B C3 48 8B 8D ..E..........H..
|
||
1800A99F0 20 04 00 00 48 33 CC E8 D4 1C 00 00 4C 8D 9C 24 ...H3......L..$
|
||
1800A9A00 30 05 00 00 49 8B 5B 38 49 8B 73 40 49 8B 7B 48 0...I.[8I.s@I.{H
|
||
1800A9A10 49 8B E3 41 5F 41 5E 41 5D 41 5C 5D C3 CC CC CC I..A_A^A]A\]....
|
||
|
||
========================================================================
|
||
FUNCTION: SuspendOrResumeThreads
|
||
RVA: 0xA9A20–0xA9A9C Size: 124 bytes
|
||
1800A9A20 48 89 5C 24 08 48 89 74 24 10 57 48 83 EC 20 48 H.\$.H.t$.WH.. H
|
||
1800A9A30 83 39 00 48 8B D9 74 51 33 FF 39 79 0C 76 38 48 .9.H..tQ3.9y.v8H
|
||
1800A9A40 8B 03 44 8B 04 B8 45 85 C0 74 25 33 D2 8D 4A 5A ..D...E..t%3..JZ
|
||
1800A9A50 FF 15 7A 77 00 00 48 8B F0 48 85 C0 74 12 48 8B ..zw..H..H..t.H.
|
||
1800A9A60 C8 FF 15 F1 75 00 00 48 8B CE FF 15 20 77 00 00 ....u..H.... w..
|
||
1800A9A70 FF C7 3B 7B 0C 72 C8 4C 8B 03 33 D2 48 8B 0D 0D ..;{.r.L..3.H...
|
||
1800A9A80 D4 31 00 FF 15 F7 77 00 00 48 8B 5C 24 30 48 8B .1....w..H.\$0H.
|
||
1800A9A90 74 24 38 48 83 C4 20 5F C3 CC CC CC t$8H.. _....
|
||
|
||
========================================================================
|
||
FUNCTION: EnableHook_PatchCode
|
||
RVA: 0xA9A9C–0xA9BC4 Size: 296 bytes
|
||
1800A9A9C 48 89 5C 24 10 48 89 6C 24 18 48 89 74 24 20 57 H.\$.H.l$.H.t$ W
|
||
1800A9AAC 41 56 41 57 48 83 EC 20 48 8B 35 25 DD 31 00 8B AVAWH.. H.5%.1..
|
||
1800A9ABC EA 8B C1 48 6B F8 38 48 8B 14 37 8A 4C 37 20 4C ...Hk.8H..7.L7 L
|
||
1800A9ACC 8B F2 48 8D 5A FB 80 E1 01 74 03 4C 8B F3 0F B6 ..H.Z....t.L....
|
||
1800A9ADC C1 4C 8D 4C 24 40 84 C9 41 B8 40 00 00 00 48 0F .L.L$@..A.@...H.
|
||
1800A9AEC 44 DA 4C 8D 3C 45 05 00 00 00 48 8B CB 49 8B D7 D.L.<E....H..I..
|
||
1800A9AFC FF 15 86 77 00 00 85 C0 75 0A B8 0A 00 00 00 E9 ...w....u.......
|
||
1800A9B0C 9B 00 00 00 85 ED 74 22 C6 03 E9 8B 44 37 08 41 ......t"....D7.A
|
||
1800A9B1C 2B C6 83 E8 05 89 43 01 F6 44 37 20 01 74 31 48 +.....C..D7 .t1H
|
||
1800A9B2C 8B 04 37 66 C7 00 EB F9 EB 26 8B 44 37 18 F6 44 ..7f.....&.D7..D
|
||
1800A9B3C 37 20 01 89 03 74 12 0F B7 44 37 1C 66 89 43 04 7 ...t...D7.f.C.
|
||
1800A9B4C 8A 44 37 1E 88 43 06 EB 07 8A 44 37 1C 88 43 04 .D7..C....D7..C.
|
||
1800A9B5C 44 8B 44 24 40 4C 8D 4C 24 40 49 8B D7 48 8B CB D.D$@L.L$@I..H..
|
||
1800A9B6C FF 15 16 77 00 00 FF 15 F8 76 00 00 4D 8B C7 48 ...w.....v..M..H
|
||
1800A9B7C 8B D3 48 8B C8 FF 15 E9 74 00 00 40 8A C5 40 C0 ..H.....t..@..@.
|
||
1800A9B8C E5 02 02 C0 32 44 37 20 24 02 32 44 37 20 40 32 ....2D7 $.2D7 @2
|
||
1800A9B9C E8 40 80 E5 04 40 32 E8 40 88 6C 37 20 33 C0 48 .@...@2.@.l7 3.H
|
||
1800A9BAC 8B 5C 24 48 48 8B 6C 24 50 48 8B 74 24 58 48 83 .\$HH.l$PH.t$XH.
|
||
1800A9BBC C4 20 41 5F 41 5E 5F C3 . A_A^_.
|
||
|
||
========================================================================
|
||
FUNCTION: AcquireSpinlock
|
||
RVA: 0xA9C88–0xA9CC8 Size: 64 bytes
|
||
1800A9C88 48 89 5C 24 08 57 48 83 EC 20 33 DB 8D 7B 01 EB H.\$.WH.. 3..{..
|
||
1800A9C98 15 48 83 FB 20 73 04 33 C9 EB 02 8B CF FF 15 9D .H.. s.3........
|
||
1800A9CA8 74 00 00 48 03 DF 33 C0 F0 0F B1 3D D0 D1 31 00 t..H..3....=..1.
|
||
1800A9CB8 75 DF 48 8B 5C 24 30 48 83 C4 20 5F C3 CC CC CC u.H.\$0H.. _....
|
||
|
||
========================================================================
|
||
FUNCTION: HookManager_CreateHook
|
||
RVA: 0xA9CC8–0xA9E8C Size: 452 bytes
|
||
1800A9CC8 48 89 5C 24 20 55 56 57 41 56 41 57 48 83 EC 60 H.\$ UVWAVAWH..`
|
||
1800A9CD8 48 8B 05 61 B3 31 00 48 33 C4 48 89 44 24 58 33 H..a.1.H3.H.D$X3
|
||
1800A9CE8 DB 4D 8B F8 8B FB 48 8B EA 48 8B F1 E8 8F FF FF .M....H..H......
|
||
1800A9CF8 FF 48 39 1D 90 D1 31 00 0F 84 57 01 00 00 48 8B .H9...1...W...H.
|
||
1800A9D08 CE E8 DE 09 00 00 85 C0 0F 84 40 01 00 00 48 8B ..........@...H.
|
||
1800A9D18 CD E8 CE 09 00 00 85 C0 0F 84 30 01 00 00 8B 15 ..........0.....
|
||
1800A9D28 C0 DA 31 00 8B C3 85 D2 74 1A 48 8B 0D A7 DA 31 ..1.....t.H....1
|
||
1800A9D38 00 48 3B 31 0F 84 D0 00 00 00 FF C0 48 83 C1 38 .H;1........H..8
|
||
1800A9D48 3B C2 72 ED 48 8B CE E8 24 07 00 00 48 85 C0 0F ;.r.H...$...H...
|
||
1800A9D58 84 F2 00 00 00 4C 8B 70 08 49 8B 0E FF 40 10 48 .....L.p.I...@.H
|
||
1800A9D68 89 48 08 4D 85 F6 0F 84 DB 00 00 00 48 8D 4C 24 .H.M........H.L$
|
||
1800A9D78 20 48 89 74 24 20 48 89 6C 24 28 4C 89 74 24 30 H.t$ H.l$(L.t$0
|
||
1800A9D88 E8 7F 03 00 00 85 C0 0F 84 AB 00 00 00 E8 72 F8 ..............r.
|
||
1800A9D98 FF FF 4C 8B C0 48 85 C0 0F 84 93 00 00 00 8A 50 ..L..H.........P
|
||
1800A9DA8 20 83 60 24 F0 80 E2 F8 48 8B 4C 24 20 4C 8B 4C .`$....H.L$ L.L
|
||
1800A9DB8 24 30 48 89 08 48 8B 4C 24 38 48 89 48 08 8A 4C $0H..H.L$8H.H..L
|
||
1800A9DC8 24 40 4C 89 48 10 80 E1 01 0A D1 88 50 20 8B 44 $@L.H.......P .D
|
||
1800A9DD8 24 44 83 E0 0F 41 09 40 24 48 8B 44 24 48 49 89 $D...A.@$H.D$HI.
|
||
1800A9DE8 40 28 48 8B 44 24 50 49 89 40 30 39 5C 24 40 74 @(H.D$PI.@09\$@t
|
||
1800A9DF8 29 8B 46 FB 41 89 40 18 0F B7 46 FF 66 41 89 40 ).F.A.@...F.fA.@
|
||
1800A9E08 1C 8A 46 01 41 88 40 1E EB 1D 83 F8 FF 0F 84 31 ..F.A.@........1
|
||
1800A9E18 FF FF FF BF 03 00 00 00 EB 40 8B 06 41 89 40 18 .........@..A.@.
|
||
1800A9E28 8A 46 04 41 88 40 1C 4D 85 FF 74 2E 4D 89 0F EB .F.A.@.M..t.M...
|
||
1800A9E38 29 BF 09 00 00 00 EB 05 BF 08 00 00 00 49 8B CE )............I..
|
||
1800A9E48 E8 37 08 00 00 EB 13 BF 09 00 00 00 EB 0C BF 07 .7..............
|
||
1800A9E58 00 00 00 EB 05 BF 02 00 00 00 87 1D 20 D0 31 00 ............ .1.
|
||
1800A9E68 8B C7 48 8B 4C 24 58 48 33 CC E8 59 18 00 00 48 ..H.L$XH3..Y...H
|
||
1800A9E78 8B 9C 24 A8 00 00 00 48 83 C4 60 41 5F 41 5E 5F ..$....H..`A_A^_
|
||
1800A9E88 5E 5D C3 CC ^]..
|
||
|
||
========================================================================
|
||
FUNCTION: HookManager_RemoveHook
|
||
RVA: 0xA9E8C–0xA9FF0 Size: 356 bytes
|
||
1800A9E8C 48 89 5C 24 08 48 89 6C 24 10 48 89 74 24 18 57 H.\$.H.l$.H.t$.W
|
||
1800A9E9C 48 83 EC 30 33 DB 48 8B E9 8B F3 E8 DC FD FF FF H..03.H.........
|
||
1800A9EAC 48 39 1D DD CF 31 00 0F 84 15 01 00 00 8B 15 2D H9...1.........-
|
||
1800A9EBC D9 31 00 8B FB 85 D2 74 19 48 8B 0D 14 D9 31 00 .1.....t.H....1.
|
||
1800A9ECC 48 8B C1 48 3B 28 74 14 FF C7 48 83 C0 38 3B FA H..H;(t...H..8;.
|
||
1800A9EDC 72 F1 BE 04 00 00 00 E9 EB 00 00 00 83 FF FF 74 r..............t
|
||
1800A9EEC F1 8B C7 48 6B E8 38 F6 44 29 20 02 74 3D 45 33 ...Hk.8.D) .t=E3
|
||
1800A9EFC C0 48 8D 4C 24 20 8B D7 E8 A7 F7 FF FF 8B F0 85 .H.L$ ..........
|
||
1800A9F0C C0 0F 85 C0 00 00 00 33 D2 8B CF E8 80 FB FF FF .......3........
|
||
1800A9F1C 48 8D 4C 24 20 8B F0 E8 F8 FA FF FF 85 F6 0F 85 H.L$ ...........
|
||
1800A9F2C A3 00 00 00 48 8B 0D A9 D8 31 00 48 8B 4C 29 10 ....H....1.H.L).
|
||
1800A9F3C E8 43 07 00 00 8B 15 A5 D8 31 00 FF CA 3B FA 73 .C.......1...;.s
|
||
1800A9F4C 35 8B C2 48 6B C8 38 48 8B 05 86 D8 31 00 0F 10 5..Hk.8H....1...
|
||
1800A9F5C 04 01 0F 11 04 28 0F 10 4C 01 10 0F 11 4C 28 10 .....(..L....L(.
|
||
1800A9F6C 0F 10 44 01 20 0F 11 44 28 20 F2 0F 10 4C 01 30 ..D. ..D( ...L.0
|
||
1800A9F7C F2 0F 11 4C 28 30 8B 0D 60 D8 31 00 8B C1 89 15 ...L(0..`.1.....
|
||
1800A9F8C 5C D8 31 00 D1 E8 83 F8 20 72 3C 3B C2 72 38 4C \.1..... r<;.r8L
|
||
1800A9F9C 8B 05 3E D8 31 00 8B C1 48 8B 0D E5 CE 31 00 33 ..>.1...H....1.3
|
||
1800A9FAC D2 48 D1 E8 4C 6B C8 38 FF 15 FE 71 00 00 48 85 .H..Lk.8...q..H.
|
||
1800A9FBC C0 74 14 D1 2D 23 D8 31 00 48 89 05 14 D8 31 00 .t..-#.1.H....1.
|
||
1800A9FCC EB 05 BE 02 00 00 00 87 1D AF CE 31 00 48 8B 5C ...........1.H.\
|
||
1800A9FDC 24 40 8B C6 48 8B 6C 24 48 48 8B 74 24 50 48 83 $@..H.l$HH.t$PH.
|
||
1800A9FEC C4 30 5F C3 .0_.
|
||
|
||
========================================================================
|
||
FUNCTION: SecurityExceptionInit
|
||
RVA: 0xAC580–0xAC6CC Size: 332 bytes
|
||
1800AC580 48 89 5C 24 08 55 48 8D AC 24 40 FB FF FF 48 81 H.\$.UH..$@...H.
|
||
1800AC590 EC C0 05 00 00 8B D9 B9 17 00 00 00 FF 15 4E 4C ..............NL
|
||
1800AC5A0 00 00 85 C0 74 04 8B CB CD 29 B9 03 00 00 00 E8 ....t....)......
|
||
1800AC5B0 C0 FF FF FF 33 D2 48 8D 4D F0 41 B8 D0 04 00 00 ....3.H.M.A.....
|
||
1800AC5C0 E8 A5 02 00 00 48 8D 4D F0 FF 15 51 4C 00 00 48 .....H.M...QL..H
|
||
1800AC5D0 8B 9D E8 00 00 00 48 8D 95 D8 04 00 00 48 8B CB ......H......H..
|
||
1800AC5E0 45 33 C0 FF 15 2F 4C 00 00 48 85 C0 74 3F 48 8B E3.../L..H..t?H.
|
||
1800AC5F0 95 D8 04 00 00 48 8D 8D E0 04 00 00 48 C7 44 24 .....H......H.D$
|
||
1800AC600 38 00 00 00 00 4C 8B C8 48 89 4C 24 30 4C 8B C3 8....L..H.L$0L..
|
||
1800AC610 48 8D 8D E8 04 00 00 48 89 4C 24 28 48 8D 4D F0 H......H.L$(H.M.
|
||
1800AC620 48 89 4C 24 20 33 C9 FF 15 E3 4B 00 00 48 8B 85 H.L$ 3....K..H..
|
||
1800AC630 C8 04 00 00 48 8D 4C 24 50 48 89 85 E8 00 00 00 ....H.L$PH......
|
||
1800AC640 33 D2 48 8D 85 C8 04 00 00 41 B8 98 00 00 00 48 3.H......A.....H
|
||
1800AC650 83 C0 08 48 89 85 88 00 00 00 E8 0B 02 00 00 48 ...H...........H
|
||
1800AC660 8B 85 C8 04 00 00 48 89 44 24 60 C7 44 24 50 15 ......H.D$`.D$P.
|
||
1800AC670 00 00 40 C7 44 24 54 01 00 00 00 FF 15 67 4B 00 ..@.D$T......gK.
|
||
1800AC680 00 8B D8 33 C9 48 8D 44 24 50 48 89 44 24 40 48 ...3.H.D$PH.D$@H
|
||
1800AC690 8D 45 F0 48 89 44 24 48 FF 15 62 4B 00 00 48 8D .E.H.D$H..bK..H.
|
||
1800AC6A0 4C 24 40 FF 15 5F 4B 00 00 85 C0 75 0D 83 FB 01 L$@.._K....u....
|
||
1800AC6B0 74 08 8D 48 03 E8 BA FE FF FF 48 8B 9C 24 D0 05 t..H......H..$..
|
||
1800AC6C0 00 00 48 81 C4 C0 05 00 00 5D C3 CC ..H......]..
|
||
|
||
========================================================================
|
||
FUNCTION: SecurityCheckCookie
|
||
RVA: 0xAC6CC–0xAC77C Size: 176 bytes
|
||
1800AC6CC 48 89 5C 24 18 55 48 8B EC 48 83 EC 30 48 8B 05 H.\$.UH..H..0H..
|
||
1800AC6DC 60 89 31 00 48 BB 32 A2 DF 2D 99 2B 00 00 48 3B `.1.H.2..-.+..H;
|
||
1800AC6EC C3 75 77 48 8D 4D 10 48 C7 45 10 00 00 00 00 FF .uwH.M.H.E......
|
||
1800AC6FC 15 DF 4A 00 00 48 8B 45 10 48 89 45 F0 FF 15 59 ..J..H.E.H.E...Y
|
||
1800AC70C 4B 00 00 8B C0 48 31 45 F0 FF 15 3D 4A 00 00 8B K....H1E...=J...
|
||
1800AC71C C0 48 8D 4D 18 48 31 45 F0 FF 15 D5 49 00 00 8B .H.M.H1E....I...
|
||
1800AC72C 45 18 48 8D 4D F0 48 C1 E0 20 48 33 45 18 48 33 E.H.M.H.. H3E.H3
|
||
1800AC73C 45 F0 48 33 C1 48 B9 FF FF FF FF FF FF 00 00 48 E.H3.H.........H
|
||
1800AC74C 23 C1 48 B9 33 A2 DF 2D 99 2B 00 00 48 3B C3 48 #.H.3..-.+..H;.H
|
||
1800AC75C 0F 44 C1 48 89 05 DA 88 31 00 48 8B 5C 24 50 48 .D.H....1.H.\$PH
|
||
1800AC76C F7 D0 48 89 05 0B 89 31 00 48 83 C4 30 5D C3 CC ..H....1.H..0]..
|
||
|