ch
Feedback
ALL SRC

ALL SRC

前往频道在 Telegram
750
订阅者
无数据24 小时
+107
+8330
帖子存档
Direction Type Address Text Up p sub_273EDC+70 BL .strlcpy_chk Up p sub_287558+84 BL .strlcpy_chk Up p sub_40D6B8+268 BL .strlcpy_chk Up p sub_40DA00+534 BL .strlcpy_chk Up p sub_470064+D4 BL .strlcpy_chk Up p sub_514B44+1FC BL .strlcpy_chk Up p sub_514B44+210 BL .strlcpy_chk Up p sub_5150C8+150 BL .strlcpy_chk Up p sub_5150C8+164 BL .__strlcpy_chk

void sub_231594()
{
  struct tm *v0; // x0
  int v1; // w8
  time_t timer[2]; // [xsp+8h] [xbp-8h] BYREF
  int v3; // [xsp+28h] [xbp+18h]
  int v4; // [xsp+2Ch] [xbp+1Ch]

  *(_QWORD *)timer = time(0LL);
  v0 = localtime(timer);
  v3 = -882646715;
  v4 = -882646716;
  if ( v0 )
    v1 = 1;
  else
    v1 = 4;
  __asm { BR              X8 }
}

Direction Type Address Text Up p sub_231174+80 BL .localtime Up p sub_231594+2C BL .localtime Up p sub_231660+C BL .localtime Up p sub_231CE8+C8 BL .localtime Up p sub_4DCE28+30 BL .localtime Up p sub_4DCED4+28 BL .localtime Up p sub_502DC8+28 BL .localtime Up p sub_503014+24 BL .localtime Up p sub_503140+60 BL .localtime Up p sub_505D50+1C BL .localtime Up p sub_51D8F0+34 BL .localtime

__int64 __fastcall sub_2580DC(int a1)
{
  __int64 v1; // x19
  __int64 v2; // x20
  __int64 v3; // x29
  __int64 v4; // x0
  unsigned int v5; // w8

  close(a1);
  v4 = *(unsigned int *)(v1 + 4);
  *(_DWORD *)(v3 - 4) = 2023700820;
  if ( (int)v4 < 0 )
    v5 = 3;
  else
    v5 = 4;
  return (*(__int64 (__fastcall **)(__int64))(v2 + 8LL * v5))(v4);
}

close

unsigned __int8 *__fastcall sub_523B60(int a1)
{
  __int64 v2; // x19
  __int64 v3; // x0
  unsigned __int8 *v4; // x11
  char v5; // w1
  char v6; // w2
  __int64 v7; // x10
  unsigned __int8 *v8; // x8
  unsigned __int8 v9; // w12
  unsigned __int8 *v10; // x8
  int v11; // w17
  int v12; // t1
  __int64 v13; // x14
  char v14; // w16
  int v15; // w1
  __int64 v16; // x17
  unsigned __int8 v17; // w3
  int v18; // w1
  int v19; // w2
  int v20; // w1
  unsigned __int8 *v21; // x3
  int v22; // t1

  v2 = sub_51FD6C();
  v3 = sub_51FD80();
  v4 = (unsigned __int8 *)(v2 + a1);
  v5 = 0;
  v6 = 1;
  v7 = a1 + 1LL;
  v8 = (unsigned __int8 *)(v3 + a1);
  v9 = *(_BYTE *)(v3 + v7);
  v12 = *v8;
  v10 = v8 + 2;
  v11 = v12;
  v13 = a1 + 2LL;
  while ( 1 )
  {
    v14 = v6;
    if ( (v5 & 1) != 0 || !v11 )
    {
      v15 = *v4;
      v9 = *(_BYTE *)(v2 + v7) ^ v15;
      if ( v9 )
      {
        v16 = 0LL;
        do
        {
          v17 = v4[v16 + 2] ^ v15;
          v18 = v15 + v16;
          v10[v16++] = v17;
          v15 = (v18 ^ 0x21) + 2;
        }
        while ( v9 != v16 );
      }
      *(_BYTE *)(v3 + v13 + v9) = 0;
      v11 = 1;
      *(_BYTE *)(v3 + v7) = v9;
      *(_BYTE *)(v3 + a1) = 1;
    }
    if ( v9 )
    {
      v19 = 0;
      v20 = 255;
      v21 = v10;
      do
      {
        ++v19;
        v22 = *v21++;
        v20 ^= v22;
      }
      while ( (unsigned __int8)v19 < (unsigned int)v9 );
    }
    else
    {
      v20 = 255;
    }
    if ( (*(unsigned __int8 *)(v2 + (int)(v13 + v9)) ^ v20 ^ *v4) == 255 )
      break;
    v6 = 0;
    v5 = 1;
    if ( (v14 & 1) == 0 )
    {
      byte_5B90F8 = 1;
      return v10;
    }
  }
  return v10;
}

1CBF00 loc_1CBF00 ; CODE XREF: .text:00000000001CBCB0↑j .text:00000000001CBF00 ; DATA XREF: .rodata:00000000000A02D0↑o .text:00000000001CBF00 BL sub_22DE38 ; jumptable 00000000001CBCB0 case 37 .text:00000000001CBF04 BL sub_22E2B8 .text:00000000001CBF08 B loc_1CC0B0

Direction Type Address Text Up p .text:loc_1CBF00 BL sub_22DE38; jumptable 00000000001CBCB0 case 37 Up p .text:loc_1CC020 BL sub_22DE38; jumptable 00000000001CBCB0 case 38 Up p .text:loc_1CC328 BL sub_22DE38; jumptable 00000000001CBCB0 case 36 Up p .text:00000000001CC338 BL sub_22DE38 Up p sub_1FD460+38 BL sub_22DE38 Up p sub_216D58+40 BL sub_22DE38

string.txt4.30 KB

captain 64.txt0.65 KB

BL .memcpy Up p sub_53F53C+1B4 BL .memcpy Up p sub_53F53C+3AC BL .memcpy Up p sub_541424+F0 BL .memcpy Up p sub_541598+F0 BL .memcpy Up p sub_541930+70 BL .memcpy Up p sub_541D5C+7C BL .memcpy Up p sub_5427E0+70 BL .memcpy Up p sub_542948+2D8 BL .memcpy Up p sub_542E14+1F8 BL .memcpy Up p sub_543194+C8 BL .memcpy Up p sub_544630+1A4 BL .memcpy Up p sub_545540+30 BL .memcpy Up p sub_5463B4+D8 BL .memcpy Up p sub_5463B4+35C BL .memcpy Up p sub_5463B4+3D8 BL .memcpy Up p sub_54683C+334 BL .memcpy Up p sub_54683C+510 BL .memcpy Up p sub_5486D8+254 BL .memcpy

4 BL .memcpy Up p sub_4DF94C+40 BL .memcpy Up p sub_4E9344+9C BL .memcpy Up p sub_4E93FC+14C BL .memcpy Up p sub_4F05E4+34 BL .memcpy Up p sub_4F1C44+F8 BL .memcpy Up p sub_4F2F5C+84 BL .memcpy Up p sub_4F311C+7C BL .memcpy Up p sub_5019E8+E4 BL .memcpy Up p sub_505EC4+7C BL .memcpy Up p sub_505EC4+90 BL .memcpy Up p sub_506430+AC BL .memcpy Up p sub_5065B4+6C BL .memcpy Up j sub_506674+5C B .memcpy Up p sub_506728+38 BL .memcpy Up p sub_5067B0+38 BL .memcpy Up p sub_50681C+44 BL .memcpy Up p sub_508164+34 BL .memcpy Up p sub_5083DC-1A0 BL .memcpy Up p sub_5083DC-FC BL .memcpy Up p sub_50B020+B8 BL .memcpy Up p sub_50B148+60 BL .memcpy Up p sub_50C068+104 BL .memcpy Up p sub_50C474+34 BL .memcpy Up p sub_50C760+34 BL .memcpy Up p sub_50E9C4+C8 BL .memcpy Up p sub_50EAC0+34 BL .memcpy Up p sub_513760+228 BL .memcpy Up p sub_5147E0+1D0 BL .memcpy Up p sub_5164F8+C4 BL .memcpy Up p sub_5164F8+11C BL .memcpy Up p sub_517E28+118 BL .memcpy Up p sub_518308+BC BL .memcpy Up p sub_519730+198 BL .memcpy Up p sub_519FB8+68 BL .memcpy Up p sub_51A5C8+E4 BL .memcpy Up p sub_51A5C8+190 BL .memcpy Up p sub_51A80C+CC BL .memcpy Up p sub_51B400+34 BL .memcpy Up p sub_51C3C0+40 BL .memcpy Up j sub_520974+4C B .memcpy Up p sub_5294E0+58 BL .memcpy Up p sub_52B334+704 BL .memcpy Up p sub_52B334+95C BL .memcpy Up p sub_52D484+3B8 BL .memcpy Up p sub_52D484+610 BL .memcpy Up p sub_52DBC8+1AC BL .memcpy Up p sub_52EE1C+174 BL .memcpy Up p sub_52F024+6C BL .memcpy Up p sub_52F460+10C BL .memcpy Up p sub_52F858+13C BL .memcpy Up p sub_52F858+3AC BL .memcpy Up p sub_52F858+438 BL .memcpy Up p sub_53068C+324 BL .memcpy Up p sub_531198+4AC BL .memcpy Up p sub_531198+930 BL .memcpy Up p sub_531198+A58 BL .memcpy Up p sub_531198+AFC BL .memcpy Up p sub_531198+C64 BL .memcpy Up p sub_531198+E4C BL .memcpy Up p sub_531198+11BC BL .memcpy Up p sub_53434C+1F0 BL .memcpy Up p sub_53434C+4E8 BL .memcpy Up p sub_534914+228 BL .memcpy Up p sub_5356B4+1FC BL .memcpy Up p sub_535BC4+12C BL .memcpy Up p sub_535D34+80 BL .memcpy Up p sub_535EEC+80 BL .memcpy Up p sub_536C38+70 BL .memcpy Up p sub_536E58+70 BL .memcpy Up p sub_536E58+1B4 BL .memcpy Up p sub_537380+2C4 BL .memcpy Up p sub_537380+3E4 BL .memcpy Up p sub_537B7C+180 BL .memcpy Up p sub_537B7C+2EC BL .memcpy Up p sub_537B7C+354 BL .memcpy Up p sub_537F1C+80 BL .memcpy Up p sub_537FCC+18C BL .memcpy Up p sub_538188+19C BL .memcpy Up p sub_538354+2D8 BL .memcpy Up p sub_538898+31C BL .memcpy Up p sub_538EF4+CC BL .memcpy Up p sub_539194+294 BL .memcpy Up p sub_539B84+D4 BL .memcpy Up p sub_53A2DC+1F8 BL .memcpy Up p sub_53A514+160 BL .memcpy Up p sub_53A6A8+170 BL .memcpy Up p sub_53A6A8+2CC BL .memcpy Up p sub_53BF80+27C BL .memcpy Up p sub_53C600+10C BL .memcpy Up p sub_53D2B4+314 BL .memcpy Up p sub_53D6F8+E0 BL .memcpy Up p sub_53D964+D8 BL .memcpy Up p sub_53DC94+198 BL .memcpy Up p sub_53F3C8+F0

p p sub_48D670+D60 BL .memcpy Up p sub_492D98+464 BL .memcpy Up p sub_4941D8+64 BL .memcpy Up p sub_494394+118 BL .memcpy Up p sub_494574+10C BL .memcpy Up p sub_494A04+C0 BL .memcpy Up p sub_494AFC+18C BL .memcpy Up p sub_494CC4+180 BL .memcpy Up p sub_495F48+2A8 BL .memcpy Up p sub_496624+EA4 BL .memcpy Up p sub_498304+224 BL .memcpy Up p sub_498304+2C8 BL .memcpy Up p sub_498304+358 BL .memcpy Up p sub_499064+254 BL .memcpy Up p sub_499064+2E4 BL .memcpy Up p sub_499690+528 BL .memcpy Up p sub_499690+5CC BL .memcpy Up p sub_499FCC+2F4 BL .memcpy Up p sub_4A2D84+D8 BL .memcpy Up p sub_4A3790+44 BL .memcpy Up p sub_4A3C8C+44 BL .memcpy Up p sub_4A3D6C+64 BL .memcpy Up p sub_4A4664+64 BL .memcpy Up p sub_4A8040+254 BL .memcpy Up p sub_4A8FD0+9C BL .memcpy Up p sub_4AB780+298 BL .memcpy Up p sub_4B29D8+58 BL .memcpy Up p sub_4B2A74+78 BL .memcpy Up j sub_4B3A20+6C B .memcpy Up p sub_4B88B0+98 BL .memcpy Up p sub_4B88B0+12C BL .memcpy Up p sub_4B96B8+128 BL .memcpy Up p sub_4BB204+60 BL .memcpy Up p sub_4BB5B8+174 BL .memcpy Up p sub_4BB878+378 BL .memcpy Up p sub_4BC76C+88 BL .memcpy Up p sub_4BC76C+40C BL .memcpy Up p sub_4BEDAC+158 BL .memcpy Up p sub_4BF4F4+8C BL .memcpy Up p sub_4C0270+64 BL .memcpy Up p sub_4C0270+BC BL .memcpy Up p sub_4C0F0C+44 BL .memcpy Up p sub_4C11CC+A48 BL .memcpy Up p sub_4C11CC+A64 BL .memcpy Up p sub_4C2B0C+6C BL .memcpy Up j sub_4C2B0C+E4 B .memcpy Up p sub_4C2B0C+F4 BL .memcpy Up p sub_4C3AAC+10C BL .memcpy Up p sub_4C3D98+CC BL .memcpy Up p sub_4C3E78+80 BL .memcpy Up p sub_4C405C+5C BL .memcpy Up p sub_4C4BB8+54 BL .memcpy Up p sub_4C4F1C+68 BL .memcpy Up p sub_4C4F1C+1B8 BL .memcpy Up p sub_4C5100+4C BL .memcpy Up p sub_4C5100+1A4 BL .memcpy Up p sub_4C5100+1D4 BL .memcpy Up p sub_4C5100+224 BL .memcpy Up p sub_4C5100+254 BL .memcpy Up p sub_4C5100+3B0 BL .memcpy Up p sub_4C5A7C+8C BL .memcpy Up p sub_4C5A7C+9C BL .memcpy Up p sub_4C61C4+1D8 BL .memcpy Up p sub_4C648C+DC BL .memcpy Up p sub_4C648C+164 BL .memcpy Up p sub_4C7144+28 BL .memcpy Up p sub_4D7AA0+138 BL .memcpy Up p sub_4DA17C+64 BL .memcpy Up p sub_4DA17C+A8 BL .memcpy Up p sub_4DA3C8+3C BL .memcpy Up p sub_4DA528+80 BL .memcpy Up p sub_4DA528+C0 BL .memcpy Up p sub_4DA9AC+70 BL .memcpy Up p sub_4DAAA4+80 BL .memcpy Up p sub_4DAB48+70 BL .memcpy Up p sub_4DABE4+34 BL .memcpy Up p sub_4DAE94+7C BL .memcpy Up p sub_4DAFC4+5C BL .memcpy Up p sub_4DB1D4+70 BL .memcpy Up p sub_4DB36C+6C BL .memcpy Up p sub_4DB4F0+58 BL .memcpy Up p sub_4DB574+34 BL .memcpy Up p sub_4DB64C+7C BL .memcpy Up p sub_4DB704+38 BL .memcpy Up p sub_4DB770+54 BL .memcpy Up p sub_4DB880+78 BL .memcpy Up p sub_4DB880+90 BL .memcpy Up p sub_4DC274+88 BL .memcpy Up p sub_4DC274+150 BL .memcpy Up p sub_4DC800+C0 BL .memcpy Up p sub_4DEF8C+54 BL .memcpy Up p sub_4DF020+38 BL .memcpy Up p sub_4DF020+48 BL .memcpy Up p sub_4DF098+15C BL .memcpy Up p sub_4DF3BC+5

+8 BL .memcpy Up p sub_3BDADC+8 BL .memcpy Up p sub_3BDB48+8 BL .memcpy Up p sub_3F48BC+384 BL .memcpy Up p sub_40AA20+1FC BL .memcpy Up p sub_40AA20+28C BL .memcpy Up p sub_40AD7C+3A4 BL .memcpy Up p sub_40B6BC+1FC BL .memcpy Up p sub_40B6BC+290 BL .memcpy Up p sub_40BA34+240 BL .memcpy Up p sub_40C4BC+48C BL .memcpy Up p sub_40E494+170 BL .memcpy Up p sub_40E494+25C BL .memcpy Up p sub_40E92C+1C0 BL .memcpy Up p sub_4106C0+D8 BL .memcpy Up p sub_41256C+1D4 BL .memcpy Up p sub_41256C+380 BL .memcpy Up p sub_414A60+44 BL .memcpy Up p sub_4159DC+44 BL .memcpy Up p sub_4162CC+40 BL .memcpy Up p sub_4162CC+50 BL .memcpy Up p sub_416B7C+44 BL .memcpy Up p sub_416ED4+B8 BL .memcpy Up p sub_41B564+48 BL .memcpy Up p sub_41CD20+44 BL .memcpy Up p sub_41D428+44 BL .memcpy Up p sub_41E90C+44 BL .memcpy Up p sub_41F5C8+B4 BL .memcpy Up p sub_42F8E4+17C BL .memcpy Up p sub_430104+4C BL .memcpy Up p sub_4311BC+48 BL .memcpy Up p sub_43AFB4+18C BL .memcpy Up p sub_43D6F4+D8 BL .memcpy Up p sub_43E454+8C BL .memcpy Up p sub_43EB80+59C BL .memcpy Up p sub_43F478+A0 BL .memcpy Up p sub_4590D8+2C BL .memcpy Up p sub_459C20+20 BL .memcpy Up p sub_45A158+20 BL .memcpy Up p sub_45B108+44 BL .memcpy Up p sub_45B4D4+44 BL .memcpy Up p sub_45B5B4+64 BL .memcpy Up p sub_45BED8+44 BL .memcpy Up p sub_45C2A4+44 BL .memcpy Up p sub_45C384+64 BL .memcpy Up p sub_45CBD8+130 BL .memcpy Up p sub_45CF3C+110 BL .memcpy Up p sub_45F3D4+25C BL .memcpy Up p sub_45FFA8+120 BL .memcpy Up p sub_4624A8+E4 BL .memcpy Up p sub_4633AC+10C BL .memcpy Up p sub_463C20+B4 BL .memcpy Up p sub_467940+F4 BL .memcpy Up p sub_468D2C+44 BL .memcpy Up p sub_469230+44 BL .memcpy Up p sub_469310+64 BL .memcpy Up p sub_46982C+20 BL .memcpy Up p sub_46A288+22C BL .memcpy Up p sub_46B93C+214 BL .memcpy Up p sub_46C774+80 BL .memcpy Up p sub_46DA40+9C BL .memcpy Up p sub_470AB0+2C BL .memcpy Up p sub_47150C+20 BL .memcpy Up p sub_471820+48 BL .memcpy Up p sub_471F80+44 BL .memcpy Up p sub_472488+44 BL .memcpy Up p sub_476C20+2C BL .memcpy Up p sub_479C60+64 BL .memcpy Up p sub_47A780+44 BL .memcpy Up p sub_47AD84+44 BL .memcpy Up p sub_47AE64+64 BL .memcpy Up p sub_47B5D0+20 BL .memcpy Up p sub_47BEEC+84 BL .memcpy Up p sub_47E224+1E4 BL .memcpy Up p sub_47E694+98 BL .memcpy Up p sub_47E7DC+2AC BL .memcpy Up p sub_47F4E4+20 BL .memcpy Up p sub_4801F4+44 BL .memcpy Up p sub_4805C0+44 BL .memcpy Up p sub_4806A0+64 BL .memcpy Up p sub_4819DC+20 BL .memcpy Up p sub_482380+44 BL .memcpy Up p sub_482748+44 BL .memcpy Up p sub_482828+64 BL .memcpy Up p sub_48A460+44 BL .memcpy Up p sub_48A95C+44 BL .memcpy Up p sub_48AA3C+64 BL .memcpy Up p sub_48B540+44 BL .memcpy Up p sub_48BA78+44 BL .memcpy Up p sub_48BB58+64 BL .memcpy Up p sub_48C17C+20 BL .memcpy Up p sub_48C6F8+20 BL .memcpy Up p sub_48CB3C+37C BL .memcpy Up p sub_48CB3C+440 BL .memcpy Up p sub_48CB3C+4D0 BL .memcpy U

451E4+154 BL .memcpy Up p sub_345494+B4 BL .memcpy Up p sub_3472E4+178 BL .memcpy Up p sub_349688+CC BL .memcpy Up p sub_3497A4+C4 BL .memcpy Up p sub_34E460+C0 BL .memcpy Up p sub_34EC34+48 BL .memcpy Up p sub_34F328+D8 BL .memcpy Up p sub_34FAE4+28 BL .memcpy Up p sub_350010+BC BL .memcpy Up p sub_350720+B4 BL .memcpy Up p sub_3511E4+28 BL .memcpy Up p sub_351B20+48 BL .memcpy Up p sub_352558+48 BL .memcpy Up p sub_352B3C+48 BL .memcpy Up p sub_35356C+48 BL .memcpy Up p sub_3542CC+48 BL .memcpy Up p sub_354C4C+90 BL .memcpy Up p sub_354C4C+114 BL .memcpy Up p sub_3560CC+48 BL .memcpy Up p sub_3567D4+D8 BL .memcpy Up p sub_356F90+48 BL .memcpy Up p sub_3573E4+BC BL .memcpy Up p sub_357EB4+48 BL .memcpy Up p sub_35855C+48 BL .memcpy Up p sub_358F94+48 BL .memcpy Up p sub_3595B8+48 BL .memcpy Up p sub_35A818+48 BL .memcpy Up p sub_35BA78+48 BL .memcpy Up p sub_35DA28+40 BL .memcpy Up p sub_35DA28+50 BL .memcpy Up p sub_35DD14+44 BL .memcpy Up p sub_35DD14+60 BL .memcpy Up p sub_35E608+4C BL .memcpy Up p sub_35E684+28 BL .memcpy Up p sub_35FCC0+1C BL .memcpy Up p sub_35FED0+40 BL .memcpy Up p sub_35FED0+50 BL .memcpy Up p sub_3601BC+44 BL .memcpy Up p sub_3601BC+60 BL .memcpy Up p sub_360AB0+4C BL .memcpy Up p sub_360BB8+1C BL .memcpy Up p sub_360DC8+40 BL .memcpy Up p sub_360DC8+50 BL .memcpy Up p sub_3610B4+44 BL .memcpy Up p sub_3610B4+60 BL .memcpy Up p sub_3619A8+4C BL .memcpy Up p sub_361AB0+1C BL .memcpy Up p sub_361CC0+40 BL .memcpy Up p sub_361CC0+50 BL .memcpy Up p sub_361FAC+44 BL .memcpy Up p sub_361FAC+60 BL .memcpy Up p sub_3628A0+4C BL .memcpy Up p sub_3629A8+1C BL .memcpy Up p sub_364C70+234 BL .memcpy Up p sub_365B24+D0 BL .memcpy Up p sub_366D20+268 BL .memcpy Up p sub_367214+3C4 BL .memcpy Up p sub_367C08+344 BL .memcpy Up p sub_36A54C+44 BL .memcpy Up p sub_36AA84+44 BL .memcpy Up p sub_36AB64+64 BL .memcpy Up p sub_36B0C0+20 BL .memcpy Up p sub_36B308+20 BL .memcpy Up p sub_36B734+20 BL .memcpy Up p sub_36BFC8+44 BL .memcpy Up p sub_36C500+44 BL .memcpy Up p sub_36C5E0+64 BL .memcpy Up p sub_36E070+64 BL .memcpy Up p sub_36F5CC+140 BL .memcpy Up p sub_37128C+D8 BL .memcpy Up p sub_372830+44 BL .memcpy Up p sub_372BFC+44 BL .memcpy Up p sub_372CDC+64 BL .memcpy Up p sub_373154+1B8 BL .memcpy Up p sub_3734E8+FC BL .memcpy Up p sub_3747AC+20 BL .memcpy Up p sub_375210+44 BL .memcpy Up p sub_3755DC+44 BL .memcpy Up p sub_3756BC+64 BL .memcpy Up p sub_37625C+118 BL .memcpy Up p sub_3777E8+D8 BL .memcpy Up p sub_3B3D44+98 BL .memcpy Up p sub_3B3D44+BC BL .memcpy Up p sub_3B3F7C+2B8 BL .memcpy Up p sub_3B3F7C+2E0 BL .memcpy Up p sub_3B3F7C+518 BL .memcpy Up p sub_3B4B18+C0 BL .memcpy Up p sub_3BD130+8 BL .memcpy Up p sub_3BD278+8 BL .memcpy Up p sub_3BD39C+8 BL .memcpy Up p sub_3BD4D8+8 BL .memcpy Up p sub_3BD60C+8 BL .memcpy Up p sub_3BD754+8 BL .memcpy Up p sub_3BD880+8 BL .memcpy Up p sub_3BD9DC

.memcpy Up p sub_29DA18+2BC BL .memcpy Up p sub_29E32C+80 BL .memcpy Up p sub_2A47A4+15C BL .memcpy Up p sub_2A47A4+184 BL .memcpy Up p sub_2A4A14+204 BL .memcpy Up p sub_2ACA28+298 BL .memcpy Up p sub_2AE194+34 BL .memcpy Up p sub_2B42C4+160 BL .memcpy Up p sub_2B47B4+18 BL .memcpy Up p sub_2BE1F8+10 BL .memcpy Up p sub_2BE49C+10 BL .memcpy Up p sub_2C3134+358 BL .memcpy Up p sub_2CDCE0+294 BL .memcpy Up p sub_2D10D0+DC BL .memcpy Up p sub_2D10D0+110 BL .memcpy Up p sub_2D24AC+60 BL .memcpy Up p sub_2D25AC+48 BL .memcpy Up p sub_2D2668+C8 BL .memcpy Up p sub_2D2A00+8 BL .memcpy Up p sub_2DA8DC+3C BL .memcpy Up p sub_2E0FE0+40 BL .memcpy Up p sub_2E118C+50 BL .memcpy Up p sub_2E1344+10 BL .memcpy Up p sub_2E855C+25C BL .memcpy Up p sub_2EA678+D8 BL .memcpy Up p sub_2EB950+D8 BL .memcpy Up p sub_2ED4C8+E8 BL .memcpy Up p sub_2ED4C8+260 BL .memcpy Up p sub_2EE118+1B8 BL .memcpy Up p sub_2EE118+388 BL .memcpy Up p sub_2F073C+9BC BL .memcpy Up p sub_2F4BBC+188 BL .memcpy Up p sub_2F7784+12C BL .memcpy Up p sub_2F7784+898 BL .memcpy Up p sub_2F8300+12C BL .memcpy Up p sub_2FAE70+98 BL .memcpy Up p sub_2FC070+44 BL .memcpy Up p sub_2FD55C+5E0 BL .memcpy Up p sub_2FD55C+8D0 BL .memcpy Up p sub_2FD55C+A18 BL .memcpy Up p sub_2FD55C+B70 BL .memcpy Up p sub_2FD55C+CB0 BL .memcpy Up p sub_2FE6A0+1A0 BL .memcpy Up p sub_2FE6A0+5A8 BL .memcpy Up p sub_2FE6A0+7CC BL .memcpy Up p sub_300744+D8 BL .memcpy Up p sub_302034+D8 BL .memcpy Up p sub_303280+D8 BL .memcpy Up p sub_303D38+740 BL .memcpy Up p sub_303D38+974 BL .memcpy Up p sub_304B08+7BC BL .memcpy Up p sub_304B08+9CC BL .memcpy Up p sub_309CD8+198 BL .memcpy Up p sub_30D838+D8 BL .memcpy Up p sub_3101EC+D8 BL .memcpy Up p sub_311028+D8 BL .memcpy Up p sub_311AE8+44 BL .memcpy Up p sub_312034+44 BL .memcpy Up p sub_312114+64 BL .memcpy Up p sub_313F2C+D8 BL .memcpy Up p sub_315CA8+D8 BL .memcpy Up p sub_316AE4+D8 BL .memcpy Up p sub_31865C+38C BL .memcpy Up p sub_31ACFC+D8 BL .memcpy Up p sub_31BC34+D8 BL .memcpy Up p sub_321AD8+50 BL .memcpy Up p sub_322DB8+D8 BL .memcpy Up p sub_3298BC+48 BL .memcpy Up p sub_32A29C+48 BL .memcpy Up p sub_32AB1C+64 BL .memcpy Up p sub_32AEDC+20 BL .memcpy Up p sub_32B50C+20 BL .memcpy Up p sub_32BF94+44 BL .memcpy Up p sub_32C3EC+44 BL .memcpy Up p sub_32C4CC+64 BL .memcpy Up p sub_32CABC+20 BL .memcpy Up p sub_33598C+16C BL .memcpy Up p sub_338944+2C BL .memcpy Up p sub_33D660+220 BL .memcpy Up p sub_33E7B4+20 BL .memcpy Up p sub_33F274+44 BL .memcpy Up p sub_33F640+44 BL .memcpy Up p sub_33F720+64 BL .memcpy Up p sub_341050+20 BL .memcpy Up p sub_3419F4+44 BL .memcpy Up p sub_341DBC+44 BL .memcpy Up p sub_341E9C+64 BL .memcpy Up p sub_342C7C+44 BL .memcpy Up p sub_343048+44 BL .memcpy Up p sub_343128+64 BL .memcpy Up p sub_3435F4+20 BL .memcpy Up p sub_344394+44 BL .memcpy Up p sub_34475C+44 BL .memcpy Up p sub_34483C+64 BL .memcpy Up p sub_3

Direction Type Address Text Up p sub_1C7454+344 BL .memcpy Up p sub_1C7454+394 BL .memcpy Up j sub_1C7824+CC B .memcpy Up p sub_1D4838+2AC BL .memcpy Up p sub_1D4838+548 BL .memcpy Up p sub_1D4FE4+360 BL .memcpy Up p sub_1D4FE4+4A0 BL .memcpy Up p sub_1E1BB4+AC BL .memcpy Up p sub_1E3058+48 BL .memcpy Up p sub_1E4DD8+AC BL .memcpy Up p sub_1F3064+44 BL .memcpy Up p sub_1F5040+AC BL .memcpy Up p sub_1FD460+20 BL .memcpy Up p sub_1FD5A4+C BL .memcpy Up p sub_200948+10 BL .memcpy Up p sub_201774+160 BL .memcpy Up p sub_2062D0+60 BL .memcpy Up p sub_208D78+50 BL .memcpy Up p sub_208F34:loc_2091B0 BL .memcpy Up p sub_2092B0+C BL .memcpy Up p sub_20BDAC:loc_20BF54 BL .memcpy Up p sub_20C8B0+6C BL .memcpy Up p sub_20D358+EC BL .memcpy Up p sub_20D5B0+48 BL .memcpy Up p sub_20DB40+34 BL .memcpy Up p sub_20E224+10 BL .memcpy Up p sub_20F744+64 BL .memcpy Up p sub_211590+C BL .memcpy Up p sub_2120E4+A0 BL .memcpy Up p sub_212310+C BL .memcpy Up p sub_2125B8:loc_212704 BL .memcpy Up p sub_212A88+20 BL .memcpy Up p sub_213B64+2D8 BL .memcpy Up p sub_21476C+70 BL .memcpy Up p sub_214B54+14 BL .memcpy Up p sub_214E94+20 BL .memcpy Up p sub_21538C+98 BL .memcpy Up p sub_216448+144 BL .memcpy Up p sub_21848C+50 BL .memcpy Up p sub_2190CC+34 BL .memcpy Up p sub_21FD28+80 BL .memcpy Up p sub_2226B8+2C BL .memcpy Up p sub_223850+34 BL .memcpy Up p sub_223DC4+10 BL .memcpy Up p sub_224AB0+34 BL .memcpy Up p sub_2298B8+A8 BL .memcpy Up p sub_229B50+34 BL .memcpy Up p sub_22B3A8+AD0 BL .memcpy Up p sub_22D7BC+60 BL .memcpy Up p sub_22DF38+64 BL .memcpy Up p sub_22E65C+60 BL .memcpy Up p sub_22F64C+D0 BL .memcpy Up p sub_22F64C+E8 BL .memcpy Up p sub_22F64C+120 BL .memcpy Up p sub_23097C+160 BL .memcpy Up p sub_23172C+12C BL .memcpy Up p sub_231BBC+C BL .memcpy Up p sub_232860+34 BL .memcpy Up p sub_235CF0+34 BL .memcpy Up p sub_239FB4+110 BL .memcpy Up p sub_23BFC4+34 BL .memcpy Up p sub_23CEA0+8 BL .memcpy Up p sub_23D30C+8 BL .memcpy Up p sub_23D8C0+34 BL .memcpy Up p sub_23DFD4+34 BL .memcpy Up p sub_23E228+34 BL .memcpy Up p sub_23E618+34 BL .memcpy Up p sub_23E8A8+34 BL .memcpy Up p sub_23EC30+34 BL .memcpy Up p sub_23EFFC+34 BL .memcpy Up p sub_23F1F4+34 BL .memcpy Up p sub_240104+34 BL .memcpy Up p sub_241470+78 BL .memcpy Up p sub_2423C0+3C BL .memcpy Up p sub_24249C+288 BL .memcpy Up p sub_242BD4+90 BL .memcpy Up p sub_242CC4+2C BL .memcpy Up p sub_2435FC+20 BL .memcpy Up p sub_243E6C+134 BL .memcpy Up p sub_246F58+50 BL .memcpy Up p sub_253428+34 BL .memcpy Up p sub_255288+1E0 BL .memcpy Up p sub_258394+2C0 BL .memcpy Up p sub_25AFA0+38 BL .memcpy Up p sub_25BBF4+14 BL .memcpy Up p sub_26C864+34 BL .memcpy Up p sub_26F19C+120 BL .memcpy Up p sub_26F690+A8 BL .memcpy Up p sub_272F94+34 BL .memcpy Up p sub_276DC0+28 BL .memcpy Up p sub_279888+210 BL .memcpy Up p sub_27BAD8+10 BL .memcpy Up p sub_292E4C+88 BL .memcpy Up p sub_2948B0+34 BL

__int64 __fastcall sub_5091C0(int *a1, const char *a2, unsigned int a3)
{
  int v6; // w0
  char *v7; // x22
  int v8; // w0
  int v9; // w0
  int v10; // w8
  __int64 v11; // x0
  unsigned int v12; // w20
  unsigned int v13; // w8
  socklen_t v14; // w2
  struct sockaddr *p_addr; // x1
  __int64 v17; // [xsp+0h] [xbp-60h] BYREF
  _QWORD v18[2]; // [xsp+8h] [xbp-58h] BYREF
  int v19; // [xsp+18h] [xbp-48h]
  struct sockaddr addr; // [xsp+20h] [xbp-40h] BYREF
  struct timeval tv[2]; // [xsp+30h] [xbp-30h] BYREF
  __int128 v22; // [xsp+40h] [xbp-20h]
  unsigned int *v23; // [xsp+50h] [xbp-10h]

  v23 = (unsigned int *)(a1 + 24);
  gettimeofday(tv, 0LL);
  v6 = *a1;
  v22 = *(_OWORD *)&tv[0].tv_sec;
  if ( (v6 & 0x80000000) == 0 )
  {
    ((void (*)(void))sub_4F1748)();
    *a1 = -1;
  }
  v7 = strchr(a2, 58);
  if ( v7 )
    v8 = 10;
  else
    v8 = 2;
  v9 = socket(v8, 1, 6);
  *a1 = v9;
  if ( (v9 & 0x80000000) == 0 )
  {
    v10 = sub_508F38();
    v11 = (unsigned int)*a1;
    if ( v10 )
    {
      sub_4F1748(v11);
LABEL_20:
      v12 = -1;
      *a1 = -1;
      goto LABEL_21;
    }
    if ( (unsigned int)sub_508F40(v11) )
    {
      sub_4F1748((unsigned int)*a1);
      goto LABEL_20;
    }
    *(_QWORD *)&addr.sa_family = 0LL;
    *(_QWORD *)&addr.sa_data[6] = 0LL;
    v13 = bswap32(a3) >> 16;
    v17 = 0LL;
    v18[0] = 0LL;
    v19 = 0;
    v18[1] = 0LL;
    if ( v7 )
    {
      WORD1(v17) = v13;
      LOWORD(v17) = 10;
      if ( inet_pton(10, a2, v18) < 1 )
        goto LABEL_19;
      v14 = 28;
      p_addr = (struct sockaddr *)&v17;
    }
    else
    {
      *(_WORD *)addr.sa_data = v13;
      addr.sa_family = 2;
      if ( inet_pton(2, a2, &addr.sa_data[2]) < 1 )
        goto LABEL_19;
      v14 = 16;
      p_addr = &addr;
    }
    if ( (sub_4F16F4(*a1, p_addr, v14) & 0x80000000) == 0 )
    {
      sub_4DEF74(a1 + 4, (unsigned int)*a1);
      sub_4DEF80(a1 + 4, a1[20], a1[21], *((unsigned __int8 *)a1 + 88));
      v12 = 0;
      goto LABEL_21;
    }
LABEL_19:
    sub_4F1748((unsigned int)*a1);
    goto LABEL_20;
  }
  v12 = -1;
LABEL_21:
  sub_5093D4(tv);
  return v12;
}

_DWORD *__fastcall sub_508ED0(int a1, int a2, int a3)
{
  _DWORD *v6; // x19
  int v7; // w0

  v6 = malloc(4u);
  if ( v6 )
  {
    v7 = socket(a1, a2, a3);
    if ( (v7 & 0x80000000) != 0 )
    {
      free(v6);
      return 0LL;
    }
    else
    {
      *v6 = v7;
    }
  }
  return v6;
}

oid sub_259F98()
{
  int v0; // w8
  char v1[60]; // [xsp+22Ch] [xbp-54h] BYREF
  int v2; // [xsp+268h] [xbp-18h]
  int v3; // [xsp+26Ch] [xbp-14h]

  sub_25B464(&unk_A31E5, 10LL, v1);
  if ( socket(2, 2, 17) >= 0 )
    v0 = 14;
  else
    v0 = 16;
  v2 = 780668931;
  v3 = 780668941;
  __asm { BR              X8 }
}

ALL SRC - Telegram 频道 @src_captain 的统计与分析