diff --git a/handoff/NOTES_LEVEL.md b/handoff/NOTES_LEVEL.md index dff1b93..4b70188 100644 --- a/handoff/NOTES_LEVEL.md +++ b/handoff/NOTES_LEVEL.md @@ -2388,3 +2388,27 @@ t_{-24,-12,0,+24}.rpp (тон@1000, бин 85): scr85 = −1.0071 / −0.2276 / фазы (attack/стационар) или в t_* конфигах другая полоса. Данные в логе прогона; повторить с контролем стабильности (несколько последних фаз подряд равны). Скрипты qseries.py/amseries.py закоммичены. + +## ============ UPDATE 2026-08-23k (23h): ОХОТА ЗА ПОТРЕБИТЕЛЕМ КЕРНЕЛА ============ +1. Xref-скан disp32 0x540668 по всему коду: вне 52bxxx только ИНИТ + (52ed36 lea→resize, 35b71 store, 361de/f читатель+запись в 536xxx-билдере + кривых). Прямых чтений ДАННЫХ FIR в рантайме не видно ⇒ потребитель берёт + слот из таблицы указателей по индексу ЛИБО существует вторая копия цепи. +2. bp на выходе FIR-цикла (52b8bb) в render-окне: 0 попаданий (как и вход + 529fe0) при том что кернель появляется ⇒ **в рендере работает ДРУГОЙ код** + (дублированная инстанциация цепи; модуль 480 МБ). fnall.py: finder заменён + на проверенный maps-вариант, FN_STAB управляет стабилизацией. +3. fnsample.py — активный RIP-сэмплер (PTRACE_INTERRUPT цикл): 10.6к сэмплов, + 2375 в модуле. Горячее: 0x180b0c3e0 (MSVC 0xCC stack-fill, НЕ DSP), + кластеры 0x180bcxxxx/bdxxxx (хелперы); в ядре замечены 0x180534580 и + 0x18052e1c0 (рядом с ramp-in 52e260!) — но только в части прогонов + (срабатывают на param-фазе, не в стационаре рендера). +4. reaper.ini: alsa null не оживил realtime (закрыто). Yabridge: сотни мёртвых + сокет-директорий /run/user/1000/yabridge-* от kill -9 ломали спавн — + чистить rm -rf перед серией (грабли зафиксированы). +### NEXT (продолжение) +1. fnsample с окном НА param-фазе (t≈1.3–1.6 c после host-spawn) и фильтром + ядра 0x180520000-0x180560000 → поймать дубликат цепи в момент построения. +2. Проверить 0x18052e1c0/0x180534580 дизасмом (уже лежат окна? нет — снять). +3. После опознания дубля: bp на его выход → [rsp]=адрес применения → декод + масштаба 1.805. diff --git a/handoff/nls_dasm/cons_52ec00.dis b/handoff/nls_dasm/cons_52ec00.dis new file mode 100644 index 0000000..1ccde1b --- /dev/null +++ b/handoff/nls_dasm/cons_52ec00.dis @@ -0,0 +1,383 @@ +; cons_52ec00 0x18052eb00-0x18052f100 + +/tmp/slice.bin: file format binary + + +Disassembly of section .data: + +000000018052eb00 <.data>: + 18052eb00: 0f af c8 imul %eax,%ecx + 18052eb03: 8b 05 f7 cb 0f 02 mov 0x20fcbf7(%rip),%eax # 0x18262b700 + 18052eb09: 44 0f af e0 imul %eax,%r12d + 18052eb0d: 8b 86 e0 04 24 00 mov 0x2404e0(%rsi),%eax + 18052eb13: 05 e2 2c dc 06 add $0x6dc2ce2,%eax + 18052eb18: 44 2b e1 sub %ecx,%r12d + 18052eb1b: 25 7f 00 00 80 and $0x8000007f,%eax + 18052eb20: 7d 07 jge 0x18052eb29 + 18052eb22: ff c8 dec %eax + 18052eb24: 83 c8 80 or $0xffffff80,%eax + 18052eb27: ff c0 inc %eax + 18052eb29: 89 86 e0 04 24 00 mov %eax,0x2404e0(%rsi) + 18052eb2f: 48 63 c8 movslq %eax,%rcx + 18052eb32: 48 8b 86 b0 08 54 00 mov 0x5408b0(%rsi),%rax + 18052eb39: f3 0f 10 04 88 movss (%rax,%rcx,4),%xmm0 + 18052eb3e: 8b 05 c0 cb 0f 02 mov 0x20fcbc0(%rip),%eax # 0x18262b704 + 18052eb44: 66 0f 6e d0 movd %eax,%xmm2 + 18052eb48: 8b 86 e0 04 24 00 mov 0x2404e0(%rsi),%eax + 18052eb4e: ff c0 inc %eax + 18052eb50: 48 63 c8 movslq %eax,%rcx + 18052eb53: 48 8b 86 b0 08 54 00 mov 0x5408b0(%rsi),%rax + 18052eb5a: 0f 5b d2 cvtdq2ps %xmm2,%xmm2 + 18052eb5d: f3 0f 59 d0 mulss %xmm0,%xmm2 + 18052eb61: f3 0f 10 04 88 movss (%rax,%rcx,4),%xmm0 + 18052eb66: 8b 05 5c ca 0f 02 mov 0x20fca5c(%rip),%eax # 0x18262b5c8 + 18052eb6c: 66 0f 6e c8 movd %eax,%xmm1 + 18052eb70: 8b 05 8a cb 0f 02 mov 0x20fcb8a(%rip),%eax # 0x18262b700 + 18052eb76: 0f 5b c9 cvtdq2ps %xmm1,%xmm1 + 18052eb79: f3 0f 59 c8 mulss %xmm0,%xmm1 + 18052eb7d: f3 0f 59 ca mulss %xmm2,%xmm1 + 18052eb81: f3 0f 58 cd addss %xmm5,%xmm1 + 18052eb85: f3 0f 2c d9 cvttss2si %xmm1,%ebx + 18052eb89: 0f af d8 imul %eax,%ebx + 18052eb8c: 8b 86 e0 04 24 00 mov 0x2404e0(%rsi),%eax + 18052eb92: 05 9a f2 4b 00 add $0x4bf29a,%eax + 18052eb97: 89 9c 24 f8 00 00 00 mov %ebx,0xf8(%rsp) + 18052eb9e: 25 7f 00 00 80 and $0x8000007f,%eax + 18052eba3: 7d 07 jge 0x18052ebac + 18052eba5: ff c8 dec %eax + 18052eba7: 83 c8 80 or $0xffffff80,%eax + 18052ebaa: ff c0 inc %eax + 18052ebac: 89 86 e0 04 24 00 mov %eax,0x2404e0(%rsi) + 18052ebb2: 48 63 c8 movslq %eax,%rcx + 18052ebb5: 48 8b 86 b0 08 54 00 mov 0x5408b0(%rsi),%rax + 18052ebbc: f3 0f 10 04 88 movss (%rax,%rcx,4),%xmm0 + 18052ebc1: 8b 05 3d cb 0f 02 mov 0x20fcb3d(%rip),%eax # 0x18262b704 + 18052ebc7: 66 0f 6e d0 movd %eax,%xmm2 + 18052ebcb: 8b 86 e0 04 24 00 mov 0x2404e0(%rsi),%eax + 18052ebd1: ff c0 inc %eax + 18052ebd3: 48 63 c8 movslq %eax,%rcx + 18052ebd6: 48 8b 86 b0 08 54 00 mov 0x5408b0(%rsi),%rax + 18052ebdd: 0f 5b d2 cvtdq2ps %xmm2,%xmm2 + 18052ebe0: f3 0f 59 d0 mulss %xmm0,%xmm2 + 18052ebe4: f3 0f 10 04 88 movss (%rax,%rcx,4),%xmm0 + 18052ebe9: 8b 05 d9 c9 0f 02 mov 0x20fc9d9(%rip),%eax # 0x18262b5c8 + 18052ebef: 66 0f 6e c8 movd %eax,%xmm1 + 18052ebf3: 8b 05 07 cb 0f 02 mov 0x20fcb07(%rip),%eax # 0x18262b700 + 18052ebf9: 0f 5b c9 cvtdq2ps %xmm1,%xmm1 + 18052ebfc: f3 0f 59 c8 mulss %xmm0,%xmm1 + 18052ec00: f3 0f 59 ca mulss %xmm2,%xmm1 + 18052ec04: f3 0f 58 cd addss %xmm5,%xmm1 + 18052ec08: f3 0f 2c c9 cvttss2si %xmm1,%ecx + 18052ec0c: 0f af c8 imul %eax,%ecx + 18052ec0f: 8b 86 e0 04 24 00 mov 0x2404e0(%rsi),%eax + 18052ec15: 05 94 62 cb 00 add $0xcb6294,%eax + 18052ec1a: 66 0f 6e f1 movd %ecx,%xmm6 + 18052ec1e: 0f 5b f6 cvtdq2ps %xmm6,%xmm6 + 18052ec21: 25 7f 00 00 80 and $0x8000007f,%eax + 18052ec26: 7d 07 jge 0x18052ec2f + 18052ec28: ff c8 dec %eax + 18052ec2a: 83 c8 80 or $0xffffff80,%eax + 18052ec2d: ff c0 inc %eax + 18052ec2f: 89 86 e0 04 24 00 mov %eax,0x2404e0(%rsi) + 18052ec35: 48 63 c8 movslq %eax,%rcx + 18052ec38: 48 8b 86 b0 08 54 00 mov 0x5408b0(%rsi),%rax + 18052ec3f: f3 0f 10 04 88 movss (%rax,%rcx,4),%xmm0 + 18052ec44: 8b 05 ba ca 0f 02 mov 0x20fcaba(%rip),%eax # 0x18262b704 + 18052ec4a: 66 0f 6e e0 movd %eax,%xmm4 + 18052ec4e: 8b 86 e0 04 24 00 mov 0x2404e0(%rsi),%eax + 18052ec54: ff c0 inc %eax + 18052ec56: 48 63 c8 movslq %eax,%rcx + 18052ec59: 48 8b 86 b0 08 54 00 mov 0x5408b0(%rsi),%rax + 18052ec60: 0f 5b e4 cvtdq2ps %xmm4,%xmm4 + 18052ec63: f3 0f 59 e0 mulss %xmm0,%xmm4 + 18052ec67: f3 0f 10 04 88 movss (%rax,%rcx,4),%xmm0 + 18052ec6c: 8b 05 56 c9 0f 02 mov 0x20fc956(%rip),%eax # 0x18262b5c8 + 18052ec72: 66 0f 6e d8 movd %eax,%xmm3 + 18052ec76: 8b 86 e0 04 24 00 mov 0x2404e0(%rsi),%eax + 18052ec7c: 0f 5b db cvtdq2ps %xmm3,%xmm3 + 18052ec7f: 05 e0 b5 10 00 add $0x10b5e0,%eax + 18052ec84: f3 0f 59 d8 mulss %xmm0,%xmm3 + 18052ec88: 25 7f 00 00 80 and $0x8000007f,%eax + 18052ec8d: 7d 07 jge 0x18052ec96 + 18052ec8f: ff c8 dec %eax + 18052ec91: 83 c8 80 or $0xffffff80,%eax + 18052ec94: ff c0 inc %eax + 18052ec96: f3 0f 10 3d 06 52 f9 movss 0x1f95206(%rip),%xmm7 # 0x1824c3ea4 + 18052ec9d: 01 + 18052ec9e: 33 ff xor %edi,%edi + 18052eca0: 89 86 e0 04 24 00 mov %eax,0x2404e0(%rsi) + 18052eca6: 48 63 c8 movslq %eax,%rcx + 18052eca9: 48 8b 86 b0 08 54 00 mov 0x5408b0(%rsi),%rax + 18052ecb0: f3 0f 59 dc mulss %xmm4,%xmm3 + 18052ecb4: f3 0f 10 04 88 movss (%rax,%rcx,4),%xmm0 + 18052ecb9: 8b 05 45 ca 0f 02 mov 0x20fca45(%rip),%eax # 0x18262b704 + 18052ecbf: f3 0f 58 dd addss %xmm5,%xmm3 + 18052ecc3: 66 0f 6e d0 movd %eax,%xmm2 + 18052ecc7: 8b 86 e0 04 24 00 mov 0x2404e0(%rsi),%eax + 18052eccd: ff c0 inc %eax + 18052eccf: 48 63 c8 movslq %eax,%rcx + 18052ecd2: 48 8b 86 b0 08 54 00 mov 0x5408b0(%rsi),%rax + 18052ecd9: 0f 5b d2 cvtdq2ps %xmm2,%xmm2 + 18052ecdc: f3 44 0f 2c eb cvttss2si %xmm3,%r13d + 18052ece1: f3 0f 59 d0 mulss %xmm0,%xmm2 + 18052ece5: f3 0f 10 04 88 movss (%rax,%rcx,4),%xmm0 + 18052ecea: 8b 05 d8 c8 0f 02 mov 0x20fc8d8(%rip),%eax # 0x18262b5c8 + 18052ecf0: 66 0f 6e c8 movd %eax,%xmm1 + 18052ecf4: 8b 05 06 ca 0f 02 mov 0x20fca06(%rip),%eax # 0x18262b700 + 18052ecfa: 0f 5b c9 cvtdq2ps %xmm1,%xmm1 + 18052ecfd: f3 0f 59 c8 mulss %xmm0,%xmm1 + 18052ed01: f3 0f 59 ca mulss %xmm2,%xmm1 + 18052ed05: f3 0f 58 cd addss %xmm5,%xmm1 + 18052ed09: f3 0f 2c c9 cvttss2si %xmm1,%ecx + 18052ed0d: 0f af c8 imul %eax,%ecx + 18052ed10: 8b 05 ea c9 0f 02 mov 0x20fc9ea(%rip),%eax # 0x18262b700 + 18052ed16: 44 0f af e8 imul %eax,%r13d + 18052ed1a: 44 03 e9 add %ecx,%r13d + 18052ed1d: 84 d2 test %dl,%dl + 18052ed1f: 0f 85 95 03 00 00 jne 0x18052f0ba + 18052ed25: 48 8b ce mov %rsi,%rcx + 18052ed28: e8 d3 e0 ff ff call 0x18052ce00 + 18052ed2d: 8b 86 a0 01 00 00 mov 0x1a0(%rsi),%eax + 18052ed33: 48 8d 8e 68 06 54 00 lea 0x540668(%rsi),%rcx + 18052ed3a: 0f af c3 imul %ebx,%eax + 18052ed3d: 0f 57 d2 xorps %xmm2,%xmm2 + 18052ed40: c1 e0 03 shl $0x3,%eax + 18052ed43: 89 86 68 08 54 00 mov %eax,0x540868(%rsi) + 18052ed49: 99 cltd + 18052ed4a: 2b c2 sub %edx,%eax + 18052ed4c: d1 f8 sar $1,%eax + 18052ed4e: 8d 14 18 lea (%rax,%rbx,1),%edx + 18052ed51: 89 96 6c 08 54 00 mov %edx,0x54086c(%rsi) + 18052ed57: 03 d2 add %edx,%edx + 18052ed59: e8 32 f4 ff ff call 0x18052e190 + 18052ed5e: 8b 96 6c 08 54 00 mov 0x54086c(%rsi),%edx + 18052ed64: 48 8d 8e 98 06 54 00 lea 0x540698(%rsi),%rcx + 18052ed6b: 0f 57 d2 xorps %xmm2,%xmm2 + 18052ed6e: e8 1d f4 ff ff call 0x18052e190 + 18052ed73: 8b d7 mov %edi,%edx + 18052ed75: 39 be a0 06 54 00 cmp %edi,0x5406a0(%rsi) + 18052ed7b: 7e 1e jle 0x18052ed9b + 18052ed7d: 8b cf mov %edi,%ecx + 18052ed7f: 90 nop + 18052ed80: 48 8b 86 98 06 54 00 mov 0x540698(%rsi),%rax + 18052ed87: 48 8d 49 04 lea 0x4(%rcx),%rcx + 18052ed8b: ff c2 inc %edx + 18052ed8d: f3 0f 11 74 01 fc movss %xmm6,-0x4(%rcx,%rax,1) + 18052ed93: 3b 96 a0 06 54 00 cmp 0x5406a0(%rsi),%edx + 18052ed99: 7c e5 jl 0x18052ed80 + 18052ed9b: 8b 96 6c 08 54 00 mov 0x54086c(%rsi),%edx + 18052eda1: 48 8d 8e a8 06 54 00 lea 0x5406a8(%rsi),%rcx + 18052eda8: 0f 57 d2 xorps %xmm2,%xmm2 + 18052edab: e8 e0 f3 ff ff call 0x18052e190 + 18052edb0: 8b 96 6c 08 54 00 mov 0x54086c(%rsi),%edx + 18052edb6: 48 8d 8e b8 06 54 00 lea 0x5406b8(%rsi),%rcx + 18052edbd: 0f 57 d2 xorps %xmm2,%xmm2 + 18052edc0: e8 cb f3 ff ff call 0x18052e190 + 18052edc5: 8b 96 6c 08 54 00 mov 0x54086c(%rsi),%edx + 18052edcb: 48 8d 8e c8 06 54 00 lea 0x5406c8(%rsi),%rcx + 18052edd2: 0f 57 d2 xorps %xmm2,%xmm2 + 18052edd5: e8 b6 f3 ff ff call 0x18052e190 + 18052edda: 8b 96 6c 08 54 00 mov 0x54086c(%rsi),%edx + 18052ede0: 48 8d 8e d8 06 54 00 lea 0x5406d8(%rsi),%rcx + 18052ede7: 0f 57 d2 xorps %xmm2,%xmm2 + 18052edea: e8 a1 f3 ff ff call 0x18052e190 + 18052edef: 8b 96 6c 08 54 00 mov 0x54086c(%rsi),%edx + 18052edf5: 48 8d 8e e8 06 54 00 lea 0x5406e8(%rsi),%rcx + 18052edfc: 0f 57 d2 xorps %xmm2,%xmm2 + 18052edff: e8 8c f3 ff ff call 0x18052e190 + 18052ee04: 45 8b fc mov %r12d,%r15d + 18052ee07: 44 3b 66 30 cmp 0x30(%rsi),%r12d + 18052ee0b: 0f 8d ee 01 00 00 jge 0x18052efff + 18052ee11: 45 8b f5 mov %r13d,%r14d + 18052ee14: 49 63 dc movslq %r12d,%rbx + 18052ee17: 45 0f af f5 imul %r13d,%r14d + 18052ee1b: 48 81 c3 73 40 05 00 add $0x54073,%rbx + 18052ee22: 48 c1 e3 04 shl $0x4,%rbx + 18052ee26: 41 c1 e6 0e shl $0xe,%r14d + 18052ee2a: 48 03 de add %rsi,%rbx + 18052ee2d: 0f 1f 00 nopl (%rax) + 18052ee30: 8b ae 6c 08 54 00 mov 0x54086c(%rsi),%ebp + 18052ee36: 8b 83 50 ff ff ff mov -0xb0(%rbx),%eax + 18052ee3c: 3b c5 cmp %ebp,%eax + 18052ee3e: 74 3e je 0x18052ee7e + 18052ee40: 85 c0 test %eax,%eax + 18052ee42: 7e 11 jle 0x18052ee55 + 18052ee44: 48 8b 8b 48 ff ff ff mov -0xb8(%rbx),%rcx + 18052ee4b: 48 85 c9 test %rcx,%rcx + 18052ee4e: 74 05 je 0x18052ee55 + 18052ee50: e8 6b 22 ad ff call 0x1800010c0 + 18052ee55: 85 ed test %ebp,%ebp + 18052ee57: 48 89 bb 48 ff ff ff mov %rdi,-0xb8(%rbx) + 18052ee5e: 0f 48 ef cmovs %edi,%ebp + 18052ee61: 89 ab 50 ff ff ff mov %ebp,-0xb0(%rbx) + 18052ee67: 85 ed test %ebp,%ebp + 18052ee69: 74 3e je 0x18052eea9 + 18052ee6b: 8d 0c ad 00 00 00 00 lea 0x0(,%rbp,4),%ecx + 18052ee72: e8 09 22 ad ff call 0x180001080 + 18052ee77: 48 89 83 48 ff ff ff mov %rax,-0xb8(%rbx) + 18052ee7e: 8b d7 mov %edi,%edx + 18052ee80: 39 bb 50 ff ff ff cmp %edi,-0xb0(%rbx) + 18052ee86: 7e 21 jle 0x18052eea9 + 18052ee88: 48 8b cf mov %rdi,%rcx + 18052ee8b: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) + 18052ee90: 48 8b 83 48 ff ff ff mov -0xb8(%rbx),%rax + 18052ee97: 48 8d 49 04 lea 0x4(%rcx),%rcx + 18052ee9b: ff c2 inc %edx + 18052ee9d: 89 7c 01 fc mov %edi,-0x4(%rcx,%rax,1) + 18052eea1: 3b 93 50 ff ff ff cmp -0xb0(%rbx),%edx + 18052eea7: 7c e7 jl 0x18052ee90 + 18052eea9: 8b 03 mov (%rbx),%eax + 18052eeab: 41 3b c6 cmp %r14d,%eax + 18052eeae: 74 35 je 0x18052eee5 + 18052eeb0: 85 c0 test %eax,%eax + 18052eeb2: 7e 0e jle 0x18052eec2 + 18052eeb4: 48 8b 4b f8 mov -0x8(%rbx),%rcx + 18052eeb8: 48 85 c9 test %rcx,%rcx + 18052eebb: 74 05 je 0x18052eec2 + 18052eebd: e8 fe 21 ad ff call 0x1800010c0 + 18052eec2: 45 85 f6 test %r14d,%r14d + 18052eec5: 48 89 7b f8 mov %rdi,-0x8(%rbx) + 18052eec9: 41 8b ce mov %r14d,%ecx + 18052eecc: 0f 48 cf cmovs %edi,%ecx + 18052eecf: 89 0b mov %ecx,(%rbx) + 18052eed1: 85 c9 test %ecx,%ecx + 18052eed3: 74 31 je 0x18052ef06 + 18052eed5: 8d 0c 8d 00 00 00 00 lea 0x0(,%rcx,4),%ecx + 18052eedc: e8 9f 21 ad ff call 0x180001080 + 18052eee1: 48 89 43 f8 mov %rax,-0x8(%rbx) + 18052eee5: 8b d7 mov %edi,%edx + 18052eee7: 39 3b cmp %edi,(%rbx) + 18052eee9: 7e 1b jle 0x18052ef06 + 18052eeeb: 48 8b cf mov %rdi,%rcx + 18052eeee: 66 90 xchg %ax,%ax + 18052eef0: 48 8b 43 f8 mov -0x8(%rbx),%rax + 18052eef4: 48 8d 49 04 lea 0x4(%rcx),%rcx + 18052eef8: ff c2 inc %edx + 18052eefa: c7 44 01 fc 00 00 80 movl $0x3f800000,-0x4(%rcx,%rax,1) + 18052ef01: 3f + 18052ef02: 3b 13 cmp (%rbx),%edx + 18052ef04: 7c ea jl 0x18052eef0 + 18052ef06: 8b ae 6c 08 54 00 mov 0x54086c(%rsi),%ebp + 18052ef0c: 8b 83 80 00 00 00 mov 0x80(%rbx),%eax + 18052ef12: 3b c5 cmp %ebp,%eax + 18052ef14: 74 35 je 0x18052ef4b + 18052ef16: 85 c0 test %eax,%eax + 18052ef18: 7e 0e jle 0x18052ef28 + 18052ef1a: 48 8b 4b 78 mov 0x78(%rbx),%rcx + 18052ef1e: 48 85 c9 test %rcx,%rcx + 18052ef21: 74 05 je 0x18052ef28 + 18052ef23: e8 98 21 ad ff call 0x1800010c0 + 18052ef28: 85 ed test %ebp,%ebp + 18052ef2a: 48 89 7b 78 mov %rdi,0x78(%rbx) + 18052ef2e: 0f 48 ef cmovs %edi,%ebp + 18052ef31: 89 ab 80 00 00 00 mov %ebp,0x80(%rbx) + 18052ef37: 85 ed test %ebp,%ebp + 18052ef39: 74 3b je 0x18052ef76 + 18052ef3b: 8d 0c ad 00 00 00 00 lea 0x0(,%rbp,4),%ecx + 18052ef42: e8 39 21 ad ff call 0x180001080 + 18052ef47: 48 89 43 78 mov %rax,0x78(%rbx) + 18052ef4b: 8b d7 mov %edi,%edx + 18052ef4d: 39 bb 80 00 00 00 cmp %edi,0x80(%rbx) + 18052ef53: 7e 21 jle 0x18052ef76 + 18052ef55: 48 8b cf mov %rdi,%rcx + 18052ef58: 0f 1f 84 00 00 00 00 nopl 0x0(%rax,%rax,1) + 18052ef5f: 00 + 18052ef60: 48 8b 43 78 mov 0x78(%rbx),%rax + 18052ef64: 48 8d 49 04 lea 0x4(%rcx),%rcx + 18052ef68: ff c2 inc %edx + 18052ef6a: 89 7c 01 fc mov %edi,-0x4(%rcx,%rax,1) + 18052ef6e: 3b 93 80 00 00 00 cmp 0x80(%rbx),%edx + 18052ef74: 7c ea jl 0x18052ef60 + 18052ef76: 8b ae 6c 08 54 00 mov 0x54086c(%rsi),%ebp + 18052ef7c: 8b 83 a0 00 00 00 mov 0xa0(%rbx),%eax + 18052ef82: 3b c5 cmp %ebp,%eax + 18052ef84: 74 3e je 0x18052efc4 + 18052ef86: 85 c0 test %eax,%eax + 18052ef88: 7e 11 jle 0x18052ef9b + 18052ef8a: 48 8b 8b 98 00 00 00 mov 0x98(%rbx),%rcx + 18052ef91: 48 85 c9 test %rcx,%rcx + 18052ef94: 74 05 je 0x18052ef9b + 18052ef96: e8 25 21 ad ff call 0x1800010c0 + 18052ef9b: 85 ed test %ebp,%ebp + 18052ef9d: 48 89 bb 98 00 00 00 mov %rdi,0x98(%rbx) + 18052efa4: 0f 48 ef cmovs %edi,%ebp + 18052efa7: 89 ab a0 00 00 00 mov %ebp,0xa0(%rbx) + 18052efad: 85 ed test %ebp,%ebp + 18052efaf: 74 3d je 0x18052efee + 18052efb1: 8d 0c ad 00 00 00 00 lea 0x0(,%rbp,4),%ecx + 18052efb8: e8 c3 20 ad ff call 0x180001080 + 18052efbd: 48 89 83 98 00 00 00 mov %rax,0x98(%rbx) + 18052efc4: 8b d7 mov %edi,%edx + 18052efc6: 39 bb a0 00 00 00 cmp %edi,0xa0(%rbx) + 18052efcc: 7e 20 jle 0x18052efee + 18052efce: 48 8b cf mov %rdi,%rcx + 18052efd1: 48 8b 83 98 00 00 00 mov 0x98(%rbx),%rax + 18052efd8: 48 8d 49 04 lea 0x4(%rcx),%rcx + 18052efdc: ff c2 inc %edx + 18052efde: c7 44 01 fc 00 00 80 movl $0x3f800000,-0x4(%rcx,%rax,1) + 18052efe5: 3f + 18052efe6: 3b 93 a0 00 00 00 cmp 0xa0(%rbx),%edx + 18052efec: 7c e3 jl 0x18052efd1 + 18052efee: 41 ff c7 inc %r15d + 18052eff1: 48 83 c3 10 add $0x10,%rbx + 18052eff5: 44 3b 7e 30 cmp 0x30(%rsi),%r15d + 18052eff9: 0f 8c 31 fe ff ff jl 0x18052ee30 + 18052efff: 8b 96 68 08 54 00 mov 0x540868(%rsi),%edx + 18052f005: 48 8d 8e f8 06 54 00 lea 0x5406f8(%rsi),%rcx + 18052f00c: c1 e2 03 shl $0x3,%edx + 18052f00f: 0f 57 d2 xorps %xmm2,%xmm2 + 18052f012: e8 79 f1 ff ff call 0x18052e190 + 18052f017: 8b 96 68 08 54 00 mov 0x540868(%rsi),%edx + 18052f01d: 48 8d 8e 08 07 54 00 lea 0x540708(%rsi),%rcx + 18052f024: 41 0f af d5 imul %r13d,%edx + 18052f028: 0f 57 d2 xorps %xmm2,%xmm2 + 18052f02b: e8 60 f1 ff ff call 0x18052e190 + 18052f030: 8b 96 68 08 54 00 mov 0x540868(%rsi),%edx + 18052f036: 48 8d 8e 18 07 54 00 lea 0x540718(%rsi),%rcx + 18052f03d: 41 0f af d5 imul %r13d,%edx + 18052f041: 0f 57 d2 xorps %xmm2,%xmm2 + 18052f044: e8 47 f1 ff ff call 0x18052e190 + 18052f049: 8b 96 68 08 54 00 mov 0x540868(%rsi),%edx + 18052f04f: 48 8d 8e 98 07 54 00 lea 0x540798(%rsi),%rcx + 18052f056: 0f 57 d2 xorps %xmm2,%xmm2 + 18052f059: e8 32 f1 ff ff call 0x18052e190 + 18052f05e: 44 8b c7 mov %edi,%r8d + 18052f061: 39 be a0 07 54 00 cmp %edi,0x5407a0(%rsi) + 18052f067: 7e 26 jle 0x18052f08f + 18052f069: 48 8b cf mov %rdi,%rcx + 18052f06c: 0f 1f 40 00 nopl 0x0(%rax) + 18052f070: 48 8b 86 98 07 54 00 mov 0x540798(%rsi),%rax + 18052f077: 48 8d 49 04 lea 0x4(%rcx),%rcx + 18052f07b: 41 ff c0 inc %r8d + 18052f07e: c7 44 01 fc 00 00 80 movl $0x3f800000,-0x4(%rcx,%rax,1) + 18052f085: 3f + 18052f086: 44 3b 86 a0 07 54 00 cmp 0x5407a0(%rsi),%r8d + 18052f08d: 7c e1 jl 0x18052f070 + 18052f08f: 44 8b 86 68 08 54 00 mov 0x540868(%rsi),%r8d + 18052f096: 48 8d 8e 30 05 54 00 lea 0x540530(%rsi),%rcx + 18052f09d: 8b 56 64 mov 0x64(%rsi),%edx + 18052f0a0: e8 8b eb ff ff call 0x18052dc30 + 18052f0a5: 0f 28 df movaps %xmm7,%xmm3 + 18052f0a8: 48 8d 8e 30 05 54 00 lea 0x540530(%rsi),%rcx + 18052f0af: 45 8b c5 mov %r13d,%r8d + 18052f0b2: 41 8b d5 mov %r13d,%edx + 18052f0b5: e8 46 0d 00 00 call 0x18052fe00 + 18052f0ba: 45 8b cc mov %r12d,%r9d + 18052f0bd: 4c 8b ac 24 00 01 00 mov 0x100(%rsp),%r13 + 18052f0c4: 00 + 18052f0c5: 44 3b 66 30 cmp 0x30(%rsi),%r12d + 18052f0c9: 0f 8d a8 00 00 00 jge 0x18052f177 + 18052f0cf: 49 63 cc movslq %r12d,%rcx + 18052f0d2: 48 81 c1 7b 40 05 00 add $0x5407b,%rcx + 18052f0d9: 48 c1 e1 04 shl $0x4,%rcx + 18052f0dd: 48 03 ce add %rsi,%rcx + 18052f0e0: 44 8b c7 mov %edi,%r8d + 18052f0e3: 39 79 80 cmp %edi,-0x80(%rcx) + 18052f0e6: 7e 22 jle 0x18052f10a + 18052f0e8: 48 8b d7 mov %rdi,%rdx + 18052f0eb: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) + 18052f0f0: 48 8b 81 78 ff ff ff mov -0x88(%rcx),%rax + 18052f0f7: 48 8d 52 04 lea 0x4(%rdx),%rdx + 18052f0fb: 41 ff c0 inc %r8d + 18052f0fe: f3 repz + 18052f0ff: 0f .byte 0xf diff --git a/handoff/nls_dasm/cons_536100.dis b/handoff/nls_dasm/cons_536100.dis new file mode 100644 index 0000000..d1a791f --- /dev/null +++ b/handoff/nls_dasm/cons_536100.dis @@ -0,0 +1,275 @@ +; cons_536100 0x180536000-0x180536400 + +/tmp/slice.bin: file format binary + + +Disassembly of section .data: + +0000000180536000 <.data>: + 180536000: e8 bb b0 ac ff call 0x1800010c0 + 180536005: 90 nop + 180536006: 48 89 bb 58 07 54 00 mov %rdi,0x540758(%rbx) + 18053600d: 89 bb 60 07 54 00 mov %edi,0x540760(%rbx) + 180536013: 39 bb 50 07 54 00 cmp %edi,0x540750(%rbx) + 180536019: 7e 12 jle 0x18053602d + 18053601b: 48 8b 8b 48 07 54 00 mov 0x540748(%rbx),%rcx + 180536022: 48 85 c9 test %rcx,%rcx + 180536025: 74 06 je 0x18053602d + 180536027: e8 94 b0 ac ff call 0x1800010c0 + 18053602c: 90 nop + 18053602d: 48 89 bb 48 07 54 00 mov %rdi,0x540748(%rbx) + 180536034: 89 bb 50 07 54 00 mov %edi,0x540750(%rbx) + 18053603a: 48 8d 8b 28 07 54 00 lea 0x540728(%rbx),%rcx + 180536041: 4c 8d 0d d8 81 ff ff lea -0x7e28(%rip),%r9 # 0x18052e220 + 180536048: ba 10 00 00 00 mov $0x10,%edx + 18053604d: 44 8d 42 f2 lea -0xe(%rdx),%r8d + 180536051: e8 c6 b6 bf 00 call 0x18113171c + 180536056: 90 nop + 180536057: 39 bb 20 07 54 00 cmp %edi,0x540720(%rbx) + 18053605d: 7e 12 jle 0x180536071 + 18053605f: 48 8b 8b 18 07 54 00 mov 0x540718(%rbx),%rcx + 180536066: 48 85 c9 test %rcx,%rcx + 180536069: 74 06 je 0x180536071 + 18053606b: e8 50 b0 ac ff call 0x1800010c0 + 180536070: 90 nop + 180536071: 48 89 bb 18 07 54 00 mov %rdi,0x540718(%rbx) + 180536078: 89 bb 20 07 54 00 mov %edi,0x540720(%rbx) + 18053607e: 39 bb 10 07 54 00 cmp %edi,0x540710(%rbx) + 180536084: 7e 12 jle 0x180536098 + 180536086: 48 8b 8b 08 07 54 00 mov 0x540708(%rbx),%rcx + 18053608d: 48 85 c9 test %rcx,%rcx + 180536090: 74 06 je 0x180536098 + 180536092: e8 29 b0 ac ff call 0x1800010c0 + 180536097: 90 nop + 180536098: 48 89 bb 08 07 54 00 mov %rdi,0x540708(%rbx) + 18053609f: 89 bb 10 07 54 00 mov %edi,0x540710(%rbx) + 1805360a5: 39 bb 00 07 54 00 cmp %edi,0x540700(%rbx) + 1805360ab: 7e 12 jle 0x1805360bf + 1805360ad: 48 8b 8b f8 06 54 00 mov 0x5406f8(%rbx),%rcx + 1805360b4: 48 85 c9 test %rcx,%rcx + 1805360b7: 74 06 je 0x1805360bf + 1805360b9: e8 02 b0 ac ff call 0x1800010c0 + 1805360be: 90 nop + 1805360bf: 48 89 bb f8 06 54 00 mov %rdi,0x5406f8(%rbx) + 1805360c6: 89 bb 00 07 54 00 mov %edi,0x540700(%rbx) + 1805360cc: 39 bb f0 06 54 00 cmp %edi,0x5406f0(%rbx) + 1805360d2: 7e 12 jle 0x1805360e6 + 1805360d4: 48 8b 8b e8 06 54 00 mov 0x5406e8(%rbx),%rcx + 1805360db: 48 85 c9 test %rcx,%rcx + 1805360de: 74 06 je 0x1805360e6 + 1805360e0: e8 db af ac ff call 0x1800010c0 + 1805360e5: 90 nop + 1805360e6: 48 89 bb e8 06 54 00 mov %rdi,0x5406e8(%rbx) + 1805360ed: 89 bb f0 06 54 00 mov %edi,0x5406f0(%rbx) + 1805360f3: 39 bb e0 06 54 00 cmp %edi,0x5406e0(%rbx) + 1805360f9: 7e 12 jle 0x18053610d + 1805360fb: 48 8b 8b d8 06 54 00 mov 0x5406d8(%rbx),%rcx + 180536102: 48 85 c9 test %rcx,%rcx + 180536105: 74 06 je 0x18053610d + 180536107: e8 b4 af ac ff call 0x1800010c0 + 18053610c: 90 nop + 18053610d: 48 89 bb d8 06 54 00 mov %rdi,0x5406d8(%rbx) + 180536114: 89 bb e0 06 54 00 mov %edi,0x5406e0(%rbx) + 18053611a: 39 bb d0 06 54 00 cmp %edi,0x5406d0(%rbx) + 180536120: 7e 12 jle 0x180536134 + 180536122: 48 8b 8b c8 06 54 00 mov 0x5406c8(%rbx),%rcx + 180536129: 48 85 c9 test %rcx,%rcx + 18053612c: 74 06 je 0x180536134 + 18053612e: e8 8d af ac ff call 0x1800010c0 + 180536133: 90 nop + 180536134: 48 89 bb c8 06 54 00 mov %rdi,0x5406c8(%rbx) + 18053613b: 89 bb d0 06 54 00 mov %edi,0x5406d0(%rbx) + 180536141: 39 bb c0 06 54 00 cmp %edi,0x5406c0(%rbx) + 180536147: 7e 12 jle 0x18053615b + 180536149: 48 8b 8b b8 06 54 00 mov 0x5406b8(%rbx),%rcx + 180536150: 48 85 c9 test %rcx,%rcx + 180536153: 74 06 je 0x18053615b + 180536155: e8 66 af ac ff call 0x1800010c0 + 18053615a: 90 nop + 18053615b: 48 89 bb b8 06 54 00 mov %rdi,0x5406b8(%rbx) + 180536162: 89 bb c0 06 54 00 mov %edi,0x5406c0(%rbx) + 180536168: 39 bb b0 06 54 00 cmp %edi,0x5406b0(%rbx) + 18053616e: 7e 12 jle 0x180536182 + 180536170: 48 8b 8b a8 06 54 00 mov 0x5406a8(%rbx),%rcx + 180536177: 48 85 c9 test %rcx,%rcx + 18053617a: 74 06 je 0x180536182 + 18053617c: e8 3f af ac ff call 0x1800010c0 + 180536181: 90 nop + 180536182: 48 89 bb a8 06 54 00 mov %rdi,0x5406a8(%rbx) + 180536189: 89 bb b0 06 54 00 mov %edi,0x5406b0(%rbx) + 18053618f: 39 bb a0 06 54 00 cmp %edi,0x5406a0(%rbx) + 180536195: 7e 12 jle 0x1805361a9 + 180536197: 48 8b 8b 98 06 54 00 mov 0x540698(%rbx),%rcx + 18053619e: 48 85 c9 test %rcx,%rcx + 1805361a1: 74 06 je 0x1805361a9 + 1805361a3: e8 18 af ac ff call 0x1800010c0 + 1805361a8: 90 nop + 1805361a9: 48 89 bb 98 06 54 00 mov %rdi,0x540698(%rbx) + 1805361b0: 89 bb a0 06 54 00 mov %edi,0x5406a0(%rbx) + 1805361b6: 48 8d 8b 78 06 54 00 lea 0x540678(%rbx),%rcx + 1805361bd: 4c 8d 0d 5c 80 ff ff lea -0x7fa4(%rip),%r9 # 0x18052e220 + 1805361c4: ba 10 00 00 00 mov $0x10,%edx + 1805361c9: 44 8d 42 f2 lea -0xe(%rdx),%r8d + 1805361cd: e8 4a b5 bf 00 call 0x18113171c + 1805361d2: 90 nop + 1805361d3: 39 bb 70 06 54 00 cmp %edi,0x540670(%rbx) + 1805361d9: 7e 12 jle 0x1805361ed + 1805361db: 48 8b 8b 68 06 54 00 mov 0x540668(%rbx),%rcx + 1805361e2: 48 85 c9 test %rcx,%rcx + 1805361e5: 74 06 je 0x1805361ed + 1805361e7: e8 d4 ae ac ff call 0x1800010c0 + 1805361ec: 90 nop + 1805361ed: 48 89 bb 68 06 54 00 mov %rdi,0x540668(%rbx) + 1805361f4: 89 bb 70 06 54 00 mov %edi,0x540670(%rbx) + 1805361fa: 48 8d 8b 30 05 54 00 lea 0x540530(%rbx),%rcx + 180536201: e8 2a 7b ff ff call 0x18052dd30 + 180536206: 90 nop + 180536207: 89 bb cc 04 24 00 mov %edi,0x2404cc(%rbx) + 18053620d: 48 8b 8b c0 04 24 00 mov 0x2404c0(%rbx),%rcx + 180536214: ff 15 8e 50 67 01 call *0x167508e(%rip) # 0x181bab2a8 + 18053621a: 90 nop + 18053621b: 48 8d 8b d8 03 00 00 lea 0x3d8(%rbx),%rcx + 180536222: e8 59 70 ff ff call 0x18052d280 + 180536227: 90 nop + 180536228: 48 8d 05 49 5e f7 01 lea 0x1f75e49(%rip),%rax # 0x1824ac078 + 18053622f: 48 89 83 d0 03 00 00 mov %rax,0x3d0(%rbx) + 180536236: 48 8b cb mov %rbx,%rcx + 180536239: 48 8b 5c 24 40 mov 0x40(%rsp),%rbx + 18053623e: 48 83 c4 30 add $0x30,%rsp + 180536242: 5f pop %rdi + 180536243: e9 58 38 ff ff jmp 0x180529aa0 + 180536248: cc int3 + 180536249: cc int3 + 18053624a: cc int3 + 18053624b: cc int3 + 18053624c: cc int3 + 18053624d: cc int3 + 18053624e: cc int3 + 18053624f: cc int3 + 180536250: f2 0f 10 0d e8 de f8 movsd 0x1f8dee8(%rip),%xmm1 # 0x1824c4140 + 180536257: 01 + 180536258: 48 8d 81 10 00 08 00 lea 0x80010(%rcx),%rax + 18053625f: f2 0f 11 4c 24 08 movsd %xmm1,0x8(%rsp) + 180536265: ba 00 80 00 00 mov $0x8000,%edx + 18053626a: f2 0f 10 44 24 08 movsd 0x8(%rsp),%xmm0 + 180536270: 4c 8b c1 mov %rcx,%r8 + 180536273: c6 41 04 00 movb $0x0,0x4(%rcx) + 180536277: 48 c7 81 10 00 10 00 movq $0x0,0x100010(%rcx) + 18053627e: 00 00 00 00 + 180536282: 8b ca mov %edx,%ecx + 180536284: 66 0f c6 c0 00 shufpd $0x0,%xmm0,%xmm0 + 180536289: a8 0f test $0xf,%al + 18053628b: 75 13 jne 0x1805362a0 + 18053628d: 0f 1f 00 nopl (%rax) + 180536290: 0f 11 00 movups %xmm0,(%rax) + 180536293: 48 8d 40 10 lea 0x10(%rax),%rax + 180536297: 48 83 e9 01 sub $0x1,%rcx + 18053629b: 75 f3 jne 0x180536290 + 18053629d: eb 0e jmp 0x1805362ad + 18053629f: 90 nop + 1805362a0: 0f 11 00 movups %xmm0,(%rax) + 1805362a3: 48 8d 40 10 lea 0x10(%rax),%rax + 1805362a7: 48 83 e9 01 sub $0x1,%rcx + 1805362ab: 75 f3 jne 0x1805362a0 + 1805362ad: f2 0f 11 4c 24 08 movsd %xmm1,0x8(%rsp) + 1805362b3: 49 8d 40 10 lea 0x10(%r8),%rax + 1805362b7: f2 0f 10 44 24 08 movsd 0x8(%rsp),%xmm0 + 1805362bd: 66 0f c6 c0 00 shufpd $0x0,%xmm0,%xmm0 + 1805362c2: a8 0f test $0xf,%al + 1805362c4: 75 1b jne 0x1805362e1 + 1805362c6: 66 66 0f 1f 84 00 00 data16 nopw 0x0(%rax,%rax,1) + 1805362cd: 00 00 00 + 1805362d0: 0f 11 00 movups %xmm0,(%rax) + 1805362d3: 48 8d 40 10 lea 0x10(%rax),%rax + 1805362d7: 48 83 ea 01 sub $0x1,%rdx + 1805362db: 75 f3 jne 0x1805362d0 + 1805362dd: 49 8b c0 mov %r8,%rax + 1805362e0: c3 ret + 1805362e1: 0f 11 00 movups %xmm0,(%rax) + 1805362e4: 48 8d 40 10 lea 0x10(%rax),%rax + 1805362e8: 48 83 ea 01 sub $0x1,%rdx + 1805362ec: 75 f3 jne 0x1805362e1 + 1805362ee: 49 8b c0 mov %r8,%rax + 1805362f1: c3 ret + 1805362f2: cc int3 + 1805362f3: cc int3 + 1805362f4: cc int3 + 1805362f5: cc int3 + 1805362f6: cc int3 + 1805362f7: cc int3 + 1805362f8: cc int3 + 1805362f9: cc int3 + 1805362fa: cc int3 + 1805362fb: cc int3 + 1805362fc: cc int3 + 1805362fd: cc int3 + 1805362fe: cc int3 + 1805362ff: cc int3 + 180536300: 48 89 5c 24 08 mov %rbx,0x8(%rsp) + 180536305: 48 89 6c 24 18 mov %rbp,0x18(%rsp) + 18053630a: 48 89 74 24 20 mov %rsi,0x20(%rsp) + 18053630f: 48 89 54 24 10 mov %rdx,0x10(%rsp) + 180536314: 57 push %rdi + 180536315: 41 54 push %r12 + 180536317: 41 55 push %r13 + 180536319: 41 56 push %r14 + 18053631b: 41 57 push %r15 + 18053631d: 48 83 ec 50 sub $0x50,%rsp + 180536321: 48 63 bc 24 a0 00 00 movslq 0xa0(%rsp),%rdi + 180536328: 00 + 180536329: 48 8d 15 88 aa 11 02 lea 0x211aa88(%rip),%rdx # 0x182650db8 + 180536330: 4c 8b b4 24 b0 00 00 mov 0xb0(%rsp),%r14 + 180536337: 00 + 180536338: 49 8b e9 mov %r9,%rbp + 18053633b: 0f 29 74 24 40 movaps %xmm6,0x40(%rsp) + 180536340: 49 8b d8 mov %r8,%rbx + 180536343: 66 0f 6e b1 80 00 24 movd 0x240080(%rcx),%xmm6 + 18053634a: 00 + 18053634b: 8d 04 fd 00 00 00 00 lea 0x0(,%rdi,8),%eax + 180536352: 4c 63 d0 movslq %eax,%r10 + 180536355: 8d 04 3f lea (%rdi,%rdi,1),%eax + 180536358: 0f 5b f6 cvtdq2ps %xmm6,%xmm6 + 18053635b: 4f 8d 24 96 lea (%r14,%r10,4),%r12 + 18053635f: 4c 63 d0 movslq %eax,%r10 + 180536362: 4d 8d 3c bc lea (%r12,%rdi,4),%r15 + 180536366: 4c 89 a4 24 b0 00 00 mov %r12,0xb0(%rsp) + 18053636d: 00 + 18053636e: f3 0f 59 71 24 mulss 0x24(%rcx),%xmm6 + 180536373: 48 8d 0d 3e aa 11 02 lea 0x211aa3e(%rip),%rcx # 0x182650db8 + 18053637a: 4b 8d 34 97 lea (%r15,%r10,4),%rsi + 18053637e: 4e 8d 2c 96 lea (%rsi,%r10,4),%r13 + 180536382: ff 15 80 4c 67 01 call *0x1674c80(%rip) # 0x181bab008 + 180536388: f2 0f 10 0d b8 de f8 movsd 0x1f8deb8(%rip),%xmm1 # 0x1824c4248 + 18053638f: 01 + 180536390: 44 8b cf mov %edi,%r9d + 180536393: 0f 5a c6 cvtps2pd %xmm6,%xmm0 + 180536396: 85 c0 test %eax,%eax + 180536398: 48 8b d3 mov %rbx,%rdx + 18053639b: 49 8b cc mov %r12,%rcx + 18053639e: 0f 94 84 24 a8 00 00 sete 0xa8(%rsp) + 1805363a5: 00 + 1805363a6: f2 0f 5e c8 divsd %xmm0,%xmm1 + 1805363aa: 66 0f 5a d1 cvtpd2ps %xmm1,%xmm2 + 1805363ae: e8 4d 76 ff ff call 0x18052da00 + 1805363b3: 80 bd 10 08 00 00 00 cmpb $0x0,0x810(%rbp) + 1805363ba: 44 8b c7 mov %edi,%r8d + 1805363bd: 74 1a je 0x1805363d9 + 1805363bf: f3 0f 10 0d dd da f8 movss 0x1f8dadd(%rip),%xmm1 # 0x1824c3ea4 + 1805363c6: 01 + 1805363c7: 48 8b 8c 24 88 00 00 mov 0x88(%rsp),%rcx + 1805363ce: 00 + 1805363cf: e8 7c 77 ff ff call 0x18052db50 + 1805363d4: e9 88 01 00 00 jmp 0x180536561 + 1805363d9: f3 0f 10 35 c3 da f8 movss 0x1f8dac3(%rip),%xmm6 # 0x1824c3ea4 + 1805363e0: 01 + 1805363e1: 48 8b ce mov %rsi,%rcx + 1805363e4: 0f 28 ce movaps %xmm6,%xmm1 + 1805363e7: e8 64 77 ff ff call 0x18052db50 + 1805363ec: 44 8b c7 mov %edi,%r8d + 1805363ef: 0f 57 c9 xorps %xmm1,%xmm1 + 1805363f2: 49 8b cd mov %r13,%rcx + 1805363f5: e8 56 77 ff ff call 0x18052db50 + 1805363fa: 33 db xor %ebx,%ebx + 1805363fc: 39 .byte 0x39 + 1805363fd: 9d popf + 1805363fe: 14 08 adc $0x8,%al diff --git a/handoff/nls_dasm/hot_b0c3e0.dis b/handoff/nls_dasm/hot_b0c3e0.dis new file mode 100644 index 0000000..a539680 --- /dev/null +++ b/handoff/nls_dasm/hot_b0c3e0.dis @@ -0,0 +1,235 @@ + +/tmp/slice.bin: file format binary + + +Disassembly of section .data: + +0000000180b0c3a0 <.data>: + 180b0c3a0: 00 80 7d 07 ff c9 add %al,-0x3600f883(%rax) + 180b0c3a6: 83 c9 fe or $0xfffffffe,%ecx + 180b0c3a9: ff c1 inc %ecx + 180b0c3ab: 85 c9 test %ecx,%ecx + 180b0c3ad: 75 b2 jne 0x180b0c361 + 180b0c3af: ff 54 24 60 call *0x60(%rsp) + 180b0c3b3: 48 83 f8 01 cmp $0x1,%rax + 180b0c3b7: be 00 00 00 00 mov $0x0,%esi + 180b0c3bc: 76 2e jbe 0x180b0c3ec + 180b0c3be: 48 8d 84 24 c8 00 00 lea 0xc8(%rsp),%rax + 180b0c3c5: 00 + 180b0c3c6: 48 b9 cc cc cc cc cc movabs $0xcccccccccccccccc,%rcx + 180b0c3cd: cc cc cc + 180b0c3d0: 48 39 08 cmp %rcx,(%rax) + 180b0c3d3: 74 17 je 0x180b0c3ec + 180b0c3d5: 66 66 66 0f 1f 84 00 data16 data16 nopw 0x0(%rax,%rax,1) + 180b0c3dc: 00 00 00 00 + 180b0c3e0: 48 89 30 mov %rsi,(%rax) + 180b0c3e3: 48 8d 40 40 lea 0x40(%rax),%rax + 180b0c3e7: 48 39 08 cmp %rcx,(%rax) + 180b0c3ea: 75 f4 jne 0x180b0c3e0 + 180b0c3ec: 48 8d b4 24 c8 00 00 lea 0xc8(%rsp),%rsi + 180b0c3f3: 00 + 180b0c3f4: eb 03 jmp 0x180b0c3f9 + 180b0c3f6: 4c 8b ca mov %rdx,%r9 + 180b0c3f9: 41 53 push %r11 + 180b0c3fb: 41 56 push %r14 + 180b0c3fd: 4c 8d 1d 78 fa ff ff lea -0x588(%rip),%r11 # 0x180b0be7c + 180b0c404: 4d 8b f3 mov %r11,%r14 + 180b0c407: 49 81 c6 ae 06 00 00 add $0x6ae,%r14 + 180b0c40e: 48 8d 64 24 f0 lea -0x10(%rsp),%rsp + 180b0c413: 4d 03 cf add %r15,%r9 + 180b0c416: 4d 85 e0 test %r12,%r8 + 180b0c419: 49 3b d0 cmp %r8,%rdx + 180b0c41c: 4d 2b cf sub %r15,%r9 + 180b0c41f: 4c 89 74 24 08 mov %r14,0x8(%rsp) + 180b0c424: 48 f7 d2 not %rdx + 180b0c427: 48 8d 52 01 lea 0x1(%rdx),%rdx + 180b0c42b: 4c 3b e8 cmp %rax,%r13 + 180b0c42e: 4d 85 cf test %r9,%r15 + 180b0c431: 48 f7 d2 not %rdx + 180b0c434: 48 8d 52 01 lea 0x1(%rdx),%rdx + 180b0c438: 48 83 ec f8 sub $0xfffffffffffffff8,%rsp + 180b0c43c: 49 c7 c6 83 1f 00 00 mov $0x1f83,%r14 + 180b0c443: 4d 03 f3 add %r11,%r14 + 180b0c446: 41 56 push %r14 + 180b0c448: 49 c7 c6 3c 06 00 00 mov $0x63c,%r14 + 180b0c44f: 4d 03 f3 add %r11,%r14 + 180b0c452: 41 56 push %r14 + 180b0c454: 49 c7 c6 49 cc 01 00 mov $0x1cc49,%r14 + 180b0c45b: 4d 03 f3 add %r11,%r14 + 180b0c45e: 48 83 c4 e8 add $0xffffffffffffffe8,%rsp + 180b0c462: 49 81 c4 8e ee 39 13 add $0x1339ee8e,%r12 + 180b0c469: 48 a9 1d 6a 9f 2f test $0x2f9f6a1d,%rax + 180b0c46f: 49 f7 c2 89 fe 1a 73 test $0x731afe89,%r10 + 180b0c476: 49 81 ec 8e ee 39 13 sub $0x1339ee8e,%r12 + 180b0c47d: 4c 89 74 24 10 mov %r14,0x10(%rsp) + 180b0c482: 49 81 e9 b1 fe 6e 2c sub $0x2c6efeb1,%r9 + 180b0c489: 49 3b c1 cmp %r9,%rax + 180b0c48c: 49 f7 c4 a6 46 72 79 test $0x797246a6,%r12 + 180b0c493: 49 81 c1 b1 fe 6e 2c add $0x2c6efeb1,%r9 + 180b0c49a: 48 83 ec f0 sub $0xfffffffffffffff0,%rsp + 180b0c49e: 4d 85 ea test %r13,%r10 + 180b0c4a1: 49 c7 c6 3c 06 00 00 mov $0x63c,%r14 + 180b0c4a8: 4d 03 f3 add %r11,%r14 + 180b0c4ab: 48 8d 64 24 f8 lea -0x8(%rsp),%rsp + 180b0c4b0: 4d 2b cd sub %r13,%r9 + 180b0c4b3: eb 04 jmp 0x180b0c4b9 + 180b0c4b5: 32 04 24 xor (%rsp),%al + 180b0c4b8: c3 ret + 180b0c4b9: 4d 03 cd add %r13,%r9 + 180b0c4bc: 4c 89 34 24 mov %r14,(%rsp) + 180b0c4c0: 4d 8b f3 mov %r11,%r14 + 180b0c4c3: 49 81 c6 83 1f 00 00 add $0x1f83,%r14 + 180b0c4ca: 48 83 c4 e8 add $0xffffffffffffffe8,%rsp + 180b0c4ce: 4c 89 74 24 10 mov %r14,0x10(%rsp) + 180b0c4d3: 4d 2b d0 sub %r8,%r10 + 180b0c4d6: eb 08 jmp 0x180b0c4e0 + 180b0c4d8: 2b 04 24 sub (%rsp),%eax + 180b0c4db: 03 44 24 f8 add -0x8(%rsp),%eax + 180b0c4df: c3 ret + 180b0c4e0: 4d 03 d0 add %r8,%r10 + 180b0c4e3: 48 83 c4 10 add $0x10,%rsp + 180b0c4e7: 4d 8b f3 mov %r11,%r14 + 180b0c4ea: 49 81 c6 33 d0 ff ff add $0xffffffffffffd033,%r14 + 180b0c4f1: 41 56 push %r14 + 180b0c4f3: 49 c7 c6 5f 1f 00 00 mov $0x1f5f,%r14 + 180b0c4fa: 4d 03 f3 add %r11,%r14 + 180b0c4fd: 41 56 push %r14 + 180b0c4ff: 4d 8b f3 mov %r11,%r14 + 180b0c502: 49 81 c6 3c 06 00 00 add $0x63c,%r14 + 180b0c509: 41 ff e6 jmp *%r14 + 180b0c50c: 7c 16 jl 0x180b0c524 + 180b0c50e: 4c 2b fa sub %rdx,%r15 + 180b0c511: 48 81 fa bd da 55 14 cmp $0x1455dabd,%rdx + 180b0c518: 48 f7 c2 bf a9 c1 1f test $0x1fc1a9bf,%rdx + 180b0c51f: 4c 03 fa add %rdx,%r15 + 180b0c522: eb 06 jmp 0x180b0c52a + 180b0c524: eb 04 jmp 0x180b0c52a + 180b0c526: 02 24 24 add (%rsp),%ah + 180b0c529: c3 ret + 180b0c52a: 48 81 ea da 69 00 00 sub $0x69da,%rdx + 180b0c531: 41 5e pop %r14 + 180b0c533: 41 5b pop %r11 + 180b0c535: 8b 06 mov (%rsi),%eax + 180b0c537: 8d 48 01 lea 0x1(%rax),%ecx + 180b0c53a: 0f af c8 imul %eax,%ecx + 180b0c53d: 81 e1 01 00 00 80 and $0x80000001,%ecx + 180b0c543: 7d 07 jge 0x180b0c54c + 180b0c545: ff c9 dec %ecx + 180b0c547: 83 c9 fe or $0xfffffffe,%ecx + 180b0c54a: ff c1 inc %ecx + 180b0c54c: 85 c9 test %ecx,%ecx + 180b0c54e: 0f 85 a0 fe ff ff jne 0x180b0c3f4 + 180b0c554: 4d 3b f7 cmp %r15,%r14 + 180b0c557: 0f 84 a3 01 00 00 je 0x180b0c700 + 180b0c55d: 4b 8d 34 34 lea (%r12,%r14,1),%rsi + 180b0c561: 4d 03 fc add %r12,%r15 + 180b0c564: 49 f7 df neg %r15 + 180b0c567: 48 8d 9c 24 c8 00 00 lea 0xc8(%rsp),%rbx + 180b0c56e: 00 + 180b0c56f: 4c 8d 25 4a 5a b1 01 lea 0x1b15a4a(%rip),%r12 # 0x182621fc0 + 180b0c576: 66 66 0f 1f 84 00 00 data16 nopw 0x0(%rax,%rax,1) + 180b0c57d: 00 00 00 + 180b0c580: 4c 8b f6 mov %rsi,%r14 + 180b0c583: 48 85 ff test %rdi,%rdi + 180b0c586: 0f 84 a4 00 00 00 je 0x180b0c630 + 180b0c58c: 48 8b 17 mov (%rdi),%rdx + 180b0c58f: 48 85 d2 test %rdx,%rdx + 180b0c592: 0f 88 98 00 00 00 js 0x180b0c630 + 180b0c598: 48 b8 c0 1f 62 02 00 movabs $0x2621fc0,%rax + 180b0c59f: 00 00 00 + 180b0c5a2: 48 89 44 24 48 mov %rax,0x48(%rsp) + 180b0c5a7: 48 8b 44 24 48 mov 0x48(%rsp),%rax + 180b0c5ac: 4d 8b c4 mov %r12,%r8 + 180b0c5af: 4c 2b c0 sub %rax,%r8 + 180b0c5b2: 49 8d 40 08 lea 0x8(%r8),%rax + 180b0c5b6: 48 03 c2 add %rdx,%rax + 180b0c5b9: 48 3b c6 cmp %rsi,%rax + 180b0c5bc: 77 0e ja 0x180b0c5cc + 180b0c5be: 48 83 c7 08 add $0x8,%rdi + 180b0c5c2: 48 8b 17 mov (%rdi),%rdx + 180b0c5c5: 48 85 d2 test %rdx,%rdx + 180b0c5c8: 79 e8 jns 0x180b0c5b2 + 180b0c5ca: eb 64 jmp 0x180b0c630 + 180b0c5cc: 48 85 d2 test %rdx,%rdx + 180b0c5cf: 78 5f js 0x180b0c630 + 180b0c5d1: 49 8d 0c 10 lea (%r8,%rdx,1),%rcx + 180b0c5d5: 4c 8d 5e 04 lea 0x4(%rsi),%r11 + 180b0c5d9: 49 3b cb cmp %r11,%rcx + 180b0c5dc: 73 52 jae 0x180b0c630 + 180b0c5de: 4c 8b cf mov %rdi,%r9 + 180b0c5e1: 4c 8d b4 24 88 00 00 lea 0x88(%rsp),%r14 + 180b0c5e8: 00 + 180b0c5e9: 8b 06 mov (%rsi),%eax + 180b0c5eb: 89 84 24 88 00 00 00 mov %eax,0x88(%rsp) + 180b0c5f2: 4d 8b d0 mov %r8,%r10 + 180b0c5f5: 4c 2b d6 sub %rsi,%r10 + 180b0c5f8: 0f 1f 84 00 00 00 00 nopl 0x0(%rax,%rax,1) + 180b0c5ff: 00 + 180b0c600: 48 8b 09 mov (%rcx),%rcx + 180b0c603: 49 2b c8 sub %r8,%rcx + 180b0c606: 49 8d 04 12 lea (%r10,%rdx,1),%rax + 180b0c60a: 48 89 8c 04 88 00 00 mov %rcx,0x88(%rsp,%rax,1) + 180b0c611: 00 + 180b0c612: 4d 8d 49 08 lea 0x8(%r9),%r9 + 180b0c616: 49 8b 11 mov (%r9),%rdx + 180b0c619: 48 85 d2 test %rdx,%rdx + 180b0c61c: 78 12 js 0x180b0c630 + 180b0c61e: 49 8d 0c 10 lea (%r8,%rdx,1),%rcx + 180b0c622: 49 3b cb cmp %r11,%rcx + 180b0c625: 72 d9 jb 0x180b0c600 + 180b0c627: 66 0f 1f 84 00 00 00 nopw 0x0(%rax,%rax,1) + 180b0c62e: 00 00 + 180b0c630: 4c 8d 4c 24 50 lea 0x50(%rsp),%r9 + 180b0c635: 45 33 c0 xor %r8d,%r8d + 180b0c638: 49 8b d6 mov %r14,%rdx + 180b0c63b: b9 14 72 00 00 mov $0x7214,%ecx + 180b0c640: 39 c8 cmp %ecx,%eax + 180b0c642: 48 85 c0 test %rax,%rax + 180b0c645: 48 83 c4 c8 add $0xffffffffffffffc8,%rsp + 180b0c649: 49 81 c1 b2 c6 45 2b add $0x2b45c6b2,%r9 + 180b0c650: 48 85 d0 test %rdx,%rax + 180b0c653: 49 81 e9 b2 c6 45 2b sub $0x2b45c6b2,%r9 + 180b0c65a: 48 89 74 24 30 mov %rsi,0x30(%rsp) + 180b0c65f: 49 81 f5 ce cd f1 1a xor $0x1af1cdce,%r13 + 180b0c666: 4d 85 ec test %r13,%r12 + 180b0c669: 48 81 fa ff 37 12 61 cmp $0x611237ff,%rdx + 180b0c670: 49 81 f5 ce cd f1 1a xor $0x1af1cdce,%r13 + 180b0c677: 48 83 ec d0 sub $0xffffffffffffffd0,%rsp + 180b0c67b: 48 8b f2 mov %rdx,%rsi + 180b0c67e: eb 01 jmp 0x180b0c681 + 180b0c680: 35 8b 06 eb 01 xor $0x1eb068b,%eax + 180b0c685: c3 ret + 180b0c686: 41 89 01 mov %eax,(%r9) + 180b0c689: 48 83 c4 d8 add $0xffffffffffffffd8,%rsp + 180b0c68d: 4d 85 e0 test %r12,%r8 + 180b0c690: 48 3d 0c 68 55 6c cmp $0x6c55680c,%rax + 180b0c696: 49 f7 c2 cf c3 7a 65 test $0x657ac3cf,%r10 + 180b0c69d: 48 8b 74 24 28 mov 0x28(%rsp),%rsi + 180b0c6a2: f6 c1 c1 test $0xc1,%cl + 180b0c6a5: 74 04 je 0x180b0c6ab + 180b0c6a7: 2c 02 sub $0x2,%al + 180b0c6a9: 24 f5 and $0xf5,%al + 180b0c6ab: 48 83 c4 30 add $0x30,%rsp + 180b0c6af: 8b 0b mov (%rbx),%ecx + 180b0c6b1: 8d 41 01 lea 0x1(%rcx),%eax + 180b0c6b4: 0f af c1 imul %ecx,%eax + 180b0c6b7: 25 01 00 00 80 and $0x80000001,%eax + 180b0c6bc: 7d 07 jge 0x180b0c6c5 + 180b0c6be: ff c8 dec %eax + 180b0c6c0: 83 c8 fe or $0xfffffffe,%eax + 180b0c6c3: ff c0 inc %eax + 180b0c6c5: 85 c0 test %eax,%eax + 180b0c6c7: 0f 85 63 ff ff ff jne 0x180b0c630 + 180b0c6cd: 03 6c 24 50 add 0x50(%rsp),%ebp + 180b0c6d1: 41 0f af ed imul %r13d,%ebp + 180b0c6d5: 8b c5 mov %ebp,%eax + 180b0c6d7: c1 e8 10 shr $0x10,%eax + 180b0c6da: 33 e8 xor %eax,%ebp + 180b0c6dc: 48 83 c6 04 add $0x4,%rsi + 180b0c6e0: 49 8d 04 37 lea (%r15,%rsi,1),%rax + 180b0c6e4: 48 85 c0 test %rax,%rax + 180b0c6e7: 0f 85 93 fe ff ff jne 0x180b0c580 + 180b0c6ed: 48 8b 5c 24 68 mov 0x68(%rsp),%rbx + 180b0c6f2: 48 8d b4 24 c8 00 00 lea 0xc8(%rsp),%rsi + 180b0c6f9: 00 + 180b0c6fa: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1) diff --git a/handoff/nls_dasm/vt_542100.dis b/handoff/nls_dasm/vt_542100.dis new file mode 100644 index 0000000..2b21a56 --- /dev/null +++ b/handoff/nls_dasm/vt_542100.dis @@ -0,0 +1,594 @@ +; vt_542100 + +/tmp/slice.bin: file format binary + + +Disassembly of section .data: + +0000000180542100 <.data>: + 180542100: 40 3d 57 41 56 45 rex cmp $0x45564157,%eax + 180542106: 0f 85 6b 14 00 00 jne 0x180543577 + 18054210c: 41 80 bd 84 00 00 00 cmpb $0x0,0x84(%r13) + 180542113: 00 + 180542114: 74 6e je 0x180542184 + 180542116: 49 8b 4d 50 mov 0x50(%r13),%rcx + 18054211a: 48 8b 01 mov (%rcx),%rax + 18054211d: ff 50 40 call *0x40(%rax) + 180542120: 3d 64 73 36 34 cmp $0x34367364,%eax + 180542125: 75 5d jne 0x180542184 + 180542127: 49 8b 4d 50 mov 0x50(%r13),%rcx + 18054212b: 48 8b 01 mov (%rcx),%rax + 18054212e: ff 50 40 call *0x40(%rax) + 180542131: 83 f8 1c cmp $0x1c,%eax + 180542134: 0f 82 89 14 00 00 jb 0x1805435c3 + 18054213a: 49 8b 4d 50 mov 0x50(%r13),%rcx + 18054213e: 8b d8 mov %eax,%ebx + 180542140: 48 8b 01 mov (%rcx),%rax + 180542143: ff 90 a8 00 00 00 call *0xa8(%rax) + 180542149: 8b fb mov %ebx,%edi + 18054214b: 83 e7 01 and $0x1,%edi + 18054214e: 48 03 c3 add %rbx,%rax + 180542151: 48 03 f8 add %rax,%rdi + 180542154: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542158: 48 8b 01 mov (%rcx),%rax + 18054215b: ff 50 50 call *0x50(%rax) + 18054215e: 4c 8d 3c 06 lea (%rsi,%rax,1),%r15 + 180542162: 4c 89 7d 88 mov %r15,-0x78(%rbp) + 180542166: 49 8b 4d 50 mov 0x50(%r13),%rcx + 18054216a: 48 8b 01 mov (%rcx),%rax + 18054216d: ff 50 50 call *0x50(%rax) + 180542170: 49 89 45 78 mov %rax,0x78(%r13) + 180542174: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542178: 48 8b 01 mov (%rcx),%rax + 18054217b: 48 8b d7 mov %rdi,%rdx + 18054217e: ff 90 b0 00 00 00 call *0xb0(%rax) + 180542184: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542188: 48 8b 01 mov (%rcx),%rax + 18054218b: ff 90 a8 00 00 00 call *0xa8(%rax) + 180542191: 49 3b c7 cmp %r15,%rax + 180542194: 0f 83 dd 13 00 00 jae 0x180543577 + 18054219a: 4c 8d 3d ff aa f6 01 lea 0x1f6aaff(%rip),%r15 # 0x1824acca0 + 1805421a1: 48 8d 35 f0 aa f6 01 lea 0x1f6aaf0(%rip),%rsi # 0x1824acc98 + 1805421a8: 4c 8d 25 20 ab f6 01 lea 0x1f6ab20(%rip),%r12 # 0x1824acccf + 1805421af: 4c 8d 35 12 ab f6 01 lea 0x1f6ab12(%rip),%r14 # 0x1824accc8 + 1805421b6: 49 8b 4d 50 mov 0x50(%r13),%rcx + 1805421ba: 48 8b 01 mov (%rcx),%rax + 1805421bd: ff 50 10 call *0x10(%rax) + 1805421c0: 84 c0 test %al,%al + 1805421c2: 0f 85 7b 11 00 00 jne 0x180543343 + 1805421c8: 49 8b 4d 50 mov 0x50(%r13),%rcx + 1805421cc: 48 8b 01 mov (%rcx),%rax + 1805421cf: ff 50 40 call *0x40(%rax) + 1805421d2: 8b d8 mov %eax,%ebx + 1805421d4: 49 8b 4d 50 mov 0x50(%r13),%rcx + 1805421d8: 48 8b 01 mov (%rcx),%rax + 1805421db: ff 50 40 call *0x40(%rax) + 1805421de: 44 8b e8 mov %eax,%r13d + 1805421e1: 48 8b 4c 24 20 mov 0x20(%rsp),%rcx + 1805421e6: 48 8b 49 50 mov 0x50(%rcx),%rcx + 1805421ea: 8b f8 mov %eax,%edi + 1805421ec: 48 8b 01 mov (%rcx),%rax + 1805421ef: ff 90 a8 00 00 00 call *0xa8(%rax) + 1805421f5: 41 8b cd mov %r13d,%ecx + 1805421f8: 83 e1 01 and $0x1,%ecx + 1805421fb: 49 03 c5 add %r13,%rax + 1805421fe: 48 03 c8 add %rax,%rcx + 180542201: 48 89 4c 24 28 mov %rcx,0x28(%rsp) + 180542206: 81 fb 66 6d 74 20 cmp $0x20746d66,%ebx + 18054220c: 0f 85 65 03 00 00 jne 0x180542577 + 180542212: 48 8b 7c 24 20 mov 0x20(%rsp),%rdi + 180542217: 48 8b 4f 50 mov 0x50(%rdi),%rcx + 18054221b: 48 8b 01 mov (%rcx),%rax + 18054221e: ff 50 30 call *0x30(%rax) + 180542221: 0f b7 d8 movzwl %ax,%ebx + 180542224: 48 8b 4f 50 mov 0x50(%rdi),%rcx + 180542228: 48 8b 01 mov (%rcx),%rax + 18054222b: ff 50 30 call *0x30(%rax) + 18054222e: 0f bf c8 movswl %ax,%ecx + 180542231: 89 4f 20 mov %ecx,0x20(%rdi) + 180542234: 48 8b 4f 50 mov 0x50(%rdi),%rcx + 180542238: 48 8b 01 mov (%rcx),%rax + 18054223b: ff 50 40 call *0x40(%rax) + 18054223e: 66 0f 6e c0 movd %eax,%xmm0 + 180542242: f3 0f e6 c0 cvtdq2pd %xmm0,%xmm0 + 180542246: f2 0f 11 47 08 movsd %xmm0,0x8(%rdi) + 18054224b: 48 8b 4f 50 mov 0x50(%rdi),%rcx + 18054224f: 48 8b 01 mov (%rcx),%rax + 180542252: ff 50 40 call *0x40(%rax) + 180542255: 8b f8 mov %eax,%edi + 180542257: 48 8b 4c 24 20 mov 0x20(%rsp),%rcx + 18054225c: 48 8b 49 50 mov 0x50(%rcx),%rcx + 180542260: 48 8b 01 mov (%rcx),%rax + 180542263: ba 02 00 00 00 mov $0x2,%edx + 180542268: ff 90 b8 00 00 00 call *0xb8(%rax) + 18054226e: 48 8b 44 24 20 mov 0x20(%rsp),%rax + 180542273: 48 8b 48 50 mov 0x50(%rax),%rcx + 180542277: 48 8b 01 mov (%rcx),%rax + 18054227a: ff 50 30 call *0x30(%rax) + 18054227d: 0f bf c8 movswl %ax,%ecx + 180542280: 48 8b 44 24 20 mov 0x20(%rsp),%rax + 180542285: 89 48 10 mov %ecx,0x10(%rax) + 180542288: 83 f9 40 cmp $0x40,%ecx + 18054228b: 76 26 jbe 0x1805422b3 + 18054228d: f2 0f 2c 48 08 cvttsd2si 0x8(%rax),%ecx + 180542292: 8b c7 mov %edi,%eax + 180542294: 99 cltd + 180542295: f7 f9 idiv %ecx + 180542297: 48 8b 7c 24 20 mov 0x20(%rsp),%rdi + 18054229c: 89 87 80 00 00 00 mov %eax,0x80(%rdi) + 1805422a2: 8d 04 c5 00 00 00 00 lea 0x0(,%rax,8),%eax + 1805422a9: 33 d2 xor %edx,%edx + 1805422ab: f7 77 20 divl 0x20(%rdi) + 1805422ae: 89 47 10 mov %eax,0x10(%rdi) + 1805422b1: eb 14 jmp 0x1805422c7 + 1805422b3: 48 8b 7c 24 20 mov 0x20(%rsp),%rdi + 1805422b8: 8b 47 20 mov 0x20(%rdi),%eax + 1805422bb: 0f af c1 imul %ecx,%eax + 1805422be: c1 e8 03 shr $0x3,%eax + 1805422c1: 89 87 80 00 00 00 mov %eax,0x80(%rdi) + 1805422c7: 66 83 fb 03 cmp $0x3,%bx + 1805422cb: 75 0f jne 0x1805422dc + 1805422cd: 4c 8b 6c 24 20 mov 0x20(%rsp),%r13 + 1805422d2: 41 c6 45 24 01 movb $0x1,0x24(%r13) + 1805422d7: e9 a3 11 00 00 jmp 0x18054347f + 1805422dc: b8 fe ff 00 00 mov $0xfffe,%eax + 1805422e1: 66 3b d8 cmp %ax,%bx + 1805422e4: 0f 85 3f 02 00 00 jne 0x180542529 + 1805422ea: 41 83 fd 28 cmp $0x28,%r13d + 1805422ee: 73 15 jae 0x180542305 + 1805422f0: 4c 8b 6c 24 20 mov 0x20(%rsp),%r13 + 1805422f5: 41 c7 85 80 00 00 00 movl $0x0,0x80(%r13) + 1805422fc: 00 00 00 00 + 180542300: e9 7a 11 00 00 jmp 0x18054347f + 180542305: 48 8b 4f 50 mov 0x50(%rdi),%rcx + 180542309: 48 8b 01 mov (%rcx),%rax + 18054230c: ba 04 00 00 00 mov $0x4,%edx + 180542311: ff 90 b8 00 00 00 call *0xb8(%rax) + 180542317: 48 8b 4f 50 mov 0x50(%rdi),%rcx + 18054231b: 48 8b 01 mov (%rcx),%rax + 18054231e: ff 50 40 call *0x40(%rax) + 180542321: 8b d8 mov %eax,%ebx + 180542323: 48 8d 15 46 ac f6 01 lea 0x1f6ac46(%rip),%rdx # 0x1824acf70 + 18054232a: 48 8d 4d 98 lea -0x68(%rbp),%rcx + 18054232e: e8 ad a1 f5 ff call 0x18049c4e0 + 180542333: 90 nop + 180542334: 8b d3 mov %ebx,%edx + 180542336: 48 8d 8d 00 02 00 00 lea 0x200(%rbp),%rcx + 18054233d: e8 ce 1a cf 00 call 0x181233e10 + 180542342: 4c 8d 85 ff 01 00 00 lea 0x1ff(%rbp),%r8 + 180542349: 4c 2b c0 sub %rax,%r8 + 18054234c: 48 8b d0 mov %rax,%rdx + 18054234f: 48 8d 4d 90 lea -0x70(%rbp),%rcx + 180542353: e8 f8 2d f5 ff call 0x180495150 + 180542358: 4c 8d 45 90 lea -0x70(%rbp),%r8 + 18054235c: 48 8d 55 98 lea -0x68(%rbp),%rdx + 180542360: 48 8d 4f 28 lea 0x28(%rdi),%rcx + 180542364: e8 17 a5 ce 00 call 0x18122c880 + 180542369: 48 8b 4d 90 mov -0x70(%rbp),%rcx + 18054236d: 48 83 c1 f0 add $0xfffffffffffffff0,%rcx + 180542371: 8b 01 mov (%rcx),%eax + 180542373: a9 00 00 00 30 test $0x30000000,%eax + 180542378: 75 16 jne 0x180542390 + 18054237a: b8 ff ff ff ff mov $0xffffffff,%eax + 18054237f: f0 0f c1 01 lock xadd %eax,(%rcx) + 180542383: ff c8 dec %eax + 180542385: 83 f8 ff cmp $0xffffffff,%eax + 180542388: 75 06 jne 0x180542390 + 18054238a: e8 65 ed be 00 call 0x1811310f4 + 18054238f: 90 nop + 180542390: 48 8b 4d 98 mov -0x68(%rbp),%rcx + 180542394: 48 83 c1 f0 add $0xfffffffffffffff0,%rcx + 180542398: 8b 01 mov (%rcx),%eax + 18054239a: a9 00 00 00 30 test $0x30000000,%eax + 18054239f: 75 15 jne 0x1805423b6 + 1805423a1: b8 ff ff ff ff mov $0xffffffff,%eax + 1805423a6: f0 0f c1 01 lock xadd %eax,(%rcx) + 1805423aa: ff c8 dec %eax + 1805423ac: 83 f8 ff cmp $0xffffffff,%eax + 1805423af: 75 05 jne 0x1805423b6 + 1805423b1: e8 3e ed be 00 call 0x1811310f4 + 1805423b6: 44 8b 47 20 mov 0x20(%rdi),%r8d + 1805423ba: 8b d3 mov %ebx,%edx + 1805423bc: 48 8d 8d 98 01 00 00 lea 0x198(%rbp),%rcx + 1805423c3: e8 68 17 00 00 call 0x180543b30 + 1805423c8: 48 8b d0 mov %rax,%rdx + 1805423cb: 48 8b 8f 88 00 00 00 mov 0x88(%rdi),%rcx + 1805423d2: 48 89 8d 70 01 00 00 mov %rcx,0x170(%rbp) + 1805423d9: 48 8b 00 mov (%rax),%rax + 1805423dc: 48 89 87 88 00 00 00 mov %rax,0x88(%rdi) + 1805423e3: 48 89 0a mov %rcx,(%rdx) + 1805423e6: 0f 10 42 08 movups 0x8(%rdx),%xmm0 + 1805423ea: 0f 11 87 90 00 00 00 movups %xmm0,0x90(%rdi) + 1805423f1: 48 8b 42 18 mov 0x18(%rdx),%rax + 1805423f5: 48 89 87 a0 00 00 00 mov %rax,0xa0(%rdi) + 1805423fc: 8b 42 20 mov 0x20(%rdx),%eax + 1805423ff: 89 87 a8 00 00 00 mov %eax,0xa8(%rdi) + 180542405: 0f b6 42 24 movzbl 0x24(%rdx),%eax + 180542409: 88 87 ac 00 00 00 mov %al,0xac(%rdi) + 18054240f: 48 8b 8d 98 01 00 00 mov 0x198(%rbp),%rcx + 180542416: ff 15 8c 8e 66 01 call *0x1668e8c(%rip) # 0x181bab2a8 + 18054241c: 48 8b 4f 50 mov 0x50(%rdi),%rcx + 180542420: 48 8b 01 mov (%rcx),%rax + 180542423: ff 50 40 call *0x40(%rax) + 180542426: 89 85 88 01 00 00 mov %eax,0x188(%rbp) + 18054242c: 48 8b 4f 50 mov 0x50(%rdi),%rcx + 180542430: 48 8b 01 mov (%rcx),%rax + 180542433: ff 50 30 call *0x30(%rax) + 180542436: 66 89 85 8c 01 00 00 mov %ax,0x18c(%rbp) + 18054243d: 48 8b 4f 50 mov 0x50(%rdi),%rcx + 180542441: 48 8b 01 mov (%rcx),%rax + 180542444: ff 50 30 call *0x30(%rax) + 180542447: 66 89 85 8e 01 00 00 mov %ax,0x18e(%rbp) + 18054244e: bb 08 00 00 00 mov $0x8,%ebx + 180542453: 48 89 9d 28 01 00 00 mov %rbx,0x128(%rbp) + 18054245a: 4c 8b 6f 50 mov 0x50(%rdi),%r13 + 18054245e: 33 ff xor %edi,%edi + 180542460: 41 bc 00 00 00 70 mov $0x70000000,%r12d + 180542466: 44 8b c3 mov %ebx,%r8d + 180542469: 49 3b dc cmp %r12,%rbx + 18054246c: 45 0f 47 c4 cmova %r12d,%r8d + 180542470: 48 8d 95 90 01 00 00 lea 0x190(%rbp),%rdx + 180542477: 48 03 d7 add %rdi,%rdx + 18054247a: 49 8b 45 00 mov 0x0(%r13),%rax + 18054247e: 49 8b cd mov %r13,%rcx + 180542481: ff 50 18 call *0x18(%rax) + 180542484: 83 f8 01 cmp $0x1,%eax + 180542487: 7c 0a jl 0x180542493 + 180542489: 48 98 cltq + 18054248b: 48 03 f8 add %rax,%rdi + 18054248e: 48 2b d8 sub %rax,%rbx + 180542491: 75 d3 jne 0x180542466 + 180542493: 48 89 9d 28 01 00 00 mov %rbx,0x128(%rbp) + 18054249a: 48 8b 8d 88 01 00 00 mov 0x188(%rbp),%rcx + 1805424a1: 48 8b c1 mov %rcx,%rax + 1805424a4: 48 8b 95 90 01 00 00 mov 0x190(%rbp),%rdx + 1805424ab: 48 2b 05 d6 96 e1 01 sub 0x1e196d6(%rip),%rax # 0x18235bb88 + 1805424b2: 4c 8d 25 16 a8 f6 01 lea 0x1f6a816(%rip),%r12 # 0x1824acccf + 1805424b9: 75 0a jne 0x1805424c5 + 1805424bb: 48 8b c2 mov %rdx,%rax + 1805424be: 48 2b 05 cb 96 e1 01 sub 0x1e196cb(%rip),%rax # 0x18235bb90 + 1805424c5: 48 85 c0 test %rax,%rax + 1805424c8: 0f 94 c0 sete %al + 1805424cb: 84 c0 test %al,%al + 1805424cd: 74 0f je 0x1805424de + 1805424cf: 4c 8b 6c 24 20 mov 0x20(%rsp),%r13 + 1805424d4: 41 c6 45 24 01 movb $0x1,0x24(%r13) + 1805424d9: e9 a1 0f 00 00 jmp 0x18054347f + 1805424de: 48 8b c1 mov %rcx,%rax + 1805424e1: 48 2b 05 38 96 e1 01 sub 0x1e19638(%rip),%rax # 0x18235bb20 + 1805424e8: 75 0a jne 0x1805424f4 + 1805424ea: 48 8b c2 mov %rdx,%rax + 1805424ed: 48 2b 05 34 96 e1 01 sub 0x1e19634(%rip),%rax # 0x18235bb28 + 1805424f4: 48 85 c0 test %rax,%rax + 1805424f7: 0f 94 c0 sete %al + 1805424fa: 84 c0 test %al,%al + 1805424fc: 0f 94 c0 sete %al + 1805424ff: 84 c0 test %al,%al + 180542501: 0f 84 73 0f 00 00 je 0x18054347a + 180542507: 48 2b 0d 5a 96 e1 01 sub 0x1e1965a(%rip),%rcx # 0x18235bb68 + 18054250e: 75 0a jne 0x18054251a + 180542510: 48 8b ca mov %rdx,%rcx + 180542513: 48 2b 0d 56 96 e1 01 sub 0x1e19656(%rip),%rcx # 0x18235bb70 + 18054251a: 48 85 c9 test %rcx,%rcx + 18054251d: 0f 94 c0 sete %al + 180542520: 84 c0 test %al,%al + 180542522: 0f 94 c0 sete %al + 180542525: 84 c0 test %al,%al + 180542527: eb 2e jmp 0x180542557 + 180542529: 0f b7 c3 movzwl %bx,%eax + 18054252c: b9 4f 67 00 00 mov $0x674f,%ecx + 180542531: 66 2b c1 sub %cx,%ax + 180542534: 66 83 f8 02 cmp $0x2,%ax + 180542538: 0f 86 6f 0f 00 00 jbe 0x1805434ad + 18054253e: 0f b7 c3 movzwl %bx,%eax + 180542541: b9 6f 67 00 00 mov $0x676f,%ecx + 180542546: 66 2b c1 sub %cx,%ax + 180542549: 66 83 f8 02 cmp $0x2,%ax + 18054254d: 0f 86 5a 0f 00 00 jbe 0x1805434ad + 180542553: 66 83 fb 01 cmp $0x1,%bx + 180542557: 48 8b 54 24 28 mov 0x28(%rsp),%rdx + 18054255c: 4c 8b 6c 24 20 mov 0x20(%rsp),%r13 + 180542561: 0f 84 1d 0f 00 00 je 0x180543484 + 180542567: 41 c7 85 80 00 00 00 movl $0x0,0x80(%r13) + 18054256e: 00 00 00 00 + 180542572: e9 0d 0f 00 00 jmp 0x180543484 + 180542577: 81 fb 64 61 74 61 cmp $0x61746164,%ebx + 18054257d: 75 7a jne 0x1805425f9 + 18054257f: 4c 8b 6c 24 20 mov 0x20(%rsp),%r13 + 180542584: 41 80 bd 84 00 00 00 cmpb $0x0,0x84(%r13) + 18054258b: 00 + 18054258c: 74 2b je 0x1805425b9 + 18054258e: 49 83 7d 78 00 cmpq $0x0,0x78(%r13) + 180542593: 7e 28 jle 0x1805425bd + 180542595: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542599: 49 8b 5d 78 mov 0x78(%r13),%rbx + 18054259d: 48 8b 01 mov (%rcx),%rax + 1805425a0: ff 90 a8 00 00 00 call *0xa8(%rax) + 1805425a6: 48 8b cb mov %rbx,%rcx + 1805425a9: 83 e1 01 and $0x1,%ecx + 1805425ac: 48 03 c3 add %rbx,%rax + 1805425af: 48 03 c8 add %rax,%rcx + 1805425b2: 48 89 4c 24 28 mov %rcx,0x28(%rsp) + 1805425b7: eb 04 jmp 0x1805425bd + 1805425b9: 49 89 7d 78 mov %rdi,0x78(%r13) + 1805425bd: 49 8b 4d 50 mov 0x50(%r13),%rcx + 1805425c1: 48 8b 01 mov (%rcx),%rax + 1805425c4: ff 90 a8 00 00 00 call *0xa8(%rax) + 1805425ca: 49 89 45 70 mov %rax,0x70(%r13) + 1805425ce: 49 63 85 80 00 00 00 movslq 0x80(%r13),%rax + 1805425d5: 85 c0 test %eax,%eax + 1805425d7: 7e 15 jle 0x1805425ee + 1805425d9: 48 8b c8 mov %rax,%rcx + 1805425dc: 49 8b 45 78 mov 0x78(%r13),%rax + 1805425e0: 48 99 cqto + 1805425e2: 48 f7 f9 idiv %rcx + 1805425e5: 49 89 45 18 mov %rax,0x18(%r13) + 1805425e9: e9 91 0e 00 00 jmp 0x18054347f + 1805425ee: 33 c0 xor %eax,%eax + 1805425f0: 49 89 45 18 mov %rax,0x18(%r13) + 1805425f4: e9 86 0e 00 00 jmp 0x18054347f + 1805425f9: 81 fb 62 65 78 74 cmp $0x74786562,%ebx + 1805425ff: 75 75 jne 0x180542676 + 180542601: 48 8b 5c 24 20 mov 0x20(%rsp),%rbx + 180542606: 48 8b 4b 50 mov 0x50(%rbx),%rcx + 18054260a: 48 8b 01 mov (%rcx),%rax + 18054260d: ff 90 a8 00 00 00 call *0xa8(%rax) + 180542613: 48 89 43 60 mov %rax,0x60(%rbx) + 180542617: 48 89 7b 68 mov %rdi,0x68(%rbx) + 18054261b: 49 8d 5d 01 lea 0x1(%r13),%rbx + 18054261f: 33 c9 xor %ecx,%ecx + 180542621: ff 15 81 8c 66 01 call *0x1668c81(%rip) # 0x181bab2a8 + 180542627: bf 5b 02 00 00 mov $0x25b,%edi + 18054262c: 48 3b df cmp %rdi,%rbx + 18054262f: 48 0f 42 df cmovb %rdi,%rbx + 180542633: ba 01 00 00 00 mov $0x1,%edx + 180542638: 48 8b cb mov %rbx,%rcx + 18054263b: ff 15 5f 8c 66 01 call *0x1668c5f(%rip) # 0x181bab2a0 + 180542641: 48 8b d8 mov %rax,%rbx + 180542644: 48 89 85 78 01 00 00 mov %rax,0x178(%rbp) + 18054264b: 48 8b 44 24 20 mov 0x20(%rsp),%rax + 180542650: 48 8b 48 50 mov 0x50(%rax),%rcx + 180542654: 48 8b 01 mov (%rcx),%rax + 180542657: 45 8b c5 mov %r13d,%r8d + 18054265a: 48 8b d3 mov %rbx,%rdx + 18054265d: ff 50 18 call *0x18(%rax) + 180542660: 45 8b c5 mov %r13d,%r8d + 180542663: 48 8b 54 24 60 mov 0x60(%rsp),%rdx + 180542668: 48 8b cb mov %rbx,%rcx + 18054266b: e8 20 c7 ff ff call 0x18053ed90 + 180542670: 90 nop + 180542671: e9 fb 0d 00 00 jmp 0x180543471 + 180542676: 81 fb 73 6d 70 6c cmp $0x6c706d73,%ebx + 18054267c: 75 5a jne 0x1805426d8 + 18054267e: 49 8d 5d 01 lea 0x1(%r13),%rbx + 180542682: 33 c9 xor %ecx,%ecx + 180542684: ff 15 1e 8c 66 01 call *0x1668c1e(%rip) # 0x181bab2a8 + 18054268a: 48 83 fb 3c cmp $0x3c,%rbx + 18054268e: b8 3c 00 00 00 mov $0x3c,%eax + 180542693: 48 0f 42 d8 cmovb %rax,%rbx + 180542697: 8d 50 c5 lea -0x3b(%rax),%edx + 18054269a: 48 8b cb mov %rbx,%rcx + 18054269d: ff 15 fd 8b 66 01 call *0x1668bfd(%rip) # 0x181bab2a0 + 1805426a3: 48 8b d8 mov %rax,%rbx + 1805426a6: 48 89 85 80 01 00 00 mov %rax,0x180(%rbp) + 1805426ad: 48 8b 44 24 20 mov 0x20(%rsp),%rax + 1805426b2: 48 8b 48 50 mov 0x50(%rax),%rcx + 1805426b6: 48 8b 01 mov (%rcx),%rax + 1805426b9: 45 8b c5 mov %r13d,%r8d + 1805426bc: 48 8b d3 mov %rbx,%rdx + 1805426bf: ff 50 18 call *0x18(%rax) + 1805426c2: 45 8b c5 mov %r13d,%r8d + 1805426c5: 48 8b 54 24 60 mov 0x60(%rsp),%rdx + 1805426ca: 48 8b cb mov %rbx,%rcx + 1805426cd: e8 5e d0 ff ff call 0x18053f730 + 1805426d2: 90 nop + 1805426d3: e9 99 0d 00 00 jmp 0x180543471 + 1805426d8: 81 fb 69 6e 73 74 cmp $0x74736e69,%ebx + 1805426de: 0f 84 b8 0c 00 00 je 0x18054339c + 1805426e4: 81 fb 49 4e 53 54 cmp $0x54534e49,%ebx + 1805426ea: 0f 84 ac 0c 00 00 je 0x18054339c + 1805426f0: 81 fb 63 75 65 20 cmp $0x20657563,%ebx + 1805426f6: 75 5a jne 0x180542752 + 1805426f8: 49 8d 5d 01 lea 0x1(%r13),%rbx + 1805426fc: 33 c9 xor %ecx,%ecx + 1805426fe: ff 15 a4 8b 66 01 call *0x1668ba4(%rip) # 0x181bab2a8 + 180542704: 48 83 fb 1c cmp $0x1c,%rbx + 180542708: b8 1c 00 00 00 mov $0x1c,%eax + 18054270d: 48 0f 42 d8 cmovb %rax,%rbx + 180542711: 8d 50 e5 lea -0x1b(%rax),%edx + 180542714: 48 8b cb mov %rbx,%rcx + 180542717: ff 15 83 8b 66 01 call *0x1668b83(%rip) # 0x181bab2a0 + 18054271d: 48 8b d8 mov %rax,%rbx + 180542720: 48 89 85 50 01 00 00 mov %rax,0x150(%rbp) + 180542727: 48 8b 44 24 20 mov 0x20(%rsp),%rax + 18054272c: 48 8b 48 50 mov 0x50(%rax),%rcx + 180542730: 48 8b 01 mov (%rcx),%rax + 180542733: 45 8b c5 mov %r13d,%r8d + 180542736: 48 8b d3 mov %rbx,%rdx + 180542739: ff 50 18 call *0x18(%rax) + 18054273c: 45 8b c5 mov %r13d,%r8d + 18054273f: 48 8b 54 24 60 mov 0x60(%rsp),%rdx + 180542744: 48 8b cb mov %rbx,%rcx + 180542747: e8 e4 e0 ff ff call 0x180540830 + 18054274c: 90 nop + 18054274d: e9 1f 0d 00 00 jmp 0x180543471 + 180542752: 81 fb 61 78 6d 6c cmp $0x6c6d7861,%ebx + 180542758: 0f 85 a6 00 00 00 jne 0x180542804 + 18054275e: 33 db xor %ebx,%ebx + 180542760: 48 89 5d 60 mov %rbx,0x60(%rbp) + 180542764: 48 89 5d 68 mov %rbx,0x68(%rbp) + 180542768: 4c 8b 6c 24 20 mov 0x20(%rsp),%r13 + 18054276d: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542771: 48 8b 01 mov (%rcx),%rax + 180542774: 4c 8b c7 mov %rdi,%r8 + 180542777: 48 8d 55 60 lea 0x60(%rbp),%rdx + 18054277b: ff 90 a0 00 00 00 call *0xa0(%rax) + 180542781: 48 8b 55 60 mov 0x60(%rbp),%rdx + 180542785: 48 85 d2 test %rdx,%rdx + 180542788: 74 28 je 0x1805427b2 + 18054278a: 48 8b 45 68 mov 0x68(%rbp),%rax + 18054278e: 85 c0 test %eax,%eax + 180542790: 79 0c jns 0x18054279e + 180542792: 48 8d 4c 24 78 lea 0x78(%rsp),%rcx + 180542797: e8 44 a2 f5 ff call 0x18049c9e0 + 18054279c: eb 20 jmp 0x1805427be + 18054279e: 7e 12 jle 0x1805427b2 + 1805427a0: 4c 63 c0 movslq %eax,%r8 + 1805427a3: 4c 03 c2 add %rdx,%r8 + 1805427a6: 48 8d 4c 24 78 lea 0x78(%rsp),%rcx + 1805427ab: e8 f0 80 d0 00 call 0x18124a8a0 + 1805427b0: eb 0c jmp 0x1805427be + 1805427b2: 48 8d 05 df 97 c9 01 lea 0x1c997df(%rip),%rax # 0x1821dbf98 + 1805427b9: 48 89 44 24 78 mov %rax,0x78(%rsp) + 1805427be: 48 8d 54 24 78 lea 0x78(%rsp),%rdx + 1805427c3: 49 8d 4d 28 lea 0x28(%r13),%rcx + 1805427c7: e8 e4 b2 e2 00 call 0x18136dab0 + 1805427cc: 90 nop + 1805427cd: 48 8b 4c 24 78 mov 0x78(%rsp),%rcx + 1805427d2: 48 83 c1 f0 add $0xfffffffffffffff0,%rcx + 1805427d6: 8b 01 mov (%rcx),%eax + 1805427d8: a9 00 00 00 30 test $0x30000000,%eax + 1805427dd: 75 16 jne 0x1805427f5 + 1805427df: b8 ff ff ff ff mov $0xffffffff,%eax + 1805427e4: f0 0f c1 01 lock xadd %eax,(%rcx) + 1805427e8: ff c8 dec %eax + 1805427ea: 83 f8 ff cmp $0xffffffff,%eax + 1805427ed: 75 06 jne 0x1805427f5 + 1805427ef: e8 00 e9 be 00 call 0x1811310f4 + 1805427f4: 90 nop + 1805427f5: 48 8b 4d 60 mov 0x60(%rbp),%rcx + 1805427f9: ff 15 a9 8a 66 01 call *0x1668aa9(%rip) # 0x181bab2a8 + 1805427ff: e9 7b 0c 00 00 jmp 0x18054347f + 180542804: 81 fb 4c 49 53 54 cmp $0x5453494c,%ebx + 18054280a: 0f 85 2a 0a 00 00 jne 0x18054323a + 180542810: 4c 8b 6c 24 20 mov 0x20(%rsp),%r13 + 180542815: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542819: 48 8b 01 mov (%rcx),%rax + 18054281c: ff 50 40 call *0x40(%rax) + 18054281f: 3d 69 6e 66 6f cmp $0x6f666e69,%eax + 180542824: 0f 84 f9 09 00 00 je 0x180543223 + 18054282a: 3d 49 4e 46 4f cmp $0x4f464e49,%eax + 18054282f: 0f 84 ee 09 00 00 je 0x180543223 + 180542835: 3d 61 64 74 6c cmp $0x6c746461,%eax + 18054283a: 0f 85 3f 0c 00 00 jne 0x18054347f + 180542840: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542844: 48 8b 01 mov (%rcx),%rax + 180542847: ff 90 a8 00 00 00 call *0xa8(%rax) + 18054284d: 48 8b 54 24 28 mov 0x28(%rsp),%rdx + 180542852: 48 3b c2 cmp %rdx,%rax + 180542855: 0f 8d 29 0c 00 00 jge 0x180543484 + 18054285b: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) + 180542860: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542864: 48 8b 01 mov (%rcx),%rax + 180542867: ff 50 40 call *0x40(%rax) + 18054286a: 8b f8 mov %eax,%edi + 18054286c: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542870: 48 8b 01 mov (%rcx),%rax + 180542873: ff 50 40 call *0x40(%rax) + 180542876: 8b d8 mov %eax,%ebx + 180542878: 89 44 24 68 mov %eax,0x68(%rsp) + 18054287c: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542880: 48 8b 01 mov (%rcx),%rax + 180542883: ff 90 a8 00 00 00 call *0xa8(%rax) + 180542889: 48 8b c8 mov %rax,%rcx + 18054288c: 8b c3 mov %ebx,%eax + 18054288e: 83 e0 01 and $0x1,%eax + 180542891: 03 c3 add %ebx,%eax + 180542893: 48 03 c8 add %rax,%rcx + 180542896: 48 89 8d f8 00 00 00 mov %rcx,0xf8(%rbp) + 18054289d: 81 ff 6c 61 62 6c cmp $0x6c62616c,%edi + 1805428a3: 0f 84 89 05 00 00 je 0x180542e32 + 1805428a9: 81 ff 6e 6f 74 65 cmp $0x65746f6e,%edi + 1805428af: 0f 84 7d 05 00 00 je 0x180542e32 + 1805428b5: 81 ff 6c 74 78 74 cmp $0x7478746c,%edi + 1805428bb: 0f 85 31 09 00 00 jne 0x1805431f2 + 1805428c1: 8b 5c 24 58 mov 0x58(%rsp),%ebx + 1805428c5: 8b d3 mov %ebx,%edx + 1805428c7: 48 8d 8d 30 01 00 00 lea 0x130(%rbp),%rcx + 1805428ce: e8 8d 80 d0 00 call 0x18124a960 + 1805428d3: 90 nop + 1805428d4: 4c 8b c0 mov %rax,%r8 + 1805428d7: 48 8d 15 a2 a6 f6 01 lea 0x1f6a6a2(%rip),%rdx # 0x1824acf80 + 1805428de: 48 8d 4c 24 38 lea 0x38(%rsp),%rcx + 1805428e3: e8 68 3c d0 00 call 0x181246550 + 1805428e8: 90 nop + 1805428e9: ff c3 inc %ebx + 1805428eb: 89 5c 24 58 mov %ebx,0x58(%rsp) + 1805428ef: 48 8b 8d 30 01 00 00 mov 0x130(%rbp),%rcx + 1805428f6: 48 83 c1 f0 add $0xfffffffffffffff0,%rcx + 1805428fa: 8b 01 mov (%rcx),%eax + 1805428fc: a9 00 00 00 30 test $0x30000000,%eax + 180542901: 75 15 jne 0x180542918 + 180542903: b8 ff ff ff ff mov $0xffffffff,%eax + 180542908: f0 0f c1 01 lock xadd %eax,(%rcx) + 18054290c: ff c8 dec %eax + 18054290e: 83 f8 ff cmp $0xffffffff,%eax + 180542911: 75 05 jne 0x180542918 + 180542913: e8 dc e7 be 00 call 0x1811310f4 + 180542918: 49 8b 4d 50 mov 0x50(%r13),%rcx + 18054291c: 48 8b 01 mov (%rcx),%rax + 18054291f: ff 50 40 call *0x40(%rax) + 180542922: 8b d8 mov %eax,%ebx + 180542924: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542928: 48 8b 01 mov (%rcx),%rax + 18054292b: ff 50 40 call *0x40(%rax) + 18054292e: 8b f8 mov %eax,%edi + 180542930: 49 8b 4d 50 mov 0x50(%r13),%rcx + 180542934: 48 8b 01 mov (%rcx),%rax + 180542937: ff 50 40 call *0x40(%rax) + 18054293a: 44 8b e8 mov %eax,%r13d + 18054293d: 48 8b 44 24 20 mov 0x20(%rsp),%rax + 180542942: 48 8b 48 50 mov 0x50(%rax),%rcx + 180542946: 48 8b 01 mov (%rcx),%rax + 180542949: ff 50 30 call *0x30(%rax) + 18054294c: 66 89 44 24 5c mov %ax,0x5c(%rsp) + 180542951: 48 8b 44 24 20 mov 0x20(%rsp),%rax + 180542956: 48 8b 48 50 mov 0x50(%rax),%rcx + 18054295a: 48 8b 01 mov (%rcx),%rax + 18054295d: ff 50 30 call *0x30(%rax) + 180542960: 66 89 44 24 50 mov %ax,0x50(%rsp) + 180542965: 48 8b 44 24 20 mov 0x20(%rsp),%rax + 18054296a: 48 8b 48 50 mov 0x50(%rax),%rcx + 18054296e: 48 8b 01 mov (%rcx),%rax + 180542971: ff 50 30 call *0x30(%rax) + 180542974: 66 89 44 24 52 mov %ax,0x52(%rsp) + 180542979: 48 8b 44 24 20 mov 0x20(%rsp),%rax + 18054297e: 48 8b 48 50 mov 0x50(%rax),%rcx + 180542982: 48 8b 01 mov (%rcx),%rax + 180542985: ff 50 30 call *0x30(%rax) + 180542988: 66 89 44 24 54 mov %ax,0x54(%rsp) + 18054298d: 8b 54 24 68 mov 0x68(%rsp),%edx + 180542991: 83 c2 ec add $0xffffffec,%edx + 180542994: 33 c0 xor %eax,%eax + 180542996: 48 89 85 80 00 00 00 mov %rax,0x80(%rbp) + 18054299d: 48 89 85 88 00 00 00 mov %rax,0x88(%rbp) + 1805429a4: 48 8b 44 24 20 mov 0x20(%rsp),%rax + 1805429a9: 48 8b 48 50 mov 0x50(%rax),%rcx + 1805429ad: 48 8b 01 mov (%rcx),%rax + 1805429b0: 4c 63 c2 movslq %edx,%r8 + 1805429b3: 48 8d 95 80 00 00 00 lea 0x80(%rbp),%rdx + 1805429ba: ff 90 a0 00 00 00 call *0xa0(%rax) + 1805429c0: 8b d3 mov %ebx,%edx + 1805429c2: 48 8d 4d a8 lea -0x58(%rbp),%rcx + 1805429c6: e8 05 f6 cc 00 call 0x181211fd0 + 1805429cb: 90 nop + 1805429cc: 48 8b 5c 24 38 mov 0x38(%rsp),%rbx + 1805429d1: 48 89 5d a0 mov %rbx,-0x60(%rbp) + 1805429d5: 8b 43 f0 mov -0x10(%rbx),%eax + 1805429d8: a9 00 00 00 30 test $0x30000000,%eax + 1805429dd: 75 0a jne 0x1805429e9 + 1805429df: b8 01 00 00 00 mov $0x1,%eax + 1805429e4: f0 0f c1 43 f0 lock xadd %eax,-0x10(%rbx) + 1805429e9: 4c 8d 05 68 a2 f6 01 lea 0x1f6a268(%rip),%r8 # 0x1824acc58 + 1805429f0: 48 8d 55 a0 lea -0x60(%rbp),%rdx + 1805429f4: 48 8d 8d a0 00 00 00 lea 0xa0(%rbp),%rcx + 1805429fb: e8 e0 3b d0 00 call 0x1812465e0 + 180542a00: 4c 8d 45 a8 lea -0x58(%rbp),%r8 + 180542a04: 48 8b d0 mov %rax,%rdx + 180542a07: 48 8b 4c 24 60 mov 0x60(%rsp),%rcx + 180542a0c: e8 6f 9e ce 00 call 0x18122c880 + 180542a11: 48 8b 8d a0 00 00 00 mov 0xa0(%rbp),%rcx + 180542a18: 48 83 c1 f0 add $0xfffffffffffffff0,%rcx + 180542a1c: 8b 01 mov (%rcx),%eax + 180542a1e: a9 .byte 0xa9 + ... diff --git a/handoff/nls_dasm/vt_54b600.dis b/handoff/nls_dasm/vt_54b600.dis new file mode 100644 index 0000000..a2c4b14 --- /dev/null +++ b/handoff/nls_dasm/vt_54b600.dis @@ -0,0 +1,247 @@ +; vt_54b600 + +/tmp/slice.bin: file format binary + + +Disassembly of section .data: + +000000018054b600 <.data>: + 18054b600: 8b f8 mov %eax,%edi + 18054b602: 00 00 add %al,(%rax) + 18054b604: 00 48 85 add %cl,-0x7b(%rax) + 18054b607: c9 leave + 18054b608: 74 07 je 0x18054b611 + 18054b60a: 48 8b 01 mov (%rcx),%rax + 18054b60d: ff 50 10 call *0x10(%rax) + 18054b610: 90 nop + 18054b611: 48 8b cb mov %rbx,%rcx + 18054b614: e8 07 f0 ff ff call 0x18054a620 + 18054b619: 90 nop + 18054b61a: 40 f6 c7 01 test $0x1,%dil + 18054b61e: 74 0e je 0x18054b62e + 18054b620: ba 30 01 00 00 mov $0x130,%edx + 18054b625: 48 8b cb mov %rbx,%rcx + 18054b628: e8 c7 5a be 00 call 0x1811310f4 + 18054b62d: 90 nop + 18054b62e: 48 8b c3 mov %rbx,%rax + 18054b631: 48 8b 5c 24 40 mov 0x40(%rsp),%rbx + 18054b636: 48 83 c4 30 add $0x30,%rsp + 18054b63a: 5f pop %rdi + 18054b63b: c3 ret + 18054b63c: cc int3 + 18054b63d: cc int3 + 18054b63e: cc int3 + 18054b63f: cc int3 + 18054b640: 40 53 rex push %rbx + 18054b642: 48 83 ec 20 sub $0x20,%rsp + 18054b646: 48 8b d9 mov %rcx,%rbx + 18054b649: 84 d2 test %dl,%dl + 18054b64b: 74 1e je 0x18054b66b + 18054b64d: b9 10 00 00 00 mov $0x10,%ecx + 18054b652: e8 89 60 be 00 call 0x1811316e0 + 18054b657: 44 8b 43 2c mov 0x2c(%rbx),%r8d + 18054b65b: 48 8d 0d 56 27 f6 01 lea 0x1f62756(%rip),%rcx # 0x1824addb8 + 18054b662: 48 89 08 mov %rcx,(%rax) + 18054b665: 44 89 40 0c mov %r8d,0xc(%rax) + 18054b669: eb 46 jmp 0x18054b6b1 + 18054b66b: 8b 81 9c 00 00 00 mov 0x9c(%rcx),%eax + 18054b671: b9 10 00 00 00 mov $0x10,%ecx + 18054b676: 83 f8 04 cmp $0x4,%eax + 18054b679: 75 0e jne 0x18054b689 + 18054b67b: e8 60 60 be 00 call 0x1811316e0 + 18054b680: 48 8d 15 39 24 f6 01 lea 0x1f62439(%rip),%rdx # 0x1824adac0 + 18054b687: eb 1f jmp 0x18054b6a8 + 18054b689: 83 f8 03 cmp $0x3,%eax + 18054b68c: 75 0e jne 0x18054b69c + 18054b68e: e8 4d 60 be 00 call 0x1811316e0 + 18054b693: 48 8d 15 0e 1f f6 01 lea 0x1f61f0e(%rip),%rdx # 0x1824ad5a8 + 18054b69a: eb 0c jmp 0x18054b6a8 + 18054b69c: e8 3f 60 be 00 call 0x1811316e0 + 18054b6a1: 48 8d 15 30 1f f6 01 lea 0x1f61f30(%rip),%rdx # 0x1824ad5d8 + 18054b6a8: 8b 4b 2c mov 0x2c(%rbx),%ecx + 18054b6ab: 89 48 0c mov %ecx,0xc(%rax) + 18054b6ae: 48 89 10 mov %rdx,(%rax) + 18054b6b1: c7 40 08 01 00 00 00 movl $0x1,0x8(%rax) + 18054b6b8: 48 8b 8b 00 01 00 00 mov 0x100(%rbx),%rcx + 18054b6bf: 48 89 83 00 01 00 00 mov %rax,0x100(%rbx) + 18054b6c6: 48 89 44 24 40 mov %rax,0x40(%rsp) + 18054b6cb: 48 85 c9 test %rcx,%rcx + 18054b6ce: 74 10 je 0x18054b6e0 + 18054b6d0: 48 8b 01 mov (%rcx),%rax + 18054b6d3: ba 01 00 00 00 mov $0x1,%edx + 18054b6d8: 48 83 c4 20 add $0x20,%rsp + 18054b6dc: 5b pop %rbx + 18054b6dd: 48 ff 20 rex.W jmp *(%rax) + 18054b6e0: 48 83 c4 20 add $0x20,%rsp + 18054b6e4: 5b pop %rbx + 18054b6e5: c3 ret + 18054b6e6: cc int3 + 18054b6e7: cc int3 + 18054b6e8: cc int3 + 18054b6e9: cc int3 + 18054b6ea: cc int3 + 18054b6eb: cc int3 + 18054b6ec: cc int3 + 18054b6ed: cc int3 + 18054b6ee: cc int3 + 18054b6ef: cc int3 + 18054b6f0: 40 53 rex push %rbx + 18054b6f2: 48 83 ec 20 sub $0x20,%rsp + 18054b6f6: 83 79 28 00 cmpl $0x0,0x28(%rcx) + 18054b6fa: 48 8b d9 mov %rcx,%rbx + 18054b6fd: 7f 08 jg 0x18054b707 + 18054b6ff: 33 c0 xor %eax,%eax + 18054b701: 48 83 c4 20 add $0x20,%rsp + 18054b705: 5b pop %rbx + 18054b706: c3 ret + 18054b707: 80 79 40 00 cmpb $0x0,0x40(%rcx) + 18054b70b: 75 2b jne 0x18054b738 + 18054b70d: 48 8b 49 10 mov 0x10(%rcx),%rcx + 18054b711: 48 8d 54 24 30 lea 0x30(%rsp),%rdx + 18054b716: c7 44 24 30 00 00 00 movl $0x0,0x30(%rsp) + 18054b71d: 00 + 18054b71e: 48 8b 01 mov (%rcx),%rax + 18054b721: ff 50 30 call *0x30(%rax) + 18054b724: 85 c0 test %eax,%eax + 18054b726: 78 10 js 0x18054b738 + 18054b728: 8b 83 98 00 00 00 mov 0x98(%rbx),%eax + 18054b72e: 2b 44 24 30 sub 0x30(%rsp),%eax + 18054b732: 48 83 c4 20 add $0x20,%rsp + 18054b736: 5b pop %rbx + 18054b737: c3 ret + 18054b738: 8b 83 98 00 00 00 mov 0x98(%rbx),%eax + 18054b73e: 48 83 c4 20 add $0x20,%rsp + 18054b742: 5b pop %rbx + 18054b743: c3 ret + 18054b744: cc int3 + 18054b745: cc int3 + 18054b746: cc int3 + 18054b747: cc int3 + 18054b748: cc int3 + 18054b749: cc int3 + 18054b74a: cc int3 + 18054b74b: cc int3 + 18054b74c: cc int3 + 18054b74d: cc int3 + 18054b74e: cc int3 + 18054b74f: cc int3 + 18054b750: 48 8b c4 mov %rsp,%rax + 18054b753: 48 89 50 10 mov %rdx,0x10(%rax) + 18054b757: 55 push %rbp + 18054b758: 57 push %rdi + 18054b759: 48 83 ec 68 sub $0x68,%rsp + 18054b75d: 83 79 28 00 cmpl $0x0,0x28(%rcx) + 18054b761: 41 8b e9 mov %r9d,%ebp + 18054b764: 48 8b f9 mov %rcx,%rdi + 18054b767: 0f 8e b6 01 00 00 jle 0x18054b923 + 18054b76d: 48 89 70 e8 mov %rsi,-0x18(%rax) + 18054b771: 33 f6 xor %esi,%esi + 18054b773: 4c 89 60 e0 mov %r12,-0x20(%rax) + 18054b777: 44 8b e6 mov %esi,%r12d + 18054b77a: 4c 89 68 d8 mov %r13,-0x28(%rax) + 18054b77e: 4d 63 e8 movslq %r8d,%r13 + 18054b781: 45 85 c9 test %r9d,%r9d + 18054b784: 0f 8e 8a 01 00 00 jle 0x18054b914 + 18054b78a: 48 89 58 18 mov %rbx,0x18(%rax) + 18054b78e: 4c 89 70 d0 mov %r14,-0x30(%rax) + 18054b792: 4c 89 78 c8 mov %r15,-0x38(%rax) + 18054b796: 4c 8b bc 24 a0 00 00 mov 0xa0(%rsp),%r15 + 18054b79d: 00 + 18054b79e: 66 90 xchg %ax,%ax + 18054b7a0: 80 7f 40 00 cmpb $0x0,0x40(%rdi) + 18054b7a4: 75 1d jne 0x18054b7c3 + 18054b7a6: 4d 85 ff test %r15,%r15 + 18054b7a9: 74 18 je 0x18054b7c3 + 18054b7ab: 49 8b 4f 58 mov 0x58(%r15),%rcx + 18054b7af: 33 d2 xor %edx,%edx + 18054b7b1: ff 15 69 ed 65 01 call *0x165ed69(%rip) # 0x181baa520 + 18054b7b7: 85 c0 test %eax,%eax + 18054b7b9: 75 08 jne 0x18054b7c3 + 18054b7bb: 49 8b cf mov %r15,%rcx + 18054b7be: e8 7d fc ff ff call 0x18054b440 + 18054b7c3: 83 7f 28 00 cmpl $0x0,0x28(%rdi) + 18054b7c7: 7f 04 jg 0x18054b7cd + 18054b7c9: 8b de mov %esi,%ebx + 18054b7cb: eb 38 jmp 0x18054b805 + 18054b7cd: 80 7f 40 00 cmpb $0x0,0x40(%rdi) + 18054b7d1: 75 2c jne 0x18054b7ff + 18054b7d3: 48 8b 4f 10 mov 0x10(%rdi),%rcx + 18054b7d7: 48 8d 94 24 80 00 00 lea 0x80(%rsp),%rdx + 18054b7de: 00 + 18054b7df: 89 b4 24 80 00 00 00 mov %esi,0x80(%rsp) + 18054b7e6: 48 8b 01 mov (%rcx),%rax + 18054b7e9: ff 50 30 call *0x30(%rax) + 18054b7ec: 85 c0 test %eax,%eax + 18054b7ee: 78 0f js 0x18054b7ff + 18054b7f0: 8b 9f 98 00 00 00 mov 0x98(%rdi),%ebx + 18054b7f6: 2b 9c 24 80 00 00 00 sub 0x80(%rsp),%ebx + 18054b7fd: eb 06 jmp 0x18054b805 + 18054b7ff: 8b 9f 98 00 00 00 mov 0x98(%rdi),%ebx + 18054b805: 3b eb cmp %ebx,%ebp + 18054b807: 0f 4c dd cmovl %ebp,%ebx + 18054b80a: 85 db test %ebx,%ebx + 18054b80c: 75 32 jne 0x18054b840 + 18054b80e: 48 8b 84 24 a8 00 00 mov 0xa8(%rsp),%rax + 18054b815: 00 + 18054b816: 8b 80 b8 01 00 00 mov 0x1b8(%rax),%eax + 18054b81c: 85 c0 test %eax,%eax + 18054b81e: 0f 85 de 00 00 00 jne 0x18054b902 + 18054b824: 48 8b 4f 58 mov 0x58(%rdi),%rcx + 18054b828: ba e8 03 00 00 mov $0x3e8,%edx + 18054b82d: ff 15 ed ec 65 01 call *0x165eced(%rip) # 0x181baa520 + 18054b833: 85 c0 test %eax,%eax + 18054b835: 0f 85 c7 00 00 00 jne 0x18054b902 + 18054b83b: e9 ba 00 00 00 jmp 0x18054b8fa + 18054b840: 80 7f 40 00 cmpb $0x0,0x40(%rdi) + 18054b844: 74 1a je 0x18054b860 + 18054b846: 48 8b 4f 58 mov 0x58(%rdi),%rcx + 18054b84a: ba e8 03 00 00 mov $0x3e8,%edx + 18054b84f: ff 15 cb ec 65 01 call *0x165eccb(%rip) # 0x181baa520 + 18054b855: 3d 02 01 00 00 cmp $0x102,%eax + 18054b85a: 0f 84 a2 00 00 00 je 0x18054b902 + 18054b860: 48 8b 8f f8 00 00 00 mov 0xf8(%rdi),%rcx + 18054b867: 4c 8d 44 24 30 lea 0x30(%rsp),%r8 + 18054b86c: 48 89 74 24 30 mov %rsi,0x30(%rsp) + 18054b871: 8b d3 mov %ebx,%edx + 18054b873: 48 8b 01 mov (%rcx),%rax + 18054b876: ff 50 18 call *0x18(%rax) + 18054b879: 85 c0 test %eax,%eax + 18054b87b: 78 78 js 0x18054b8f5 + 18054b87d: 4d 85 ed test %r13,%r13 + 18054b880: 7e 5f jle 0x18054b8e1 + 18054b882: 4c 8b bc 24 88 00 00 mov 0x88(%rsp),%r15 + 18054b889: 00 + 18054b88a: 49 63 c4 movslq %r12d,%rax + 18054b88d: 4c 8d 34 85 00 00 00 lea 0x0(,%rax,4),%r14 + 18054b894: 00 + 18054b895: 66 66 66 0f 1f 84 00 data16 data16 nopw 0x0(%rax,%rax,1) + 18054b89c: 00 00 00 00 + 18054b8a0: 48 8b 8f 00 01 00 00 mov 0x100(%rdi),%rcx + 18054b8a7: 48 8b 87 88 00 00 00 mov 0x88(%rdi),%rax + 18054b8ae: 4d 8b 0c f7 mov (%r15,%rsi,8),%r9 + 18054b8b2: 48 8b 54 24 30 mov 0x30(%rsp),%rdx + 18054b8b7: 4d 03 ce add %r14,%r9 + 18054b8ba: 4c 8b 11 mov (%rcx),%r10 + 18054b8bd: 44 8b 04 b0 mov (%rax,%rsi,4),%r8d + 18054b8c1: 89 5c 24 28 mov %ebx,0x28(%rsp) + 18054b8c5: c7 44 24 20 00 00 00 movl $0x0,0x20(%rsp) + 18054b8cc: 00 + 18054b8cd: 41 ff 52 08 call *0x8(%r10) + 18054b8d1: 48 ff c6 inc %rsi + 18054b8d4: 49 3b f5 cmp %r13,%rsi + 18054b8d7: 7c c7 jl 0x18054b8a0 + 18054b8d9: 4c 8b bc 24 a0 00 00 mov 0xa0(%rsp),%r15 + 18054b8e0: 00 + 18054b8e1: 48 8b 8f f8 00 00 00 mov 0xf8(%rdi),%rcx + 18054b8e8: 45 33 c0 xor %r8d,%r8d + 18054b8eb: 8b d3 mov %ebx,%edx + 18054b8ed: 48 8b 01 mov (%rcx),%rax + 18054b8f0: ff 50 20 call *0x20(%rax) + 18054b8f3: 33 f6 xor %esi,%esi + 18054b8f5: 2b eb sub %ebx,%ebp + 18054b8f7: 44 03 e3 add %ebx,%r12d + 18054b8fa: 85 ed test %ebp,%ebp + 18054b8fc: 0f .byte 0xf + 18054b8fd: 8f (bad) + 18054b8fe: 9e sahf + 18054b8ff: fe .byte 0xfe diff --git a/scripts/fnall.py b/scripts/fnall.py index 639eb1e..1d84c25 100644 --- a/scripts/fnall.py +++ b/scripts/fnall.py @@ -52,27 +52,17 @@ def pt(req, pid, addr=0, data=0): def find_host(): - # fastest signal: any non-reaper child of a reaper process - reapers = [] - for p in glob.glob('/proc/[0-9]*'): - try: - cmd = open(f'/proc/{p}/cmdline', 'rb').read() - if b'reaper' in cmd and b'yabridge' not in cmd: - reapers.append(int(os.path.basename(p))) - except Exception: - continue + # proven maps-based finder (same as rendersnap.py) for p in glob.glob('/proc/[0-9]*'): pid = int(os.path.basename(p)) try: - st = open(f'/proc/{pid}/stat').read().split() - ppid = int(st[3]) + cmd = open(f'/proc/{pid}/cmdline', 'rb').read().replace(b'\0', b' ').decode('utf8', 'replace') + maps = open(f'/proc/{pid}/maps').read() except Exception: continue - if ppid in reapers and pid not in reapers: + if 'soothe2' in maps and 'reaper' not in cmd: return pid return None - - def drain_waits(): out = [] while True: @@ -95,6 +85,18 @@ def main(): t0 = time.time() while time.time() - t0 < 30 and not host: host = find_host() + if host is None and time.time() - t0 > 2: + # fallback: maps-based + for p in glob.glob('/proc/[0-9]*'): + pid = int(os.path.basename(p)) + try: + cmd = open(f'/proc/{pid}/cmdline', 'rb').read().replace(b'\0', b' ').decode('utf8', 'replace') + maps = open(f'/proc/{pid}/maps').read() + except Exception: + continue + if 'soothe2' in maps and 'reaper' not in cmd: + host = pid + break time.sleep(0.002) if not host: print('NO HOST') @@ -111,8 +113,8 @@ def main(): pt(PTRACE_INTERRUPT, host) # phase 2: pump events, seize newcomers until set stabilizes - stable_until = time.time() + 2.5 - deadline = time.time() + 8.0 + stable_until = time.time() + float(os.environ.get('FN_STAB','0.05')) + deadline = time.time() + 3.0 while time.time() < deadline: for pid, st in drain_waits(): pass # they stay stopped; we hold them diff --git a/scripts/fnsample.py b/scripts/fnsample.py new file mode 100644 index 0000000..485ad63 --- /dev/null +++ b/scripts/fnsample.py @@ -0,0 +1,118 @@ +#!/usr/bin/env python3 +"""fnsample.py — active RIP sampling of all threads via PTRACE_INTERRUPT +during the offline-render burst. Finds which code ACTUALLY executes.""" +import ctypes +import glob +import os +import signal +import struct +import subprocess +import sys +import time + +MOD_LO, MOD_HI = 0x180001000, 0x181baa000 +DUR = float(os.environ.get('SAMP_DUR', '2.5')) + +PTRACE_CONT = 7 +PTRACE_GETREGS = 12 +PTRACE_INTERRUPT = 0x4207 +PTRACE_SEIZE = 0x4206 +PTRACE_O_TRACECLONE = 2 + +libc = ctypes.CDLL('libc.so.6', use_errno=True) + + +class UserRegs(ctypes.Structure): + _fields_ = [(n, ctypes.c_ulonglong) for n in ( + 'r15', 'r14', 'r13', 'r12', 'rbp', 'rbx', 'r11', 'r10', + 'r9', 'r8', 'rax', 'rcx', 'rdx', 'rsi', 'rdi', 'orig_rax', + 'rip', 'cs', 'eflags', 'rsp', 'ss', 'fs_base', 'gs_base', + 'ds', 'es', 'fs', 'gs')] + + +def pt(req, pid, addr=0, data=0): + libc.ptrace.restype = ctypes.c_long + r = libc.ptrace(req, pid, ctypes.c_void_p(addr), ctypes.c_void_p(data)) + return None if r == -1 else r + + +def find_host(): + for p in glob.glob('/proc/[0-9]*'): + pid = int(os.path.basename(p)) + try: + cmd = open(f'/proc/{pid}/cmdline', 'rb').read().replace(b'\0', b' ').decode('utf8', 'replace') + maps = open(f'/proc/{pid}/maps').read() + except Exception: + continue + if 'soothe2' in maps and 'reaper' not in cmd: + return pid + return None + + +def main(): + subprocess.run("pkill -9 -x reaper; pkill -9 -f '[y]abridge'; sleep 1", shell=True) + proc = subprocess.Popen(['/usr/bin/reaper', '-nosplash', '-ignoreerrors', + '-renderproject', '/home/m/soothe-bt/dual_b1q_0.5.rpp'], + stdout=open('/dev/null', 'w'), stderr=subprocess.STDOUT) + host = None + t0 = time.time() + while time.time() - t0 < 30 and not host: + host = find_host() + time.sleep(0.002) + if not host: + print('NO HOST') + return 1 + print('host %d at %.3fs' % (host, time.time() - t0), flush=True) + + seized = {host} + pt(PTRACE_SEIZE, host, 0, PTRACE_O_TRACECLONE) + pt(PTRACE_CONT, host, 0, 0) + + ips = {} + t_end = time.time() + DUR + t_start = None + nsamp = 0 + while time.time() < t_end: + # resweep tids occasionally + for tid_s in glob.glob(f'/proc/{host}/task/*'): + tid = int(os.path.basename(tid_s)) + if tid not in seized: + if pt(PTRACE_SEIZE, tid, 0, PTRACE_O_TRACECLONE) is not None: + seized.add(tid) + for tid in list(seized): + if pt(PTRACE_INTERRUPT, tid) is None: + continue + got = False + for _ in range(20): + try: + pid, status = os.waitpid(tid, os.WUNTRACED | os.WNOHANG) + except ChildProcessError: + break + if pid == tid: + got = True + break + time.sleep(0.0002) + if got: + regs = UserRegs() + if pt(PTRACE_GETREGS, tid, 0, ctypes.addressof(regs)) is not None: + nsamp += 1 + if t_start is None: + t_start = time.time() + if MOD_LO <= regs.rip < MOD_HI: + b = regs.rip >> 4 << 4 + ips[b] = ips.get(b, 0) + 1 + pt(PTRACE_CONT, tid, 0, 0) + print('samples=%d in-module=%d unique64=%d window=%.2fs..%.2fs' + % (nsamp, sum(ips.values()), len(ips), + (t_start or t0) - t0, time.time() - t0)) + core = {a: c for a, c in ips.items() if 0x180520000 <= a < 0x180560000} + for a, c in sorted(core.items(), key=lambda x: -x[1])[:18]: + print('CORE %#x %d' % (a, c)) + for b, c in sorted(ips.items(), key=lambda x: -x[1])[:6]: + print('%#x %d' % (b, c)) + proc.kill() + return 0 + + +if __name__ == '__main__': + sys.exit(main())