Function: lstrlenA
0x74dcad83 <+0x0006> jge 0x74dcad6d <lstrcpynA+112>
0x74dcad85 <+0x0008> sti
0x74dcad86 <+0x0009> roll $0x0,(%edx)
0x74dcad89 <+0x000c> mov 0x8(%ebp),%eax
0x74dcad8c <+0x000f> test %eax,%eax
0x74dcad8e <+0x0011> je 0x74dcadc7 <lstrlenA+74>
0x74dcad90 <+0x0013> andl $0x0,-0x4(%ebp)
0x74dcad94 <+0x0017> lea 0x1(%eax),%edx
0x74dcad97 <+0x001a> mov (%eax),%cl
0x74dcad99 <+0x001c> inc %eax
0x74dcad9a <+0x001d> test %cl,%cl
0x74dcad9c <+0x001f> jne 0x74dcad97 <lstrlenA+26>
0x74dcad9e <+0x0021> sub %edx,%eax
0x74dcada0 <+0x0023> movl $0xfffffffe,-0x4(%ebp)
0x74dcada7 <+0x002a> jmp 0x74dcadc9 <lstrlenA+76>
0x74dcada9 <+0x002c> mov -0x14(%ebp),%eax
0x74dcadac <+0x002f> mov (%eax),%eax
0x74dcadae <+0x0031> mov (%eax),%eax
0x74dcadb0 <+0x0033> xor %ecx,%ecx
0x74dcadb2 <+0x0035> cmp $0xc00000fd,%eax
0x74dcadb7 <+0x003a> setne %cl
0x74dcadba <+0x003d> mov %ecx,%eax
0x74dcadbc <+0x003f> ret
0x74dcadbd <+0x0040> mov -0x18(%ebp),%esp
0x74dcadc0 <+0x0043> movl $0xfffffffe,-0x4(%ebp)
0x74dcadc7 <+0x004a> xor %eax,%eax
0x74dcadc9 <+0x004c> call 0x74df6fc9 <KERNELBASE!IsNLSDefinedString+1209>
0x74dcadce <+0x0051> ret $0x4
0x74dcadd1 <+0x0054> int3
0x74dcadd2 <+0x0055> int3
0x74dcadd3 <+0x0056> int3
0x74dcadd4 <+0x0057> int3
0x74dcadd5 <+0x0058> int3
Function: lstrcmpW
0x74dcadd6 <+0x0000> mov %edi,%edi
0x74dcadd8 <+0x0002> push %ebp
0x74dcadd9 <+0x0003> mov %esp,%ebp
0x74dcaddb <+0x0005> push %esi
0x74dcaddc <+0x0006> mov 0xc(%ebp),%esi
0x74dcaddf <+0x0009> push %edi
0x74dcade0 <+0x000a> mov 0x8(%ebp),%edi
0x74dcade3 <+0x000d> push $0xffffffff
0x74dcade5 <+0x000f> push %esi
0x74dcade6 <+0x0010> push $0xffffffff
0x74dcade8 <+0x0012> push %edi
0x74dcade9 <+0x0013> push $0x0
0x74dcadeb <+0x0015> push $0x400
0x74dcadf0 <+0x001a> call 0x74de2e93 <KERNELBASE!CopySid>
0x74dcadf5 <+0x001f> test %eax,%eax
0x74dcadf7 <+0x0021> jne 0x74dcae54 <lstrcmpW+126>
0x74dcadf9 <+0x0023> push $0xffffffff
Function: lstrlenA
0x74dcad83 <+0x0006> jge 0x74dcad6d <lstrcpynA+112>
0x74dcad85 <+0x0008> sti
0x74dcad86 <+0x0009> roll $0x0,(%edx)
0x74dcad89 <+0x000c> mov 0x8(%ebp),%eax
0x74dcad8c <+0x000f> test %eax,%eax
0x74dcad8e <+0x0011> je 0x74dcadc7 <lstrlenA+74>
0x74dcad90 <+0x0013> andl $0x0,-0x4(%ebp)
0x74dcad94 <+0x0017> lea 0x1(%eax),%edx
0x74dcad97 <+0x001a> mov (%eax),%cl
0x74dcad99 <+0x001c> inc %eax
0x74dcad9a <+0x001d> test %cl,%cl
0x74dcad9c <+0x001f> jne 0x74dcad97 <lstrlenA+26>
0x74dcad9e <+0x0021> sub %edx,%eax
0x74dcada0 <+0x0023> movl $0xfffffffe,-0x4(%ebp)
0x74dcada7 <+0x002a> jmp 0x74dcadc9 <lstrlenA+76>
0x74dcada9 <+0x002c> mov -0x14(%ebp),%eax
0x74dcadac <+0x002f> mov (%eax),%eax
0x74dcadae <+0x0031> mov (%eax),%eax
0x74dcadb0 <+0x0033> xor %ecx,%ecx
0x74dcadb2 <+0x0035> cmp $0xc00000fd,%eax
0x74dcadb7 <+0x003a> setne %cl
0x74dcadba <+0x003d> mov %ecx,%eax
0x74dcadbc <+0x003f> ret
0x74dcadbd <+0x0040> mov -0x18(%ebp),%esp
0x74dcadc0 <+0x0043> movl $0xfffffffe,-0x4(%ebp)
0x74dcadc7 <+0x004a> xor %eax,%eax
0x74dcadc9 <+0x004c> call 0x74df6fc9 <KERNELBASE!IsNLSDefinedString+1209>
0x74dcadce <+0x0051> ret $0x4
0x74dcadd1 <+0x0054> int3
0x74dcadd2 <+0x0055> int3
0x74dcadd3 <+0x0056> int3
0x74dcadd4 <+0x0057> int3
0x74dcadd5 <+0x0058> int3
Function: lstrcmpW
0x74dcadd6 <+0x0000> mov %edi,%edi
0x74dcadd8 <+0x0002> push %ebp
0x74dcadd9 <+0x0003> mov %esp,%ebp
0x74dcaddb <+0x0005> push %esi
0x74dcaddc <+0x0006> mov 0xc(%ebp),%esi
0x74dcaddf <+0x0009> push %edi
0x74dcade0 <+0x000a> mov 0x8(%ebp),%edi
0x74dcade3 <+0x000d> push $0xffffffff
0x74dcade5 <+0x000f> push %esi
0x74dcade6 <+0x0010> push $0xffffffff
0x74dcade8 <+0x0012> push %edi
0x74dcade9 <+0x0013> push $0x0
0x74dcadeb <+0x0015> push $0x400
0x74dcadf0 <+0x001a> call 0x74de2e93 <KERNELBASE!CopySid>
0x74dcadf5 <+0x001f> test %eax,%eax
0x74dcadf7 <+0x0021> jne 0x74dcae54 <lstrcmpW+126>
0x74dcadf9 <+0x0023> push $0xffffffff
To copy to clipboard, switch view to plain text mode
Temporarily disabling breakpoints for unloaded shared library "C:\Qt\Qt5.0.1\5.0.1\mingw47_32\plugins\platforms\qminimald.dll"
Temporarily disabling breakpoints for unloaded shared library "C:\Qt\Qt5.0.1\5.0.1\mingw47_32\plugins\platforms\qwindowsd.dll"
Temporarily disabling breakpoints for unloaded shared library "C:\Qt\Qt5.0.1\5.0.1\mingw47_32\plugins\platforms\qminimald.dll"
Temporarily disabling breakpoints for unloaded shared library "C:\Qt\Qt5.0.1\5.0.1\mingw47_32\plugins\platforms\qwindowsd.dll"
To copy to clipboard, switch view to plain text mode
Bookmarks