.text:0000000140070C34
.text:0000000140070C34 ; __int64 __usercall KiDispatchException@<rax>(PEXCEPTION_RECORD ExceptionRecord@<rcx>, char)
.text:0000000140070C34 KiDispatchException proc near ; CODE XREF: KiInitializeUserApc+342↓p
.text:0000000140070C34 ; KiRaiseException+1A8↓p
.text:0000000140070C34 ; KiExceptionDispatch+BD↓p
.text:0000000140070C34 ; KiFastFailDispatch+DF↓p
.text:0000000140070C34 ; KiParkUmsThread+3D6↓p
.text:0000000140070C34 ; PspInitializeThunkContext+14926F↓p
.text:0000000140070C34 ; KiSwapToUmsThread+420↓p
.text:0000000140070C34 ; DATA XREF: .rdata:00000001402ACCA4↓o
.text:0000000140070C34 ; .pdata:000000014037BF38↓o
.text:0000000140070C34 ; sub_1407AAAC8+44D1↓o
.text:0000000140070C34 ; RtlpFunctionAddressTableEntry+23↓o
.text:0000000140070C34
.text:0000000140070C34 BugCheckParameter4= qword ptr -1B0h
.text:0000000140070C34 var_1A8= qword ptr -1A8h
.text:0000000140070C34 var_1A0= dword ptr -1A0h
.text:0000000140070C34 var_198= qword ptr -198h
.text:0000000140070C34 var_190= dword ptr -190h
.text:0000000140070C34 var_188= qword ptr -188h
.text:0000000140070C34 var_180= dword ptr -180h
.text:0000000140070C34 var_17C= dword ptr -17Ch
.text:0000000140070C34 var_178= dword ptr -178h
.text:0000000140070C34 var_170= qword ptr -170h
.text:0000000140070C34 var_168= qword ptr -168h
.text:0000000140070C34 var_160= qword ptr -160h
.text:0000000140070C34 var_158= qword ptr -158h
.text:0000000140070C34 var_150= qword ptr -150h
.text:0000000140070C34 var_148= qword ptr -148h
.text:0000000140070C34 var_140= qword ptr -140h
.text:0000000140070C34 var_138= qword ptr -138h
.text:0000000140070C34 var_130= qword ptr -130h
.text:0000000140070C34 var_128= qword ptr -128h
.text:0000000140070C34 var_120= qword ptr -120h
.text:0000000140070C34 var_118= qword ptr -118h
.text:0000000140070C34 var_110= qword ptr -110h
.text:0000000140070C34 var_108= qword ptr -108h
.text:0000000140070C34 var_100= qword ptr -100h
.text:0000000140070C34 var_F0= dword ptr -0F0h
.text:0000000140070C34 var_E0= qword ptr -0E0h
.text:0000000140070C34 var_D8= dword ptr -0D8h
.text:0000000140070C34 var_D0= byte ptr -0D0h
.text:0000000140070C34 var_58= byte ptr -58h
.text:0000000140070C34 var_50= xmmword ptr -50h
.text:0000000140070C34 var_40= qword ptr -40h
.text:0000000140070C34 var_38= qword ptr -38h
.text:0000000140070C34 arg_20= byte ptr 30h
.text:0000000140070C34
.text:0000000140070C34 ; FUNCTION CHUNK AT .text:000000014015BC0C SIZE 000000C3 BYTES
.text:0000000140070C34 ; FUNCTION CHUNK AT .text:000000014018730E SIZE 00000120 BYTES
.text:0000000140070C34
.text:0000000140070C34 ; __unwind { // __GSHandlerCheck_SEH
.text:0000000140070C34 40 55 push rbp
.text:0000000140070C36 53 push rbx
.text:0000000140070C37 56 push rsi
.text:0000000140070C38 41 54 push r12
.text:0000000140070C3A 41 55 push r13
.text:0000000140070C3C 41 56 push r14
.text:0000000140070C3E 41 57 push r15
.text:0000000140070C40 48 81 EC A0 01 00 00 sub rsp, 1A0h
.text:0000000140070C47 48 8D 6C 24 30 lea rbp, [rsp+30h]
.text:0000000140070C4C 48 8B 05 45 44 2A 00 mov rax, cs:__security_cookie
.text:0000000140070C53 48 33 C5 xor rax, rbp
.text:0000000140070C56 48 89 85 68 01 00 00 mov [rbp+1A0h+var_38], rax
.text:0000000140070C5D 45 8A F9 mov r15b, r9b
.text:0000000140070C60 49 8B F0 mov rsi, r8
.text:0000000140070C63 4C 8B E2 mov r12, rdx
.text:0000000140070C66 48 8B D9 mov rbx, rcx
.text:0000000140070C69 48 89 4D 30 mov [rbp+1A0h+var_170], rcx
.text:0000000140070C6D 48 89 95 80 00 00 00 mov [rbp+1A0h+var_120], rdx
.text:0000000140070C74 4C 89 45 58 mov [rbp+1A0h+var_148], r8
.text:0000000140070C78 44 88 4D 00 mov byte ptr [rbp+1A0h+var_1A0], r9b
.text:0000000140070C7C 65 48 8B 04 25 88 01 00 00 mov rax, gs:188h
.text:0000000140070C85 48 8B 80 B8 00 00 00 mov rax, [rax+0B8h]
.text:0000000140070C8C 48 89 45 08 mov [rbp+1A0h+var_198], rax
.text:0000000140070C90 48 89 45 70 mov [rbp+1A0h+var_130], rax
.text:0000000140070C94 65 FF 04 25 B4 5C 00 00 inc dword ptr gs:5CB4h
.text:0000000140070C9C 41 BD 1F 00 10 00 mov r13d, 10001Fh
.text:0000000140070CA2 44 89 6D 10 mov [rbp+1A0h+var_190], r13d
.text:0000000140070CA6 45 84 C9 test r9b, r9b
.text:0000000140070CA9 0F 85 CC 04 00 00 jnz loc_14007117B
.text:0000000140070CA9
.text:0000000140070CAF
.text:0000000140070CAF loc_140070CAF: ; CODE XREF: KiDispatchException+563↓j
.text:0000000140070CAF 48 8D 55 24 lea rdx, [rbp+1A0h+var_17C]
.text:0000000140070CB3 41 8B CD mov ecx, r13d
.text:0000000140070CB6 E8 35 9A 03 00 call RtlGetExtendedContextLength
.text:0000000140070CB6
.text:0000000140070CBB 8B 45 24 mov eax, [rbp+1A0h+var_17C]
.text:0000000140070CBE 48 8D 48 0F lea rcx, [rax+0Fh]
.text:0000000140070CC2 48 3B C8 cmp rcx, rax
.text:0000000140070CC5 77 0A ja short loc_140070CD1
.text:0000000140070CC5
.text:0000000140070CC7 48 B9 F0 FF FF FF FF FF FF 0F mov rcx, 0FFFFFFFFFFFFFF0h
.text:0000000140070CC7
.text:0000000140070CD1
.text:0000000140070CD1 loc_140070CD1: ; CODE XREF: KiDispatchException+91↑j
.text:0000000140070CD1 48 83 E1 F0 and rcx, 0FFFFFFFFFFFFFFF0h
.text:0000000140070CD5 48 8B C1 mov rax, rcx
.text:0000000140070CD8 E8 23 1F 0E 00 call __chkstk
.text:0000000140070CD8
.text:0000000140070CDD 48 2B E1 sub rsp, rcx
.text:0000000140070CE0 4C 8D 74 24 30 lea r14, [rsp+1D0h+var_1A0]
.text:0000000140070CE5 4C 89 75 68 mov [rbp+1A0h+var_138], r14
.text:0000000140070CE9 4C 8D 45 40 lea r8, [rbp+1A0h+var_160]
.text:0000000140070CED 41 8B D5 mov edx, r13d
.text:0000000140070CF0 49 8B CE mov rcx, r14
.text:0000000140070CF3 E8 AC 9A 03 00 call RtlInitializeExtendedContext
.text:0000000140070CF3
.text:0000000140070CF8 89 45 20 mov [rbp+1A0h+var_180], eax
.text:0000000140070CFB 4D 8B C6 mov r8, r14
.text:0000000140070CFE 49 8B D4 mov rdx, r12
.text:0000000140070D01 48 8B CE mov rcx, rsi
.text:0000000140070D04 E8 DF 1B 00 00 call KeContextFromKframes
.text:0000000140070D04
.text:0000000140070D09 81 3B 03 00 00 80 cmp dword ptr [rbx], 80000003h
.text:0000000140070D0F 0F 84 9E 04 00 00 jz loc_1400711B3
.text:0000000140070D0F
.text:0000000140070D15
.text:0000000140070D15 loc_140070D15: ; CODE XREF: KiDispatchException+586↓j
.text:0000000140070D15 45 84 FF test r15b, r15b
.text:0000000140070D18 0F 85 7E 04 00 00 jnz loc_14007119C
.text:0000000140070D18
.text:0000000140070D1E
.text:0000000140070D1E loc_140070D1E: ; CODE XREF: KiDispatchException+574↓j
.text:0000000140070D1E 45 8A C7 mov r8b, r15b
.text:0000000140070D21 49 8B D6 mov rdx, r14 ; int
.text:0000000140070D24 48 8B CB mov rcx, rbx ; int
.text:0000000140070D27 E8 FC 04 00 00 call KiPreprocessFault
.text:0000000140070D27
.text:0000000140070D2C 84 C0 test al, al
.text:0000000140070D2E 0F 85 8B 04 00 00 jnz loc_1400711BF
.text:0000000140070D2E
.text:0000000140070D34
.text:0000000140070D34 loc_140070D34: ; CODE XREF: KiDispatchException+1166FC↓j
.text:0000000140070D34 45 84 FF test r15b, r15b
.text:0000000140070D37 75 4C jnz short loc_140070D85
.text:0000000140070D37
.text:0000000140070D39 44 38 BD D0 01 00 00 cmp [rbp+1A0h+arg_20], r15b
.text:0000000140070D40 0F 84 EF 65 11 00 jz loc_140187335
.text:0000000140070D40
.text:0000000140070D46 44 88 7C 24 28 mov byte ptr [rsp+1D0h+var_1A8], r15b
.text:0000000140070D4B 44 88 7C 24 20 mov byte ptr [rsp+1D0h+BugCheckParameter4], r15b
.text:0000000140070D50 4D 8B CE mov r9, r14
.text:0000000140070D53 4C 8B C3 mov r8, rbx
.text:0000000140070D56 49 8B D4 mov rdx, r12
.text:0000000140070D59 48 8B CE mov rcx, rsi
.text:0000000140070D5C 48 8B 05 2D 34 35 00 mov rax, cs:KiDebugRoutine
.text:0000000140070D63 FF D0 call rax ; KdpStub
.text:0000000140070D63
.text:0000000140070D65 84 C0 test al, al
.text:0000000140070D67 0F 85 52 04 00 00 jnz loc_1400711BF
.text:0000000140070D67
.text:0000000140070D6D 49 8B D6 mov rdx, r14 ; Context
.text:0000000140070D70 48 8B CB mov rcx, rbx ; ExceptionRecord
.text:0000000140070D73 E8 F0 2E 00 00 call RtlDispatchException
.text:0000000140070D73
.text:0000000140070D78 84 C0 test al, al
.text:0000000140070D7A 0F 84 B5 65 11 00 jz loc_140187335
.text:0000000140070D7A
.text:0000000140070D80 E9 3A 04 00 00 jmp loc_1400711BF
.text:0000000140070D80
.text:0000000140070D85 ; ---------------------------------------------------------------------------
.text:0000000140070D85
.text:0000000140070D85 loc_140070D85: ; CODE XREF: KiDispatchException+103↑j
.text:0000000140070D85 49 8B 96 98 00 00 00 mov rdx, [r14+98h]
.text:0000000140070D8C 48 89 55 18 mov [rbp+1A0h+var_188], rdx
.text:0000000140070D90 48 89 55 38 mov [rbp+1A0h+var_168], rdx
.text:0000000140070D94 48 8B 45 08 mov rax, [rbp+1A0h+var_198]
.text:0000000140070D98 8B 80 AC 06 00 00 mov eax, [rax+6ACh]
.text:0000000140070D9E A8 01 test al, 1
.text:0000000140070DA0 75 3D jnz short loc_140070DDF
.text:0000000140070DA0
.text:0000000140070DA2 65 48 8B 04 25 88 01 00 00 mov rax, gs:188h
.text:0000000140070DAB 48 8B 88 B8 00 00 00 mov rcx, [rax+0B8h]
.text:0000000140070DB2 48 83 B9 28 04 00 00 00 cmp qword ptr [rcx+428h], 0
.text:0000000140070DBA 74 0C jz short loc_140070DC8
.text:0000000140070DBA
.text:0000000140070DBC 81 3B 02 00 00 80 cmp dword ptr [rbx], 80000002h
.text:0000000140070DC2 0F 84 B3 65 11 00 jz loc_14018737B
.text:0000000140070DC2
.text:0000000140070DC8
.text:0000000140070DC8 loc_140070DC8: ; CODE XREF: KiDispatchException+186↑j
.text:0000000140070DC8 ; KiDispatchException+116751↓j
.text:0000000140070DC8 41 0F B7 46 38 movzx eax, word ptr [r14+38h]
.text:0000000140070DCD B9 F8 FF 00 00 mov ecx, 0FFF8h
.text:0000000140070DD2 66 23 C1 and ax, cx
.text:0000000140070DD5 66 83 F8 20 cmp ax, 20h ; ' '
.text:0000000140070DD9 0F 84 BB 65 11 00 jz loc_14018739A
.text:0000000140070DD9
.text:0000000140070DDF
.text:0000000140070DDF loc_140070DDF: ; CODE XREF: KiDispatchException+16C↑j
.text:0000000140070DDF ; KiDispatchException+116794↓j
.text:0000000140070DDF 8B 4B 18 mov ecx, [rbx+18h]
.text:0000000140070DE2 48 83 C1 04 add rcx, 4
.text:0000000140070DE6 48 8D 0C CB lea rcx, [rbx+rcx*8] ; void *
.text:0000000140070DEA 4C 8B C3 mov r8, rbx
.text:0000000140070DED 4C 2B C1 sub r8, rcx
.text:0000000140070DF0 49 81 C0 98 00 00 00 add r8, 98h ; Size
.text:0000000140070DF7 33 D2 xor edx, edx ; Val
.text:0000000140070DF9 E8 82 77 0E 00 call memset
.text:0000000140070DF9
.text:0000000140070DFE 80 BD D0 01 00 00 00 cmp [rbp+1A0h+arg_20], 0
.text:0000000140070E05 0F 84 CD 03 00 00 jz loc_1400711D8
.text:0000000140070E05
.text:0000000140070E0B 48 8B CB mov rcx, rbx
.text:0000000140070E0E E8 ED 21 6B 00 call KdIsThisAKdTrap
.text:0000000140070E0E
.text:0000000140070E13 65 48 8B 0C 25 88 01 00 00 mov rcx, gs:188h
.text:0000000140070E1C 48 8B 91 B8 00 00 00 mov rdx, [rcx+0B8h]
.text:0000000140070E23 48 83 BA 20 04 00 00 00 cmp qword ptr [rdx+420h], 0
.text:0000000140070E2B 0F 85 9C 65 11 00 jnz loc_1401873CD
.text:0000000140070E2B
.text:0000000140070E31 8A 0D BC 9A 2C 00 mov cl, cs:KdIgnoreUmExceptions
.text:0000000140070E37 84 C9 test cl, cl
.text:0000000140070E39 0F 85 8E 65 11 00 jnz loc_1401873CD
.text:0000000140070E39
.text:0000000140070E3F
.text:0000000140070E3F loc_140070E3F: ; CODE XREF: KiDispatchException+1167A1↓j
.text:0000000140070E3F C6 44 24 28 00 mov byte ptr [rsp+1D0h+var_1A8], 0
.text:0000000140070E44 44 88 7C 24 20 mov byte ptr [rsp+1D0h+BugCheckParameter4], r15b
.text:0000000140070E49 4D 8B CE mov r9, r14
.text:0000000140070E4C 4C 8B C3 mov r8, rbx
.text:0000000140070E4F 49 8B D4 mov rdx, r12
.text:0000000140070E52 48 8B CE mov rcx, rsi
.text:0000000140070E55 48 8B 05 34 33 35 00 mov rax, cs:KiDebugRoutine
.text:0000000140070E5C FF D0 call rax ; KdpStub
.text:0000000140070E5C
.text:0000000140070E5E 84 C0 test al, al
.text:0000000140070E60 0F 85 59 03 00 00 jnz loc_1400711BF
.text:0000000140070E60
.text:0000000140070E66
.text:0000000140070E66 loc_140070E66: ; CODE XREF: KiDispatchException+11679B↓j
.text:0000000140070E66 45 33 C0 xor r8d, r8d
.text:0000000140070E69 B2 01 mov dl, 1
.text:0000000140070E6B 48 8B CB mov rcx, rbx
.text:0000000140070E6E E8 61 5B 4B 00 call DbgkForwardException
.text:0000000140070E6E
.text:0000000140070E73 84 C0 test al, al
.text:0000000140070E75 0F 85 DE 02 00 00 jnz loc_140071159
.text:0000000140070E75
.text:0000000140070E7B 48 8B 45 08 mov rax, [rbp+1A0h+var_198]
.text:0000000140070E7F 48 83 B8 F0 06 00 00 00 cmp qword ptr [rax+6F0h], 0
.text:0000000140070E87 0F 85 4D 65 11 00 jnz loc_1401873DA
.text:0000000140070E87
.text:0000000140070E8D
.text:0000000140070E8D loc_140070E8D: ; CODE XREF: KiDispatchException+1167CB↓j
.text:0000000140070E8D FA cli
.text:0000000140070E8E 0F BA B6 78 01 00 00 08 btr dword ptr [rsi+178h], 8
.text:0000000140070E96 FB sti
.text:0000000140070E97 C7 85 B0 00 00 00 05 00 00 C0 mov [rbp+1A0h+var_F0], 0C0000005h
.text:0000000140070EA1 4C 8B 65 18 mov r12, [rbp+1A0h+var_188]
.text:0000000140070EA1
.text:0000000140070EA5
.text:0000000140070EA5 loc_140070EA5: ; CODE XREF: KiDispatchException+50C↓j
.text:0000000140070EA5 90 nop
.text:0000000140070EA5
.text:0000000140070EA6
.text:0000000140070EA6 loc_140070EA6: ; DATA XREF: .rdata:00000001402ACC8C↓o
.text:0000000140070EA6 ; __try { // __except at loc_1400710B4
.text:0000000140070EA6 49 8B D4 mov rdx, r12
.text:0000000140070EA9 48 89 55 48 mov [rbp+1A0h+var_158], rdx
.text:0000000140070EAD 41 8B C5 mov eax, r13d
.text:0000000140070EB0 B9 40 00 10 00 mov ecx, 100040h
.text:0000000140070EB5 23 C1 and eax, ecx
.text:0000000140070EB7 3B C1 cmp eax, ecx
.text:0000000140070EB9 75 16 jnz short loc_140070ED1
.text:0000000140070EB9
.text:0000000140070EBB 48 8B 45 40 mov rax, [rbp+1A0h+var_160]
.text:0000000140070EBF 8B 48 14 mov ecx, [rax+14h]
.text:0000000140070EC2 48 2B D1 sub rdx, rcx
.text:0000000140070EC5 48 89 55 48 mov [rbp+1A0h+var_158], rdx
.text:0000000140070EC9 48 83 E2 C0 and rdx, 0FFFFFFFFFFFFFFC0h
.text:0000000140070ECD 48 89 55 48 mov [rbp+1A0h+var_158], rdx
.text:0000000140070ECD
.text:0000000140070ED1
.text:0000000140070ED1 loc_140070ED1: ; CODE XREF: KiDispatchException+285↑j
.text:0000000140070ED1 48 8D 42 D8 lea rax, [rdx-28h]
.text:0000000140070ED5 48 83 E0 F0 and rax, 0FFFFFFFFFFFFFFF0h
.text:0000000140070ED9 48 89 45 18 mov [rbp+1A0h+var_188], rax
.text:0000000140070EDD 48 89 45 78 mov [rbp+1A0h+var_128], rax
.text:0000000140070EE1 4C 8D 80 60 FF FF FF lea r8, [rax-0A0h]
.text:0000000140070EE8 4C 89 45 08 mov [rbp+1A0h+var_198], r8
.text:0000000140070EEC 4C 89 85 98 00 00 00 mov [rbp+1A0h+var_108], r8
.text:0000000140070EF3 49 83 C0 E0 add r8, 0FFFFFFFFFFFFFFE0h
.text:0000000140070EF7 4C 89 85 90 00 00 00 mov [rbp+1A0h+var_110], r8
.text:0000000140070EFE 4D 8D B8 30 FB FF FF lea r15, [r8-4D0h]
.text:0000000140070F05 4C 89 7D 60 mov [rbp+1A0h+var_140], r15
.text:0000000140070F09 49 8B C7 mov rax, r15
.text:0000000140070F0C 49 2B C0 sub rax, r8
.text:0000000140070F0F 89 85 50 01 00 00 mov dword ptr [rbp+1A0h+var_50], eax
.text:0000000140070F15 49 8B CC mov rcx, r12
.text:0000000140070F18 49 2B CF sub rcx, r15
.text:0000000140070F1B 89 8D 54 01 00 00 mov dword ptr [rbp+1A0h+var_50+4], ecx
.text:0000000140070F21 89 85 58 01 00 00 mov dword ptr [rbp+1A0h+var_50+8], eax
.text:0000000140070F27 C7 85 5C 01 00 00 D0 04 00 00 mov dword ptr [rbp+1A0h+var_50+0Ch], 4D0h
.text:0000000140070F31 48 8B C2 mov rax, rdx
.text:0000000140070F34 49 2B C0 sub rax, r8
.text:0000000140070F37 89 85 60 01 00 00 mov dword ptr [rbp+1A0h+var_40], eax
.text:0000000140070F3D 49 8B C4 mov rax, r12
.text:0000000140070F40 48 2B C2 sub rax, rdx
.text:0000000140070F43 89 85 64 01 00 00 mov dword ptr [rbp+1A0h+var_40+4], eax
.text:0000000140070F49 48 8D 41 FF lea rax, [rcx-1]
.text:0000000140070F4D 48 3D FE 0F 00 00 cmp rax, 0FFEh
.text:0000000140070F53 0F 87 25 01 00 00 ja loc_14007107E
.text:0000000140070F53
.text:0000000140070F59 41 F6 C7 0F test r15b, 0Fh
.text:0000000140070F5D 0F 85 16 01 00 00 jnz loc_140071079
.text:0000000140070F5D
.text:0000000140070F63 4C 3B 3D 56 42 35 00 cmp r15, cs:MmUserProbeAddress
.text:0000000140070F6A 4C 0F 43 3D 4E 42 35 00 cmovnb r15, cs:MmUserProbeAddress
.text:0000000140070F72 41 8A 07 mov al, [r15]
.text:0000000140070F75 41 88 07 mov [r15], al
.text:0000000140070F78 41 8A 44 0F FF mov al, [r15+rcx-1]
.text:0000000140070F7D 41 88 44 0F FF mov [r15+rcx-1], al
.text:0000000140070F82 48 8B 4D 78 mov rcx, [rbp+1A0h+var_128]
.text:0000000140070F86 48 8B 95 98 00 00 00 mov rdx, [rbp+1A0h+var_108]
.text:0000000140070F8D 4C 8B 7D 60 mov r15, [rbp+1A0h+var_140]
.text:0000000140070F8D
.text:0000000140070F91
.text:0000000140070F91 loc_140070F91: ; CODE XREF: KiDispatchException+463↓j
.text:0000000140070F91 4C 89 61 18 mov [rcx+18h], r12
.text:0000000140070F95 49 8B 86 F8 00 00 00 mov rax, [r14+0F8h]
.text:0000000140070F9C 48 89 01 mov [rcx], rax
.text:0000000140070F9F 0F 10 03 movups xmm0, xmmword ptr [rbx]
.text:0000000140070FA2 0F 11 02 movups xmmword ptr [rdx], xmm0
.text:0000000140070FA5 0F 10 4B 10 movups xmm1, xmmword ptr [rbx+10h]
.text:0000000140070FA9 0F 11 4A 10 movups xmmword ptr [rdx+10h], xmm1
.text:0000000140070FAD 0F 10 43 20 movups xmm0, xmmword ptr [rbx+20h]
.text:0000000140070FB1 0F 11 42 20 movups xmmword ptr [rdx+20h], xmm0
.text:0000000140070FB5 0F 10 4B 30 movups xmm1, xmmword ptr [rbx+30h]
.text:0000000140070FB9 0F 11 4A 30 movups xmmword ptr [rdx+30h], xmm1
.text:0000000140070FBD 0F 10 43 40 movups xmm0, xmmword ptr [rbx+40h]
.text:0000000140070FC1 0F 11 42 40 movups xmmword ptr [rdx+40h], xmm0
.text:0000000140070FC5 0F 10 4B 50 movups xmm1, xmmword ptr [rbx+50h]
.text:0000000140070FC9 0F 11 4A 50 movups xmmword ptr [rdx+50h], xmm1
.text:0000000140070FCD 0F 10 43 60 movups xmm0, xmmword ptr [rbx+60h]
.text:0000000140070FD1 0F 11 42 60 movups xmmword ptr [rdx+60h], xmm0
.text:0000000140070FD5 B8 80 00 00 00 mov eax, 80h
.text:0000000140070FDA 48 03 D0 add rdx, rax
.text:0000000140070FDD 0F 10 43 70 movups xmm0, xmmword ptr [rbx+70h]
.text:0000000140070FE1 0F 11 42 F0 movups xmmword ptr [rdx-10h], xmm0
.text:0000000140070FE5 0F 10 0C 03 movups xmm1, xmmword ptr [rbx+rax]
.text:0000000140070FE9 0F 11 0A movups xmmword ptr [rdx], xmm1
.text:0000000140070FEC 48 8B 44 03 10 mov rax, [rbx+rax+10h]
.text:0000000140070FF1 48 89 42 10 mov [rdx+10h], rax
.text:0000000140070FF5 48 83 64 24 28 00 and [rsp+1D0h+var_1A8], 0
.text:0000000140070FFB 48 8B 45 40 mov rax, [rbp+1A0h+var_160]
.text:0000000140070FFF 48 89 44 24 20 mov [rsp+1D0h+BugCheckParameter4], rax
.text:0000000140071004 45 8B CD mov r9d, r13d
.text:0000000140071007 4C 8D 85 50 01 00 00 lea r8, [rbp+1A0h+var_50]
.text:000000014007100E 48 8B 9D 90 00 00 00 mov rbx, [rbp+1A0h+var_110]
.text:0000000140071015 48 8B D3 mov rdx, rbx
.text:0000000140071018 B1 01 mov cl, 1
.text:000000014007101A E8 E9 95 03 00 call RtlpCopyExtendedContext
.text:000000014007101A
.text:000000014007101F 89 45 20 mov [rbp+1A0h+var_180], eax
.text:0000000140071022 0F 10 85 50 01 00 00 movups xmm0, [rbp+1A0h+var_50]
.text:0000000140071029 0F 11 03 movups xmmword ptr [rbx], xmm0
.text:000000014007102C F2 0F 10 8D 60 01 00 00 movsd xmm1, [rbp+1A0h+var_40]
.text:0000000140071034 F2 0F 11 4B 10 movsd qword ptr [rbx+10h], xmm1
.text:0000000140071039 FA cli
.text:000000014007103A 4C 89 BE 80 01 00 00 mov [rsi+180h], r15
.text:0000000140071041 B8 33 00 00 00 mov eax, 33h ; '3'
.text:0000000140071046 66 89 86 70 01 00 00 mov [rsi+170h], ax
.text:000000014007104D 48 8B 05 1C 46 35 00 mov rax, cs:KeUserExceptionDispatcher
.text:0000000140071054 48 89 86 68 01 00 00 mov [rsi+168h], rax
.text:000000014007105B 65 48 8B 04 25 88 01 00 00 mov rax, gs:188h
.text:0000000140071064 48 8B 88 B8 00 00 00 mov rcx, [rax+0B8h]
.text:000000014007106B 48 8B 91 C8 02 00 00 mov rdx, [rcx+2C8h]
.text:0000000140071072 48 85 D2 test rdx, rdx
.text:0000000140071075 75 25 jnz short loc_14007109C
.text:0000000140071075
.text:0000000140071077 EB 35 jmp short loc_1400710AE
.text:0000000140071077
.text:0000000140071079 ; ---------------------------------------------------------------------------
.text:0000000140071079
.text:0000000140071079 loc_140071079: ; CODE XREF: KiDispatchException+329↑j
.text:0000000140071079 E8 AE F3 67 00 call ExRaiseDatatypeMisalignment
.text:0000000140071079
.text:000000014007107E ; ---------------------------------------------------------------------------
.text:000000014007107E
.text:000000014007107E loc_14007107E: ; CODE XREF: KiDispatchException+31F↑j
.text:000000014007107E 41 B8 10 00 00 00 mov r8d, 10h ; Alignment
.text:0000000140071084 48 8B D1 mov rdx, rcx ; Length
.text:0000000140071087 49 8B CF mov rcx, r15 ; Address
.text:000000014007108A E8 41 FB 3A 00 call ProbeForWrite
.text:000000014007108A
.text:000000014007108F 48 8B 4D 18 mov rcx, [rbp+1A0h+var_188]
.text:0000000140071093 48 8B 55 08 mov rdx, [rbp+1A0h+var_198]
.text:0000000140071097 E9 F5 FE FF FF jmp loc_140070F91
.text:0000000140071097
.text:000000014007109C ; ---------------------------------------------------------------------------
.text:000000014007109C
.text:000000014007109C loc_14007109C: ; CODE XREF: KiDispatchException+441↑j
.text:000000014007109C 48 8B 86 68 01 00 00 mov rax, [rsi+168h]
.text:00000001400710A3 48 89 46 58 mov [rsi+58h], rax
.text:00000001400710A7 48 89 96 68 01 00 00 mov [rsi+168h], rdx
.text:00000001400710A7
.text:00000001400710AE
.text:00000001400710AE loc_1400710AE: ; CODE XREF: KiDispatchException+443↑j
.text:00000001400710AE FB sti
.text:00000001400710AF E9 A5 00 00 00 jmp loc_140071159
.text:00000001400710AF ; } // starts at 140070EA6
.text:00000001400710AF
.text:00000001400710B4 ; ---------------------------------------------------------------------------
.text:00000001400710B4
.text:00000001400710B4 loc_1400710B4: ; DATA XREF: .rdata:00000001402ACC8C↓o
.text:00000001400710B4 ; __except(loc_14015BC0C) // owned by 140070EA6
.text:00000001400710B4 48 8B 5D 30 mov rbx, [rbp+1A0h+var_170]
.text:00000001400710B8 48 8B 75 58 mov rsi, [rbp+1A0h+var_148]
.text:00000001400710BC 81 BD B0 00 00 00 FD 00 00 C0 cmp [rbp+1A0h+var_F0], 0C00000FDh
.text:00000001400710C6 75 7D jnz short loc_140071145
.text:00000001400710C6
.text:00000001400710C8 48 8B 43 10 mov rax, [rbx+10h]
.text:00000001400710CC 48 89 85 C0 00 00 00 mov [rbp+1A0h+var_E0], rax
.text:00000001400710D3 48 8D 85 B0 00 00 00 lea rax, [rbp+1A0h+var_F0]
.text:00000001400710DA 0F 10 00 movups xmm0, xmmword ptr [rax]
.text:00000001400710DD 0F 11 03 movups xmmword ptr [rbx], xmm0
.text:00000001400710E0 0F 10 48 10 movups xmm1, xmmword ptr [rax+10h]
.text:00000001400710E4 0F 11 4B 10 movups xmmword ptr [rbx+10h], xmm1
.text:00000001400710E8 0F 10 40 20 movups xmm0, xmmword ptr [rax+20h]
.text:00000001400710EC 0F 11 43 20 movups xmmword ptr [rbx+20h], xmm0
.text:00000001400710F0 0F 10 48 30 movups xmm1, xmmword ptr [rax+30h]
.text:00000001400710F4 0F 11 4B 30 movups xmmword ptr [rbx+30h], xmm1
.text:00000001400710F8 0F 10 40 40 movups xmm0, xmmword ptr [rax+40h]
.text:00000001400710FC 0F 11 43 40 movups xmmword ptr [rbx+40h], xmm0
.text:0000000140071100 0F 10 48 50 movups xmm1, xmmword ptr [rax+50h]
.text:0000000140071104 0F 11 4B 50 movups xmmword ptr [rbx+50h], xmm1
.text:0000000140071108 0F 10 40 60 movups xmm0, xmmword ptr [rax+60h]
.text:000000014007110C 0F 11 43 60 movups xmmword ptr [rbx+60h], xmm0
.text:0000000140071110 0F 10 48 70 movups xmm1, xmmword ptr [rax+70h]
.text:0000000140071114 0F 11 4B 70 movups xmmword ptr [rbx+70h], xmm1
.text:0000000140071118 0F 10 80 80 00 00 00 movups xmm0, xmmword ptr [rax+80h]
.text:000000014007111F 0F 11 83 80 00 00 00 movups xmmword ptr [rbx+80h], xmm0
.text:0000000140071126 48 8B 80 90 00 00 00 mov rax, [rax+90h]
.text:000000014007112D 48 89 83 90 00 00 00 mov [rbx+90h], rax
.text:0000000140071134 44 8B 6D 10 mov r13d, [rbp+1A0h+var_190]
.text:0000000140071138 4C 8B 75 68 mov r14, [rbp+1A0h+var_138]
.text:000000014007113C 4C 8B 65 38 mov r12, [rbp+1A0h+var_168]
.text:0000000140071140 E9 60 FD FF FF jmp loc_140070EA5
.text:0000000140071140
.text:0000000140071145 ; ---------------------------------------------------------------------------
.text:0000000140071145
.text:0000000140071145 loc_140071145: ; CODE XREF: KiDispatchException+492↑j
.text:0000000140071145 4C 8B 75 70 mov r14, [rbp+1A0h+var_130]
.text:0000000140071149 4C 8B A5 80 00 00 00 mov r12, [rbp+1A0h+var_120]
.text:0000000140071150 44 8A 7D 00 mov r15b, byte ptr [rbp+1A0h+var_1A0]
.text:0000000140071154 E9 83 00 00 00 jmp loc_1400711DC
.text:0000000140071154
.text:0000000140071159 ; ---------------------------------------------------------------------------
.text:0000000140071159
.text:0000000140071159 loc_140071159: ; CODE XREF: KiDispatchException+241↑j
.text:0000000140071159 ; KiDispatchException+47B↑j
.text:0000000140071159 ; KiDispatchException+5A2↓j
.text:0000000140071159 ; KiDispatchException+5B8↓j
.text:0000000140071159 ; KiDispatchException+5DB↓j
.text:0000000140071159 ; KiDispatchException+5EC↓j
.text:0000000140071159 ; KiDispatchException+1166F6↓j
.text:0000000140071159 ; KiDispatchException+116761↓j
.text:0000000140071159 ; KiDispatchException+1167C5↓j
.text:0000000140071159 ; KiDispatchException+1167EF↓j
.text:0000000140071159 48 8B 8D 68 01 00 00 mov rcx, [rbp+1A0h+var_38]
.text:0000000140071160 48 33 CD xor rcx, rbp ; StackCookie
.text:0000000140071163 E8 48 AD 0C 00 call __security_check_cookie
.text:0000000140071163
.text:0000000140071168 48 8D A5 70 01 00 00 lea rsp, [rbp+170h]
.text:000000014007116F 41 5F pop r15
.text:0000000140071171 41 5E pop r14
.text:0000000140071173 41 5D pop r13
.text:0000000140071175 41 5C pop r12
.text:0000000140071177 5E pop rsi
.text:0000000140071178 5B pop rbx
.text:0000000140071179 5D pop rbp
.text:000000014007117A C3 retn
.text:000000014007117A
.text:000000014007117B ; ---------------------------------------------------------------------------
.text:000000014007117B
.text:000000014007117B loc_14007117B: ; CODE XREF: KiDispatchException+75↑j
.text:000000014007117B 48 8B 05 A6 40 35 00 mov rax, cs:KeFeatureBits
.text:0000000140071182 25 00 00 80 00 and eax, 800000h
.text:0000000140071187 B9 5F 00 10 00 mov ecx, 10005Fh
.text:000000014007118C 48 85 C0 test rax, rax
.text:000000014007118F 44 0F 45 E9 cmovnz r13d, ecx
.text:0000000140071193 44 89 6D 10 mov [rbp+1A0h+var_190], r13d
.text:0000000140071197 E9 13 FB FF FF jmp loc_140070CAF
.text:0000000140071197
.text:000000014007119C ; ---------------------------------------------------------------------------
.text:000000014007119C
.text:000000014007119C loc_14007119C: ; CODE XREF: KiDispatchException+E4↑j
.text:000000014007119C 48 8B 45 08 mov rax, [rbp+1A0h+var_198]
.text:00000001400711A0 48 83 B8 F0 06 00 00 00 cmp qword ptr [rax+6F0h], 0
.text:00000001400711A8 0F 84 70 FB FF FF jz loc_140070D1E
.text:00000001400711A8
.text:00000001400711AE E9 5B 61 11 00 jmp loc_14018730E
.text:00000001400711AE
.text:00000001400711B3 ; ---------------------------------------------------------------------------
.text:00000001400711B3
.text:00000001400711B3 loc_1400711B3: ; CODE XREF: KiDispatchException+DB↑j
.text:00000001400711B3 49 FF 8E F8 00 00 00 dec qword ptr [r14+0F8h]
.text:00000001400711BA E9 56 FB FF FF jmp loc_140070D15
.text:00000001400711BA
.text:00000001400711BF ; ---------------------------------------------------------------------------
.text:00000001400711BF
.text:00000001400711BF loc_1400711BF: ; CODE XREF: KiDispatchException+FA↑j
.text:00000001400711BF ; KiDispatchException+133↑j
.text:00000001400711BF ; KiDispatchException+14C↑j
.text:00000001400711BF ; KiDispatchException+22C↑j
.text:00000001400711BF ; KiDispatchException+116722↓j
.text:00000001400711BF 44 88 7C 24 20 mov byte ptr [rsp+1D0h+BugCheckParameter4], r15b
.text:00000001400711C4 45 8B 4E 30 mov r9d, [r14+30h]
.text:00000001400711C8 4D 8B C6 mov r8, r14
.text:00000001400711CB 49 8B D4 mov rdx, r12
.text:00000001400711CE 48 8B CE mov rcx, rsi
.text:00000001400711D1 E8 7A BB 0D 00 call KeContextToKframes
.text:00000001400711D1
.text:00000001400711D6 EB 81 jmp short loc_140071159
.text:00000001400711D6
.text:00000001400711D8 ; ---------------------------------------------------------------------------
.text:00000001400711D8
.text:00000001400711D8 loc_1400711D8: ; CODE XREF: KiDispatchException+1D1↑j
.text:00000001400711D8 4C 8B 75 08 mov r14, [rbp+1A0h+var_198]
.text:00000001400711D8
.text:00000001400711DC
.text:00000001400711DC loc_1400711DC: ; CODE XREF: KiDispatchException+520↑j
.text:00000001400711DC 41 B0 01 mov r8b, 1
.text:00000001400711DF 41 8A D0 mov dl, r8b
.text:00000001400711E2 48 8B CB mov rcx, rbx
.text:00000001400711E5 E8 EA 57 4B 00 call DbgkForwardException
.text:00000001400711E5
.text:00000001400711EA 84 C0 test al, al
.text:00000001400711EC 0F 85 67 FF FF FF jnz loc_140071159
.text:00000001400711EC
.text:00000001400711F2 49 83 BE F0 06 00 00 00 cmp qword ptr [r14+6F0h], 0
.text:00000001400711FA 0F 85 04 62 11 00 jnz loc_140187404
.text:00000001400711FA
.text:0000000140071200
.text:0000000140071200 loc_140071200: ; CODE XREF: KiDispatchException+1167F5↓j
.text:0000000140071200 41 B0 01 mov r8b, 1
.text:0000000140071203 33 D2 xor edx, edx
.text:0000000140071205 48 8B CB mov rcx, rbx
.text:0000000140071208 E8 C7 57 4B 00 call DbgkForwardException
.text:0000000140071208
.text:000000014007120D 84 C0 test al, al
.text:000000014007120F 0F 85 44 FF FF FF jnz loc_140071159
.text:000000014007120F
.text:0000000140071215 8B 13 mov edx, [rbx] ; ExitStatus
.text:0000000140071217 48 83 C9 FF or rcx, 0FFFFFFFFFFFFFFFFh ; ProcessHandle
.text:000000014007121B E8 40 88 0D 00 call ZwTerminateProcess
.text:000000014007121B
.text:0000000140071220 E9 34 FF FF FF jmp loc_140071159
.text:0000000140071220 ; } // starts at 140070C34
.text:0000000140071220
.text:0000000140071220 KiDispatchException endp
.text:0000000140071220
.text:0000000140071220 ; ---------------------------------------------------------------------------
.text:0000000140071225 algn_140071225: ; DATA XREF: .rdata:00000001402ACCA4↓o
.text:0000000140071225 ; .pdata:000000014037BF38↓o
.text:0000000140071225 CC CC CC align 8
.text:0000000140071228
.text:0000000140071228 ; =============== S U B R O U T I N E =======================================
.text:0000000140071228
.text:0000000140071228
.text:0000000140071228 ; __int64 __fastcall KiPreprocessFault(int, int)
.text:0000000140071228 KiPreprocessFault proc near ; CODE XREF: KiDispatchException+F3↑p分析每段函数和这个函数的执行流程和作用
最新发布
扫一扫
1375
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
