.00010B25: C9 leave .00010B26: C21800 retn 00018 ;" ^" .00010B29: 33C0 xor eax,eax .00010B2B: EB05 jmps .000010B32 -------- (1) .00010B2D: B805000080 mov eax,080000005 ;"Ç ¦" .00010B32: 8B7508 mov esi,[ebp][00008] .00010B35: 8BCF mov ecx,edi .00010B37: 8B7D0C mov edi,[ebp][0000C] .00010B3A: 8BD1 mov edx,ecx .00010B3C: C1E902 shr ecx,002 ;"¢" .00010B3F: F3A5 repe movsd .00010B41: 8BCA mov ecx,edx .00010B43: 8B5514 mov edx,[ebp][00014] .00010B46: 83E103 and ecx,003 ;"¦" .00010B49: F3A4 repe movsb .00010B4B: 8B4D1C mov ecx,[ebp][0001C] .00010B4E: 0111 add [ecx],edx .00010B50: EBD0 jmps .000010B22 -------- (2) .00010B52: 55 push ebp .00010B53: 8BEC mov ebp,esp .00010B55: 51 push ecx .00010B56: 8B451C mov eax,[ebp][0001C] .00010B59: 56 push esi .00010B5A: 33F6 xor esi,esi .00010B5C: 397510 cmp [ebp][00010],esi .00010B5F: 8975FC mov [ebp][-0004],esi .00010B62: 8930 mov [eax],esi .00010B64: 7507 jne .000010B6D -------- (1) .00010B66: 33C0 xor eax,eax .00010B68: E948010000 jmp .000010CB5 -------- (2) .00010B6D: 53 push ebx .00010B6E: 8B5D14 mov ebx,[ebp][00014] .00010B71: 3BDE cmp ebx,esi .00010B73: 57 push edi .00010B74: 750A jne .000010B80 -------- (3) .00010B76: B805000080 mov eax,080000005 ;"Ç ¦" .00010B7B: E933010000 jmp .000010CB3 -------- (4) .00010B80: F6430605 test b,[ebx][00006],005 ;"¦" .00010B84: 7405 je .000010B8B -------- (5) .00010B86: 8B430C mov eax,[ebx][0000C] .00010B89: EB0E jmps .000010B99 -------- (6) .00010B8B: 6A10 push 010 .00010B8D: 56 push esi .00010B8E: 56 push esi .00010B8F: 6A01 push 001 .00010B91: 56 push esi .00010B92: 53 push ebx .00010B93: FF15CC280100 call MmMapLockedPagesSpecifyCache .00010B99: 3BC6 cmp eax,esi .00010B9B: 894514 mov [ebp][00014],eax .00010B9E: 750A jne .000010BAA -------- (1) .00010BA0: B89A0000C0 mov eax,0C000009A ;"L Ü" .00010BA5: E909010000 jmp .000010CB3 -------- (2) .00010BAA: 8B7D18 mov edi,[ebp][00018] .00010BAD: 3BFE cmp edi,esi .00010BAF: 8B5314 mov edx,[ebx][00014] .00010BB2: 767C jbe .000010C30 -------- (3) .00010BB4: 8BC7 mov eax,edi .00010BB6: 2B45FC sub eax,[ebp][-0004] .00010BB9: 3BD0 cmp edx,eax .00010BBB: 7735 ja .000010BF2 -------- (4) .00010BBD: 8B1B mov ebx,[ebx] .00010BBF: 7440 je .000010C01 -------- (5) .00010BC1: 0155FC add [ebp][-0004],edx .00010BC4: 3BDE cmp ebx,esi .00010BC6: 74AE je .000010B76 -------- (6) .00010BC8: F6430605 test b,[ebx][00006],005 ;"¦" .00010BCC: 7405 je .000010BD3 -------- (7) .00010BCE: 8B430C mov eax,[ebx][0000C] .00010BD1: EB0E jmps .000010BE1 -------- (1) .00010BD3: 6A10 push 010 .00010BD5: 56 push esi .00010BD6: 56 push esi .00010BD7: 6A01 push 001 .00010BD9: 56 push esi .00010BDA: 53 push ebx .00010BDB: FF15CC280100 call MmMapLockedPagesSpecifyCache .00010BE1: 3BC6 cmp eax,esi .00010BE3: 894514 mov [ebp][00014],eax .00010BE6: 74B8 je .000010BA0 -------- (2) .00010BE8: 397DFC cmp [ebp][-0004],edi .00010BEB: 8B5314 mov edx,[ebx][00014] .00010BEE: 72C4 jb .000010BB4 -------- (3) .00010BF0: EB3E jmps .000010C30 -------- (4) .00010BF2: 8B45FC mov eax,[ebp][-0004] .00010BF5: 2BC7 sub eax,edi .00010BF7: 2B7DFC sub edi,[ebp][-0004] .00010BFA: 03D0 add edx,eax .00010BFC: 017D14 add [ebp][00014],edi .00010BFF: EB2F jmps .000010C30 -------- (5) .00010C01: 3BDE cmp ebx,esi .00010C03: 0F846DFFFFFF je .000010B76 -------- (6) .00010C09: F6430605 test b,[ebx][00006],005 ;"¦" .00010C0D: 7405 je .000010C14 -------- (1) .00010C0F: 8B430C mov eax,[ebx][0000C] .00010C12: EB0E jmps .000010C22 -------- (2) .00010C14: 6A10 push 010 .00010C16: 56 push esi .00010C17: 56 push esi .00010C18: 6A01 push 001 .00010C1A: 56 push esi .00010C1B: 53 push ebx .00010C1C: FF15CC280100 call MmMapLockedPagesSpecifyCache .00010C22: 3BC6 cmp eax,esi .00010C24: 894514 mov [ebp][00014],eax .00010C27: 0F8473FFFFFF je .000010BA0 -------- (3) .00010C2D: 8B5314 mov edx,[ebx][00014] .00010C30: 8B450C mov eax,[ebp][0000C] .00010C33: 8B4D08 mov ecx,[ebp][00008] .00010C36: 03C8 add ecx,eax .00010C38: 894D18 mov [ebp][00018],ecx .00010C3B: 3BDE cmp ebx,esi .00010C3D: 7468 je .000010CA7 -------- (4) .00010C3F: 3BD6 cmp edx,esi .00010C41: 7533 jne .000010C76 -------- (5) .00010C43: 8B1B mov ebx,[ebx] .00010C45: 3BDE cmp ebx,esi .00010C47: 0F8429FFFFFF je .000010B76 -------- (1) .00010C4D: F6430605 test b,[ebx][00006],005 ;"¦" .00010C51: 7405 je .000010C58 -------- (2) .00010C53: 8B430C mov eax,[ebx][0000C] .00010C56: EB0E jmps .000010C66 -------- (3) .00010C58: 6A10 push 010 .00010C5A: 56 push esi .00010C5B: 56 push esi .00010C5C: 6A01 push 001 .00010C5E: 56 push esi .00010C5F: 53 push ebx .00010C60: FF15CC280100 call MmMapLockedPagesSpecifyCache .00010C66: 3BC6 cmp eax,esi .00010C68: 894514 mov [ebp][00014],eax .00010C6B: 0F8405FFFFFF je .000010B76 -------- (4) .00010C71: 8B5314 mov edx,[ebx][00014] .00010C74: EB2C jmps .000010CA2 -------- (5) .00010C76: 8B4D10 mov ecx,[ebp][00010] .00010C79: 3BD1 cmp edx,ecx .00010C7B: 8B7D14 mov edi,[ebp][00014] .00010C7E: 8B7518 mov esi,[ebp][00018] .00010C81: 7337 jae .000010CBA -------- (1) .00010C83: 295510 sub [ebp][00010],edx .00010C86: 015518 add [ebp][00018],edx .00010C89: 8BCA mov ecx,edx .00010C8B: 8BC1 mov eax,ecx .00010C8D: C1E902 shr ecx,002 ;"¢" .00010C90: F3A5 repe movsd .00010C92: 8BC8 mov ecx,eax .00010C94: 8B451C mov eax,[ebp][0001C] .00010C97: 83E103 and ecx,003 ;"¦" .00010C9A: F3A4 repe movsb .00010C9C: 0110 add [eax],edx .00010C9E: 33D2 xor edx,edx .00010CA0: 33F6 xor esi,esi .00010CA2: 397510 cmp [ebp][00010],esi .00010CA5: 7594 jne .000010C3B -------- (2) .00010CA7: 8B4510 mov eax,[ebp][00010] .00010CAA: F7D8 neg eax .00010CAC: 1BC0 sbb eax,eax .00010CAE: 2505000080 and eax,080000005 ;"Ç ¦" .00010CB3: 5F pop edi .00010CB4: 5B pop ebx .00010CB5: 5E pop esi .00010CB6: C9 leave .00010CB7: C21800 retn 00018 ;" ^" .00010CBA: 8BC1 mov eax,ecx .00010CBC: C1E902 shr ecx,002 ;"¢" >>> .00010CBF: F3A5 repe movsd >>> .00010CC1: 8BC8 mov ecx,eax .00010CC3: 8B451C mov eax,[ebp][0001C] .00010CC6: 83E103 and ecx,003 ;"¦" .00010CC9: F3A4 repe movsb .00010CCB: 8B4D10 mov ecx,[ebp][00010] .00010CCE: 0108 add [eax],ecx .00010CD0: 33C0 xor eax,eax .00010CD2: EBDF jmps .000010CB3 -------- (1) .00010CD4: 55 push ebp .00010CD5: 8BEC mov ebp,esp .00010CD7: 83EC0C sub esp,00C ;"+" .00010CDA: 8B4518 mov eax,[ebp][00018] .00010CDD: 53 push ebx .00010CDE: 8B5D10 mov ebx,[ebp][00010] .00010CE1: 56 push esi .00010CE2: 33F6 xor esi,esi .00010CE4: 3BDE cmp ebx,esi .00010CE6: 8930 mov [eax],esi