Created
May 30, 2026 04:27
-
-
Save hfiref0x/8057b22551a722feb3aecf5e92409965 to your computer and use it in GitHub Desktop.
g_CiOptions query data
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| CiInitialize 9200 | |
| PAGE:0000000080029290 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:0000000080029295 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:000000008002929A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:000000008002929F 57 push rdi | |
| PAGE:00000000800292A0 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000000800292A4 49 8B D9 mov rbx, r9 | |
| PAGE:00000000800292A7 49 8B F8 mov rdi, r8 | |
| PAGE:00000000800292AA 48 8B F2 mov rsi, rdx | |
| PAGE:00000000800292AD 8B E9 mov ebp, ecx | |
| PAGE:00000000800292AF E8 4C DD 05 00 call __security_init_cookie | |
| PAGE:00000000800292B4 4C 8B CB mov r9, rbx | |
| PAGE:00000000800292B7 4C 8B C7 mov r8, rdi | |
| PAGE:00000000800292BA 48 8B D6 mov rdx, rsi | |
| PAGE:00000000800292BD 8B CD mov ecx, ebp | |
| PAGE:00000000800292BF 48 8B 5C 24 30 mov rbx, [rsp+28h+arg_0] | |
| PAGE:00000000800292C4 48 8B 6C 24 38 mov rbp, [rsp+28h+arg_8] | |
| PAGE:00000000800292C9 48 8B 74 24 40 mov rsi, [rsp+28h+arg_10] | |
| PAGE:00000000800292CE 48 83 C4 20 add rsp, 20h | |
| PAGE:00000000800292D2 5F pop rdi | |
| PAGE:00000000800292D3 E9 B8 03 00 00 jmp CipInitialize | |
| CipInitialize 9200 | |
| PAGE:0000000080029690 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:0000000080029695 55 push rbp | |
| PAGE:0000000080029696 56 push rsi | |
| PAGE:0000000080029697 57 push rdi | |
| PAGE:0000000080029698 41 54 push r12 | |
| PAGE:000000008002969A 41 55 push r13 | |
| PAGE:000000008002969C 41 56 push r14 | |
| PAGE:000000008002969E 41 57 push r15 | |
| PAGE:00000000800296A0 48 83 EC 30 sub rsp, 30h | |
| PAGE:00000000800296A4 49 8B 00 mov rax, [r8] | |
| PAGE:00000000800296A7 49 8B F9 mov rdi, r9 | |
| PAGE:00000000800296AA 4C 8B F2 mov r14, rdx | |
| PAGE:00000000800296AD 48 89 05 BC 89 FF FF mov cs:g_CiKernelApis, rax | |
| PAGE:00000000800296B4 89 0D EE 96 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 9600 | |
| PAGE:000000008002D290 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:000000008002D295 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:000000008002D29A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:000000008002D29F 57 push rdi | |
| PAGE:000000008002D2A0 48 83 EC 20 sub rsp, 20h | |
| PAGE:000000008002D2A4 49 8B D9 mov rbx, r9 | |
| PAGE:000000008002D2A7 49 8B F8 mov rdi, r8 | |
| PAGE:000000008002D2AA 48 8B F2 mov rsi, rdx | |
| PAGE:000000008002D2AD 8B E9 mov ebp, ecx | |
| PAGE:000000008002D2AF E8 4C 1D 06 00 call __security_init_cookie | |
| PAGE:000000008002D2B4 4C 8B CB mov r9, rbx | |
| PAGE:000000008002D2B7 4C 8B C7 mov r8, rdi | |
| PAGE:000000008002D2BA 48 8B D6 mov rdx, rsi | |
| PAGE:000000008002D2BD 8B CD mov ecx, ebp | |
| PAGE:000000008002D2BF 48 8B 5C 24 30 mov rbx, [rsp+28h+arg_0] | |
| PAGE:000000008002D2C4 48 8B 6C 24 38 mov rbp, [rsp+28h+arg_8] | |
| PAGE:000000008002D2C9 48 8B 74 24 40 mov rsi, [rsp+28h+arg_10] | |
| PAGE:000000008002D2CE 48 83 C4 20 add rsp, 20h | |
| PAGE:000000008002D2D2 5F pop rdi | |
| PAGE:000000008002D2D3 E9 A8 05 00 00 jmp CipInitialize | |
| CipInitialize 9600 | |
| PAGE:000000008002D880 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:000000008002D885 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:000000008002D88A 57 push rdi | |
| PAGE:000000008002D88B 41 54 push r12 | |
| PAGE:000000008002D88D 41 55 push r13 | |
| PAGE:000000008002D88F 41 56 push r14 | |
| PAGE:000000008002D891 41 57 push r15 | |
| PAGE:000000008002D893 48 81 EC 60 03 00 00 sub rsp, 360h | |
| PAGE:000000008002D89A 48 8B 05 5F 67 FF FF mov rax, cs:__security_cookie | |
| PAGE:000000008002D8A1 48 33 C4 xor rax, rsp | |
| PAGE:000000008002D8A4 48 89 84 24 50 03 00 00 mov [rsp+388h+var_38], rax | |
| PAGE:000000008002D8AC 49 8B 00 mov rax, [r8] | |
| PAGE:000000008002D8AF 49 8B D9 mov rbx, r9 | |
| PAGE:000000008002D8B2 4C 8B F2 mov r14, rdx | |
| PAGE:000000008002D8B5 48 89 05 AC 67 FF FF mov cs:g_CiKernelApis, rax | |
| PAGE:000000008002D8BC 89 0D 9E 7A FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 10240 | |
| PAGE:00000001C001E080 48 83 EC 28 sub rsp, 28h | |
| PAGE:00000001C001E084 44 8B D1 mov r10d, ecx | |
| PAGE:00000001C001E087 E8 74 DF 06 00 call __security_init_cookie | |
| PAGE:00000001C001E08C 41 8B CA mov ecx, r10d | |
| PAGE:00000001C001E08F 48 83 C4 28 add rsp, 28h | |
| PAGE:00000001C001E093 E9 24 09 00 00 jmp CipInitialize | |
| CipInitialize 10240 | |
| PAGE:00000001C001E9BC 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C001E9C1 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C001E9C6 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C001E9CB 57 push rdi | |
| PAGE:00000001C001E9CC 41 54 push r12 | |
| PAGE:00000001C001E9CE 41 56 push r14 | |
| PAGE:00000001C001E9D0 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C001E9D4 4D 8B F1 mov r14, r9 | |
| PAGE:00000001C001E9D7 89 0D 33 82 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 10586 | |
| PAGE:00000001C001E080 48 83 EC 28 sub rsp, 28h | |
| PAGE:00000001C001E084 44 8B D1 mov r10d, ecx | |
| PAGE:00000001C001E087 E8 74 DF 06 00 call __security_init_cookie | |
| PAGE:00000001C001E08C 41 8B CA mov ecx, r10d | |
| PAGE:00000001C001E08F 48 83 C4 28 add rsp, 28h | |
| PAGE:00000001C001E093 E9 D0 07 00 00 jmp CipInitialize | |
| CipInitialize 10586 | |
| PAGE:00000001C001E868 48 89 5C 24 10 mov [rsp+arg_8], rbx | |
| PAGE:00000001C001E86D 89 4C 24 08 mov [rsp+arg_0], ecx | |
| PAGE:00000001C001E871 55 push rbp | |
| PAGE:00000001C001E872 56 push rsi | |
| PAGE:00000001C001E873 57 push rdi | |
| PAGE:00000001C001E874 41 54 push r12 | |
| PAGE:00000001C001E876 41 55 push r13 | |
| PAGE:00000001C001E878 41 56 push r14 | |
| PAGE:00000001C001E87A 41 57 push r15 | |
| PAGE:00000001C001E87C 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C001E880 4D 8B E9 mov r13, r9 | |
| PAGE:00000001C001E883 89 0D A7 83 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 14393 | |
| PAGE:00000001C0022110 48 83 EC 28 sub rsp, 28h | |
| PAGE:00000001C0022114 44 8B D1 mov r10d, ecx | |
| PAGE:00000001C0022117 E8 E4 FE 06 00 call __security_init_cookie | |
| PAGE:00000001C002211C 41 8B CA mov ecx, r10d | |
| PAGE:00000001C002211F 48 83 C4 28 add rsp, 28h | |
| PAGE:00000001C0022123 E9 FC 07 00 00 jmp CipInitialize | |
| CipInitialize 14393 | |
| PAGE:00000001C0022924 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0022929 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C002292E 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C0022933 57 push rdi | |
| PAGE:00000001C0022934 41 54 push r12 | |
| PAGE:00000001C0022936 41 56 push r14 | |
| PAGE:00000001C0022938 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C002293C 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C002293F 89 0D 0B 72 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 15063 | |
| PAGE:00000001C0024130 48 83 EC 28 sub rsp, 28h | |
| PAGE:00000001C0024134 44 8B D1 mov r10d, ecx | |
| PAGE:00000001C0024137 E8 CC 4E 07 00 call __security_init_cookie | |
| PAGE:00000001C002413C 41 8B CA mov ecx, r10d | |
| PAGE:00000001C002413F 48 83 C4 28 add rsp, 28h | |
| PAGE:00000001C0024143 E9 7C 07 00 00 jmp CipInitialize | |
| CipInitialize 15063 | |
| PAGE:00000001C00248C4 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C00248C9 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C00248CE 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C00248D3 57 push rdi | |
| PAGE:00000001C00248D4 41 54 push r12 | |
| PAGE:00000001C00248D6 41 56 push r14 | |
| PAGE:00000001C00248D8 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C00248DC 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C00248DF 89 0D CB 72 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 16299 | |
| PAGE:00000001C0026120 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0026125 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C002612A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C002612F 57 push rdi | |
| PAGE:00000001C0026130 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000001C0026134 49 8B D9 mov rbx, r9 | |
| PAGE:00000001C0026137 49 8B F8 mov rdi, r8 | |
| PAGE:00000001C002613A 48 8B F2 mov rsi, rdx | |
| PAGE:00000001C002613D 8B E9 mov ebp, ecx | |
| PAGE:00000001C002613F E8 C4 9E 07 00 call __security_init_cookie | |
| PAGE:00000001C0026144 4C 8B CB mov r9, rbx | |
| PAGE:00000001C0026147 4C 8B C7 mov r8, rdi | |
| PAGE:00000001C002614A 48 8B D6 mov rdx, rsi | |
| PAGE:00000001C002614D 8B CD mov ecx, ebp | |
| PAGE:00000001C002614F E8 A0 07 00 00 call CipInitialize | |
| CipInitialize 16299 | |
| PAGE:00000001C00268F4 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C00268F9 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C00268FE 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C0026903 57 push rdi | |
| PAGE:00000001C0026904 41 54 push r12 | |
| PAGE:00000001C0026906 41 56 push r14 | |
| PAGE:00000001C0026908 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C002690C 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C002690F 89 0D FB 63 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 17134 | |
| PAGE:00000001C0027120 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0027125 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C002712A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C002712F 57 push rdi | |
| PAGE:00000001C0027130 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000001C0027134 49 8B D9 mov rbx, r9 | |
| PAGE:00000001C0027137 49 8B F8 mov rdi, r8 | |
| PAGE:00000001C002713A 48 8B F2 mov rsi, rdx | |
| PAGE:00000001C002713D 8B E9 mov ebp, ecx | |
| PAGE:00000001C002713F E8 C4 BE 07 00 call __security_init_cookie | |
| PAGE:00000001C0027144 4C 8B CB mov r9, rbx | |
| PAGE:00000001C0027147 4C 8B C7 mov r8, rdi | |
| PAGE:00000001C002714A 48 8B D6 mov rdx, rsi | |
| PAGE:00000001C002714D 8B CD mov ecx, ebp | |
| PAGE:00000001C002714F E8 D8 07 00 00 call CipInitialize | |
| CipInitialize 17134 | |
| PAGE:00000001C002792C 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0027931 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C0027936 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C002793B 57 push rdi | |
| PAGE:00000001C002793C 41 54 push r12 | |
| PAGE:00000001C002793E 41 56 push r14 | |
| PAGE:00000001C0027940 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C0027944 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C0027947 89 0D 63 63 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 17763 | |
| PAGE:00000001C0040130 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0040135 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C004013A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C004013F 57 push rdi | |
| PAGE:00000001C0040140 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000001C0040144 49 8B D9 mov rbx, r9 | |
| PAGE:00000001C0040147 49 8B F8 mov rdi, r8 | |
| PAGE:00000001C004014A 48 8B F2 mov rsi, rdx | |
| PAGE:00000001C004014D 8B E9 mov ebp, ecx | |
| PAGE:00000001C004014F E8 B4 CE 07 00 call __security_init_cookie | |
| PAGE:00000001C0040154 4C 8B CB mov r9, rbx | |
| PAGE:00000001C0040157 4C 8B C7 mov r8, rdi | |
| PAGE:00000001C004015A 48 8B D6 mov rdx, rsi | |
| PAGE:00000001C004015D 8B CD mov ecx, ebp | |
| PAGE:00000001C004015F E8 40 09 00 00 call CipInitialize | |
| CipInitialize 17763 | |
| PAGE:00000001C0040AA4 48 8B C4 mov rax, rsp | |
| PAGE:00000001C0040AA7 48 89 58 08 mov [rax+8], rbx | |
| PAGE:00000001C0040AAB 48 89 68 10 mov [rax+10h], rbp | |
| PAGE:00000001C0040AAF 48 89 70 18 mov [rax+18h], rsi | |
| PAGE:00000001C0040AB3 48 89 78 20 mov [rax+20h], rdi | |
| PAGE:00000001C0040AB7 41 55 push r13 | |
| PAGE:00000001C0040AB9 41 56 push r14 | |
| PAGE:00000001C0040ABB 41 57 push r15 | |
| PAGE:00000001C0040ABD 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C0040AC1 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C0040AC4 89 0D 4E 62 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 18362 | |
| PAGE:00000001C0041130 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0041135 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C004113A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C004113F 57 push rdi | |
| PAGE:00000001C0041140 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000001C0041144 49 8B D9 mov rbx, r9 | |
| PAGE:00000001C0041147 49 8B F8 mov rdi, r8 | |
| PAGE:00000001C004114A 48 8B F2 mov rsi, rdx | |
| PAGE:00000001C004114D 8B E9 mov ebp, ecx | |
| PAGE:00000001C004114F E8 B4 1E 08 00 call __security_init_cookie | |
| PAGE:00000001C0041154 4C 8B CB mov r9, rbx | |
| PAGE:00000001C0041157 4C 8B C7 mov r8, rdi | |
| PAGE:00000001C004115A 48 8B D6 mov rdx, rsi | |
| PAGE:00000001C004115D 8B CD mov ecx, ebp | |
| PAGE:00000001C004115F E8 4C 09 00 00 call CipInitialize | |
| CipInitialize 18362 | |
| PAGE:00000001C0041AB0 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0041AB5 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C0041ABA 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C0041ABF 57 push rdi | |
| PAGE:00000001C0041AC0 41 54 push r12 | |
| PAGE:00000001C0041AC2 41 56 push r14 | |
| PAGE:00000001C0041AC4 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C0041AC8 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C0041ACB 89 0D A7 57 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 19041 | |
| PAGE:00000001C0043400 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0043405 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C004340A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C004340F 57 push rdi | |
| PAGE:00000001C0043410 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000001C0043414 49 8B D9 mov rbx, r9 | |
| PAGE:00000001C0043417 49 8B F8 mov rdi, r8 | |
| PAGE:00000001C004341A 48 8B F2 mov rsi, rdx | |
| PAGE:00000001C004341D 8B E9 mov ebp, ecx | |
| PAGE:00000001C004341F E8 E4 4B 08 00 call wil_InitializeFeatureStaging | |
| PAGE:00000001C0043424 E8 FF 4D 08 00 call __security_init_cookie | |
| PAGE:00000001C0043429 48 8B 0D 68 48 FF FF mov rcx, cs:wil_details_featureChangeNotification | |
| PAGE:00000001C0043430 48 85 C9 test rcx, rcx | |
| PAGE:00000001C0043433 74 14 jz short loc_1C0043449 | |
| PAGE:00000001C0043435 48 FF 15 B4 CC FF FF call cs:__imp_RtlUnregisterFeatureConfigurationChangeNotification | |
| PAGE:00000001C004343C 0F 1F 44 00 00 nop dword ptr [rax+rax+00h] | |
| PAGE:00000001C0043441 48 83 25 4F 48 FF FF 00 and cs:wil_details_featureChangeNotification, 0 | |
| PAGE:00000001C0043449 | |
| PAGE:00000001C0043449 loc_1C0043449: ; CODE XREF: CiInitialize+33↑j | |
| PAGE:00000001C0043449 4C 8B CB mov r9, rbx | |
| PAGE:00000001C004344C 4C 8B C7 mov r8, rdi | |
| PAGE:00000001C004344F 48 8B D6 mov rdx, rsi | |
| PAGE:00000001C0043452 8B CD mov ecx, ebp | |
| PAGE:00000001C0043454 E8 BB 08 00 00 call CipInitialize | |
| CipInitialize 19041 | |
| PAGE:00000001C0043D14 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0043D19 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C0043D1E 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C0043D23 57 push rdi | |
| PAGE:00000001C0043D24 41 54 push r12 | |
| PAGE:00000001C0043D26 41 56 push r14 | |
| PAGE:00000001C0043D28 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C0043D2C 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C0043D2F 89 0D A3 46 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 19042 | |
| PAGE:00000001C0043130 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0043135 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C004313A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C004313F 57 push rdi | |
| PAGE:00000001C0043140 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000001C0043144 49 8B D9 mov rbx, r9 | |
| PAGE:00000001C0043147 49 8B F8 mov rdi, r8 | |
| PAGE:00000001C004314A 48 8B F2 mov rsi, rdx | |
| PAGE:00000001C004314D 8B E9 mov ebp, ecx | |
| PAGE:00000001C004314F E8 B4 4E 08 00 call __security_init_cookie | |
| PAGE:00000001C0043154 4C 8B CB mov r9, rbx | |
| PAGE:00000001C0043157 4C 8B C7 mov r8, rdi | |
| PAGE:00000001C004315A 48 8B D6 mov rdx, rsi | |
| PAGE:00000001C004315D 8B CD mov ecx, ebp | |
| PAGE:00000001C004315F E8 B0 08 00 00 call CipInitialize | |
| CipInitialize 19042 | |
| PAGE:00000001C0043A14 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0043A19 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C0043A1E 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C0043A23 57 push rdi | |
| PAGE:00000001C0043A24 41 54 push r12 | |
| PAGE:00000001C0043A26 41 56 push r14 | |
| PAGE:00000001C0043A28 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C0043A2C 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C0043A2F 89 0D 83 49 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 19043 | |
| PAGE:00000001C0043130 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0043135 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C004313A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C004313F 57 push rdi | |
| PAGE:00000001C0043140 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000001C0043144 49 8B D9 mov rbx, r9 | |
| PAGE:00000001C0043147 49 8B F8 mov rdi, r8 | |
| PAGE:00000001C004314A 48 8B F2 mov rsi, rdx | |
| PAGE:00000001C004314D 8B E9 mov ebp, ecx | |
| PAGE:00000001C004314F E8 B4 4E 08 00 call __security_init_cookie | |
| PAGE:00000001C0043154 4C 8B CB mov r9, rbx | |
| PAGE:00000001C0043157 4C 8B C7 mov r8, rdi | |
| PAGE:00000001C004315A 48 8B D6 mov rdx, rsi | |
| PAGE:00000001C004315D 8B CD mov ecx, ebp | |
| PAGE:00000001C004315F E8 B0 08 00 00 call CipInitialize | |
| CipInitialize 19043 | |
| PAGE:00000001C0043A14 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0043A19 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C0043A1E 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C0043A23 57 push rdi | |
| PAGE:00000001C0043A24 41 54 push r12 | |
| PAGE:00000001C0043A26 41 56 push r14 | |
| PAGE:00000001C0043A28 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C0043A2C 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C0043A2F 89 0D 83 49 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 19044 | |
| PAGE:00000001C0044400 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0044405 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C004440A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C004440F 57 push rdi | |
| PAGE:00000001C0044410 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000001C0044414 49 8B D9 mov rbx, r9 | |
| PAGE:00000001C0044417 49 8B F8 mov rdi, r8 | |
| PAGE:00000001C004441A 48 8B F2 mov rsi, rdx | |
| PAGE:00000001C004441D 8B E9 mov ebp, ecx | |
| PAGE:00000001C004441F E8 E4 6B 08 00 call wil_InitializeFeatureStaging | |
| PAGE:00000001C0044424 E8 FF 6D 08 00 call __security_init_cookie | |
| PAGE:00000001C0044429 48 8B 0D 58 48 FF FF mov rcx, cs:wil_details_featureChangeNotification | |
| PAGE:00000001C0044430 48 85 C9 test rcx, rcx | |
| PAGE:00000001C0044433 74 14 jz short loc_1C0044449 | |
| PAGE:00000001C0044435 48 FF 15 B4 CC FF FF call cs:__imp_RtlUnregisterFeatureConfigurationChangeNotification | |
| PAGE:00000001C004443C 0F 1F 44 00 00 nop dword ptr [rax+rax+00h] | |
| PAGE:00000001C0044441 48 83 25 3F 48 FF FF 00 and cs:wil_details_featureChangeNotification, 0 | |
| PAGE:00000001C0044449 | |
| PAGE:00000001C0044449 loc_1C0044449: ; CODE XREF: CiInitialize+33↑j | |
| PAGE:00000001C0044449 4C 8B CB mov r9, rbx | |
| PAGE:00000001C004444C 4C 8B C7 mov r8, rdi | |
| PAGE:00000001C004444F 48 8B D6 mov rdx, rsi | |
| PAGE:00000001C0044452 8B CD mov ecx, ebp | |
| PAGE:00000001C0044454 E8 3F 09 00 00 call CipInitialize | |
| CipInitialize 19044 | |
| PAGE:00000001C0044D98 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0044D9D 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C0044DA2 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C0044DA7 57 push rdi | |
| PAGE:00000001C0044DA8 41 54 push r12 | |
| PAGE:00000001C0044DAA 41 56 push r14 | |
| PAGE:00000001C0044DAC 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C0044DB0 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C0044DB3 89 0D FF 45 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 20348 | |
| PAGE:00000001C003D140 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C003D145 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C003D14A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C003D14F 57 push rdi | |
| PAGE:00000001C003D150 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000001C003D154 49 8B D9 mov rbx, r9 | |
| PAGE:00000001C003D157 49 8B F8 mov rdi, r8 | |
| PAGE:00000001C003D15A 48 8B F2 mov rsi, rdx | |
| PAGE:00000001C003D15D 8B E9 mov ebp, ecx | |
| PAGE:00000001C003D15F E8 A4 9E 08 00 call __security_init_cookie | |
| PAGE:00000001C003D164 4C 8B CB mov r9, rbx | |
| PAGE:00000001C003D167 4C 8B C7 mov r8, rdi | |
| PAGE:00000001C003D16A 48 8B D6 mov rdx, rsi | |
| PAGE:00000001C003D16D 8B CD mov ecx, ebp | |
| PAGE:00000001C003D16F E8 E4 08 00 00 call CipInitialize | |
| CipInitialize 20348 | |
| PAGE:00000001C003DA58 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C003DA5D 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C003DA62 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C003DA67 57 push rdi | |
| PAGE:00000001C003DA68 41 54 push r12 | |
| PAGE:00000001C003DA6A 41 56 push r14 | |
| PAGE:00000001C003DA6C 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C003DA70 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C003DA73 89 0D 8B E5 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 22000 | |
| PAGE:00000001C003E140 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C003E145 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C003E14A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C003E14F 57 push rdi | |
| PAGE:00000001C003E150 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000001C003E154 49 8B D9 mov rbx, r9 | |
| PAGE:00000001C003E157 49 8B F8 mov rdi, r8 | |
| PAGE:00000001C003E15A 48 8B F2 mov rsi, rdx | |
| PAGE:00000001C003E15D 8B E9 mov ebp, ecx | |
| PAGE:00000001C003E15F E8 A4 AE 08 00 call __security_init_cookie | |
| PAGE:00000001C003E164 4C 8B CB mov r9, rbx | |
| PAGE:00000001C003E167 4C 8B C7 mov r8, rdi | |
| PAGE:00000001C003E16A 48 8B D6 mov rdx, rsi | |
| PAGE:00000001C003E16D 8B CD mov ecx, ebp | |
| PAGE:00000001C003E16F E8 24 09 00 00 call CipInitialize | |
| CipInitialize 22000 | |
| PAGE:00000001C003EA98 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C003EA9D 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C003EAA2 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C003EAA7 57 push rdi | |
| PAGE:00000001C003EAA8 41 54 push r12 | |
| PAGE:00000001C003EAAA 41 56 push r14 | |
| PAGE:00000001C003EAAC 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C003EAB0 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C003EAB3 89 0D 4B E5 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 22610 | |
| PAGE:00000001C0042420 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0042425 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C004242A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C004242F 57 push rdi | |
| PAGE:00000001C0042430 48 83 EC 20 sub rsp, 20h | |
| PAGE:00000001C0042434 49 8B D9 mov rbx, r9 | |
| PAGE:00000001C0042437 49 8B F8 mov rdi, r8 | |
| PAGE:00000001C004243A 48 8B F2 mov rsi, rdx | |
| PAGE:00000001C004243D 8B E9 mov ebp, ecx | |
| PAGE:00000001C004243F E8 F0 2D 09 00 call __security_init_cookie | |
| PAGE:00000001C0042444 4C 8B CB mov r9, rbx | |
| PAGE:00000001C0042447 4C 8B C7 mov r8, rdi | |
| PAGE:00000001C004244A 48 8B D6 mov rdx, rsi | |
| PAGE:00000001C004244D 8B CD mov ecx, ebp | |
| PAGE:00000001C004244F E8 98 0B 00 00 call CipInitialize | |
| CipInitialize 22610 | |
| PAGE:00000001C0042FEC 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001C0042FF1 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001C0042FF6 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001C0042FFB 57 push rdi | |
| PAGE:00000001C0042FFC 41 54 push r12 | |
| PAGE:00000001C0042FFE 41 56 push r14 | |
| PAGE:00000001C0043000 48 83 EC 40 sub rsp, 40h | |
| PAGE:00000001C0043004 49 8B E9 mov rbp, r9 | |
| PAGE:00000001C0043007 89 0D F7 DF FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 26100 | |
| PAGE:00000001800529C0 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001800529C5 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001800529CA 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001800529CF 57 push rdi | |
| PAGE:00000001800529D0 48 83 EC 30 sub rsp, 30h | |
| PAGE:00000001800529D4 49 8B D9 mov rbx, r9 | |
| PAGE:00000001800529D7 41 8B F8 mov edi, r8d | |
| PAGE:00000001800529DA 48 8B F2 mov rsi, rdx | |
| PAGE:00000001800529DD 8B E9 mov ebp, ecx | |
| PAGE:00000001800529DF E8 24 06 0A 00 call __security_init_cookie | |
| PAGE:00000001800529E4 48 8B 44 24 60 mov rax, [rsp+38h+arg_20] | |
| PAGE:00000001800529E9 4C 8B CB mov r9, rbx | |
| PAGE:00000001800529EC 44 8B C7 mov r8d, edi | |
| PAGE:00000001800529EF 48 89 44 24 20 mov [rsp+38h+var_18], rax | |
| PAGE:00000001800529F4 48 8B D6 mov rdx, rsi | |
| PAGE:00000001800529F7 8B CD mov ecx, ebp | |
| PAGE:00000001800529F9 E8 4E 11 00 00 call CipInitialize | |
| CipInitialize 26100 | |
| PAGE:0000000180053B4C 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:0000000180053B51 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:0000000180053B56 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:0000000180053B5B 57 push rdi | |
| PAGE:0000000180053B5C 41 54 push r12 | |
| PAGE:0000000180053B5E 41 55 push r13 | |
| PAGE:0000000180053B60 41 56 push r14 | |
| PAGE:0000000180053B62 41 57 push r15 | |
| PAGE:0000000180053B64 48 83 EC 20 sub rsp, 20h | |
| PAGE:0000000180053B68 49 8B D9 mov rbx, r9 | |
| PAGE:0000000180053B6B 41 8B F8 mov edi, r8d | |
| PAGE:0000000180053B6E 48 8B EA mov rbp, rdx | |
| PAGE:0000000180053B71 44 8B E9 mov r13d, ecx | |
| PAGE:0000000180053B74 E8 C3 F4 09 00 call wil_InitializeFeatureStaging | |
| PAGE:0000000180053B79 44 89 2D 84 C4 FF FF mov cs:g_CiOptions, r13d | |
| CiInitialize 26100_8246 | |
| PAGE:00000001800529C0 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:00000001800529C5 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:00000001800529CA 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:00000001800529CF 57 push rdi | |
| PAGE:00000001800529D0 48 83 EC 30 sub rsp, 30h | |
| PAGE:00000001800529D4 49 8B D9 mov rbx, r9 | |
| PAGE:00000001800529D7 41 8B F8 mov edi, r8d | |
| PAGE:00000001800529DA 48 8B F2 mov rsi, rdx | |
| PAGE:00000001800529DD 8B E9 mov ebp, ecx | |
| PAGE:00000001800529DF E8 24 F6 09 00 call __security_init_cookie | |
| PAGE:00000001800529E4 48 8B 44 24 60 mov rax, [rsp+38h+arg_20] | |
| PAGE:00000001800529E9 4C 8B CB mov r9, rbx | |
| PAGE:00000001800529EC 44 8B C7 mov r8d, edi | |
| PAGE:00000001800529EF 48 89 44 24 20 mov [rsp+38h+var_18], rax | |
| PAGE:00000001800529F4 48 8B D6 mov rdx, rsi | |
| PAGE:00000001800529F7 8B CD mov ecx, ebp | |
| PAGE:00000001800529F9 E8 12 12 00 00 call CipInitialize | |
| CipInitialize 26100_8246 | |
| PAGE:0000000180053C10 48 89 5C 24 08 mov [rsp+arg_0], rbx | |
| PAGE:0000000180053C15 48 89 6C 24 10 mov [rsp+arg_8], rbp | |
| PAGE:0000000180053C1A 48 89 74 24 18 mov [rsp+arg_10], rsi | |
| PAGE:0000000180053C1F 57 push rdi | |
| PAGE:0000000180053C20 41 54 push r12 | |
| PAGE:0000000180053C22 41 55 push r13 | |
| PAGE:0000000180053C24 41 56 push r14 | |
| PAGE:0000000180053C26 41 57 push r15 | |
| PAGE:0000000180053C28 48 83 EC 20 sub rsp, 20h | |
| PAGE:0000000180053C2C 49 8B D9 mov rbx, r9 | |
| PAGE:0000000180053C2F 41 8B F8 mov edi, r8d | |
| PAGE:0000000180053C32 48 8B EA mov rbp, rdx | |
| PAGE:0000000180053C35 89 0D C9 C3 FF FF mov cs:g_CiOptions, ecx | |
| CiInitialize 29580 | |
| PAGE:000000018005E380 40 53 push rbx | |
| PAGE:000000018005E382 55 push rbp | |
| PAGE:000000018005E383 56 push rsi | |
| PAGE:000000018005E384 57 push rdi | |
| PAGE:000000018005E385 48 83 EC 38 sub rsp, 38h | |
| PAGE:000000018005E389 49 8B D9 mov rbx, r9 | |
| PAGE:000000018005E38C 41 8B F8 mov edi, r8d | |
| PAGE:000000018005E38F 48 8B F2 mov rsi, rdx | |
| PAGE:000000018005E392 8B E9 mov ebp, ecx | |
| PAGE:000000018005E394 E8 6F 8C 09 00 call __security_init_cookie | |
| PAGE:000000018005E399 48 8B 84 24 80 00 00 00 mov rax, [rsp+58h+arg_20] | |
| PAGE:000000018005E3A1 4C 8B CB mov r9, rbx | |
| PAGE:000000018005E3A4 44 8B C7 mov r8d, edi | |
| PAGE:000000018005E3A7 48 89 44 24 20 mov [rsp+58h+var_38], rax | |
| PAGE:000000018005E3AC 48 8B D6 mov rdx, rsi | |
| PAGE:000000018005E3AF 8B CD mov ecx, ebp | |
| PAGE:000000018005E3B1 E8 26 0D 00 00 call CipInitialize | |
| CipInitialize 29580 | |
| PAGE:000000018005F0DC 40 53 push rbx | |
| PAGE:000000018005F0DE 55 push rbp | |
| PAGE:000000018005F0DF 56 push rsi | |
| PAGE:000000018005F0E0 57 push rdi | |
| PAGE:000000018005F0E1 41 55 push r13 | |
| PAGE:000000018005F0E3 41 56 push r14 | |
| PAGE:000000018005F0E5 41 57 push r15 | |
| PAGE:000000018005F0E7 48 83 EC 20 sub rsp, 20h | |
| PAGE:000000018005F0EB 49 8B D9 mov rbx, r9 | |
| PAGE:000000018005F0EE 89 0D 14 5F FF FF mov cs:g_CiOptions, ecx |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment