0000000000000000 8b01 MOV eax, dword ptr [rcx] DSIZE: 32, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, 0000000000000002 498b07 MOV rax, qword ptr [r15] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, 0000000000000005 8b417f MOV eax, dword ptr [rcx+0x7f] DSIZE: 32, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, Displacement: 0x000000000000007f, 0000000000000008 498b4781 MOV rax, qword ptr [r15-0x7f] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, Displacement: 0xffffffffffffff81, 000000000000000C 8b81ffffff7f MOV eax, dword ptr [rcx+0x7fffffff] DSIZE: 32, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, Displacement: 0x000000007fffffff, 0000000000000012 498b8701000080 MOV rax, qword ptr [r15-0x7fffffff] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, Displacement: 0xffffffff80000001, 0000000000000019 428b0401 MOV eax, dword ptr [rcx+r8] DSIZE: 32, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, Index: 8 * 1, 000000000000001D 498b043f MOV rax, qword ptr [r15+rdi] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, Index: 7 * 1, 0000000000000021 428b0481 MOV eax, dword ptr [rcx+r8*4] DSIZE: 32, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, Index: 8 * 4, 0000000000000025 498b04ff MOV rax, qword ptr [r15+rdi*8] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, Index: 7 * 8, 0000000000000029 428b848100100000 MOV eax, dword ptr [rcx+r8*4+0x1000] DSIZE: 32, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, Index: 8 * 4, Displacement: 0x0000000000001000, 0000000000000031 498b84ff00f0ffff MOV rax, qword ptr [r15+rdi*8-0x1000] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, Index: 7 * 8, Displacement: 0xfffffffffffff000, 0000000000000039 8b05faffffff MOV eax, dword ptr [rel 0x39] DSIZE: 32, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, RIP relative: yes, Segment: 3, Displacement: 0xfffffffffffffffa, 000000000000003F 488b05f9ffffff MOV rax, qword ptr [rel 0x3f] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, RIP relative: yes, Segment: 3, Displacement: 0xfffffffffffffff9, 0000000000000046 8b0424 MOV eax, dword ptr [rsp] DSIZE: 32, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 2, Base: 4, 0000000000000049 488b842400100000 MOV rax, qword ptr [rsp+0x1000] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 2, Base: 4, Displacement: 0x0000000000001000, 0000000000000051 678b01 MOV eax, dword ptr [ecx] DSIZE: 32, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, 0000000000000054 67498b07 MOV rax, qword ptr [r15d] DSIZE: 64, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, 0000000000000058 678b417f MOV eax, dword ptr [ecx+0x7f] DSIZE: 32, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, Displacement: 0x000000000000007f, 000000000000005C 67498b4781 MOV rax, qword ptr [r15d-0x7f] DSIZE: 64, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, Displacement: 0xffffffffffffff81, 0000000000000061 678b81ffffff7f MOV eax, dword ptr [ecx+0x7fffffff] DSIZE: 32, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, Displacement: 0x000000007fffffff, 0000000000000068 67498b8701000080 MOV rax, qword ptr [r15d-0x7fffffff] DSIZE: 64, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, Displacement: 0xffffffff80000001, 0000000000000070 67428b0401 MOV eax, dword ptr [ecx+r8d] DSIZE: 32, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, Index: 8 * 1, 0000000000000075 67498b043f MOV rax, qword ptr [r15d+edi] DSIZE: 64, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, Index: 7 * 1, 000000000000007A 67428b0481 MOV eax, dword ptr [ecx+r8d*4] DSIZE: 32, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, Index: 8 * 4, 000000000000007F 67498b04ff MOV rax, qword ptr [r15d+edi*8] DSIZE: 64, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, Index: 7 * 8, 0000000000000084 67428b848100100000 MOV eax, dword ptr [ecx+r8d*4+0x1000] DSIZE: 32, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 3, Base: 1, Index: 8 * 4, Displacement: 0x0000000000001000, 000000000000008D 67498b84ff00f0ffff MOV rax, qword ptr [r15d+edi*8-0x1000] DSIZE: 64, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 3, Base: 15, Index: 7 * 8, Displacement: 0xfffffffffffff000, 0000000000000096 678b0424 MOV eax, dword ptr [esp] DSIZE: 32, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: R, RegType: General Purpose, RegSize: 4, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M, Segment: 2, Base: 4, 000000000000009A 67488b842400100000 MOV rax, qword ptr [esp+0x1000] DSIZE: 64, ASIZE: 32, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 2, Base: 4, Displacement: 0x0000000000001000, 00000000000000A3 65488b042530000000 MOV rax, qword ptr gs:[0x30] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 5, Displacement: 0x0000000000000030, 00000000000000AC 65488b01 MOV rax, qword ptr gs:[rcx] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 5, Base: 1, 00000000000000B0 654a8b0439 MOV rax, qword ptr gs:[rcx+r15] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 5, Base: 1, Index: 15 * 1, 00000000000000B5 654a8b0479 MOV rax, qword ptr gs:[rcx+r15*2] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 5, Base: 1, Index: 15 * 2, 00000000000000BA 654a8b847900100000 MOV rax, qword ptr gs:[rcx+r15*2+0x1000] DSIZE: 64, ASIZE: 64, VLEN: - ISA Set: I86, Ins cat: DATAXFER, CET tracked: no Valid modes R0: yes, R1: yes, R2: yes, R3: yes Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes SMM: yes, SGX: yes, TSX: yes, VMXRoot: yes, VMXNonRoot: yes Valid prefixes REP: no, REPcc: no, LOCK: no HLE: no, XACQUIRE only: no, XRELEASE only: no BND: no, BHINT: no, DNT: no Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: R, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1 Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M, Segment: 5, Base: 1, Index: 15 * 2, Displacement: 0x0000000000001000,