dumps/sots.exe: file format pei-i386 Disassembly of section .text: 008182c0 <.text+0x4172c0>: 8182c0: 55 push ebp 8182c1: 8b ec mov ebp,esp 8182c3: 6a ff push 0xffffffff 8182c5: 68 3b f0 96 00 push 0x96f03b 8182ca: 64 a1 00 00 00 00 mov eax,fs:0x0 8182d0: 50 push eax 8182d1: 83 ec 10 sub esp,0x10 8182d4: 56 push esi 8182d5: a1 78 8b af 00 mov eax,ds:0xaf8b78 8182da: 33 c5 xor eax,ebp 8182dc: 50 push eax 8182dd: 8d 45 f4 lea eax,[ebp-0xc] 8182e0: 64 a3 00 00 00 00 mov fs:0x0,eax 8182e6: 8b f1 mov esi,ecx 8182e8: 8d 4d e4 lea ecx,[ebp-0x1c] 8182eb: e8 d0 95 ec ff call 0x6e18c0 8182f0: 8d 45 e4 lea eax,[ebp-0x1c] 8182f3: 56 push esi 8182f4: 50 push eax 8182f5: e8 e6 95 ec ff call 0x6e18e0 8182fa: 83 c4 08 add esp,0x8 8182fd: 84 c0 test al,al 8182ff: 74 59 je 0x81835a 818301: 83 be 08 03 00 00 00 cmp DWORD PTR [esi+0x308],0x0 818308: 75 29 jne 0x818333 81830a: 6a 0c push 0xc 81830c: e8 a5 cc 10 00 call 0x924fb6 818311: 83 c4 04 add esp,0x4 818314: 89 45 f0 mov DWORD PTR [ebp-0x10],eax 818317: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0 81831e: 85 c0 test eax,eax 818320: 74 09 je 0x81832b 818322: 8b c8 mov ecx,eax 818324: e8 97 95 ec ff call 0x6e18c0 818329: eb 02 jmp 0x81832d 81832b: 33 c0 xor eax,eax 81832d: 89 86 08 03 00 00 mov DWORD PTR [esi+0x308],eax 818333: 8b b6 08 03 00 00 mov esi,DWORD PTR [esi+0x308] 818339: 8b 4d e4 mov ecx,DWORD PTR [ebp-0x1c] 81833c: 89 0e mov DWORD PTR [esi],ecx 81833e: 8b 55 e8 mov edx,DWORD PTR [ebp-0x18] 818341: 89 56 04 mov DWORD PTR [esi+0x4],edx 818344: 8b 45 ec mov eax,DWORD PTR [ebp-0x14] 818347: 89 46 08 mov DWORD PTR [esi+0x8],eax 81834a: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc] 81834d: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx 818354: 59 pop ecx 818355: 5e pop esi 818356: 8b e5 mov esp,ebp 818358: 5d pop ebp 818359: c3 ret 81835a: 8b 8e 08 03 00 00 mov ecx,DWORD PTR [esi+0x308] 818360: 51 push ecx 818361: e8 44 cc 10 00 call 0x924faa 818366: 83 c4 04 add esp,0x4 818369: c7 86 08 03 00 00 00 mov DWORD PTR [esi+0x308],0x0 818370: 00 00 00 818373: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc] 818376: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx 81837d: 59 pop ecx 81837e: 5e pop esi 81837f: 8b e5 mov esp,ebp 818381: 5d pop ebp 818382: c3 ret 818383: cc int3 818384: cc int3 818385: cc int3 818386: cc int3 818387: cc int3 818388: cc int3 818389: cc int3 81838a: cc int3 81838b: cc int3 81838c: cc int3 81838d: cc int3 81838e: cc int3 81838f: cc int3