dumps/sots.exe: file format pei-i386 Disassembly of section .text: 007693f0 <.text+0x3683f0>: 7693f0: 55 push ebp 7693f1: 8b ec mov ebp,esp 7693f3: 6a ff push 0xffffffff 7693f5: 68 de 62 98 00 push 0x9862de 7693fa: 64 a1 00 00 00 00 mov eax,fs:0x0 769400: 50 push eax 769401: 51 push ecx 769402: 53 push ebx 769403: 56 push esi 769404: 57 push edi 769405: a1 78 8b af 00 mov eax,ds:0xaf8b78 76940a: 33 c5 xor eax,ebp 76940c: 50 push eax 76940d: 8d 45 f4 lea eax,[ebp-0xc] 769410: 64 a3 00 00 00 00 mov fs:0x0,eax 769416: 8b f1 mov esi,ecx 769418: 89 75 f0 mov DWORD PTR [ebp-0x10],esi 76941b: 8b 7d 08 mov edi,DWORD PTR [ebp+0x8] 76941e: c7 06 58 19 a2 00 mov DWORD PTR [esi],0xa21958 769424: 8b 47 04 mov eax,DWORD PTR [edi+0x4] 769427: 33 db xor ebx,ebx 769429: 6a ff push 0xffffffff 76942b: 8d 4e 08 lea ecx,[esi+0x8] 76942e: 89 46 04 mov DWORD PTR [esi+0x4],eax 769431: 53 push ebx 769432: 8d 57 08 lea edx,[edi+0x8] 769435: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf 76943c: 89 59 10 mov DWORD PTR [ecx+0x10],ebx 76943f: 52 push edx 769440: 89 5d fc mov DWORD PTR [ebp-0x4],ebx 769443: 88 19 mov BYTE PTR [ecx],bl 769445: e8 e6 bf cb ff call 0x425430 76944a: 6a ff push 0xffffffff 76944c: 8d 4e 24 lea ecx,[esi+0x24] 76944f: 53 push ebx 769450: 8d 47 24 lea eax,[edi+0x24] 769453: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf 76945a: 89 59 10 mov DWORD PTR [ecx+0x10],ebx 76945d: 50 push eax 76945e: c6 45 fc 01 mov BYTE PTR [ebp-0x4],0x1 769462: 88 19 mov BYTE PTR [ecx],bl 769464: e8 c7 bf cb ff call 0x425430 769469: 8b 4f 40 mov ecx,DWORD PTR [edi+0x40] 76946c: 89 4e 40 mov DWORD PTR [esi+0x40],ecx 76946f: 8b 57 44 mov edx,DWORD PTR [edi+0x44] 769472: 89 56 44 mov DWORD PTR [esi+0x44],edx 769475: 8b 47 48 mov eax,DWORD PTR [edi+0x48] 769478: 89 46 48 mov DWORD PTR [esi+0x48],eax 76947b: 8b 4f 4c mov ecx,DWORD PTR [edi+0x4c] 76947e: 89 4e 4c mov DWORD PTR [esi+0x4c],ecx 769481: 6a ff push 0xffffffff 769483: 8d 4e 50 lea ecx,[esi+0x50] 769486: 53 push ebx 769487: 8d 57 50 lea edx,[edi+0x50] 76948a: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf 769491: 89 59 10 mov DWORD PTR [ecx+0x10],ebx 769494: 52 push edx 769495: c6 45 fc 02 mov BYTE PTR [ebp-0x4],0x2 769499: 88 19 mov BYTE PTR [ecx],bl 76949b: e8 90 bf cb ff call 0x425430 7694a0: 8b 47 6c mov eax,DWORD PTR [edi+0x6c] 7694a3: 89 46 6c mov DWORD PTR [esi+0x6c],eax 7694a6: 8b 4f 70 mov ecx,DWORD PTR [edi+0x70] 7694a9: 89 4e 70 mov DWORD PTR [esi+0x70],ecx 7694ac: 8b c6 mov eax,esi 7694ae: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc] 7694b1: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx 7694b8: 59 pop ecx 7694b9: 5f pop edi 7694ba: 5e pop esi 7694bb: 5b pop ebx 7694bc: 8b e5 mov esp,ebp 7694be: 5d pop ebp 7694bf: c2 04 00 ret 0x4 7694c2: cc int3 7694c3: cc int3 7694c4: cc int3 7694c5: cc int3 7694c6: cc int3 7694c7: cc int3 7694c8: cc int3 7694c9: cc int3 7694ca: cc int3 7694cb: cc int3 7694cc: cc int3 7694cd: cc int3 7694ce: cc int3 7694cf: cc int3