dumps/sots.exe: file format pei-i386 Disassembly of section .text: 007639f0 <.text+0x3629f0>: 7639f0: b8 a8 c0 b2 00 mov eax,0xb2c0a8 7639f5: c3 ret 7639f6: cc int3 7639f7: cc int3 7639f8: cc int3 7639f9: cc int3 7639fa: cc int3 7639fb: cc int3 7639fc: cc int3 7639fd: cc int3 7639fe: cc int3 7639ff: cc int3 763a00: c7 01 bc 22 9e 00 mov DWORD PTR [ecx],0x9e22bc 763a06: c3 ret 763a07: cc int3 763a08: cc int3 763a09: cc int3 763a0a: cc int3 763a0b: cc int3 763a0c: cc int3 763a0d: cc int3 763a0e: cc int3 763a0f: cc int3 763a10: b8 b4 c0 b2 00 mov eax,0xb2c0b4 763a15: c3 ret 763a16: cc int3 763a17: cc int3 763a18: cc int3 763a19: cc int3 763a1a: cc int3 763a1b: cc int3 763a1c: cc int3 763a1d: cc int3 763a1e: cc int3 763a1f: cc int3 763a20: 55 push ebp 763a21: 8b ec mov ebp,esp 763a23: 56 push esi 763a24: 8b f1 mov esi,ecx 763a26: 80 be 5c 01 00 00 00 cmp BYTE PTR [esi+0x15c],0x0 763a2d: 74 07 je 0x763a36 763a2f: 32 xor al,al