dumps/sots.exe: file format pei-i386 Disassembly of section .text: 0057e6d0 <.text+0x17d6d0>: 57e6d0: 55 push ebp 57e6d1: 8b ec mov ebp,esp 57e6d3: 8b 45 08 mov eax,DWORD PTR [ebp+0x8] 57e6d6: 85 c0 test eax,eax 57e6d8: 74 3b je 0x57e715 57e6da: 83 78 18 10 cmp DWORD PTR [eax+0x18],0x10 57e6de: 8d 48 04 lea ecx,[eax+0x4] 57e6e1: 72 02 jb 0x57e6e5 57e6e3: 8b 09 mov ecx,DWORD PTR [ecx] 57e6e5: 33 c0 xor eax,eax 57e6e7: 80 39 5f cmp BYTE PTR [ecx],0x5f 57e6ea: 74 0b je 0x57e6f7 57e6ec: 8d 64 24 00 lea esp,[esp+0x0] 57e6f0: 40 inc eax 57e6f1: 80 3c 01 5f cmp BYTE PTR [ecx+eax*1],0x5f 57e6f5: 75 f9 jne 0x57e6f0 57e6f7: 03 c8 add ecx,eax 57e6f9: 68 40 00 a0 00 push 0xa00040 57e6fe: 51 push ecx 57e6ff: ff 15 28 d3 9d 00 call DWORD PTR ds:0x9dd328 57e705: 83 c4 08 add esp,0x8 57e708: 85 c0 test eax,eax 57e70a: 75 09 jne 0x57e715 57e70c: b8 01 00 00 00 mov eax,0x1 57e711: 5d pop ebp 57e712: c2 04 00 ret 0x4 57e715: 33 c0 xor eax,eax 57e717: 5d pop ebp 57e718: c2 04 00 ret 0x4 57e71b: cc int3 57e71c: cc int3 57e71d: cc int3 57e71e: cc int3 57e71f: cc int3 57e720: 55 push ebp 57e721: 8b ec mov ebp,esp 57e723: 8b 45 08 mov eax,DWORD PTR [ebp+0x8] 57e726: 53 push ebx 57e727: 56 push esi 57e728: 50 push eax 57e729: e8 b2 ec ff ff call 0x57d3e0 57e72e: 8b d0 mov edx,eax 57e730: 83 c4 04 add esp,0x4 57e733: 8d 72 01 lea esi,[edx+0x1] 57e736: 8a 1a mov bl,BYTE PTR [edx] 57e738: 42 inc edx 57e739: 84 db test bl,bl 57e73b: 75 f9 jne 0x57e736 57e73d: 2b d6 sub edx,esi 57e73f: 83 c1 04 add ecx,0x4 57e742: 83 79 14 10 cmp DWORD PTR [ecx+0x14],0x10 57e746: 5e pop esi 57e747: 5b pop ebx 57e748: 72 02 jb 0x57e74c 57e74a: 8b 09 mov ecx,DWORD PTR [ecx] 57e74c: 52 push edx 57e74d: 50 push eax 57e74e: 51 push ecx 57e74f: ff 15 9c d1 9d 00 call DWORD PTR ds:0x9dd19c 57e755: 83 c4 0c add esp,0xc 57e758: f7 d8 neg eax 57e75a: 1b c0 sbb eax,eax 57e75c: 40 inc eax 57e75d: 5d pop ebp 57e75e: c2 .byte 0xc2 57e75f: 04 .byte 0x4