/home/alex/sots-re/dumps/sots.exe: file format pei-i386 Disassembly of section .text: 0077fed0 <.text+0x37eed0>: 77fed0: 55 push ebp 77fed1: 8b ec mov ebp,esp 77fed3: 6a ff push 0xffffffff 77fed5: 68 39 86 98 00 push 0x988639 77feda: 64 a1 00 00 00 00 mov eax,fs:0x0 77fee0: 50 push eax 77fee1: 83 ec 08 sub esp,0x8 77fee4: 53 push ebx 77fee5: 56 push esi 77fee6: 57 push edi 77fee7: a1 78 8b af 00 mov eax,ds:0xaf8b78 77feec: 33 c5 xor eax,ebp 77feee: 50 push eax 77feef: 8d 45 f4 lea eax,[ebp-0xc] 77fef2: 64 a3 00 00 00 00 mov fs:0x0,eax 77fef8: 89 65 f0 mov DWORD PTR [ebp-0x10],esp 77fefb: 8b 75 10 mov esi,DWORD PTR [ebp+0x10] 77fefe: 8b 7d 08 mov edi,DWORD PTR [ebp+0x8] 77ff01: 89 75 ec mov DWORD PTR [ebp-0x14],esi 77ff04: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0 77ff0b: b3 02 mov bl,0x2 77ff0d: 8d 49 00 lea ecx,[ecx+0x0] 77ff10: 3b 7d 0c cmp edi,DWORD PTR [ebp+0xc] 77ff13: 74 55 je 0x77ff6a 77ff15: 89 75 08 mov DWORD PTR [ebp+0x8],esi 77ff18: 85 f6 test esi,esi 77ff1a: 74 1b je 0x77ff37 77ff1c: 8d 4f 08 lea ecx,[edi+0x8] 77ff1f: c7 06 7c f0 a0 00 mov DWORD PTR [esi],0xa0f07c 77ff25: 8b 47 04 mov eax,DWORD PTR [edi+0x4] 77ff28: 51 push ecx 77ff29: 8d 4e 08 lea ecx,[esi+0x8] 77ff2c: 88 5d fc mov BYTE PTR [ebp-0x4],bl 77ff2f: 89 46 04 mov DWORD PTR [esi+0x4],eax 77ff32: e8 19 99 ff ff call 0x779850 77ff37: 83 c6 18 add esi,0x18 77ff3a: c6 45 fc 00 mov BYTE PTR [ebp-0x4],0x0 77ff3e: 89 75 10 mov DWORD PTR [ebp+0x10],esi 77ff41: 83 c7 18 add edi,0x18 77ff44: eb ca jmp 0x77ff10 77ff46: 8b 75 ec mov esi,DWORD PTR [ebp-0x14] 77ff49: 8b 7d 10 mov edi,DWORD PTR [ebp+0x10] 77ff4c: 3b f7 cmp esi,edi 77ff4e: 74 11 je 0x77ff61 77ff50: 8b 16 mov edx,DWORD PTR [esi] 77ff52: 8b 02 mov eax,DWORD PTR [edx] 77ff54: 6a 00 push 0x0 77ff56: 8b ce mov ecx,esi 77ff58: ff d0 call eax 77ff5a: 83 c6 18 add esi,0x18 77ff5d: 3b f7 cmp esi,edi 77ff5f: 75 ef jne 0x77ff50 77ff61: 6a 00 push 0x0 77ff63: 6a 00 push 0x0 77ff65: e8 52 50 1a 00 call 0x924fbc 77ff6a: 8b c6 mov eax,esi 77ff6c: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc] 77ff6f: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx 77ff76: 59 pop ecx 77ff77: 5f pop edi 77ff78: 5e pop esi 77ff79: 5b pop ebx 77ff7a: 8b e5 mov esp,ebp 77ff7c: 5d pop ebp 77ff7d: c3 ret 77ff7e: cc int3 77ff7f: cc int3 77ff80: 55 push ebp 77ff81: 8b ec mov ebp,esp 77ff83: 6a ff push 0xffffffff 77ff85: 68 60 86 98 00 push 0x988660 77ff8a: 64 a1 00 00 00 00 mov eax,fs:0x0 77ff90: 50 push eax 77ff91: 83 ec 0c sub esp,0xc 77ff94: 53 push ebx 77ff95: 56 push esi 77ff96: 57 push edi 77ff97: a1 78 8b af 00 mov eax,ds:0xaf8b78 77ff9c: 33 c5 xor eax,ebp 77ff9e: 50 push eax 77ff9f: 8d 45 f4 lea eax,[ebp-0xc] 77ffa2: 64 a3 00 00 00 00 mov fs:0x0,eax 77ffa8: 89 65 f0 mov DWORD PTR [ebp-0x10],esp 77ffab: 8b f9 mov edi,ecx 77ffad: 89 7d e8 mov DWORD PTR [ebp-0x18],edi 77ffb0: 8b 45 0c mov eax,DWORD PTR [ebp+0xc] 77ffb3: 89 45 ec mov DWORD PTR [ebp-0x14],eax 77ffb6: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0 77ffbd: 8d 49 00 lea ecx,[ecx+0x0] 77ffc0: 3b 45 10 cmp eax,DWORD PTR [ebp+0x10] 77ffc3: 74 71 je 0x780036 77ffc5: 8b 4d 08 mov ecx,DWORD PTR [ebp+0x8] 77ffc8: 83 c0 08 add eax,0x8 77ffcb: 8d 71 04 lea esi,[ecx+0x4] 77ffce: 50 push eax 77ffcf: 8b 06 mov eax,DWORD PTR [esi] 77ffd1: 50 push eax 77ffd2: 51 push ecx 77ffd3: 8b cf mov ecx,edi 77ffd5: e8 c6 c0 ff ff call 0x77c0a0 77ffda: 8b 4f 04 mov ecx,DWORD PTR [edi+0x4] 77ffdd: ba a9 aa aa 0a mov edx,0xaaaaaa9 77ffe2: 2b d1 sub edx,ecx 77ffe4: 83 fa 01 cmp edx,0x1 77ffe7: 73 0b jae 0x77fff4 77ffe9: 68 b0 20 9e 00 push 0x9e20b0 77ffee: ff 15 50 d1 9d 00 call DWORD PTR ds:0x9dd150 77fff4: 41 inc ecx 77fff5: 89 4f 04 mov DWORD PTR [edi+0x4],ecx 77fff8: 89 06 mov DWORD PTR [esi],eax 77fffa: 8b 48 04 mov ecx,DWORD PTR [eax+0x4] 77fffd: 89 01 mov DWORD PTR [ecx],eax 77ffff: 8b 55 0c mov edx,DWORD PTR [ebp+0xc] 780002: 8b 02 mov eax,DWORD PTR [edx] 780004: 89 45 0c mov DWORD PTR [ebp+0xc],eax 780007: eb b7 jmp 0x77ffc0 780009: 8b 75 ec mov esi,DWORD PTR [ebp-0x14] 78000c: 3b 75 0c cmp esi,DWORD PTR [ebp+0xc] 78000f: 74 1c je 0x78002d 780011: 8b 7d e8 mov edi,DWORD PTR [ebp-0x18] 780014: 8b 45 08 mov eax,DWORD PTR [ebp+0x8] 780017: 8b 40 04 mov eax,DWORD PTR [eax+0x4] 78001a: 50 push eax 78001b: 8d 4d e8 lea ecx,[ebp-0x18] 78001e: 51 push ecx 78001f: 8b cf mov ecx,edi 780021: e8 ea bf ff ff call 0x77c010 780026: 8b 36 mov esi,DWORD PTR [esi] 780028: 3b 75 0c cmp esi,DWORD PTR [ebp+0xc] 78002b: 75 e7 jne 0x780014 78002d: 6a 00 push 0x0 78002f: 6a 00 push 0x0 780031: e8 86 4f 1a 00 call 0x924fbc 780036: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc] 780039: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx