dumps/sots.exe: file format pei-i386 Disassembly of section .text: 0084ee20 <.text+0x44de20>: 84ee20: 8b e5 mov esp,ebp 84ee22: 5d pop ebp 84ee23: c3 ret 84ee24: cc int3 84ee25: cc int3 84ee26: cc int3 84ee27: cc int3 84ee28: cc int3 84ee29: cc int3 84ee2a: cc int3 84ee2b: cc int3 84ee2c: cc int3 84ee2d: cc int3 84ee2e: cc int3 84ee2f: cc int3 84ee30: 55 push ebp 84ee31: 8b ec mov ebp,esp 84ee33: 6a ff push 0xffffffff 84ee35: 68 3e 61 99 00 push 0x99613e 84ee3a: 64 a1 00 00 00 00 mov eax,fs:0x0 84ee40: 50 push eax 84ee41: 51 push ecx 84ee42: 53 push ebx 84ee43: 56 push esi 84ee44: a1 78 8b af 00 mov eax,ds:0xaf8b78 84ee49: 33 c5 xor eax,ebp 84ee4b: 50 push eax 84ee4c: 8d 45 f4 lea eax,[ebp-0xc] 84ee4f: 64 a3 00 00 00 00 mov fs:0x0,eax 84ee55: 8b f1 mov esi,ecx 84ee57: 89 75 f0 mov DWORD PTR [ebp-0x10],esi 84ee5a: 33 db xor ebx,ebx 84ee5c: 8d 4e 08 lea ecx,[esi+0x8] 84ee5f: c7 06 58 19 a2 00 mov DWORD PTR [esi],0xa21958 84ee65: 53 push ebx 84ee66: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf 84ee6d: 89 59 10 mov DWORD PTR [ecx+0x10],ebx 84ee70: 68 0c 10 9e 00 push 0x9e100c 84ee75: 89 5d fc mov DWORD PTR [ebp-0x4],ebx 84ee78: 88 19 mov BYTE PTR [ecx],bl 84ee7a: e8 d1 66 bd ff call 0x425550 84ee7f: 8d 4e 24 lea ecx,[esi+0x24] 84ee82: 53 push ebx 84ee83: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf 84ee8a: 89 59 10 mov DWORD PTR [ecx+0x10],ebx 84ee8d: 68 0c 10 9e 00 push 0x9e100c 84ee92: c6 45 fc 01 mov BYTE PTR [ebp-0x4],0x1 84ee96: 88 19 mov BYTE PTR [ecx],bl 84ee98: e8 b3 66 bd ff call 0x425550 84ee9d: 8d 4e 50 lea ecx,[esi+0x50] 84eea0: 53 push ebx 84eea1: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf 84eea8: 89 59 10 mov DWORD PTR [ecx+0x10],ebx 84eeab: 68 0c 10 9e 00 push 0x9e100c 84eeb0: c6 45 fc 02 mov BYTE PTR [ebp-0x4],0x2 84eeb4: 88 19 mov BYTE PTR [ecx],bl 84eeb6: e8 95 66 bd ff call 0x425550 84eebb: 89 5e 04 mov DWORD PTR [esi+0x4],ebx 84eebe: 89 5e 40 mov DWORD PTR [esi+0x40],ebx 84eec1: a1 c8 0d af 00 mov eax,ds:0xaf0dc8 84eec6: 89 46 44 mov DWORD PTR [esi+0x44],eax 84eec9: 8b 0d cc 0d af 00 mov ecx,DWORD PTR ds:0xaf0dcc 84eecf: 89 4e 48 mov DWORD PTR [esi+0x48],ecx 84eed2: 8b 15 d0 0d af 00 mov edx,DWORD PTR ds:0xaf0dd0 84eed8: 89 56 4c mov DWORD PTR [esi+0x4c],edx 84eedb: 89 5e 6c mov DWORD PTR [esi+0x6c],ebx 84eede: 89 5e 70 mov DWORD PTR [esi+0x70],ebx 84eee1: 8b c6 mov eax,esi 84eee3: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc] 84eee6: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx 84eeed: 59 pop ecx 84eeee: 5e pop esi 84eeef: 5b pop ebx 84eef0: 8b e5 mov esp,ebp 84eef2: 5d pop ebp 84eef3: c3 ret 84eef4: cc int3 84eef5: cc int3 84eef6: cc int3 84eef7: cc int3 84eef8: cc int3 84eef9: cc int3 84eefa: cc int3 84eefb: cc int3 84eefc: cc int3 84eefd: cc int3 84eefe: cc int3 84eeff: cc int3 84ef00: 55 push ebp 84ef01: 8b ec mov ebp,esp 84ef03: 6a ff push 0xffffffff 84ef05: 68 08 92 98 00 push 0x989208 84ef0a: 64 a1 00 00 00 00 mov eax,fs:0x0 84ef10: 50 push eax 84ef11: 51 push ecx 84ef12: 56 push esi 84ef13: a1 78 8b af 00 mov eax,ds:0xaf8b78 84ef18: 33 c5 xor eax,ebp 84ef1a: 50 push eax 84ef1b: 8d 45 f4 lea eax,[ebp-0xc] 84ef1e: 64 a3 00 00 00 00 mov fs:0x0,eax 84ef24: 8b f1 mov esi,ecx 84ef26: 89 75 f0 mov DWORD PTR [ebp-0x10],esi 84ef29: c7 06 c8 13 a3 00 mov DWORD PTR [esi],0xa313c8 84ef2f: 8d 4e 04 lea ecx,[esi+0x4] 84ef32: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0 84ef39: e8 a2 92 ce ff call 0x5381e0 84ef3e: f6 45 08 01 test BYTE PTR [ebp+0x8],0x1 84ef42: c7 06 bc 22 9e 00 mov DWORD PTR [esi],0x9e22bc 84ef48: 74 09 je 0x84ef53 84ef4a: 56 push esi 84ef4b: e8 5a 60 0d 00 call 0x924faa 84ef50: 83 c4 04 add esp,0x4 84ef53: 8b c6 mov eax,esi 84ef55: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc] 84ef58: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx 84ef5f: 59 pop ecx 84ef60: 5e pop esi 84ef61: 8b e5 mov esp,ebp 84ef63: 5d pop ebp 84ef64: c2 04 00 ret 0x4 84ef67: cc int3 84ef68: cc int3 84ef69: cc int3 84ef6a: cc int3 84ef6b: cc int3 84ef6c: cc int3 84ef6d: cc int3 84ef6e: cc int3 84ef6f: cc int3 84ef70: 55 push ebp 84ef71: 8b ec mov ebp,esp 84ef73: 6a ff push 0xffffffff 84ef75: 68 6b 61 99 00 push 0x99616b 84ef7a: 64 a1 00 00 00 00 mov eax,fs:0x0 84ef80: 50 push eax 84ef81: 83 ec 7c sub esp,0x7c 84ef84: a1 78 8b af 00 mov eax,ds:0xaf8b78 84ef89: 33 c5 xor eax,ebp 84ef8b: 89 45 f0 mov DWORD PTR [ebp-0x10],eax 84ef8e: 53 push ebx 84ef8f: 56 push esi 84ef90: 57 push edi 84ef91: 50 push eax 84ef92: 8d 45 f4 lea eax,[ebp-0xc] 84ef95: 64 a3 00 00 00 00 mov fs:0x0,eax 84ef9b: 8b 5d 08 mov ebx,DWORD PTR [ebp+0x8] 84ef9e: 8b 45 10 mov eax,DWORD PTR [ebp+0x10] 84efa1: 8b 7d 0c mov edi,DWORD PTR [ebp+0xc] 84efa4: 8b 75 14 mov esi,DWORD PTR [ebp+0x14] 84efa7: 89 85 78 ff ff ff mov DWORD PTR [ebp-0x88],eax 84efad: 85 db test ebx,ebx 84efaf: 74 2c je 0x84efdd 84efb1: 8d 8d 7c ff ff ff lea ecx,[ebp-0x84] 84efb7: e8 74 fe ff ff call 0x84ee30 84efbc: 50 push eax 84efbd: 8b cb mov ecx,ebx 84efbf: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0 84efc6: e8 95 d4 f1 ff call 0x76c460 84efcb: 8d 8d 7c ff ff ff lea ecx,[ebp-0x84] 84efd1: c7 45 fc ff ff ff ff mov DWORD PTR [ebp-0x4],0xffffffff 84efd8: e8 b3 be dc ff call 0x61ae90 84efdd: f6 05 98 9f b2 00 04 test BYTE PTR ds:0xb29f98,0x4 84efe4: 74 68 je 0x84f04e 84efe6: 85 ff test edi,edi 84efe8: 74 64 je 0x84f04e 84efea: a1 9c 9f b2 00 mov eax,ds:0xb29f9c 84efef: 85 c0 test eax,eax 84eff1: 74 5b je 0x84f04e 84eff3: 57 push edi 84eff4: 8d 88 84 00 00 00 lea ecx,[eax+0x84] 84effa: e8 71 a0 06 00 call 0x8b9070 84efff: 85 test eax,eax