/home/alex/sots-re/dumps/sots.exe: file format pei-i386 Disassembly of section .text: 00879eb0 <.text+0x478eb0>: 879eb0: 55 push ebp 879eb1: 8b ec mov ebp,esp 879eb3: 51 push ecx 879eb4: 53 push ebx 879eb5: 8b 5d 08 mov ebx,DWORD PTR [ebp+0x8] 879eb8: 8b d1 mov edx,ecx 879eba: 8b 4a 08 mov ecx,DWORD PTR [edx+0x8] 879ebd: 56 push esi 879ebe: 8b 72 04 mov esi,DWORD PTR [edx+0x4] 879ec1: 8b c6 mov eax,esi 879ec3: 83 c3 ce add ebx,0xffffffce 879ec6: 57 push edi 879ec7: 89 55 fc mov DWORD PTR [ebp-0x4],edx 879eca: 8b f9 mov edi,ecx 879ecc: 3b c1 cmp eax,ecx 879ece: 74 0e je 0x879ede 879ed0: 39 58 04 cmp DWORD PTR [eax+0x4],ebx 879ed3: 7d 09 jge 0x879ede 879ed5: 8b f8 mov edi,eax 879ed7: 83 c0 18 add eax,0x18 879eda: 3b c1 cmp eax,ecx 879edc: 75 f2 jne 0x879ed0 879ede: 3b f9 cmp edi,ecx 879ee0: 74 56 je 0x879f38 879ee2: 3b f7 cmp esi,edi 879ee4: 74 52 je 0x879f38 879ee6: 8b d9 mov ebx,ecx 879ee8: 3b fb cmp edi,ebx 879eea: 74 2c je 0x879f18 879eec: 8b c7 mov eax,edi 879eee: 2b c6 sub eax,esi 879ef0: 89 45 08 mov DWORD PTR [ebp+0x8],eax 879ef3: eb 03 jmp 0x879ef8 879ef5: 8b 45 08 mov eax,DWORD PTR [ebp+0x8] 879ef8: 8b 44 30 04 mov eax,DWORD PTR [eax+esi*1+0x4] 879efc: 8d 4f 08 lea ecx,[edi+0x8] 879eff: 51 push ecx 879f00: 8d 4e 08 lea ecx,[esi+0x8] 879f03: 89 46 04 mov DWORD PTR [esi+0x4],eax 879f06: e8 a5 07 f0 ff call 0x77a6b0 879f0b: 83 c7 18 add edi,0x18 879f0e: 83 c6 18 add esi,0x18 879f11: 3b fb cmp edi,ebx 879f13: 75 e0 jne 0x879ef5 879f15: 8b 55 fc mov edx,DWORD PTR [ebp-0x4] 879f18: 8b 5a 08 mov ebx,DWORD PTR [edx+0x8] 879f1b: 8b fe mov edi,esi 879f1d: 3b f3 cmp esi,ebx 879f1f: 74 14 je 0x879f35 879f21: 8b 17 mov edx,DWORD PTR [edi] 879f23: 8b 02 mov eax,DWORD PTR [edx] 879f25: 6a 00 push 0x0 879f27: 8b cf mov ecx,edi 879f29: ff d0 call eax 879f2b: 83 c7 18 add edi,0x18 879f2e: 3b fb cmp edi,ebx 879f30: 75 ef jne 0x879f21 879f32: 8b 55 fc mov edx,DWORD PTR [ebp-0x4] 879f35: 89 72 08 mov DWORD PTR [edx+0x8],esi 879f38: 5f pop edi 879f39: 5e pop esi 879f3a: 5b pop ebx 879f3b: 8b e5 mov esp,ebp 879f3d: 5d pop ebp 879f3e: c2 04 00 ret 0x4 879f41: cc int3 879f42: cc int3 879f43: cc int3 879f44: cc int3 879f45: cc int3 879f46: cc int3 879f47: cc int3 879f48: cc int3 879f49: cc int3 879f4a: cc int3 879f4b: cc int3 879f4c: cc int3 879f4d: cc int3 879f4e: cc int3 879f4f: cc int3 879f50: 55 push ebp 879f51: 8b ec mov ebp,esp 879f53: 56 push esi 879f54: 8b f1 mov esi,ecx 879f56: e8 a5 ae ff ff call 0x874e00 879f5b: f6 45 08 01 test BYTE PTR [ebp+0x8],0x1 879f5f: 74 09 je 0x879f6a 879f61: 56 push esi 879f62: e8 43 b0 0a 00 call 0x924faa 879f67: 83 c4 04 add esp,0x4 879f6a: 8b c6 mov eax,esi 879f6c: 5e pop esi 879f6d: 5d pop ebp 879f6e: c2 04 00 ret 0x4 879f71: cc int3 879f72: cc int3 879f73: cc int3 879f74: cc int3 879f75: cc int3 879f76: cc int3 879f77: cc int3 879f78: cc int3 879f79: cc int3 879f7a: cc int3 879f7b: cc int3 879f7c: cc int3 879f7d: cc int3 879f7e: cc int3 879f7f: cc int3 879f80: 55 push ebp 879f81: 8b ec mov ebp,esp 879f83: 8b 55 18 mov edx,DWORD PTR [ebp+0x18] 879f86: 8a 45 08 mov al,BYTE PTR [ebp+0x8] 879f89: 53 push ebx 879f8a: 56 push esi 879f8b: 8b f1 mov esi,ecx 879f8d: 8b 4d 14 mov ecx,DWORD PTR [ebp+0x14] 879f90: 89 4e 08 mov DWORD PTR [esi+0x8],ecx 879f93: 52 push edx 879f94: 8d 4e 20 lea ecx,[esi+0x20] 879f97: 88 46 04 mov BYTE PTR [esi+0x4],al 879f9a: e8 51 50 f4 ff call 0x7beff0 879f9f: 8b 45 1c mov eax,DWORD PTR [ebp+0x1c] 879fa2: 8a 4d 20 mov cl,BYTE PTR [ebp+0x20] 879fa5: 8a 55 0c mov dl,BYTE PTR [ebp+0xc] 879fa8: 89 46 14 mov DWORD PTR [esi+0x14],eax 879fab: 8a 45 10 mov al,BYTE PTR [ebp+0x10] 879fae: 88 4e 18 mov BYTE PTR [esi+0x18],cl 879fb1: 8b 4d 24 mov ecx,DWORD PTR [ebp+0x24] 879fb4: 88 56 10 mov BYTE PTR [esi+0x10],dl 879fb7: 8b 55 28 mov edx,DWORD PTR [ebp+0x28] 879fba: 88 46 11 mov BYTE PTR [esi+0x11],al 879fbd: 8b 45 2c mov eax,DWORD PTR [ebp+0x2c]