/home/alex/sots-re/dumps/sots.exe: file format pei-i386 Disassembly of section .text: 00629580 <.text+0x228580>: 629580: 57 push edi 629581: 8b f9 mov edi,ecx 629583: 83 3f 00 cmp DWORD PTR [edi],0x0 629586: 74 36 je 0x6295be 629588: 53 push ebx 629589: 56 push esi 62958a: ff 15 2c d1 9d 00 call DWORD PTR ds:0x9dd12c 629590: 8b 5f 04 mov ebx,DWORD PTR [edi+0x4] 629593: 8b 37 mov esi,DWORD PTR [edi] 629595: 3b f3 cmp esi,ebx 629597: 74 18 je 0x6295b1 629599: 8d a4 24 00 00 00 00 lea esp,[esp+0x0] 6295a0: 8b 06 mov eax,DWORD PTR [esi] 6295a2: 8b 10 mov edx,DWORD PTR [eax] 6295a4: 6a 00 push 0x0 6295a6: 8b ce mov ecx,esi 6295a8: ff d2 call edx 6295aa: 83 c6 74 add esi,0x74 6295ad: 3b f3 cmp esi,ebx 6295af: 75 ef jne 0x6295a0 6295b1: 8b 07 mov eax,DWORD PTR [edi] 6295b3: 50 push eax 6295b4: e8 f1 b9 2f 00 call 0x924faa 6295b9: 83 c4 04 add esp,0x4 6295bc: 5e pop esi 6295bd: 5b pop ebx 6295be: 33 c0 xor eax,eax 6295c0: 89 07 mov DWORD PTR [edi],eax 6295c2: 89 47 04 mov DWORD PTR [edi+0x4],eax 6295c5: 89 47 08 mov DWORD PTR [edi+0x8],eax 6295c8: 5f pop edi 6295c9: c3 ret 6295ca: cc int3 6295cb: cc int3 6295cc: cc int3 6295cd: cc int3