84 lines
3.8 KiB
Text
84 lines
3.8 KiB
Text
|
|
dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
008182c0 <.text+0x4172c0>:
|
|
8182c0: 55 push ebp
|
|
8182c1: 8b ec mov ebp,esp
|
|
8182c3: 6a ff push 0xffffffff
|
|
8182c5: 68 3b f0 96 00 push 0x96f03b
|
|
8182ca: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
8182d0: 50 push eax
|
|
8182d1: 83 ec 10 sub esp,0x10
|
|
8182d4: 56 push esi
|
|
8182d5: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
8182da: 33 c5 xor eax,ebp
|
|
8182dc: 50 push eax
|
|
8182dd: 8d 45 f4 lea eax,[ebp-0xc]
|
|
8182e0: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
8182e6: 8b f1 mov esi,ecx
|
|
8182e8: 8d 4d e4 lea ecx,[ebp-0x1c]
|
|
8182eb: e8 d0 95 ec ff call 0x6e18c0
|
|
8182f0: 8d 45 e4 lea eax,[ebp-0x1c]
|
|
8182f3: 56 push esi
|
|
8182f4: 50 push eax
|
|
8182f5: e8 e6 95 ec ff call 0x6e18e0
|
|
8182fa: 83 c4 08 add esp,0x8
|
|
8182fd: 84 c0 test al,al
|
|
8182ff: 74 59 je 0x81835a
|
|
818301: 83 be 08 03 00 00 00 cmp DWORD PTR [esi+0x308],0x0
|
|
818308: 75 29 jne 0x818333
|
|
81830a: 6a 0c push 0xc
|
|
81830c: e8 a5 cc 10 00 call 0x924fb6
|
|
818311: 83 c4 04 add esp,0x4
|
|
818314: 89 45 f0 mov DWORD PTR [ebp-0x10],eax
|
|
818317: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0
|
|
81831e: 85 c0 test eax,eax
|
|
818320: 74 09 je 0x81832b
|
|
818322: 8b c8 mov ecx,eax
|
|
818324: e8 97 95 ec ff call 0x6e18c0
|
|
818329: eb 02 jmp 0x81832d
|
|
81832b: 33 c0 xor eax,eax
|
|
81832d: 89 86 08 03 00 00 mov DWORD PTR [esi+0x308],eax
|
|
818333: 8b b6 08 03 00 00 mov esi,DWORD PTR [esi+0x308]
|
|
818339: 8b 4d e4 mov ecx,DWORD PTR [ebp-0x1c]
|
|
81833c: 89 0e mov DWORD PTR [esi],ecx
|
|
81833e: 8b 55 e8 mov edx,DWORD PTR [ebp-0x18]
|
|
818341: 89 56 04 mov DWORD PTR [esi+0x4],edx
|
|
818344: 8b 45 ec mov eax,DWORD PTR [ebp-0x14]
|
|
818347: 89 46 08 mov DWORD PTR [esi+0x8],eax
|
|
81834a: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
81834d: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
818354: 59 pop ecx
|
|
818355: 5e pop esi
|
|
818356: 8b e5 mov esp,ebp
|
|
818358: 5d pop ebp
|
|
818359: c3 ret
|
|
81835a: 8b 8e 08 03 00 00 mov ecx,DWORD PTR [esi+0x308]
|
|
818360: 51 push ecx
|
|
818361: e8 44 cc 10 00 call 0x924faa
|
|
818366: 83 c4 04 add esp,0x4
|
|
818369: c7 86 08 03 00 00 00 mov DWORD PTR [esi+0x308],0x0
|
|
818370: 00 00 00
|
|
818373: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
818376: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
81837d: 59 pop ecx
|
|
81837e: 5e pop esi
|
|
81837f: 8b e5 mov esp,ebp
|
|
818381: 5d pop ebp
|
|
818382: c3 ret
|
|
818383: cc int3
|
|
818384: cc int3
|
|
818385: cc int3
|
|
818386: cc int3
|
|
818387: cc int3
|
|
818388: cc int3
|
|
818389: cc int3
|
|
81838a: cc int3
|
|
81838b: cc int3
|
|
81838c: cc int3
|
|
81838d: cc int3
|
|
81838e: cc int3
|
|
81838f: cc int3
|