85 lines
4.1 KiB
Text
85 lines
4.1 KiB
Text
|
|
/home/alex/sots-re/dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
00884cb0 <.text+0x483cb0>:
|
|
884cb0: 55 push ebp
|
|
884cb1: 8b ec mov ebp,esp
|
|
884cb3: 6a ff push 0xffffffff
|
|
884cb5: 68 72 0b 98 00 push 0x980b72
|
|
884cba: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
884cc0: 50 push eax
|
|
884cc1: 51 push ecx
|
|
884cc2: 56 push esi
|
|
884cc3: 57 push edi
|
|
884cc4: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
884cc9: 33 c5 xor eax,ebp
|
|
884ccb: 50 push eax
|
|
884ccc: 8d 45 f4 lea eax,[ebp-0xc]
|
|
884ccf: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
884cd5: 8b f9 mov edi,ecx
|
|
884cd7: 8b 4f 04 mov ecx,DWORD PTR [edi+0x4]
|
|
884cda: 8b 75 08 mov esi,DWORD PTR [ebp+0x8]
|
|
884cdd: 3b f1 cmp esi,ecx
|
|
884cdf: 73 59 jae 0x884d3a
|
|
884ce1: 8b 07 mov eax,DWORD PTR [edi]
|
|
884ce3: 3b c6 cmp eax,esi
|
|
884ce5: 77 53 ja 0x884d3a
|
|
884ce7: 2b f0 sub esi,eax
|
|
884ce9: b8 ab aa aa 2a mov eax,0x2aaaaaab
|
|
884cee: f7 ee imul esi
|
|
884cf0: c1 fa 02 sar edx,0x2
|
|
884cf3: 8b f2 mov esi,edx
|
|
884cf5: c1 ee 1f shr esi,0x1f
|
|
884cf8: 03 f2 add esi,edx
|
|
884cfa: 3b 4f 08 cmp ecx,DWORD PTR [edi+0x8]
|
|
884cfd: 75 09 jne 0x884d08
|
|
884cff: 6a 01 push 0x1
|
|
884d01: 8b cf mov ecx,edi
|
|
884d03: e8 98 f4 ff ff call 0x8841a0
|
|
884d08: 8b 0f mov ecx,DWORD PTR [edi]
|
|
884d0a: 8d 04 76 lea eax,[esi+esi*2]
|
|
884d0d: 8d 0c c1 lea ecx,[ecx+eax*8]
|
|
884d10: 8b 47 04 mov eax,DWORD PTR [edi+0x4]
|
|
884d13: 89 45 08 mov DWORD PTR [ebp+0x8],eax
|
|
884d16: 89 45 f0 mov DWORD PTR [ebp-0x10],eax
|
|
884d19: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0
|
|
884d20: 85 c0 test eax,eax
|
|
884d22: 74 54 je 0x884d78
|
|
884d24: c7 00 7c f0 a0 00 mov DWORD PTR [eax],0xa0f07c
|
|
884d2a: 8b 51 04 mov edx,DWORD PTR [ecx+0x4]
|
|
884d2d: 83 c1 08 add ecx,0x8
|
|
884d30: c6 45 fc 01 mov BYTE PTR [ebp-0x4],0x1
|
|
884d34: 89 50 04 mov DWORD PTR [eax+0x4],edx
|
|
884d37: 51 push ecx
|
|
884d38: eb 36 jmp 0x884d70
|
|
884d3a: 3b 4f 08 cmp ecx,DWORD PTR [edi+0x8]
|
|
884d3d: 75 09 jne 0x884d48
|
|
884d3f: 6a 01 push 0x1
|
|
884d41: 8b cf mov ecx,edi
|
|
884d43: e8 58 f4 ff ff call 0x8841a0
|
|
884d48: 8b 47 04 mov eax,DWORD PTR [edi+0x4]
|
|
884d4b: 89 45 08 mov DWORD PTR [ebp+0x8],eax
|
|
884d4e: 89 45 f0 mov DWORD PTR [ebp-0x10],eax
|
|
884d51: c7 45 fc 02 00 00 00 mov DWORD PTR [ebp-0x4],0x2
|
|
884d58: 85 c0 test eax,eax
|
|
884d5a: 74 1c je 0x884d78
|
|
884d5c: c7 00 7c f0 a0 00 mov DWORD PTR [eax],0xa0f07c
|
|
884d62: 8b 4e 04 mov ecx,DWORD PTR [esi+0x4]
|
|
884d65: 83 c6 08 add esi,0x8
|
|
884d68: c6 45 fc 03 mov BYTE PTR [ebp-0x4],0x3
|
|
884d6c: 89 48 04 mov DWORD PTR [eax+0x4],ecx
|
|
884d6f: 56 push esi
|
|
884d70: 8d 48 08 lea ecx,[eax+0x8]
|
|
884d73: e8 d8 4a ef ff call 0x779850
|
|
884d78: 83 47 04 18 add DWORD PTR [edi+0x4],0x18
|
|
884d7c: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
884d7f: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
884d86: 59 pop ecx
|
|
884d87: 5f pop edi
|
|
884d88: 5e pop esi
|
|
884d89: 8b e5 mov esp,ebp
|
|
884d8b: 5d pop ebp
|
|
884d8c: c2 04 00 ret 0x4
|