89 lines
4.1 KiB
Text
89 lines
4.1 KiB
Text
|
|
dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
0086c570 <.text+0x46b570>:
|
|
86c570: 83 c4 18 add esp,0x18
|
|
86c573: 03 f3 add esi,ebx
|
|
86c575: 89 77 04 mov DWORD PTR [edi+0x4],esi
|
|
86c578: 5f pop edi
|
|
86c579: 5e pop esi
|
|
86c57a: 5b pop ebx
|
|
86c57b: 5d pop ebp
|
|
86c57c: c2 04 00 ret 0x4
|
|
86c57f: cc int3
|
|
86c580: 55 push ebp
|
|
86c581: 8b ec mov ebp,esp
|
|
86c583: 6a ff push 0xffffffff
|
|
86c585: 68 82 81 96 00 push 0x968182
|
|
86c58a: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
86c590: 50 push eax
|
|
86c591: 51 push ecx
|
|
86c592: 56 push esi
|
|
86c593: 57 push edi
|
|
86c594: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
86c599: 33 c5 xor eax,ebp
|
|
86c59b: 50 push eax
|
|
86c59c: 8d 45 f4 lea eax,[ebp-0xc]
|
|
86c59f: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
86c5a5: 8b f9 mov edi,ecx
|
|
86c5a7: 8b 4f 04 mov ecx,DWORD PTR [edi+0x4]
|
|
86c5aa: 8b 75 08 mov esi,DWORD PTR [ebp+0x8]
|
|
86c5ad: 3b f1 cmp esi,ecx
|
|
86c5af: 73 40 jae 0x86c5f1
|
|
86c5b1: 8b 07 mov eax,DWORD PTR [edi]
|
|
86c5b3: 3b c6 cmp eax,esi
|
|
86c5b5: 77 3a ja 0x86c5f1
|
|
86c5b7: 2b f0 sub esi,eax
|
|
86c5b9: b8 09 cb 3d 8d mov eax,0x8d3dcb09
|
|
86c5be: f7 ee imul esi
|
|
86c5c0: 03 d6 add edx,esi
|
|
86c5c2: c1 fa 06 sar edx,0x6
|
|
86c5c5: 8b f2 mov esi,edx
|
|
86c5c7: c1 ee 1f shr esi,0x1f
|
|
86c5ca: 03 f2 add esi,edx
|
|
86c5cc: 3b 4f 08 cmp ecx,DWORD PTR [edi+0x8]
|
|
86c5cf: 75 09 jne 0x86c5da
|
|
86c5d1: 6a 01 push 0x1
|
|
86c5d3: 8b cf mov ecx,edi
|
|
86c5d5: e8 26 cf ff ff call 0x869500
|
|
86c5da: 8b 4f 04 mov ecx,DWORD PTR [edi+0x4]
|
|
86c5dd: 6b f6 74 imul esi,esi,0x74
|
|
86c5e0: 03 37 add esi,DWORD PTR [edi]
|
|
86c5e2: 89 4d 08 mov DWORD PTR [ebp+0x8],ecx
|
|
86c5e5: 89 4d f0 mov DWORD PTR [ebp-0x10],ecx
|
|
86c5e8: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0
|
|
86c5ef: eb 1e jmp 0x86c60f
|
|
86c5f1: 3b 4f 08 cmp ecx,DWORD PTR [edi+0x8]
|
|
86c5f4: 75 09 jne 0x86c5ff
|
|
86c5f6: 6a 01 push 0x1
|
|
86c5f8: 8b cf mov ecx,edi
|
|
86c5fa: e8 01 cf ff ff call 0x869500
|
|
86c5ff: 8b 4f 04 mov ecx,DWORD PTR [edi+0x4]
|
|
86c602: 89 4d 08 mov DWORD PTR [ebp+0x8],ecx
|
|
86c605: 89 4d f0 mov DWORD PTR [ebp-0x10],ecx
|
|
86c608: c7 45 fc 01 00 00 00 mov DWORD PTR [ebp-0x4],0x1
|
|
86c60f: 85 c9 test ecx,ecx
|
|
86c611: 74 06 je 0x86c619
|
|
86c613: 56 push esi
|
|
86c614: e8 d7 cd ef ff call 0x7693f0
|
|
86c619: 83 47 04 74 add DWORD PTR [edi+0x4],0x74
|
|
86c61d: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
86c620: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
86c627: 59 pop ecx
|
|
86c628: 5f pop edi
|
|
86c629: 5e pop esi
|
|
86c62a: 8b e5 mov esp,ebp
|
|
86c62c: 5d pop ebp
|
|
86c62d: c2 04 00 ret 0x4
|
|
86c630: 55 push ebp
|
|
86c631: 8b ec mov ebp,esp
|
|
86c633: 56 push esi
|
|
86c634: 8b 75 08 mov esi,DWORD PTR [ebp+0x8]
|
|
86c637: 57 push edi
|
|
86c638: 8b f9 mov edi,ecx
|
|
86c63a: 8b 4f 04 mov ecx,DWORD PTR [edi+0x4]
|
|
86c63d: 8b 17 mov edx,DWORD PTR [edi]
|
|
86c63f: 8b mov eax,ecx
|