173 lines
7.8 KiB
Text
173 lines
7.8 KiB
Text
|
|
dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
00869500 <.text+0x468500>:
|
|
869500: 55 push ebp
|
|
869501: 8b ec mov ebp,esp
|
|
869503: 53 push ebx
|
|
869504: 8b 19 mov ebx,DWORD PTR [ecx]
|
|
869506: 56 push esi
|
|
869507: 8b 71 04 mov esi,DWORD PTR [ecx+0x4]
|
|
86950a: 2b f3 sub esi,ebx
|
|
86950c: b8 09 cb 3d 8d mov eax,0x8d3dcb09
|
|
869511: f7 ee imul esi
|
|
869513: 8b 45 08 mov eax,DWORD PTR [ebp+0x8]
|
|
869516: 03 d6 add edx,esi
|
|
869518: c1 fa 06 sar edx,0x6
|
|
86951b: 8b f2 mov esi,edx
|
|
86951d: c1 ee 1f shr esi,0x1f
|
|
869520: 03 f2 add esi,edx
|
|
869522: ba 2c f7 34 02 mov edx,0x234f72c
|
|
869527: 2b d0 sub edx,eax
|
|
869529: 57 push edi
|
|
86952a: 3b d6 cmp edx,esi
|
|
86952c: 73 0b jae 0x869539
|
|
86952e: 68 90 1f 9e 00 push 0x9e1f90
|
|
869533: ff 15 50 d1 9d 00 call DWORD PTR ds:0x9dd150
|
|
869539: 8b 79 08 mov edi,DWORD PTR [ecx+0x8]
|
|
86953c: 03 f0 add esi,eax
|
|
86953e: 2b fb sub edi,ebx
|
|
869540: b8 09 cb 3d 8d mov eax,0x8d3dcb09
|
|
869545: f7 ef imul edi
|
|
869547: 03 d7 add edx,edi
|
|
869549: c1 fa 06 sar edx,0x6
|
|
86954c: 8b c2 mov eax,edx
|
|
86954e: c1 e8 1f shr eax,0x1f
|
|
869551: 03 c2 add eax,edx
|
|
869553: 3b f0 cmp esi,eax
|
|
869555: 76 21 jbe 0x869578
|
|
869557: 8b d0 mov edx,eax
|
|
869559: d1 ea shr edx,1
|
|
86955b: bf 2c f7 34 02 mov edi,0x234f72c
|
|
869560: 2b fa sub edi,edx
|
|
869562: 3b f8 cmp edi,eax
|
|
869564: 73 04 jae 0x86956a
|
|
869566: 33 c0 xor eax,eax
|
|
869568: eb 02 jmp 0x86956c
|
|
86956a: 03 c2 add eax,edx
|
|
86956c: 3b c6 cmp eax,esi
|
|
86956e: 73 02 jae 0x869572
|
|
869570: 8b c6 mov eax,esi
|
|
869572: 50 push eax
|
|
869573: e8 68 c9 ff ff call 0x865ee0
|
|
869578: 5f pop edi
|
|
869579: 5e pop esi
|
|
86957a: 5b pop ebx
|
|
86957b: 5d pop ebp
|
|
86957c: c2 04 00 ret 0x4
|
|
86957f: cc int3
|
|
869580: 55 push ebp
|
|
869581: 8b ec mov ebp,esp
|
|
869583: 8b 41 04 mov eax,DWORD PTR [ecx+0x4]
|
|
869586: 8b 55 08 mov edx,DWORD PTR [ebp+0x8]
|
|
869589: 56 push esi
|
|
86958a: 8b 31 mov esi,DWORD PTR [ecx]
|
|
86958c: 57 push edi
|
|
86958d: 2b c6 sub eax,esi
|
|
86958f: bf ff ff ff 07 mov edi,0x7ffffff
|
|
869594: c1 f8 05 sar eax,0x5
|
|
869597: 2b fa sub edi,edx
|
|
869599: 3b f8 cmp edi,eax
|
|
86959b: 73 0b jae 0x8695a8
|
|
86959d: 68 90 1f 9e 00 push 0x9e1f90
|
|
8695a2: ff 15 50 d1 9d 00 call DWORD PTR ds:0x9dd150
|
|
8695a8: 03 c2 add eax,edx
|
|
8695aa: 8b 51 08 mov edx,DWORD PTR [ecx+0x8]
|
|
8695ad: 2b d6 sub edx,esi
|
|
8695af: c1 fa 05 sar edx,0x5
|
|
8695b2: 3b c2 cmp eax,edx
|
|
8695b4: 76 21 jbe 0x8695d7
|
|
8695b6: 8b f2 mov esi,edx
|
|
8695b8: d1 ee shr esi,1
|
|
8695ba: bf ff ff ff 07 mov edi,0x7ffffff
|
|
8695bf: 2b fe sub edi,esi
|
|
8695c1: 3b fa cmp edi,edx
|
|
8695c3: 73 04 jae 0x8695c9
|
|
8695c5: 33 d2 xor edx,edx
|
|
8695c7: eb 02 jmp 0x8695cb
|
|
8695c9: 03 d6 add edx,esi
|
|
8695cb: 3b d0 cmp edx,eax
|
|
8695cd: 73 02 jae 0x8695d1
|
|
8695cf: 8b d0 mov edx,eax
|
|
8695d1: 52 push edx
|
|
8695d2: e8 39 f9 ff ff call 0x868f10
|
|
8695d7: 5f pop edi
|
|
8695d8: 5e pop esi
|
|
8695d9: 5d pop ebp
|
|
8695da: c2 04 00 ret 0x4
|
|
8695dd: cc int3
|
|
8695de: cc int3
|
|
8695df: cc int3
|
|
8695e0: 55 push ebp
|
|
8695e1: 8b ec mov ebp,esp
|
|
8695e3: 8b 51 04 mov edx,DWORD PTR [ecx+0x4]
|
|
8695e6: 56 push esi
|
|
8695e7: 57 push edi
|
|
8695e8: 8b 39 mov edi,DWORD PTR [ecx]
|
|
8695ea: 2b d7 sub edx,edi
|
|
8695ec: b8 67 66 66 66 mov eax,0x66666667
|
|
8695f1: f7 ea imul edx
|
|
8695f3: 8b 45 08 mov eax,DWORD PTR [ebp+0x8]
|
|
8695f6: c1 fa 04 sar edx,0x4
|
|
8695f9: 8b f2 mov esi,edx
|
|
8695fb: c1 ee 1f shr esi,0x1f
|
|
8695fe: 03 f2 add esi,edx
|
|
869600: ba 66 66 66 06 mov edx,0x6666666
|
|
869605: 2b d0 sub edx,eax
|
|
869607: 3b d6 cmp edx,esi
|
|
869609: 73 0b jae 0x869616
|
|
86960b: 68 90 1f 9e 00 push 0x9e1f90
|
|
869610: ff 15 50 d1 9d 00 call DWORD PTR ds:0x9dd150
|
|
869616: 8b 51 08 mov edx,DWORD PTR [ecx+0x8]
|
|
869619: 03 f0 add esi,eax
|
|
86961b: 2b d7 sub edx,edi
|
|
86961d: b8 67 66 66 66 mov eax,0x66666667
|
|
869622: f7 ea imul edx
|
|
869624: c1 fa 04 sar edx,0x4
|
|
869627: 8b c2 mov eax,edx
|
|
869629: c1 e8 1f shr eax,0x1f
|
|
86962c: 03 c2 add eax,edx
|
|
86962e: 3b f0 cmp esi,eax
|
|
869630: 76 21 jbe 0x869653
|
|
869632: 8b d0 mov edx,eax
|
|
869634: d1 ea shr edx,1
|
|
869636: bf 66 66 66 06 mov edi,0x6666666
|
|
86963b: 2b fa sub edi,edx
|
|
86963d: 3b f8 cmp edi,eax
|
|
86963f: 73 04 jae 0x869645
|
|
869641: 33 c0 xor eax,eax
|
|
869643: eb 02 jmp 0x869647
|
|
869645: 03 c2 add eax,edx
|
|
869647: 3b c6 cmp eax,esi
|
|
869649: 73 02 jae 0x86964d
|
|
86964b: 8b c6 mov eax,esi
|
|
86964d: 50 push eax
|
|
86964e: e8 cd fc ff ff call 0x869320
|
|
869653: 5f pop edi
|
|
869654: 5e pop esi
|
|
869655: 5d pop ebp
|
|
869656: c2 04 00 ret 0x4
|
|
869659: cc int3
|
|
86965a: cc int3
|
|
86965b: cc int3
|
|
86965c: cc int3
|
|
86965d: cc int3
|
|
86965e: cc int3
|
|
86965f: cc int3
|
|
869660: 55 push ebp
|
|
869661: 8b ec mov ebp,esp
|
|
869663: 6a ff push 0xffffffff
|
|
869665: 68 c0 85 99 00 push 0x9985c0
|
|
86966a: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
869670: 50 push eax
|
|
869671: 83 ec 08 sub esp,0x8
|
|
869674: 53 push ebx
|
|
869675: 56 push esi
|
|
869676: 57 push edi
|
|
869677: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
86967c: 33 c5 xor eax,ebp
|
|
86967e: 50 push eax
|
|
86967f: 8d lea eax,[ebp-0xc]
|