106 lines
5 KiB
Text
106 lines
5 KiB
Text
|
|
dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
00865ee0 <.text+0x464ee0>:
|
|
865ee0: 55 push ebp
|
|
865ee1: 8b ec mov ebp,esp
|
|
865ee3: 6a ff push 0xffffffff
|
|
865ee5: 68 d0 80 99 00 push 0x9980d0
|
|
865eea: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
865ef0: 50 push eax
|
|
865ef1: 83 ec 0c sub esp,0xc
|
|
865ef4: 53 push ebx
|
|
865ef5: 56 push esi
|
|
865ef6: 57 push edi
|
|
865ef7: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
865efc: 33 c5 xor eax,ebp
|
|
865efe: 50 push eax
|
|
865eff: 8d 45 f4 lea eax,[ebp-0xc]
|
|
865f02: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
865f08: 89 65 f0 mov DWORD PTR [ebp-0x10],esp
|
|
865f0b: 8b f1 mov esi,ecx
|
|
865f0d: 8b 5d 08 mov ebx,DWORD PTR [ebp+0x8]
|
|
865f10: 81 fb 2c f7 34 02 cmp ebx,0x234f72c
|
|
865f16: 76 0b jbe 0x865f23
|
|
865f18: 68 90 1f 9e 00 push 0x9e1f90
|
|
865f1d: ff 15 50 d1 9d 00 call DWORD PTR ds:0x9dd150
|
|
865f23: 8b 4e 08 mov ecx,DWORD PTR [esi+0x8]
|
|
865f26: 2b 0e sub ecx,DWORD PTR [esi]
|
|
865f28: b8 09 cb 3d 8d mov eax,0x8d3dcb09
|
|
865f2d: f7 e9 imul ecx
|
|
865f2f: 03 d1 add edx,ecx
|
|
865f31: c1 fa 06 sar edx,0x6
|
|
865f34: 8b c2 mov eax,edx
|
|
865f36: c1 e8 1f shr eax,0x1f
|
|
865f39: 03 c2 add eax,edx
|
|
865f3b: 3b c3 cmp eax,ebx
|
|
865f3d: 0f 83 9a 00 00 00 jae 0x865fdd
|
|
865f43: 8d 7e 0c lea edi,[esi+0xc]
|
|
865f46: 53 push ebx
|
|
865f47: 8b cf mov ecx,edi
|
|
865f49: e8 f2 4f f2 ff call 0x78af40
|
|
865f4e: 8b 5d 08 mov ebx,DWORD PTR [ebp+0x8]
|
|
865f51: 8b 4e 04 mov ecx,DWORD PTR [esi+0x4]
|
|
865f54: 8b 16 mov edx,DWORD PTR [esi]
|
|
865f56: 53 push ebx
|
|
865f57: 6a 00 push 0x0
|
|
865f59: 57 push edi
|
|
865f5a: 50 push eax
|
|
865f5b: 51 push ecx
|
|
865f5c: 52 push edx
|
|
865f5d: 89 45 e8 mov DWORD PTR [ebp-0x18],eax
|
|
865f60: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0
|
|
865f67: e8 c4 c4 f0 ff call 0x772430
|
|
865f6c: 8b 4e 04 mov ecx,DWORD PTR [esi+0x4]
|
|
865f6f: 8b 1e mov ebx,DWORD PTR [esi]
|
|
865f71: 89 4d ec mov DWORD PTR [ebp-0x14],ecx
|
|
865f74: 2b cb sub ecx,ebx
|
|
865f76: b8 09 cb 3d 8d mov eax,0x8d3dcb09
|
|
865f7b: f7 e9 imul ecx
|
|
865f7d: 03 d1 add edx,ecx
|
|
865f7f: c1 fa 06 sar edx,0x6
|
|
865f82: 8b fa mov edi,edx
|
|
865f84: c1 ef 1f shr edi,0x1f
|
|
865f87: 83 c4 18 add esp,0x18
|
|
865f8a: 03 fa add edi,edx
|
|
865f8c: c7 45 fc ff ff ff ff mov DWORD PTR [ebp-0x4],0xffffffff
|
|
865f93: 85 db test ebx,ebx
|
|
865f95: 74 26 je 0x865fbd
|
|
865f97: 3b 5d ec cmp ebx,DWORD PTR [ebp-0x14]
|
|
865f9a: 74 16 je 0x865fb2
|
|
865f9c: 8d 64 24 00 lea esp,[esp+0x0]
|
|
865fa0: 8b 13 mov edx,DWORD PTR [ebx]
|
|
865fa2: 8b 02 mov eax,DWORD PTR [edx]
|
|
865fa4: 6a 00 push 0x0
|
|
865fa6: 8b cb mov ecx,ebx
|
|
865fa8: ff d0 call eax
|
|
865faa: 83 c3 74 add ebx,0x74
|
|
865fad: 3b 5d ec cmp ebx,DWORD PTR [ebp-0x14]
|
|
865fb0: 75 ee jne 0x865fa0
|
|
865fb2: 8b 0e mov ecx,DWORD PTR [esi]
|
|
865fb4: 51 push ecx
|
|
865fb5: e8 f0 ef 0b 00 call 0x924faa
|
|
865fba: 83 c4 04 add esp,0x4
|
|
865fbd: 8b ce mov ecx,esi
|
|
865fbf: ff 15 2c d1 9d 00 call DWORD PTR ds:0x9dd12c
|
|
865fc5: 6b ff 74 imul edi,edi,0x74
|
|
865fc8: 8b 45 08 mov eax,DWORD PTR [ebp+0x8]
|
|
865fcb: 8b 4d e8 mov ecx,DWORD PTR [ebp-0x18]
|
|
865fce: 6b c0 74 imul eax,eax,0x74
|
|
865fd1: 03 c1 add eax,ecx
|
|
865fd3: 03 f9 add edi,ecx
|
|
865fd5: 89 46 08 mov DWORD PTR [esi+0x8],eax
|
|
865fd8: 89 7e 04 mov DWORD PTR [esi+0x4],edi
|
|
865fdb: 89 0e mov DWORD PTR [esi],ecx
|
|
865fdd: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
865fe0: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
865fe7: 59 pop ecx
|
|
865fe8: 5f pop edi
|
|
865fe9: 5e pop esi
|
|
865fea: 5b pop ebx
|
|
865feb: 8b e5 mov esp,ebp
|
|
865fed: 5d pop ebp
|
|
865fee: c2 04 00 ret 0x4
|