180 lines
8.5 KiB
Text
180 lines
8.5 KiB
Text
|
|
dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
0084ee20 <.text+0x44de20>:
|
|
84ee20: 8b e5 mov esp,ebp
|
|
84ee22: 5d pop ebp
|
|
84ee23: c3 ret
|
|
84ee24: cc int3
|
|
84ee25: cc int3
|
|
84ee26: cc int3
|
|
84ee27: cc int3
|
|
84ee28: cc int3
|
|
84ee29: cc int3
|
|
84ee2a: cc int3
|
|
84ee2b: cc int3
|
|
84ee2c: cc int3
|
|
84ee2d: cc int3
|
|
84ee2e: cc int3
|
|
84ee2f: cc int3
|
|
84ee30: 55 push ebp
|
|
84ee31: 8b ec mov ebp,esp
|
|
84ee33: 6a ff push 0xffffffff
|
|
84ee35: 68 3e 61 99 00 push 0x99613e
|
|
84ee3a: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
84ee40: 50 push eax
|
|
84ee41: 51 push ecx
|
|
84ee42: 53 push ebx
|
|
84ee43: 56 push esi
|
|
84ee44: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
84ee49: 33 c5 xor eax,ebp
|
|
84ee4b: 50 push eax
|
|
84ee4c: 8d 45 f4 lea eax,[ebp-0xc]
|
|
84ee4f: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
84ee55: 8b f1 mov esi,ecx
|
|
84ee57: 89 75 f0 mov DWORD PTR [ebp-0x10],esi
|
|
84ee5a: 33 db xor ebx,ebx
|
|
84ee5c: 8d 4e 08 lea ecx,[esi+0x8]
|
|
84ee5f: c7 06 58 19 a2 00 mov DWORD PTR [esi],0xa21958
|
|
84ee65: 53 push ebx
|
|
84ee66: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf
|
|
84ee6d: 89 59 10 mov DWORD PTR [ecx+0x10],ebx
|
|
84ee70: 68 0c 10 9e 00 push 0x9e100c
|
|
84ee75: 89 5d fc mov DWORD PTR [ebp-0x4],ebx
|
|
84ee78: 88 19 mov BYTE PTR [ecx],bl
|
|
84ee7a: e8 d1 66 bd ff call 0x425550
|
|
84ee7f: 8d 4e 24 lea ecx,[esi+0x24]
|
|
84ee82: 53 push ebx
|
|
84ee83: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf
|
|
84ee8a: 89 59 10 mov DWORD PTR [ecx+0x10],ebx
|
|
84ee8d: 68 0c 10 9e 00 push 0x9e100c
|
|
84ee92: c6 45 fc 01 mov BYTE PTR [ebp-0x4],0x1
|
|
84ee96: 88 19 mov BYTE PTR [ecx],bl
|
|
84ee98: e8 b3 66 bd ff call 0x425550
|
|
84ee9d: 8d 4e 50 lea ecx,[esi+0x50]
|
|
84eea0: 53 push ebx
|
|
84eea1: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf
|
|
84eea8: 89 59 10 mov DWORD PTR [ecx+0x10],ebx
|
|
84eeab: 68 0c 10 9e 00 push 0x9e100c
|
|
84eeb0: c6 45 fc 02 mov BYTE PTR [ebp-0x4],0x2
|
|
84eeb4: 88 19 mov BYTE PTR [ecx],bl
|
|
84eeb6: e8 95 66 bd ff call 0x425550
|
|
84eebb: 89 5e 04 mov DWORD PTR [esi+0x4],ebx
|
|
84eebe: 89 5e 40 mov DWORD PTR [esi+0x40],ebx
|
|
84eec1: a1 c8 0d af 00 mov eax,ds:0xaf0dc8
|
|
84eec6: 89 46 44 mov DWORD PTR [esi+0x44],eax
|
|
84eec9: 8b 0d cc 0d af 00 mov ecx,DWORD PTR ds:0xaf0dcc
|
|
84eecf: 89 4e 48 mov DWORD PTR [esi+0x48],ecx
|
|
84eed2: 8b 15 d0 0d af 00 mov edx,DWORD PTR ds:0xaf0dd0
|
|
84eed8: 89 56 4c mov DWORD PTR [esi+0x4c],edx
|
|
84eedb: 89 5e 6c mov DWORD PTR [esi+0x6c],ebx
|
|
84eede: 89 5e 70 mov DWORD PTR [esi+0x70],ebx
|
|
84eee1: 8b c6 mov eax,esi
|
|
84eee3: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
84eee6: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
84eeed: 59 pop ecx
|
|
84eeee: 5e pop esi
|
|
84eeef: 5b pop ebx
|
|
84eef0: 8b e5 mov esp,ebp
|
|
84eef2: 5d pop ebp
|
|
84eef3: c3 ret
|
|
84eef4: cc int3
|
|
84eef5: cc int3
|
|
84eef6: cc int3
|
|
84eef7: cc int3
|
|
84eef8: cc int3
|
|
84eef9: cc int3
|
|
84eefa: cc int3
|
|
84eefb: cc int3
|
|
84eefc: cc int3
|
|
84eefd: cc int3
|
|
84eefe: cc int3
|
|
84eeff: cc int3
|
|
84ef00: 55 push ebp
|
|
84ef01: 8b ec mov ebp,esp
|
|
84ef03: 6a ff push 0xffffffff
|
|
84ef05: 68 08 92 98 00 push 0x989208
|
|
84ef0a: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
84ef10: 50 push eax
|
|
84ef11: 51 push ecx
|
|
84ef12: 56 push esi
|
|
84ef13: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
84ef18: 33 c5 xor eax,ebp
|
|
84ef1a: 50 push eax
|
|
84ef1b: 8d 45 f4 lea eax,[ebp-0xc]
|
|
84ef1e: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
84ef24: 8b f1 mov esi,ecx
|
|
84ef26: 89 75 f0 mov DWORD PTR [ebp-0x10],esi
|
|
84ef29: c7 06 c8 13 a3 00 mov DWORD PTR [esi],0xa313c8
|
|
84ef2f: 8d 4e 04 lea ecx,[esi+0x4]
|
|
84ef32: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0
|
|
84ef39: e8 a2 92 ce ff call 0x5381e0
|
|
84ef3e: f6 45 08 01 test BYTE PTR [ebp+0x8],0x1
|
|
84ef42: c7 06 bc 22 9e 00 mov DWORD PTR [esi],0x9e22bc
|
|
84ef48: 74 09 je 0x84ef53
|
|
84ef4a: 56 push esi
|
|
84ef4b: e8 5a 60 0d 00 call 0x924faa
|
|
84ef50: 83 c4 04 add esp,0x4
|
|
84ef53: 8b c6 mov eax,esi
|
|
84ef55: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
84ef58: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
84ef5f: 59 pop ecx
|
|
84ef60: 5e pop esi
|
|
84ef61: 8b e5 mov esp,ebp
|
|
84ef63: 5d pop ebp
|
|
84ef64: c2 04 00 ret 0x4
|
|
84ef67: cc int3
|
|
84ef68: cc int3
|
|
84ef69: cc int3
|
|
84ef6a: cc int3
|
|
84ef6b: cc int3
|
|
84ef6c: cc int3
|
|
84ef6d: cc int3
|
|
84ef6e: cc int3
|
|
84ef6f: cc int3
|
|
84ef70: 55 push ebp
|
|
84ef71: 8b ec mov ebp,esp
|
|
84ef73: 6a ff push 0xffffffff
|
|
84ef75: 68 6b 61 99 00 push 0x99616b
|
|
84ef7a: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
84ef80: 50 push eax
|
|
84ef81: 83 ec 7c sub esp,0x7c
|
|
84ef84: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
84ef89: 33 c5 xor eax,ebp
|
|
84ef8b: 89 45 f0 mov DWORD PTR [ebp-0x10],eax
|
|
84ef8e: 53 push ebx
|
|
84ef8f: 56 push esi
|
|
84ef90: 57 push edi
|
|
84ef91: 50 push eax
|
|
84ef92: 8d 45 f4 lea eax,[ebp-0xc]
|
|
84ef95: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
84ef9b: 8b 5d 08 mov ebx,DWORD PTR [ebp+0x8]
|
|
84ef9e: 8b 45 10 mov eax,DWORD PTR [ebp+0x10]
|
|
84efa1: 8b 7d 0c mov edi,DWORD PTR [ebp+0xc]
|
|
84efa4: 8b 75 14 mov esi,DWORD PTR [ebp+0x14]
|
|
84efa7: 89 85 78 ff ff ff mov DWORD PTR [ebp-0x88],eax
|
|
84efad: 85 db test ebx,ebx
|
|
84efaf: 74 2c je 0x84efdd
|
|
84efb1: 8d 8d 7c ff ff ff lea ecx,[ebp-0x84]
|
|
84efb7: e8 74 fe ff ff call 0x84ee30
|
|
84efbc: 50 push eax
|
|
84efbd: 8b cb mov ecx,ebx
|
|
84efbf: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0
|
|
84efc6: e8 95 d4 f1 ff call 0x76c460
|
|
84efcb: 8d 8d 7c ff ff ff lea ecx,[ebp-0x84]
|
|
84efd1: c7 45 fc ff ff ff ff mov DWORD PTR [ebp-0x4],0xffffffff
|
|
84efd8: e8 b3 be dc ff call 0x61ae90
|
|
84efdd: f6 05 98 9f b2 00 04 test BYTE PTR ds:0xb29f98,0x4
|
|
84efe4: 74 68 je 0x84f04e
|
|
84efe6: 85 ff test edi,edi
|
|
84efe8: 74 64 je 0x84f04e
|
|
84efea: a1 9c 9f b2 00 mov eax,ds:0xb29f9c
|
|
84efef: 85 c0 test eax,eax
|
|
84eff1: 74 5b je 0x84f04e
|
|
84eff3: 57 push edi
|
|
84eff4: 8d 88 84 00 00 00 lea ecx,[eax+0x84]
|
|
84effa: e8 71 a0 06 00 call 0x8b9070
|
|
84efff: 85 test eax,eax
|