87 lines
3.9 KiB
Text
87 lines
3.9 KiB
Text
|
|
/home/alex/sots-re/dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
00629580 <.text+0x228580>:
|
|
629580: 57 push edi
|
|
629581: 8b f9 mov edi,ecx
|
|
629583: 83 3f 00 cmp DWORD PTR [edi],0x0
|
|
629586: 74 36 je 0x6295be
|
|
629588: 53 push ebx
|
|
629589: 56 push esi
|
|
62958a: ff 15 2c d1 9d 00 call DWORD PTR ds:0x9dd12c
|
|
629590: 8b 5f 04 mov ebx,DWORD PTR [edi+0x4]
|
|
629593: 8b 37 mov esi,DWORD PTR [edi]
|
|
629595: 3b f3 cmp esi,ebx
|
|
629597: 74 18 je 0x6295b1
|
|
629599: 8d a4 24 00 00 00 00 lea esp,[esp+0x0]
|
|
6295a0: 8b 06 mov eax,DWORD PTR [esi]
|
|
6295a2: 8b 10 mov edx,DWORD PTR [eax]
|
|
6295a4: 6a 00 push 0x0
|
|
6295a6: 8b ce mov ecx,esi
|
|
6295a8: ff d2 call edx
|
|
6295aa: 83 c6 74 add esi,0x74
|
|
6295ad: 3b f3 cmp esi,ebx
|
|
6295af: 75 ef jne 0x6295a0
|
|
6295b1: 8b 07 mov eax,DWORD PTR [edi]
|
|
6295b3: 50 push eax
|
|
6295b4: e8 f1 b9 2f 00 call 0x924faa
|
|
6295b9: 83 c4 04 add esp,0x4
|
|
6295bc: 5e pop esi
|
|
6295bd: 5b pop ebx
|
|
6295be: 33 c0 xor eax,eax
|
|
6295c0: 89 07 mov DWORD PTR [edi],eax
|
|
6295c2: 89 47 04 mov DWORD PTR [edi+0x4],eax
|
|
6295c5: 89 47 08 mov DWORD PTR [edi+0x8],eax
|
|
6295c8: 5f pop edi
|
|
6295c9: c3 ret
|
|
6295ca: cc int3
|
|
6295cb: cc int3
|
|
6295cc: cc int3
|
|
6295cd: cc int3
|
|
6295ce: cc int3
|
|
6295cf: cc int3
|
|
6295d0: 55 push ebp
|
|
6295d1: 8b ec mov ebp,esp
|
|
6295d3: 51 push ecx
|
|
6295d4: 56 push esi
|
|
6295d5: 8b f1 mov esi,ecx
|
|
6295d7: 8b 46 04 mov eax,DWORD PTR [esi+0x4]
|
|
6295da: 8b 0e mov ecx,DWORD PTR [esi]
|
|
6295dc: 89 75 fc mov DWORD PTR [ebp-0x4],esi
|
|
6295df: 3b c8 cmp ecx,eax
|
|
6295e1: 74 36 je 0x629619
|
|
6295e3: 53 push ebx
|
|
6295e4: 57 push edi
|
|
6295e5: 51 push ecx
|
|
6295e6: 50 push eax
|
|
6295e7: 50 push eax
|
|
6295e8: e8 c3 e0 fe ff call 0x6176b0
|
|
6295ed: 8b 7e 04 mov edi,DWORD PTR [esi+0x4]
|
|
6295f0: 8b d8 mov ebx,eax
|
|
6295f2: 83 c4 0c add esp,0xc
|
|
6295f5: 8b f3 mov esi,ebx
|
|
6295f7: 3b df cmp ebx,edi
|
|
6295f9: 74 16 je 0x629611
|
|
6295fb: eb 03 jmp 0x629600
|
|
6295fd: 8d 49 00 lea ecx,[ecx+0x0]
|
|
629600: 8b 06 mov eax,DWORD PTR [esi]
|
|
629602: 8b 10 mov edx,DWORD PTR [eax]
|
|
629604: 6a 00 push 0x0
|
|
629606: 8b ce mov ecx,esi
|
|
629608: ff d2 call edx
|
|
62960a: 83 c6 10 add esi,0x10
|
|
62960d: 3b f7 cmp esi,edi
|
|
62960f: 75 ef jne 0x629600
|
|
629611: 8b 45 fc mov eax,DWORD PTR [ebp-0x4]
|
|
629614: 5f pop edi
|
|
629615: 89 58 04 mov DWORD PTR [eax+0x4],ebx
|
|
629618: 5b pop ebx
|
|
629619: 5e pop esi
|
|
62961a: 8b e5 mov esp,ebp
|
|
62961c: 5d pop ebp
|
|
62961d: c3 ret
|
|
62961e: cc int3
|
|
62961f: cc int3
|