251 lines
12 KiB
Text
251 lines
12 KiB
Text
|
|
/home/alex/sots-re/dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
008841a0 <.text+0x4831a0>:
|
|
8841a0: 55 push ebp
|
|
8841a1: 8b ec mov ebp,esp
|
|
8841a3: 8b 51 04 mov edx,DWORD PTR [ecx+0x4]
|
|
8841a6: 56 push esi
|
|
8841a7: 57 push edi
|
|
8841a8: 8b 39 mov edi,DWORD PTR [ecx]
|
|
8841aa: 2b d7 sub edx,edi
|
|
8841ac: b8 ab aa aa 2a mov eax,0x2aaaaaab
|
|
8841b1: f7 ea imul edx
|
|
8841b3: 8b 45 08 mov eax,DWORD PTR [ebp+0x8]
|
|
8841b6: c1 fa 02 sar edx,0x2
|
|
8841b9: 8b f2 mov esi,edx
|
|
8841bb: c1 ee 1f shr esi,0x1f
|
|
8841be: 03 f2 add esi,edx
|
|
8841c0: ba aa aa aa 0a mov edx,0xaaaaaaa
|
|
8841c5: 2b d0 sub edx,eax
|
|
8841c7: 3b d6 cmp edx,esi
|
|
8841c9: 73 0b jae 0x8841d6
|
|
8841cb: 68 90 1f 9e 00 push 0x9e1f90
|
|
8841d0: ff 15 50 d1 9d 00 call DWORD PTR ds:0x9dd150
|
|
8841d6: 8b 51 08 mov edx,DWORD PTR [ecx+0x8]
|
|
8841d9: 03 f0 add esi,eax
|
|
8841db: 2b d7 sub edx,edi
|
|
8841dd: b8 ab aa aa 2a mov eax,0x2aaaaaab
|
|
8841e2: f7 ea imul edx
|
|
8841e4: c1 fa 02 sar edx,0x2
|
|
8841e7: 8b c2 mov eax,edx
|
|
8841e9: c1 e8 1f shr eax,0x1f
|
|
8841ec: 03 c2 add eax,edx
|
|
8841ee: 3b f0 cmp esi,eax
|
|
8841f0: 76 21 jbe 0x884213
|
|
8841f2: 8b d0 mov edx,eax
|
|
8841f4: d1 ea shr edx,1
|
|
8841f6: bf aa aa aa 0a mov edi,0xaaaaaaa
|
|
8841fb: 2b fa sub edi,edx
|
|
8841fd: 3b f8 cmp edi,eax
|
|
8841ff: 73 04 jae 0x884205
|
|
884201: 33 c0 xor eax,eax
|
|
884203: eb 02 jmp 0x884207
|
|
884205: 03 c2 add eax,edx
|
|
884207: 3b c6 cmp eax,esi
|
|
884209: 73 02 jae 0x88420d
|
|
88420b: 8b c6 mov eax,esi
|
|
88420d: 50 push eax
|
|
88420e: e8 4d f8 ff ff call 0x883a60
|
|
884213: 5f pop edi
|
|
884214: 5e pop esi
|
|
884215: 5d pop ebp
|
|
884216: c2 04 00 ret 0x4
|
|
884219: cc int3
|
|
88421a: cc int3
|
|
88421b: cc int3
|
|
88421c: cc int3
|
|
88421d: cc int3
|
|
88421e: cc int3
|
|
88421f: cc int3
|
|
884220: 55 push ebp
|
|
884221: 8b ec mov ebp,esp
|
|
884223: 6a ff push 0xffffffff
|
|
884225: 68 10 ad 99 00 push 0x99ad10
|
|
88422a: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
884230: 50 push eax
|
|
884231: 83 ec 0c sub esp,0xc
|
|
884234: 53 push ebx
|
|
884235: 56 push esi
|
|
884236: 57 push edi
|
|
884237: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
88423c: 33 c5 xor eax,ebp
|
|
88423e: 50 push eax
|
|
88423f: 8d 45 f4 lea eax,[ebp-0xc]
|
|
884242: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
884248: 89 65 f0 mov DWORD PTR [ebp-0x10],esp
|
|
88424b: 8b d9 mov ebx,ecx
|
|
88424d: 89 5d e8 mov DWORD PTR [ebp-0x18],ebx
|
|
884250: 8b 7d 08 mov edi,DWORD PTR [ebp+0x8]
|
|
884253: 80 bf 89 00 00 00 00 cmp BYTE PTR [edi+0x89],0x0
|
|
88425a: 8b 43 04 mov eax,DWORD PTR [ebx+0x4]
|
|
88425d: 89 45 ec mov DWORD PTR [ebp-0x14],eax
|
|
884260: 75 51 jne 0x8842b3
|
|
884262: 8d 4f 10 lea ecx,[edi+0x10]
|
|
884265: 51 push ecx
|
|
884266: 8b cb mov ecx,ebx
|
|
884268: e8 23 f9 ff ff call 0x883b90
|
|
88426d: 8b 55 0c mov edx,DWORD PTR [ebp+0xc]
|
|
884270: 8b 4d ec mov ecx,DWORD PTR [ebp-0x14]
|
|
884273: 8b f0 mov esi,eax
|
|
884275: 89 56 04 mov DWORD PTR [esi+0x4],edx
|
|
884278: 8a 87 88 00 00 00 mov al,BYTE PTR [edi+0x88]
|
|
88427e: 88 86 88 00 00 00 mov BYTE PTR [esi+0x88],al
|
|
884284: 80 b9 89 00 00 00 00 cmp BYTE PTR [ecx+0x89],0x0
|
|
88428b: 74 03 je 0x884290
|
|
88428d: 89 75 ec mov DWORD PTR [ebp-0x14],esi
|
|
884290: 8b 17 mov edx,DWORD PTR [edi]
|
|
884292: 56 push esi
|
|
884293: 52 push edx
|
|
884294: 8b cb mov ecx,ebx
|
|
884296: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0
|
|
88429d: e8 7e ff ff ff call 0x884220
|
|
8842a2: 89 06 mov DWORD PTR [esi],eax
|
|
8842a4: 8b 47 08 mov eax,DWORD PTR [edi+0x8]
|
|
8842a7: 56 push esi
|
|
8842a8: 50 push eax
|
|
8842a9: 8b cb mov ecx,ebx
|
|
8842ab: e8 70 ff ff ff call 0x884220
|
|
8842b0: 89 46 08 mov DWORD PTR [esi+0x8],eax
|
|
8842b3: 8b 45 ec mov eax,DWORD PTR [ebp-0x14]
|
|
8842b6: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
8842b9: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
8842c0: 59 pop ecx
|
|
8842c1: 5f pop edi
|
|
8842c2: 5e pop esi
|
|
8842c3: 5b pop ebx
|
|
8842c4: 8b e5 mov esp,ebp
|
|
8842c6: 5d pop ebp
|
|
8842c7: c2 08 00 ret 0x8
|
|
8842ca: 8b 4d ec mov ecx,DWORD PTR [ebp-0x14]
|
|
8842cd: 51 push ecx
|
|
8842ce: 8b 4d e8 mov ecx,DWORD PTR [ebp-0x18]
|
|
8842d1: e8 5a f5 fe ff call 0x873830
|
|
8842d6: 6a 00 push 0x0
|
|
8842d8: 6a 00 push 0x0
|
|
8842da: e8 dd 0c 0a 00 call 0x924fbc
|
|
8842df: cc int3
|
|
8842e0: 55 push ebp
|
|
8842e1: 8b ec mov ebp,esp
|
|
8842e3: 6a ff push 0xffffffff
|
|
8842e5: 68 6c ad 99 00 push 0x99ad6c
|
|
8842ea: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
8842f0: 50 push eax
|
|
8842f1: 83 ec 78 sub esp,0x78
|
|
8842f4: 56 push esi
|
|
8842f5: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
8842fa: 33 c5 xor eax,ebp
|
|
8842fc: 50 push eax
|
|
8842fd: 8d 45 f4 lea eax,[ebp-0xc]
|
|
884300: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
884306: 8b f1 mov esi,ecx
|
|
884308: 89 75 f0 mov DWORD PTR [ebp-0x10],esi
|
|
88430b: 33 c0 xor eax,eax
|
|
88430d: 89 46 28 mov DWORD PTR [esi+0x28],eax
|
|
884310: 89 46 2c mov DWORD PTR [esi+0x2c],eax
|
|
884313: 89 46 30 mov DWORD PTR [esi+0x30],eax
|
|
884316: 89 45 fc mov DWORD PTR [ebp-0x4],eax
|
|
884319: 89 46 40 mov DWORD PTR [esi+0x40],eax
|
|
88431c: 89 46 44 mov DWORD PTR [esi+0x44],eax
|
|
88431f: 89 46 48 mov DWORD PTR [esi+0x48],eax
|
|
884322: 89 46 64 mov DWORD PTR [esi+0x64],eax
|
|
884325: 89 46 68 mov DWORD PTR [esi+0x68],eax
|
|
884328: 89 46 6c mov DWORD PTR [esi+0x6c],eax
|
|
88432b: d9 ee fldz
|
|
88432d: 83 c9 ff or ecx,0xffffffff
|
|
884330: d9 5d 90 fstp DWORD PTR [ebp-0x70]
|
|
884333: 89 4d 80 mov DWORD PTR [ebp-0x80],ecx
|
|
884336: 89 45 88 mov DWORD PTR [ebp-0x78],eax
|
|
884339: 89 45 8c mov DWORD PTR [ebp-0x74],eax
|
|
88433c: 66 c7 45 94 01 00 mov WORD PTR [ebp-0x6c],0x1
|
|
884342: 89 45 a4 mov DWORD PTR [ebp-0x5c],eax
|
|
884345: 89 45 a8 mov DWORD PTR [ebp-0x58],eax
|
|
884348: 89 45 ac mov DWORD PTR [ebp-0x54],eax
|
|
88434b: 89 45 b4 mov DWORD PTR [ebp-0x4c],eax
|
|
88434e: 88 45 b8 mov BYTE PTR [ebp-0x48],al
|
|
884351: 89 45 bc mov DWORD PTR [ebp-0x44],eax
|
|
884354: 89 45 c0 mov DWORD PTR [ebp-0x40],eax
|
|
884357: 89 45 c4 mov DWORD PTR [ebp-0x3c],eax
|
|
88435a: 89 45 dc mov DWORD PTR [ebp-0x24],eax
|
|
88435d: 89 45 e0 mov DWORD PTR [ebp-0x20],eax
|
|
884360: 89 45 e4 mov DWORD PTR [ebp-0x1c],eax
|
|
884363: 89 45 e8 mov DWORD PTR [ebp-0x18],eax
|
|
884366: 89 45 cc mov DWORD PTR [ebp-0x34],eax
|
|
884369: 89 45 d0 mov DWORD PTR [ebp-0x30],eax
|
|
88436c: 89 4d d4 mov DWORD PTR [ebp-0x2c],ecx
|
|
88436f: 89 4d d8 mov DWORD PTR [ebp-0x28],ecx
|
|
884372: 8d 85 7c ff ff ff lea eax,[ebp-0x84]
|
|
884378: 50 push eax
|
|
884379: 8b ce mov ecx,esi
|
|
88437b: c6 45 fc 03 mov BYTE PTR [ebp-0x4],0x3
|
|
88437f: e8 8c d3 ef ff call 0x781710
|
|
884384: 8d 4d e0 lea ecx,[ebp-0x20]
|
|
884387: c6 45 fc 05 mov BYTE PTR [ebp-0x4],0x5
|
|
88438b: e8 80 cb c8 ff call 0x510f10
|
|
884390: 8d 4d bc lea ecx,[ebp-0x44]
|
|
884393: c6 45 fc 04 mov BYTE PTR [ebp-0x4],0x4
|
|
884397: e8 04 1c f1 ff call 0x795fa0
|
|
88439c: 8d 4d a4 lea ecx,[ebp-0x5c]
|
|
88439f: c6 45 fc 02 mov BYTE PTR [ebp-0x4],0x2
|
|
8843a3: e8 38 11 de ff call 0x6654e0
|
|
8843a8: 8b 4d 08 mov ecx,DWORD PTR [ebp+0x8]
|
|
8843ab: 89 4e 60 mov DWORD PTR [esi+0x60],ecx
|
|
8843ae: 8b c6 mov eax,esi
|
|
8843b0: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
8843b3: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
8843ba: 59 pop ecx
|
|
8843bb: 5e pop esi
|
|
8843bc: 8b e5 mov esp,ebp
|
|
8843be: 5d pop ebp
|
|
8843bf: c2 04 00 ret 0x4
|
|
8843c2: cc int3
|
|
8843c3: cc int3
|
|
8843c4: cc int3
|
|
8843c5: cc int3
|
|
8843c6: cc int3
|
|
8843c7: cc int3
|
|
8843c8: cc int3
|
|
8843c9: cc int3
|
|
8843ca: cc int3
|
|
8843cb: cc int3
|
|
8843cc: cc int3
|
|
8843cd: cc int3
|
|
8843ce: cc int3
|
|
8843cf: cc int3
|
|
8843d0: 55 push ebp
|
|
8843d1: 8b ec mov ebp,esp
|
|
8843d3: 6a ff push 0xffffffff
|
|
8843d5: 68 f6 ad 99 00 push 0x99adf6
|
|
8843da: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
8843e0: 50 push eax
|
|
8843e1: 81 ec a0 00 00 00 sub esp,0xa0
|
|
8843e7: 53 push ebx
|
|
8843e8: 56 push esi
|
|
8843e9: 57 push edi
|
|
8843ea: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
8843ef: 33 c5 xor eax,ebp
|
|
8843f1: 50 push eax
|
|
8843f2: 8d 45 f4 lea eax,[ebp-0xc]
|
|
8843f5: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
8843fb: 89 4d ec mov DWORD PTR [ebp-0x14],ecx
|
|
8843fe: 8b 75 08 mov esi,DWORD PTR [ebp+0x8]
|
|
884401: 6a ff push 0xffffffff
|
|
884403: 8d 45 b4 lea eax,[ebp-0x4c]
|
|
884406: 50 push eax
|
|
884407: 68 2c bb a2 00 push 0xa2bb2c
|
|
88440c: 33 db xor ebx,ebx
|
|
88440e: 56 push esi
|
|
88440f: 89 5d b4 mov DWORD PTR [ebp-0x4c],ebx
|
|
884412: e8 09 59 03 00 call 0x8b9d20
|
|
884417: 83 c4 10 add esp,0x10
|
|
88441a: 89 5d 08 mov DWORD PTR [ebp+0x8],ebx
|
|
88441d: 39 5d b4 cmp DWORD PTR [ebp-0x4c],ebx
|
|
884420: 0f 8e 0e 01 00 00 jle 0x884534
|
|
884426: c7 85 54 ff ff ff e8 mov DWORD PTR [ebp-0xac],0xa313e8
|
|
88442d: 13 a3 00
|
|
884430: c7 85 5c ff ff ff b8 mov DWORD PTR [ebp-0xa4],0xa313b8
|
|
884437: 13 a3 00
|
|
88443a: 89 9d 68 ff ff ff mov DWORD PTR [ebp-0x98],ebx
|