142 lines
7 KiB
Text
142 lines
7 KiB
Text
|
|
/home/alex/sots-re/dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
0077fed0 <.text+0x37eed0>:
|
|
77fed0: 55 push ebp
|
|
77fed1: 8b ec mov ebp,esp
|
|
77fed3: 6a ff push 0xffffffff
|
|
77fed5: 68 39 86 98 00 push 0x988639
|
|
77feda: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
77fee0: 50 push eax
|
|
77fee1: 83 ec 08 sub esp,0x8
|
|
77fee4: 53 push ebx
|
|
77fee5: 56 push esi
|
|
77fee6: 57 push edi
|
|
77fee7: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
77feec: 33 c5 xor eax,ebp
|
|
77feee: 50 push eax
|
|
77feef: 8d 45 f4 lea eax,[ebp-0xc]
|
|
77fef2: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
77fef8: 89 65 f0 mov DWORD PTR [ebp-0x10],esp
|
|
77fefb: 8b 75 10 mov esi,DWORD PTR [ebp+0x10]
|
|
77fefe: 8b 7d 08 mov edi,DWORD PTR [ebp+0x8]
|
|
77ff01: 89 75 ec mov DWORD PTR [ebp-0x14],esi
|
|
77ff04: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0
|
|
77ff0b: b3 02 mov bl,0x2
|
|
77ff0d: 8d 49 00 lea ecx,[ecx+0x0]
|
|
77ff10: 3b 7d 0c cmp edi,DWORD PTR [ebp+0xc]
|
|
77ff13: 74 55 je 0x77ff6a
|
|
77ff15: 89 75 08 mov DWORD PTR [ebp+0x8],esi
|
|
77ff18: 85 f6 test esi,esi
|
|
77ff1a: 74 1b je 0x77ff37
|
|
77ff1c: 8d 4f 08 lea ecx,[edi+0x8]
|
|
77ff1f: c7 06 7c f0 a0 00 mov DWORD PTR [esi],0xa0f07c
|
|
77ff25: 8b 47 04 mov eax,DWORD PTR [edi+0x4]
|
|
77ff28: 51 push ecx
|
|
77ff29: 8d 4e 08 lea ecx,[esi+0x8]
|
|
77ff2c: 88 5d fc mov BYTE PTR [ebp-0x4],bl
|
|
77ff2f: 89 46 04 mov DWORD PTR [esi+0x4],eax
|
|
77ff32: e8 19 99 ff ff call 0x779850
|
|
77ff37: 83 c6 18 add esi,0x18
|
|
77ff3a: c6 45 fc 00 mov BYTE PTR [ebp-0x4],0x0
|
|
77ff3e: 89 75 10 mov DWORD PTR [ebp+0x10],esi
|
|
77ff41: 83 c7 18 add edi,0x18
|
|
77ff44: eb ca jmp 0x77ff10
|
|
77ff46: 8b 75 ec mov esi,DWORD PTR [ebp-0x14]
|
|
77ff49: 8b 7d 10 mov edi,DWORD PTR [ebp+0x10]
|
|
77ff4c: 3b f7 cmp esi,edi
|
|
77ff4e: 74 11 je 0x77ff61
|
|
77ff50: 8b 16 mov edx,DWORD PTR [esi]
|
|
77ff52: 8b 02 mov eax,DWORD PTR [edx]
|
|
77ff54: 6a 00 push 0x0
|
|
77ff56: 8b ce mov ecx,esi
|
|
77ff58: ff d0 call eax
|
|
77ff5a: 83 c6 18 add esi,0x18
|
|
77ff5d: 3b f7 cmp esi,edi
|
|
77ff5f: 75 ef jne 0x77ff50
|
|
77ff61: 6a 00 push 0x0
|
|
77ff63: 6a 00 push 0x0
|
|
77ff65: e8 52 50 1a 00 call 0x924fbc
|
|
77ff6a: 8b c6 mov eax,esi
|
|
77ff6c: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
77ff6f: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
77ff76: 59 pop ecx
|
|
77ff77: 5f pop edi
|
|
77ff78: 5e pop esi
|
|
77ff79: 5b pop ebx
|
|
77ff7a: 8b e5 mov esp,ebp
|
|
77ff7c: 5d pop ebp
|
|
77ff7d: c3 ret
|
|
77ff7e: cc int3
|
|
77ff7f: cc int3
|
|
77ff80: 55 push ebp
|
|
77ff81: 8b ec mov ebp,esp
|
|
77ff83: 6a ff push 0xffffffff
|
|
77ff85: 68 60 86 98 00 push 0x988660
|
|
77ff8a: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
77ff90: 50 push eax
|
|
77ff91: 83 ec 0c sub esp,0xc
|
|
77ff94: 53 push ebx
|
|
77ff95: 56 push esi
|
|
77ff96: 57 push edi
|
|
77ff97: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
77ff9c: 33 c5 xor eax,ebp
|
|
77ff9e: 50 push eax
|
|
77ff9f: 8d 45 f4 lea eax,[ebp-0xc]
|
|
77ffa2: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
77ffa8: 89 65 f0 mov DWORD PTR [ebp-0x10],esp
|
|
77ffab: 8b f9 mov edi,ecx
|
|
77ffad: 89 7d e8 mov DWORD PTR [ebp-0x18],edi
|
|
77ffb0: 8b 45 0c mov eax,DWORD PTR [ebp+0xc]
|
|
77ffb3: 89 45 ec mov DWORD PTR [ebp-0x14],eax
|
|
77ffb6: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0
|
|
77ffbd: 8d 49 00 lea ecx,[ecx+0x0]
|
|
77ffc0: 3b 45 10 cmp eax,DWORD PTR [ebp+0x10]
|
|
77ffc3: 74 71 je 0x780036
|
|
77ffc5: 8b 4d 08 mov ecx,DWORD PTR [ebp+0x8]
|
|
77ffc8: 83 c0 08 add eax,0x8
|
|
77ffcb: 8d 71 04 lea esi,[ecx+0x4]
|
|
77ffce: 50 push eax
|
|
77ffcf: 8b 06 mov eax,DWORD PTR [esi]
|
|
77ffd1: 50 push eax
|
|
77ffd2: 51 push ecx
|
|
77ffd3: 8b cf mov ecx,edi
|
|
77ffd5: e8 c6 c0 ff ff call 0x77c0a0
|
|
77ffda: 8b 4f 04 mov ecx,DWORD PTR [edi+0x4]
|
|
77ffdd: ba a9 aa aa 0a mov edx,0xaaaaaa9
|
|
77ffe2: 2b d1 sub edx,ecx
|
|
77ffe4: 83 fa 01 cmp edx,0x1
|
|
77ffe7: 73 0b jae 0x77fff4
|
|
77ffe9: 68 b0 20 9e 00 push 0x9e20b0
|
|
77ffee: ff 15 50 d1 9d 00 call DWORD PTR ds:0x9dd150
|
|
77fff4: 41 inc ecx
|
|
77fff5: 89 4f 04 mov DWORD PTR [edi+0x4],ecx
|
|
77fff8: 89 06 mov DWORD PTR [esi],eax
|
|
77fffa: 8b 48 04 mov ecx,DWORD PTR [eax+0x4]
|
|
77fffd: 89 01 mov DWORD PTR [ecx],eax
|
|
77ffff: 8b 55 0c mov edx,DWORD PTR [ebp+0xc]
|
|
780002: 8b 02 mov eax,DWORD PTR [edx]
|
|
780004: 89 45 0c mov DWORD PTR [ebp+0xc],eax
|
|
780007: eb b7 jmp 0x77ffc0
|
|
780009: 8b 75 ec mov esi,DWORD PTR [ebp-0x14]
|
|
78000c: 3b 75 0c cmp esi,DWORD PTR [ebp+0xc]
|
|
78000f: 74 1c je 0x78002d
|
|
780011: 8b 7d e8 mov edi,DWORD PTR [ebp-0x18]
|
|
780014: 8b 45 08 mov eax,DWORD PTR [ebp+0x8]
|
|
780017: 8b 40 04 mov eax,DWORD PTR [eax+0x4]
|
|
78001a: 50 push eax
|
|
78001b: 8d 4d e8 lea ecx,[ebp-0x18]
|
|
78001e: 51 push ecx
|
|
78001f: 8b cf mov ecx,edi
|
|
780021: e8 ea bf ff ff call 0x77c010
|
|
780026: 8b 36 mov esi,DWORD PTR [esi]
|
|
780028: 3b 75 0c cmp esi,DWORD PTR [ebp+0xc]
|
|
78002b: 75 e7 jne 0x780014
|
|
78002d: 6a 00 push 0x0
|
|
78002f: 6a 00 push 0x0
|
|
780031: e8 86 4f 1a 00 call 0x924fbc
|
|
780036: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
780039: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|