82 lines
4 KiB
Text
82 lines
4 KiB
Text
|
|
/home/alex/sots-re/dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
007693f0 <.text+0x3683f0>:
|
|
7693f0: 55 push ebp
|
|
7693f1: 8b ec mov ebp,esp
|
|
7693f3: 6a ff push 0xffffffff
|
|
7693f5: 68 de 62 98 00 push 0x9862de
|
|
7693fa: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
769400: 50 push eax
|
|
769401: 51 push ecx
|
|
769402: 53 push ebx
|
|
769403: 56 push esi
|
|
769404: 57 push edi
|
|
769405: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
76940a: 33 c5 xor eax,ebp
|
|
76940c: 50 push eax
|
|
76940d: 8d 45 f4 lea eax,[ebp-0xc]
|
|
769410: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
769416: 8b f1 mov esi,ecx
|
|
769418: 89 75 f0 mov DWORD PTR [ebp-0x10],esi
|
|
76941b: 8b 7d 08 mov edi,DWORD PTR [ebp+0x8]
|
|
76941e: c7 06 58 19 a2 00 mov DWORD PTR [esi],0xa21958
|
|
769424: 8b 47 04 mov eax,DWORD PTR [edi+0x4]
|
|
769427: 33 db xor ebx,ebx
|
|
769429: 6a ff push 0xffffffff
|
|
76942b: 8d 4e 08 lea ecx,[esi+0x8]
|
|
76942e: 89 46 04 mov DWORD PTR [esi+0x4],eax
|
|
769431: 53 push ebx
|
|
769432: 8d 57 08 lea edx,[edi+0x8]
|
|
769435: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf
|
|
76943c: 89 59 10 mov DWORD PTR [ecx+0x10],ebx
|
|
76943f: 52 push edx
|
|
769440: 89 5d fc mov DWORD PTR [ebp-0x4],ebx
|
|
769443: 88 19 mov BYTE PTR [ecx],bl
|
|
769445: e8 e6 bf cb ff call 0x425430
|
|
76944a: 6a ff push 0xffffffff
|
|
76944c: 8d 4e 24 lea ecx,[esi+0x24]
|
|
76944f: 53 push ebx
|
|
769450: 8d 47 24 lea eax,[edi+0x24]
|
|
769453: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf
|
|
76945a: 89 59 10 mov DWORD PTR [ecx+0x10],ebx
|
|
76945d: 50 push eax
|
|
76945e: c6 45 fc 01 mov BYTE PTR [ebp-0x4],0x1
|
|
769462: 88 19 mov BYTE PTR [ecx],bl
|
|
769464: e8 c7 bf cb ff call 0x425430
|
|
769469: 8b 4f 40 mov ecx,DWORD PTR [edi+0x40]
|
|
76946c: 89 4e 40 mov DWORD PTR [esi+0x40],ecx
|
|
76946f: 8b 57 44 mov edx,DWORD PTR [edi+0x44]
|
|
769472: 89 56 44 mov DWORD PTR [esi+0x44],edx
|
|
769475: 8b 47 48 mov eax,DWORD PTR [edi+0x48]
|
|
769478: 89 46 48 mov DWORD PTR [esi+0x48],eax
|
|
76947b: 8b 4f 4c mov ecx,DWORD PTR [edi+0x4c]
|
|
76947e: 89 4e 4c mov DWORD PTR [esi+0x4c],ecx
|
|
769481: 6a ff push 0xffffffff
|
|
769483: 8d 4e 50 lea ecx,[esi+0x50]
|
|
769486: 53 push ebx
|
|
769487: 8d 57 50 lea edx,[edi+0x50]
|
|
76948a: c7 41 14 0f 00 00 00 mov DWORD PTR [ecx+0x14],0xf
|
|
769491: 89 59 10 mov DWORD PTR [ecx+0x10],ebx
|
|
769494: 52 push edx
|
|
769495: c6 45 fc 02 mov BYTE PTR [ebp-0x4],0x2
|
|
769499: 88 19 mov BYTE PTR [ecx],bl
|
|
76949b: e8 90 bf cb ff call 0x425430
|
|
7694a0: 8b 47 6c mov eax,DWORD PTR [edi+0x6c]
|
|
7694a3: 89 46 6c mov DWORD PTR [esi+0x6c],eax
|
|
7694a6: 8b 4f 70 mov ecx,DWORD PTR [edi+0x70]
|
|
7694a9: 89 4e 70 mov DWORD PTR [esi+0x70],ecx
|
|
7694ac: 8b c6 mov eax,esi
|
|
7694ae: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
7694b1: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
7694b8: 59 pop ecx
|
|
7694b9: 5f pop edi
|
|
7694ba: 5e pop esi
|
|
7694bb: 5b pop ebx
|
|
7694bc: 8b e5 mov esp,ebp
|
|
7694be: 5d pop ebp
|
|
7694bf: c2 04 00 ret 0x4
|
|
7694c2: cc int3
|