123 lines
6 KiB
Text
123 lines
6 KiB
Text
|
|
/home/alex/sots-re/dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
004249a0 <.text+0x239a0>:
|
|
4249a0: 55 push ebp
|
|
4249a1: 8b ec mov ebp,esp
|
|
4249a3: 6a ff push 0xffffffff
|
|
4249a5: 68 80 47 95 00 push 0x954780
|
|
4249aa: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
4249b0: 50 push eax
|
|
4249b1: 83 ec 1c sub esp,0x1c
|
|
4249b4: 53 push ebx
|
|
4249b5: 56 push esi
|
|
4249b6: 57 push edi
|
|
4249b7: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
4249bc: 33 c5 xor eax,ebp
|
|
4249be: 50 push eax
|
|
4249bf: 8d 45 f4 lea eax,[ebp-0xc]
|
|
4249c2: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
4249c8: 89 65 f0 mov DWORD PTR [ebp-0x10],esp
|
|
4249cb: 8b f9 mov edi,ecx
|
|
4249cd: 89 7d ec mov DWORD PTR [ebp-0x14],edi
|
|
4249d0: 8b 45 08 mov eax,DWORD PTR [ebp+0x8]
|
|
4249d3: 8b f0 mov esi,eax
|
|
4249d5: 83 ce 0f or esi,0xf
|
|
4249d8: 83 fe fe cmp esi,0xfffffffe
|
|
4249db: 76 04 jbe 0x4249e1
|
|
4249dd: 8b f0 mov esi,eax
|
|
4249df: eb 27 jmp 0x424a08
|
|
4249e1: 8b 5f 14 mov ebx,DWORD PTR [edi+0x14]
|
|
4249e4: b8 ab aa aa aa mov eax,0xaaaaaaab
|
|
4249e9: f7 e6 mul esi
|
|
4249eb: 8b cb mov ecx,ebx
|
|
4249ed: d1 e9 shr ecx,1
|
|
4249ef: d1 ea shr edx,1
|
|
4249f1: 3b ca cmp ecx,edx
|
|
4249f3: 76 13 jbe 0x424a08
|
|
4249f5: b8 fe ff ff ff mov eax,0xfffffffe
|
|
4249fa: 2b c1 sub eax,ecx
|
|
4249fc: 8d 34 19 lea esi,[ecx+ebx*1]
|
|
4249ff: 3b d8 cmp ebx,eax
|
|
424a01: 76 05 jbe 0x424a08
|
|
424a03: be fe ff ff ff mov esi,0xfffffffe
|
|
424a08: 33 c0 xor eax,eax
|
|
424a0a: 8d 4e 01 lea ecx,[esi+0x1]
|
|
424a0d: 89 45 fc mov DWORD PTR [ebp-0x4],eax
|
|
424a10: 3b c8 cmp ecx,eax
|
|
424a12: 76 12 jbe 0x424a26
|
|
424a14: 83 f9 ff cmp ecx,0xffffffff
|
|
424a17: 77 12 ja 0x424a2b
|
|
424a19: 51 push ecx
|
|
424a1a: e8 97 05 50 00 call 0x924fb6
|
|
424a1f: 83 c4 04 add esp,0x4
|
|
424a22: 85 c0 test eax,eax
|
|
424a24: 74 05 je 0x424a2b
|
|
424a26: 89 45 08 mov DWORD PTR [ebp+0x8],eax
|
|
424a29: eb 52 jmp 0x424a7d
|
|
424a2b: 8d 4d e8 lea ecx,[ebp-0x18]
|
|
424a2e: 51 push ecx
|
|
424a2f: 8d 4d d8 lea ecx,[ebp-0x28]
|
|
424a32: c7 45 e8 00 00 00 00 mov DWORD PTR [ebp-0x18],0x0
|
|
424a39: ff 15 bc d1 9d 00 call DWORD PTR ds:0x9dd1bc
|
|
424a3f: 68 90 d1 a8 00 push 0xa8d190
|
|
424a44: 8d 55 d8 lea edx,[ebp-0x28]
|
|
424a47: 52 push edx
|
|
424a48: c7 45 d8 00 1f 9e 00 mov DWORD PTR [ebp-0x28],0x9e1f00
|
|
424a4f: e8 68 05 50 00 call 0x924fbc
|
|
424a54: 8b 45 08 mov eax,DWORD PTR [ebp+0x8]
|
|
424a57: 8b 4d ec mov ecx,DWORD PTR [ebp-0x14]
|
|
424a5a: 89 45 e4 mov DWORD PTR [ebp-0x1c],eax
|
|
424a5d: 40 inc eax
|
|
424a5e: 89 65 f0 mov DWORD PTR [ebp-0x10],esp
|
|
424a61: 50 push eax
|
|
424a62: 83 c1 18 add ecx,0x18
|
|
424a65: c6 45 fc 02 mov BYTE PTR [ebp-0x4],0x2
|
|
424a69: e8 e2 ed 2f 00 call 0x723850
|
|
424a6e: 89 45 08 mov DWORD PTR [ebp+0x8],eax
|
|
424a71: b8 77 4a 42 00 mov eax,0x424a77
|
|
424a76: c3 ret
|
|
424a77: 8b 7d ec mov edi,DWORD PTR [ebp-0x14]
|
|
424a7a: 8b 75 e4 mov esi,DWORD PTR [ebp-0x1c]
|
|
424a7d: 8b 5d 0c mov ebx,DWORD PTR [ebp+0xc]
|
|
424a80: 85 db test ebx,ebx
|
|
424a82: 74 1a je 0x424a9e
|
|
424a84: 83 7f 14 10 cmp DWORD PTR [edi+0x14],0x10
|
|
424a88: 72 04 jb 0x424a8e
|
|
424a8a: 8b 07 mov eax,DWORD PTR [edi]
|
|
424a8c: eb 02 jmp 0x424a90
|
|
424a8e: 8b c7 mov eax,edi
|
|
424a90: 53 push ebx
|
|
424a91: 50 push eax
|
|
424a92: 8b 45 08 mov eax,DWORD PTR [ebp+0x8]
|
|
424a95: 50 push eax
|
|
424a96: e8 e1 02 50 00 call 0x924d7c
|
|
424a9b: 83 c4 0c add esp,0xc
|
|
424a9e: 83 7f 14 10 cmp DWORD PTR [edi+0x14],0x10
|
|
424aa2: 72 0b jb 0x424aaf
|
|
424aa4: 8b 0f mov ecx,DWORD PTR [edi]
|
|
424aa6: 51 push ecx
|
|
424aa7: e8 fe 04 50 00 call 0x924faa
|
|
424aac: 83 c4 04 add esp,0x4
|
|
424aaf: 8b 45 08 mov eax,DWORD PTR [ebp+0x8]
|
|
424ab2: c6 07 00 mov BYTE PTR [edi],0x0
|
|
424ab5: 89 07 mov DWORD PTR [edi],eax
|
|
424ab7: 89 77 14 mov DWORD PTR [edi+0x14],esi
|
|
424aba: 89 5f 10 mov DWORD PTR [edi+0x10],ebx
|
|
424abd: 83 fe 10 cmp esi,0x10
|
|
424ac0: 72 02 jb 0x424ac4
|
|
424ac2: 8b f8 mov edi,eax
|
|
424ac4: c6 04 1f 00 mov BYTE PTR [edi+ebx*1],0x0
|
|
424ac8: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
424acb: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
424ad2: 59 pop ecx
|
|
424ad3: 5f pop edi
|
|
424ad4: 5e pop esi
|
|
424ad5: 5b pop ebx
|
|
424ad6: 8b e5 mov esp,ebp
|
|
424ad8: 5d pop ebp
|
|
424ad9: c2 08 00 ret 0x8
|
|
424adc: 8b mov esi,DWORD PTR [ebp-0x14]
|