142 lines
6.6 KiB
Text
142 lines
6.6 KiB
Text
|
|
/home/alex/sots-re/dumps/sots.exe: file format pei-i386
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
008841a0 <.text+0x4831a0>:
|
|
8841a0: 55 push ebp
|
|
8841a1: 8b ec mov ebp,esp
|
|
8841a3: 8b 51 04 mov edx,DWORD PTR [ecx+0x4]
|
|
8841a6: 56 push esi
|
|
8841a7: 57 push edi
|
|
8841a8: 8b 39 mov edi,DWORD PTR [ecx]
|
|
8841aa: 2b d7 sub edx,edi
|
|
8841ac: b8 ab aa aa 2a mov eax,0x2aaaaaab
|
|
8841b1: f7 ea imul edx
|
|
8841b3: 8b 45 08 mov eax,DWORD PTR [ebp+0x8]
|
|
8841b6: c1 fa 02 sar edx,0x2
|
|
8841b9: 8b f2 mov esi,edx
|
|
8841bb: c1 ee 1f shr esi,0x1f
|
|
8841be: 03 f2 add esi,edx
|
|
8841c0: ba aa aa aa 0a mov edx,0xaaaaaaa
|
|
8841c5: 2b d0 sub edx,eax
|
|
8841c7: 3b d6 cmp edx,esi
|
|
8841c9: 73 0b jae 0x8841d6
|
|
8841cb: 68 90 1f 9e 00 push 0x9e1f90
|
|
8841d0: ff 15 50 d1 9d 00 call DWORD PTR ds:0x9dd150
|
|
8841d6: 8b 51 08 mov edx,DWORD PTR [ecx+0x8]
|
|
8841d9: 03 f0 add esi,eax
|
|
8841db: 2b d7 sub edx,edi
|
|
8841dd: b8 ab aa aa 2a mov eax,0x2aaaaaab
|
|
8841e2: f7 ea imul edx
|
|
8841e4: c1 fa 02 sar edx,0x2
|
|
8841e7: 8b c2 mov eax,edx
|
|
8841e9: c1 e8 1f shr eax,0x1f
|
|
8841ec: 03 c2 add eax,edx
|
|
8841ee: 3b f0 cmp esi,eax
|
|
8841f0: 76 21 jbe 0x884213
|
|
8841f2: 8b d0 mov edx,eax
|
|
8841f4: d1 ea shr edx,1
|
|
8841f6: bf aa aa aa 0a mov edi,0xaaaaaaa
|
|
8841fb: 2b fa sub edi,edx
|
|
8841fd: 3b f8 cmp edi,eax
|
|
8841ff: 73 04 jae 0x884205
|
|
884201: 33 c0 xor eax,eax
|
|
884203: eb 02 jmp 0x884207
|
|
884205: 03 c2 add eax,edx
|
|
884207: 3b c6 cmp eax,esi
|
|
884209: 73 02 jae 0x88420d
|
|
88420b: 8b c6 mov eax,esi
|
|
88420d: 50 push eax
|
|
88420e: e8 4d f8 ff ff call 0x883a60
|
|
884213: 5f pop edi
|
|
884214: 5e pop esi
|
|
884215: 5d pop ebp
|
|
884216: c2 04 00 ret 0x4
|
|
884219: cc int3
|
|
88421a: cc int3
|
|
88421b: cc int3
|
|
88421c: cc int3
|
|
88421d: cc int3
|
|
88421e: cc int3
|
|
88421f: cc int3
|
|
884220: 55 push ebp
|
|
884221: 8b ec mov ebp,esp
|
|
884223: 6a ff push 0xffffffff
|
|
884225: 68 10 ad 99 00 push 0x99ad10
|
|
88422a: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
884230: 50 push eax
|
|
884231: 83 ec 0c sub esp,0xc
|
|
884234: 53 push ebx
|
|
884235: 56 push esi
|
|
884236: 57 push edi
|
|
884237: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
88423c: 33 c5 xor eax,ebp
|
|
88423e: 50 push eax
|
|
88423f: 8d 45 f4 lea eax,[ebp-0xc]
|
|
884242: 64 a3 00 00 00 00 mov fs:0x0,eax
|
|
884248: 89 65 f0 mov DWORD PTR [ebp-0x10],esp
|
|
88424b: 8b d9 mov ebx,ecx
|
|
88424d: 89 5d e8 mov DWORD PTR [ebp-0x18],ebx
|
|
884250: 8b 7d 08 mov edi,DWORD PTR [ebp+0x8]
|
|
884253: 80 bf 89 00 00 00 00 cmp BYTE PTR [edi+0x89],0x0
|
|
88425a: 8b 43 04 mov eax,DWORD PTR [ebx+0x4]
|
|
88425d: 89 45 ec mov DWORD PTR [ebp-0x14],eax
|
|
884260: 75 51 jne 0x8842b3
|
|
884262: 8d 4f 10 lea ecx,[edi+0x10]
|
|
884265: 51 push ecx
|
|
884266: 8b cb mov ecx,ebx
|
|
884268: e8 23 f9 ff ff call 0x883b90
|
|
88426d: 8b 55 0c mov edx,DWORD PTR [ebp+0xc]
|
|
884270: 8b 4d ec mov ecx,DWORD PTR [ebp-0x14]
|
|
884273: 8b f0 mov esi,eax
|
|
884275: 89 56 04 mov DWORD PTR [esi+0x4],edx
|
|
884278: 8a 87 88 00 00 00 mov al,BYTE PTR [edi+0x88]
|
|
88427e: 88 86 88 00 00 00 mov BYTE PTR [esi+0x88],al
|
|
884284: 80 b9 89 00 00 00 00 cmp BYTE PTR [ecx+0x89],0x0
|
|
88428b: 74 03 je 0x884290
|
|
88428d: 89 75 ec mov DWORD PTR [ebp-0x14],esi
|
|
884290: 8b 17 mov edx,DWORD PTR [edi]
|
|
884292: 56 push esi
|
|
884293: 52 push edx
|
|
884294: 8b cb mov ecx,ebx
|
|
884296: c7 45 fc 00 00 00 00 mov DWORD PTR [ebp-0x4],0x0
|
|
88429d: e8 7e ff ff ff call 0x884220
|
|
8842a2: 89 06 mov DWORD PTR [esi],eax
|
|
8842a4: 8b 47 08 mov eax,DWORD PTR [edi+0x8]
|
|
8842a7: 56 push esi
|
|
8842a8: 50 push eax
|
|
8842a9: 8b cb mov ecx,ebx
|
|
8842ab: e8 70 ff ff ff call 0x884220
|
|
8842b0: 89 46 08 mov DWORD PTR [esi+0x8],eax
|
|
8842b3: 8b 45 ec mov eax,DWORD PTR [ebp-0x14]
|
|
8842b6: 8b 4d f4 mov ecx,DWORD PTR [ebp-0xc]
|
|
8842b9: 64 89 0d 00 00 00 00 mov DWORD PTR fs:0x0,ecx
|
|
8842c0: 59 pop ecx
|
|
8842c1: 5f pop edi
|
|
8842c2: 5e pop esi
|
|
8842c3: 5b pop ebx
|
|
8842c4: 8b e5 mov esp,ebp
|
|
8842c6: 5d pop ebp
|
|
8842c7: c2 08 00 ret 0x8
|
|
8842ca: 8b 4d ec mov ecx,DWORD PTR [ebp-0x14]
|
|
8842cd: 51 push ecx
|
|
8842ce: 8b 4d e8 mov ecx,DWORD PTR [ebp-0x18]
|
|
8842d1: e8 5a f5 fe ff call 0x873830
|
|
8842d6: 6a 00 push 0x0
|
|
8842d8: 6a 00 push 0x0
|
|
8842da: e8 dd 0c 0a 00 call 0x924fbc
|
|
8842df: cc int3
|
|
8842e0: 55 push ebp
|
|
8842e1: 8b ec mov ebp,esp
|
|
8842e3: 6a ff push 0xffffffff
|
|
8842e5: 68 6c ad 99 00 push 0x99ad6c
|
|
8842ea: 64 a1 00 00 00 00 mov eax,fs:0x0
|
|
8842f0: 50 push eax
|
|
8842f1: 83 ec 78 sub esp,0x78
|
|
8842f4: 56 push esi
|
|
8842f5: a1 78 8b af 00 mov eax,ds:0xaf8b78
|
|
8842fa: 33 c5 xor eax,ebp
|
|
8842fc: 50 push eax
|
|
8842fd: 8d 45 f4 lea eax,[ebp-0xc]
|