Last active
August 29, 2015 14:18
-
-
Save hhc0null/72f32cd7549ec6b2b800 to your computer and use it in GitHub Desktop.
In progress...
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// get origin address. | |
08077008 E81C060000 call dword 0x8077629 | |
0807700D 83EE05 sub esi,byte +0x5 // esi - 5: 0x8077008 | |
origin = (void *)0x8077008; | |
sub_08077010() | |
{ | |
08077010 55 push ebp | |
08077011 89E5 mov ebp,esp | |
08077013 81EC00040000 sub esp,0x400 | |
08077019 81EC00040000 sub esp,0x400 | |
0807701F 81EC00040000 sub esp,0x400 | |
08077025 83EC04 sub esp,byte +0x4 | |
08077028 B921060000 mov ecx,0x621 | |
0807702D 51 push ecx | |
0807702E 8D8E00000000 lea ecx,[esi+0x0] | |
08077034 51 push ecx | |
08077035 E878050000 call dword 0x80775b2 | |
0807703A 8985FCF3FFFF mov [ebp-0xc04],eax | |
ebp_c04h = sub_080775B2(origin, 0x621); | |
08077040 B818000000 mov eax,0x18 | |
08077045 CD80 int 0x80 | |
08077047 85C0 test eax,eax | |
08077049 741E jz 0x8077069 | |
if(getuid() != 0) { | |
0807704B FFB5FCF3FFFF push dword [ebp-0xc04] | |
08077051 6895030000 push dword 0x395 | |
08077056 8D8E28060000 lea ecx,[esi+0x628] | |
0807705C 51 push ecx | |
0807705D E8F7010000 call dword 0x8077259 | |
sub_08077259(origin+0x628]); | |
08077062 B801000000 mov eax,0x1 | |
08077067 CD80 int 0x80 | |
exit(EXIT_FAILURE); | |
} | |
08077069 FFB5FCF3FFFF push dword [ebp-0xc04] | |
0807706F 687A020000 push dword 0x27a | |
08077074 8D8EBD090000 lea ecx,[esi+0x9bd] | |
0807707A 51 push ecx | |
0807707B E8D9010000 call dword 0x8077259 | |
sub_08077259(origin+0x9bd, 0x27a, ebp_c04h); | |
08077080 31F6 xor esi,esi | |
08077082 BA67452301 mov edx,0x1234567 | |
08077087 B969191228 mov ecx,0x28121969 | |
0807708C BBADDEE1FE mov ebx,0xfee1dead | |
08077091 B858000000 mov eax,0x58 | |
08077096 CD80 int 0x80 | |
reboot(LINUX_REBOOT_MAGIC1, LINUX_REBOOT_MAGIC2, LINUX_REBOOT_CMD_RESTART, NULL); | |
08077098 31C0 xor eax,eax | |
0807709A 99 cdq | |
0807709B 52 push edx | |
0807709C 52 push edx | |
0807709D 99 cdq | |
0807709E B222 mov dl,0x22 | |
080770A0 52 push edx | |
080770A1 99 cdq | |
080770A2 B207 mov dl,0x7 | |
080770A4 52 push edx | |
080770A5 6A01 push byte +0x1 | |
080770A7 5A pop edx | |
080770A8 C1E20C shl edx,byte 0xc | |
080770AB 52 push edx | |
080770AC 99 cdq | |
080770AD 52 push edx | |
080770AE 6A5A push byte +0x5a | |
080770B0 58 pop eax | |
080770B1 89E3 mov ebx,esp | |
080770B3 CD80 int 0x80 | |
area = mmap(1<<0xc, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_ANONYMOUS|MAP_PRIVATE, NULL, NULL); | |
080770B5 89C7 mov edi,eax | |
080770B7 BA00100000 mov edx,0x1000 | |
080770BC 89F9 mov ecx,edi | |
080770BE BB00000000 mov ebx,0x0 | |
080770C3 B803000000 mov eax,0x3 | |
080770C8 CD80 int 0x80 | |
len = read(STDIN_FILENO, area, 0x1000); | |
080770CA 48 dec eax | |
080770CB C6040700 mov byte [edi+eax],0x0 | |
area[len-1] = '\0'; | |
080770CF 8D8500F4FFFF lea eax,[ebp-0xc00] | |
080770D5 6800040000 push dword 0x400 | |
080770DA 6A00 push byte +0x0 | |
080770DC 50 push eax | |
080770DD E85A010000 call dword 0x807723c | |
sub_0807723C(ebp_c00h, '\0', 0x400); | |
080770E2 8D8500FCFFFF lea eax,[ebp-0x400] | |
080770E8 6800040000 push dword 0x400 | |
080770ED 6A00 push byte +0x0 | |
080770EF 50 push eax | |
080770F0 E847010000 call dword 0x807723c | |
sub_0807723C(ebp_400h, '\0', 0x400); | |
080770F5 FFB5FCF3FFFF push dword [ebp-0xc04] | |
080770FB 68B6030000 push dword 0x3b6 | |
08077100 8D8633160000 lea eax,[esi+0x1633] | |
08077106 50 push eax | |
08077107 6800040000 push dword 0x400 | |
0807710C 8D8D00F8FFFF lea ecx,[ebp-0x800] | |
08077112 51 push ecx | |
08077113 E8DE040000 call dword 0x80775f6 | |
sub_080775F6(ebp_800h, 0x400, origin+0x1633, 0x3b6, ebp_c04h); | |
08077118 6800040000 push dword 0x400 | |
0807711D 8D8D00F4FFFF lea ecx,[ebp-0xc00] | |
08077123 51 push ecx | |
08077124 6800040000 push dword 0x400 | |
08077129 8D8500F8FFFF lea eax,[ebp-0x800] | |
0807712F 50 push eax | |
08077130 6800040000 push dword 0x400 | |
08077135 8D8D00FCFFFF lea ecx,[ebp-0x400] | |
0807713B 51 push ecx | |
0807713C E8C9010000 call dword 0x807730a | |
sub_0807730A(ebp_400h, 0x400, ebp_800h, 0x400, ebp_c00h, 0x400); | |
08077141 57 push edi | |
08077142 8D8500F4FFFF lea eax,[ebp-0xc00] | |
08077148 50 push eax | |
08077149 E88D000000 call dword 0x80771db | |
sub_080771DB(ebp_c00h, area); | |
0807714E 57 push edi | |
0807714F 8D8500F4FFFF lea eax,[ebp-0xc00] | |
08077155 50 push eax | |
08077156 E843000000 call dword 0x807719e | |
0807715B 85C0 test eax,eax | |
0807715D 7420 jz 0x807717f | |
if(sub_0807719E(ebp_c00h, area) != 0) { | |
0807715F FFB5FCF3FFFF push dword [ebp-0xc04] | |
08077165 6852050000 push dword 0x552 | |
0807716A 8D8E370C0000 lea ecx,[esi+0xc37] | |
08077170 51 push ecx | |
08077171 E8E3000000 call dword 0x8077259 | |
sub_08077259(origin+0xc37, 0x552, ebp_c04h); | |
08077176 31C0 xor eax,eax | |
08077178 40 inc eax | |
08077179 89EC mov esp,ebp | |
0807717B 5D pop ebp | |
0807717C C20400 ret 0x4 | |
return 1; | |
} | |
0807717F FFB5FCF3FFFF push dword [ebp-0xc04] | |
08077185 68AA040000 push dword 0x4aa | |
0807718A 8D8E89110000 lea ecx,[esi+0x1189] | |
08077190 51 push ecx | |
08077191 E8C3000000 call dword 0x8077259 | |
sub_08077259(origin+0x1189, 0x4aa, ebp_c04h); | |
08077196 31C0 xor eax,eax | |
08077198 89EC mov esp,ebp | |
0807719A 5D pop ebp | |
0807719B C20400 ret 0x4 | |
return 0; | |
} | |
int sub_0807719E(arg0, arg1) | |
{ | |
0807719E 55 push ebp | |
0807719F 89E5 mov ebp,esp | |
080771A1 83EC04 sub esp,byte +0x4 | |
char x, y; | |
080771A4 31C9 xor ecx,ecx | |
080771A6 894DFC mov [ebp-0x4],ecx | |
for(ebp_04h = 0; (x = arg0[i << 2] != '\0') && (y = arg1[i] != '\0'); ebp_04h++) { | |
080771A9 8B4DFC mov ecx,[ebp-0x4] | |
080771AC 8B4508 mov eax,[ebp+0x8] | |
080771AF C1E102 shl ecx,byte 0x2 | |
080771B2 01C8 add eax,ecx | |
080771B4 8B550C mov edx,[ebp+0xc] | |
080771B7 8B4DFC mov ecx,[ebp-0x4] | |
080771BA 01CA add edx,ecx | |
080771BC 41 inc ecx | |
080771BD 894DFC mov [ebp-0x4],ecx | |
080771C0 8A00 mov al,[eax] | |
080771C2 8A12 mov dl,[edx] | |
080771C4 84C0 test al,al | |
080771C6 7408 jz 0x80771d0 | |
080771C8 84D2 test dl,dl | |
080771CA 7404 jz 0x80771d0 | |
080771CC 38D0 cmp al,dl | |
080771CE 74D9 jz 0x80771a9 | |
} | |
080771D0 28D0 sub al,dl | |
080771D2 0FBEC0 movsx eax,al | |
080771D5 89EC mov esp,ebp | |
080771D7 5D pop ebp | |
080771D8 C20800 ret 0x8 | |
return x - y; | |
} | |
int sub_080771DB(char *arg0, char *arg1) | |
{ | |
080771DB 55 push ebp | |
080771DC 89E5 mov ebp,esp | |
int i; | |
080771DE 31C9 xor ecx,ecx | |
for(i = 0; arg0[i] != '\0' && arg1[i] != '\0'; i++) { | |
080771E0 8B4508 mov eax,[ebp+0x8] | |
080771E3 01C8 add eax,ecx | |
080771E5 8B550C mov edx,[ebp+0xc] | |
080771E8 01CA add edx,ecx | |
080771EA 41 inc ecx | |
080771EB 8A00 mov al,[eax] | |
080771ED 8A12 mov dl,[edx] | |
080771EF 84C0 test al,al | |
080771F1 7408 jz 0x80771fb | |
080771F3 84D2 test dl,dl | |
080771F5 7404 jz 0x80771fb | |
080771F7 38D0 cmp al,dl | |
080771F9 74E5 jz 0x80771e0 | |
} | |
080771FB 28D0 sub al,dl | |
080771FD 0FBEC0 movsx eax,al | |
08077200 89EC mov esp,ebp | |
08077202 5D pop ebp | |
08077203 C20800 ret 0x8 | |
return i; | |
} | |
size_t sub_08077206(char *arg0) | |
{ | |
08077206 55 push ebp | |
08077207 89E5 mov ebp,esp | |
08077209 31C9 xor ecx,ecx | |
int i; | |
for(i = 0; arg0[i] != '\0'; i++) { | |
0807720B 8B4508 mov eax,[ebp+0x8] | |
0807720E 01C8 add eax,ecx | |
08077210 8B00 mov eax,[eax] | |
08077212 85C0 test eax,eax | |
08077214 7403 jz 0x8077219 | |
08077216 41 inc ecx | |
08077217 EBF2 jmp short 0x807720b | |
} | |
08077219 89C8 mov eax,ecx | |
0807721B 89EC mov esp,ebp | |
0807721D 5D pop ebp | |
0807721E C20400 ret 0x4 | |
return i; | |
} | |
size_t sub_08077221(char *arg0) | |
{ | |
08077221 55 push ebp | |
08077222 89E5 mov ebp,esp | |
int i; | |
08077224 31C9 xor ecx,ecx | |
for(i = 0; arg0[i] != '\0'; i++) { | |
08077226 8B4508 mov eax,[ebp+0x8] | |
08077229 01C8 add eax,ecx | |
0807722B 8A00 mov al,[eax] | |
0807722D 84C0 test al,al | |
0807722F 7403 jz 0x8077234 | |
08077231 41 inc ecx | |
08077232 EBF2 jmp short 0x8077226 | |
} | |
08077234 89C8 mov eax,ecx | |
08077236 89EC mov esp,ebp | |
08077238 5D pop ebp | |
08077239 C20400 ret 0x4 | |
return i; | |
} | |
void sub_0807723C(char *arg0, int arg1, int arg2) | |
{ | |
0807723C 55 push ebp | |
0807723D 89E5 mov ebp,esp | |
0807723F 31C9 xor ecx,ecx | |
for(i = 0; i < arg2; i++) { | |
08077241 3B4D10 cmp ecx,[ebp+0x10] | |
08077244 7D0D jnl 0x8077253 | |
08077246 8B4508 mov eax,[ebp+0x8] | |
08077249 01C8 add eax,ecx | |
0807724B 8B550C mov edx,[ebp+0xc] | |
0807724E 8810 mov [eax],dl | |
arg1[i] = arg1; | |
08077250 41 inc ecx | |
08077251 EBEE jmp short 0x8077241 | |
} | |
08077253 89EC mov esp,ebp | |
08077255 5D pop ebp | |
08077256 C20C00 ret 0xc | |
} | |
sub_08077259(arg0, arg1, arg2) | |
{ | |
08077259 55 push ebp | |
0807725A 89E5 mov ebp,esp | |
0807725C 81EC00040000 sub esp,0x400 | |
08077262 81EC00080000 sub esp,0x800 | |
08077268 81EC00010000 sub esp,0x100 | |
0807726E 8D8500F3FFFF lea eax,[ebp-0xd00] | |
08077274 6800010000 push dword 0x100 | |
08077279 6A00 push byte +0x0 | |
0807727B 50 push eax | |
0807727C E8BBFFFFFF call dword 0x807723c | |
sub_0807723C(ebp_d00h, '\0', 0x100); | |
08077281 8D8500FCFFFF lea eax,[ebp-0x400] | |
08077287 6800040000 push dword 0x400 | |
0807728C 6A00 push byte +0x0 | |
0807728E 50 push eax | |
0807728F E8A8FFFFFF call dword 0x807723c | |
sub_0807723C(ebp_400h, '\0', 0x400); | |
08077294 FF7510 push dword [ebp+0x10] | |
08077297 FF750C push dword [ebp+0xc] | |
0807729A 8B4D08 mov ecx,[ebp+0x8] | |
0807729D 51 push ecx | |
0807729E 6800080000 push dword 0x800 | |
080772A3 8D8D00F4FFFF lea ecx,[ebp-0xc00] | |
080772A9 51 push ecx | |
080772AA E847030000 call dword 0x80775f6 | |
sub_080775F6(ebp_c00h, 0x800, arg0, arg1, arg2); | |
080772AF 6800010000 push dword 0x100 | |
080772B4 8D8D00F3FFFF lea ecx,[ebp-0xd00] | |
080772BA 51 push ecx | |
080772BB 6800080000 push dword 0x800 | |
080772C0 8D8D00F4FFFF lea ecx,[ebp-0xc00] | |
080772C6 51 push ecx | |
080772C7 6800040000 push dword 0x400 | |
080772CC 8D8D00FCFFFF lea ecx,[ebp-0x400] | |
080772D2 51 push ecx | |
080772D3 E832000000 call dword 0x807730a | |
sub_0807730A(ebp_400h, 0x400, ebp_c00h, 0x800, ebp_d00h, 0x100); | |
080772D8 8D8D00F3FFFF lea ecx,[ebp-0xd00] | |
080772DE 51 push ecx | |
080772DF E83DFFFFFF call dword 0x8077221 | |
sub_08077221(ebp_d00h); | |
080772E4 8D8D00F3FFFF lea ecx,[ebp-0xd00] | |
080772EA 51 push ecx | |
080772EB E816FFFFFF call dword 0x8077206 | |
080772F0 89C2 mov edx,eax | |
080772F2 8D8D00F3FFFF lea ecx,[ebp-0xd00] | |
080772F8 BB01000000 mov ebx,0x1 | |
080772FD B804000000 mov eax,0x4 | |
08077302 CD80 int 0x80 | |
write(STDOUT_FILENO, ebp_d00h, sub_08077206(ebp_d00h)); | |
08077304 89EC mov esp,ebp | |
08077306 5D pop ebp | |
08077307 C20C00 ret 0xc | |
} | |
sub_0807730A() | |
{ | |
0807730A 55 push ebp | |
0807730B 89E5 mov ebp,esp | |
0807730D 81EC00080000 sub esp,0x800 | |
08077313 83EC14 sub esp,byte +0x14 | |
08077316 57 push edi | |
08077317 56 push esi | |
08077318 8D8500F8FFFF lea eax,[ebp-0x800] | |
0807731E 6800080000 push dword 0x800 | |
08077323 6A00 push byte +0x0 | |
08077325 50 push eax | |
08077326 E811FFFFFF call dword 0x807723c | |
0807732B C785FCF7FFFF0000 mov dword [ebp-0x804],0x0 | |
-0000 | |
08077335 C785F8F7FFFF0000 mov dword [ebp-0x808],0x0 | |
-0000 | |
0807733F C785F4F7FFFF0000 mov dword [ebp-0x80c],0x0 | |
-0000 | |
08077349 C785F0F7FFFF0000 mov dword [ebp-0x810],0x0 | |
-0000 | |
08077353 8B8DF8F7FFFF mov ecx,[ebp-0x808] | |
08077359 3B4D14 cmp ecx,[ebp+0x14] | |
0807735C 0F8D46020000 jnl dword 0x80775a8 | |
08077362 8B4510 mov eax,[ebp+0x10] | |
08077365 01C8 add eax,ecx | |
08077367 8A00 mov al,[eax] | |
08077369 84C0 test al,al | |
0807736B 0F8437020000 jz dword 0x80775a8 | |
08077371 3C3C cmp al,0x3c | |
08077373 7435 jz 0x80773aa | |
08077375 3C3E cmp al,0x3e | |
08077377 744A jz 0x80773c3 | |
08077379 3C2D cmp al,0x2d | |
0807737B 7460 jz 0x80773dd | |
0807737D 3C2B cmp al,0x2b | |
0807737F 0F848A000000 jz dword 0x807740f | |
08077385 3C5B cmp al,0x5b | |
08077387 0F84B4000000 jz dword 0x8077441 | |
0807738D 3C5D cmp al,0x5d | |
0807738F 0F8444010000 jz dword 0x80774d9 | |
08077395 3C2E cmp al,0x2e | |
08077397 0F8487010000 jz dword 0x8077524 | |
0807739D 3C2C cmp al,0x2c | |
0807739F 0F84DA010000 jz dword 0x807757f | |
080773A5 E9F0010000 jmp dword 0x807759a | |
080773AA 8B85F4F7FFFF mov eax,[ebp-0x80c] | |
080773B0 85C0 test eax,eax | |
080773B2 0F8EE4010000 jng dword 0x807759c | |
080773B8 FF8DF4F7FFFF dec dword [ebp-0x80c] | |
080773BE E9D9010000 jmp dword 0x807759c | |
080773C3 8B85F4F7FFFF mov eax,[ebp-0x80c] | |
080773C9 3B450C cmp eax,[ebp+0xc] | |
080773CC 0F8DCA010000 jnl dword 0x807759c | |
080773D2 FF85F4F7FFFF inc dword [ebp-0x80c] | |
080773D8 E9BF010000 jmp dword 0x807759c | |
080773DD 8B85F4F7FFFF mov eax,[ebp-0x80c] | |
080773E3 85C0 test eax,eax | |
080773E5 0F8CB1010000 jl dword 0x807759c | |
080773EB 8B85F4F7FFFF mov eax,[ebp-0x80c] | |
080773F1 3B450C cmp eax,[ebp+0xc] | |
080773F4 0F8DA2010000 jnl dword 0x807759c | |
080773FA 8B4508 mov eax,[ebp+0x8] | |
080773FD 8B95F4F7FFFF mov edx,[ebp-0x80c] | |
08077403 C1E202 shl edx,byte 0x2 | |
08077406 01D0 add eax,edx | |
08077408 FF08 dec dword [eax] | |
0807740A E98D010000 jmp dword 0x807759c | |
0807740F 8B85F4F7FFFF mov eax,[ebp-0x80c] | |
08077415 85C0 test eax,eax | |
08077417 0F8C7F010000 jl dword 0x807759c | |
0807741D 8B85F4F7FFFF mov eax,[ebp-0x80c] | |
08077423 3B450C cmp eax,[ebp+0xc] | |
08077426 0F8D70010000 jnl dword 0x807759c | |
0807742C 8B4508 mov eax,[ebp+0x8] | |
0807742F 8B95F4F7FFFF mov edx,[ebp-0x80c] | |
08077435 C1E202 shl edx,byte 0x2 | |
08077438 01D0 add eax,edx | |
0807743A FF00 inc dword [eax] | |
0807743C E95B010000 jmp dword 0x807759c | |
08077441 8B4508 mov eax,[ebp+0x8] | |
08077444 8B95F4F7FFFF mov edx,[ebp-0x80c] | |
0807744A C1E202 shl edx,byte 0x2 | |
0807744D 01D0 add eax,edx | |
0807744F 8B00 mov eax,[eax] | |
08077451 85C0 test eax,eax | |
08077453 754F jnz 0x80774a4 | |
08077455 C785ECF7FFFF0100 mov dword [ebp-0x814],0x1 | |
-0000 | |
0807745F 8B9DECF7FFFF mov ebx,[ebp-0x814] | |
08077465 85DB test ebx,ebx | |
08077467 0F8E2F010000 jng dword 0x807759c | |
0807746D 8B8DF8F7FFFF mov ecx,[ebp-0x808] | |
08077473 3B4D14 cmp ecx,[ebp+0x14] | |
08077476 0F8D20010000 jnl dword 0x807759c | |
0807747C 8B4510 mov eax,[ebp+0x10] | |
0807747F 01C8 add eax,ecx | |
08077481 8A00 mov al,[eax] | |
08077483 3C5D cmp al,0x5d | |
08077485 7406 jz 0x807748d | |
08077487 3C5B cmp al,0x5b | |
08077489 740A jz 0x8077495 | |
0807748B EB0E jmp short 0x807749b | |
0807748D FF8DECF7FFFF dec dword [ebp-0x814] | |
08077493 EB06 jmp short 0x807749b | |
08077495 FF85ECF7FFFF inc dword [ebp-0x814] | |
0807749B 41 inc ecx | |
0807749C 898DF8F7FFFF mov [ebp-0x808],ecx | |
080774A2 EBBB jmp short 0x807745f | |
080774A4 8B85FCF7FFFF mov eax,[ebp-0x804] | |
080774AA 3D00020000 cmp eax,0x200 | |
080774AF 0F8DE7000000 jnl dword 0x807759c | |
080774B5 FF85FCF7FFFF inc dword [ebp-0x804] | |
080774BB 8B9DFCF7FFFF mov ebx,[ebp-0x804] | |
080774C1 C1E302 shl ebx,byte 0x2 | |
080774C4 8DBD00F8FFFF lea edi,[ebp-0x800] | |
080774CA 8B8DF8F7FFFF mov ecx,[ebp-0x808] | |
080774D0 01DF add edi,ebx | |
080774D2 890F mov [edi],ecx | |
080774D4 E9C3000000 jmp dword 0x807759c | |
080774D9 8B85FCF7FFFF mov eax,[ebp-0x804] | |
080774DF 85C0 test eax,eax | |
080774E1 0F8EB5000000 jng dword 0x807759c | |
080774E7 8B4508 mov eax,[ebp+0x8] | |
080774EA 8B95F4F7FFFF mov edx,[ebp-0x80c] | |
080774F0 C1E202 shl edx,byte 0x2 | |
080774F3 01D0 add eax,edx | |
080774F5 8B00 mov eax,[eax] | |
080774F7 85C0 test eax,eax | |
080774F9 750C jnz 0x8077507 | |
080774FB 66FF8DFCF7FFFF dec word [ebp-0x804] | |
08077502 E995000000 jmp dword 0x807759c | |
08077507 8B9DFCF7FFFF mov ebx,[ebp-0x804] | |
0807750D C1E302 shl ebx,byte 0x2 | |
08077510 8DBD00F8FFFF lea edi,[ebp-0x800] | |
08077516 01DF add edi,ebx | |
08077518 8B17 mov edx,[edi] | |
0807751A 8995F8F7FFFF mov [ebp-0x808],edx | |
08077520 89D1 mov ecx,edx | |
08077522 EB78 jmp short 0x807759c | |
08077524 8B85F4F7FFFF mov eax,[ebp-0x80c] | |
0807752A 85C0 test eax,eax | |
0807752C 7C6E jl 0x807759c | |
0807752E 8B85F4F7FFFF mov eax,[ebp-0x80c] | |
08077534 3B450C cmp eax,[ebp+0xc] | |
08077537 7D63 jnl 0x807759c | |
08077539 8B85F0F7FFFF mov eax,[ebp-0x810] | |
0807753F 85C0 test eax,eax | |
08077541 7C59 jl 0x807759c | |
08077543 8B85F0F7FFFF mov eax,[ebp-0x810] | |
08077549 3B451C cmp eax,[ebp+0x1c] | |
0807754C 7D4E jnl 0x807759c | |
0807754E 51 push ecx | |
0807754F 8B7D18 mov edi,[ebp+0x18] | |
08077552 8B8DF0F7FFFF mov ecx,[ebp-0x810] | |
08077558 C1E102 shl ecx,byte 0x2 | |
0807755B 01CF add edi,ecx | |
0807755D 8B7508 mov esi,[ebp+0x8] | |
08077560 8B8DF4F7FFFF mov ecx,[ebp-0x80c] | |
08077566 C1E102 shl ecx,byte 0x2 | |
08077569 01CE add esi,ecx | |
0807756B 8B06 mov eax,[esi] | |
0807756D 8907 mov [edi],eax | |
0807756F 8B8DF0F7FFFF mov ecx,[ebp-0x810] | |
08077575 41 inc ecx | |
08077576 898DF0F7FFFF mov [ebp-0x810],ecx | |
0807757C 59 pop ecx | |
0807757D EB1D jmp short 0x807759c | |
0807757F 51 push ecx | |
08077580 BADD020000 mov edx,0x2dd | |
08077585 8D8EFF190000 lea ecx,[esi+0x19ff] | |
0807758B BB01000000 mov ebx,0x1 | |
08077590 B804000000 mov eax,0x4 | |
08077595 CD80 int 0x80 | |
08077597 59 pop ecx | |
08077598 EB02 jmp short 0x807759c | |
0807759A EB00 jmp short 0x807759c | |
0807759C 41 inc ecx | |
0807759D 898DF8F7FFFF mov [ebp-0x808],ecx | |
080775A3 E9ABFDFFFF jmp dword 0x8077353 | |
080775A8 5E pop esi | |
080775A9 5F pop edi | |
080775AA 31C0 xor eax,eax | |
080775AC 89EC mov esp,ebp | |
080775AE 5D pop ebp | |
080775AF C21800 ret 0x18 | |
} | |
// Decoder? | |
sub_080775B2(arg0, arg1) | |
{ | |
080775B2 55 push ebp | |
080775B3 89E5 mov ebp,esp | |
080775B5 83EC08 sub esp,byte +0x8 | |
// Local variables. | |
int ebp_08h; | |
int ebp_04h; | |
080775B8 56 push esi | |
080775B9 C745FC05150000 mov dword [ebp-0x4],0x1505 | |
ebp_04h = 0x1505; | |
080775C0 C745F800000000 mov dword [ebp-0x8],0x0 | |
for(ebp_08h = 0; ebp_08h < arg1; ebp_08h++) { | |
080775C7 8B4DF8 mov ecx,[ebp-0x8] | |
080775CA 3B4D0C cmp ecx,[ebp+0xc] | |
080775CD 7D1D jnl 0x80775ec | |
080775CF 8B45FC mov eax,[ebp-0x4] | |
080775D2 89C3 mov ebx,eax | |
080775D4 C1E005 shl eax,byte 0x5 | |
080775D7 01D8 add eax,ebx | |
080775D9 8B7508 mov esi,[ebp+0x8] | |
080775DC 01CE add esi,ecx | |
080775DE 0FB61E movzx ebx,byte [esi] | |
080775E1 01D8 add eax,ebx | |
080775E3 8945FC mov [ebp-0x4],eax | |
ebp_04h = arg0[ebp_08h] + ebp_04h + (ebp_04h << 5); | |
080775E6 41 inc ecx | |
080775E7 894DF8 mov [ebp-0x8],ecx | |
080775EA EBDB jmp short 0x80775c7 | |
} | |
080775EC 8B45FC mov eax,[ebp-0x4] | |
080775EF 5E pop esi | |
080775F0 89EC mov esp,ebp | |
080775F2 5D pop ebp | |
080775F3 C20800 ret 0x8 | |
return ebp_04h; | |
} | |
sub_080775F6(arg0, arg1, arg2, arg3, arg4) | |
{ | |
080775F6 55 push ebp | |
080775F7 89E5 mov ebp,esp | |
080775F9 57 push edi | |
080775FA 56 push esi | |
int i; | |
int c; | |
080775FB 31C9 xor ecx,ecx | |
080775FD 8B5D18 mov ebx,[ebp+0x18] | |
c = arg4; | |
for(i = 0; i < arg3 && i < arg1; i++, ROT(c)) { | |
08077600 3B4D14 cmp ecx,[ebp+0x14] | |
08077603 7D1A jnl 0x807761f | |
08077605 3B4D0C cmp ecx,[ebp+0xc] | |
08077608 7D15 jnl 0x807761f | |
0807760A 8B7510 mov esi,[ebp+0x10] | |
0807760D 01CE add esi,ecx | |
0807760F 8A06 mov al,[esi] | |
08077611 30D8 xor al,bl | |
08077613 D1C3 rol ebx,1 | |
08077615 8B7D08 mov edi,[ebp+0x8] | |
08077618 01CF add edi,ecx | |
0807761A 8807 mov [edi],al | |
arg0[i] = arg2[i] ^ c; | |
0807761C 41 inc ecx | |
0807761D EBE1 jmp short 0x8077600 | |
} | |
0807761F 5E pop esi | |
08077620 5F pop edi | |
08077621 31C0 xor eax,eax | |
08077623 89EC mov esp,ebp | |
08077625 5D pop ebp | |
08077626 C21400 ret 0x14 | |
} | |
// restore eip to esi. | |
08077629 5E pop esi | |
0807762A E9DEF9FFFF jmp dword 0x807700d | |
// -------------------------- data --------------------------------- | |
0807762F 00E7 add bh,ah | |
08077631 99 cdq | |
08077632 4F dec edi | |
08077633 E3BA jecxz 0x80775ef | |
08077635 086CA434 or [esp+0x34],ch | |
08077639 6443 fs inc ebx | |
0807763B D5D7 aad 0xd7 | |
0807763D D3DB rcr ebx,cl | |
0807763F CAE8AC retf 0xace8 | |
08077642 2435 and al,0x35 | |
08077644 0254AFD8 add dl,[edi+ebp*4-0x28] | |
08077648 E2B8 loop 0x8077602 | |
0807764A 0C65 or al,0x65 | |
0807764C B610 mov dh,0x10 | |
0807764E 48 dec eax | |
0807764F D2 db 0xd2 | |
08077650 F299 repne cdq | |
08077652 4F dec edi | |
08077653 E3BA jecxz 0x807760f | |
08077655 086CA444 or [esp+0x44],ch | |
08077659 0354D5D7 add edx,[ebp+edx*8-0x29] | |
0807765D D3DB rcr ebx,cl | |
0807765F CAE8AC retf 0xace8 | |
08077662 2435 and al,0x35 | |
08077664 17 pop ss | |
08077665 52 push edx | |
08077666 CC int3 | |
08077667 C9 leave | |
08077668 94 xchg eax,esp | |
08077669 AF scasd | |
0807766A 0C65 or al,0x65 | |
0807766C B610 mov dh,0x10 | |
0807766E 5D pop ebp | |
0807766F D2E7 shl bh,cl | |
08077671 99 cdq | |
08077672 4F dec edi | |
08077673 E3BA jecxz 0x807762f | |
08077675 086CA434 or [esp+0x34],ch | |
08077679 6443 fs inc ebx | |
0807767B D5D7 aad 0xd7 | |
0807767D D3DB rcr ebx,cl | |
0807767F CAE8AC retf 0xace8 | |
08077682 2435 and al,0x35 | |
08077684 17 pop ss | |
08077685 52 push edx | |
08077686 D9 db 0xd9 | |
08077687 DA db 0xda | |
08077688 E4CE in al,0xce | |
0807768A 1B65B6 sbb esp,[ebp-0x4a] | |
0807768D 105DC7 adc [ebp-0x39],bl | |
08077690 E78C out 0x8c,eax | |
08077692 4F dec edi | |
08077693 E3BA jecxz 0x807764f | |
08077695 086CA434 or [esp+0x34],ch | |
08077699 1424 adc al,0x24 | |
0807769B C2D7D3 ret 0xd3d7 | |
0807769E DBCA fcmovne st2 | |
080776A0 E8AC243517 call dword 0x1f3c9b51 | |
080776A5 52 push edx | |
080776A6 D9CF fxch st7 | |
080776A8 F7BE7A72B610 idiv dword [esi+0x10b6727a] | |
080776AE 5D pop ebp | |
080776AF C7 db 0xc7 | |
080776B0 E78C out 0x8c,eax | |
080776B2 4F dec edi | |
080776B3 E3BA jecxz 0x807766f | |
080776B5 081CB3 or [ebx+esi*4],bl | |
080776B8 3414 xor al,0x14 | |
080776BA 54 push esp | |
080776BB D5D7 aad 0xd7 | |
080776BD D3DB rcr ebx,cl | |
080776BF CAFDAA retf 0xaafd | |
080776C2 52 push edx | |
080776C3 2017 and [edi],dl | |
080776C5 52 push edx | |
080776C6 D9CF fxch st7 | |
080776C8 E2B8 loop 0x8077682 | |
080776CA 0C65 or al,0x65 | |
080776CC C6075D mov byte [edi],0x5d | |
080776CF C7 db 0xc7 | |
080776D0 F299 repne cdq | |
080776D2 4F dec edi | |
080776D3 E3BA jecxz 0x807768f | |
080776D5 086CA434 or [esp+0x34],ch | |
080776D9 1454 adc al,0x54 | |
080776DB D5C2 aad 0xc2 | |
080776DD D5AD aad 0xad | |
080776DF DDE8 fucomp st0 | |
080776E1 AC lodsb | |
080776E2 2420 and al,0x20 | |
080776E4 0252D9 add dl,[edx-0x27] | |
080776E7 CF iretd | |
080776E8 E2B8 loop 0x80776a2 | |
080776EA 0C65 or al,0x65 | |
080776EC B660 mov dh,0x60 | |
080776EE 4A dec edx | |
080776EF C7 db 0xc7 | |
080776F0 F299 repne cdq | |
080776F2 4F dec edi | |
080776F3 E3BA jecxz 0x80776af | |
080776F5 086CA434 or [esp+0x34],ch | |
080776F9 1454 adc al,0x54 | |
080776FB D5D7 aad 0xd7 | |
080776FD C6 db 0xc6 | |
080776FE DDBCFFAC243517 fnstsw [edi+edi*8+0x173524ac] | |
08077705 52 push edx | |
08077706 CC int3 | |
08077707 DA db 0xda | |
08077708 E2B8 loop 0x80776c2 | |
0807770A 0C65 or al,0x65 | |
0807770C B610 mov dh,0x10 | |
0807770E 5D pop ebp | |
0807770F C7828E4FE3BA086C mov dword [edx-0x451cb072],0x34a46c08 | |
-A434 | |
08077719 1454 adc al,0x54 | |
0807771B D5D7 aad 0xd7 | |
0807771D D3DB rcr ebx,cl | |
0807771F CAFDAA retf 0xaafd | |
08077722 52 push edx | |
08077723 2017 and [edi],dl | |
08077725 52 push edx | |
08077726 D9CF fxch st7 | |
08077728 E2B8 loop 0x80776e2 | |
0807772A 0C65 or al,0x65 | |
0807772C C6075D mov byte [edi],0x5d | |
0807772F C7 db 0xc7 | |
08077730 F299 repne cdq | |
08077732 4F dec edi | |
08077733 E3BA jecxz 0x80776ef | |
08077735 086CA434 or [esp+0x34],ch | |
08077739 1441 adc al,0x41 | |
0807773B D3A1C4DBCAE8 shl dword [ecx-0x1735243c],cl | |
08077741 AC lodsb | |
08077742 2420 and al,0x20 | |
08077744 0252D9 add dl,[edx-0x27] | |
08077747 CF iretd | |
08077748 E2B8 loop 0x8077702 | |
0807774A 0C65 or al,0x65 | |
0807774C B660 mov dh,0x60 | |
0807774E 4A dec edx | |
0807774F C7 db 0xc7 | |
08077750 F299 repne cdq | |
08077752 4F dec edi | |
08077753 E3BA jecxz 0x807770f | |
08077755 086CA434 or [esp+0x34],ch | |
08077759 1454 adc al,0x54 | |
0807775B D5D7 aad 0xd7 | |
0807775D C6 db 0xc6 | |
0807775E DDBCFFAC242002 fnstsw [edi+edi*8+0x22024ac] | |
08077765 52 push edx | |
08077766 D9CF fxch st7 | |
08077768 E2B8 loop 0x8077722 | |
0807776A 0C65 or al,0x65 | |
0807776C B660 mov dh,0x60 | |
0807776E 4A dec edx | |
0807776F C7 db 0xc7 | |
08077770 F299 repne cdq | |
08077772 4F dec edi | |
08077773 E3BA jecxz 0x807772f | |
08077775 086CA434 or [esp+0x34],ch | |
08077779 1454 adc al,0x54 | |
0807777B C0D1A5 rcl cl,byte 0xa5 | |
0807777E CC int3 | |
0807777F CAE8AC retf 0xace8 | |
08077782 3120 xor [eax],esp | |
08077784 17 pop ss | |
08077785 52 push edx | |
08077786 D9CF fxch st7 | |
08077788 E2B8 loop 0x8077742 | |
0807778A 0C65 or al,0x65 | |
0807778C C6075D mov byte [edi],0x5d | |
0807778F C7 db 0xc7 | |
08077790 F299 repne cdq | |
08077792 4F dec edi | |
08077793 E3BA jecxz 0x807774f | |
08077795 086CA434 or [esp+0x34],ch | |
08077799 1454 adc al,0x54 | |
0807779B C0D1A5 rcl cl,byte 0xa5 | |
0807779E CC int3 | |
0807779F CAE8AC retf 0xace8 | |
080777A2 2435 and al,0x35 | |
080777A4 17 pop ss | |
080777A5 52 push edx | |
080777A6 CC int3 | |
080777A7 DA db 0xda | |
080777A8 E2B8 loop 0x8077762 | |
080777AA 0C65 or al,0x65 | |
080777AC B610 mov dh,0x10 | |
080777AE 5D pop ebp | |
080777AF C7828E4FE3BA086C mov dword [edx-0x451cb072],0x34a46c08 | |
-A434 | |
080777B9 1454 adc al,0x54 | |
080777BB D5D7 aad 0xd7 | |
080777BD D3DB rcr ebx,cl | |
080777BF CAFDAA retf 0xaafd | |
080777C2 52 push edx | |
080777C3 2217 and dl,[edi] | |
080777C5 52 push edx | |
080777C6 D9CF fxch st7 | |
080777C8 E2B8 loop 0x8077782 | |
080777CA 0C70 or al,0x70 | |
080777CC A3105DC7F2 mov [0xf2c75d10],eax | |
080777D1 E958E3BA08 jmp dword 0x10c25b2e | |
080777D6 6C insb | |
080777D7 A4 movsb | |
080777D8 3414 xor al,0x14 | |
080777DA 54 push esp | |
080777DB C0D1A5 rcl cl,byte 0xa5 | |
080777DE CE into | |
080777DF CAE8AC retf 0xace8 | |
080777E2 2435 and al,0x35 | |
080777E4 17 pop ss | |
080777E5 52 push edx | |
080777E6 D9BFF5B80C65 fnstcw [edi+0x650cb8f5] | |
080777EC B610 mov dh,0x10 | |
080777EE 5D pop ebp | |
080777EF C7 db 0xc7 | |
080777F0 F299 repne cdq | |
080777F2 4F dec edi | |
080777F3 E3BA jecxz 0x80777af | |
080777F5 086CB132 or [ecx+esi*4+0x32],ch | |
080777F9 6241D5D7D3DB vpsrlq xmm11{k7}{z},xmm21,xmm11 | |
080777FF CAE8AC retf 0xace8 | |
08077802 2445 and al,0x45 | |
08077804 0052D9 add [edx-0x27],dl | |
08077807 CF iretd | |
08077808 E2B8 loop 0x80777c2 | |
0807780A 0C65 or al,0x65 | |
0807780C B610 mov dh,0x10 | |
0807780E 5D pop ebp | |
0807780F C7 db 0xc7 | |
08077810 F299 repne cdq | |
08077812 5A pop edx | |
08077813 E5CC in eax,0xcc | |
08077815 1F pop ds | |
08077816 6C insb | |
08077817 A4 movsb | |
08077818 3414 xor al,0x14 | |
0807781A 54 push esp | |
0807781B D5D7 aad 0xd7 | |
0807781D C6 db 0xc6 | |
0807781E CE into | |
0807781F CAE8AC retf 0xace8 | |
08077822 2435 and al,0x35 | |
08077824 17 pop ss | |
08077825 52 push edx | |
08077826 D9BFF5B80C65 fnstcw [edi+0x650cb8f5] | |
0807782C B610 mov dh,0x10 | |
0807782E 5D pop ebp | |
0807782F C7 db 0xc7 | |
08077830 F299 repne cdq | |
08077832 4F dec edi | |
08077833 E3BA jecxz 0x80777ef | |
08077835 086CB132 or [ecx+esi*4+0x32],ch | |
08077839 62 db 0x62 | |
0807783A 43 inc ebx | |
0807783B D5D7 aad 0xd7 | |
0807783D D3DB rcr ebx,cl | |
0807783F CAE8AC retf 0xace8 | |
08077842 3120 xor [eax],esp | |
08077844 17 pop ss | |
08077845 52 push edx | |
08077846 D9CF fxch st7 | |
08077848 E2B8 loop 0x8077802 | |
0807784A 0C65 or al,0x65 | |
0807784C C6075D mov byte [edi],0x5d | |
0807784F C7 db 0xc7 | |
08077850 F299 repne cdq | |
08077852 4F dec edi | |
08077853 E3BA jecxz 0x807780f | |
08077855 086CA434 or [esp+0x34],ch | |
08077859 1441 adc al,0x41 | |
0807785B D3A1C4DBCAE8 shl dword [ecx-0x1735243c],cl | |
08077861 AC lodsb | |
08077862 2420 and al,0x20 | |
08077864 0252D9 add dl,[edx-0x27] | |
08077867 CF iretd | |
08077868 E2B8 loop 0x8077822 | |
0807786A 0C65 or al,0x65 | |
0807786C B660 mov dh,0x60 | |
0807786E 4A dec edx | |
0807786F C7 db 0xc7 | |
08077870 F299 repne cdq | |
08077872 4F dec edi | |
08077873 E3BA jecxz 0x807782f | |
08077875 086CA434 or [esp+0x34],ch | |
08077879 1454 adc al,0x54 | |
0807787B D5D7 aad 0xd7 | |
0807787D C6 db 0xc6 | |
0807787E DDBCFFAC242002 fnstsw [edi+edi*8+0x22024ac] | |
08077885 52 push edx | |
08077886 D9CF fxch st7 | |
08077888 E2C8 loop 0x8077852 | |
0807788A 1B65B6 sbb esp,[ebp-0x4a] | |
0807788D 105DC7 adc [ebp-0x39],bl | |
08077890 F299 repne cdq | |
08077892 4F dec edi | |
08077893 F6BC7E7BA42101 idiv byte [esi+edi*2+0x121a47b] | |
0807789A 54 push esp | |
0807789B D5D7 aad 0xd7 | |
0807789D D3ABDDE8AC24 shr dword [ebx+0x24ace8dd],cl | |
080778A3 351752D9CF xor eax,0xcfd95217 | |
080778A8 F7BE7A72B605 idiv dword [esi+0x5b6727a] | |
080778AE 48 dec eax | |
080778AF C7 db 0xc7 | |
080778B0 F299 repne cdq | |
080778B2 4F dec edi | |
080778B3 93 xchg eax,ebx | |
080778B4 AD lodsd | |
080778B5 086CA434 or [esp+0x34],ch | |
080778B9 1454 adc al,0x54 | |
080778BB D5D7 aad 0xd7 | |
080778BD C6 db 0xc6 | |
080778BE DDBCFFAC312017 fnstsw [edi+edi*8+0x172031ac] | |
080778C5 52 push edx | |
080778C6 D9CF fxch st7 | |
080778C8 92 xchg eax,edx | |
080778C9 AF scasd | |
080778CA 0C65 or al,0x65 | |
080778CC A3162BD0F2 mov [0xf2d02b16],eax | |
080778D1 99 cdq | |
080778D2 5A pop edx | |
080778D3 F6BA086CA434 idiv byte [edx+0x34a46c08] | |
080778D9 1454 adc al,0x54 | |
080778DB D5A7 aad 0xa7 | |
080778DD C4 db 0xc4 | |
080778DE DBCA fcmovne st2 | |
080778E0 E8AC243517 call dword 0x1f3c9d91 | |
080778E5 52 push edx | |
080778E6 CC int3 | |
080778E7 C9 leave | |
080778E8 94 xchg eax,esp | |
080778E9 AF scasd | |
080778EA 0C65 or al,0x65 | |
080778EC A3055DC7F2 mov [0xf2c75d05],eax | |
080778F1 99 cdq | |
080778F2 4F dec edi | |
080778F3 E3BA jecxz 0x80778af | |
080778F5 081CB3 or [ebx+esi*4],bl | |
080778F8 3414 xor al,0x14 | |
080778FA 54 push esp | |
080778FB D5D7 aad 0xd7 | |
080778FD D3DB rcr ebx,cl | |
080778FF CAE8AC retf 0xace8 | |
08077902 2435 and al,0x35 | |
08077904 17 pop ss | |
08077905 52 push edx | |
08077906 D9 db 0xd9 | |
08077907 DA db 0xda | |
08077908 E4CE in al,0xce | |
0807790A 1B65A3 sbb esp,[ebp-0x5d] | |
0807790D 055DC7F299 add eax,0x99f2c75d | |
08077912 4F dec edi | |
08077913 E3BA jecxz 0x80778cf | |
08077915 081CB3 or [ebx+esi*4],bl | |
08077918 3414 xor al,0x14 | |
0807791A 54 push esp | |
0807791B D5D7 aad 0xd7 | |
0807791D D3DB rcr ebx,cl | |
0807791F CAE8AC retf 0xace8 | |
08077922 2435 and al,0x35 | |
08077924 0254AFD8 add dl,[edi+ebp*4-0x28] | |
08077928 E2B8 loop 0x80778e2 | |
0807792A 0C65 or al,0x65 | |
0807792C B605 mov dh,0x5 | |
0807792E 48 dec eax | |
0807792F C7 db 0xc7 | |
08077930 F299 repne cdq | |
08077932 4F dec edi | |
08077933 93 xchg eax,ebx | |
08077934 AD lodsd | |
08077935 086CA434 or [esp+0x34],ch | |
08077939 1454 adc al,0x54 | |
0807793B D5D7 aad 0xd7 | |
0807793D C6 db 0xc6 | |
0807793E DDBCFFAC312017 fnstsw [edi+edi*8+0x172031ac] | |
08077945 52 push edx | |
08077946 D9CF fxch st7 | |
08077948 92 xchg eax,edx | |
08077949 AF scasd | |
0807794A 0C65 or al,0x65 | |
0807794C A3162BD0F2 mov [0xf2d02b16],eax | |
08077951 99 cdq | |
08077952 5A pop edx | |
08077953 F6BA081CB321 idiv byte [edx+0x21b31c08] | |
08077959 1222 adc ah,[edx] | |
0807795B C0D7D3 rcl bh,byte 0xd3 | |
0807795E DBCA fcmovne st2 | |
08077960 98 cwde | |
08077961 BB24350254 mov ebx,0x54023524 | |
08077966 AF scasd | |
08077967 D8E2 fsub st2 | |
08077969 B81972A107 mov eax,0x7a17219 | |
0807796E 4A dec edx | |
0807796F D0E5 shl ch,1 | |
08077971 8E58F4 mov ds,[eax-0xc] | |
08077974 AD lodsd | |
08077975 1F pop ds | |
08077976 7BB3 jpo 0x807792b | |
08077978 2303 and eax,[ebx] | |
0807797A 43 inc ebx | |
0807797B C2C0C4 ret 0xc4c0 | |
0807797E CC int3 | |
0807797F DD db 0xdd | |
08077980 FF db 0xff | |
08077981 BB33220045 mov ebx,0x45002233 | |
08077986 CE into | |
08077987 D8F5 fdiv st5 | |
08077989 BD1960A315 mov ebp,0x15a36019 | |
0807798E 48 dec eax | |
0807798F C2E79C ret 0x9ce7 | |
08077992 5A pop edx | |
08077993 E6AF out 0xaf,al | |
08077995 0D79A12111 or eax,0x1121a179 | |
0807799A 41 inc ecx | |
0807799B D0C2 rol dl,1 | |
0807799D D6 salc | |
0807799E CE into | |
0807799F CF iretd | |
080779A0 FD std | |
080779A1 A931300257 test eax,0x57023031 | |
080779A6 CC int3 | |
080779A7 CAF7BD retf 0xbdf7 | |
080779AA 1960A3 sbb [eax-0x5d],esp | |
080779AD 1548C2E79C adc eax,0x9ce7c248 | |
080779B2 5A pop edx | |
080779B3 E6AF out 0xaf,al | |
080779B5 0D79A12111 or eax,0x1121a179 | |
080779BA 41 inc ecx | |
080779BB D0C2 rol dl,1 | |
080779BD D6 salc | |
080779BE CE into | |
080779BF CF iretd | |
080779C0 FD std | |
080779C1 A9313002E7 test eax,0xe7023031 | |
080779C6 99 cdq | |
080779C7 4F dec edi | |
080779C8 E3BA jecxz 0x8077984 | |
080779CA 086CA434 or [esp+0x34],ch | |
080779CE 6443 fs inc ebx | |
080779D0 D5D7 aad 0xd7 | |
080779D2 D3DB rcr ebx,cl | |
080779D4 CAE8AC retf 0xace8 | |
080779D7 2435 and al,0x35 | |
080779D9 0254AFD8 add dl,[edi+ebp*4-0x28] | |
080779DD E2B8 loop 0x8077997 | |
080779DF 0C65 or al,0x65 | |
080779E1 B610 mov dh,0x10 | |
080779E3 5D pop ebp | |
080779E4 D2E7 shl bh,cl | |
080779E6 99 cdq | |
080779E7 4F dec edi | |
080779E8 E3BA jecxz 0x80779a4 | |
080779EA 086CA434 or [esp+0x34],ch | |
080779EE 6443 fs inc ebx | |
080779F0 D5D7 aad 0xd7 | |
080779F2 D3DB rcr ebx,cl | |
080779F4 CAE8AC retf 0xace8 | |
080779F7 2435 and al,0x35 | |
080779F9 0254AFD8 add dl,[edi+ebp*4-0x28] | |
080779FD E2B8 loop 0x80779b7 | |
080779FF 0C65 or al,0x65 | |
08077A01 B605 mov dh,0x5 | |
08077A03 48 dec eax | |
08077A04 C7 db 0xc7 | |
08077A05 F299 repne cdq | |
08077A07 4F dec edi | |
08077A08 E3BA jecxz 0x80779c4 | |
08077A0A 086CD423 or [esp+edx*8+0x23],ch | |
08077A0E 1454 adc al,0x54 | |
08077A10 D5D7 aad 0xd7 | |
08077A12 D3DB rcr ebx,cl | |
08077A14 CAE8B9 retf 0xb9e8 | |
08077A17 224300 and al,[ebx+0x0] | |
08077A1A 52 push edx | |
08077A1B D9CF fxch st7 | |
08077A1D E2B8 loop 0x80779d7 | |
08077A1F 0C65 or al,0x65 | |
08077A21 A3055DC7F2 mov [0xf2c75d05],eax | |
08077A26 99 cdq | |
08077A27 3F aas | |
08077A28 F4 hlt | |
08077A29 BA086CA434 mov edx,0x34a46c08 | |
08077A2E 1454 adc al,0x54 | |
08077A30 D5C2 aad 0xc2 | |
08077A32 D5AD aad 0xad | |
08077A34 DDE8 fucomp st0 | |
08077A36 B931351752 mov ecx,0x52173531 | |
08077A3B D9BFF5B80C65 fnstcw [edi+0x650cb8f5] | |
08077A41 B610 mov dh,0x10 | |
08077A43 5D pop ebp | |
08077A44 C7 db 0xc7 | |
08077A45 F28C4995 repne mov [ecx-0x6b],cs | |
08077A49 AF scasd | |
08077A4A 086CA434 or [esp+0x34],ch | |
08077A4E 1454 adc al,0x54 | |
08077A50 D5D7 aad 0xd7 | |
08077A52 A3CCCAE8AC mov [0xace8cacc],eax | |
08077A57 2435 and al,0x35 | |
08077A59 17 pop ss | |
08077A5A 52 push edx | |
08077A5B D9CF fxch st7 | |
08077A5D E2AD loop 0x8077a0c | |
08077A5F 0A13 or dl,[ebx] | |
08077A61 A1105DC7F2 mov eax,[0xf2c75d10] | |
08077A66 99 cdq | |
08077A67 4F dec edi | |
08077A68 E3AF jecxz 0x8077a19 | |
08077A6A 1D6CA43414 sbb eax,0x1434a46c | |
08077A6F 54 push esp | |
08077A70 D5D7 aad 0xd7 | |
08077A72 D3ABDDE8AC24 shr dword [ebx+0x24ace8dd],cl | |
08077A78 351752D9CF xor eax,0xcfd95217 | |
08077A7D E2B8 loop 0x8077a37 | |
08077A7F 0C65 or al,0x65 | |
08077A81 B605 mov dh,0x5 | |
08077A83 5B pop ebx | |
08077A84 B1E7 mov cl,0xe7 | |
08077A86 99 cdq | |
08077A87 4F dec edi | |
08077A88 E3BA jecxz 0x8077a44 | |
08077A8A 086CA434 or [esp+0x34],ch | |
08077A8E 6443 fs inc ebx | |
08077A90 D5D7 aad 0xd7 | |
08077A92 D3DB rcr ebx,cl | |
08077A94 CAE8AC retf 0xace8 | |
08077A97 2435 and al,0x35 | |
08077A99 17 pop ss | |
08077A9A 52 push edx | |
08077A9B D9CF fxch st7 | |
08077A9D E2B8 loop 0x8077a57 | |
08077A9F 1963C0 sbb [ebx-0x40],esp | |
08077AA2 07 pop es | |
08077AA3 5D pop ebp | |
08077AA4 D2E7 shl bh,cl | |
08077AA6 99 cdq | |
08077AA7 4F dec edi | |
08077AA8 E3BA jecxz 0x8077a64 | |
08077AAA 787B js 0x8077b27 | |
08077AAC A4 movsb | |
08077AAD 3414 xor al,0x14 | |
08077AAF 54 push esp | |
08077AB0 D5D7 aad 0xd7 | |
08077AB2 D3DB rcr ebx,cl | |
08077AB4 DFEE fucomip st6 | |
08077AB6 DA31 fidiv dword [ecx] | |
08077AB8 351752D9CF xor eax,0xcfd95217 | |
08077ABD E2B8 loop 0x8077a77 | |
08077ABF 0C15 or al,0x15 | |
08077AC1 A1105DC7F2 mov eax,[0xf2c75d10] | |
08077AC6 99 cdq | |
08077AC7 4F dec edi | |
08077AC8 E3BA jecxz 0x8077a84 | |
08077ACA 086CA434 or [esp+0x34],ch | |
08077ACE 1454 adc al,0x54 | |
08077AD0 D5C2 aad 0xc2 | |
08077AD2 D5AD aad 0xad | |
08077AD4 DDE8 fucomp st0 | |
08077AD6 B931351752 mov ecx,0x52173531 | |
08077ADB D9CF fxch st7 | |
08077ADD E2B8 loop 0x8077a97 | |
08077ADF 0C15 or al,0x15 | |
08077AE1 A1105DC7F2 mov eax,[0xf2c75d10] | |
08077AE6 99 cdq | |
08077AE7 4F dec edi | |
08077AE8 E3BA jecxz 0x8077aa4 | |
08077AEA 086CA434 or [esp+0x34],ch | |
08077AEE 1441 adc al,0x41 | |
08077AF0 D3A1C4DBCAE8 shl dword [ecx-0x1735243c],cl | |
08077AF6 AC lodsb | |
08077AF7 2435 and al,0x35 | |
08077AF9 17 pop ss | |
08077AFA 47 inc edi | |
08077AFB CC int3 | |
08077AFC CF iretd | |
08077AFD E2B8 loop 0x8077ab7 | |
08077AFF 0C65 or al,0x65 | |
08077B01 B610 mov dh,0x10 | |
08077B03 5D pop ebp | |
08077B04 B7E5 mov bh,0xe5 | |
08077B06 99 cdq | |
08077B07 4F dec edi | |
08077B08 E3BA jecxz 0x8077ac4 | |
08077B0A 086CA434 or [esp+0x34],ch | |
08077B0E 1454 adc al,0x54 | |
08077B10 D5D7 aad 0xd7 | |
08077B12 D3DB rcr ebx,cl | |
08077B14 DFEE fucomip st6 | |
08077B16 DA33 fidiv dword [ebx] | |
08077B18 351752D9CF xor eax,0xcfd95217 | |
08077B1D F7AD0C65B610 imul dword [ebp+0x10b6650c] | |
08077B23 2DD0F2994F sub eax,0x4f99f2d0 | |
08077B28 E3BA jecxz 0x8077ae4 | |
08077B2A 086CA421 or [esp+0x21],ch | |
08077B2E 1222 adc ah,[edx] | |
08077B30 C0D7D3 rcl bh,byte 0xd3 | |
08077B33 DBCA fcmovne st2 | |
08077B35 E8AC243567 call dword 0x6f3c9fe6 | |
08077B3A 45 inc ebp | |
08077B3B D9CF fxch st7 | |
08077B3D E2B8 loop 0x8077af7 | |
08077B3F 0C65 or al,0x65 | |
08077B41 B610 mov dh,0x10 | |
08077B43 5D pop ebp | |
08077B44 C7 db 0xc7 | |
08077B45 F299 repne cdq | |
08077B47 4F dec edi | |
08077B48 E3AF jecxz 0x8077af9 | |
08077B4A 0E push cs | |
08077B4B 1AB3341441C0 sbb dh,[ebx-0x3fbeebcc] | |
08077B51 D7 xlatb | |
08077B52 D3DB rcr ebx,cl | |
08077B54 CAE8AC retf 0xace8 | |
08077B57 2435 and al,0x35 | |
08077B59 6745 inc ebp | |
08077B5B D9CF fxch st7 | |
08077B5D E2B8 loop 0x8077b17 | |
08077B5F 0C65 or al,0x65 | |
08077B61 B610 mov dh,0x10 | |
08077B63 5D pop ebp | |
08077B64 C7 db 0xc7 | |
08077B65 F299 repne cdq | |
08077B67 4F dec edi | |
08077B68 F6BC7E7BA43414 idiv byte [esi+edi*2+0x1434a47b] | |
08077B6F 54 push esp | |
08077B70 D5D7 aad 0xd7 | |
08077B72 D3CE ror esi,cl | |
08077B74 DFE8 fucomip st0 | |
08077B76 AC lodsb | |
08077B77 2435 and al,0x35 | |
08077B79 17 pop ss | |
08077B7A 52 push edx | |
08077B7B D9CF fxch st7 | |
08077B7D 92 xchg eax,edx | |
08077B7E AF scasd | |
08077B7F 0C65 or al,0x65 | |
08077B81 B610 mov dh,0x10 | |
08077B83 5D pop ebp | |
08077B84 C7 db 0xc7 | |
08077B85 F299 repne cdq | |
08077B87 4F dec edi | |
08077B88 E3BA jecxz 0x8077b44 | |
08077B8A 086CB132 or [ecx+esi*4+0x32],ch | |
08077B8E 62 db 0x62 | |
08077B8F 43 inc ebx | |
08077B90 D5D7 aad 0xd7 | |
08077B92 D3DB rcr ebx,cl | |
08077B94 CAE8AC retf 0xace8 | |
08077B97 3120 xor [eax],esp | |
08077B99 17 pop ss | |
08077B9A 52 push edx | |
08077B9B D9CF fxch st7 | |
08077B9D E2B8 loop 0x8077b57 | |
08077B9F 0C65 or al,0x65 | |
08077BA1 C6075D mov byte [edi],0x5d | |
08077BA4 C7 db 0xc7 | |
08077BA5 F299 repne cdq | |
08077BA7 4F dec edi | |
08077BA8 E3BA jecxz 0x8077b64 | |
08077BAA 086CA434 or [esp+0x34],ch | |
08077BAE 1454 adc al,0x54 | |
08077BB0 D5C2 aad 0xc2 | |
08077BB2 D5AD aad 0xad | |
08077BB4 DDE8 fucomp st0 | |
08077BB6 AC lodsb | |
08077BB7 2435 and al,0x35 | |
08077BB9 0247D9 add al,[edi-0x27] | |
08077BBC CF iretd | |
08077BBD E2B8 loop 0x8077b77 | |
08077BBF 0C65 or al,0x65 | |
08077BC1 B610 mov dh,0x10 | |
08077BC3 2DD0F2994F sub eax,0x4f99f2d0 | |
08077BC8 E3BA jecxz 0x8077b84 | |
08077BCA 086CB132 or [ecx+esi*4+0x32],ch | |
08077BCE 62 db 0x62 | |
08077BCF 43 inc ebx | |
08077BD0 D5D7 aad 0xd7 | |
08077BD2 D3DB rcr ebx,cl | |
08077BD4 CAE8AC retf 0xace8 | |
08077BD7 3120 xor [eax],esp | |
08077BD9 17 pop ss | |
08077BDA 52 push edx | |
08077BDB D9CF fxch st7 | |
08077BDD 92 xchg eax,edx | |
08077BDE AF scasd | |
08077BDF 0C65 or al,0x65 | |
08077BE1 A3162BD0F2 mov [0xf2d02b16],eax | |
08077BE6 99 cdq | |
08077BE7 5A pop edx | |
08077BE8 F6BA081CB321 idiv byte [edx+0x21b31c08] | |
08077BEE 1222 adc ah,[edx] | |
08077BF0 C0D7D3 rcl bh,byte 0xd3 | |
08077BF3 DBCA fcmovne st2 | |
08077BF5 98 cwde | |
08077BF6 BB24350254 mov ebx,0x54023524 | |
08077BFB AF scasd | |
08077BFC D8E2 fsub st2 | |
08077BFE B81972A107 mov eax,0x7a17219 | |
08077C03 4A dec edx | |
08077C04 D0E5 shl ch,1 | |
08077C06 8E58F4 mov ds,[eax-0xc] | |
08077C09 AD lodsd | |
08077C0A 1F pop ds | |
08077C0B 7BB3 jpo 0x8077bc0 | |
08077C0D 2303 and eax,[ebx] | |
08077C0F 43 inc ebx | |
08077C10 C2C0C4 ret 0xc4c0 | |
08077C13 CC int3 | |
08077C14 DDED fucomp st5 | |
08077C16 B921201247 mov ecx,0x47122021 | |
08077C1B DC db 0xdc | |
08077C1C DA db 0xda | |
08077C1D E7AD out 0xad,eax | |
08077C1F 0970B3 or [eax-0x4d],esi | |
08077C22 0558D2F78C add eax,0x8cf7d258 | |
08077C27 4A dec edx | |
08077C28 F6BF1D69B131 idiv byte [edi+0x31b1691d] | |
08077C2E 0151C0 add [ecx-0x40],edx | |
08077C31 D2C6 rol dh,cl | |
08077C33 DE db 0xde | |
08077C34 DFED fucomip st5 | |
08077C36 B921201247 mov ecx,0x47122021 | |
08077C3B DC db 0xdc | |
08077C3C DA db 0xda | |
08077C3D E7AD out 0xad,eax | |
08077C3F E799 out 0x99,eax | |
08077C41 4F dec edi | |
08077C42 E3BA jecxz 0x8077bfe | |
08077C44 086CA434 or [esp+0x34],ch | |
08077C48 6443 fs inc ebx | |
08077C4A D5D7 aad 0xd7 | |
08077C4C D3DB rcr ebx,cl | |
08077C4E CAE8AC retf 0xace8 | |
08077C51 2435 and al,0x35 | |
08077C53 17 pop ss | |
08077C54 47 inc edi | |
08077C55 DFB9F5B80C65 fistp qword [ecx+0x650cb8f5] | |
08077C5B B605 mov dh,0x5 | |
08077C5D 48 dec eax | |
08077C5E C7 db 0xc7 | |
08077C5F F299 repne cdq | |
08077C61 4F dec edi | |
08077C62 E3BA jecxz 0x8077c1e | |
08077C64 086CD423 or [esp+edx*8+0x23],ch | |
08077C68 1454 adc al,0x54 | |
08077C6A D5D7 aad 0xd7 | |
08077C6C D3DB rcr ebx,cl | |
08077C6E CAE8AC retf 0xace8 | |
08077C71 2435 and al,0x35 | |
08077C73 17 pop ss | |
08077C74 52 push edx | |
08077C75 D9 db 0xd9 | |
08077C76 DA db 0xda | |
08077C77 E4CE in al,0xce | |
08077C79 1B65B6 sbb esp,[ebp-0x4a] | |
08077C7C 0548C7F299 add eax,0x99f2c748 | |
08077C81 4F dec edi | |
08077C82 E3BA jecxz 0x8077c3e | |
08077C84 086CD423 or [esp+edx*8+0x23],ch | |
08077C88 1454 adc al,0x54 | |
08077C8A D5D7 aad 0xd7 | |
08077C8C D3DB rcr ebx,cl | |
08077C8E CAE8AC retf 0xace8 | |
08077C91 2435 and al,0x35 | |
08077C93 17 pop ss | |
08077C94 52 push edx | |
08077C95 D9CF fxch st7 | |
08077C97 F7BE7A72B605 idiv dword [esi+0x5b6727a] | |
08077C9D 48 dec eax | |
08077C9E C7 db 0xc7 | |
08077C9F F299 repne cdq | |
08077CA1 4F dec edi | |
08077CA2 93 xchg eax,ebx | |
08077CA3 AD lodsd | |
08077CA4 086CA434 or [esp+0x34],ch | |
08077CA8 1454 adc al,0x54 | |
08077CAA D5D7 aad 0xd7 | |
08077CAC C6 db 0xc6 | |
08077CAD DDBCFDAC243517 fnstsw [ebp+edi*8+0x173524ac] | |
08077CB4 52 push edx | |
08077CB5 D9CF fxch st7 | |
08077CB7 E2C8 loop 0x8077c81 | |
08077CB9 1B65B6 sbb esp,[ebp-0x4a] | |
08077CBC 105DC7 adc [ebp-0x39],bl | |
08077CBF F299 repne cdq | |
08077CC1 4F dec edi | |
08077CC2 E3BA jecxz 0x8077c7e | |
08077CC4 086CB132 or [ecx+esi*4+0x32],ch | |
08077CC8 62 db 0x62 | |
08077CC9 43 inc ebx | |
08077CCA D5C2 aad 0xc2 | |
08077CCC C6 db 0xc6 | |
08077CCD DBCA fcmovne st2 | |
08077CCF E8AC243517 call dword 0x1f3ca180 | |
08077CD4 52 push edx | |
08077CD5 A9D8E2B80C test eax,0xcb8e2d8 | |
08077CDA 65B610 gs mov dh,0x10 | |
08077CDD 5D pop ebp | |
08077CDE C7 db 0xc7 | |
08077CDF F299 repne cdq | |
08077CE1 4F dec edi | |
08077CE2 E3AF jecxz 0x8077c93 | |
08077CE4 0E push cs | |
08077CE5 1AB3341454D5 sbb dh,[ebx-0x2aabebcc] | |
08077CEB D7 xlatb | |
08077CEC D3DB rcr ebx,cl | |
08077CEE DF db 0xdf | |
08077CEF FD std | |
08077CF0 AC lodsb | |
08077CF1 2435 and al,0x35 | |
08077CF3 17 pop ss | |
08077CF4 52 push edx | |
08077CF5 D9CF fxch st7 | |
08077CF7 E2C8 loop 0x8077cc1 | |
08077CF9 1B65B6 sbb esp,[ebp-0x4a] | |
08077CFC 105DC7 adc [ebp-0x39],bl | |
08077CFF F299 repne cdq | |
08077D01 4F dec edi | |
08077D02 E3BA jecxz 0x8077cbe | |
08077D04 086CB132 or [ecx+esi*4+0x32],ch | |
08077D08 62 db 0x62 | |
08077D09 43 inc ebx | |
08077D0A D5C2 aad 0xc2 | |
08077D0C C6 db 0xc6 | |
08077D0D DBCA fcmovne st2 | |
08077D0F E8AC243517 call dword 0x1f3ca1c0 | |
08077D14 52 push edx | |
08077D15 A9D8E2B80C test eax,0xcb8e2d8 | |
08077D1A 65B610 gs mov dh,0x10 | |
08077D1D 5D pop ebp | |
08077D1E C7 db 0xc7 | |
08077D1F F299 repne cdq | |
08077D21 4F dec edi | |
08077D22 E3BA jecxz 0x8077cde | |
08077D24 1D6AD22314 sbb eax,0x1423d26a | |
08077D29 41 inc ecx | |
08077D2A C0D7D3 rcl bh,byte 0xd3 | |
08077D2D DBCA fcmovne st2 | |
08077D2F E8AC243567 call dword 0x6f3ca1e0 | |
08077D34 45 inc ebp | |
08077D35 D9CF fxch st7 | |
08077D37 E2B8 loop 0x8077cf1 | |
08077D39 0C65 or al,0x65 | |
08077D3B B610 mov dh,0x10 | |
08077D3D 5D pop ebp | |
08077D3E C7 db 0xc7 | |
08077D3F F299 repne cdq | |
08077D41 4F dec edi | |
08077D42 F6BC7E7BA43414 idiv byte [esi+edi*2+0x1434a47b] | |
08077D49 54 push esp | |
08077D4A D5D7 aad 0xd7 | |
08077D4C C6 db 0xc6 | |
08077D4D CE into | |
08077D4E CAE8AC retf 0xace8 | |
08077D51 2445 and al,0x45 | |
08077D53 0052D9 add [edx-0x27],dl | |
08077D56 CF iretd | |
08077D57 E2B8 loop 0x8077d11 | |
08077D59 0C65 or al,0x65 | |
08077D5B B605 mov dh,0x5 | |
08077D5D 5B pop ebx | |
08077D5E B1E5 mov cl,0xe5 | |
08077D60 99 cdq | |
08077D61 5A pop edx | |
08077D62 F6BA086CA444 idiv byte [edx+0x44a46c08] | |
08077D68 0354D5D7 add edx,[ebp+edx*8-0x29] | |
08077D6C D3DB rcr ebx,cl | |
08077D6E CAE8AC retf 0xace8 | |
08077D71 3133 xor [ebx],esi | |
08077D73 61 popad | |
08077D74 47 inc edi | |
08077D75 D9CF fxch st7 | |
08077D77 E2B8 loop 0x8077d31 | |
08077D79 0C65 or al,0x65 | |
08077D7B B610 mov dh,0x10 | |
08077D7D 2DD0F2994F sub eax,0x4f99f2d0 | |
08077D82 E3BA jecxz 0x8077d3e | |
08077D84 086CA434 or [esp+0x34],ch | |
08077D88 1441 adc al,0x41 | |
08077D8A D3A1C4DBCAE8 shl dword [ecx-0x1735243c],cl | |
08077D90 B931351752 mov ecx,0x52173531 | |
08077D95 D9CF fxch st7 | |
08077D97 E2B8 loop 0x8077d51 | |
08077D99 0C15 or al,0x15 | |
08077D9B A1105DC7F2 mov eax,[0xf2c75d10] | |
08077DA0 99 cdq | |
08077DA1 4F dec edi | |
08077DA2 E3BA jecxz 0x8077d5e | |
08077DA4 086CA434 or [esp+0x34],ch | |
08077DA8 1454 adc al,0x54 | |
08077DAA C0D1A5 rcl cl,byte 0xa5 | |
08077DAD CC int3 | |
08077DAE CAE8AC retf 0xace8 | |
08077DB1 2435 and al,0x35 | |
08077DB3 0247D9 add al,[edi-0x27] | |
08077DB6 CF iretd | |
08077DB7 E2B8 loop 0x8077d71 | |
08077DB9 0C65 or al,0x65 | |
08077DBB B610 mov dh,0x10 | |
08077DBD 2DD0F2994F sub eax,0x4f99f2d0 | |
08077DC2 E3BA jecxz 0x8077d7e | |
08077DC4 086CA434 or [esp+0x34],ch | |
08077DC8 1454 adc al,0x54 | |
08077DCA D5D7 aad 0xd7 | |
08077DCC D3CE ror esi,cl | |
08077DCE CC int3 | |
08077DCF 9E sahf | |
08077DD0 B924351752 mov ecx,0x52173524 | |
08077DD5 D9CF fxch st7 | |
08077DD7 E2B8 loop 0x8077d91 | |
08077DD9 7C72 jl 0x8077e4d | |
08077DDB B610 mov dh,0x10 | |
08077DDD 5D pop ebp | |
08077DDE C7 db 0xc7 | |
08077DDF F299 repne cdq | |
08077DE1 4F dec edi | |
08077DE2 E3BA jecxz 0x8077d9e | |
08077DE4 086CA421 or [esp+0x21],ch | |
08077DE8 1222 adc ah,[edx] | |
08077DEA C2D7D3 ret 0xd3d7 | |
08077DED DBCA fcmovne st2 | |
08077DEF E8B9313517 call dword 0x1f3cafad | |
08077DF4 52 push edx | |
08077DF5 D9CF fxch st7 | |
08077DF7 E2B8 loop 0x8077db1 | |
08077DF9 0C15 or al,0x15 | |
08077DFB A1105DC7F2 mov eax,[0xf2c75d10] | |
08077E00 99 cdq | |
08077E01 4F dec edi | |
08077E02 E3BA jecxz 0x8077dbe | |
08077E04 086CA434 or [esp+0x34],ch | |
08077E08 1454 adc al,0x54 | |
08077E0A C0D1A5 rcl cl,byte 0xa5 | |
08077E0D CC int3 | |
08077E0E CAE8B9 retf 0xb9e8 | |
08077E11 31351752D9CF xor [dword 0xcfd95217],esi | |
08077E17 E2B8 loop 0x8077dd1 | |
08077E19 0C15 or al,0x15 | |
08077E1B A1105DC7F2 mov eax,[0xf2c75d10] | |
08077E20 99 cdq | |
08077E21 4F dec edi | |
08077E22 E3BA jecxz 0x8077dde | |
08077E24 086CA434 or [esp+0x34],ch | |
08077E28 1441 adc al,0x41 | |
08077E2A D3A1C4DBCAE8 shl dword [ecx-0x1735243c],cl | |
08077E30 AC lodsb | |
08077E31 2420 and al,0x20 | |
08077E33 0252D9 add dl,[edx-0x27] | |
08077E36 CF iretd | |
08077E37 E2B8 loop 0x8077df1 | |
08077E39 0C65 or al,0x65 | |
08077E3B B660 mov dh,0x60 | |
08077E3D 4A dec edx | |
08077E3E C7 db 0xc7 | |
08077E3F F299 repne cdq | |
08077E41 4F dec edi | |
08077E42 E3BA jecxz 0x8077dfe | |
08077E44 086CA434 or [esp+0x34],ch | |
08077E48 1454 adc al,0x54 | |
08077E4A C0D1A5 rcl cl,byte 0xa5 | |
08077E4D CC int3 | |
08077E4E CAFDB9 retf 0xb9fd | |
08077E51 2435 and al,0x35 | |
08077E53 17 pop ss | |
08077E54 52 push edx | |
08077E55 D9CF fxch st7 | |
08077E57 E2B8 loop 0x8077e11 | |
08077E59 7C72 jl 0x8077ecd | |
08077E5B B610 mov dh,0x10 | |
08077E5D 5D pop ebp | |
08077E5E C7 db 0xc7 | |
08077E5F F299 repne cdq | |
08077E61 4F dec edi | |
08077E62 E3BA jecxz 0x8077e1e | |
08077E64 086CA434 or [esp+0x34],ch | |
08077E68 0152A3 add [edx-0x5d],edx | |
08077E6B C0D3DB rcl bl,byte 0xdb | |
08077E6E CAE8AC retf 0xace8 | |
08077E71 2420 and al,0x20 | |
08077E73 0252D9 add dl,[edx-0x27] | |
08077E76 CF iretd | |
08077E77 E2C8 loop 0x8077e41 | |
08077E79 1B65B6 sbb esp,[ebp-0x4a] | |
08077E7C 105DC7 adc [ebp-0x39],bl | |
08077E7F F299 repne cdq | |
08077E81 4F dec edi | |
08077E82 F6BC7E79A43414 idiv byte [esi+edi*2+0x1434a479] | |
08077E89 54 push esp | |
08077E8A D5D7 aad 0xd7 | |
08077E8C D3DB rcr ebx,cl | |
08077E8E BAFFAC2435 mov edx,0x3524acff | |
08077E93 17 pop ss | |
08077E94 52 push edx | |
08077E95 D9CF fxch st7 | |
08077E97 E2B8 loop 0x8077e51 | |
08077E99 0C65 or al,0x65 | |
08077E9B B610 mov dh,0x10 | |
08077E9D 5D pop ebp | |
08077E9E D2 db 0xd2 | |
08077E9F F4 hlt | |
08077EA0 EF out dx,eax | |
08077EA1 5A pop edx | |
08077EA2 E3BA jecxz 0x8077e5e | |
08077EA4 086CA434 or [esp+0x34],ch | |
08077EA8 1454 adc al,0x54 | |
08077EAA A5 movsd | |
08077EAB C0D3DB rcl bl,byte 0xdb | |
08077EAE CAE8AC retf 0xace8 | |
08077EB1 2435 and al,0x35 | |
08077EB3 17 pop ss | |
08077EB4 52 push edx | |
08077EB5 D9CF fxch st7 | |
08077EB7 E2B8 loop 0x8077e71 | |
08077EB9 1963C0 sbb [ebx-0x40],esp | |
08077EBC 07 pop es | |
08077EBD 5D pop ebp | |
08077EBE C7 db 0xc7 | |
08077EBF F299 repne cdq | |
08077EC1 4F dec edi | |
08077EC2 E3BA jecxz 0x8077e7e | |
08077EC4 1D79A43414 sbb eax,0x1434a479 | |
08077EC9 54 push esp | |
08077ECA D5D7 aad 0xd7 | |
08077ECC D3DB rcr ebx,cl | |
08077ECE BAFFAC2435 mov edx,0x3524acff | |
08077ED3 17 pop ss | |
08077ED4 52 push edx | |
08077ED5 D9CF fxch st7 | |
08077ED7 E2B8 loop 0x8077e91 | |
08077ED9 0C65 or al,0x65 | |
08077EDB B610 mov dh,0x10 | |
08077EDD 5D pop ebp | |
08077EDE D2 db 0xd2 | |
08077EDF F4 hlt | |
08077EE0 EF out dx,eax | |
08077EE1 58 pop eax | |
08077EE2 E3BA jecxz 0x8077e9e | |
08077EE4 086CA434 or [esp+0x34],ch | |
08077EE8 1441 adc al,0x41 | |
08077EEA C0D7D3 rcl bh,byte 0xd3 | |
08077EED DBCA fcmovne st2 | |
08077EEF E8AC243567 call dword 0x6f3ca3a0 | |
08077EF4 45 inc ebp | |
08077EF5 D9CF fxch st7 | |
08077EF7 E2B8 loop 0x8077eb1 | |
08077EF9 0C65 or al,0x65 | |
08077EFB B610 mov dh,0x10 | |
08077EFD 5D pop ebp | |
08077EFE C7 db 0xc7 | |
08077EFF F299 repne cdq | |
08077F01 5A pop edx | |
08077F02 E5CC in eax,0xcc | |
08077F04 1F pop ds | |
08077F05 6C insb | |
08077F06 A4 movsb | |
08077F07 3414 xor al,0x14 | |
08077F09 54 push esp | |
08077F0A C0C2D3 rol dl,byte 0xd3 | |
08077F0D DBCA fcmovne st2 | |
08077F0F E8AC243517 call dword 0x1f3ca3c0 | |
08077F14 22CE and cl,dh | |
08077F16 CF iretd | |
08077F17 E2B8 loop 0x8077ed1 | |
08077F19 0C65 or al,0x65 | |
08077F1B B610 mov dh,0x10 | |
08077F1D 5D pop ebp | |
08077F1E C7 db 0xc7 | |
08077F1F F299 repne cdq | |
08077F21 4F dec edi | |
08077F22 E3BA jecxz 0x8077ede | |
08077F24 1D6AD22314 sbb eax,0x1423d26a | |
08077F29 54 push esp | |
08077F2A C0C2D3 rol dl,byte 0xd3 | |
08077F2D DBCA fcmovne st2 | |
08077F2F E8AC243517 call dword 0x1f3ca3e0 | |
08077F34 22CE and cl,dh | |
08077F36 CF iretd | |
08077F37 E2B8 loop 0x8077ef1 | |
08077F39 0C65 or al,0x65 | |
08077F3B B610 mov dh,0x10 | |
08077F3D 5D pop ebp | |
08077F3E C7 db 0xc7 | |
08077F3F F299 repne cdq | |
08077F41 4F dec edi | |
08077F42 E3BA jecxz 0x8077efe | |
08077F44 1D6AD22314 sbb eax,0x1423d26a | |
08077F49 54 push esp | |
08077F4A D5C2 aad 0xc2 | |
08077F4C C6 db 0xc6 | |
08077F4D DBCA fcmovne st2 | |
08077F4F E8AC542217 call dword 0x1f29d400 | |
08077F54 52 push edx | |
08077F55 D9CF fxch st7 | |
08077F57 E2B8 loop 0x8077f11 | |
08077F59 0C65 or al,0x65 | |
08077F5B A3162BD2F2 mov [0xf2d22b16],eax | |
08077F60 99 cdq | |
08077F61 4F dec edi | |
08077F62 E3BA jecxz 0x8077f1e | |
08077F64 086CA444 or [esp+0x44],ch | |
08077F68 0354D5D7 add edx,[ebp+edx*8-0x29] | |
08077F6C D3DB rcr ebx,cl | |
08077F6E CAE8AC retf 0xace8 | |
08077F71 2435 and al,0x35 | |
08077F73 17 pop ss | |
08077F74 52 push edx | |
08077F75 CC int3 | |
08077F76 C9 leave | |
08077F77 94 xchg eax,esp | |
08077F78 AF scasd | |
08077F79 0C70 or al,0x70 | |
08077F7B A3105DC7F2 mov [0xf2c75d10],eax | |
08077F80 99 cdq | |
08077F81 4F dec edi | |
08077F82 E3BA jecxz 0x8077f3e | |
08077F84 787B js 0x8078001 | |
08077F86 A4 movsb | |
08077F87 3414 xor al,0x14 | |
08077F89 54 push esp | |
08077F8A D5D7 aad 0xd7 | |
08077F8C D3DB rcr ebx,cl | |
08077F8E CAE8AC retf 0xace8 | |
08077F91 2435 and al,0x35 | |
08077F93 17 pop ss | |
08077F94 47 inc edi | |
08077F95 DFB9F5B80C70 fistp qword [ecx+0x700cb8f5] | |
08077F9B A3105DC7F2 mov [0xf2c75d10],eax | |
08077FA0 99 cdq | |
08077FA1 4F dec edi | |
08077FA2 E3BA jecxz 0x8077f5e | |
08077FA4 787B js 0x8078021 | |
08077FA6 A4 movsb | |
08077FA7 3414 xor al,0x14 | |
08077FA9 54 push esp | |
08077FAA D5D7 aad 0xd7 | |
08077FAC D3DB rcr ebx,cl | |
08077FAE CAE8AC retf 0xace8 | |
08077FB1 2420 and al,0x20 | |
08077FB3 1124CE adc [esi+ecx*8],esp | |
08077FB6 CF iretd | |
08077FB7 E2B8 loop 0x8077f71 | |
08077FB9 0C65 or al,0x65 | |
08077FBB A3055DC7F2 mov [0xf2c75d05],eax | |
08077FC0 99 cdq | |
08077FC1 3F aas | |
08077FC2 F4 hlt | |
08077FC3 BA086CA434 mov edx,0x34a46c08 | |
08077FC8 1454 adc al,0x54 | |
08077FCA D5C2 aad 0xc2 | |
08077FCC D5AD aad 0xad | |
08077FCE DFE8 fucomip st0 | |
08077FD0 AC lodsb | |
08077FD1 2435 and al,0x35 | |
08077FD3 17 pop ss | |
08077FD4 52 push edx | |
08077FD5 D9CF fxch st7 | |
08077FD7 92 xchg eax,edx | |
08077FD8 AF scasd | |
08077FD9 0C65 or al,0x65 | |
08077FDB B610 mov dh,0x10 | |
08077FDD 5D pop ebp | |
08077FDE C7 db 0xc7 | |
08077FDF F299 repne cdq | |
08077FE1 4F dec edi | |
08077FE2 E3BA jecxz 0x8077f9e | |
08077FE4 086CB132 or [ecx+esi*4+0x32],ch | |
08077FE8 62 db 0x62 | |
08077FE9 43 inc ebx | |
08077FEA D5D7 aad 0xd7 | |
08077FEC D3DB rcr ebx,cl | |
08077FEE CAE8B9 retf 0xb9e8 | |
08077FF1 31351752D9CF xor [dword 0xcfd95217],esi | |
08077FF7 E2B8 loop 0x8077fb1 | |
08077FF9 0C15 or al,0x15 | |
08077FFB A1105DC7F2 mov eax,[0xf2c75d10] | |
08078000 99 cdq | |
08078001 4F dec edi | |
08078002 E3BA jecxz 0x8077fbe | |
08078004 086CA434 or [esp+0x34],ch | |
08078008 1441 adc al,0x41 | |
0807800A D3A1C4DBCAE8 shl dword [ecx-0x1735243c],cl | |
08078010 AC lodsb | |
08078011 2435 and al,0x35 | |
08078013 17 pop ss | |
08078014 47 inc edi | |
08078015 CC int3 | |
08078016 CF iretd | |
08078017 E2B8 loop 0x8077fd1 | |
08078019 0C65 or al,0x65 | |
0807801B B610 mov dh,0x10 | |
0807801D 5D pop ebp | |
0807801E B7E5 mov bh,0xe5 | |
08078020 99 cdq | |
08078021 4F dec edi | |
08078022 E3BA jecxz 0x8077fde | |
08078024 086CA434 or [esp+0x34],ch | |
08078028 1454 adc al,0x54 | |
0807802A D5D7 aad 0xd7 | |
0807802C D3DB rcr ebx,cl | |
0807802E DFEE fucomip st6 | |
08078030 DA33 fidiv dword [ebx] | |
08078032 351752D9DA xor eax,0xdad95217 | |
08078037 F7B80C65B660 idiv dword [eax+0x60b6650c] | |
0807803D 4A dec edx | |
0807803E C7 db 0xc7 | |
0807803F F299 repne cdq | |
08078041 4F dec edi | |
08078042 E3BA jecxz 0x8077ffe | |
08078044 086CB132 or [ecx+esi*4+0x32],ch | |
08078048 6241D5D7D3DB vpsrlq xmm11{k7}{z},xmm21,xmm11 | |
0807804E CAE8AC retf 0xace8 | |
08078051 2445 and al,0x45 | |
08078053 0052D9 add [edx-0x27],dl | |
08078056 CF iretd | |
08078057 E2B8 loop 0x8078011 | |
08078059 0C65 or al,0x65 | |
0807805B B610 mov dh,0x10 | |
0807805D 5D pop ebp | |
0807805E C7 db 0xc7 | |
0807805F F28C4995 repne mov [ecx-0x6b],cs | |
08078063 AD lodsd | |
08078064 086CA434 or [esp+0x34],ch | |
08078068 1454 adc al,0x54 | |
0807806A C0C2D3 rol dl,byte 0xd3 | |
0807806D DBCA fcmovne st2 | |
0807806F E8AC243517 call dword 0x1f3ca520 | |
08078074 22CE and cl,dh | |
08078076 CF iretd | |
08078077 E2B8 loop 0x8078031 | |
08078079 0C65 or al,0x65 | |
0807807B B610 mov dh,0x10 | |
0807807D 5D pop ebp | |
0807807E C7 db 0xc7 | |
0807807F F299 repne cdq | |
08078081 4F dec edi | |
08078082 E3BA jecxz 0x807803e | |
08078084 1D6AD22314 sbb eax,0x1423d26a | |
08078089 54 push esp | |
0807808A C0C2D3 rol dl,byte 0xd3 | |
0807808D DBCA fcmovne st2 | |
0807808F E8AC243517 call dword 0x1f3ca540 | |
08078094 22CE and cl,dh | |
08078096 CF iretd | |
08078097 E2B8 loop 0x8078051 | |
08078099 0C65 or al,0x65 | |
0807809B B610 mov dh,0x10 | |
0807809D 5D pop ebp | |
0807809E C7 db 0xc7 | |
0807809F F299 repne cdq | |
080780A1 4F dec edi | |
080780A2 F6BC7E7BA43414 idiv byte [esi+edi*2+0x1434a47b] | |
080780A9 54 push esp | |
080780AA D5C2 aad 0xc2 | |
080780AC C6 db 0xc6 | |
080780AD DBCA fcmovne st2 | |
080780AF E8AC243517 call dword 0x1f3ca560 | |
080780B4 52 push edx | |
080780B5 A9D8E2B80C test eax,0xcb8e2d8 | |
080780BA 65B610 gs mov dh,0x10 | |
080780BD 5D pop ebp | |
080780BE C7 db 0xc7 | |
080780BF F299 repne cdq | |
080780C1 4F dec edi | |
080780C2 E3AF jecxz 0x8078073 | |
080780C4 0E push cs | |
080780C5 1AB3341454D5 sbb dh,[ebx-0x2aabebcc] | |
080780CB D7 xlatb | |
080780CC C6 db 0xc6 | |
080780CD CE into | |
080780CE CAE8AC retf 0xace8 | |
080780D1 2435 and al,0x35 | |
080780D3 17 pop ss | |
080780D4 52 push edx | |
080780D5 D9BFF5B80C65 fnstcw [edi+0x650cb8f5] | |
080780DB B610 mov dh,0x10 | |
080780DD 48 dec eax | |
080780DE C1848E4FE3BA086C rol dword [esi+ecx*4+0x8bae34f],byte 0x6c | |
080780E6 A4 movsb | |
080780E7 2101 and [ecx],eax | |
080780E9 54 push esp | |
080780EA D5D7 aad 0xd7 | |
080780EC D3ABDDE8AC31 shr dword [ebx+0x31ace8dd],cl | |
080780F2 336145 xor esp,[ecx+0x45] | |
080780F5 D9CF fxch st7 | |
080780F7 F7AD0C65C607 imul dword [ebp+0x7c6650c] | |
080780FD 48 dec eax | |
080780FE C1848C4FE3BA081C rol dword [esp+ecx*4+0x8bae34f],byte 0x1c | |
08078106 B334 mov bl,0x34 | |
08078108 1441 adc al,0x41 | |
0807810A D3A1C4DBCAFD shl dword [ecx-0x235243c],cl | |
08078110 BB33220045 mov ebx,0x45002233 | |
08078115 CE into | |
08078116 D8F5 fdiv st5 | |
08078118 AF scasd | |
08078119 1B72A1 sbb esi,[edx-0x5f] | |
0807811C 07 pop es | |
0807811D 4A dec edx | |
0807811E D0E5 shl ch,1 | |
08078120 8E58F4 mov ds,[eax-0xc] | |
08078123 AD lodsd | |
08078124 1F pop ds | |
08078125 7BB3 jpo 0x80780da | |
08078127 2303 and eax,[ebx] | |
08078129 43 inc ebx | |
0807812A C2C0C4 ret 0xc4c0 | |
0807812D CC int3 | |
0807812E DD db 0xdd | |
0807812F FF db 0xff | |
08078130 BB33220045 mov ebx,0x45002233 | |
08078135 CE into | |
08078136 D8F5 fdiv st5 | |
08078138 AF scasd | |
08078139 1B72B3 sbb esi,[edx-0x4d] | |
0807813C 0558D2F78C add eax,0x8cf7d258 | |
08078141 4A dec edx | |
08078142 F6BF1D69B131 idiv byte [edi+0x31b1691d] | |
08078148 0151C0 add [ecx-0x40],edx | |
0807814B D2C6 rol dh,cl | |
0807814D DE db 0xde | |
0807814E DFED fucomip st5 | |
08078150 B921201247 mov ecx,0x47122021 | |
08078155 DC db 0xdc | |
08078156 DA db 0xda | |
08078157 E7AD out 0xad,eax | |
08078159 0970B3 or [eax-0x4d],esi | |
0807815C 0558D2F78C add eax,0x8cf7d258 | |
08078161 4A dec edx | |
08078162 F6BF1D69B131 idiv byte [edi+0x31b1691d] | |
08078168 0151C0 add [ecx-0x40],edx | |
0807816B D2C6 rol dh,cl | |
0807816D DE db 0xde | |
0807816E DFED fucomip st5 | |
08078170 B921201247 mov ecx,0x47122021 | |
08078175 DC db 0xdc | |
08078176 DA db 0xda | |
08078177 E7AD out 0xad,eax | |
08078179 0970B3 or [eax-0x4d],esi | |
0807817C 0558D2F78C add eax,0x8cf7d258 | |
08078181 4A dec edx | |
08078182 F6BF1D69B131 idiv byte [edi+0x31b1691d] | |
08078188 0151C0 add [ecx-0x40],edx | |
0807818B D2C6 rol dh,cl | |
0807818D DE db 0xde | |
0807818E DFED fucomip st5 | |
08078190 B9E7994FE3 mov ecx,0xe34f99e7 | |
08078195 BA086CA434 mov edx,0x34a46c08 | |
0807819A 6443 fs inc ebx | |
0807819C D5D7 aad 0xd7 | |
0807819E D3DB rcr ebx,cl | |
080781A0 CAE8AC retf 0xace8 | |
080781A3 2420 and al,0x20 | |
080781A5 1124CE adc [esi+ecx*8],esp | |
080781A8 CF iretd | |
080781A9 E2B8 loop 0x8078163 | |
080781AB 1970B6 sbb [eax-0x4a],esi | |
080781AE 105DC7 adc [ebp-0x39],bl | |
080781B1 F299 repne cdq | |
080781B3 4F dec edi | |
080781B4 E3CA jecxz 0x8078180 | |
080781B6 1F pop ds | |
080781B7 6C insb | |
080781B8 A4 movsb | |
080781B9 3414 xor al,0x14 | |
080781BB 54 push esp | |
080781BC D5D7 aad 0xd7 | |
080781BE D3DB rcr ebx,cl | |
080781C0 CAE8AC retf 0xace8 | |
080781C3 2420 and al,0x20 | |
080781C5 1124CE adc [esi+ecx*8],esp | |
080781C8 CF iretd | |
080781C9 E2B8 loop 0x8078183 | |
080781CB 0C65 or al,0x65 | |
080781CD B610 mov dh,0x10 | |
080781CF 48 dec eax | |
080781D0 D2 db 0xd2 | |
080781D1 F299 repne cdq | |
080781D3 4F dec edi | |
080781D4 E3BA jecxz 0x8078190 | |
080781D6 086CA444 or [esp+0x44],ch | |
080781DA 0354D5D7 add edx,[ebp+edx*8-0x29] | |
080781DE D3DB rcr ebx,cl | |
080781E0 CAE8AC retf 0xace8 | |
080781E3 2435 and al,0x35 | |
080781E5 17 pop ss | |
080781E6 52 push edx | |
080781E7 D9 db 0xd9 | |
080781E8 DA db 0xda | |
080781E9 E4CE in al,0xce | |
080781EB 1B65B6 sbb esp,[ebp-0x4a] | |
080781EE 105DC7 adc [ebp-0x39],bl | |
080781F1 F28C5AE3 repne mov [edx-0x1d],ds | |
080781F5 BA086CA434 mov edx,0x34a46c08 | |
080781FA 1454 adc al,0x54 | |
080781FC A5 movsd | |
080781FD C0D3DB rcl bl,byte 0xdb | |
08078200 CAE8AC retf 0xace8 | |
08078203 2435 and al,0x35 | |
08078205 17 pop ss | |
08078206 52 push edx | |
08078207 D9CF fxch st7 | |
08078209 E2AD loop 0x80781b8 | |
0807820B 0A13 or dl,[ebx] | |
0807820D A1105DC7F2 mov eax,[0xf2c75d10] | |
08078212 99 cdq | |
08078213 4F dec edi | |
08078214 E3AF jecxz 0x80781c5 | |
08078216 1D6CA43414 sbb eax,0x1434a46c | |
0807821B 54 push esp | |
0807821C D5D7 aad 0xd7 | |
0807821E D3ABDDE8AC24 shr dword [ebx+0x24ace8dd],cl | |
08078224 351752D9CF xor eax,0xcfd95217 | |
08078229 E2B8 loop 0x80781e3 | |
0807822B 0C65 or al,0x65 | |
0807822D B610 mov dh,0x10 | |
0807822F 48 dec eax | |
08078230 C1848E4FE3AF1D6C rol dword [esi+ecx*4+0x1dafe34f],byte 0x6c | |
08078238 A4 movsb | |
08078239 3414 xor al,0x14 | |
0807823B 54 push esp | |
0807823C D5D7 aad 0xd7 | |
0807823E D3ABDDE8AC24 shr dword [ebx+0x24ace8dd],cl | |
08078244 351752D9CF xor eax,0xcfd95217 | |
08078249 E2B8 loop 0x8078203 | |
0807824B 0C65 or al,0x65 | |
0807824D A3162BD0F2 mov [0xf2d02b16],eax | |
08078252 8C5AE3 mov [edx-0x1d],ds | |
08078255 BA086CA434 mov edx,0x34a46c08 | |
0807825A 1454 adc al,0x54 | |
0807825C A5 movsd | |
0807825D C0D3DB rcl bl,byte 0xdb | |
08078260 CAE8AC retf 0xace8 | |
08078263 2435 and al,0x35 | |
08078265 17 pop ss | |
08078266 52 push edx | |
08078267 D9CF fxch st7 | |
08078269 E2B8 loop 0x8078223 | |
0807826B 0C70 or al,0x70 | |
0807826D B066 mov al,0x66 | |
0807826F 4A dec edx | |
08078270 C7 db 0xc7 | |
08078271 F299 repne cdq | |
08078273 4F dec edi | |
08078274 F6AF086CA434 imul byte [edi+0x34a46c08] | |
0807827A 1454 adc al,0x54 | |
0807827C D5D7 aad 0xd7 | |
0807827E A3CCCAE8AC mov [0xace8cacc],eax | |
08078283 2435 and al,0x35 | |
08078285 17 pop ss | |
08078286 52 push edx | |
08078287 D9CF fxch st7 | |
08078289 E2B8 loop 0x8078243 | |
0807828B 0C65 or al,0x65 | |
0807828D B610 mov dh,0x10 | |
0807828F 48 dec eax | |
08078290 C1848E4FE3AF1D6C rol dword [esi+ecx*4+0x1dafe34f],byte 0x6c | |
08078298 A4 movsb | |
08078299 3414 xor al,0x14 | |
0807829B 24C2 and al,0xc2 | |
0807829D D7 xlatb | |
0807829E D3DB rcr ebx,cl | |
080782A0 CAE8AC retf 0xace8 | |
080782A3 2435 and al,0x35 | |
080782A5 0254AFD8 add dl,[edi+ebp*4-0x28] | |
080782A9 E2AD loop 0x8078258 | |
080782AB 1965B6 sbb [ebp-0x4a],esp | |
080782AE 105DB7 adc [ebp-0x49],bl | |
080782B1 E599 in eax,0x99 | |
080782B3 4F dec edi | |
080782B4 E3BA jecxz 0x8078270 | |
080782B6 086CA434 or [esp+0x34],ch | |
080782BA 0152A3 add [edx-0x5d],edx | |
080782BD C2D3DB ret 0xdbd3 | |
080782C0 CAE8AC retf 0xace8 | |
080782C3 2435 and al,0x35 | |
080782C5 17 pop ss | |
080782C6 22CE and cl,dh | |
080782C8 CF iretd | |
080782C9 E2B8 loop 0x8078283 | |
080782CB 0C65 or al,0x65 | |
080782CD B610 mov dh,0x10 | |
080782CF 5D pop ebp | |
080782D0 C7 db 0xc7 | |
080782D1 F299 repne cdq | |
080782D3 5A pop edx | |
080782D4 E5CC in eax,0xcc | |
080782D6 1F pop ds | |
080782D7 6C insb | |
080782D8 B121 mov cl,0x21 | |
080782DA 1454 adc al,0x54 | |
080782DC D5D7 aad 0xd7 | |
080782DE D3DB rcr ebx,cl | |
080782E0 CAE8DC retf 0xdce8 | |
080782E3 33351752D9CF xor esi,[dword 0xcfd95217] | |
080782E9 E2B8 loop 0x80782a3 | |
080782EB 0C65 or al,0x65 | |
080782ED B610 mov dh,0x10 | |
080782EF 5D pop ebp | |
080782F0 C7 db 0xc7 | |
080782F1 E79F out 0x9f,eax | |
080782F3 39F4 cmp esp,esi | |
080782F5 BA086CA434 mov edx,0x34a46c08 | |
080782FA 1454 adc al,0x54 | |
080782FC C0C2D3 rol dl,byte 0xd3 | |
080782FF DBCA fcmovne st2 | |
08078301 E8AC243517 call dword 0x1f3ca7b2 | |
08078306 22CE and cl,dh | |
08078308 CF iretd | |
08078309 E2B8 loop 0x80782c3 | |
0807830B 0C65 or al,0x65 | |
0807830D B610 mov dh,0x10 | |
0807830F 5D pop ebp | |
08078310 C7 db 0xc7 | |
08078311 F299 repne cdq | |
08078313 4F dec edi | |
08078314 E3BA jecxz 0x80782d0 | |
08078316 1D6AD22314 sbb eax,0x1423d26a | |
0807831B 54 push esp | |
0807831C D5D7 aad 0xd7 | |
0807831E D3CE ror esi,cl | |
08078320 DFE8 fucomip st0 | |
08078322 AC lodsb | |
08078323 2435 and al,0x35 | |
08078325 6745 inc ebp | |
08078327 D9CF fxch st7 | |
08078329 E2B8 loop 0x80782e3 | |
0807832B 0C65 or al,0x65 | |
0807832D B610 mov dh,0x10 | |
0807832F 48 dec eax | |
08078330 C1848C4FE3BA086C rol dword [esp+ecx*4+0x8bae34f],byte 0x6c | |
08078338 A4 movsb | |
08078339 3414 xor al,0x14 | |
0807833B 24C2 and al,0xc2 | |
0807833D D7 xlatb | |
0807833E D3DB rcr ebx,cl | |
08078340 CAE8AC retf 0xace8 | |
08078343 2435 and al,0x35 | |
08078345 17 pop ss | |
08078346 52 push edx | |
08078347 D9CF fxch st7 | |
08078349 E2B8 loop 0x8078303 | |
0807834B 1963C0 sbb [ebx-0x40],esp | |
0807834E 07 pop es | |
0807834F 5D pop ebp | |
08078350 C7 db 0xc7 | |
08078351 F299 repne cdq | |
08078353 5A pop edx | |
08078354 F6BA086CA434 idiv byte [edx+0x34a46c08] | |
0807835A 1454 adc al,0x54 | |
0807835C D5A7 aad 0xa7 | |
0807835E C4 db 0xc4 | |
0807835F DBCA fcmovne st2 | |
08078361 E8AC243517 call dword 0x1f3ca812 | |
08078366 52 push edx | |
08078367 D9CF fxch st7 | |
08078369 E2B8 loop 0x8078323 | |
0807836B 0C65 or al,0x65 | |
0807836D A3162BD0F2 mov [0xf2d02b16],eax | |
08078372 99 cdq | |
08078373 5A pop edx | |
08078374 F6BA086CA434 idiv byte [edx+0x34a46c08] | |
0807837A 1454 adc al,0x54 | |
0807837C D5A7 aad 0xa7 | |
0807837E C4 db 0xc4 | |
0807837F DBCA fcmovne st2 | |
08078381 E8AC243517 call dword 0x1f3ca832 | |
08078386 52 push edx | |
08078387 D9CF fxch st7 | |
08078389 E2B8 loop 0x8078343 | |
0807838B 0C65 or al,0x65 | |
0807838D A3162BD0F2 mov [0xf2d02b16],eax | |
08078392 99 cdq | |
08078393 4F dec edi | |
08078394 E3BA jecxz 0x8078350 | |
08078396 1D79A43414 sbb eax,0x1434a479 | |
0807839B 54 push esp | |
0807839C D5D7 aad 0xd7 | |
0807839E D3DB rcr ebx,cl | |
080783A0 BAFFAC2435 mov edx,0x3524acff | |
080783A5 17 pop ss | |
080783A6 52 push edx | |
080783A7 D9CF fxch st7 | |
080783A9 E2B8 loop 0x8078363 | |
080783AB 0C65 or al,0x65 | |
080783AD B610 mov dh,0x10 | |
080783AF 48 dec eax | |
080783B0 C1848E4FE3BA0879 rol dword [esi+ecx*4+0x8bae34f],byte 0x79 | |
080783B8 B134 mov cl,0x34 | |
080783BA 1454 adc al,0x54 | |
080783BC D5D7 aad 0xd7 | |
080783BE D3DB rcr ebx,cl | |
080783C0 CA98BB retf 0xbb98 | |
080783C3 2435 and al,0x35 | |
080783C5 17 pop ss | |
080783C6 52 push edx | |
080783C7 D9CF fxch st7 | |
080783C9 E2B8 loop 0x8078383 | |
080783CB 0C65 or al,0x65 | |
080783CD B610 mov dh,0x10 | |
080783CF 5D pop ebp | |
080783D0 C7 db 0xc7 | |
080783D1 F28C4995 repne mov [ecx-0x6b],cs | |
080783D5 AD lodsd | |
080783D6 0879B1 or [ecx-0x4f],bh | |
080783D9 3414 xor al,0x14 | |
080783DB 54 push esp | |
080783DC D5A7 aad 0xa7 | |
080783DE C4 db 0xc4 | |
080783DF DBCA fcmovne st2 | |
080783E1 E8AC243517 call dword 0x1f3ca892 | |
080783E6 52 push edx | |
080783E7 CC int3 | |
080783E8 C9 leave | |
080783E9 94 xchg eax,esp | |
080783EA AD lodsd | |
080783EB 0C65 or al,0x65 | |
080783ED B610 mov dh,0x10 | |
080783EF 5D pop ebp | |
080783F0 C7 db 0xc7 | |
080783F1 F299 repne cdq | |
080783F3 3F aas | |
080783F4 F4 hlt | |
080783F5 BA086CA434 mov edx,0x34a46c08 | |
080783FA 1454 adc al,0x54 | |
080783FC D5D7 aad 0xd7 | |
080783FE D3DB rcr ebx,cl | |
08078400 CAFDAA retf 0xaafd | |
08078403 52 push edx | |
08078404 2217 and dl,[edi] | |
08078406 47 inc edi | |
08078407 CC int3 | |
08078408 CF iretd | |
08078409 E2B8 loop 0x80783c3 | |
0807840B 0C65 or al,0x65 | |
0807840D B610 mov dh,0x10 | |
0807840F 5D pop ebp | |
08078410 B7E5 mov bh,0xe5 | |
08078412 99 cdq | |
08078413 4F dec edi | |
08078414 E3BA jecxz 0x80783d0 | |
08078416 086CA434 or [esp+0x34],ch | |
0807841A 1454 adc al,0x54 | |
0807841C D5D7 aad 0xd7 | |
0807841E D3DB rcr ebx,cl | |
08078420 DFEE fucomip st6 | |
08078422 DA33 fidiv dword [ebx] | |
08078424 351747CCCF xor eax,0xcfcc4717 | |
08078429 E2B8 loop 0x80783e3 | |
0807842B 0C65 or al,0x65 | |
0807842D B610 mov dh,0x10 | |
0807842F 5D pop ebp | |
08078430 B7E5 mov bh,0xe5 | |
08078432 99 cdq | |
08078433 4F dec edi | |
08078434 E3BA jecxz 0x80783f0 | |
08078436 086CA434 or [esp+0x34],ch | |
0807843A 1454 adc al,0x54 | |
0807843C D5D7 aad 0xd7 | |
0807843E C6 db 0xc6 | |
0807843F DDBCFFAC243517 fnstsw [edi+edi*8+0x173524ac] | |
08078446 52 push edx | |
08078447 CC int3 | |
08078448 DA db 0xda | |
08078449 E2B8 loop 0x8078403 | |
0807844B 0C65 or al,0x65 | |
0807844D C6075D mov byte [edi],0x5d | |
08078450 C7 db 0xc7 | |
08078451 F299 repne cdq | |
08078453 4F dec edi | |
08078454 E3BA jecxz 0x8078410 | |
08078456 0879A2 or [ecx-0x5e],bh | |
08078459 42 inc edx | |
0807845A 0154D5D7 add [ebp+edx*8-0x29],edx | |
0807845E D3DB rcr ebx,cl | |
08078460 CAE8AC retf 0xace8 | |
08078463 54 push esp | |
08078464 2217 and dl,[edi] | |
08078466 52 push edx | |
08078467 D9CF fxch st7 | |
08078469 E2B8 loop 0x8078423 | |
0807846B 0C65 or al,0x65 | |
0807846D B610 mov dh,0x10 | |
0807846F 5D pop ebp | |
08078470 C7 db 0xc7 | |
08078471 E79F out 0x9f,eax | |
08078473 39F4 cmp esp,esi | |
08078475 BA1D79A434 mov edx,0x34a4791d | |
0807847A 1454 adc al,0x54 | |
0807847C A5 movsd | |
0807847D C0D3DB rcl bl,byte 0xdb | |
08078480 CAE8AC retf 0xace8 | |
08078483 2435 and al,0x35 | |
08078485 17 pop ss | |
08078486 47 inc edi | |
08078487 DFB9F7B80C65 fistp qword [ecx+0x650cb8f7] | |
0807848D B610 mov dh,0x10 | |
0807848F 5D pop ebp | |
08078490 C7 db 0xc7 | |
08078491 F2E958E3BA08 bnd jmp dword 0x10c267ef | |
08078497 6C insb | |
08078498 A4 movsb | |
08078499 3414 xor al,0x14 | |
0807849B 54 push esp | |
0807849C D5D7 aad 0xd7 | |
0807849E D3DB rcr ebx,cl | |
080784A0 CAE8B9 retf 0xb9e8 | |
080784A3 224300 and al,[ebx+0x0] | |
080784A6 52 push edx | |
080784A7 D9CF fxch st7 | |
080784A9 F7AD0C65B610 imul dword [ebp+0x10b6650c] | |
080784AF 5D pop ebp | |
080784B0 C7 db 0xc7 | |
080784B1 F299 repne cdq | |
080784B3 3F aas | |
080784B4 F4 hlt | |
080784B5 BA086CA434 mov edx,0x34a46c08 | |
080784BA 1454 adc al,0x54 | |
080784BC D5D7 aad 0xd7 | |
080784BE D3DB rcr ebx,cl | |
080784C0 CAE8AC retf 0xace8 | |
080784C3 3133 xor [ebx],esi | |
080784C5 61 popad | |
080784C6 45 inc ebp | |
080784C7 D9CF fxch st7 | |
080784C9 E2B8 loop 0x8078483 | |
080784CB 0C70 or al,0x70 | |
080784CD A3105DC7F2 mov [0xf2c75d10],eax | |
080784D2 99 cdq | |
080784D3 4F dec edi | |
080784D4 E3BA jecxz 0x8078490 | |
080784D6 787B js 0x8078553 | |
080784D8 A4 movsb | |
080784D9 3414 xor al,0x14 | |
080784DB 54 push esp | |
080784DC D5D7 aad 0xd7 | |
080784DE D3DB rcr ebx,cl | |
080784E0 CAE8AC retf 0xace8 | |
080784E3 2435 and al,0x35 | |
080784E5 17 pop ss | |
080784E6 47 inc edi | |
080784E7 DFB9F7B80C65 fistp qword [ecx+0x650cb8f7] | |
080784ED B610 mov dh,0x10 | |
080784EF 5D pop ebp | |
080784F0 C7 db 0xc7 | |
080784F1 F2E958E3BA08 bnd jmp dword 0x10c2684f | |
080784F7 6C insb | |
080784F8 A4 movsb | |
080784F9 3414 xor al,0x14 | |
080784FB 54 push esp | |
080784FC D5D7 aad 0xd7 | |
080784FE D3DB rcr ebx,cl | |
08078500 DFEE fucomip st6 | |
08078502 DA33 fidiv dword [ebx] | |
08078504 351752D9CF xor eax,0xcfd95217 | |
08078509 F7AD0C65B610 imul dword [ebp+0x10b6650c] | |
0807850F 5D pop ebp | |
08078510 C7 db 0xc7 | |
08078511 F299 repne cdq | |
08078513 3F aas | |
08078514 F4 hlt | |
08078515 BA086CA434 mov edx,0x34a46c08 | |
0807851A 1454 adc al,0x54 | |
0807851C D5D7 aad 0xd7 | |
0807851E D3DB rcr ebx,cl | |
08078520 CAE8AC retf 0xace8 | |
08078523 3133 xor [ebx],esi | |
08078525 61 popad | |
08078526 45 inc ebp | |
08078527 D9CF fxch st7 | |
08078529 F7AD0C65B610 imul dword [ebp+0x10b6650c] | |
0807852F 5D pop ebp | |
08078530 C7 db 0xc7 | |
08078531 F299 repne cdq | |
08078533 3F aas | |
08078534 F4 hlt | |
08078535 BA086CA434 mov edx,0x34a46c08 | |
0807853A 1454 adc al,0x54 | |
0807853C D5D7 aad 0xd7 | |
0807853E D3DB rcr ebx,cl | |
08078540 CAE8B9 retf 0xb9e8 | |
08078543 224300 and al,[ebx+0x0] | |
08078546 52 push edx | |
08078547 D9CF fxch st7 | |
08078549 E2B8 loop 0x8078503 | |
0807854B 1970B6 sbb [eax-0x4a],esi | |
0807854E 105DC7 adc [ebp-0x39],bl | |
08078551 F299 repne cdq | |
08078553 4F dec edi | |
08078554 E3CA jecxz 0x8078520 | |
08078556 1F pop ds | |
08078557 6C insb | |
08078558 A4 movsb | |
08078559 3414 xor al,0x14 | |
0807855B 54 push esp | |
0807855C D5D7 aad 0xd7 | |
0807855E D3DB rcr ebx,cl | |
08078560 CAE8AC retf 0xace8 | |
08078563 3133 xor [ebx],esi | |
08078565 61 popad | |
08078566 45 inc ebp | |
08078567 D9 db 0xd9 | |
08078568 DA db 0xda | |
08078569 F7B80C65B610 idiv dword [eax+0x10b6650c] | |
0807856F 5D pop ebp | |
08078570 C7 db 0xc7 | |
08078571 F2E958E3BA08 bnd jmp dword 0x10c268cf | |
08078577 6C insb | |
08078578 A4 movsb | |
08078579 3414 xor al,0x14 | |
0807857B 54 push esp | |
0807857C D5D7 aad 0xd7 | |
0807857E D3DB rcr ebx,cl | |
08078580 CAFDAA retf 0xaafd | |
08078583 52 push edx | |
08078584 2217 and dl,[edi] | |
08078586 52 push edx | |
08078587 D9CF fxch st7 | |
08078589 E2B8 loop 0x8078543 | |
0807858B 1970B6 sbb [eax-0x4a],esi | |
0807858E 105DC7 adc [ebp-0x39],bl | |
08078591 82 db 0x82 | |
08078592 8E4FE3 mov cs,[edi-0x1d] | |
08078595 BA086CA434 mov edx,0x34a46c08 | |
0807859A 1441 adc al,0x41 | |
0807859C D3A1C4DBDFFD shl dword [ecx-0x220243c],cl | |
080785A2 AC lodsb | |
080785A3 2435 and al,0x35 | |
080785A5 17 pop ss | |
080785A6 22CE and cl,dh | |
080785A8 CF iretd | |
080785A9 E2AD loop 0x8078558 | |
080785AB 0A13 or dl,[ebx] | |
080785AD A1105DD2E7 mov eax,[0xe7d25d10] | |
080785B2 99 cdq | |
080785B3 4F dec edi | |
080785B4 93 xchg eax,ebx | |
080785B5 AD lodsd | |
080785B6 1D6AD22114 sbb eax,0x1421d26a | |
080785BB 54 push esp | |
080785BC D5D7 aad 0xd7 | |
080785BE A3CCCAE8B9 mov [0xb9e8cacc],eax | |
080785C3 224300 and al,[ebx+0x0] | |
080785C6 52 push edx | |
080785C7 D9 db 0xd9 | |
080785C8 DA db 0xda | |
080785C9 F5 cmc | |
080785CA AF scasd | |
080785CB 1B72A1 sbb esi,[edx-0x5f] | |
080785CE 07 pop es | |
080785CF 4A dec edx | |
080785D0 D0E5 shl ch,1 | |
080785D2 8E58F4 mov ds,[eax-0xc] | |
080785D5 AD lodsd | |
080785D6 1F pop ds | |
080785D7 7BB3 jpo 0x807858c | |
080785D9 2303 and eax,[ebx] | |
080785DB 43 inc ebx | |
080785DC C2C0C4 ret 0xc4c0 | |
080785DF CC int3 | |
080785E0 DD db 0xdd | |
080785E1 FF db 0xff | |
080785E2 BB33220045 mov ebx,0x45002233 | |
080785E7 CE into | |
080785E8 D8F5 fdiv st5 | |
080785EA AF scasd | |
080785EB 1B72A1 sbb esi,[edx-0x5f] | |
080785EE 07 pop es | |
080785EF 58 pop eax | |
080785F0 D2 db 0xd2 | |
080785F1 F7 db 0xf7 | |
080785F2 8C4AF6 mov [edx-0xa],cs | |
080785F5 BF1D69B131 mov edi,0x31b1691d | |
080785FA 0151C0 add [ecx-0x40],edx | |
080785FD D2C6 rol dh,cl | |
080785FF DE db 0xde | |
08078600 DFED fucomip st5 | |
08078602 B921201247 mov ecx,0x47122021 | |
08078607 DC db 0xdc | |
08078608 DA db 0xda | |
08078609 E7AD out 0xad,eax | |
0807860B 0970B3 or [eax-0x4d],esi | |
0807860E 0558D2F78C add eax,0x8cf7d258 | |
08078613 4A dec edx | |
08078614 F6BF1D69B131 idiv byte [edi+0x31b1691d] | |
0807861A 0151C0 add [ecx-0x40],edx | |
0807861D D2C6 rol dh,cl | |
0807861F DE db 0xde | |
08078620 DFED fucomip st5 | |
08078622 B921201247 mov ecx,0x47122021 | |
08078627 DC db 0xdc | |
08078628 DA db 0xda | |
08078629 E7AD out 0xad,eax | |
0807862B 0970B3 or [eax-0x4d],esi | |
0807862E 0558D2F78C add eax,0x8cf7d258 | |
08078633 4A dec edx | |
08078634 F6BF1D69B131 idiv byte [edi+0x31b1691d] | |
0807863A 01E7 add edi,esp | |
0807863C 99 cdq | |
0807863D 4F dec edi | |
0807863E E3BA jecxz 0x80785fa | |
08078640 086CA434 or [esp+0x34],ch | |
08078644 6443 fs inc ebx | |
08078646 D5D7 aad 0xd7 | |
08078648 D3DB rcr ebx,cl | |
0807864A CAE8AC retf 0xace8 | |
0807864D 2435 and al,0x35 | |
0807864F 0254AFD8 add dl,[edi+ebp*4-0x28] | |
08078653 E2B8 loop 0x807860d | |
08078655 0C65 or al,0x65 | |
08078657 B610 mov dh,0x10 | |
08078659 5D pop ebp | |
0807865A D2E7 shl bh,cl | |
0807865C 99 cdq | |
0807865D 4F dec edi | |
0807865E E3BA jecxz 0x807861a | |
08078660 086CA434 or [esp+0x34],ch | |
08078664 6443 fs inc ebx | |
08078666 D5D7 aad 0xd7 | |
08078668 D3DB rcr ebx,cl | |
0807866A CAE8AC retf 0xace8 | |
0807866D 2435 and al,0x35 | |
0807866F 0254AFD8 add dl,[edi+ebp*4-0x28] | |
08078673 E2B8 loop 0x807862d | |
08078675 0C65 or al,0x65 | |
08078677 B605 mov dh,0x5 | |
08078679 48 dec eax | |
0807867A C7 db 0xc7 | |
0807867B F299 repne cdq | |
0807867D 4F dec edi | |
0807867E E3BA jecxz 0x807863a | |
08078680 086CD423 or [esp+edx*8+0x23],ch | |
08078684 1454 adc al,0x54 | |
08078686 D5D7 aad 0xd7 | |
08078688 D3DB rcr ebx,cl | |
0807868A CAE8B9 retf 0xb9e8 | |
0807868D 224300 and al,[ebx+0x0] | |
08078690 52 push edx | |
08078691 D9CF fxch st7 | |
08078693 E2B8 loop 0x807864d | |
08078695 0C65 or al,0x65 | |
08078697 A3055DC7F2 mov [0xf2c75d05],eax | |
0807869C 99 cdq | |
0807869D 4F dec edi | |
0807869E E3BA jecxz 0x807865a | |
080786A0 081CB3 or [ebx+esi*4],bl | |
080786A3 3414 xor al,0x14 | |
080786A5 54 push esp | |
080786A6 D5D7 aad 0xd7 | |
080786A8 D3DB rcr ebx,cl | |
080786AA CAE8AC retf 0xace8 | |
080786AD 3133 xor [ebx],esi | |
080786AF 61 popad | |
080786B0 45 inc ebp | |
080786B1 D9CF fxch st7 | |
080786B3 E2B8 loop 0x807866d | |
080786B5 1970B6 sbb [eax-0x4a],esi | |
080786B8 105DC7 adc [ebp-0x39],bl | |
080786BB F299 repne cdq | |
080786BD 4F dec edi | |
080786BE E3CA jecxz 0x807868a | |
080786C0 1F pop ds | |
080786C1 6C insb | |
080786C2 A4 movsb | |
080786C3 3414 xor al,0x14 | |
080786C5 54 push esp | |
080786C6 D5D7 aad 0xd7 | |
080786C8 D3DB rcr ebx,cl | |
080786CA CAE8AC retf 0xace8 | |
080786CD 2420 and al,0x20 | |
080786CF 1124CC adc [esp+ecx*8],esp | |
080786D2 CF iretd | |
080786D3 E2B8 loop 0x807868d | |
080786D5 0C65 or al,0x65 | |
080786D7 B610 mov dh,0x10 | |
080786D9 5D pop ebp | |
080786DA B7E5 mov bh,0xe5 | |
080786DC 99 cdq | |
080786DD 4F dec edi | |
080786DE E3BA jecxz 0x807869a | |
080786E0 086CB132 or [ecx+esi*4+0x32],ch | |
080786E4 62 db 0x62 | |
080786E5 43 inc ebx | |
080786E6 D5D7 aad 0xd7 | |
080786E8 D3DB rcr ebx,cl | |
080786EA DF db 0xdf | |
080786EB FD std | |
080786EC AC lodsb | |
080786ED 2435 and al,0x35 | |
080786EF 17 pop ss | |
080786F0 52 push edx | |
080786F1 D9CF fxch st7 | |
080786F3 E2C8 loop 0x80786bd | |
080786F5 1B65B6 sbb esp,[ebp-0x4a] | |
080786F8 105DC7 adc [ebp-0x39],bl | |
080786FB F299 repne cdq | |
080786FD 4F dec edi | |
080786FE E3BA jecxz 0x80786ba | |
08078700 086CA434 or [esp+0x34],ch | |
08078704 0152A3 add [edx-0x5d],edx | |
08078707 C0D3DB rcl bl,byte 0xdb | |
0807870A CAE8B9 retf 0xb9e8 | |
0807870D 31351752D9CF xor [dword 0xcfd95217],esi | |
08078713 E2B8 loop 0x80786cd | |
08078715 0C15 or al,0x15 | |
08078717 A1105DC7F2 mov eax,[0xf2c75d10] | |
0807871C 99 cdq | |
0807871D 4F dec edi | |
0807871E E3BA jecxz 0x80786da | |
08078720 086CB132 or [ecx+esi*4+0x32],ch | |
08078724 62 db 0x62 | |
08078725 43 inc ebx | |
08078726 D5D7 aad 0xd7 | |
08078728 D3DB rcr ebx,cl | |
0807872A CAE8AC retf 0xace8 | |
0807872D 3120 xor [eax],esp | |
0807872F 17 pop ss | |
08078730 52 push edx | |
08078731 D9CF fxch st7 | |
08078733 E2B8 loop 0x80786ed | |
08078735 0C65 or al,0x65 | |
08078737 C6075D mov byte [edi],0x5d | |
0807873A C7 db 0xc7 | |
0807873B F299 repne cdq | |
0807873D 4F dec edi | |
0807873E E3AF jecxz 0x80786ef | |
08078740 0E push cs | |
08078741 1AB3341454D5 sbb dh,[ebx-0x2aabebcc] | |
08078747 C2C6DB ret 0xdbc6 | |
0807874A CAE8AC retf 0xace8 | |
0807874D 2435 and al,0x35 | |
0807874F 17 pop ss | |
08078750 52 push edx | |
08078751 A9D8E2B80C test eax,0xcb8e2d8 | |
08078756 65B610 gs mov dh,0x10 | |
08078759 5D pop ebp | |
0807875A C7 db 0xc7 | |
0807875B F299 repne cdq | |
0807875D 4F dec edi | |
0807875E E3BA jecxz 0x807871a | |
08078760 0879A2 or [ecx-0x5e],bh | |
08078763 42 inc edx | |
08078764 0354D5D7 add edx,[ebp+edx*8-0x29] | |
08078768 C6 db 0xc6 | |
08078769 CE into | |
0807876A CAE8AC retf 0xace8 | |
0807876D 2435 and al,0x35 | |
0807876F 17 pop ss | |
08078770 52 push edx | |
08078771 D9BFF5B80C65 fnstcw [edi+0x650cb8f5] | |
08078777 B610 mov dh,0x10 | |
08078779 5D pop ebp | |
0807877A D2 db 0xd2 | |
0807877B F4 hlt | |
0807877C EF out dx,eax | |
0807877D 58 pop eax | |
0807877E E3BA jecxz 0x807873a | |
08078780 086CB121 or [ecx+esi*4+0x21],ch | |
08078784 1454 adc al,0x54 | |
08078786 D5D7 aad 0xd7 | |
08078788 D3DB rcr ebx,cl | |
0807878A CAE8DC retf 0xdce8 | |
0807878D 33351752D9CF xor esi,[dword 0xcfd95217] | |
08078793 E2B8 loop 0x807874d | |
08078795 0C65 or al,0x65 | |
08078797 A3162BD2F2 mov [0xf2d22b16],eax | |
0807879C 99 cdq | |
0807879D 4F dec edi | |
0807879E E3BA jecxz 0x807875a | |
080787A0 086CA444 or [esp+0x44],ch | |
080787A4 0354D5D7 add edx,[ebp+edx*8-0x29] | |
080787A8 D3DB rcr ebx,cl | |
080787AA CAFDAA retf 0xaafd | |
080787AD 52 push edx | |
080787AE 2017 and [edi],dl | |
080787B0 52 push edx | |
080787B1 D9CF fxch st7 | |
080787B3 E2B8 loop 0x807876d | |
080787B5 0C65 or al,0x65 | |
080787B7 C6075D mov byte [edi],0x5d | |
080787BA C7 db 0xc7 | |
080787BB F299 repne cdq | |
080787BD 4F dec edi | |
080787BE E3BA jecxz 0x807877a | |
080787C0 086CA434 or [esp+0x34],ch | |
080787C4 1454 adc al,0x54 | |
080787C6 D5C2 aad 0xc2 | |
080787C8 D5AD aad 0xad | |
080787CA DDE8 fucomp st0 | |
080787CC AC lodsb | |
080787CD 3120 xor [eax],esp | |
080787CF 17 pop ss | |
080787D0 52 push edx | |
080787D1 D9CF fxch st7 | |
080787D3 E2B8 loop 0x807878d | |
080787D5 0C65 or al,0x65 | |
080787D7 C6075D mov byte [edi],0x5d | |
080787DA C7 db 0xc7 | |
080787DB F299 repne cdq | |
080787DD 4F dec edi | |
080787DE E3BA jecxz 0x807879a | |
080787E0 086CA434 or [esp+0x34],ch | |
080787E4 1454 adc al,0x54 | |
080787E6 D5C2 aad 0xc2 | |
080787E8 D5AD aad 0xad | |
080787EA DDE8 fucomp st0 | |
080787EC AC lodsb | |
080787ED 3120 xor [eax],esp | |
080787EF 17 pop ss | |
080787F0 52 push edx | |
080787F1 D9CF fxch st7 | |
080787F3 E2B8 loop 0x80787ad | |
080787F5 0C65 or al,0x65 | |
080787F7 C6075D mov byte [edi],0x5d | |
080787FA C7 db 0xc7 | |
080787FB F299 repne cdq | |
080787FD 4F dec edi | |
080787FE E3AF jecxz 0x80787af | |
08078800 0E push cs | |
08078801 1AB3340141D5 sbb dh,[ebx-0x2abefecc] | |
08078807 D7 xlatb | |
08078808 D3DB rcr ebx,cl | |
0807880A CAE8AC retf 0xace8 | |
0807880D 2445 and al,0x45 | |
0807880F 0052D9 add [edx-0x27],dl | |
08078812 CF iretd | |
08078813 E2B8 loop 0x80787cd | |
08078815 0C65 or al,0x65 | |
08078817 B610 mov dh,0x10 | |
08078819 5D pop ebp | |
0807881A C7 db 0xc7 | |
0807881B F28C4995 repne mov [ecx-0x6b],cs | |
0807881F AD lodsd | |
08078820 086CB121 or [ecx+esi*4+0x21],ch | |
08078824 1454 adc al,0x54 | |
08078826 D5D7 aad 0xd7 | |
08078828 D3DB rcr ebx,cl | |
0807882A CAE8DC retf 0xdce8 | |
0807882D 33351752D9CF xor esi,[dword 0xcfd95217] | |
08078833 E2B8 loop 0x80787ed | |
08078835 0C65 or al,0x65 | |
08078837 B610 mov dh,0x10 | |
08078839 5D pop ebp | |
0807883A C7 db 0xc7 | |
0807883B E79F out 0x9f,eax | |
0807883D 39F4 cmp esp,esi | |
0807883F BA086CA421 mov edx,0x21a46c08 | |
08078844 0154D5D7 add [ebp+edx*8-0x29],edx | |
08078848 D3DB rcr ebx,cl | |
0807884A CAE8AC retf 0xace8 | |
0807884D 54 push esp | |
0807884E 2217 and dl,[edi] | |
08078850 52 push edx | |
08078851 D9CF fxch st7 | |
08078853 E2B8 loop 0x807880d | |
08078855 1963C0 sbb [ebx-0x40],esp | |
08078858 07 pop es | |
08078859 5D pop ebp | |
0807885A C7 db 0xc7 | |
0807885B F28C5AE3 repne mov [edx-0x1d],ds | |
0807885F BA086CA434 mov edx,0x34a46c08 | |
08078864 1454 adc al,0x54 | |
08078866 A5 movsd | |
08078867 C0D3DB rcl bl,byte 0xdb | |
0807886A CAE8AC retf 0xace8 | |
0807886D 2435 and al,0x35 | |
0807886F 17 pop ss | |
08078870 47 inc edi | |
08078871 DFB9F5B80C65 fistp qword [ecx+0x650cb8f5] | |
08078877 A3055DC7F2 mov [0xf2c75d05],eax | |
0807887C 99 cdq | |
0807887D 4F dec edi | |
0807887E E3BA jecxz 0x807883a | |
08078880 081CB3 or [ebx+esi*4],bl | |
08078883 3414 xor al,0x14 | |
08078885 54 push esp | |
08078886 D5D7 aad 0xd7 | |
08078888 D3DB rcr ebx,cl | |
0807888A CAE8AC retf 0xace8 | |
0807888D 2435 and al,0x35 | |
0807888F 17 pop ss | |
08078890 47 inc edi | |
08078891 DFB9F7B80C65 fistp qword [ecx+0x650cb8f7] | |
08078897 B610 mov dh,0x10 | |
08078899 5D pop ebp | |
0807889A C7 db 0xc7 | |
0807889B F2E958E3BA08 bnd jmp dword 0x10c26bf9 | |
080788A1 6C insb | |
080788A2 A4 movsb | |
080788A3 3401 xor al,0x1 | |
080788A5 52 push edx | |
080788A6 A3C0D3DBCA mov [0xcadbd3c0],eax | |
080788AB E8B9313517 call dword 0x1f3cba69 | |
080788B0 52 push edx | |
080788B1 D9CF fxch st7 | |
080788B3 E2B8 loop 0x807886d | |
080788B5 0C15 or al,0x15 | |
080788B7 A1105DC7F2 mov eax,[0xf2c75d10] | |
080788BC 99 cdq | |
080788BD 4F dec edi | |
080788BE E3BA jecxz 0x807887a | |
080788C0 086CA434 or [esp+0x34],ch | |
080788C4 1441 adc al,0x41 | |
080788C6 D3A1C4DBCAE8 shl dword [ecx-0x1735243c],cl | |
080788CC AC lodsb | |
080788CD 3120 xor [eax],esp | |
080788CF 17 pop ss | |
080788D0 52 push edx | |
080788D1 D9CF fxch st7 | |
080788D3 E2B8 loop 0x807888d | |
080788D5 0C65 or al,0x65 | |
080788D7 C6075D mov byte [edi],0x5d | |
080788DA C7 db 0xc7 | |
080788DB F299 repne cdq | |
080788DD 4F dec edi | |
080788DE E3BA jecxz 0x807889a | |
080788E0 086CA434 or [esp+0x34],ch | |
080788E4 1454 adc al,0x54 | |
080788E6 C0D1A5 rcl cl,byte 0xa5 | |
080788E9 CC int3 | |
080788EA CAE8AC retf 0xace8 | |
080788ED 2420 and al,0x20 | |
080788EF 0252D9 add dl,[edx-0x27] | |
080788F2 CF iretd | |
080788F3 E2B8 loop 0x80788ad | |
080788F5 0C65 or al,0x65 | |
080788F7 B660 mov dh,0x60 | |
080788F9 4A dec edx | |
080788FA C7 db 0xc7 | |
080788FB F299 repne cdq | |
080788FD 4F dec edi | |
080788FE E3BA jecxz 0x80788ba | |
08078900 1D6AD22314 sbb eax,0x1423d26a | |
08078905 54 push esp | |
08078906 D5C2 aad 0xc2 | |
08078908 C6 db 0xc6 | |
08078909 DBCA fcmovne st2 | |
0807890B E8AC243517 call dword 0x1f3cadbc | |
08078910 52 push edx | |
08078911 A9D8E2B80C test eax,0xcb8e2d8 | |
08078916 65B610 gs mov dh,0x10 | |
08078919 5D pop ebp | |
0807891A C7 db 0xc7 | |
0807891B F299 repne cdq | |
0807891D 4F dec edi | |
0807891E E3BA jecxz 0x80788da | |
08078920 1D6AD22314 sbb eax,0x1423d26a | |
08078925 54 push esp | |
08078926 D5D7 aad 0xd7 | |
08078928 D3DB rcr ebx,cl | |
0807892A DF db 0xdf | |
0807892B FD std | |
0807892C AC lodsb | |
0807892D 2435 and al,0x35 | |
0807892F 17 pop ss | |
08078930 52 push edx | |
08078931 D9CF fxch st7 | |
08078933 E2C8 loop 0x80788fd | |
08078935 1B65B6 sbb esp,[ebp-0x4a] | |
08078938 105DC7 adc [ebp-0x39],bl | |
0807893B F299 repne cdq | |
0807893D 4F dec edi | |
0807893E E3BA jecxz 0x80788fa | |
08078940 086CB132 or [ecx+esi*4+0x32],ch | |
08078944 62 db 0x62 | |
08078945 43 inc ebx | |
08078946 D5D7 aad 0xd7 | |
08078948 D3DB rcr ebx,cl | |
0807894A CAE8AC retf 0xace8 | |
0807894D 3120 xor [eax],esp | |
0807894F 17 pop ss | |
08078950 52 push edx | |
08078951 D9CF fxch st7 | |
08078953 E2B8 loop 0x807890d | |
08078955 0C65 or al,0x65 | |
08078957 C6075D mov byte [edi],0x5d | |
0807895A C7 db 0xc7 | |
0807895B F299 repne cdq | |
0807895D 4F dec edi | |
0807895E E3AF jecxz 0x807890f | |
08078960 0E push cs | |
08078961 1AB3341454C0 sbb dh,[ebx-0x3fabebcc] | |
08078967 C2D3DB ret 0xdbd3 | |
0807896A CAE8DC retf 0xdce8 | |
0807896D 33351752D9CF xor esi,[dword 0xcfd95217] | |
08078973 E2B8 loop 0x807892d | |
08078975 0C70 or al,0x70 | |
08078977 B066 mov al,0x66 | |
08078979 4A dec edx | |
0807897A C7 db 0xc7 | |
0807897B E78C out 0x8c,eax | |
0807897D 4F dec edi | |
0807897E E3CA jecxz 0x807894a | |
08078980 1F pop ds | |
08078981 79A2 jns 0x8078925 | |
08078983 42 inc edx | |
08078984 0154D5D7 add [ebp+edx*8-0x29],edx | |
08078988 D3ABDDE8AC31 shr dword [ebx+0x31ace8dd],cl | |
0807898E 336145 xor esp,[ecx+0x45] | |
08078991 D9CF fxch st7 | |
08078993 F7AF1B72A107 imul dword [edi+0x7a1721b] | |
08078999 4A dec edx | |
0807899A D0E5 shl ch,1 | |
0807899C 8E58F4 mov ds,[eax-0xc] | |
0807899F AD lodsd | |
080789A0 1F pop ds | |
080789A1 7BB3 jpo 0x8078956 | |
080789A3 2303 and eax,[ebx] | |
080789A5 43 inc ebx | |
080789A6 C2C0C4 ret 0xc4c0 | |
080789A9 CC int3 | |
080789AA DD db 0xdd | |
080789AB FF db 0xff | |
080789AC BB33220045 mov ebx,0x45002233 | |
080789B1 CE into | |
080789B2 D8E7 fsub st7 | |
080789B4 AD lodsd | |
080789B5 0970B3 or [eax-0x4d],esi | |
080789B8 0558D2F78C add eax,0x8cf7d258 | |
080789BD 4A dec edx | |
080789BE F6BF1D69B131 idiv byte [edi+0x31b1691d] | |
080789C4 0151C0 add [ecx-0x40],edx | |
080789C7 D2C6 rol dh,cl | |
080789C9 DE db 0xde | |
080789CA DFED fucomip st5 | |
080789CC B921201247 mov ecx,0x47122021 | |
080789D1 DC db 0xdc | |
080789D2 DA db 0xda | |
080789D3 E7AD out 0xad,eax | |
080789D5 0970B3 or [eax-0x4d],esi | |
080789D8 0558D2F78C add eax,0x8cf7d258 | |
080789DD 4A dec edx | |
080789DE F6BF1D69B131 idiv byte [edi+0x31b1691d] | |
080789E4 0151C0 add [ecx-0x40],edx | |
080789E7 D2C6 rol dh,cl | |
080789E9 DE db 0xde | |
080789EA DFED fucomip st5 | |
080789EC B921201247 mov ecx,0x47122021 | |
080789F1 41 inc ecx | |
080789F2 6C insb | |
080789F3 6C insb | |
080789F4 6F outsd | |
080789F5 6320 arpl [eax],sp | |
080789F7 203A and [edx],bh | |
080789F9 202578003D3D and [dword 0x3d3d0078],ah | |
080789FF 204265 and [edx+0x65],al | |
08078A02 666F outsw | |
08078A04 7265 jc 0x8078a6b | |
08078A06 00E7 add bh,ah | |
08078A08 99 cdq | |
08078A09 4F dec edi | |
08078A0A E3BA jecxz 0x80789c6 | |
08078A0C 086CA434 or [esp+0x34],ch | |
08078A10 6443 fs inc ebx | |
08078A12 D5D7 aad 0xd7 | |
08078A14 D3DB rcr ebx,cl | |
08078A16 CAE8AC retf 0xace8 | |
08078A19 2435 and al,0x35 | |
08078A1B 0254AFD8 add dl,[edi+ebp*4-0x28] | |
08078A1F E2B8 loop 0x80789d9 | |
08078A21 0C65 or al,0x65 | |
08078A23 B610 mov dh,0x10 | |
08078A25 48 dec eax | |
08078A26 D2 db 0xd2 | |
08078A27 F299 repne cdq | |
08078A29 4F dec edi | |
08078A2A E3BA jecxz 0x80789e6 | |
08078A2C 086CA444 or [esp+0x44],ch | |
08078A30 0354D5D7 add edx,[ebp+edx*8-0x29] | |
08078A34 D3DB rcr ebx,cl | |
08078A36 CAE8AC retf 0xace8 | |
08078A39 2435 and al,0x35 | |
08078A3B 17 pop ss | |
08078A3C 52 push edx | |
08078A3D D9 db 0xd9 | |
08078A3E DA db 0xda | |
08078A3F E4CE in al,0xce | |
08078A41 1B65B6 sbb esp,[ebp-0x4a] | |
08078A44 105DC7 adc [ebp-0x39],bl | |
08078A47 F299 repne cdq | |
08078A49 5A pop edx | |
08078A4A F6BA086CA444 idiv byte [edx+0x44a46c08] | |
08078A50 0354D5D7 add edx,[ebp+edx*8-0x29] | |
08078A54 D3DB rcr ebx,cl | |
08078A56 CAE8AC retf 0xace8 | |
08078A59 3133 xor [ebx],esi | |
08078A5B 61 popad | |
08078A5C 47 inc edi | |
08078A5D D9CF fxch st7 | |
08078A5F E2B8 loop 0x8078a19 | |
08078A61 0C65 or al,0x65 | |
08078A63 B610 mov dh,0x10 | |
08078A65 2DD0F2994F sub eax,0x4f99f2d0 | |
08078A6A E3BA jecxz 0x8078a26 | |
08078A6C 086CA434 or [esp+0x34],ch | |
08078A70 1454 adc al,0x54 | |
08078A72 D5D7 aad 0xd7 | |
08078A74 C6 db 0xc6 | |
08078A75 DDBCFFAC312017 fnstsw [edi+edi*8+0x172031ac] | |
08078A7C 52 push edx | |
08078A7D D9CF fxch st7 | |
08078A7F E2B8 loop 0x8078a39 | |
08078A81 0C65 or al,0x65 | |
08078A83 C6075D mov byte [edi],0x5d | |
08078A86 C7 db 0xc7 | |
08078A87 F299 repne cdq | |
08078A89 4F dec edi | |
08078A8A E3BA jecxz 0x8078a46 | |
08078A8C 086CA434 or [esp+0x34],ch | |
08078A90 1454 adc al,0x54 | |
08078A92 C0D1A5 rcl cl,byte 0xa5 | |
08078A95 CC int3 | |
08078A96 CAE8AC retf 0xace8 | |
08078A99 2435 and al,0x35 | |
08078A9B 17 pop ss | |
08078A9C 47 inc edi | |
08078A9D CC int3 | |
08078A9E CF iretd | |
08078A9F E2B8 loop 0x8078a59 | |
08078AA1 0C65 or al,0x65 | |
08078AA3 B610 mov dh,0x10 | |
08078AA5 5D pop ebp | |
08078AA6 B7E5 mov bh,0xe5 | |
08078AA8 99 cdq | |
08078AA9 4F dec edi | |
08078AAA E3BA jecxz 0x8078a66 | |
08078AAC 086CA434 or [esp+0x34],ch | |
08078AB0 1454 adc al,0x54 | |
08078AB2 D5D7 aad 0xd7 | |
08078AB4 D3DB rcr ebx,cl | |
08078AB6 DFEE fucomip st6 | |
08078AB8 DA31 fidiv dword [ecx] | |
08078ABA 351752D9CF xor eax,0xcfd95217 | |
08078ABF E2B8 loop 0x8078a79 | |
08078AC1 0C15 or al,0x15 | |
08078AC3 A1105DC7F2 mov eax,[0xf2c75d10] | |
08078AC8 99 cdq | |
08078AC9 4F dec edi | |
08078ACA E3BA jecxz 0x8078a86 | |
08078ACC 086CA434 or [esp+0x34],ch | |
08078AD0 1454 adc al,0x54 | |
08078AD2 C0D1A5 rcl cl,byte 0xa5 | |
08078AD5 CC int3 | |
08078AD6 CAE8AC retf 0xace8 | |
08078AD9 2435 and al,0x35 | |
08078ADB 0247D9 add al,[edi-0x27] | |
08078ADE CF iretd | |
08078ADF E2B8 loop 0x8078a99 | |
08078AE1 0C65 or al,0x65 | |
08078AE3 B610 mov dh,0x10 | |
08078AE5 2DD0F2994F sub eax,0x4f99f2d0 | |
08078AEA E3BA jecxz 0x8078aa6 | |
08078AEC 086CA434 or [esp+0x34],ch | |
08078AF0 1454 adc al,0x54 | |
08078AF2 D5D7 aad 0xd7 | |
08078AF4 D3CE ror esi,cl | |
08078AF6 CC int3 | |
08078AF7 9E sahf | |
08078AF8 BB24351752 mov ebx,0x52173524 | |
08078AFD CC int3 | |
08078AFE DA db 0xda | |
08078AFF E2B8 loop 0x8078ab9 | |
08078B01 0C65 or al,0x65 | |
08078B03 C6075D mov byte [edi],0x5d | |
08078B06 C7 db 0xc7 | |
08078B07 F299 repne cdq | |
08078B09 4F dec edi | |
08078B0A E3BA jecxz 0x8078ac6 | |
08078B0C 0879A2 or [ecx-0x5e],bh | |
08078B0F 42 inc edx | |
08078B10 0154D5D7 add [ebp+edx*8-0x29],edx | |
08078B14 D3DB rcr ebx,cl | |
08078B16 CAE8AC retf 0xace8 | |
08078B19 54 push esp | |
08078B1A 2217 and dl,[edi] | |
08078B1C 52 push edx | |
08078B1D D9CF fxch st7 | |
08078B1F E2B8 loop 0x8078ad9 | |
08078B21 0C65 or al,0x65 | |
08078B23 B610 mov dh,0x10 | |
08078B25 5D pop ebp | |
08078B26 C7 db 0xc7 | |
08078B27 F28C4995 repne mov [ecx-0x6b],cs | |
08078B2B AD lodsd | |
08078B2C 0879B1 or [ecx-0x4f],bh | |
08078B2F 3414 xor al,0x14 | |
08078B31 54 push esp | |
08078B32 D5D7 aad 0xd7 | |
08078B34 D3DB rcr ebx,cl | |
08078B36 CA98BB retf 0xbb98 | |
08078B39 2435 and al,0x35 | |
08078B3B 17 pop ss | |
08078B3C 52 push edx | |
08078B3D D9CF fxch st7 | |
08078B3F E2B8 loop 0x8078af9 | |
08078B41 0C65 or al,0x65 | |
08078B43 B610 mov dh,0x10 | |
08078B45 5D pop ebp | |
08078B46 D2 db 0xd2 | |
08078B47 F4 hlt | |
08078B48 EF out dx,eax | |
08078B49 58 pop eax | |
08078B4A E3BA jecxz 0x8078b06 | |
08078B4C 086CA421 or [esp+0x21],ch | |
08078B50 0154D5D7 add [ebp+edx*8-0x29],edx | |
08078B54 D3DB rcr ebx,cl | |
08078B56 CAE8AC retf 0xace8 | |
08078B59 54 push esp | |
08078B5A 2217 and dl,[edi] | |
08078B5C 52 push edx | |
08078B5D D9CF fxch st7 | |
08078B5F E2B8 loop 0x8078b19 | |
08078B61 0C65 or al,0x65 | |
08078B63 B610 mov dh,0x10 | |
08078B65 5D pop ebp | |
08078B66 C7 db 0xc7 | |
08078B67 F299 repne cdq | |
08078B69 5A pop edx | |
08078B6A E5CC in eax,0xcc | |
08078B6C 1D6CA43414 sbb eax,0x1434a46c | |
08078B71 54 push esp | |
08078B72 D5D7 aad 0xd7 | |
08078B74 D3ABDDE8AC24 shr dword [ebx+0x24ace8dd],cl | |
08078B7A 351752D9CF xor eax,0xcfd95217 | |
08078B7F E2B8 loop 0x8078b39 | |
08078B81 0C65 or al,0x65 | |
08078B83 B605 mov dh,0x5 | |
08078B85 5B pop ebx | |
08078B86 B1E5 mov cl,0xe5 | |
08078B88 99 cdq | |
08078B89 4F dec edi | |
08078B8A E3BA jecxz 0x8078b46 | |
08078B8C 1D79A43414 sbb eax,0x1434a479 | |
08078B91 54 push esp | |
08078B92 D5D7 aad 0xd7 | |
08078B94 D3DB rcr ebx,cl | |
08078B96 BAFFAC2435 mov edx,0x3524acff | |
08078B9B 17 pop ss | |
08078B9C 52 push edx | |
08078B9D D9CF fxch st7 | |
08078B9F E2B8 loop 0x8078b59 | |
08078BA1 0C65 or al,0x65 | |
08078BA3 B605 mov dh,0x5 | |
08078BA5 5B pop ebx | |
08078BA6 B1E5 mov cl,0xe5 | |
08078BA8 99 cdq | |
08078BA9 4F dec edi | |
08078BAA E3BA jecxz 0x8078b66 | |
08078BAC 0879B1 or [ecx-0x4f],bh | |
08078BAF 3414 xor al,0x14 | |
08078BB1 54 push esp | |
08078BB2 D5D7 aad 0xd7 | |
08078BB4 D3DB rcr ebx,cl | |
08078BB6 CA98BB retf 0xbb98 | |
08078BB9 2435 and al,0x35 | |
08078BBB 17 pop ss | |
08078BBC 52 push edx | |
08078BBD D9CF fxch st7 | |
08078BBF E2B8 loop 0x8078b79 | |
08078BC1 0C65 or al,0x65 | |
08078BC3 B610 mov dh,0x10 | |
08078BC5 5D pop ebp | |
08078BC6 D2 db 0xd2 | |
08078BC7 F4 hlt | |
08078BC8 EF out dx,eax | |
08078BC9 58 pop eax | |
08078BCA E3BA jecxz 0x8078b86 | |
08078BCC 086CA421 or [esp+0x21],ch | |
08078BD0 0154D5D7 add [ebp+edx*8-0x29],edx | |
08078BD4 D3DB rcr ebx,cl | |
08078BD6 CAE8AC retf 0xace8 | |
08078BD9 54 push esp | |
08078BDA 2217 and dl,[edi] | |
08078BDC 52 push edx | |
08078BDD D9CF fxch st7 | |
08078BDF E2B8 loop 0x8078b99 | |
08078BE1 0C65 or al,0x65 | |
08078BE3 B610 mov dh,0x10 | |
08078BE5 5D pop ebp | |
08078BE6 C7 db 0xc7 | |
08078BE7 E79F out 0x9f,eax | |
08078BE9 39F4 cmp esp,esi | |
08078BEB BA086CA434 mov edx,0x34a46c08 | |
08078BF0 0141D5 add [ecx-0x2b],eax | |
08078BF3 D7 xlatb | |
08078BF4 D3DB rcr ebx,cl | |
08078BF6 CAE8AC retf 0xace8 | |
08078BF9 2445 and al,0x45 | |
08078BFB 0052D9 add [edx-0x27],dl | |
08078BFE CF iretd | |
08078BFF E2B8 loop 0x8078bb9 | |
08078C01 0C65 or al,0x65 | |
08078C03 B610 mov dh,0x10 | |
08078C05 5D pop ebp | |
08078C06 C7 db 0xc7 | |
08078C07 F299 repne cdq | |
08078C09 5A pop edx | |
08078C0A E5CC in eax,0xcc | |
08078C0C 1F pop ds | |
08078C0D 6C insb | |
08078C0E A4 movsb | |
08078C0F 3414 xor al,0x14 | |
08078C11 54 push esp | |
08078C12 D5C2 aad 0xc2 | |
08078C14 C6 db 0xc6 | |
08078C15 DBCA fcmovne st2 | |
08078C17 E8AC243517 call dword 0x1f3cb0c8 | |
08078C1C 52 push edx | |
08078C1D A9D8E2B80C test eax,0xcb8e2d8 | |
08078C22 65B610 gs mov dh,0x10 | |
08078C25 5D pop ebp | |
08078C26 C7 db 0xc7 | |
08078C27 F299 repne cdq | |
08078C29 4F dec edi | |
08078C2A E3BA jecxz 0x8078be6 | |
08078C2C 0879A2 or [ecx-0x5e],bh | |
08078C2F 42 inc edx | |
08078C30 0354D5D7 add edx,[ebp+edx*8-0x29] | |
08078C34 D3CE ror esi,cl | |
08078C36 DFE8 fucomip st0 | |
08078C38 AC lodsb | |
08078C39 2435 and al,0x35 | |
08078C3B 17 pop ss | |
08078C3C 52 push edx | |
08078C3D D9CF fxch st7 | |
08078C3F 92 xchg eax,edx | |
08078C40 AF scasd | |
08078C41 0C65 or al,0x65 | |
08078C43 B610 mov dh,0x10 | |
08078C45 5D pop ebp | |
08078C46 C7 db 0xc7 | |
08078C47 F299 repne cdq | |
08078C49 4F dec edi | |
08078C4A E3BA jecxz 0x8078c06 | |
08078C4C 0879A2 or [ecx-0x5e],bh | |
08078C4F 42 inc edx | |
08078C50 0354D5D7 add edx,[ebp+edx*8-0x29] | |
08078C54 D3DB rcr ebx,cl | |
08078C56 DF db 0xdf | |
08078C57 FD std | |
08078C58 AC lodsb | |
08078C59 2435 and al,0x35 | |
08078C5B 17 pop ss | |
08078C5C 52 push edx | |
08078C5D D9CF fxch st7 | |
08078C5F E2C8 loop 0x8078c29 | |
08078C61 1B65B6 sbb esp,[ebp-0x4a] | |
08078C64 105DC7 adc [ebp-0x39],bl | |
08078C67 F299 repne cdq | |
08078C69 4F dec edi | |
08078C6A E3BA jecxz 0x8078c26 | |
08078C6C 086CB132 or [ecx+esi*4+0x32],ch | |
08078C70 62 db 0x62 | |
08078C71 43 inc ebx | |
08078C72 D5D7 aad 0xd7 | |
08078C74 D3DB rcr ebx,cl | |
08078C76 DF db 0xdf | |
08078C77 FD std | |
08078C78 AC lodsb | |
08078C79 2435 and al,0x35 | |
08078C7B 17 pop ss | |
08078C7C 22CE and cl,dh | |
08078C7E CF iretd | |
08078C7F E2AD loop 0x8078c2e | |
08078C81 0A13 or dl,[ebx] | |
08078C83 A1105DD2E7 mov eax,[0xe7d25d10] | |
08078C88 99 cdq | |
08078C89 4F dec edi | |
08078C8A 93 xchg eax,ebx | |
08078C8B AD lodsd | |
08078C8C 1D6AD22114 sbb eax,0x1421d26a | |
08078C91 54 push esp | |
08078C92 D5D7 aad 0xd7 | |
08078C94 A3CCCAE8B9 mov [0xb9e8cacc],eax | |
08078C99 224300 and al,[ebx+0x0] | |
08078C9C 52 push edx | |
08078C9D D9 db 0xd9 | |
08078C9E DA db 0xda | |
08078C9F F5 cmc | |
08078CA0 AF scasd | |
08078CA1 1B72A1 sbb esi,[edx-0x5f] | |
08078CA4 07 pop es | |
08078CA5 4A dec edx | |
08078CA6 D0E5 shl ch,1 | |
08078CA8 8E58F4 mov ds,[eax-0xc] | |
08078CAB AD lodsd | |
08078CAC 1F pop ds | |
08078CAD 7BB3 jpo 0x8078c62 | |
08078CAF 2303 and eax,[ebx] | |
08078CB1 43 inc ebx | |
08078CB2 C2C0C4 ret 0xc4c0 | |
08078CB5 CC int3 | |
08078CB6 CF iretd | |
08078CB7 FD std | |
08078CB8 A931300257 test eax,0x57023031 | |
08078CBD CC int3 | |
08078CBE CAF7BD retf 0xbdf7 | |
08078CC1 1960A3 sbb [eax-0x5d],esp | |
08078CC4 1548C2E79C adc eax,0x9ce7c248 | |
08078CC9 5A pop edx | |
08078CCA E6AF out 0xaf,al | |
08078CCC 0D79A12111 or eax,0x1121a179 | |
08078CD1 41 inc ecx | |
08078CD2 D0C2 rol dl,1 | |
08078CD4 D6 salc | |
08078CD5 CE into | |
08078CD6 CF iretd | |
08078CD7 FD std | |
08078CD8 A931300257 test eax,0x57023031 | |
08078CDD CC int3 | |
08078CDE CAF7BD retf 0xbdf7 | |
08078CE1 1960A3 sbb [eax-0x5d],esp |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment