Reconstruction of des.exe/undes.exe
This commit is contained in:
@@ -0,0 +1,598 @@
|
||||
|
||||
/mnt/data/undes.img: file format binary
|
||||
|
||||
|
||||
Disassembly of section .data:
|
||||
|
||||
000004b0 <.data+0x4b0>:
|
||||
4b0: c2 33 d2 ret 0xd233
|
||||
4b3: d3 e8 shr ax,cl
|
||||
4b5: cb retf
|
||||
4b6: 55 push bp
|
||||
4b7: 8b ec mov bp,sp
|
||||
4b9: 81 ec 26 05 sub sp,0x526
|
||||
4bd: 56 push si
|
||||
4be: 57 push di
|
||||
4bf: 1e push ds
|
||||
4c0: b8 49 0d mov ax,0xd49
|
||||
4c3: 8e d8 mov ds,ax
|
||||
4c5: 83 7e 06 02 cmp WORD PTR [bp+0x6],0x2
|
||||
4c9: 74 03 je 0x4ce
|
||||
4cb: e9 a0 00 jmp 0x56e
|
||||
4ce: 1e push ds
|
||||
4cf: b8 0c 00 mov ax,0xc
|
||||
4d2: 50 push ax
|
||||
4d3: c4 5e 08 les bx,DWORD PTR [bp+0x8]
|
||||
4d6: 26 ff 77 06 push WORD PTR es:[bx+0x6]
|
||||
4da: 26 ff 77 04 push WORD PTR es:[bx+0x4]
|
||||
4de: 9a 01 00 bb 0b call 0xbbb:0x1
|
||||
4e3: 83 c4 08 add sp,0x8
|
||||
4e6: 0b c0 or ax,ax
|
||||
4e8: 75 43 jne 0x52d
|
||||
4ea: b8 65 0d mov ax,0xd65
|
||||
4ed: 8e c0 mov es,ax
|
||||
4ef: 26 ff 36 0a 00 push WORD PTR es:0xa
|
||||
4f4: 26 ff 36 08 00 push WORD PTR es:0x8
|
||||
4f9: 1e push ds
|
||||
4fa: b8 18 00 mov ax,0x18
|
||||
4fd: 50 push ax
|
||||
4fe: 9a 08 00 da 0b call 0xbda:0x8
|
||||
503: 83 c4 08 add sp,0x8
|
||||
506: b8 65 0d mov ax,0xd65
|
||||
509: 8e c0 mov es,ax
|
||||
50b: 26 ff 36 12 00 push WORD PTR es:0x12
|
||||
510: 26 ff 36 10 00 push WORD PTR es:0x10
|
||||
515: 1e push ds
|
||||
516: b8 1d 00 mov ax,0x1d
|
||||
519: 50 push ax
|
||||
51a: 9a 08 00 da 0b call 0xbda:0x8
|
||||
51f: 83 c4 08 add sp,0x8
|
||||
522: 6a 00 push 0x0
|
||||
524: 9a 0d 00 58 0a call 0xa58:0xd
|
||||
529: 44 inc sp
|
||||
52a: 44 inc sp
|
||||
52b: eb 41 jmp 0x56e
|
||||
52d: 1e push ds
|
||||
52e: b8 20 00 mov ax,0x20
|
||||
531: 50 push ax
|
||||
532: c4 5e 08 les bx,DWORD PTR [bp+0x8]
|
||||
535: 26 ff 77 06 push WORD PTR es:[bx+0x6]
|
||||
539: 26 ff 77 04 push WORD PTR es:[bx+0x4]
|
||||
53d: 9a 01 00 bb 0b call 0xbbb:0x1
|
||||
542: 83 c4 08 add sp,0x8
|
||||
545: 0b c0 or ax,ax
|
||||
547: 75 25 jne 0x56e
|
||||
549: b8 65 0d mov ax,0xd65
|
||||
54c: 8e c0 mov es,ax
|
||||
54e: 26 ff 36 0a 00 push WORD PTR es:0xa
|
||||
553: 26 ff 36 08 00 push WORD PTR es:0x8
|
||||
558: 1e push ds
|
||||
559: b8 2a 00 mov ax,0x2a
|
||||
55c: 50 push ax
|
||||
55d: 9a 08 00 da 0b call 0xbda:0x8
|
||||
562: 83 c4 08 add sp,0x8
|
||||
565: 6a 00 push 0x0
|
||||
567: 9a 0d 00 58 0a call 0xa58:0xd
|
||||
56c: 44 inc sp
|
||||
56d: 44 inc sp
|
||||
56e: 83 7e 06 04 cmp WORD PTR [bp+0x6],0x4
|
||||
572: 74 3e je 0x5b2
|
||||
574: 1e push ds
|
||||
575: b8 96 00 mov ax,0x96
|
||||
578: 50 push ax
|
||||
579: 1e push ds
|
||||
57a: b8 7f 00 mov ax,0x7f
|
||||
57d: 50 push ax
|
||||
57e: 1e push ds
|
||||
57f: b8 66 00 mov ax,0x66
|
||||
582: 50 push ax
|
||||
583: 1e push ds
|
||||
584: b8 3b 00 mov ax,0x3b
|
||||
587: 50 push ax
|
||||
588: 1e push ds
|
||||
589: b8 2e 00 mov ax,0x2e
|
||||
58c: 50 push ax
|
||||
58d: b8 e6 11 mov ax,0x11e6
|
||||
590: 50 push ax
|
||||
591: b8 30 00 mov ax,0x30
|
||||
594: 50 push ax
|
||||
595: 9a 0a 00 9e 0c call 0xc9e:0xa
|
||||
59a: 83 c4 18 add sp,0x18
|
||||
59d: 83 7e 06 01 cmp WORD PTR [bp+0x6],0x1
|
||||
5a1: 75 04 jne 0x5a7
|
||||
5a3: 33 c0 xor ax,ax
|
||||
5a5: eb 03 jmp 0x5aa
|
||||
5a7: b8 02 00 mov ax,0x2
|
||||
5aa: 50 push ax
|
||||
5ab: 9a 0d 00 58 0a call 0xa58:0xd
|
||||
5b0: 44 inc sp
|
||||
5b1: 44 inc sp
|
||||
5b2: c4 5e 08 les bx,DWORD PTR [bp+0x8]
|
||||
5b5: 26 c4 5f 04 les bx,DWORD PTR es:[bx+0x4]
|
||||
5b9: 8c 46 f6 mov WORD PTR [bp-0xa],es
|
||||
5bc: 89 5e f4 mov WORD PTR [bp-0xc],bx
|
||||
5bf: c4 5e 08 les bx,DWORD PTR [bp+0x8]
|
||||
5c2: 26 c4 5f 08 les bx,DWORD PTR es:[bx+0x8]
|
||||
5c6: 8c 46 ee mov WORD PTR [bp-0x12],es
|
||||
5c9: 89 5e ec mov WORD PTR [bp-0x14],bx
|
||||
5cc: c4 5e 08 les bx,DWORD PTR [bp+0x8]
|
||||
5cf: 26 c4 5f 0c les bx,DWORD PTR es:[bx+0xc]
|
||||
5d3: 8c 46 f2 mov WORD PTR [bp-0xe],es
|
||||
5d6: 89 5e f0 mov WORD PTR [bp-0x10],bx
|
||||
5d9: 1e push ds
|
||||
5da: b8 bb 00 mov ax,0xbb
|
||||
5dd: 50 push ax
|
||||
5de: ff 76 ee push WORD PTR [bp-0x12]
|
||||
5e1: ff 76 ec push WORD PTR [bp-0x14]
|
||||
5e4: 9a 01 00 bb 0b call 0xbbb:0x1
|
||||
5e9: 83 c4 08 add sp,0x8
|
||||
5ec: 0b c0 or ax,ax
|
||||
5ee: 74 3b je 0x62b
|
||||
5f0: ff 76 f2 push WORD PTR [bp-0xe]
|
||||
5f3: ff 76 f0 push WORD PTR [bp-0x10]
|
||||
5f6: ff 76 ee push WORD PTR [bp-0x12]
|
||||
5f9: ff 76 ec push WORD PTR [bp-0x14]
|
||||
5fc: 9a 01 00 bb 0b call 0xbbb:0x1
|
||||
601: 83 c4 08 add sp,0x8
|
||||
604: 0b c0 or ax,ax
|
||||
606: 75 23 jne 0x62b
|
||||
608: 1e push ds
|
||||
609: b8 c1 00 mov ax,0xc1
|
||||
60c: 50 push ax
|
||||
60d: 1e push ds
|
||||
60e: b8 bd 00 mov ax,0xbd
|
||||
611: 50 push ax
|
||||
612: b8 e6 11 mov ax,0x11e6
|
||||
615: 50 push ax
|
||||
616: b8 30 00 mov ax,0x30
|
||||
619: 50 push ax
|
||||
61a: 9a 0a 00 9e 0c call 0xc9e:0xa
|
||||
61f: 83 c4 0c add sp,0xc
|
||||
622: 6a 01 push 0x1
|
||||
624: 9a 0d 00 58 0a call 0xa58:0xd
|
||||
629: 44 inc sp
|
||||
62a: 44 inc sp
|
||||
62b: 1e push ds
|
||||
62c: b8 ed 00 mov ax,0xed
|
||||
62f: 50 push ax
|
||||
630: ff 76 ee push WORD PTR [bp-0x12]
|
||||
633: ff 76 ec push WORD PTR [bp-0x14]
|
||||
636: 9a 01 00 bb 0b call 0xbbb:0x1
|
||||
63b: 83 c4 08 add sp,0x8
|
||||
63e: 0b c0 or ax,ax
|
||||
640: 75 0c jne 0x64e
|
||||
642: c7 46 fa e6 11 mov WORD PTR [bp-0x6],0x11e6
|
||||
647: c7 46 f8 08 00 mov WORD PTR [bp-0x8],0x8
|
||||
64c: eb 19 jmp 0x667
|
||||
64e: 1e push ds
|
||||
64f: b8 ef 00 mov ax,0xef
|
||||
652: 50 push ax
|
||||
653: ff 76 ee push WORD PTR [bp-0x12]
|
||||
656: ff 76 ec push WORD PTR [bp-0x14]
|
||||
659: 9a 47 02 b3 0a call 0xab3:0x247
|
||||
65e: 83 c4 08 add sp,0x8
|
||||
661: 89 56 fa mov WORD PTR [bp-0x6],dx
|
||||
664: 89 46 f8 mov WORD PTR [bp-0x8],ax
|
||||
667: 1e push ds
|
||||
668: b8 f2 00 mov ax,0xf2
|
||||
66b: 50 push ax
|
||||
66c: ff 76 f2 push WORD PTR [bp-0xe]
|
||||
66f: ff 76 f0 push WORD PTR [bp-0x10]
|
||||
672: 9a 01 00 bb 0b call 0xbbb:0x1
|
||||
677: 83 c4 08 add sp,0x8
|
||||
67a: 0b c0 or ax,ax
|
||||
67c: 75 0c jne 0x68a
|
||||
67e: c7 46 fe e6 11 mov WORD PTR [bp-0x2],0x11e6
|
||||
683: c7 46 fc 1c 00 mov WORD PTR [bp-0x4],0x1c
|
||||
688: eb 19 jmp 0x6a3
|
||||
68a: 1e push ds
|
||||
68b: b8 f4 00 mov ax,0xf4
|
||||
68e: 50 push ax
|
||||
68f: ff 76 f2 push WORD PTR [bp-0xe]
|
||||
692: ff 76 f0 push WORD PTR [bp-0x10]
|
||||
695: 9a 47 02 b3 0a call 0xab3:0x247
|
||||
69a: 83 c4 08 add sp,0x8
|
||||
69d: 89 56 fe mov WORD PTR [bp-0x2],dx
|
||||
6a0: 89 46 fc mov WORD PTR [bp-0x4],ax
|
||||
6a3: ff 76 ee push WORD PTR [bp-0x12]
|
||||
6a6: ff 76 ec push WORD PTR [bp-0x14]
|
||||
6a9: ff 76 fa push WORD PTR [bp-0x6]
|
||||
6ac: ff 76 f8 push WORD PTR [bp-0x8]
|
||||
6af: 9a 8e 00 a3 00 call 0xa3:0x8e
|
||||
6b4: 83 c4 08 add sp,0x8
|
||||
6b7: ff 76 f2 push WORD PTR [bp-0xe]
|
||||
6ba: ff 76 f0 push WORD PTR [bp-0x10]
|
||||
6bd: ff 76 fe push WORD PTR [bp-0x2]
|
||||
6c0: ff 76 fc push WORD PTR [bp-0x4]
|
||||
6c3: 9a 8e 00 a3 00 call 0xa3:0x8e
|
||||
6c8: 83 c4 08 add sp,0x8
|
||||
6cb: c7 86 7a fd 03 00 mov WORD PTR [bp-0x286],0x3
|
||||
6d1: c7 86 7c fd 03 00 mov WORD PTR [bp-0x284],0x3
|
||||
6d7: c7 86 ea fe 01 00 mov WORD PTR [bp-0x116],0x1
|
||||
6dd: 68 00 40 push 0x4000
|
||||
6e0: 9a 00 00 61 0a call 0xa61:0x0
|
||||
6e5: 44 inc sp
|
||||
6e6: 44 inc sp
|
||||
6e7: 89 96 e0 fe mov WORD PTR [bp-0x120],dx
|
||||
6eb: 89 86 de fe mov WORD PTR [bp-0x122],ax
|
||||
6ef: c4 9e de fe les bx,DWORD PTR [bp-0x122]
|
||||
6f3: 83 c3 08 add bx,0x8
|
||||
6f6: 8c 86 e4 fe mov WORD PTR [bp-0x11c],es
|
||||
6fa: 89 9e e2 fe mov WORD PTR [bp-0x11e],bx
|
||||
6fe: 8b 86 de fe mov ax,WORD PTR [bp-0x122]
|
||||
702: 0b 86 e0 fe or ax,WORD PTR [bp-0x120]
|
||||
706: 75 1e jne 0x726
|
||||
708: 1e push ds
|
||||
709: b8 f7 00 mov ax,0xf7
|
||||
70c: 50 push ax
|
||||
70d: b8 e6 11 mov ax,0x11e6
|
||||
710: 50 push ax
|
||||
711: b8 30 00 mov ax,0x30
|
||||
714: 50 push ax
|
||||
715: 9a 0a 00 9e 0c call 0xc9e:0xa
|
||||
71a: 83 c4 08 add sp,0x8
|
||||
71d: 6a 01 push 0x1
|
||||
71f: 9a 0d 00 58 0a call 0xa58:0xd
|
||||
724: 44 inc sp
|
||||
725: 44 inc sp
|
||||
726: c4 9e de fe les bx,DWORD PTR [bp-0x122]
|
||||
72a: 8c 86 e8 fe mov WORD PTR [bp-0x118],es
|
||||
72e: 89 9e e6 fe mov WORD PTR [bp-0x11a],bx
|
||||
732: 9a 2a 07 b7 00 call 0xb7:0x72a
|
||||
737: 16 push ss
|
||||
738: 8d 86 7e fd lea ax,[bp-0x282]
|
||||
73c: 50 push ax
|
||||
73d: ff b6 7c fd push WORD PTR [bp-0x284]
|
||||
741: ff b6 7a fd push WORD PTR [bp-0x286]
|
||||
745: 9a 58 05 b7 00 call 0xb7:0x558
|
||||
74a: 83 c4 08 add sp,0x8
|
||||
74d: 8b 86 8a fd mov ax,WORD PTR [bp-0x276]
|
||||
751: 89 86 d6 fe mov WORD PTR [bp-0x12a],ax
|
||||
755: 8b 86 90 fd mov ax,WORD PTR [bp-0x270]
|
||||
759: 89 86 d8 fe mov WORD PTR [bp-0x128],ax
|
||||
75d: 33 ff xor di,di
|
||||
75f: eb 0b jmp 0x76c
|
||||
761: c4 5e f4 les bx,DWORD PTR [bp-0xc]
|
||||
764: 26 8a 01 mov al,BYTE PTR es:[bx+di]
|
||||
767: 88 83 96 fd mov BYTE PTR [bp+di-0x26a],al
|
||||
76b: 47 inc di
|
||||
76c: 3b be d6 fe cmp di,WORD PTR [bp-0x12a]
|
||||
770: 7d 09 jge 0x77b
|
||||
772: c4 5e f4 les bx,DWORD PTR [bp-0xc]
|
||||
775: 26 80 39 00 cmp BYTE PTR es:[bx+di],0x0
|
||||
779: 75 e6 jne 0x761
|
||||
77b: eb 06 jmp 0x783
|
||||
77d: c6 83 96 fd 00 mov BYTE PTR [bp+di-0x26a],0x0
|
||||
782: 47 inc di
|
||||
783: 3b be d6 fe cmp di,WORD PTR [bp-0x12a]
|
||||
787: 7c f4 jl 0x77d
|
||||
789: b8 65 0d mov ax,0xd65
|
||||
78c: 8e c0 mov es,ax
|
||||
78e: 26 c7 06 0e 00 ff ff mov WORD PTR es:0xe,0xffff
|
||||
795: 26 c7 06 0c 00 ff ff mov WORD PTR es:0xc,0xffff
|
||||
79c: c4 5e f8 les bx,DWORD PTR [bp-0x8]
|
||||
79f: 26 8a 47 04 mov al,BYTE PTR es:[bx+0x4]
|
||||
7a3: 98 cbw
|
||||
7a4: 89 86 dc fe mov WORD PTR [bp-0x124],ax
|
||||
7a8: 6a 04 push 0x4
|
||||
7aa: b8 65 0d mov ax,0xd65
|
||||
7ad: 50 push ax
|
||||
7ae: b8 0c 00 mov ax,0xc
|
||||
7b1: 50 push ax
|
||||
7b2: ff b6 dc fe push WORD PTR [bp-0x124]
|
||||
7b6: 9a 07 00 53 0b call 0xb53:0x7
|
||||
7bb: 83 c4 08 add sp,0x8
|
||||
7be: 89 86 da fe mov WORD PTR [bp-0x126],ax
|
||||
7c2: ff b6 da fe push WORD PTR [bp-0x126]
|
||||
7c6: 9a 0f 00 a3 00 call 0xa3:0xf
|
||||
7cb: 44 inc sp
|
||||
7cc: 44 inc sp
|
||||
7cd: b8 65 0d mov ax,0xd65
|
||||
7d0: 8e c0 mov es,ax
|
||||
7d2: 26 ff 36 0e 00 push WORD PTR es:0xe
|
||||
7d7: 26 ff 36 0c 00 push WORD PTR es:0xc
|
||||
7dc: 9a 03 00 b0 00 call 0xb0:0x3
|
||||
7e1: 83 c4 04 add sp,0x4
|
||||
7e4: ff b6 7c fd push WORD PTR [bp-0x284]
|
||||
7e8: ff b6 7a fd push WORD PTR [bp-0x286]
|
||||
7ec: 16 push ss
|
||||
7ed: 8d 86 de fa lea ax,[bp-0x522]
|
||||
7f1: 50 push ax
|
||||
7f2: 9a 48 07 b7 00 call 0xb7:0x748
|
||||
7f7: 83 c4 08 add sp,0x8
|
||||
7fa: ff b6 d6 fe push WORD PTR [bp-0x12a]
|
||||
7fe: 16 push ss
|
||||
7ff: 8d 86 96 fd lea ax,[bp-0x26a]
|
||||
803: 50 push ax
|
||||
804: 16 push ss
|
||||
805: 8d 86 de fa lea ax,[bp-0x522]
|
||||
809: 50 push ax
|
||||
80a: 9a b7 09 b7 00 call 0xb7:0x9b7
|
||||
80f: 83 c4 0a add sp,0xa
|
||||
812: 16 push ss
|
||||
813: 8d 86 7e fd lea ax,[bp-0x282]
|
||||
817: 50 push ax
|
||||
818: 16 push ss
|
||||
819: 8d 86 de fa lea ax,[bp-0x522]
|
||||
81d: 50 push ax
|
||||
81e: 9a de 06 b7 00 call 0xb7:0x6de
|
||||
823: 83 c4 08 add sp,0x8
|
||||
826: 8b 86 90 fd mov ax,WORD PTR [bp-0x270]
|
||||
82a: 89 86 d8 fe mov WORD PTR [bp-0x128],ax
|
||||
82e: ff b6 d8 fe push WORD PTR [bp-0x128]
|
||||
832: 16 push ss
|
||||
833: 8d 86 96 fe lea ax,[bp-0x16a]
|
||||
837: 50 push ax
|
||||
838: ff b6 dc fe push WORD PTR [bp-0x124]
|
||||
83c: 9a 07 00 53 0b call 0xb53:0x7
|
||||
841: 83 c4 08 add sp,0x8
|
||||
844: 89 86 da fe mov WORD PTR [bp-0x126],ax
|
||||
848: ff b6 da fe push WORD PTR [bp-0x126]
|
||||
84c: 9a 0f 00 a3 00 call 0xa3:0xf
|
||||
851: 44 inc sp
|
||||
852: 44 inc sp
|
||||
853: ff b6 d8 fe push WORD PTR [bp-0x128]
|
||||
857: 16 push ss
|
||||
858: 8d 86 96 fe lea ax,[bp-0x16a]
|
||||
85c: 50 push ax
|
||||
85d: 16 push ss
|
||||
85e: 8d 86 de fa lea ax,[bp-0x522]
|
||||
862: 50 push ax
|
||||
863: 9a 90 0a b7 00 call 0xb7:0xa90
|
||||
868: 83 c4 0a add sp,0xa
|
||||
86b: 68 00 01 push 0x100
|
||||
86e: 16 push ss
|
||||
86f: 8d 86 ec fe lea ax,[bp-0x114]
|
||||
873: 50 push ax
|
||||
874: ff b6 dc fe push WORD PTR [bp-0x124]
|
||||
878: 9a 07 00 53 0b call 0xb53:0x7
|
||||
87d: 83 c4 08 add sp,0x8
|
||||
880: 89 86 da fe mov WORD PTR [bp-0x126],ax
|
||||
884: ff b6 da fe push WORD PTR [bp-0x126]
|
||||
888: 9a 0f 00 a3 00 call 0xa3:0xf
|
||||
88d: 44 inc sp
|
||||
88e: 44 inc sp
|
||||
88f: 68 00 40 push 0x4000
|
||||
892: ff b6 e0 fe push WORD PTR [bp-0x120]
|
||||
896: ff b6 de fe push WORD PTR [bp-0x122]
|
||||
89a: ff b6 dc fe push WORD PTR [bp-0x124]
|
||||
89e: 9a 07 00 53 0b call 0xb53:0x7
|
||||
8a3: 83 c4 08 add sp,0x8
|
||||
8a6: 89 86 da fe mov WORD PTR [bp-0x126],ax
|
||||
8aa: ff b6 da fe push WORD PTR [bp-0x126]
|
||||
8ae: 9a 0f 00 a3 00 call 0xa3:0xf
|
||||
8b3: 44 inc sp
|
||||
8b4: 44 inc sp
|
||||
8b5: e9 f5 00 jmp 0x9ad
|
||||
8b8: 68 00 40 push 0x4000
|
||||
8bb: ff b6 e0 fe push WORD PTR [bp-0x120]
|
||||
8bf: ff b6 de fe push WORD PTR [bp-0x122]
|
||||
8c3: 16 push ss
|
||||
8c4: 8d 86 de fa lea ax,[bp-0x522]
|
||||
8c8: 50 push ax
|
||||
8c9: 9a ec 0c b7 00 call 0xb7:0xcec
|
||||
8ce: 83 c4 0a add sp,0xa
|
||||
8d1: c4 9e e6 fe les bx,DWORD PTR [bp-0x11a]
|
||||
8d5: 26 8b 57 02 mov dx,WORD PTR es:[bx+0x2]
|
||||
8d9: 26 8b 07 mov ax,WORD PTR es:[bx]
|
||||
8dc: 89 96 dc fa mov WORD PTR [bp-0x524],dx
|
||||
8e0: 89 86 da fa mov WORD PTR [bp-0x526],ax
|
||||
8e4: 83 be dc fa 00 cmp WORD PTR [bp-0x524],0x0
|
||||
8e9: 7f 15 jg 0x900
|
||||
8eb: 7c 07 jl 0x8f4
|
||||
8ed: 83 be da fa 00 cmp WORD PTR [bp-0x526],0x0
|
||||
8f2: 73 0c jae 0x900
|
||||
8f4: c7 86 dc fa 00 00 mov WORD PTR [bp-0x524],0x0
|
||||
8fa: c7 86 da fa f8 3f mov WORD PTR [bp-0x526],0x3ff8
|
||||
900: 83 be ea fe 00 cmp WORD PTR [bp-0x116],0x0
|
||||
905: 74 56 je 0x95d
|
||||
907: 68 00 01 push 0x100
|
||||
90a: 16 push ss
|
||||
90b: 8d 86 ec fe lea ax,[bp-0x114]
|
||||
90f: 50 push ax
|
||||
910: 16 push ss
|
||||
911: 8d 86 de fa lea ax,[bp-0x522]
|
||||
915: 50 push ax
|
||||
916: 9a ec 0c b7 00 call 0xb7:0xcec
|
||||
91b: 83 c4 0a add sp,0xa
|
||||
91e: 33 f6 xor si,si
|
||||
920: eb 01 jmp 0x923
|
||||
922: 46 inc si
|
||||
923: 3b b6 d6 fe cmp si,WORD PTR [bp-0x12a]
|
||||
927: 7d 0a jge 0x933
|
||||
929: 8a 82 ec fe mov al,BYTE PTR [bp+si-0x114]
|
||||
92d: 3a 82 96 fd cmp al,BYTE PTR [bp+si-0x26a]
|
||||
931: 74 ef je 0x922
|
||||
933: 3b b6 d6 fe cmp si,WORD PTR [bp-0x12a]
|
||||
937: 74 1e je 0x957
|
||||
939: 1e push ds
|
||||
93a: b8 0e 01 mov ax,0x10e
|
||||
93d: 50 push ax
|
||||
93e: b8 e6 11 mov ax,0x11e6
|
||||
941: 50 push ax
|
||||
942: b8 30 00 mov ax,0x30
|
||||
945: 50 push ax
|
||||
946: 9a 0a 00 9e 0c call 0xc9e:0xa
|
||||
94b: 83 c4 08 add sp,0x8
|
||||
94e: 6a 01 push 0x1
|
||||
950: 9a 0d 00 58 0a call 0xa58:0xd
|
||||
955: 44 inc sp
|
||||
956: 44 inc sp
|
||||
957: c7 86 ea fe 00 00 mov WORD PTR [bp-0x116],0x0
|
||||
95d: ff 76 fe push WORD PTR [bp-0x2]
|
||||
960: ff 76 fc push WORD PTR [bp-0x4]
|
||||
963: 6a 01 push 0x1
|
||||
965: ff b6 da fa push WORD PTR [bp-0x526]
|
||||
969: ff b6 e4 fe push WORD PTR [bp-0x11c]
|
||||
96d: ff b6 e2 fe push WORD PTR [bp-0x11e]
|
||||
971: 9a 0c 00 63 0b call 0xb63:0xc
|
||||
976: 83 c4 0c add sp,0xc
|
||||
979: ff 76 fe push WORD PTR [bp-0x2]
|
||||
97c: ff 76 fc push WORD PTR [bp-0x4]
|
||||
97f: 9a 4c 00 a3 00 call 0xa3:0x4c
|
||||
984: 83 c4 04 add sp,0x4
|
||||
987: 68 00 40 push 0x4000
|
||||
98a: ff b6 e0 fe push WORD PTR [bp-0x120]
|
||||
98e: ff b6 de fe push WORD PTR [bp-0x122]
|
||||
992: ff b6 dc fe push WORD PTR [bp-0x124]
|
||||
996: 9a 07 00 53 0b call 0xb53:0x7
|
||||
99b: 83 c4 08 add sp,0x8
|
||||
99e: 89 86 da fe mov WORD PTR [bp-0x126],ax
|
||||
9a2: ff b6 da fe push WORD PTR [bp-0x126]
|
||||
9a6: 9a 0f 00 a3 00 call 0xa3:0xf
|
||||
9ab: 44 inc sp
|
||||
9ac: 44 inc sp
|
||||
9ad: 83 be da fe 00 cmp WORD PTR [bp-0x126],0x0
|
||||
9b2: 74 03 je 0x9b7
|
||||
9b4: e9 01 ff jmp 0x8b8
|
||||
9b7: 6a 00 push 0x0
|
||||
9b9: ff b6 e0 fe push WORD PTR [bp-0x120]
|
||||
9bd: ff b6 de fe push WORD PTR [bp-0x122]
|
||||
9c1: 16 push ss
|
||||
9c2: 8d 86 de fa lea ax,[bp-0x522]
|
||||
9c6: 50 push ax
|
||||
9c7: 9a ec 0c b7 00 call 0xb7:0xcec
|
||||
9cc: 83 c4 0a add sp,0xa
|
||||
9cf: 16 push ss
|
||||
9d0: 8d 86 de fa lea ax,[bp-0x522]
|
||||
9d4: 50 push ax
|
||||
9d5: 9a 32 09 b7 00 call 0xb7:0x932
|
||||
9da: 83 c4 04 add sp,0x4
|
||||
9dd: 9a 38 07 b7 00 call 0xb7:0x738
|
||||
9e2: ff b6 e0 fe push WORD PTR [bp-0x120]
|
||||
9e6: ff b6 de fe push WORD PTR [bp-0x122]
|
||||
9ea: 9a 06 00 61 0c call 0xc61:0x6
|
||||
9ef: 83 c4 04 add sp,0x4
|
||||
9f2: 8b 56 fa mov dx,WORD PTR [bp-0x6]
|
||||
9f5: 8b 46 f8 mov ax,WORD PTR [bp-0x8]
|
||||
9f8: bb 08 00 mov bx,0x8
|
||||
9fb: b9 e6 11 mov cx,0x11e6
|
||||
9fe: 3b d1 cmp dx,cx
|
||||
a00: 75 04 jne 0xa06
|
||||
a02: 3b c3 cmp ax,bx
|
||||
a04: 74 0e je 0xa14
|
||||
a06: ff 76 fa push WORD PTR [bp-0x6]
|
||||
a09: ff 76 f8 push WORD PTR [bp-0x8]
|
||||
a0c: 9a 0b 00 36 0b call 0xb36:0xb
|
||||
a11: 83 c4 04 add sp,0x4
|
||||
a14: 8b 56 fe mov dx,WORD PTR [bp-0x2]
|
||||
a17: 8b 46 fc mov ax,WORD PTR [bp-0x4]
|
||||
a1a: bb 1c 00 mov bx,0x1c
|
||||
a1d: b9 e6 11 mov cx,0x11e6
|
||||
a20: 3b d1 cmp dx,cx
|
||||
a22: 75 04 jne 0xa28
|
||||
a24: 3b c3 cmp ax,bx
|
||||
a26: 74 0e je 0xa36
|
||||
a28: ff 76 fe push WORD PTR [bp-0x2]
|
||||
a2b: ff 76 fc push WORD PTR [bp-0x4]
|
||||
a2e: 9a 0b 00 36 0b call 0xb36:0xb
|
||||
a33: 83 c4 04 add sp,0x4
|
||||
a36: 33 c0 xor ax,ax
|
||||
a38: eb 00 jmp 0xa3a
|
||||
a3a: 1f pop ds
|
||||
a3b: 5f pop di
|
||||
a3c: 5e pop si
|
||||
a3d: c9 leave
|
||||
a3e: cb retf
|
||||
a3f: 55 push bp
|
||||
a40: 8b ec mov bp,sp
|
||||
a42: 1e push ds
|
||||
a43: b8 5d 0d mov ax,0xd5d
|
||||
a46: 8e d8 mov ds,ax
|
||||
a48: 83 7e 06 ff cmp WORD PTR [bp+0x6],0xffff
|
||||
a4c: 75 2b jne 0xa79
|
||||
a4e: 1e push ds
|
||||
a4f: b8 00 00 mov ax,0x0
|
||||
a52: 50 push ax
|
||||
a53: b8 e6 11 mov ax,0x11e6
|
||||
a56: 50 push ax
|
||||
a57: b8 30 00 mov ax,0x30
|
||||
a5a: 50 push ax
|
||||
a5b: 9a 0a 00 9e 0c call 0xc9e:0xa
|
||||
a60: 83 c4 08 add sp,0x8
|
||||
a63: 1e push ds
|
||||
a64: b8 27 00 mov ax,0x27
|
||||
a67: 50 push ax
|
||||
a68: 9a 0f 00 b9 0c call 0xcb9:0xf
|
||||
a6d: 83 c4 04 add sp,0x4
|
||||
a70: 6a 03 push 0x3
|
||||
a72: 9a 0d 00 58 0a call 0xa58:0xd
|
||||
a77: 44 inc sp
|
||||
a78: 44 inc sp
|
||||
a79: 1f pop ds
|
||||
a7a: 5d pop bp
|
||||
a7b: cb retf
|
||||
a7c: 55 push bp
|
||||
a7d: 8b ec mov bp,sp
|
||||
a7f: 1e push ds
|
||||
a80: b8 5d 0d mov ax,0xd5d
|
||||
a83: 8e d8 mov ds,ax
|
||||
a85: c4 5e 06 les bx,DWORD PTR [bp+0x6]
|
||||
a88: 26 f7 47 02 10 00 test WORD PTR es:[bx+0x2],0x10
|
||||
a8e: 74 2b je 0xabb
|
||||
a90: 1e push ds
|
||||
a91: b8 30 00 mov ax,0x30
|
||||
a94: 50 push ax
|
||||
a95: b8 e6 11 mov ax,0x11e6
|
||||
a98: 50 push ax
|
||||
a99: b8 30 00 mov ax,0x30
|
||||
a9c: 50 push ax
|
||||
a9d: 9a 0a 00 9e 0c call 0xc9e:0xa
|
||||
aa2: 83 c4 08 add sp,0x8
|
||||
aa5: 1e push ds
|
||||
aa6: b8 58 00 mov ax,0x58
|
||||
aa9: 50 push ax
|
||||
aaa: 9a 0f 00 b9 0c call 0xcb9:0xf
|
||||
aaf: 83 c4 04 add sp,0x4
|
||||
ab2: 6a 03 push 0x3
|
||||
ab4: 9a 0d 00 58 0a call 0xa58:0xd
|
||||
ab9: 44 inc sp
|
||||
aba: 44 inc sp
|
||||
abb: 1f pop ds
|
||||
abc: 5d pop bp
|
||||
abd: cb retf
|
||||
abe: 55 push bp
|
||||
abf: 8b ec mov bp,sp
|
||||
ac1: 1e push ds
|
||||
ac2: b8 5d 0d mov ax,0xd5d
|
||||
ac5: 8e d8 mov ds,ax
|
||||
ac7: 8b 46 06 mov ax,WORD PTR [bp+0x6]
|
||||
aca: 0b 46 08 or ax,WORD PTR [bp+0x8]
|
||||
acd: 75 31 jne 0xb00
|
||||
acf: ff 76 0c push WORD PTR [bp+0xc]
|
||||
ad2: ff 76 0a push WORD PTR [bp+0xa]
|
||||
ad5: 1e push ds
|
||||
ad6: b8 61 00 mov ax,0x61
|
||||
ad9: 50 push ax
|
||||
ada: b8 e6 11 mov ax,0x11e6
|
||||
add: 50 push ax
|
||||
ade: b8 30 00 mov ax,0x30
|
||||
ae1: 50 push ax
|
||||
ae2: 9a 0a 00 9e 0c call 0xc9e:0xa
|
||||
ae7: 83 c4 0c add sp,0xc
|
||||
aea: 1e push ds
|
||||
aeb: b8 7e 00 mov ax,0x7e
|
||||
aee: 50 push ax
|
||||
aef: 9a 0f 00 b9 0c call 0xcb9:0xf
|
||||
af4: 83 c4 04 add sp,0x4
|
||||
af7: 6a 03 push 0x3
|
||||
af9: 9a 0d 00 58 0a call 0xa58:0xd
|
||||
afe: 44 inc sp
|
||||
aff: 44 inc sp
|
||||
b00: 1f pop ds
|
||||
b01: 5d pop bp
|
||||
b02: cb retf
|
||||
b03: 55 push bp
|
||||
b04: 8b ec mov bp,sp
|
||||
b06: 56 push si
|
||||
b07: 1e push ds
|
||||
b08: b8 65 0d mov ax,0xd65
|
||||
b0b: 8e d8 mov ds,ax
|
||||
b0d: 33 f6 xor si,si
|
||||
b0f: eb 01 jmp 0xb12
|
||||
b11: 46 inc si
|
||||
b12: 8b de mov bx,si
|
||||
b14: c1 e3 02 shl bx,0x2
|
||||
b17: 8b 97 16 00 mov dx,WORD PTR [bx+0x16]
|
||||
b1b: 8b 87 14 00 mov ax,WORD PTR [bx+0x14]
|
||||
b1f: 3b cmp dx,WORD PTR [bp+0x8]
|
||||
Reference in New Issue
Block a user