1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
[36m [0m[32m0x005005a0[0m [33m55[0m [35mpush[36m ebp[0m[0m[0m
[36m [0m[32m0x005005a1[0m [37m8b[37mec[0m [37mmov[36m ebp[0m,[36m[36m esp[0m[0m[0m
[36m [0m[32m0x005005a3[0m [37m83[37mec[33m20[0m [33msub[36m esp[0m,[36m[36m [33m0x20[0m[0m[0m
[36m [0m[32m0x005005a6[0m [37m8d[33m45[37me0[0m [37mlea[36m eax[0m,[36m [0m[[36mebp [0m-[36m[36m [33m0x20[0m][36m[0m[0m[0m
[36m [0m[32m0x005005a9[0m [33m50[0m [35mpush[36m eax[0m[0m[0m
[36m [0m[32m0x005005aa[0m [31mff[37m15[37m88[33m7b[33m6d[32m00[0m [1;32mcall dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus][0m[31m ; 0x6d7b88[0m
[36m [0m[32m0x005005b0[0m [37me8[37mfb[37mfd[31mff[31mff[0m [1;32mcall 0x5003b0[0m[0m
[36m [0m[32m0x005005b5[0m [33m3d[33m66[37mfd[31mff[31mff[0m [36mcmp[36m eax[0m,[36m[36m [33m0xfffffd66[0m[0m[31m ; 4294966630[0m
[36m [0m[32m0x005005ba[0m [37ma3[37mc4[37mdb[33m67[32m00[0m [37mmov dword[36m [0m[[36m[33m0x67dbc4[0m][36m[0m,[36m[36m eax[0m[0m[31m ; [0x67dbc4:4]=-1[0m
[36m ,=< [0m[32m0x005005bf[0m [33m75[37m0c[0m [32mjne 0x5005cd[0m[0m
[36m | [0m[32m0x005005c1[0m [37mc7[37m05[37mc4[37mdb[33m67[32m00[37m.[0m [37mmov dword[36m [0m[[36m[33m0x67dbc4[0m][36m[0m,[36m[36m [33m0[0m[0m[31m ; [0x67dbc4:4]=-1[0m
[36m ,==< [0m[32m0x005005cb[0m [37meb[37m0f[0m [32mjmp 0x5005dc[0m[0m
[36m |`-> [0m[32m0x005005cd[0m [37m83[37mf8[31mff[0m [36mcmp[36m eax[0m,[36m[36m [33m0xffffffffffffffff[0m[0m[0m
[36m |,=< [0m[32m0x005005d0[0m [33m75[37m0a[0m [32mjne 0x5005dc[0m[0m
[36m || [0m[32m0x005005d2[0m [37mc7[37m05[37mc4[37mdb[33m67[32m00[37m.[0m [37mmov dword[36m [0m[[36m[33m0x67dbc4[0m][36m[0m,[36m[36m [33m0xc8[0m[0m[31m ; [0x67dbc4:4]=-1[0m
[36m ``-> [0m[32m0x005005dc[0m [37m8b[33m45[37me8[0m [37mmov[36m eax[0m,[36m dword [0m[[36mebp [0m-[36m[36m [33m0x18[0m][36m[0m[0m[0m
[36m [0m[32m0x005005df[0m [37m8b[33m4d[37mf4[0m [37mmov[36m ecx[0m,[36m dword [0m[[36mebp [0m-[36m[36m [33m0xc[0m][36m[0m[0m[0m
[36m [0m[32m0x005005e2[0m [33m3d[32m00[32m00[37mc0[37m01[0m [36mcmp[36m eax[0m,[36m[36m [33m0x1c00000[0m[0m[0m
[36m [0m[32m0x005005e7[0m [37ma3[37mc8[37mdb[33m67[32m00[0m [37mmov dword[36m [0m[[36m[33m0x67dbc8[0m][36m[0m,[36m[36m eax[0m[0m[31m ; [0x67dbc8:4]=-1[0m
[36m [0m[32m0x005005ec[0m [37m89[37m0d[37mdc[37mdb[33m67[32m00[0m [37mmov dword[36m [0m[[36m[33m0x67dbdc[0m][36m[0m,[36m[36m ecx[0m[0m[31m ; [0x67dbdc:4]=-1[0m
[36m ,=< [0m[32m0x005005f2[0m [33m7d[37m12[0m [32mjge 0x500606[0m[0m
[36m | [0m[32m0x005005f4[0m [37m81[37mf9[32m00[32m00[37me0[37m01[0m [36mcmp[36m ecx[0m,[36m[36m [33m0x1e00000[0m[0m[0m
[36m ,==< [0m[32m0x005005fa[0m [33m7d[37m0a[0m [32mjge 0x500606[0m[0m
[36m || [0m[32m0x005005fc[0m [33m6a[32m00[0m [35mpush[36m [33m0[0m[0m[0m
[36m || [0m[32m0x005005fe[0m [37me8[37mad[33m28[37mf4[31mff[0m [1;32mcall 0x442eb0[0m[0m
[36m || [0m[32m0x00500603[0m [37m83[37mc4[37m04[0m [33madd[36m esp[0m,[36m[36m [33m4[0m[0m[0m
[36m ``-> [0m[32m0x00500606[0m [37m8b[33m45[37m08[0m [37mmov[36m eax[0m,[36m dword [0m[[36mebp [0m+[36m[36m [33m8[0m][36m[0m[0m[31m ; [0x8:4]=4[0m
[36m [0m[32m0x00500609[0m [33m56[0m [35mpush[36m esi[0m[0m[0m
[36m [0m[32m0x0050060a[0m [33m57[0m [35mpush[36m edi[0m[0m[0m
[36m [0m[32m0x0050060b[0m [37mb9[37m08[32m00[32m00[32m00[0m [37mmov[36m ecx[0m,[36m[36m [33m8[0m[0m[0m
[36m [0m[32m0x00500610[0m [37mbe[37mc0[37mdb[33m67[32m00[0m [37mmov[36m esi[0m,[36m[36m [33m0x67dbc0[0m[0m[0m
[36m [0m[32m0x00500615[0m [37m8b[37mf8[0m [37mmov[36m edi[0m,[36m[36m eax[0m[0m[0m
[36m [0m[32m0x00500617[0m [37mf3[37ma5[0m [37mrep movsd dword[36m es:[0m[[36medi[0m][36m[0m,[36m dword ptr[36m [0m[[36mesi[0m][36m[0m[0m[0m
[36m [0m[32m0x00500619[0m [33m5f[0m [1;35mpop[36m edi[0m[0m[0m
[36m [0m[32m0x0050061a[0m [33m5e[0m [1;35mpop[36m esi[0m[0m[0m
[36m [0m[32m0x0050061b[0m [37m8b[37me5[0m [37mmov[36m esp[0m,[36m[36m ebp[0m[0m[0m
[36m [0m[32m0x0050061d[0m [33m5d[0m [1;35mpop[36m ebp[0m[0m[0m
[36m [0m[32m0x0050061e[0m [37mc3[0m [31mret[0m[0m[0m
|
