-------------------- -------------------- -------------------- -------

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: Mach EDV Dienstleistungen, Jan Mach, 1 user, adv, 11/2007 |
; +-------------------------------------------------------------------------+
;
; Input MD5 : 71EDB8A5D367A606F38EC489EB378420
; ---------------------------------------------------------------------------
; File Name : /home/azq2/build/Heartbleed/1.bin
; Format : Binary file
; Base Address: 0000h Range: 0000h - 00E2h Loaded length: 00E2h
.686p
.mmx
.model flat
; ===========================================================================
; Segment type: Pure code
seg000 segment byte public 'CODE' use32
assume cs:seg000
assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing
push ss
add eax, [edx]
add ah, bl
add [eax], eax
add al, bl
add eax, [edx]
push ebx
inc ebx
pop ebx
nop
popf
wait
jb short loc_1E
mov esp, 922BBC0Ch
test al, 48h
xchg eax, edi
iret
; ---------------------------------------------------------------------------
db 0BDh ; ½
db 39h ; 9
; ---------------------------------------------------------------------------
loc_1E: ; CODE XREF: seg000:00000011j
add al, 0CCh ; 'Ì'
push ss
or al, [ebp+779F9003h]
add al, 33h ; '3'
aam 0DEh
; ---------------------------------------------------------------------------
db 0
; ---------------------------------------------------------------------------
add [esi-40h], ah
adc al, 0C0h ; 'À'
or al, al
and al, al
and [eax], eax
cmp [eax], eax
cmp [eax], al
mov [eax], al
nop
xadd ds:84003500h, al
rcl byte ptr [edx], 0C0h
or al, al
sbb al, 0C0h ; 'À'
sbb eax, [eax]
push ss
add [ebx], dl
ror byte ptr ds:0A0003C0h, 0C0h
adc eax, eax
or eax, eax
pop ds
rcr byte ptr [esi], 0
xor eax, [eax]
xor al, [eax]
call far ptr 4400h:45009900h
ror byte ptr [esi], 0C0h
add al, 0
das
add [esi+11C04100h], dl
rol byte ptr [edi], 0C0h
or al, 0C0h
add al, [eax]
add eax, 15000400h
add [edx], dl
add [ecx], cl
add [eax+eax], dl
adc [eax], eax
or [eax], al
push es
add [ebx], al
add bh, bh
add [eax], eax
add [ecx+0], cl
or eax, [eax]
add al, 3
add [ecx], al
add al, [eax]
or al, [eax]
xor al, 0
xor al, [eax]
push cs
add ds:0B001900h, cl
add [eax+eax], cl
sbb [eax], al
or [eax], eax
or al, [eax]
push ss
add [edi], dl
add [eax], cl
add [esi], al
add [edi], al
add [eax+eax], dl
adc eax, 5000400h
add [edx], dl
add [ebx], dl
add [ecx], al
add [edx], al
add [ebx], al
add [edi], cl
add [eax], dl
add [ecx], dl
add [ebx], ah
; ---------------------------------------------------------------------------
db 0
db 0
db 0
db 0Fh
db 0
db 1
db 1
db 0Ah
seg000 ends
end