0x1026480: MOV EAX,0xF1025287 0x1026485: LEA ECX,DWORD PTR [EAX+0x1000121C] 0x102648B: MOV DWORD PTR [ECX+0x1],EAX 0x102648E: MOV EDX,DWORD PTR [ESP+0x4] 0x1026492: MOV EDX,DWORD PTR [EDX+0xC] 0x1026495: MOV BYTE PTR [EDX],0xE9 0x1026498: ADD EDX,0x5 0x102649B: SUB ECX,EDX 0x102649D: MOV DWORD PTR [EDX-0x4],ECX 0x10264A0: XOR EAX,EAX 0x10264A2: RET ;******************************************************************************** 0x10264A3: MOV EAX,0x12345678 0x10264A8: POP DWORD PTR FS:[0x0] 0x10264AF: ADD ESP,0x4 0x10264B2: PUSH EBP 0x10264B3: PUSH EBX 0x10264B4: PUSH ECX 0x10264B5: PUSH EDI 0x10264B6: PUSH ESI 0x10264B7: PUSH EDX 0x10264B8: LEA EBX,DWORD PTR [EAX+0x100011D5] 0x10264BE: MOV EDX,DWORD PTR [EBX+0x18] 0x10264C1: PUSH EDX 0x10264C2: MOV EBP,EAX 0x10264C4: PUSH 0x40 0x10264C6: PUSH 0x1000 0x10264CB: PUSH DWORD PTR [EBX+0x4] 0x10264CE: PUSH 0x0 0x10264D0: MOV ECX,DWORD PTR [EBX+0x10] 0x10264D3: ADD ECX,EDX 0x10264D5: MOV EAX,DWORD PTR [ECX] 0x10264D7: CALL EAX 0x10264D9: POP EDX 0x10264DA: MOV EDI,EAX 0x10264DC: PUSH EAX 0x10264DD: PUSH EDX 0x10264DE: MOV ESI,DWORD PTR [EBX] 0x10264E0: MOV EAX,DWORD PTR [EBX+0x20] 0x10264E3: ADD EAX,EDX 0x10264E5: MOV ECX,DWORD PTR [EAX] 0x10264E7: MOV DWORD PTR [EBX+0x20],ECX 0x10264EA: MOV EAX,DWORD PTR [EBX+0x1C] 0x10264ED: ADD EAX,EDX 0x10264EF: MOV ECX,DWORD PTR [EAX] 0x10264F1: MOV DWORD PTR [EBX+0x1C],ECX 0x10264F4: ADD ESI,EDX 0x10264F6: MOV ECX,DWORD PTR [EBX+0xC] 0x10264F9: ADD ECX,EDX 0x10264FB: LEA EAX,DWORD PTR [EBX+0x1C] 0x10264FE: PUSH EAX 0x10264FF: PUSH EDI 0x1026500: PUSH ESI 0x1026501: CALL ECX 0x1026503: POP EDX 0x1026504: POP EAX 0x1026505: ADD EAX,DWORD PTR [EBX+0x8] 0x1026508: MOV EDI,EAX 0x102650A: PUSH EDX 0x102650B: MOV ESI,EAX 0x102650D: MOV EAX,DWORD PTR [ESI-0x4] 0x1026510: ADD EAX,0x4 0x1026513: SUB ESI,EAX 0x1026515: MOV DWORD PTR [ESI+0x8],EDX 0x1026518: MOV ECX,DWORD PTR [EBX+0x10] 0x102651B: MOV DWORD PTR [ESI+0x24],ECX 0x102651E: MOV ECX,DWORD PTR [EBX+0x14] 0x1026521: PUSH ECX 0x1026522: MOV DWORD PTR [ESI+0x28],ECX 0x1026525: MOV ECX,DWORD PTR [EBX+0xC] 0x1026528: MOV DWORD PTR [ESI+0x14],ECX 0x102652B: CALL EDI 0x102652D: MOV DWORD PTR [EBP+0x100012C8],EAX 0x1026533: MOV ESI,EAX 0x1026535: POP ECX 0x1026536: POP EDX 0x1026537: JMP 0x1026545 0x1026539: ADD ECX,EDX 0x102653B: PUSH 0x8000 0x1026540: PUSH 0x0 0x1026542: PUSH EDI 0x1026543: CALL DWORD PTR [ECX] 0x1026545: MOV EAX,ESI 0x1026547: POP EDX 0x1026548: POP ESI 0x1026549: POP EDI 0x102654A: POP ECX 0x102654B: POP EBX 0x102654C: POP EBP 0x102654D: JMP EAX