If anyone knows what's the feature - explain to me, please.
I opened the disassembled binary code of several modules. All modules have a strange combination of assembler commands, by sending the value of the memory cell in the EAX register and the back of the EAX register to the memory location.
Below is an example of such a disassembled binary code.
Code: Select all
PROCEDURE $$
00000000H: 55 push ebp
00000001H: 8B EC mov ebp, esp
00000003H: 57 push edi
00000004H: 56 push esi
00000005H: 66|A1 00 00 00 64 mov ax, [1677721600] (*!!!!!!!!!!!!!!!!!!!!!!!!!!!! 1*)
0000000BH: 66|A3 00 00 00 64 mov [1677721600], ax(*!!!!!!!!!!!!!!!!!!!!!!!!!!!!*)
00000011H: 66|A1 00 00 00 64 mov ax, [1677721600](*!!!!!!!!!!!!!!!!!!!!!!!!!!!! repeat 1*)
00000017H: 66|A3 00 00 00 64 mov [1677721600], ax(*!!!!!!!!!!!!!!!!!!!!!!!!!!!! not necessary!*)
0000001DH: 50 push eax
0000001EH: 66|A1 0D 00 00 64 mov ax, [1677721613]
00000024H: 50 push eax
00000025H: 68 00 00 00 64 push 1677721600
0000002AH: 68 00 00 00 64 push 1677721600
0000002FH: FF 15 00 00 00 64 call [1677721600]
00000035H: 66|A1 00 00 00 64 mov ax, [1677721600](*!!!!!!!!!!!!!!!!!!!!!!!!!!!! 2*)
0000003BH: 66|A3 20 00 00 64 mov [1677721632], ax(*!!!!!!!!!!!!!!!!!!!!!!!!!!!!*)
00000041H: 66|A1 00 00 00 64 mov ax, [1677721600](*!!!!!!!!!!!!!!!!!!!!!!!!!!!! repeat 2, not necessary!*)
00000047H: 66|A3 19 00 00 64 mov [1677721625], ax(*!!!!!!!!!!!!!!!!!!!!!!!!!!!! *)
0000004DH: 50 push eax
0000004EH: 66|A1 3D 00 00 64 mov ax, [1677721661]
00000054H: 50 push eax
00000055H: 68 00 00 00 64 push 1677721600
0000005AH: 68 00 00 00 64 push 1677721600
0000005FH: FF 15 00 00 00 64 call [1677721600]
00000065H: C6 05 00 00 00 64 00 mov [1677721600], 0
0000006CH: 66|A1 00 00 00 64 mov ax, [1677721600](*!!!!!!!!!!!!!!!!!!!!!!!!!!!! 3* not otimized! this equ xor ax,ax*)
00000072H: 66|A3 50 00 00 64 mov [1677721680], ax(*!!!!!!!!!!!!!!!!!!!!!!!!!!!!*)
00000078H: 66|A1 00 00 00 64 mov ax, [1677721600](*!!!!!!!!!!!!!!!!!!!!!!!!!!!! repeat 3, not necessary!*)
0000007EH: 66|A3 49 00 00 64 mov [1677721673], ax(*!!!!!!!!!!!!!!!!!!!!!!!!!!!!*)
00000084H: 50 push eax
00000085H: 66|A1 74 00 00 64 mov ax, [1677721716]
0000008BH: 50 push eax
0000008CH: 68 26 00 00 64 push 1677721638
00000091H: 68 00 00 00 64 push 1677721600
00000096H: FF 15 31 00 00 64 call [1677721649]
0000009CH: 66|A1 00 00 00 64 mov ax, [1677721600](*!!!!!!!!!!!!!!!!!!!!!!!!!!!! 4*)
000000A2H: 66|A3 87 00 00 64 mov [1677721735], ax(*!!!!!!!!!!!!!!!!!!!!!!!!!!!!*)
000000A8H: 66|A1 00 00 00 64 mov ax, [1677721600](*!!!!!!!!!!!!!!!!!!!!!!!!!!!! repeat 4, not necessary!*)
000000AEH: 66|A3 80 00 00 64 mov [1677721728], ax(*!!!!!!!!!!!!!!!!!!!!!!!!!!!!*)
000000B4H: 50 push eax
000000B5H: 66|A1 A4 00 00 64 mov ax, [1677721764]
000000BBH: 50 push eax
000000BCH: 68 56 00 00 64 push 1677721686
000000C1H: 68 00 00 00 64 push 1677721600
000000C6H: FF 15 61 00 00 64 call [1677721697]
000000CCH: C6 05 00 00 00 64 00 mov [1677721600], 0
000000D3H: 5E pop esi
000000D4H: 5F pop edi
000000D5H: 8B E5 mov esp, ebp
000000D7H: 5D pop ebp
000000D8H: C3 ret