Advertisement
Guest User

hints

a guest
Jul 22nd, 2011
1,095
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 22.77 KB | None | 0 0
  1. STUB_FUNC_SAVE_SK
  2. STUB_FUNC_GET_SC
  3. STUB_FUNC_CK
  4. STUB_FUNC_GETAUTH...
  5.  
  6. [CODE]00402D5E 8A5424 2E MOV DL,BYTE PTR SS:[ESP+2E] ; ENCRYPT_SITE_CODE
  7. 00402D62 B1 46 MOV CL,46
  8. 00402D64 885424 4C MOV BYTE PTR SS:[ESP+4C],DL
  9. 00402D68 8A5424 34 MOV DL,BYTE PTR SS:[ESP+34]
  10. 00402D6C 885424 4F MOV BYTE PTR SS:[ESP+4F],DL
  11. 00402D70 8A5424 15 MOV DL,BYTE PTR SS:[ESP+15]
  12. 00402D74 885424 51 MOV BYTE PTR SS:[ESP+51],DL
  13. 00402D78 8A5424 32 MOV DL,BYTE PTR SS:[ESP+32]
  14. 00402D7C 884C24 4D MOV BYTE PTR SS:[ESP+4D],CL
  15. 00402D80 884C24 53 MOV BYTE PTR SS:[ESP+53],CL
  16. 00402D84 8A4C24 39 MOV CL,BYTE PTR SS:[ESP+39]
  17. 00402D88 885424 52 MOV BYTE PTR SS:[ESP+52],DL
  18. 00402D8C 8A5424 38 MOV DL,BYTE PTR SS:[ESP+38]
  19. 00402D90 884C24 54 MOV BYTE PTR SS:[ESP+54],CL
  20. 00402D94 8A4C24 2D MOV CL,BYTE PTR SS:[ESP+2D]
  21. 00402D98 885424 56 MOV BYTE PTR SS:[ESP+56],DL
  22. 00402D9C 8A5424 14 MOV DL,BYTE PTR SS:[ESP+14]
  23. 00402DA0 884C24 57 MOV BYTE PTR SS:[ESP+57],CL
  24. 00402DA4 8A4C24 3C MOV CL,BYTE PTR SS:[ESP+3C]
  25. 00402DA8 885424 58 MOV BYTE PTR SS:[ESP+58],DL
  26. 00402DAC 8A5424 2F MOV DL,BYTE PTR SS:[ESP+2F]
  27. 00402DB0 884C24 59 MOV BYTE PTR SS:[ESP+59],CL
  28. 00402DB4 8A4C24 37 MOV CL,BYTE PTR SS:[ESP+37]
  29. 00402DB8 8A4424 3D MOV AL,BYTE PTR SS:[ESP+3D]
  30. 00402DBC 885424 5C MOV BYTE PTR SS:[ESP+5C],DL
  31. 00402DC0 8A5424 27 MOV DL,BYTE PTR SS:[ESP+27]
  32. 00402DC4 884C24 5D MOV BYTE PTR SS:[ESP+5D],CL
  33. 00402DC8 8A4C24 33 MOV CL,BYTE PTR SS:[ESP+33]
  34. 00402DCC 885424 5E MOV BYTE PTR SS:[ESP+5E],DL
  35. 00402DD0 8A5424 19 MOV DL,BYTE PTR SS:[ESP+19]
  36. 00402DD4 884C24 60 MOV BYTE PTR SS:[ESP+60],CL
  37. 00402DD8 8A4C24 3A MOV CL,BYTE PTR SS:[ESP+3A]
  38. 00402DDC 885424 61 MOV BYTE PTR SS:[ESP+61],DL
  39. 00402DE0 8A5424 30 MOV DL,BYTE PTR SS:[ESP+30]
  40. 00402DE4 884C24 62 MOV BYTE PTR SS:[ESP+62],CL
  41. 00402DE8 8A4C24 3B MOV CL,BYTE PTR SS:[ESP+3B]
  42. 00402DEC 885424 63 MOV BYTE PTR SS:[ESP+63],DL
  43. 00402DF0 8A5424 18 MOV DL,BYTE PTR SS:[ESP+18]
  44. 00402DF4 884424 4E MOV BYTE PTR SS:[ESP+4E],AL
  45. 00402DF8 884C24 65 MOV BYTE PTR SS:[ESP+65],CL
  46. 00402DFC 8A4C24 2C MOV CL,BYTE PTR SS:[ESP+2C]
  47. 00402E00 B0 20 MOV AL,20
  48. 00402E02 885424 66 MOV BYTE PTR SS:[ESP+66],DL
  49. 00402E06 8A5424 36 MOV DL,BYTE PTR SS:[ESP+36]
  50. 00402E0A 884424 50 MOV BYTE PTR SS:[ESP+50],AL
  51. 00402E0E 884424 55 MOV BYTE PTR SS:[ESP+55],AL
  52. 00402E12 884424 5A MOV BYTE PTR SS:[ESP+5A],AL
  53. 00402E16 884424 5F MOV BYTE PTR SS:[ESP+5F],AL
  54. 00402E1A 884424 64 MOV BYTE PTR SS:[ESP+64],AL
  55. 00402E1E 884C24 67 MOV BYTE PTR SS:[ESP+67],CL
  56. 00402E22 8A4C24 35 MOV CL,BYTE PTR SS:[ESP+35]
  57. 00402E26 884424 69 MOV BYTE PTR SS:[ESP+69],AL
  58. 00402E2A 8A4424 26 MOV AL,BYTE PTR SS:[ESP+26]
  59. 00402E2E 885424 68 MOV BYTE PTR SS:[ESP+68],DL
  60. 00402E32 8A5424 31 MOV DL,BYTE PTR SS:[ESP+31]
  61. 00402E36 884424 6A MOV BYTE PTR SS:[ESP+6A],AL
  62. 00402E3A 884C24 6B MOV BYTE PTR SS:[ESP+6B],CL
  63. 00402E3E 8D7C24 4C LEA EDI,DWORD PTR SS:[ESP+4C]
  64. 00402E42 83C9 FF OR ECX,FFFFFFFF
  65. 00402E45 33C0 XOR EAX,EAX
  66. 00402E47 C64424 5B 36 MOV BYTE PTR SS:[ESP+5B],36
  67. 00402E4C C64424 6C 41 MOV BYTE PTR SS:[ESP+6C],41
  68. 00402E51 885424 6D MOV BYTE PTR SS:[ESP+6D],DL
  69. 00402E55 F2:AE REPNE SCAS BYTE PTR ES:[EDI]
  70. 00402E57 F7D1 NOT ECX
  71. 00402E59 2BF9 SUB EDI,ECX
  72. 00402E5B 8BC1 MOV EAX,ECX[/CODE]
  73.  
  74. [CODE]00402A10 81EC A4000000 SUB ESP,0A4
  75. 00402A16 56 PUSH ESI
  76. 00402A17 8BB424 AC000000 MOV ESI,DWORD PTR SS:[ESP+AC]
  77. 00402A1E 57 PUSH EDI
  78. 00402A1F 56 PUSH ESI
  79. 00402A20 8D4C24 2C LEA ECX,DWORD PTR SS:[ESP+2C]
  80. 00402A24 E8 97381300 CALL <JMP.&MFC42.#537>
  81. 00402A29 B9 10000000 MOV ECX,10
  82. 00402A2E 33C0 XOR EAX,EAX
  83. 00402A30 8D7C24 2C LEA EDI,DWORD PTR SS:[ESP+2C]
  84. 00402A34 8D5424 2C LEA EDX,DWORD PTR SS:[ESP+2C]
  85. 00402A38 F3:AB REP STOS DWORD PTR ES:[EDI]
  86. 00402A3A 8BFE MOV EDI,ESI
  87. 00402A3C 83C9 FF OR ECX,FFFFFFFF
  88. 00402A3F F2:AE REPNE SCAS BYTE PTR ES:[EDI]
  89. 00402A41 F7D1 NOT ECX
  90. 00402A43 2BF9 SUB EDI,ECX
  91. 00402A45 8BC1 MOV EAX,ECX
  92. 00402A47 8BF7 MOV ESI,EDI
  93. 00402A49 8BFA MOV EDI,EDX
  94. 00402A4B C1E9 02 SHR ECX,2
  95. 00402A4E F3:A5 REP MOVS DWORD PTR ES:[EDI],DWORD PTR DS:[ESI]
  96. 00402A50 8BC8 MOV ECX,EAX
  97. 00402A52 83E1 03 AND ECX,3
  98. 00402A55 33C0 XOR EAX,EAX
  99. 00402A57 F3:A4 REP MOVS BYTE PTR ES:[EDI],BYTE PTR DS:[ESI]
  100. 00402A59 B9 08000000 MOV ECX,8
  101. 00402A5E 8D7C24 08 LEA EDI,DWORD PTR SS:[ESP+8]
  102. 00402A62 F3:AB REP STOS DWORD PTR ES:[EDI]
  103. 00402A64 B9 08000000 MOV ECX,8
  104. 00402A69 8DBC24 8C000000 LEA EDI,DWORD PTR SS:[ESP+8C]
  105. 00402A70 8A5424 37 MOV DL,BYTE PTR SS:[ESP+37]
  106. 00402A74 F3:AB REP STOS DWORD PTR ES:[EDI]
  107. 00402A76 B9 08000000 MOV ECX,8
  108. 00402A7B 8D7C24 6C LEA EDI,DWORD PTR SS:[ESP+6C]
  109. 00402A7F F3:AB REP STOS DWORD PTR ES:[EDI]
  110. 00402A81 8A4C24 47 MOV CL,BYTE PTR SS:[ESP+47]
  111. 00402A85 885424 09 MOV BYTE PTR SS:[ESP+9],DL
  112. 00402A89 8A5424 43 MOV DL,BYTE PTR SS:[ESP+43]
  113. 00402A8D 884C24 08 MOV BYTE PTR SS:[ESP+8],CL
  114. 00402A91 8A4C24 3C MOV CL,BYTE PTR SS:[ESP+3C]
  115. 00402A95 885424 0D MOV BYTE PTR SS:[ESP+D],DL
  116. 00402A99 8A5424 32 MOV DL,BYTE PTR SS:[ESP+32]
  117. 00402A9D 884C24 0B MOV BYTE PTR SS:[ESP+B],CL
  118. 00402AA1 8A4C24 4D MOV CL,BYTE PTR SS:[ESP+4D]
  119. 00402AA5 8A4424 2C MOV AL,BYTE PTR SS:[ESP+2C]
  120. 00402AA9 884C24 0E MOV BYTE PTR SS:[ESP+E],CL
  121. 00402AAD 8A4C24 40 MOV CL,BYTE PTR SS:[ESP+40]
  122. 00402AB1 885424 0F MOV BYTE PTR SS:[ESP+F],DL
  123. 00402AB5 8A5424 2F MOV DL,BYTE PTR SS:[ESP+2F]
  124. 00402AB9 884C24 10 MOV BYTE PTR SS:[ESP+10],CL
  125. 00402ABD 8A4C24 4B MOV CL,BYTE PTR SS:[ESP+4B]
  126. 00402AC1 885424 12 MOV BYTE PTR SS:[ESP+12],DL
  127. 00402AC5 8A5424 48 MOV DL,BYTE PTR SS:[ESP+48]
  128. 00402AC9 884C24 13 MOV BYTE PTR SS:[ESP+13],CL
  129. 00402ACD 8A4C24 3D MOV CL,BYTE PTR SS:[ESP+3D]
  130. 00402AD1 885424 14 MOV BYTE PTR SS:[ESP+14],DL
  131. 00402AD5 8A5424 36 MOV DL,BYTE PTR SS:[ESP+36]
  132. 00402AD9 884424 0A MOV BYTE PTR SS:[ESP+A],AL
  133. 00402ADD 884C24 15 MOV BYTE PTR SS:[ESP+15],CL
  134. 00402AE1 8A4C24 34 MOV CL,BYTE PTR SS:[ESP+34]
  135. 00402AE5 885424 17 MOV BYTE PTR SS:[ESP+17],DL
  136. 00402AE9 8A5424 42 MOV DL,BYTE PTR SS:[ESP+42]
  137. 00402AED B0 20 MOV AL,20
  138. 00402AEF 884424 0C MOV BYTE PTR SS:[ESP+C],AL
  139. 00402AF3 884424 11 MOV BYTE PTR SS:[ESP+11],AL
  140. 00402AF7 884424 16 MOV BYTE PTR SS:[ESP+16],AL
  141. 00402AFB 884C24 18 MOV BYTE PTR SS:[ESP+18],CL
  142. 00402AFF 8A4C24 45 MOV CL,BYTE PTR SS:[ESP+45]
  143. 00402B03 885424 19 MOV BYTE PTR SS:[ESP+19],DL
  144. 00402B07 8A5424 39 MOV DL,BYTE PTR SS:[ESP+39]
  145. 00402B0B 884424 1B MOV BYTE PTR SS:[ESP+1B],AL
  146. 00402B0F 8A4424 2E MOV AL,BYTE PTR SS:[ESP+2E]
  147. 00402B13 884C24 1A MOV BYTE PTR SS:[ESP+1A],CL
  148. 00402B17 8A4C24 2D MOV CL,BYTE PTR SS:[ESP+2D]
  149. 00402B1B 885424 1C MOV BYTE PTR SS:[ESP+1C],DL
  150. 00402B1F 8A5424 4C MOV DL,BYTE PTR SS:[ESP+4C]
  151. 00402B23 884424 1D MOV BYTE PTR SS:[ESP+1D],AL
  152. 00402B27 8A4424 3B MOV AL,BYTE PTR SS:[ESP+3B]
  153. 00402B2B 888C24 8C000000 MOV BYTE PTR SS:[ESP+8C],CL
  154. 00402B32 889424 8D000000 MOV BYTE PTR SS:[ESP+8D],DL
  155. 00402B39 888424 8E000000 MOV BYTE PTR SS:[ESP+8E],AL
  156. 00402B40 8A4C24 33 MOV CL,BYTE PTR SS:[ESP+33]
  157. 00402B44 8A4424 41 MOV AL,BYTE PTR SS:[ESP+41]
  158. 00402B48 888C24 8F000000 MOV BYTE PTR SS:[ESP+8F],CL
  159. 00402B4F 8A4C24 38 MOV CL,BYTE PTR SS:[ESP+38]
  160. 00402B53 884424 6D MOV BYTE PTR SS:[ESP+6D],AL
  161. 00402B57 B0 2D MOV AL,2D
  162. 00402B59 884C24 6F MOV BYTE PTR SS:[ESP+6F],CL
  163. 00402B5D 8A4C24 3E MOV CL,BYTE PTR SS:[ESP+3E]
  164. 00402B61 884424 6E MOV BYTE PTR SS:[ESP+6E],AL
  165. 00402B65 884424 71 MOV BYTE PTR SS:[ESP+71],AL
  166. 00402B69 8A4424 4A MOV AL,BYTE PTR SS:[ESP+4A]
  167. 00402B6D 884C24 73 MOV BYTE PTR SS:[ESP+73],CL
  168. 00402B71 884424 72 MOV BYTE PTR SS:[ESP+72],AL
  169. 00402B75 8A5424 46 MOV DL,BYTE PTR SS:[ESP+46]
  170. 00402B79 8D7C24 08 LEA EDI,DWORD PTR SS:[ESP+8]
  171. 00402B7D 83C9 FF OR ECX,FFFFFFFF
  172. 00402B80 33C0 XOR EAX,EAX
  173. 00402B82 885424 6C MOV BYTE PTR SS:[ESP+6C],DL
  174. 00402B86 F2:AE REPNE SCAS BYTE PTR ES:[EDI]
  175. 00402B88 8A5424 31 MOV DL,BYTE PTR SS:[ESP+31]
  176. 00402B8C F7D1 NOT ECX
  177. 00402B8E 2BF9 SUB EDI,ECX
  178. 00402B90 885424 70 MOV BYTE PTR SS:[ESP+70],DL
  179. 00402B94 8BD1 MOV EDX,ECX
  180. 00402B96 8BF7 MOV ESI,EDI
  181. 00402B98 8BBC24 B4000000 MOV EDI,DWORD PTR SS:[ESP+B4]
  182. 00402B9F C1E9 02 SHR ECX,2
  183. 00402BA2 F3:A5 REP MOVS DWORD PTR ES:[EDI],DWORD PTR DS:[ESI]
  184. 00402BA4 8BCA MOV ECX,EDX
  185. 00402BA6 83E1 03 AND ECX,3
  186. 00402BA9 F3:A4 REP MOVS BYTE PTR ES:[EDI],BYTE PTR DS:[ESI]
  187. 00402BAB 8DBC24 8C000000 LEA EDI,DWORD PTR SS:[ESP+8C]
  188. 00402BB2 83C9 FF OR ECX,FFFFFFFF
  189. 00402BB5 F2:AE REPNE SCAS BYTE PTR ES:[EDI]
  190. 00402BB7 F7D1 NOT ECX
  191. 00402BB9 2BF9 SUB EDI,ECX
  192. 00402BBB 8BC1 MOV EAX,ECX
  193. 00402BBD 8BF7 MOV ESI,EDI
  194. 00402BBF 8BBC24 B8000000 MOV EDI,DWORD PTR SS:[ESP+B8]
  195. 00402BC6 C1E9 02 SHR ECX,2
  196. 00402BC9 F3:A5 REP MOVS DWORD PTR ES:[EDI],DWORD PTR DS:[ESI]
  197. 00402BCB 8BC8 MOV ECX,EAX
  198. 00402BCD 33C0 XOR EAX,EAX
  199. 00402BCF 83E1 03 AND ECX,3
  200. 00402BD2 F3:A4 REP MOVS BYTE PTR ES:[EDI],BYTE PTR DS:[ESI]
  201. 00402BD4 8D7C24 6C LEA EDI,DWORD PTR SS:[ESP+6C]
  202. 00402BD8 83C9 FF OR ECX,FFFFFFFF
  203. 00402BDB F2:AE REPNE SCAS BYTE PTR ES:[EDI]
  204. 00402BDD F7D1 NOT ECX
  205. 00402BDF 2BF9 SUB EDI,ECX
  206. 00402BE1 8BD1 MOV EDX,ECX
  207. 00402BE3 8BF7 MOV ESI,EDI[/CODE]
  208.  
  209. result is :
  210.  
  211. 0012D750 0012D7AC ASCII "3F95 21F5 182D 6A31 6738 8059 18A2"
  212. 0012D754 0012D80C ASCII "583A 8216 5893 1538 D9"
  213. 0012D758 0012D7EC ASCII "FA6F"
  214. 0012D75C 0012D84C ASCII "07-22-11"
  215. 0012D760 0012D784 ASCII "2011"
  216. 0012D764 0058AA84 ASCII "%04d"
  217.  
  218. 00402F34 83F9 22 CMP ECX,22 ; SITE KEY size
  219. 00402F37 74 09 JE SHORT 00402F42
  220.  
  221. [CODE]00402F42 8A4C24 28 MOV CL,BYTE PTR SS:[ESP+28] ; DECRYPT SITEKEY
  222. 00402F46 8A5424 12 MOV DL,BYTE PTR SS:[ESP+12]
  223. 00402F4A 8A4424 1E MOV AL,BYTE PTR SS:[ESP+1E]
  224. 00402F4E 884C24 48 MOV BYTE PTR SS:[ESP+48],CL
  225. 00402F52 8A4C24 09 MOV CL,BYTE PTR SS:[ESP+9]
  226. 00402F56 885424 49 MOV BYTE PTR SS:[ESP+49],DL
  227. 00402F5A 8A5424 0C MOV DL,BYTE PTR SS:[ESP+C]
  228. 00402F5E 884424 4A MOV BYTE PTR SS:[ESP+4A],AL
  229. 00402F62 8A4424 19 MOV AL,BYTE PTR SS:[ESP+19]
  230. 00402F66 884C24 4B MOV BYTE PTR SS:[ESP+4B],CL
  231. 00402F6A 8A4C24 23 MOV CL,BYTE PTR SS:[ESP+23]
  232. 00402F6E 885424 4C MOV BYTE PTR SS:[ESP+4C],DL
  233. 00402F72 8A5424 14 MOV DL,BYTE PTR SS:[ESP+14]
  234. 00402F76 884424 4D MOV BYTE PTR SS:[ESP+4D],AL
  235. 00402F7A 8A4424 10 MOV AL,BYTE PTR SS:[ESP+10]
  236. 00402F7E 884C24 4E MOV BYTE PTR SS:[ESP+4E],CL
  237. 00402F82 8A4C24 11 MOV CL,BYTE PTR SS:[ESP+11]
  238. 00402F86 885424 4F MOV BYTE PTR SS:[ESP+4F],DL
  239. 00402F8A 8A5424 08 MOV DL,BYTE PTR SS:[ESP+8]
  240. 00402F8E 884424 50 MOV BYTE PTR SS:[ESP+50],AL
  241. 00402F92 8A4424 21 MOV AL,BYTE PTR SS:[ESP+21]
  242. 00402F96 884C24 51 MOV BYTE PTR SS:[ESP+51],CL
  243. 00402F9A 8A4C24 13 MOV CL,BYTE PTR SS:[ESP+13]
  244. 00402F9E 885424 52 MOV BYTE PTR SS:[ESP+52],DL
  245. 00402FA2 8A5424 0D MOV DL,BYTE PTR SS:[ESP+D]
  246. 00402FA6 884424 53 MOV BYTE PTR SS:[ESP+53],AL
  247. 00402FAA 8A4424 16 MOV AL,BYTE PTR SS:[ESP+16]
  248. 00402FAE 884C24 54 MOV BYTE PTR SS:[ESP+54],CL
  249. 00402FB2 8A4C24 1D MOV CL,BYTE PTR SS:[ESP+1D]
  250. 00402FB6 885424 55 MOV BYTE PTR SS:[ESP+55],DL
  251. 00402FBA 8A5424 29 MOV DL,BYTE PTR SS:[ESP+29]
  252. 00402FBE 884424 56 MOV BYTE PTR SS:[ESP+56],AL
  253. 00402FC2 8A4424 0B MOV AL,BYTE PTR SS:[ESP+B]
  254. 00402FC6 884C24 57 MOV BYTE PTR SS:[ESP+57],CL
  255. 00402FCA 8A4C24 18 MOV CL,BYTE PTR SS:[ESP+18]
  256. 00402FCE 885424 58 MOV BYTE PTR SS:[ESP+58],DL
  257. 00402FD2 8A5424 1B MOV DL,BYTE PTR SS:[ESP+1B]
  258. 00402FD6 884424 59 MOV BYTE PTR SS:[ESP+59],AL
  259. 00402FDA 8A4424 0F MOV AL,BYTE PTR SS:[ESP+F]
  260. 00402FDE 884C24 5A MOV BYTE PTR SS:[ESP+5A],CL
  261. 00402FE2 8A4C24 27 MOV CL,BYTE PTR SS:[ESP+27]
  262. 00402FE6 885424 5B MOV BYTE PTR SS:[ESP+5B],DL
  263. 00402FEA 8A5424 0A MOV DL,BYTE PTR SS:[ESP+A]
  264. 00402FEE 884424 5C MOV BYTE PTR SS:[ESP+5C],AL
  265. 00402FF2 8A4424 1A MOV AL,BYTE PTR SS:[ESP+1A]
  266. 00402FF6 884C24 5D MOV BYTE PTR SS:[ESP+5D],CL
  267. 00402FFA 8A4C24 20 MOV CL,BYTE PTR SS:[ESP+20]
  268. 00402FFE 885424 5E MOV BYTE PTR SS:[ESP+5E],DL
  269. 00403002 8A5424 15 MOV DL,BYTE PTR SS:[ESP+15]
  270. 00403006 884424 5F MOV BYTE PTR SS:[ESP+5F],AL
  271. 0040300A 8A4424 26 MOV AL,BYTE PTR SS:[ESP+26]
  272. 0040300E 884C24 60 MOV BYTE PTR SS:[ESP+60],CL
  273. 00403012 8A4C24 0E MOV CL,BYTE PTR SS:[ESP+E]
  274. 00403016 885424 61 MOV BYTE PTR SS:[ESP+61],DL
  275. 0040301A 8A5424 1F MOV DL,BYTE PTR SS:[ESP+1F]
  276. 0040301E 884424 62 MOV BYTE PTR SS:[ESP+62],AL
  277. 00403022 8A4424 25 MOV AL,BYTE PTR SS:[ESP+25]
  278. 00403026 884C24 63 MOV BYTE PTR SS:[ESP+63],CL
  279. 0040302A 8A4C24 24 MOV CL,BYTE PTR SS:[ESP+24]
  280. 0040302E 885424 64 MOV BYTE PTR SS:[ESP+64],DL
  281. 00403032 8A5424 22 MOV DL,BYTE PTR SS:[ESP+22]
  282. 00403036 884424 65 MOV BYTE PTR SS:[ESP+65],AL
  283. 0040303A 884C24 66 MOV BYTE PTR SS:[ESP+66],CL
  284. 0040303E 8D7C24 48 LEA EDI,DWORD PTR SS:[ESP+48]
  285. 00403042 83C9 FF OR ECX,FFFFFFFF
  286. 00403045 33C0 XOR EAX,EAX
  287. 00403047 885424 67 MOV BYTE PTR SS:[ESP+67],DL
  288. 0040304B F2:AE REPNE SCAS BYTE PTR ES:[EDI]
  289. 0040304D F7D1 NOT ECX
  290. 0040304F 2BF9 SUB EDI,ECX
  291. 00403051 8BC1 MOV EAX,ECX
  292. 00403053 8BF7 MOV ESI,EDI[/CODE]
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement