SHOW:
|
|
- or go back to the newest paste.
| 1 | Stack[00000650]:00121CDA decrypt_: ; CODE XREF: Stack[00000650]:00121D2Dp | |
| 2 | Stack[00000650]:00121CDA pusha | |
| 3 | Stack[00000650]:00121CDB mov ebp, [esp+24h] | |
| 4 | Stack[00000650]:00121CDF mov eax, [ebp+3Ch] | |
| 5 | Stack[00000650]:00121CE2 mov edx, [ebp+eax+78h] | |
| 6 | Stack[00000650]:00121CE6 add edx, ebp | |
| 7 | - | Stack[00000650]:00121CE8 mov ecx, [edx+18h] |
| 7 | + | Stack[00000650]:00121CE8 mov ecx, [edx+18h] ; Number of function; |
| 8 | - | Stack[00000650]:00121CEB mov ebx, [edx+20h] |
| 8 | + | Stack[00000650]:00121CEB mov ebx, [edx+20h] ; Export Name Table(ENT) |
| 9 | Stack[00000650]:00121CEE add ebx, ebp | |
| 10 | Stack[00000650]:00121CF0 | |
| 11 | Stack[00000650]:00121CF0 loc_121CF0: ; CODE XREF: Stack[00000650]:00121D0Dj | |
| 12 | Stack[00000650]:00121CF0 jecxz short loc_121D28 | |
| 13 | Stack[00000650]:00121CF2 dec ecx | |
| 14 | Stack[00000650]:00121CF3 mov esi, [ebx+ecx*4] | |
| 15 | Stack[00000650]:00121CF6 add esi, ebp | |
| 16 | Stack[00000650]:00121CF8 xor edi, edi | |
| 17 | Stack[00000650]:00121CFA xor eax, eax | |
| 18 | Stack[00000650]:00121CFC cld | |
| 19 | Stack[00000650]:00121CFD | |
| 20 | Stack[00000650]:00121CFD loc_121CFD: ; CODE XREF: Stack[00000650]:00121D07j | |
| 21 | Stack[00000650]:00121CFD lodsb | |
| 22 | Stack[00000650]:00121CFE test al, al | |
| 23 | Stack[00000650]:00121D00 jz short loc_121D09 | |
| 24 | Stack[00000650]:00121D02 rol edi, 13h | |
| 25 | Stack[00000650]:00121D05 add edi, eax | |
| 26 | Stack[00000650]:00121D07 jmp short loc_121CFD | |
| 27 | Stack[00000650]:00121D09 ; --------------------------------------------------------------------------- | |
| 28 | Stack[00000650]:00121D09 | |
| 29 | Stack[00000650]:00121D09 loc_121D09: ; CODE XREF: Stack[00000650]:00121D00j | |
| 30 | - | Stack[00000650]:00121D09 cmp edi, [esp+28h] |
| 30 | + | Stack[00000650]:00121D09 cmp edi, [esp+28h] ; compare to cipher |
| 31 | Stack[00000650]:00121D0D jnz short loc_121CF0 | |
| 32 | Stack[00000650]:00121D0F mov ebx, [edx+24h] | |
| 33 | Stack[00000650]:00121D12 add ebx, ebp | |
| 34 | Stack[00000650]:00121D14 mov cx, [ebx+ecx*2] | |
| 35 | Stack[00000650]:00121D18 mov eax, edx | |
| 36 | Stack[00000650]:00121D1A mov ebx, [eax+1Ch] | |
| 37 | Stack[00000650]:00121D1D add ebx, ebp | |
| 38 | Stack[00000650]:00121D1F mov eax, [ebx+ecx*4] | |
| 39 | Stack[00000650]:00121D22 add eax, ebp | |
| 40 | Stack[00000650]:00121D24 mov [esp+1Ch], eax | |
| 41 | Stack[00000650]:00121D28 | |
| 42 | Stack[00000650]:00121D28 loc_121D28: ; CODE XREF: Stack[00000650]:loc_121CF0j | |
| 43 | Stack[00000650]:00121D28 popa | |
| 44 | - | Stack[00000650]:00121D29 retn |
| 44 | + | Stack[00000650]:00121D29 retn |
| 45 | Stack[00000650]:00121D2A ; --------------------------------------------------------------------------- | |
| 46 | Stack[00000650]:00121D2A |
