Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 00401000 >/$ 68 00304000 PUSH pushpop.00403000 ; ASCII "Enter in a string"
- 00401005 |. E8 3A000000 CALL pushpop.00401044
- 0040100A |. 68 21304000 PUSH pushpop.00403021
- 0040100F |. E8 30000000 CALL pushpop.00401044
- 00401014 |. 68 C8000000 PUSH 0C8 ; /Arg2 = 000000C8
- 00401019 |. 68 30304000 PUSH pushpop.00403030 ; |Arg1 = 00403030
- 0040101E |. E8 59000000 CALL pushpop.0040107C ; \pushpop.0040107C
- 00401023 |. 68 12304000 PUSH pushpop.00403012 ; ASCII "You entered in"
- 00401028 |. E8 17000000 CALL pushpop.00401044
- 0040102D |. 68 21304000 PUSH pushpop.00403021
- 00401032 |. E8 0D000000 CALL pushpop.00401044
- 00401037 |. 68 30304000 PUSH pushpop.00403030
- 0040103C |. E8 03000000 CALL pushpop.00401044
- 00401041 |. CC INT3
- 00401042 |. CC INT3
- 00401043 |. CC INT3
- 00401044 |$ 55 PUSH EBP
- 00401045 |. 8BEC MOV EBP,ESP
- 00401047 |. 83C4 F4 ADD ESP,-0C
- 0040104A |. 6A F5 PUSH -0B ; /DevType = STD_OUTPUT_HANDLE
- 0040104C |. E8 A5000000 CALL <JMP.&kernel32.GetStdHandle> ; \GetStdHandle
- 00401051 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
- 00401054 |. FF75 08 PUSH DWORD PTR SS:[EBP+8]
- 00401057 |. E8 64000000 CALL pushpop.004010C0
- 0040105C |. 8945 F4 MOV DWORD PTR SS:[EBP-C],EAX
- 0040105F |. 6A 00 PUSH 0 ; /pOverlapped = NULL
- 00401061 |. 8D45 F8 LEA EAX,DWORD PTR SS:[EBP-8] ; |
- 00401064 |. 50 PUSH EAX ; |pBytesWritten
- 00401065 |. FF75 F4 PUSH DWORD PTR SS:[EBP-C] ; |nBytesToWrite
- 00401068 |. FF75 08 PUSH DWORD PTR SS:[EBP+8] ; |Buffer
- 0040106B |. FF75 FC PUSH DWORD PTR SS:[EBP-4] ; |hFile
- 0040106E |. E8 89000000 CALL <JMP.&kernel32.WriteFile> ; \WriteFile
- 00401073 |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
- 00401076 |. C9 LEAVE
- 00401077 \. C2 0400 RETN 4
- 0040107A CC INT3
- 0040107B CC INT3
- 0040107C /$ 55 PUSH EBP
- 0040107D |. 8BEC MOV EBP,ESP
- 0040107F |. 83C4 F8 ADD ESP,-8
- 00401082 |. 6A F6 PUSH -0A ; /DevType = STD_INPUT_HANDLE
- 00401084 |. E8 6D000000 CALL <JMP.&kernel32.GetStdHandle> ; \GetStdHandle
- 00401089 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
- 0040108C |. 6A 07 PUSH 7 ; /Mode = ENABLE_PROCESSED_INPUT/OUTPUT|ENABLE_LINE_INPUT/WRAP_AT_EOL|ENABLE_ECHO_INPUT
- 0040108E |. FF75 FC PUSH DWORD PTR SS:[EBP-4] ; |hConsole
- 00401091 |. E8 72000000 CALL <JMP.&kernel32.SetConsoleMode> ; \SetConsoleMode
- 00401096 |. 6A 00 PUSH 0 ; /pOverlapped = NULL
- 00401098 |. 8D45 F8 LEA EAX,DWORD PTR SS:[EBP-8] ; |
- 0040109B |. 50 PUSH EAX ; |pBytesRead
- 0040109C |. FF75 0C PUSH DWORD PTR SS:[EBP+C] ; |BytesToRead
- 0040109F |. FF75 08 PUSH DWORD PTR SS:[EBP+8] ; |Buffer
- 004010A2 |. FF75 FC PUSH DWORD PTR SS:[EBP-4] ; |hFile
- 004010A5 |. E8 58000000 CALL <JMP.&kernel32.ReadFile> ; \ReadFile
- 004010AA |. 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
- 004010AD |. C9 LEAVE
- 004010AE \. C2 0800 RETN 8
- 004010B1 CC INT3
- 004010B2 CC INT3
- 004010B3 CC INT3
- 004010B4 CC INT3
- 004010B5 CC INT3
- 004010B6 CC INT3
- 004010B7 CC INT3
- 004010B8 CC INT3
- 004010B9 CC INT3
- 004010BA CC INT3
- 004010BB CC INT3
- 004010BC CC INT3
- 004010BD CC INT3
- 004010BE CC INT3
- 004010BF CC INT3
- 004010C0 /$ 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
- 004010C4 |. 53 PUSH EBX
- 004010C5 |. 8D50 03 LEA EDX,DWORD PTR DS:[EAX+3]
- 004010C8 |> 8B18 /MOV EBX,DWORD PTR DS:[EAX]
- 004010CA |. 83C0 04 |ADD EAX,4
- 004010CD |. 8D8B FFFEFEFE |LEA ECX,DWORD PTR DS:[EBX+FEFEFEFF]
- 004010D3 |. F7D3 |NOT EBX
- 004010D5 |. 23CB |AND ECX,EBX
- 004010D7 |. 81E1 80808080 |AND ECX,80808080
- 004010DD |.^74 E9 \JE SHORT pushpop.004010C8
- 004010DF |. F7C1 80800000 TEST ECX,8080
- 004010E5 |. 75 06 JNZ SHORT pushpop.004010ED
- 004010E7 |. C1E9 10 SHR ECX,10
- 004010EA |. 83C0 02 ADD EAX,2
- 004010ED |> D0E1 SHL CL,1
- 004010EF |. 1BC2 SBB EAX,EDX
- 004010F1 |. 5B POP EBX
- 004010F2 \. C2 0400 RETN 4
- 004010F5 CC INT3
- 004010F6 $-FF25 0C204000 JMP DWORD PTR DS:[<&kernel32.GetStdHandl>; kernel32.GetStdHandle
- 004010FC $-FF25 00204000 JMP DWORD PTR DS:[<&kernel32.WriteFile>] ; kernel32.WriteFile
- 00401102 $-FF25 04204000 JMP DWORD PTR DS:[<&kernel32.ReadFile>] ; kernel32.ReadFile
- 00401108 $-FF25 08204000 JMP DWORD PTR DS:[<&kernel32.SetConsoleM>; kernel32.SetConsoleMode
Add Comment
Please, Sign In to add comment
