Advertisement
elirang

iyvcfqlp entrypoint

Jun 3rd, 2018
117
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. ;------------------------------------------------------------------------------
  2. ;  Name: iyvcfqlp
  3. ;  Virtual Address:    0086B000h  Virtual Size:    00001000h
  4. ;  Pointer To RawData: 001B3600h  Size Of RawData: 00000200h
  5. ;
  6. ;------------------------------------------------------------------------------
  7.  EntryPoint:
  8.         push    esi
  9.         push    eax
  10.         push    ebx
  11.         call    SUB_L0086B009
  12.         db  CCh;   'Œ'
  13.  SUB_L0086B009:
  14.         pop eax
  15.         mov ebx,eax
  16.         inc eax
  17.         sub eax,001A6000h
  18.         sub eax,100C1678h
  19.         add eax,100C166Fh
  20.         cmp byte ptr [ebx],CCh
  21.         jnz L0086B03A
  22.         mov byte ptr [ebx],00h
  23.         mov ebx,00001000h
  24.         push    471989B4h
  25.         push    726DE473h
  26.         push    ebx
  27.         push    eax
  28.         call    SUB_L0086B044
  29.  L0086B03A:
  30.         add eax,00000000h
  31.         mov [esp+08h],eax
  32.         pop ebx
  33.         pop eax
  34.         retn
  35. ;------------------------------------------------------------------------------
  36.  SUB_L0086B044:
  37.         push    ebp
  38.         mov ebp,esp
  39.         push    eax
  40.         push    ebx
  41.         push    ecx
  42.         push    esi
  43.         mov esi,[ebp+08h]
  44.         mov ecx,[ebp+0Ch]
  45.         shr ecx,02h
  46.         mov eax,[ebp+10h]
  47.         mov ebx,[ebp+14h]
  48.  L0086B05A:
  49.         test    ecx,ecx
  50.         jz  L0086B068
  51.         xor [esi],eax
  52.         add [esi],ebx
  53.         add esi,00000004h
  54.         dec ecx
  55.         jmp L0086B05A
  56.  L0086B068:
  57.         pop esi
  58.         pop ecx
  59.         pop ebx
  60.         pop eax
  61.         leave
  62.         retn    0010h
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement