Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Stack[00000650]:00121CDA decrypt_: ; CODE XREF: Stack[00000650]:00121D2Dp
- Stack[00000650]:00121CDA pusha
- Stack[00000650]:00121CDB mov ebp, [esp+24h]
- Stack[00000650]:00121CDF mov eax, [ebp+3Ch]
- Stack[00000650]:00121CE2 mov edx, [ebp+eax+78h]
- Stack[00000650]:00121CE6 add edx, ebp
- Stack[00000650]:00121CE8 mov ecx, [edx+18h] ; Number of function;
- Stack[00000650]:00121CEB mov ebx, [edx+20h] ; Export Name Table(ENT)
- Stack[00000650]:00121CEE add ebx, ebp
- Stack[00000650]:00121CF0
- Stack[00000650]:00121CF0 loc_121CF0: ; CODE XREF: Stack[00000650]:00121D0Dj
- Stack[00000650]:00121CF0 jecxz short loc_121D28
- Stack[00000650]:00121CF2 dec ecx
- Stack[00000650]:00121CF3 mov esi, [ebx+ecx*4]
- Stack[00000650]:00121CF6 add esi, ebp
- Stack[00000650]:00121CF8 xor edi, edi
- Stack[00000650]:00121CFA xor eax, eax
- Stack[00000650]:00121CFC cld
- Stack[00000650]:00121CFD
- Stack[00000650]:00121CFD loc_121CFD: ; CODE XREF: Stack[00000650]:00121D07j
- Stack[00000650]:00121CFD lodsb
- Stack[00000650]:00121CFE test al, al
- Stack[00000650]:00121D00 jz short loc_121D09
- Stack[00000650]:00121D02 rol edi, 13h
- Stack[00000650]:00121D05 add edi, eax
- Stack[00000650]:00121D07 jmp short loc_121CFD
- Stack[00000650]:00121D09 ; ---------------------------------------------------------------------------
- Stack[00000650]:00121D09
- Stack[00000650]:00121D09 loc_121D09: ; CODE XREF: Stack[00000650]:00121D00j
- Stack[00000650]:00121D09 cmp edi, [esp+28h] ; compare to cipher
- Stack[00000650]:00121D0D jnz short loc_121CF0
- Stack[00000650]:00121D0F mov ebx, [edx+24h]
- Stack[00000650]:00121D12 add ebx, ebp
- Stack[00000650]:00121D14 mov cx, [ebx+ecx*2]
- Stack[00000650]:00121D18 mov eax, edx
- Stack[00000650]:00121D1A mov ebx, [eax+1Ch]
- Stack[00000650]:00121D1D add ebx, ebp
- Stack[00000650]:00121D1F mov eax, [ebx+ecx*4]
- Stack[00000650]:00121D22 add eax, ebp
- Stack[00000650]:00121D24 mov [esp+1Ch], eax
- Stack[00000650]:00121D28
- Stack[00000650]:00121D28 loc_121D28: ; CODE XREF: Stack[00000650]:loc_121CF0j
- Stack[00000650]:00121D28 popa
- Stack[00000650]:00121D29 retn
- Stack[00000650]:00121D2A ; ---------------------------------------------------------------------------
- Stack[00000650]:00121D2A
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement