API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Apr 26th, 2013
50
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.73 KB | None | 0 0
raw download clone embed print report
  1. 00000000 push ebp
  2. 00000001 mov ebp,esp
  3. 00000003 push edi
  4. 00000004 push esi
  5. 00000005 push ebx
  6. 00000006 sub esp,7Ch
  7. 00000009 mov esi,ecx
  8. 0000000b lea edi,[ebp-68h]
  9. 0000000e mov ecx,16h
  10. 00000013 xor eax,eax
  11. 00000015 rep stos dword ptr es:[edi]
  12. 00000017 mov ecx,esi
  13. 00000019 lea edi,[ebp+FFFFFF7Ch]
  14. 0000001f call FFF8E4E0
  15. 00000024 mov dword ptr [ebp-54h],esi
  16. 00000027 mov dword ptr [ebp-28h],edx
  17. 0000002a mov edi,dword ptr [ebp+8]
  18. 0000002d xor edx,edx
  19. 0000002f mov dword ptr [ebp-2Ch],edx
  20. 00000032 mov dword ptr [ebp-30h],edx
  21. 00000035 mov dword ptr [ebp-34h],edx
  22. 00000038 test ecx,ecx
  23. 0000003a je 000000D5
  24. 00000040 call 00015B70
  25. 00000045 mov dword ptr [ebp-58h],eax
  26. 00000048 mov eax,dword ptr [ebp-58h]
  27. 0000004b mov eax,dword ptr [eax+4]
  28. 0000004e mov dword ptr [ebp-30h],eax
  29. 00000051 mov eax,dword ptr [ebp-58h]
  30. 00000054 mov eax,dword ptr [eax+10h]
  31. 00000057 mov dword ptr [ebp-2Ch],eax
  32. 0000005a lea eax,[ebp-3Ch]
  33. 0000005d push eax
  34. 0000005e lea eax,[ebp-40h]
  35. 00000061 push eax
  36. 00000062 lea edx,[ebp-38h]
  37. 00000065 mov ecx,dword ptr [ebp-28h]
  38. 00000068 call FFF93A40
  39. 0000006d cmp dword ptr [ebp-30h],0
  40. 00000071 je 00944F16
  41. 00000077 mov eax,dword ptr [ebp-30h]
  42. 0000007a cmp byte ptr [eax],al
  43. 0000007c cmp byte ptr [eax+000000D0h],2
  44. 00000083 jae 00944F16
  45. 00000089 mov eax,dword ptr [ebp-30h]
  46. 0000008c cmp byte ptr [eax+000000CFh],0
  47. 00000093 je 000000A8
  48. 00000095 mov eax,dword ptr [ebp-30h]
  49. 00000098 mov esi,dword ptr [eax+6Ch]
  50. 0000009b call FFF89628
  51. 000000a0 cmp eax,esi
  52. 000000a2 jne 00944F27
  53. 000000a8 mov eax,dword ptr [ebp-30h]
  54. 000000ab mov eax,dword ptr [eax+00000084h]
  55. 000000b1 mov dword ptr [ebp-5Ch],eax
  56. 000000b4 mov eax,dword ptr [ebp-30h]
  57. 000000b7 cmp byte ptr [eax],al
  58. 000000b9 lea eax,[eax+000000B8h]
  59. 000000bf cmp dword ptr [eax],1
  60. 000000c2 sete al
  61. 000000c5 movzx eax,al
  62. 000000c8 mov dword ptr [ebp-44h],eax
  63. 000000cb xor edx,edx
  64. 000000cd mov dword ptr [ebp-48h],edx
  65. 000000d0 jmp 00000185
  66. 000000d5 lea eax,[ebp-2Ch]
  67. 000000d8 push eax
  68. 000000d9 lea eax,[ebp-30h]
  69. 000000dc push eax
  70. 000000dd mov ecx,dword ptr [ebp-28h]
  71. 000000e0 mov edx,edi
  72. 000000e2 call 000004D0
  73. 000000e7 cmp dword ptr [ebp-30h],0
  74. 000000eb je 00944F1D
  75. 000000f1 mov ecx,4F7E89Ch
  76. 000000f6 call FFF8E3D0
  77. 000000fb mov ebx,eax
  78. 000000fd mov ecx,ebx
  79. 000000ff call 0000FDE0
  80. 00000104 mov dword ptr [ebp-58h],ebx
  81. 00000107 mov eax,dword ptr [ebp-30h]
  82. 0000010a lea edx,[ebx+4]
  83. 0000010d call FFF8E3D8
  84. 00000112 mov eax,dword ptr [ebp-2Ch]
  85. 00000115 lea edx,[ebx+10h]
  86. 00000118 call FFF8E3D8
  87. 0000011d mov esi,dword ptr [ebp-30h]
  88. 00000120 cmp byte ptr [esi],al
  89. 00000122 mov ecx,esi
  90. 00000124 mov edx,ebx
  91. 00000126 call 0000C330
  92. 0000012b lea edx,[esi+000000A4h]
  93. 00000131 call FFF8E420
  94. 00000136 push dword ptr [ebx+14h]
  95. 00000139 push dword ptr [ebp-28h]
  96. 0000013c mov dword ptr [ebp-7Ch],4D4E93Ch
  97. 00000143 mov eax,dword ptr [ebp-54h]
  98. 00000146 mov dword ptr [ebp-78h],esp
  99. 00000149 mov dword ptr [ebp-74h],4EDABDAh
  100. 00000150 mov byte ptr [eax+8],0
  101. 00000154 call dword ptr ds:[04D23908h]
  102. 0000015a mov ecx,dword ptr [ebp-54h]
  103. 0000015d mov byte ptr [ecx+8],1
  104. 00000161 mov ecx,dword ptr ds:[04D213B4h]
  105. 00000167 cmp dword ptr [ecx],0
  106. 0000016a je 00000171
  107. 0000016c call FFF8E4E8
  108. 00000171 mov dword ptr [ebp-74h],0
  109. 00000178 jmp 0000005A
  110. 0000017d mov eax,dword ptr [ebp-34h]
  111. 00000180 jmp 0000048B
  112. 00000185 cmp dword ptr [ebp-44h],0
  113. 00000189 jne 00000221
  114. 0000018f cmp dword ptr [ebp-5Ch],0
  115. 00000193 setne bl
  116. 00000196 movzx ebx,bl
  117. 00000199 test ebx,ebx
  118. 0000019b jne 0000020B
  119. 0000019d mov ecx,4F7E930h
  120. 000001a2 call FFF8E3D0
  121. 000001a7 mov ecx,eax
  122. 000001a9 mov esi,dword ptr [ebp-30h]
  123. 000001ac mov dword ptr [ecx+18h],edi
  124. 000001af mov byte ptr [ecx+1Fh],bl
  125. 000001b2 lea edx,[esi+00000084h]
  126. 000001b8 call FFF8E440
  127. 000001bd mov esi,dword ptr [ebp-2Ch]
  128. 000001c0 mov edi,dword ptr [ebp-30h]
  129. 000001c3 mov ecx,dword ptr ds:[04D21350h]
  130. 000001c9 mov edx,3ACh
  131. 000001ce call FFF8E3E0
  132. 000001d3 mov ecx,dword ptr ds:[04D21350h]
  133. 000001d9 mov edx,3ACh
  134. 000001de call FFF8E400
  135. 000001e3 mov ecx,dword ptr [eax+00000F68h]
  136. 000001e9 push edi
  137. 000001ea mov edx,esi
  138. 000001ec cmp dword ptr [ecx],ecx
  139. 000001ee call FFF8FFA0
  140. 000001f3 mov dword ptr [ebp-34h],eax
  141. 000001f6 mov dword ptr [ebp-1Ch],0
  142. 000001fd mov dword ptr [ebp-18h],0FCh
  143. 00000204 push 4EDAD8Ah
  144. 00000209 jmp 00000240
  145. 0000020b mov eax,dword ptr [ebp-30h]
  146. 0000020e mov eax,dword ptr [eax+18h]
  147. 00000211 mov ecx,dword ptr [eax+1Ch]
  148. 00000214 lea edx,[ebp-48h]
  149. 00000217 call FFF89648
  150. 0000021c jmp 0000019D
  151. 00000221 mov ecx,dword ptr [ebp-30h]
  152. 00000224 cmp byte ptr [ecx],al
  153. 00000226 xor eax,eax
  154. 00000228 lea edx,[eax+1]
  155. 0000022b mov dword ptr [ebp-6Ch],eax
  156. 0000022e mov eax,edx
  157. 00000230 mov edx,dword ptr [ebp-6Ch]
  158. 00000233 lock cmpxchg dword ptr [ecx+000000B8h],edx
  159. 0000023b jmp 0000018F
  160. 00000240 cmp dword ptr [ebp-34h],1
  161. 00000244 je 000002A9
  162. 00000246 mov eax,dword ptr [ebp-30h]
  163. 00000249 mov ecx,dword ptr [ebp-5Ch]
  164. 0000024c lea edx,[eax+00000084h]
  165. 00000252 call FFF8E440
  166. 00000257 cmp dword ptr [ebp-44h],0
  167. 0000025b je 00000279
  168. 0000025d mov eax,dword ptr [ebp-30h]
  169. 00000260 cmp byte ptr [eax],al
  170. 00000262 lea eax,[eax+000000B8h]
  171. 00000268 cmp dword ptr [eax],1
  172. 0000026b je 00000279
  173. 0000026d mov ecx,dword ptr [ebp-30h]
  174. 00000270 cmp dword ptr [ecx],ecx
  175. 00000272 call 0000BF50
  176. 00000277 jmp 000002A9
  177. 00000279 cmp dword ptr [ebp-44h],0
  178. 0000027d jne 000002A9
  179. 0000027f mov eax,dword ptr [ebp-30h]
  180. 00000282 cmp byte ptr [eax],al
  181. 00000284 lea eax,[eax+000000B8h]
  182. 0000028a cmp dword ptr [eax],1
  183. 0000028d jne 000002A9
  184. 0000028f mov ecx,dword ptr [ebp-30h]
  185. 00000292 cmp byte ptr [ecx],al
  186. 00000294 xor eax,eax
  187. 00000296 lea edx,[eax+1]
  188. 00000299 mov dword ptr [ebp-6Ch],eax
  189. 0000029c mov eax,edx
  190. 0000029e mov edx,dword ptr [ebp-6Ch]
  191. 000002a1 lock cmpxchg dword ptr [ecx+000000B8h],edx
  192. 000002a9 movzx eax,byte ptr [ebp-48h]
  193. 000002ad test eax,eax
  194. 000002af je 000002BF
  195. 000002b1 mov eax,dword ptr [ebp-30h]
  196. 000002b4 mov eax,dword ptr [eax+18h]
  197. 000002b7 mov ecx,dword ptr [eax+1Ch]
  198. 000002ba call FFF89378
  199. 000002bf pop eax
  200. 000002c0 jmp eax
  201. 000002c2 cmp dword ptr [ebp-34h],1
  202. 000002c6 je 000002F3
  203. 000002c8 lea eax,[ebp-3Ch]
  204. 000002cb push eax
  205. 000002cc lea eax,[ebp-40h]
  206. 000002cf push eax
  207. 000002d0 lea edx,[ebp-38h]
  208. 000002d3 mov ecx,dword ptr [ebp-28h]
  209. 000002d6 call FFF93A40
  210. 000002db mov eax,dword ptr [ebp-30h]
  211. 000002de mov eax,dword ptr [eax+00000088h]
  212. 000002e4 mov dword ptr [ebp-60h],eax
  213. 000002e7 mov eax,dword ptr [ebp-30h]
  214. 000002ea cmp byte ptr [eax+000000CFh],0
  215. 000002f1 je 00000313
  216. 000002f3 mov eax,dword ptr [ebp-30h]
  217. 000002f6 cmp byte ptr [eax],al
  218. 000002f8 cmp byte ptr [eax+000000D0h],2
  219. 000002ff jae 00000437
  220. 00000305 jmp 0000017D
  221. 0000030a mov dword ptr [ebp-18h],0
  222. 00000311 jmp 000002C2
  223. 00000313 cmp dword ptr [ebp-60h],0
  224. 00000317 je 000002F3
  225. 00000319 cmp dword ptr [ebp-34h],0
  226. 0000031d jne 00000401
  227. 00000323 mov eax,dword ptr [ebp-30h]
  228. 00000326 mov byte ptr [eax+000000CFh],1
  229. 0000032d mov ecx,dword ptr ds:[04D21350h]
  230. 00000333 mov edx,322h
  231. 00000338 call FFF8E3E0
  232. 0000033d add eax,0C18h
  233. 00000342 lock inc dword ptr [eax]
  234. 00000345 lea edx,[ebp-34h]
  235. 00000348 mov ecx,dword ptr [ebp-28h]
  236. 0000034b call FFF93AA0
  237. 00000350 mov dword ptr [ebp-1Ch],0
  238. 00000357 mov dword ptr [ebp-18h],0FCh
  239. 0000035e push 4EDAEF3h
  240. 00000363 jmp 00000365
  241. 00000365 mov ecx,dword ptr ds:[04D21350h]
  242. 0000036b mov edx,322h
  243. 00000370 call FFF8E3E0
  244. 00000375 add eax,0C18h
  245. 0000037a lock dec dword ptr [eax]
  246. 0000037d mov eax,dword ptr [ebp-60h]
  247. 00000380 cmp byte ptr [eax+25h],0
  248. 00000384 je 00000392
  249. 00000386 mov eax,dword ptr [ebp-30h]
  250. 00000389 cmp byte ptr [eax+000000CFh],0
  251. 00000390 je 000003F5
  252. 00000392 xor edx,edx
  253. 00000394 mov dword ptr [ebp-4Ch],edx
  254. 00000397 mov eax,dword ptr [ebp-60h]
  255. 0000039a mov dword ptr [ebp-64h],eax
  256. 0000039d lea edx,[ebp-4Ch]
  257. 000003a0 mov ecx,dword ptr [ebp-60h]
  258. 000003a3 call FFF89648
  259. 000003a8 mov eax,dword ptr [ebp-60h]
  260. 000003ab cmp byte ptr [eax+25h],0
  261. 000003af jne 000003B9
  262. 000003b1 mov ecx,dword ptr [ebp-60h]
  263. 000003b4 call FFF91CA8
  264. 000003b9 mov eax,dword ptr [ebp-30h]
  265. 000003bc xor edx,edx
  266. 000003be mov dword ptr [eax+00000088h],edx
  267. 000003c4 mov eax,dword ptr [ebp-30h]
  268. 000003c7 mov byte ptr [eax+000000CFh],dl
  269. 000003cd mov dword ptr [ebp-20h],0
  270. 000003d4 mov dword ptr [ebp-1Ch],0FCh
  271. 000003db push 4EDAE78h
  272. 000003e0 jmp 000003E2
  273. 000003e2 movzx eax,byte ptr [ebp-4Ch]
  274. 000003e6 test eax,eax
  275. 000003e8 je 000003F2
  276. 000003ea mov ecx,dword ptr [ebp-64h]
  277. 000003ed call FFF89378
  278. 000003f2 pop eax
  279. 000003f3 jmp eax
  280. 000003f5 pop eax
  281. 000003f6 jmp eax
  282. 000003f8 mov dword ptr [ebp-1Ch],0
  283. 000003ff jmp 000003F5
  284. 00000401 mov eax,dword ptr [ebp-60h]
  285. 00000404 cmp byte ptr [eax+25h],0
  286. 00000408 je 0000041A
  287. 0000040a mov eax,dword ptr [ebp-30h]
  288. 0000040d cmp byte ptr [eax+000000CFh],0
  289. 00000414 je 000002F3
  290. 0000041a xor edx,edx
  291. 0000041c mov dword ptr [ebp-50h],edx
  292. 0000041f jmp 00944EC8
  293. 00000424 movzx eax,byte ptr [ebp-50h]
  294. 00000428 test eax,eax
  295. 0000042a je 00000434
  296. 0000042c mov ecx,dword ptr [ebp-68h]
  297. 0000042f call FFF89378
  298. 00000434 pop eax
  299. 00000435 jmp eax
  300. 00000437 cmp dword ptr [ebp-34h],1
  301. 0000043b jne 0000017D
  302. 00000441 mov eax,dword ptr [ebp-30h]
  303. 00000444 mov esi,dword ptr [eax+00000094h]
  304. 0000044a call FFF89628
  305. 0000044f cmp eax,esi
  306. 00000451 jne 0000017D
  307. 00000457 mov ecx,dword ptr [ebp-58h]
  308. 0000045a cmp dword ptr [ecx],ecx
  309. 0000045c call 000254B0
  310. 00000461 mov eax,dword ptr [ebp-58h]
  311. 00000464 mov ecx,dword ptr [eax+0Ch]
  312. 00000467 cmp dword ptr [ecx],ecx
  313. 00000469 call FFFA9428
  314. 0000046e jmp 0000017D
  315. 00000473 mov dword ptr [ebp-18h],0
  316. 0000047a jmp 000002F3
  317. 0000047f mov dword ptr [ebp-18h],0
  318. 00000486 jmp 000002F3
  319. 0000048b mov esi,dword ptr [ebp-54h]
  320. 0000048e mov edi,dword ptr [ebp-80h]
  321. 00000491 mov dword ptr [esi+0Ch],edi
  322. 00000494 lea esp,[ebp-0Ch]
  323. 00000497 pop ebx
  324. 00000498 pop esi
  325. 00000499 pop edi
  326. 0000049a pop ebp
  327. 0000049b ret 8
  328. 0000049e int 3
  329. 0000049f int 3
  330. 000004a0 int 3
  331. 000004a1 int 3
  332. 000004a2 int 3
  333. 000004a3 int 3
  334. 000004a4 int 3
  335. 000004a5 int 3
  336. 000004a6 int 3
  337. 000004a7 int 3
  338. 000004a8 int 3
  339. 000004a9 int 3
  340. 000004aa int 3
  341. 000004ab int 3
  342. 000004ac int 3
  343. 000004ad int 3
  344. 000004ae int 3
  345. 000004af int 3
  346. 000004b0 int 3
  347. 000004b1 int 3
  348. 000004b2 int 3
  349. 000004b3 int 3
  350. 000004b4 int 3
  351. 000004b5 int 3
  352. 000004b6 int 3
  353. 000004b7 int 3
  354. 000004b8 int 3
  355. 000004b9 mov eax,dword ptr [ebp-60h]
  356. 000004bc mov dword ptr [ebp-68h],eax
  357. 000004bf lea edx,[ebp-50h]
  358. 000004c2 mov ecx,dword ptr [ebp-60h]
  359. 000004c5 call FF644C39
  360. 000004ca mov eax,dword ptr [ebp-60h]
  361. 000004cd cmp byte ptr [eax+25h],0
  362. 000004d1 jne 000004DB
  363. 000004d3 mov ecx,dword ptr [ebp-60h]
  364. 000004d6 call FF64D299
  365. 000004db mov eax,dword ptr [ebp-30h]
  366. 000004de xor edx,edx
  367. 000004e0 mov dword ptr [eax+00000088h],edx
  368. 000004e6 mov eax,dword ptr [ebp-30h]
  369. 000004e9 mov byte ptr [eax+000000CFh],dl
  370. 000004ef mov dword ptr [ebp-1Ch],0
  371. 000004f6 mov dword ptr [ebp-18h],0FCh
  372. 000004fd push 4EDAEFFh
  373. 00000502 jmp FF6BBA15
  374. 00000507 xor eax,eax
  375. 00000509 jmp FF6BBA7C
  376. 0000050e mov eax,2
  377. 00000513 jmp FF6BBA7C
  378. 00000518 cmp dword ptr [ebp-40h],20000000h
  379. 0000051f je FF6BB699
  380. 00000525 jmp 00000531
  381. 00000527 mov ecx,0Ah
  382. 0000052c call FF644C41
  383. 00000531 mov eax,dword ptr [ebp-30h]
  384. 00000534 cmp byte ptr [eax+000000CFh],0
  385. 0000053b jne 00000527
  386. 0000053d jmp FF6BB699
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!