Skip to content

Instantly share code, notes, and snippets.

@slipher

slipher/gist:f63b2f1d693eb178e728

Last active August 29, 2015 14:16
Show Gist options
  • Save slipher/f63b2f1d693eb178e728 to your computer and use it in GitHub Desktop.
Save slipher/f63b2f1d693eb178e728 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
CEA2C2 ?? ??
0FCEA2C3 inc edx
0FCEA2C4 add al,8Bh
0FCEA2C6 push eax
0FCEA2C7 and bh,bh
0FCEA2C9 ror byte ptr [ecx+7D83F445h],cl
0FCEA2CF hlt
0FCEA2D0 add byte ptr [esi+ecx-7Dh],dh
0FCEA2D4 jge 0FCEA2CA
0FCEA2D6 add dword ptr [ebp+edx-7Dh],esi
0FCEA2DA jge 0FCEA2D0
0FCEA2DC add dh,byte ptr [ebp+ebx-15h]
0FCEA2E0 daa
0FCEA2E1 mov eax,dword ptr [ebp-4]
0FCEA2E4 or eax,10000000h
0FCEA2E9 mov dword ptr [ebp-4],eax
0FCEA2EC jmp 0FCEA308
0FCEA2EE mov ecx,dword ptr [ebp-4]
0FCEA2F1 or ecx,20000000h
0FCEA2F7 mov dword ptr [ebp-4],ecx
0FCEA2FA jmp 0FCEA308
0FCEA2FC mov edx,dword ptr [ebp-4]
0FCEA2FF or edx,40000000h
0FCEA305 mov dword ptr [ebp-4],edx
0FCEA308 mov eax,dword ptr [ebp-4]
0FCEA30B mov esp,ebp
0FCEA30D pop ebp
0FCEA30E ret
0FCEA30F int 3
0FCEA310 push ebp
0FCEA311 mov ebp,esp
0FCEA313 sub esp,8
0FCEA316 mov dword ptr [ebp-8],ecx
0FCEA319 mov eax,dword ptr [ebp-8]
0FCEA31C mov ecx,dword ptr [eax+8]
0FCEA31F and ecx,1
0FCEA322 je 0FCEA32D
0FCEA324 mov dword ptr [ebp-4],1
0FCEA32B jmp 0FCEA334
0FCEA32D mov dword ptr [ebp-4],0
0FCEA334 mov al,byte ptr [ebp-4]
0FCEA337 mov esp,ebp
0FCEA339 pop ebp
0FCEA33A ret
0FCEA33B int 3
0FCEA33C int 3
0FCEA33D int 3
0FCEA33E int 3
0FCEA33F int 3
0FCEA340 push ebp
0FCEA341 mov ebp,esp
0FCEA343 sub esp,8
0FCEA346 mov dword ptr [ebp-8],ecx
0FCEA349 mov eax,dword ptr [ebp-8]
0FCEA34C mov ecx,dword ptr [eax+8]
0FCEA34F and ecx,4
0FCEA352 je 0FCEA35D
0FCEA354 mov dword ptr [ebp-4],1
0FCEA35B jmp 0FCEA364
0FCEA35D mov dword ptr [ebp-4],0
0FCEA364 mov al,byte ptr [ebp-4]
0FCEA367 mov esp,ebp
0FCEA369 pop ebp
0FCEA36A ret
0FCEA36B int 3
0FCEA36C int 3
0FCEA36D int 3
0FCEA36E int 3
0FCEA36F int 3
0FCEA370 push ebp
0FCEA371 mov ebp,esp
0FCEA373 push ecx
0FCEA374 mov dword ptr [ebp-4],ecx
0FCEA377 mov eax,dword ptr [ebp-4]
0FCEA37A mov al,byte ptr [eax+4Eh]
0FCEA37D mov esp,ebp
0FCEA37F pop ebp
0FCEA380 ret
0FCEA381 int 3
0FCEA382 int 3
0FCEA383 int 3
0FCEA384 int 3
0FCEA385 int 3
0FCEA386 int 3
0FCEA387 int 3
0FCEA388 int 3
0FCEA389 int 3
0FCEA38A int 3
0FCEA38B int 3
0FCEA38C int 3
0FCEA38D int 3
0FCEA38E int 3
0FCEA38F int 3
0FCEA390 push ebp
0FCEA391 mov ebp,esp
0FCEA393 push ecx
0FCEA394 mov dword ptr [ebp-4],ecx
0FCEA397 mov eax,dword ptr [ebp-4]
0FCEA39A mov al,byte ptr [eax+0A0h]
0FCEA3A0 mov esp,ebp
0FCEA3A2 pop ebp
0FCEA3A3 ret
0FCEA3A4 int 3
0FCEA3A5 int 3
0FCEA3A6 int 3
0FCEA3A7 int 3
0FCEA3A8 int 3
0FCEA3A9 int 3
0FCEA3AA int 3
0FCEA3AB int 3
0FCEA3AC int 3
0FCEA3AD int 3
0FCEA3AE int 3
0FCEA3AF int 3
0FCEA3B0 push ebp
0FCEA3B1 mov ebp,esp
0FCEA3B3 sub esp,8
0FCEA3B6 mov dword ptr [ebp-8],ecx
0FCEA3B9 mov eax,dword ptr [ebp-8]
0FCEA3BC mov ecx,dword ptr [eax+8]
0FCEA3BF and ecx,2
0FCEA3C2 je 0FCEA3CD
0FCEA3C4 mov dword ptr [ebp-4],1
0FCEA3CB jmp 0FCEA3D4
0FCEA3CD mov dword ptr [ebp-4],0
0FCEA3D4 mov al,byte ptr [ebp-4]
0FCEA3D7 mov esp,ebp
0FCEA3D9 pop ebp
0FCEA3DA ret
0FCEA3DB int 3
0FCEA3DC int 3
0FCEA3DD int 3
0FCEA3DE int 3
0FCEA3DF int 3
0FCEA3E0 push ebp
0FCEA3E1 mov ebp,esp
0FCEA3E3 sub esp,8
0FCEA3E6 mov dword ptr [ebp-8],ecx
0FCEA3E9 mov eax,dword ptr [ebp-8]
0FCEA3EC cmp dword ptr [eax+3Ch],0
0FCEA3F0 je 0FCEA3FB
0FCEA3F2 mov dword ptr [ebp-4],1
0FCEA3F9 jmp 0FCEA402
0FCEA3FB mov dword ptr [ebp-4],0
0FCEA402 mov al,byte ptr [ebp-4]
0FCEA405 mov esp,ebp
0FCEA407 pop ebp
0FCEA408 ret
0FCEA409 int 3
0FCEA40A int 3
0FCEA40B int 3
0FCEA40C int 3
0FCEA40D int 3
0FCEA40E int 3
0FCEA40F int 3
0FCEA410 push ebp
0FCEA411 mov ebp,esp
0FCEA413 push ecx
0FCEA414 mov dword ptr [ebp-4],ecx
0FCEA417 mov eax,dword ptr [ebp-4]
0FCEA41A cmp dword ptr [eax+0Ch],0
0FCEA41E je 0FCEA43F
0FCEA420 mov ecx,1
0FCEA425 mov edx,dword ptr [ebp-4]
0FCEA428 add edx,10h
0FCEA42B xchg ecx,dword ptr [edx]
0FCEA42D cmp ecx,2
0FCEA430 jne 0FCEA43F
0FCEA432 call 0FCD8000
0FCEA437 mov ecx,dword ptr [ebp-4]
0FCEA43A call 0FCEA100
0FCEA43F mov esp,ebp
0FCEA441 pop ebp
0FCEA442 ret
0FCEA443 int 3
0FCEA444 int 3
0FCEA445 int 3
0FCEA446 int 3
0FCEA447 int 3
0FCEA448 int 3
0FCEA449 int 3
0FCEA44A int 3
0FCEA44B int 3
0FCEA44C int 3
0FCEA44D int 3
0FCEA44E int 3
0FCEA44F int 3
0FCEA450 push ebp
0FCEA451 mov ebp,esp
0FCEA453 push ecx
0FCEA454 mov dword ptr [ebp-4],ecx
0FCEA457 mov ecx,1
0FCEA45C mov edx,dword ptr [ebp-4]
0FCEA45F add edx,10h
0FCEA462 xor eax,eax
0FCEA464 lock cmpxchg dword ptr [edx],ecx
0FCEA468 test eax,eax
0FCEA46A jne 0FCEA489
0FCEA46C mov ecx,dword ptr [ebp-4]
0FCEA46F call 0FCEA490
0FCEA474 mov eax,dword ptr [ebp-4]
0FCEA477 mov ecx,dword ptr [eax]
0FCEA479 mov edx,dword ptr [ebp-4]
0FCEA47C mov eax,dword ptr [ecx]
0FCEA47E mov ecx,dword ptr [edx]
0FCEA480 mov edx,dword ptr [eax+0Ch]
0FCEA483 call edx
0FCEA485 mov al,1
0FCEA487 jmp 0FCEA48B
0FCEA489 xor al,al
0FCEA48B mov esp,ebp
0FCEA48D pop ebp
0FCEA48E ret
0FCEA48F int 3
0FCEA490 push ebp
0FCEA491 mov ebp,esp
0FCEA493 push ecx
0FCEA494 mov dword ptr [ebp-4],ecx
0FCEA497 mov eax,dword ptr [ebp-4]
0FCEA49A mov ecx,dword ptr [eax+8]
0FCEA49D and ecx,0FFFFFFFEh
0FCEA4A0 mov edx,dword ptr [ebp-4]
0FCEA4A3 mov dword ptr [edx+8],ecx
0FCEA4A6 mov esp,ebp
0FCEA4A8 pop ebp
0FCEA4A9 ret
0FCEA4AA int 3
0FCEA4AB int 3
0FCEA4AC int 3
0FCEA4AD int 3
0FCEA4AE int 3
0FCEA4AF int 3
0FCEA4B0 push ebp
0FCEA4B1 mov ebp,esp
0FCEA4B3 push ecx
0FCEA4B4 mov dword ptr [ebp-4],ecx
0FCEA4B7 mov ecx,dword ptr [ebp+8]
0FCEA4BA call 0FCEA310
0FCEA4BF movzx eax,al
0FCEA4C2 test eax,eax
0FCEA4C4 je 0FCEA4FC
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment