- Joined
- Sep 8, 2007
- Messages
- 202
- Reaction score
- 24
Code:
005D50E0 > 83EC 1C SUB ESP,1C
005D50E3 . 56 PUSH ESI
005D50E4 . 57 PUSH EDI
005D50E5 . 68 BC61B000 PUSH LUNAClie.00B061BC
005D50EA . E8 86ECFEFF CALL LUNAClie.005C3D75
005D50EF . 8B7424 34 MOV ESI,DWORD PTR SS:[ESP+34]
005D50F3 . 83C4 04 ADD ESP,4
005D50F6 . BF 54A99200 MOV EDI,LUNAClie.0092A954 ; ASCII "anrgideoqkr"
005D50FB . B9 0C000000 MOV ECX,0C
005D5100 . 33C0 XOR EAX,EAX
005D5102 . F3:A6 REPE CMPS BYTE PTR ES:[EDI],BYTE PTR DS:>
[COLOR="DarkOrange"]005D5104 . EB 1C JE SHORT LUNAClie.005D5122[/COLOR]
005D5106 . 50 PUSH EAX ; /Style => MB_OK|MB_APPLMODAL
005D5107 . 68 48A99200 PUSH LUNAClie.0092A948 ; |Title = "Error!!"
005D510C . 68 14A99200 PUSH LUNAClie.0092A914 ; |Text = "You should not execute directly this file!!
005D5111 . 50 PUSH EAX ; |hOwner => NULL
005D5112 . FF15 E8DCB400 CALL DWORD PTR DS:[<&USER32.MessageBoxA>>; \MessageBoxA
005D5118 . 5F POP EDI
005D5119 . 33C0 XOR EAX,EAX
005D511B . 5E POP ESI
005D511C . 83C4 1C ADD ESP,1C
005D511F . C2 1000 RETN 10
Change
Code:
005D5104 . EB 1C JMP SHORT LUNAClie.005D5122