Ejemplo n.º 1
0
__entry_point__()
{



    edx = -1;
    (save)0;
    *__imp__GetModuleHandleA();
    *__imp__GetCommandLineA();
    (save)0;
    *__imp__GetModuleHandleA();
    eax = 86016;
    eax = L0040109F();
    asm("xchg eax,esp");
    ecx = *(eax + 12);
    esp = eax;
    ebx = 176;
    if(!(edx = *(ecx + 176) - 1)) {
        ebx = 184;
        asm("adc dword [ecx+ebx],+0xa");
        ebx = ebx - 8;
    }
    *(ecx + ebx) = edx;
    return(0);
}
Ejemplo n.º 2
0
__entry_point__()
{



    ecx = ecx & 155407173 & 155407173 & 155407173 & 155407173 & 155407173 & 155407173 & 155407173 & 155407173 & 155407173 & 155407173;
    eax = eax + ecx;
    ecx = ecx + edx;
    (save)0;
    *__imp__GetModuleHandleA();
    asm("Unknown opcode 0x0f");
    asm("Unknown opcode 0xc6");
    asm("hlt");
    edx = esp;
    for((save)149630669; 1; eax = eax - 149630660) {
        (restore)eax;
    }
    (save)edx;
    (save)eax;
    asm("rol dword [esp],0x5");
    (restore)edx;
    asm("bswap edx");
    *esp = *esp + edx + -1476385172;
    *esp();
    asm("adc eax,+0x35");
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *__imp__GetModuleHandleA();
    (save)0;
    *L20402008();
}
Ejemplo n.º 3
0
__entry_point__()
{
	/* unknown */ void  Vfffff758;
	/* unknown */ void  Vfffff75c;
	/* unknown */ void  Vfffff760;
	/* unknown */ void  Vfffff764;
	/* unknown */ void  Vfffff768;
	/* unknown */ void  Vfffff78c;
	/* unknown */ void  Vfffff7bc;
	/* unknown */ void  Vfffff9d4;
	/* unknown */ void  Vfffffa34;
	/* unknown */ void  Vfffffab0;
	/* unknown */ void  Vfffffab4;
	/* unknown */ void  Vfffffac4;
	/* unknown */ void  Vfffffac8;
	/* unknown */ void  Vfffffacc;
	/* unknown */ void  Vfffffad0;
	/* unknown */ void  Vfffffad4;
	/* unknown */ void  Vfffffad8;
	/* unknown */ void  Vfffffadc;
	/* unknown */ void  Vfffffae0;
	/* unknown */ void  Vfffffaec;
	/* unknown */ void  Vfffffaf4;
	/* unknown */ void  Vfffffafc;
	/* unknown */ void  Vfffffb00;
	/* unknown */ void  Vfffffb08;
	/* unknown */ void  Vfffffb20;
	/* unknown */ void  Vfffffb2c;
	/* unknown */ void  Vfffffb30;
	/* unknown */ void  Vfffffb3c;
	/* unknown */ void  Vfffffb40;
	/* unknown */ void  Vfffffb48;
	/* unknown */ void  Vfffffb4c;
	/* unknown */ void  Vfffffb58;
	/* unknown */ void  Vfffffb5c;
	/* unknown */ void  Vfffffb68;
	/* unknown */ void  Vfffffbf0;



    (save)ebp;
    ebp = esp;
    esp = esp & -16;
    esp = esp - 2112;
    (save)0;
    esi = *__imp__GetModuleHandleA();
    edi = *(esi + 60);
    edx = *(esi + edi + 6) & 65535;
    ebx = edi + esi + 248;
    if(edx > 0) {
        *esp = edi;
        edi = edx;
        Vfffff7bc = esi;
        esi = 0;
        do {
            if(L004018F0(ebx, 4203056, 6) == 0) {
                break;
            }
            esi = esi + 1;
            ebx = ebx + 40;
        } while(esi < edi);
        edi = *esp;
        esi = Vfffff7bc;
    }
    (save) & Vfffffbf0;
    (save)4;
    (save)4096;
    (save)esi;
    *__imp__VirtualProtect();
    (save)4203072;
    (save)311;
    *(esi + edi + 136) = *(ebx + 12);
    (save)esi;
    *(esi + edi + 140) = *(ebx + 8);
    edi = *__imp__FindResourceA();
    (save)edi;
    (save)esi;
    (save) *__imp__LoadResource();
    ebx = *__imp__LockResource();
    (save)edi;
    (save)esi;
    Vfffff78c = *__imp__SizeofResource();
    (save)4203072;
    (save)312;
    (save)0;
    esi = *__imp__FindResourceA();
    (save)esi;
    (save)0;
    edi = *__imp__SizeofResource();
    (save)esi;
    (save)0;
    (save) *__imp__LoadResource();
    esi = *__imp__LockResource();
    L00401550();
    (save)260;
    (save) & Vfffffa34;
    (save)0;
    *__imp__GetModuleFileNameA();
    asm("o16 movq mm1,[0x4020c0]");
    asm("o16 movq mm0,[0x4020d0]");
    eax = 0;
    do {
        asm("o16 movq [esp+eax*4+0x440],mm0");
        asm("o16 paddd mm0,mm1");
        asm("o16 movq [esp+eax*4+0x450],mm0");
        asm("o16 paddd mm0,mm1");
        asm("o16 movq [esp+eax*4+0x460],mm0");
        asm("o16 paddd mm0,mm1");
        asm("o16 movq [esp+eax*4+0x470],mm0");
        asm("o16 paddd mm0,mm1");
        eax = eax + 16;
    } while(eax < 256);
    Vfffff768 = esi;
    Vfffff764 = edi;
    *esp = ebx;
    ecx = 0;
    esi = 0;
    do {
        ebx = *(esp + esi * 4 + 1088);
        ecx = ecx + ebx;
        eax = esi;
        edx = 0;
        if(!(ecx = ecx + ( *(Vfffff764 / Vfffff764 % Vfffff764 / Vfffff764 + Vfffff768) & 255) & -2147483393)) {
            ecx = (ecx - 1 | -256) + 1;
        }
        eax = *(esp + ecx * 4 + 1088);
        *(esp + esi * 4 + 1088) = eax;
        ebx = bl & 255;
        esi = esi + 1;
        *(esp + ecx * 4 + 1088) = ebx;
    } while(esi < 256);
    ebx = *esp;
    edx = esi;
    if(Vfffff760 > 0) {
        *esp = ebx;
        esi = 0;
        edi = ebx;
        do {
            if(!(edx = edx + 1 & -2147483393)) {
                edx = (edx - 1 | -256) + 1;
            }
            if(!(ecx = ecx + *(esp + edx * 4 + 1088) & -2147483393)) {
                ecx = (ecx - 1 | -256) + 1;
            }
            *(esp + edx * 4 + 1088) = *(esp + ecx * 4 + 1088);
            eax = *edi & 255;
            ebx = bl & 255;
            *(esp + ecx * 4 + 1088) = ebx;
            if(!(ebx = *(esp + ecx * 4 + 1088) + *(esp + edx * 4 + 1088) & -2147483393)) {
                ebx = (ebx - 1 | -256) + 1;
            }
            eax = eax ^ *(esp + ebx * 4 + 1088);
            *edi = al;
            edi = edi + 1;
            esi = esi + 1;
        } while(esi < Vfffff760);
        ebx = *esp;
    }
    asm("o16 pxor mm0,mm0");
    asm("Unknown opcode 0x0f");
    Vfffffb2c = Vfffffb2c - eax;
    asm("Unknown opcode 0x0f");
    Vfffffb3c = Vfffffb3c - eax;
    asm("Unknown opcode 0x0f");
    Vfffffb4c = Vfffffb4c - eax;
    asm("Unknown opcode 0x0f");
    Vfffffb5c = Vfffffb5c - eax;
    asm("o16 movd [esp+0x410],mm0");
    Vfffffb2c = 68;
    *L00403010 = ebx;
    *esp = 65543;
    if(( *ebx & 65535) == 23117) {
        eax = *(ebx + 60) + ebx;
        *L0040300C = eax;
        if(*eax == 17744) {
            (save)4202884;
            (save)4202900;
            (save) *__imp__GetModuleHandleA();
            Vfffffb68 = *__imp__GetProcAddress();
            (save)4202916;
            (save)4202928;
            (save) *__imp__GetModuleHandleA();
            Vfffffb58 = *__imp__GetProcAddress();
            (save)4202884;
            (save)4202952;
            (save) *__imp__GetModuleHandleA();
            Vfffffb5c = *__imp__GetProcAddress();
            (save)4202884;
            (save)4202968;
            (save) *__imp__GetModuleHandleA();
            Vfffffb48 = *__imp__GetProcAddress();
            (save)4202884;
            (save)4202988;
            (save) *__imp__GetModuleHandleA();
            Vfffffb40 = *__imp__GetProcAddress();
            (save)4202884;
            (save)4203008;
            (save) *__imp__GetModuleHandleA();
            esi = *__imp__GetProcAddress();
            (save)4202884;
            (save)4203028;
            (save) *__imp__GetModuleHandleA();
            edi = *__imp__GetProcAddress();
            (save) & Vfffffb30;
            (save) & Vfffffad8;
            (save)0;
            (save)0;
            (save)4;
            (save)0;
            (save)0;
            (save)0;
            (save) & Vfffff9d4;
            (save)0;
            Vfffffb20();
            (save) *( *L0040300C + 52);
            (save)Vfffffb08;
            Vfffffaf4();
            eax = *L0040300C;
            (save)64;
            (save)12288;
            (save) *(eax + 80);
            (save) *(eax + 52);
            (save)Vfffffb00;
            Vfffffafc();
            eax = *L0040300C;
            (save)0;
            (save) *(eax + 84);
            (save)ebx;
            (save) *(eax + 52);
            (save)Vfffffaec;
            Vfffffae0();
            eax = *L0040300C;
            if(( *(eax + 6) & 65535) > 0) {
                Vfffffac4 = edi;
                edi = Vfffffacc;
                Vfffffac8 = esi;
                esi = 0;
                do {
                    (save)0;
                    edx = esi + esi * 4;
                    edx = *( *L00403010 + 60) + ebx + 248 + edx * 8;
                    (save) *(edx + 16);
                    ecx = *(edx + 12) + *(eax + 52);
                    *L00403008 = edx;
                    (save) *(edx + 20) + ebx;
                    (save)ecx;
                    (save)Vfffffad8;
                    *edi();
                    eax = *L0040300C;
                    ecx = *(eax + 6) & 65535;
                    esi = esi + 1;
                } while(esi < ecx);
                edi = Vfffffab0;
                esi = Vfffffab4;
            }
            ebx = esp;
            (save)ebx;
            (save)Vfffffadc;
            Vfffffad0();
            eax = *L0040300C;
            Vfffff758 = *(eax + 52) + *(eax + 40);
            (save)ebx;
            (save)Vfffffad4;
            *esi();
            (save)Vfffffacc;
            *edi();
        }
    }
    (save)15000;
    *__imp__Sleep();
    (save)0;
    *__imp__ExitProcess();
    eax = Vfffff758;
    edx = Vfffff75c;
    ecx = Vfffff760;
}