コード例 #1
0
L004012C4()
{
	/* unknown */ void  ebp;



    ecx = edi + 2708;
    do {
        (save)ecx;
        GetModuleHandleW();
    } while(eax != 0);
    (save)edi;
    L00401348(edx, eax);
    (restore)edi;
    return(GetCurrentThread());
}
コード例 #2
0
__entry_point__()
{



    (save)ebp;
    ebp = esp;
    esp = esp + -572;
    edx = esi;
    esi = edi;
    asm("xchg esi,edx");
    (save)ecx;
    (save)esi;
    *(ebp - 12) = 0;
    (save)ebx;
    (save)ebp;
    *(ebp - 56) = 0;
    esi = ebp - 56;
    (save)esi;
    (save)esi;
    (save)esi;
    (save)esi;
    (save)esi;
    if(*__imp__NtSetIoCompletion() == -1073741816) {
    } else {
        *__imp__TraceDumpExW();
        *__imp__TraceDumpExA();
        *__imp__TraceDumpExW();
        *__imp__TraceDumpExA();
        *__imp__TraceDumpExW();
        *__imp__TraceDumpExA();
        goto L00401000;
        asm("int3");
    }
    *(ebp - 60) = 0;
    (save)esi;
    (save)esi;
    (save)esi;
    (save)esi;
    (save)esi;
    eax = *__imp__NtQuerySemaphore() ^ -1073741821;
    if(!(esi = ebp - 60) && !(eax = eax - 1)) {
        L00401000();
    }
    (save)0;
    (save)0;
    (save)0;
    (save)0;
    (save)0;
    (save)0;
    (save)0;
    if(eax = *__imp__TraceDumpExA() - 87) {
        goto L00401000;
    }
    *(ebp - 72) = *(ebp - 72) & eax;
    *(ebp - 12) = *(ebp - 12) - ~(eax - -2146436741);
    ecx = *(ebp - 12);
    *(ebp - 12) = *(ebp - 12) + ( *(ebp - 72) + -2022351484 ^ 125478143);
    esi = *(ebp - 12);
    *(ebp + ~L00000018) = esi;
    *(ebp - 4) = *(ebp - 4) & esi;
    ecx = ecx + -2142152325;
    ebx = -1;
    *(ebp - 12) = esi - (ecx ^ -1) + 1 + *(ebp - 24);
    eax = ebp;
    0 = edi * edi;
    eax = eax + ~((edi ^ 680) + -256);
    *(ebp - 16) = 0;
    *(ebp - 16) = *(ebp - 16) + eax;
    *(ebp - 40) = 1;
    *(ebp - 40) = *(ebp - 40) + 4743167;
    esi = *(ebp - 16);
    esi = esi - -16;
    *(ebp - 28) = esi;
    0 = esi * esi;
    *(ebp - 4) = *(ebp - 4) + ~(esi | 48);
    *(ebp - 4) = !( *(ebp - 4));
    *(ebp - 4) = *(ebp - 4) - -1;
    (save) *(ebp - 40);
    (save) *(ebp - 4);
    (save) *(ebp - 12);
    L00401353(ebp + -424);
    esi = *( *(ebp - 16) - -4);
    *(ebp - 36) = esi + *( *(ebp - 16));
    esi = 64;
    *(ebp - 24) = 0;
    *(ebp - 8) = VirtualAlloc(0, ebp - 36, 12288, 64);
    ecx = 0;
    *(ebp - 32) = 0;
    edx = ebp - 32;
    *edx = *edx | 4194304;
    *(ebp + -428) = 0;
    if(0 != 0) {
        (save)ecx;
        goto L00401039;
L004012b0:
        *(ebp + -428) = *(ebp + -428) + 1;
        *(ebp - 28) = *(ebp - 28) + 8;
    }
    edi = *(ebp - 16);
    edx = *(ebp + -428);
    if(edx >= *(edi + 8)) {
        goto L00401361;
    }
    (save) *(ebp - 40);
    (save) *( *(ebp - 28) + 4);
    edi = *(ebp - 28);
    (save) *(ebp - 32) + *edi;
    (save) *(ebp - 8) + *(ebp - 24);
    L00401348();
    esi = *(ebp - 28);
    *(ebp - 24) = *(ebp - 24) + *(esi + 4);
    goto L004012b0;
L00401306:
    edi = 0;
    ebp = esp;
    *(ebp - 16) = -1;
    ebx = ebp - 16;
    eax = *__imp__RtlAddAccessAllowedObjectAce(0, 0, 0, 0, 0, 0, 0, ebp) + 122;
    if(eax != -1073741582) {
        asm("int3");
        goto L00401306;
    }
    eax = eax + -1074788973;
    (restore)ebp;
    goto VirtualAlloc;
}