L0040105C() { /* unknown */ void Vffffffd0; ebx = edx - 48; asm("adc edx,[ebp-0x28]"); (save)ebx; (save)esi; (save) *(ebx + 348); (save) *(ebx + 548); L00401000(); (restore)ebx; esi = esi - Vffffffd0; (save)0; GetDriveTypeA(); edi = 4; do { *(ebx + -140) = *(ebx + -140) & -55620853; edx = edi; edi = edi - 1; } while(edi != 0); asm("adc [ebx-0x3c],edx"); edi = edi + *(ebx + 128); return(GetForegroundWindow()); }
L00401484() { /* unknown */ void ebp; (save)edi; L00401000(edx, eax); (restore)edi; edx = edi + 2708; do { (save)edx; GetModuleHandleW(); } while(eax != 0); return(GetCurrentThreadId()); }
__entry_point__() { (save)ebp; ebp = esp; esp = esp + -572; edx = esi; esi = edi; asm("xchg esi,edx"); (save)ecx; (save)esi; *(ebp - 12) = 0; (save)ebx; (save)ebp; *(ebp - 56) = 0; esi = ebp - 56; (save)esi; (save)esi; (save)esi; (save)esi; (save)esi; if(*__imp__NtSetIoCompletion() == -1073741816) { } else { *__imp__TraceDumpExW(); *__imp__TraceDumpExA(); *__imp__TraceDumpExW(); *__imp__TraceDumpExA(); *__imp__TraceDumpExW(); *__imp__TraceDumpExA(); goto L00401000; asm("int3"); } *(ebp - 60) = 0; (save)esi; (save)esi; (save)esi; (save)esi; (save)esi; eax = *__imp__NtQuerySemaphore() ^ -1073741821; if(!(esi = ebp - 60) && !(eax = eax - 1)) { L00401000(); } (save)0; (save)0; (save)0; (save)0; (save)0; (save)0; (save)0; if(eax = *__imp__TraceDumpExA() - 87) { goto L00401000; } *(ebp - 72) = *(ebp - 72) & eax; *(ebp - 12) = *(ebp - 12) - ~(eax - -2146436741); ecx = *(ebp - 12); *(ebp - 12) = *(ebp - 12) + ( *(ebp - 72) + -2022351484 ^ 125478143); esi = *(ebp - 12); *(ebp + ~L00000018) = esi; *(ebp - 4) = *(ebp - 4) & esi; ecx = ecx + -2142152325; ebx = -1; *(ebp - 12) = esi - (ecx ^ -1) + 1 + *(ebp - 24); eax = ebp; 0 = edi * edi; eax = eax + ~((edi ^ 680) + -256); *(ebp - 16) = 0; *(ebp - 16) = *(ebp - 16) + eax; *(ebp - 40) = 1; *(ebp - 40) = *(ebp - 40) + 4743167; esi = *(ebp - 16); esi = esi - -16; *(ebp - 28) = esi; 0 = esi * esi; *(ebp - 4) = *(ebp - 4) + ~(esi | 48); *(ebp - 4) = !( *(ebp - 4)); *(ebp - 4) = *(ebp - 4) - -1; (save) *(ebp - 40); (save) *(ebp - 4); (save) *(ebp - 12); L00401353(ebp + -424); esi = *( *(ebp - 16) - -4); *(ebp - 36) = esi + *( *(ebp - 16)); esi = 64; *(ebp - 24) = 0; *(ebp - 8) = VirtualAlloc(0, ebp - 36, 12288, 64); ecx = 0; *(ebp - 32) = 0; edx = ebp - 32; *edx = *edx | 4194304; *(ebp + -428) = 0; if(0 != 0) { (save)ecx; goto L00401039; L004012b0: *(ebp + -428) = *(ebp + -428) + 1; *(ebp - 28) = *(ebp - 28) + 8; } edi = *(ebp - 16); edx = *(ebp + -428); if(edx >= *(edi + 8)) { goto L00401361; } (save) *(ebp - 40); (save) *( *(ebp - 28) + 4); edi = *(ebp - 28); (save) *(ebp - 32) + *edi; (save) *(ebp - 8) + *(ebp - 24); L00401348(); esi = *(ebp - 28); *(ebp - 24) = *(ebp - 24) + *(esi + 4); goto L004012b0; L00401306: edi = 0; ebp = esp; *(ebp - 16) = -1; ebx = ebp - 16; eax = *__imp__RtlAddAccessAllowedObjectAce(0, 0, 0, 0, 0, 0, 0, ebp) + 122; if(eax != -1073741582) { asm("int3"); goto L00401306; } eax = eax + -1074788973; (restore)ebp; goto VirtualAlloc; }