Exemplo n.º 1
0
L0040105C()
{
	/* unknown */ void  Vffffffd0;



    ebx = edx - 48;
    asm("adc edx,[ebp-0x28]");
    (save)ebx;
    (save)esi;
    (save) *(ebx + 348);
    (save) *(ebx + 548);
    L00401000();
    (restore)ebx;
    esi = esi - Vffffffd0;
    (save)0;
    GetDriveTypeA();
    edi = 4;
    do {
        *(ebx + -140) = *(ebx + -140) & -55620853;
        edx = edi;
        edi = edi - 1;
    } while(edi != 0);
    asm("adc [ebx-0x3c],edx");
    edi = edi + *(ebx + 128);
    return(GetForegroundWindow());
}
Exemplo n.º 2
0
L00401484()
{
	/* unknown */ void  ebp;



    (save)edi;
    L00401000(edx, eax);
    (restore)edi;
    edx = edi + 2708;
    do {
        (save)edx;
        GetModuleHandleW();
    } while(eax != 0);
    return(GetCurrentThreadId());
}
Exemplo n.º 3
0
__entry_point__()
{



    (save)ebp;
    ebp = esp;
    esp = esp + -572;
    edx = esi;
    esi = edi;
    asm("xchg esi,edx");
    (save)ecx;
    (save)esi;
    *(ebp - 12) = 0;
    (save)ebx;
    (save)ebp;
    *(ebp - 56) = 0;
    esi = ebp - 56;
    (save)esi;
    (save)esi;
    (save)esi;
    (save)esi;
    (save)esi;
    if(*__imp__NtSetIoCompletion() == -1073741816) {
    } else {
        *__imp__TraceDumpExW();
        *__imp__TraceDumpExA();
        *__imp__TraceDumpExW();
        *__imp__TraceDumpExA();
        *__imp__TraceDumpExW();
        *__imp__TraceDumpExA();
        goto L00401000;
        asm("int3");
    }
    *(ebp - 60) = 0;
    (save)esi;
    (save)esi;
    (save)esi;
    (save)esi;
    (save)esi;
    eax = *__imp__NtQuerySemaphore() ^ -1073741821;
    if(!(esi = ebp - 60) && !(eax = eax - 1)) {
        L00401000();
    }
    (save)0;
    (save)0;
    (save)0;
    (save)0;
    (save)0;
    (save)0;
    (save)0;
    if(eax = *__imp__TraceDumpExA() - 87) {
        goto L00401000;
    }
    *(ebp - 72) = *(ebp - 72) & eax;
    *(ebp - 12) = *(ebp - 12) - ~(eax - -2146436741);
    ecx = *(ebp - 12);
    *(ebp - 12) = *(ebp - 12) + ( *(ebp - 72) + -2022351484 ^ 125478143);
    esi = *(ebp - 12);
    *(ebp + ~L00000018) = esi;
    *(ebp - 4) = *(ebp - 4) & esi;
    ecx = ecx + -2142152325;
    ebx = -1;
    *(ebp - 12) = esi - (ecx ^ -1) + 1 + *(ebp - 24);
    eax = ebp;
    0 = edi * edi;
    eax = eax + ~((edi ^ 680) + -256);
    *(ebp - 16) = 0;
    *(ebp - 16) = *(ebp - 16) + eax;
    *(ebp - 40) = 1;
    *(ebp - 40) = *(ebp - 40) + 4743167;
    esi = *(ebp - 16);
    esi = esi - -16;
    *(ebp - 28) = esi;
    0 = esi * esi;
    *(ebp - 4) = *(ebp - 4) + ~(esi | 48);
    *(ebp - 4) = !( *(ebp - 4));
    *(ebp - 4) = *(ebp - 4) - -1;
    (save) *(ebp - 40);
    (save) *(ebp - 4);
    (save) *(ebp - 12);
    L00401353(ebp + -424);
    esi = *( *(ebp - 16) - -4);
    *(ebp - 36) = esi + *( *(ebp - 16));
    esi = 64;
    *(ebp - 24) = 0;
    *(ebp - 8) = VirtualAlloc(0, ebp - 36, 12288, 64);
    ecx = 0;
    *(ebp - 32) = 0;
    edx = ebp - 32;
    *edx = *edx | 4194304;
    *(ebp + -428) = 0;
    if(0 != 0) {
        (save)ecx;
        goto L00401039;
L004012b0:
        *(ebp + -428) = *(ebp + -428) + 1;
        *(ebp - 28) = *(ebp - 28) + 8;
    }
    edi = *(ebp - 16);
    edx = *(ebp + -428);
    if(edx >= *(edi + 8)) {
        goto L00401361;
    }
    (save) *(ebp - 40);
    (save) *( *(ebp - 28) + 4);
    edi = *(ebp - 28);
    (save) *(ebp - 32) + *edi;
    (save) *(ebp - 8) + *(ebp - 24);
    L00401348();
    esi = *(ebp - 28);
    *(ebp - 24) = *(ebp - 24) + *(esi + 4);
    goto L004012b0;
L00401306:
    edi = 0;
    ebp = esp;
    *(ebp - 16) = -1;
    ebx = ebp - 16;
    eax = *__imp__RtlAddAccessAllowedObjectAce(0, 0, 0, 0, 0, 0, 0, ebp) + 122;
    if(eax != -1073741582) {
        asm("int3");
        goto L00401306;
    }
    eax = eax + -1074788973;
    (restore)ebp;
    goto VirtualAlloc;
}