Пример #1
0
__entry_point__()
{



    edx = -1;
    (save)0;
    *__imp__GetModuleHandleA();
    *__imp__GetCommandLineA();
    (save)0;
    *__imp__GetModuleHandleA();
    eax = 86016;
    eax = L0040109F();
    asm("xchg eax,esp");
    ecx = *(eax + 12);
    esp = eax;
    ebx = 176;
    if(!(edx = *(ecx + 176) - 1)) {
        ebx = 184;
        asm("adc dword [ecx+ebx],+0xa");
        ebx = ebx - 8;
    }
    *(ecx + ebx) = edx;
    return(0);
}
Пример #2
0
__entry_point__()
{



    edx = edx - 830117673;
    ecx = ecx - esi;
    (save)ebx;
    (save)edi;
    ebx = ebx | -109;
    edi = edi - eax;
    eax = eax & 75;
    ecx = ecx + 1769020166;
    (save)esi;
    *__imp__GetCommandLineA();
    *__imp__GetTickCount();
    edi = edi + 1;
    ebx = ebx - -44;
    ecx = ecx | 1;
    ebx = ebx + edx;
    eax = *__imp__GetCurrentProcessId() ^ ebx;
    edi = (edi ^ -1315938437) + 461210953;
    eax = eax + 1;
    (save)0;
    edi = (edi | 58) ^ -93;
    eax = *__imp__RpcStringFreeW() - 87;
    esi = esi | ecx;
    edi = eax + 0x401e19;
    edx = edx & -576671315;
    (save)0;
    (save)esp;
    esi = (esi & 2038903456 | -12) & ecx;
    eax = eax ^ 99;
    esi = esi & -29;
    ecx = ecx - -979118024;
    (save)64;
    edx = eax;
    ecx = ecx - 37;
    eax = eax ^ ecx;
    ebx = ebx + -81;
    (save)3391;
    eax = (eax | -9) & 1228088333;
    edx = edx ^ 109;
    eax = edx;
    ecx = ecx | edx;
    esi = esi | 24;
    eax = eax - 1;
    eax = *__imp__VirtualProtect(0x401000) & ebx;
    esi = 0x401000;
    edx = edx + edi - 1;
    eax = eax & ebx;
    ecx = ecx | edx;
    edx = edx - 1;
    ecx = ecx + 100;
    eax = eax + 1765692386;
    edx = edx - -19;
    ebx = 3391 >> 2;
    ecx = edi;
    ecx = 7;
    goto ( *edi);
    ecx = ecx - 1;
    asm("lodsd");
    ecx = ecx + edx - -69 ^ -881175605 | -1424066319;
    eax = eax + -1381679797;
    ecx = (ecx | esi) & -105343923;
    eax = eax ^ -1381679797;
    ecx = ecx + 47 + 1;
    *(esi - 4) = eax;
    eax = eax + ebx & 6 & -23;
    ecx = edx;
    if(!(ebx = ebx - 1)) {
        goto ( *edi);
    }
    ecx = 268435455;
L00401e5d:
    esi = esi ^ -58 ^ ebx;
    edi = edi & -9;
    edx = edx + 1;
    ebx = 7;
    if(ecx = ecx - 1) {
        goto L00401e5d;
    }
    edx = edx - 7;
    edi = edi - 1;
    eax = eax & 53 ^ 55;
    (restore)esi;
    ebx = 7 - edx;
    (restore)edi;
    (restore)ebx;
    goto L00401001;
}