Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- void __cdecl StartAddress()
- {
- HMODULE ModuleHandleA; // eax
- unsigned int v1; // ecx
- unsigned int v2; // ecx
- __int64 v3; // xmm0_8
- unsigned int v4; // kr04_4
- unsigned int v5; // ecx
- __m128i v6; // xmm0
- __m128i v7; // xmm0
- __m128i v8; // xmm1
- char *v9; // edi
- int v10; // esi
- int v11; // esi
- char v12; // al
- UINT PrivateProfileIntA; // [esp+14h] [ebp-15Ch]
- char v14; // [esp+1Ch] [ebp-154h]
- __int128 v15; // [esp+20h] [ebp-150h] BYREF
- _BYTE v16[16]; // [esp+30h] [ebp-140h] BYREF
- _BYTE v17[4]; // [esp+40h] [ebp-130h]
- unsigned int v18; // [esp+44h] [ebp-12Ch]
- CHAR ModuleName[16]; // [esp+50h] [ebp-120h] BYREF
- CHAR Buffer[16]; // [esp+60h] [ebp-110h] BYREF
- __int128 v21[15]; // [esp+70h] [ebp-100h]
- ModuleHandleA = GetModuleHandleA("samp.dll");
- v1 = 0;
- samp_base = (int)ModuleHandleA;
- strcpy(ModuleName, "O9 =-&<)&#*a+##");
- do
- ModuleName[++v1] ^= ModuleName[0];
- while ( v1 < 0xE );
- ModuleName[15] = 0;
- if ( GetModuleHandleA(&ModuleName[1]) )
- {
- v2 = 0;
- strcpy(ModuleName, "5VY\\P[AF\\QP\x1BTF\\");
- do
- ModuleName[++v2] ^= ModuleName[0];
- while ( v2 < 0xE );
- ModuleName[15] = 0;
- if ( !GetModuleHandleA(&ModuleName[1]) )
- sub_10001030();
- }
- while ( !*(_DWORD *)(samp_base + 2549980) )
- Sleep(0x64u);
- GetCurrentDirectoryA(0x104u, Buffer);
- strncat(Buffer, "\\server_connect.ini", 0x14u);
- PrivateProfileIntA = GetPrivateProfileIntA("mazeconnect", "port", 7777, Buffer);
- switch ( GetPrivateProfileIntA("mazeconnect", "location_id", 0, Buffer) )
- {
- case 3u:
- v3 = 0x31322E31392E3135i64;
- strcpy(&ModuleName[8], "5.125");
- goto LABEL_82;
- case 4u:
- v3 = 0x2E3335322E353831i64;
- strcpy(&ModuleName[8], "34.52");
- goto LABEL_82;
- case 5u:
- v3 = 0x322E31332E363731i64;
- strcpy(&ModuleName[8], "33.153");
- goto LABEL_82;
- case 6u:
- v3 = 0x2E3233312E343631i64;
- strcpy(&ModuleName[8], "201.89");
- goto LABEL_82;
- case 7u:
- v3 = 0x2E3230322E393431i64;
- strcpy(&ModuleName[8], "88.119");
- goto LABEL_82;
- case 8u:
- v3 = 0x2E3536312E383831i64;
- strcpy(&ModuleName[8], "5.201");
- goto LABEL_82;
- case 9u:
- v3 = 0x322E39352E363431i64;
- strcpy(&ModuleName[8], "09.106");
- goto LABEL_82;
- case 0xAu:
- v3 = 0x2E3536312E383831i64;
- strcpy(&ModuleName[8], "6.206");
- goto LABEL_82;
- case 0xBu:
- v3 = 3761119457769828661i64;
- strcpy(&ModuleName[8], "4.102");
- goto LABEL_82;
- case 0xCu:
- v3 = 4048230518132453685i64;
- strcpy(&ModuleName[8], "4.40");
- goto LABEL_82;
- case 0xDu:
- strcpy(ModuleName, "147.135.229.229");
- goto LABEL_83;
- case 0xEu:
- v3 = 3759997930072584761i64;
- strcpy(&ModuleName[8], "9.114");
- goto LABEL_82;
- case 0xFu:
- v3 = 3329343414661888049i64;
- strcpy(&ModuleName[8], "173.35");
- goto LABEL_82;
- case 0x10u:
- v3 = 3832895555289101369i64;
- strcpy(&ModuleName[8], "4.0");
- goto LABEL_82;
- case 0x11u:
- v3 = 3832895568190780469i64;
- strcpy(&ModuleName[8], "0.219");
- goto LABEL_82;
- case 0x12u:
- v3 = 3329627084367083569i64;
- strcpy(&ModuleName[8], "3.143");
- goto LABEL_82;
- case 0x13u:
- strcpy(ModuleName, "188.165.138.225");
- goto LABEL_83;
- case 0x1Fu:
- v3 = 0x2E3233312E343631i64;
- strcpy(&ModuleName[8], "119.7");
- goto LABEL_82;
- case 0x20u:
- v3 = 0x2E3933312E353831i64;
- strcpy(&ModuleName[8], "68.64");
- goto LABEL_82;
- case 0x22u:
- v3 = 0x30322E38332E3135i64;
- strcpy(&ModuleName[8], "7.210");
- goto LABEL_82;
- case 0x24u:
- v3 = 0x3830312E39332E35i64;
- strcpy(&ModuleName[8], ".48");
- goto LABEL_82;
- case 0x25u:
- v3 = 0x3830312E39332E35i64;
- strcpy(&ModuleName[8], ".49");
- goto LABEL_82;
- case 0x26u:
- v3 = 0x3830312E39332E35i64;
- strcpy(&ModuleName[8], ".50");
- goto LABEL_82;
- case 0x27u:
- v3 = 0x3830312E39332E35i64;
- strcpy(&ModuleName[8], ".51");
- goto LABEL_82;
- case 0x28u:
- v3 = 0x3830312E39332E35i64;
- strcpy(&ModuleName[8], ".52");
- goto LABEL_82;
- case 0x29u:
- v3 = 0x3830312E39332E35i64;
- strcpy(&ModuleName[8], ".53");
- goto LABEL_82;
- case 0x2Au:
- v3 = 0x3830312E39332E35i64;
- strcpy(&ModuleName[8], ".54");
- goto LABEL_82;
- case 0x2Bu:
- v3 = 0x3830312E39332E35i64;
- strcpy(&ModuleName[8], ".55");
- goto LABEL_82;
- case 0x2Cu:
- v3 = 0x2E3233312E343631i64;
- strcpy(&ModuleName[8], "219.35");
- goto LABEL_82;
- case 0x2Du:
- v3 = 0x312E34392E313431i64;
- strcpy(&ModuleName[8], "84.104");
- goto LABEL_82;
- case 0x2Eu:
- v3 = 0x312E34392E313431i64;
- strcpy(&ModuleName[8], "84.105");
- goto LABEL_82;
- case 0x2Fu:
- v3 = 0x312E34392E313431i64;
- strcpy(&ModuleName[8], "84.106");
- goto LABEL_82;
- case 0x30u:
- v3 = 0x312E34392E313431i64;
- strcpy(&ModuleName[8], "84.107");
- goto LABEL_82;
- case 0x31u:
- v3 = 0x312E34392E313431i64;
- strcpy(&ModuleName[8], "84.108");
- goto LABEL_82;
- case 0x32u:
- v3 = 0x312E34392E313431i64;
- strcpy(&ModuleName[8], "84.109");
- goto LABEL_82;
- case 0x33u:
- v3 = 0x312E34392E313431i64;
- strcpy(&ModuleName[8], "84.110");
- goto LABEL_82;
- case 0x34u:
- v3 = 0x312E34392E313431i64;
- strcpy(&ModuleName[8], "84.111");
- goto LABEL_82;
- case 0x35u:
- v3 = 0x32382E36332E3435i64;
- strcpy(&ModuleName[8], ".238");
- goto LABEL_82;
- case 0x38u:
- v3 = 0x30322E38332E3135i64;
- strcpy(&ModuleName[8], "7.237");
- goto LABEL_82;
- case 0x39u:
- v3 = 0x2E3536312E383831i64;
- strcpy(&ModuleName[8], "59.228");
- goto LABEL_82;
- case 0x3Au:
- v3 = 0x2E3536312E383831i64;
- strcpy(&ModuleName[8], "60.162");
- goto LABEL_82;
- case 0x3Bu:
- v3 = 0x392E32332E383731i64;
- strcpy(&ModuleName[8], "8.14");
- goto LABEL_82;
- case 0x3Cu:
- v3 = 0x392E32332E383731i64;
- strcpy(&ModuleName[8], "7.38");
- goto LABEL_82;
- case 0x3Du:
- v3 = 0x312E35392E313431i64;
- strcpy(&ModuleName[8], "90.138");
- goto LABEL_82;
- case 0x3Eu:
- v3 = 0x312E35392E313431i64;
- strcpy(&ModuleName[8], "90.139");
- goto LABEL_82;
- case 0x3Fu:
- v3 = 0x312E35392E313431i64;
- strcpy(&ModuleName[8], "90.140");
- goto LABEL_82;
- case 0x40u:
- v3 = 0x312E35392E313431i64;
- strcpy(&ModuleName[8], "90.141");
- goto LABEL_82;
- case 0x41u:
- v3 = 0x312E35392E313431i64;
- strcpy(&ModuleName[8], "90.142");
- goto LABEL_82;
- case 0x42u:
- v3 = 0x312E35392E313431i64;
- strcpy(&ModuleName[8], "90.143");
- goto LABEL_82;
- case 0x43u:
- v3 = 0x312E35392E313431i64;
- strcpy(&ModuleName[8], "90.144");
- goto LABEL_82;
- case 0x44u:
- v3 = 0x312E35392E313431i64;
- strcpy(&ModuleName[8], "90.145");
- goto LABEL_82;
- case 0x45u:
- v3 = 0x312E35392E313431i64;
- strcpy(&ModuleName[8], "90.146");
- goto LABEL_82;
- case 0x46u:
- v3 = 0x312E35392E313431i64;
- strcpy(&ModuleName[8], "90.147");
- goto LABEL_82;
- case 0x47u:
- v3 = 0x31312E38332E3435i64;
- strcpy(&ModuleName[8], "7.72");
- goto LABEL_82;
- case 0x48u:
- v3 = 0x31312E38332E3435i64;
- strcpy(&ModuleName[8], "7.73");
- goto LABEL_82;
- case 0x49u:
- v3 = 0x31312E38332E3435i64;
- strcpy(&ModuleName[8], "7.74");
- goto LABEL_82;
- case 0x4Au:
- v3 = 0x31312E38332E3435i64;
- strcpy(&ModuleName[8], "7.75");
- goto LABEL_82;
- case 0x4Bu:
- v3 = 0x31312E38332E3435i64;
- strcpy(&ModuleName[8], "7.76");
- goto LABEL_82;
- case 0x4Cu:
- v3 = 0x31312E38332E3435i64;
- strcpy(&ModuleName[8], "7.77");
- goto LABEL_82;
- case 0x4Du:
- v3 = 0x31312E38332E3435i64;
- strcpy(&ModuleName[8], "7.78");
- goto LABEL_82;
- case 0x4Eu:
- v3 = 0x31312E38332E3435i64;
- strcpy(&ModuleName[8], "7.79");
- goto LABEL_82;
- case 0x4Fu:
- v3 = 0x312E35392E313431i64;
- strcpy(&ModuleName[8], "90.148");
- goto LABEL_82;
- case 0x50u:
- v3 = 0x322E35392E313431i64;
- strcpy(&ModuleName[8], "34.16");
- goto LABEL_82;
- case 0x51u:
- v3 = 0x322E35392E313431i64;
- strcpy(&ModuleName[8], "34.17");
- goto LABEL_82;
- case 0x52u:
- v3 = 0x322E35392E313431i64;
- strcpy(&ModuleName[8], "34.18");
- goto LABEL_82;
- case 0x53u:
- v3 = 0x322E35392E313431i64;
- strcpy(&ModuleName[8], "34.19");
- goto LABEL_82;
- case 0x54u:
- v3 = 0x322E35392E313431i64;
- strcpy(&ModuleName[8], "34.20");
- goto LABEL_82;
- case 0x55u:
- v3 = 0x322E35392E313431i64;
- strcpy(&ModuleName[8], "34.21");
- goto LABEL_82;
- case 0x56u:
- v3 = 0x322E35392E313431i64;
- strcpy(&ModuleName[8], "34.22");
- goto LABEL_82;
- case 0x57u:
- v3 = 0x322E35392E313431i64;
- strcpy(&ModuleName[8], "34.23");
- goto LABEL_82;
- default:
- v3 = 0x2E302E302E373231i64;
- strcpy(&ModuleName[8], "1");
- LABEL_82:
- *(_QWORD *)ModuleName = v3;
- LABEL_83:
- v4 = strlen(ModuleName);
- v15 = 0i64;
- memset(v16, 0, sizeof(v16));
- v18 = v4;
- v5 = 0;
- v14 = v4 + v4 / 0xFF;
- v17[0] = v14;
- v6 = _mm_cvtsi32_si128(v14);
- v7 = _mm_unpacklo_epi8(v6, v6);
- v8 = _mm_shuffle_epi32(_mm_unpacklo_epi16(v7, v7), 0);
- if ( v4 )
- {
- if ( v4 < 0x40 )
- goto LABEL_92;
- do
- {
- *(__m128i *)&v16[v5 - 16] = _mm_xor_si128(*(__m128i *)&ModuleName[v5], v8);
- *(__m128i *)&v16[v5] = _mm_xor_si128(*(__m128i *)&Buffer[v5], v8);
- *(__m128i *)&v17[v5] = _mm_xor_si128(*(__m128i *)((char *)v21 + v5), v8);
- *(__m128i *)&ModuleName[v5] = _mm_xor_si128(*(__m128i *)((char *)&v21[1] + v5), v8);
- v5 += 64;
- }
- while ( v5 < (v4 & 0xFFFFFFC0) );
- if ( v5 < v4 )
- {
- LABEL_92:
- do
- {
- v16[v5 - 16] = v14 ^ ModuleName[v5];
- ++v5;
- }
- while ( v5 < v4 );
- }
- }
- v9 = (char *)sub_10001000(&v15);
- v10 = *(_DWORD *)(samp_base + 2549980);
- ((void (__cdecl *)(UINT))(samp_base + 126928))(PrivateProfileIntA);
- *(_DWORD *)(v10 + 565) = PrivateProfileIntA;
- v11 = v10 - (_DWORD)v9;
- do
- {
- v12 = *v9++;
- v9[v11 + 47] = v12;
- }
- while ( v12 );
- return;
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement