1.  
2. /* This file has been generated by the Hex-Rays decompiler.
3.    Copyright (c) 2007-2014 Hex-Rays <info@hex-rays.com>
4.  
5.    Detected compiler: GNU C++
6. */
7.  
8. #include <defs.h>
9.  
10.  
11. //-------------------------------------------------------------------------
12. // Function declarations
13.  
14. int init_proc();
15. // int *__errno_location(void);
16. // int sprintf(char *s, const char *format, ...);
17. // int __gmon_start__(void); weak
18. // void free(void *ptr);
19. // void *memcpy(void *dest, const void *src, size_t n);
20. // char *strcpy(char *dest, const char *src);
21. // int printf(const char *format, ...);
22. // size_t fwrite(const void *ptr, size_t size, size_t n, FILE *s);
23. // void *malloc(size_t size);
24. // int puts(const char *s);
25. // int rand(void);
26. // int strcmp(const char *s1, const char *s2);
27. // void exit(int status);
28. void _do_global_dtors_aux();
29. int frame_dummy();
30. int __cdecl main(int argc, const char **argv, const char **envp);
31. int __cdecl auth(char *s1, char *s2); // idb
32. void __noreturn asm_();
33. void _libc_csu_fini();
34. int *_libc_csu_init();
35. void _i686_get_pc_thunk_bx();
36. void (*_do_global_ctors_aux())(void);
37. void term_proc();
38.  
39. //-------------------------------------------------------------------------
40. // Data declarations
41.  
42. int _CTOR_LIST__ = 4294967295; // weak
43. int _DTOR_LIST__[] = { 4294967295 }; // weak
44. _UNKNOWN _DTOR_END__; // weak
45. int _JCR_LIST__ = 0; // weak
46. FILE *stderr; // idb
47. char completed_6625; // weak
48. int dtor_idx_6627; // weak
49. char buffer_2176[148]; // idb
50. int (__cdecl *function_ptr_2175)(_DWORD, _DWORD); // weak
51. // extern _UNKNOWN _gmon_start__; weak
52.  
53.  
54. //----- (08048454) --------------------------------------------------------
55. int init_proc()
56. {
57.   int v1; // [sp+0h] [bp-8h]@0
58.  
59.   if ( &_gmon_start__ )
60.     __gmon_start__();
61.   frame_dummy();
62.   _do_global_ctors_aux();
63.   return v1;
64. }
65. // 80484B4: using guessed type int __gmon_start__(void);
66.  
67. //----- (08048580) --------------------------------------------------------
68. #error "8048583: positive sp value has been found (funcsize=2)"
69.  
70. //----- (080485B0) --------------------------------------------------------
71. void _do_global_dtors_aux()
72. {
73.   int v0; // edx@2
74.   int i; // ebx@2
75.  
76.   if ( !completed_6625 )
77.   {
78.     v0 = dtor_idx_6627;
79.     for ( i = ((&_DTOR_END__ - (_UNKNOWN *)_DTOR_LIST__) >> 2) - 1; dtor_idx_6627 < (unsigned int)i; v0 = dtor_idx_6627 )
80.     {
81.       dtor_idx_6627 = v0 + 1;
82.       ((void (*)(void))_DTOR_LIST__[v0 + 1])();
83.     }
84.     completed_6625 = 1;
85.   }
86. }
87. // 8049F14: using guessed type int _DTOR_LIST__[];
88. // 804A044: using guessed type char completed_6625;
89. // 804A048: using guessed type int dtor_idx_6627;
90.  
91. //----- (08048610) --------------------------------------------------------
92. int frame_dummy()
93. {
94.   int result; // eax@1
95.  
96.   result = _JCR_LIST__;
97.   if ( _JCR_LIST__ )
98.     result = 0;
99.   return result;
100. }
101. // 8049F1C: using guessed type int _JCR_LIST__;
102.  
103. //----- (08048634) --------------------------------------------------------
104. int __cdecl main(int argc, const char **argv, const char **envp)
105. {
106.   void *dest; // ST20_4@4
107.   int v4; // ST0C_4@4
108.  
109.   if ( argc != 2 )
110.   {
111.     printf("(*) -Syntaxe: %s [ password or payload :P ] n", *argv);
112.     exit(0);
113.   }
114.   dest = malloc(0x1Du);
115.   memcpy(dest, "_0cGj35m9V5T3Ç8CJ0À9H95h3xdh", 0x25u);
116.   function_ptr_2175 = (int (__cdecl *)(_DWORD, _DWORD))auth;
117.   strcpy(buffer_2176, *(const char **)(*(_DWORD *)(v4 + 4) + 4));
118.   *((_BYTE *)dest + 8) = 95;
119.   *((_BYTE *)dest + 9) = 46;
120.   return function_ptr_2175(buffer_2176, dest);
121. }
122. // 804A0F4: using guessed type int (__cdecl *function_ptr_2175)(_DWORD, _DWORD);
123.  
124. //----- (080486F4) --------------------------------------------------------
125. int __cdecl auth(char *s1, char *s2)
126. {
127.   puts("Vérification de votre mot de passe..");
128.   if ( !strcmp(s1, s2) )
129.     asm_();
130.   return puts("(!) L'authentification a échoué.n Try again ! r");
131. }
132.  
133. //----- (08048731) --------------------------------------------------------
134. void __noreturn asm_()
135. {
136.   long double v0; // fst7@1
137.   int *v1; // eax@2
138.   void *ptr; // [sp+4Ch] [bp-29Ch]@1
139.   char s; // [sp+50h] [bp-298h]@1
140.   int v4; // [sp+2DCh] [bp-Ch]@1
141.  
142.   v4 = *MK_FP(__GS__, 20);
143.   memset(&s, 0, 0x28Cu);
144.   v0 = (long double)14 * (long double)(rand() + 653);
145.   sprintf(&s, "%lld%s", (signed __int64)v0, "_VE_T25_*t*_");
146.   ptr = malloc(0x28Cu);
147.   if ( !ptr )
148.   {
149.     fwrite("[-] Allocation memoire echouee!nr ", 1u, 0x22u, stderr);
150.     v1 = __errno_location();
151.     printf(" %d", *v1);
152.     exit(1);
153.   }
154.   printf("[+] Felicitation password de validation de l'épreuve:: %s", &s);
155.   puts("nr");
156.   free(ptr);
157.   exit(1);
158. }
159.  
160. //----- (080488C0) --------------------------------------------------------
161. void _libc_csu_fini()
162. {
163.   ;
164. }
165.  
166. //----- (080488D0) --------------------------------------------------------
167. int *_libc_csu_init()
168. {
169.   init_proc();
170.   return &_CTOR_LIST__;
171. }
172. // 8049F0C: using guessed type int _CTOR_LIST__;
173.  
174. //----- (0804892A) --------------------------------------------------------
175. void _i686_get_pc_thunk_bx()
176. {
177.   ;
178. }
179.  
180. //----- (08048930) --------------------------------------------------------
181. void (*_do_global_ctors_aux())(void)
182. {
183.   void (*result)(void); // eax@1
184.   int *v1; // ebx@2
185.  
186.   result = (void (*)(void))_CTOR_LIST__;
187.   if ( _CTOR_LIST__ != -1 )
188.   {
189.     v1 = &_CTOR_LIST__;
190.     do
191.     {
192.       --v1;
193.       result();
194.       result = (void (*)(void))*v1;
195.     }
196.     while ( *v1 != -1 );
197.   }
198.   return result;
199. }
200. // 8049F0C: using guessed type int _CTOR_LIST__;
201.  
202. //----- (0804895C) --------------------------------------------------------
203. void term_proc()
204. {
205.   _do_global_dtors_aux();
206. }
207.  
208. #error "There were 1 decompilation failure(s) on 12 function(s)"
209.