Back to Index
Next: sub_02CD112A
Labelmas.ModuleEntryPoint
02CD1000 >/$ JMP SHORT Labelmas.02CD1012 ; ModuleEntryPoint
02CD1002 | DB 66 ; CHAR 'f'
02CD1003 | DB 62 ; CHAR 'b'
02CD1004 | DB 3A ; CHAR ':'
02CD1005 | DB 43 ; CHAR 'C'
02CD1006 | DB 2B ; CHAR '+'
02CD1007 | DB 2B ; CHAR '+'
02CD1008 | DB 48 ; CHAR 'H'
02CD1009 | DB 4F ; CHAR 'O'
02CD100A | DB 4F ; CHAR 'O'
02CD100B | DB 4B ; CHAR 'K'
02CD100C | NOP
02CD100D | DB E9
02CD100E |. DD OFFSET Labelmas.___CPPdebugHook
02CD1012 |> MOV EAX,DWORD PTR DS:[2CDE0EB]
02CD1017 |. SHL EAX,2
02CD101A |. MOV DWORD PTR DS:[2CDE0EF],EAX
02CD101F |. MOV EAX,DWORD PTR SS:[ESP+8]
02CD1023 |. MOV DWORD PTR DS:[2CDE15D],EAX
02CD1028 |. CALL DWORD PTR DS:[EAX*4+2CDE14D]
02CD102F |. CMP DWORD PTR DS:[2CDE15D],1
02CD1036 |. JNZ SHORT Labelmas.02CD1096
02CD1038 |. CMP BYTE PTR DS:[2CDE0F7],0
02CD103F |. JE SHORT Labelmas.02CD1065
02CD1041 |. CALL <JMP.&KERNEL32.GetVersion>
02CD1046 |. MOV EDX,Labelmas.02CDE0F8 ; ASCII "Nonshared DATA segment required"
02CD104B |. AND EAX,80000000
02CD1050 |. JE SHORT Labelmas.02CD1057
02CD1052 |. MOV EDX,Labelmas.02CDE118 ; ASCII "Cannot run multiple instances of a DLL under WIN32s"
02CD1057 |> PUSH EDX
02CD1058 |. CALL Labelmas.02CDAB88
02CD105D |. POP EAX
02CD105E |. XOR EAX,EAX
02CD1060 |. JMP Labelmas.02CD10F4
02CD1065 |> INC BYTE PTR DS:[2CDE0F7]
02CD106B |. CMP DWORD PTR DS:[2CDE15D],1
02CD1072 |. JNZ SHORT Labelmas.02CD108E
02CD1074 |. CALL Labelmas.02CDB8A4
02CD1079 |. PUSH EDX
02CD107A |. MOV EDX,DWORD PTR SS:[ESP+8]
02CD107E |. CALL Labelmas.02CD285C
02CD1083 |. POP EDX
02CD1084 |. CALL Labelmas.02CD1BF8
02CD1089 |. CALL Labelmas.02CD2864
02CD108E |> PUSH 0
02CD1090 |. CALL Labelmas.02CD35B8
02CD1095 |. POP ECX
02CD1096 |> PUSH Labelmas.02CDE0A0
02CD109B |. MOV EAX,DWORD PTR SS:[ESP+8]
02CD109F |. MOV DWORD PTR DS:[2CDE0F3],EAX
02CD10A4 |. CMP DWORD PTR DS:[2CDE15D],1
02CD10AB |. JE SHORT Labelmas.02CD10C4
02CD10AD |. CMP DWORD PTR DS:[2CDE15D],2
02CD10B4 |. JE SHORT Labelmas.02CD10C4
02CD10B6 |. CALL Labelmas.02CDB6AC
02CD10BB |. MOV BYTE PTR DS:[2CDE14C],0
02CD10C2 |. JMP SHORT Labelmas.02CD10CB
02CD10C4 |> MOV BYTE PTR DS:[2CDE14C],1
02CD10CB |> CMP DWORD PTR DS:[2CE167C],0
02CD10D2 |. JE SHORT Labelmas.02CD10E6
02CD10D4 |. PUSH EAX
02CD10D5 |. MOV EAX,DWORD PTR DS:[2CDE15D]
02CD10DA |. PUSH EAX
02CD10DB |. MOV EAX,DWORD PTR SS:[ESP+18]
02CD10DF |. PUSH EAX
02CD10E0 |. CALL DWORD PTR DS:[2CE167C]
02CD10E6 |> CMP BYTE PTR DS:[2CDE14C],0
02CD10ED |. JE SHORT Labelmas.02CD10F4
02CD10EF |. CALL Labelmas.02CDB6AC
02CD10F4 |> ADD ESP,4
02CD10F7 |. CMP DWORD PTR DS:[2CDE15D],0
02CD10FE |. JNZ SHORT Labelmas.02CD1114
02CD1100 |. CALL Labelmas.02CD1BE8
02CD1105 |. CALL Labelmas.02CD2860
02CD110A |. CALL Labelmas.02CDB8A8
02CD110F |. CALL Labelmas.02CD11E8
02CD1114 \> RETN 0C
02CD1117 . JMP Labelmas.02CD3604
02CD111C . XOR EAX,EAX
02CD111E . MOV AL,BYTE PTR DS:[2CDE0E9]
02CD1123 . RETN
02CD1124 . MOV EAX,DWORD PTR DS:[2CDE0F3]
02CD1129 . RETN
Converted to HTML using
olly2html.pl
0.1 by Joe Stewart