Back to Index
Previous: sub_02CD3468
Next: sub_02CD350C
Labelmas.sub_02CD34B8
02CD34B8 /$ CALL Labelmas.02CD1202
02CD34BD |. AND DWORD PTR DS:[EAX+4],FFFFFFFD
02CD34C4 |. MOV EAX,Labelmas.02CD34B8 ; Entry address
02CD34C9 |. CMP EAX,DWORD PTR DS:[2CDEB48] ; Labelmas.02CD34B8
02CD34CF |. JE SHORT Labelmas.02CD34D7
02CD34D1 |. CALL DWORD PTR DS:[2CDEB48] ; Labelmas.02CD34B8
02CD34D7 |> CALL Labelmas.02CD350C
02CD34DC \. RETN
02CD34DD NOP
02CD34DE NOP
02CD34DF NOP
02CD34E0 . PUSH Labelmas.02CDEC20 ; /ProcNameOrOrdinal = "___CPPdebugHook"
02CD34E5 . PUSH 0 ; |/pModule = NULL
02CD34E7 . CALL <JMP.&KERNEL32.GetModuleHandleA> ; |\GetModuleHandleA
02CD34EC . PUSH EAX ; |hModule
02CD34ED . CALL <JMP.&KERNEL32.GetProcAddress> ; \GetProcAddress
02CD34F2 . MOV DWORD PTR DS:[2CE1298],EAX
02CD34F7 . CMP DWORD PTR DS:[2CE1298],0
02CD34FE . JNZ SHORT Labelmas.02CD350A
02CD3500 . MOV DWORD PTR DS:[2CE1298],OFFSET Labelm>
02CD350A > RETN
02CD350B NOP
Converted to HTML using
olly2html.pl
0.1 by Joe Stewart