Back to Index
Previous: sub_02CD3974
Next: sub_02CD3A04
Labelmas.sub_02CD398C
02CD398C /$ PUSH EBP
02CD398D |. MOV EBP,ESP
02CD398F |. PUSH EBX
02CD3990 |. PUSH ESI
02CD3991 |. PUSH EDI
02CD3992 |. MOV EBX,DWORD PTR SS:[EBP+8]
02CD3995 |. CMP EBX,DWORD PTR DS:[2CDF134]
02CD399B |. JB SHORT Labelmas.02CD39A7
02CD399D |. PUSH 6 ; /Arg1 = 00000006
02CD399F |. CALL Labelmas.02CD4A24 ; \Labelmas.02CD4A24
02CD39A4 |. POP ECX
02CD39A5 |. JMP SHORT Labelmas.02CD39FD
02CD39A7 |> MOV EAX,DWORD PTR SS:[EBP+10]
02CD39AA |. SUB EAX,1 ; Switch (cases 0..2)
02CD39AD |. JB SHORT Labelmas.02CD39B6
02CD39AF |. JE SHORT Labelmas.02CD39BA
02CD39B1 |. DEC EAX
02CD39B2 |. JE SHORT Labelmas.02CD39C1
02CD39B4 |. JMP SHORT Labelmas.02CD39C8
02CD39B6 |> XOR EDI,EDI
02CD39B8 |. JMP SHORT Labelmas.02CD39D2
02CD39BA |> MOV EDI,1 ; Case 1 of switch 02CD39AA
02CD39BF |. JMP SHORT Labelmas.02CD39D2
02CD39C1 |> MOV EDI,2 ; Case 2 of switch 02CD39AA
02CD39C6 |. JMP SHORT Labelmas.02CD39D2
02CD39C8 |> PUSH 1 ; /Arg1 = 00000001; Default case of switch 02CD39AA
02CD39CA |. CALL Labelmas.02CD4A24 ; \Labelmas.02CD4A24
02CD39CF |. POP ECX
02CD39D0 |. JMP SHORT Labelmas.02CD39FD
02CD39D2 |> AND DWORD PTR DS:[EBX*4+2CDF138],FFFFFDF> ; Case 0 of switch 02CD39AA
02CD39DD |. PUSH EDI ; /Origin
02CD39DE |. PUSH 0 ; |pOffsetHi = NULL
02CD39E0 |. MOV EAX,DWORD PTR SS:[EBP+C] ; |
02CD39E3 |. PUSH EAX ; |OffsetLo
02CD39E4 |. MOV EDX,DWORD PTR DS:[EBX*4+2CE136C] ; |
02CD39EB |. PUSH EDX ; |hFile
02CD39EC |. CALL <JMP.&KERNEL32.SetFilePointer> ; \SetFilePointer
02CD39F1 |. MOV ESI,EAX
02CD39F3 |. INC EAX
02CD39F4 |. JNZ SHORT Labelmas.02CD39FB
02CD39F6 |. CALL Labelmas.02CD4A88
02CD39FB |> MOV EAX,ESI
02CD39FD |> POP EDI
02CD39FE |. POP ESI
02CD39FF |. POP EBX
02CD3A00 |. POP EBP
02CD3A01 \. RETN
02CD3A02 NOP
02CD3A03 NOP
Converted to HTML using
olly2html.pl
0.1 by Joe Stewart