Back to Index
Previous: sub_02CD3F04
Next: sub_02CD3FD4

Labelmas.sub_02CD3F68

02CD3F68  /$ PUSH EBP 
02CD3F69  |. MOV EBP,ESP 
02CD3F6B  |. PUSH ECX 
02CD3F6C  |. MOV EAX,DWORD PTR SS:[EBP+8] 
02CD3F6F  |. CMP EAX,DWORD PTR DS:[2CDF134] 
02CD3F75  |. JB SHORT Labelmas.02CD3F82 
02CD3F77  |. PUSH 6 
02CD3F79  |. CALL Labelmas.02CD4A24 
02CD3F7E  |. POP ECX 
02CD3F7F  |. POP ECX 
02CD3F80  |. POP EBP 
02CD3F81  |. RETN 
02CD3F82  |> PUSH 0                                    ; /pOverlapped = NULL
02CD3F84  |. LEA EDX,DWORD PTR SS:[EBP-4]              ; |
02CD3F87  |. PUSH EDX                                  ; |pBytesWritten
02CD3F88  |. MOV ECX,DWORD PTR SS:[EBP+10]             ; |
02CD3F8B  |. PUSH ECX                                  ; |nBytesToWrite
02CD3F8C  |. MOV EDX,DWORD PTR SS:[EBP+C]              ; |
02CD3F8F  |. PUSH EDX                                  ; |Buffer
02CD3F90  |. MOV EAX,DWORD PTR DS:[EAX*4+2CE136C]      ; |
02CD3F97  |. PUSH EAX                                  ; |hFile
02CD3F98  |. CALL <JMP.&KERNEL32.WriteFile>            ; \WriteFile
02CD3F9D  |. DEC EAX 
02CD3F9E  |. JE SHORT Labelmas.02CD3FA8 
02CD3FA0  |. CALL Labelmas.02CD4A88 
02CD3FA5  |. POP ECX 
02CD3FA6  |. POP EBP 
02CD3FA7  |. RETN 
02CD3FA8  |> MOV EAX,DWORD PTR SS:[EBP-4] 
02CD3FAB  |. POP ECX 
02CD3FAC  |. POP EBP 
02CD3FAD  \. RETN 
02CD3FAE     NOP 
02CD3FAF     NOP 
02CD3FB0  /. PUSH EBP 
02CD3FB1  |. MOV EBP,ESP 
02CD3FB3  |. MOV EAX,DWORD PTR SS:[EBP+10] 
02CD3FB6  |. PUSH EAX                                  ; /Arg3
02CD3FB7  |. MOV EDX,DWORD PTR SS:[EBP+C]              ; |
02CD3FBA  |. PUSH EDX                                  ; |Arg2
02CD3FBB  |. MOV ECX,DWORD PTR SS:[EBP+8]              ; |
02CD3FBE  |. PUSH ECX                                  ; |Arg1
02CD3FBF  |. CALL Labelmas.02CD3D9C                    ; \Labelmas.02CD3D9C
02CD3FC4  |. ADD ESP,0C 
02CD3FC7  |. POP EBP 
02CD3FC8  \. RETN 
02CD3FC9     NOP 
02CD3FCA     NOP 
02CD3FCB     NOP 
02CD3FCC   $ JMP Labelmas.02CD3820 
02CD3FD1     DB 00 
02CD3FD2     DB 00 
02CD3FD3     NOP 

Converted to HTML using olly2html.pl 0.1 by Joe Stewart