Back to Index
Previous: sub_02CD3F04
Next: sub_02CD3FD4
Labelmas.sub_02CD3F68
02CD3F68 /$ PUSH EBP
02CD3F69 |. MOV EBP,ESP
02CD3F6B |. PUSH ECX
02CD3F6C |. MOV EAX,DWORD PTR SS:[EBP+8]
02CD3F6F |. CMP EAX,DWORD PTR DS:[2CDF134]
02CD3F75 |. JB SHORT Labelmas.02CD3F82
02CD3F77 |. PUSH 6
02CD3F79 |. CALL Labelmas.02CD4A24
02CD3F7E |. POP ECX
02CD3F7F |. POP ECX
02CD3F80 |. POP EBP
02CD3F81 |. RETN
02CD3F82 |> PUSH 0 ; /pOverlapped = NULL
02CD3F84 |. LEA EDX,DWORD PTR SS:[EBP-4] ; |
02CD3F87 |. PUSH EDX ; |pBytesWritten
02CD3F88 |. MOV ECX,DWORD PTR SS:[EBP+10] ; |
02CD3F8B |. PUSH ECX ; |nBytesToWrite
02CD3F8C |. MOV EDX,DWORD PTR SS:[EBP+C] ; |
02CD3F8F |. PUSH EDX ; |Buffer
02CD3F90 |. MOV EAX,DWORD PTR DS:[EAX*4+2CE136C] ; |
02CD3F97 |. PUSH EAX ; |hFile
02CD3F98 |. CALL <JMP.&KERNEL32.WriteFile> ; \WriteFile
02CD3F9D |. DEC EAX
02CD3F9E |. JE SHORT Labelmas.02CD3FA8
02CD3FA0 |. CALL Labelmas.02CD4A88
02CD3FA5 |. POP ECX
02CD3FA6 |. POP EBP
02CD3FA7 |. RETN
02CD3FA8 |> MOV EAX,DWORD PTR SS:[EBP-4]
02CD3FAB |. POP ECX
02CD3FAC |. POP EBP
02CD3FAD \. RETN
02CD3FAE NOP
02CD3FAF NOP
02CD3FB0 /. PUSH EBP
02CD3FB1 |. MOV EBP,ESP
02CD3FB3 |. MOV EAX,DWORD PTR SS:[EBP+10]
02CD3FB6 |. PUSH EAX ; /Arg3
02CD3FB7 |. MOV EDX,DWORD PTR SS:[EBP+C] ; |
02CD3FBA |. PUSH EDX ; |Arg2
02CD3FBB |. MOV ECX,DWORD PTR SS:[EBP+8] ; |
02CD3FBE |. PUSH ECX ; |Arg1
02CD3FBF |. CALL Labelmas.02CD3D9C ; \Labelmas.02CD3D9C
02CD3FC4 |. ADD ESP,0C
02CD3FC7 |. POP EBP
02CD3FC8 \. RETN
02CD3FC9 NOP
02CD3FCA NOP
02CD3FCB NOP
02CD3FCC $ JMP Labelmas.02CD3820
02CD3FD1 DB 00
02CD3FD2 DB 00
02CD3FD3 NOP
Converted to HTML using
olly2html.pl
0.1 by Joe Stewart