Back to Index
Previous: sub_02CD4684
Next: sub_02CD4A24
Labelmas.sub_02CD4768
02CD4768 /$ PUSH EBP
02CD4769 |. MOV EBP,ESP
02CD476B |. XOR EAX,EAX
02CD476D |. MOV EDX,Labelmas.02CDF138
02CD4772 |. JMP SHORT Labelmas.02CD477D
02CD4774 |> /CMP DWORD PTR DS:[EDX],0
02CD4777 |. |JE SHORT Labelmas.02CD4785
02CD4779 |. |INC EAX
02CD477A |. |ADD EDX,4
02CD477D |> CMP EAX,DWORD PTR DS:[2CDF134]
02CD4783 |. \JL SHORT Labelmas.02CD4774
02CD4785 |> CMP EAX,DWORD PTR DS:[2CDF134]
02CD478B |. JNZ SHORT Labelmas.02CD4792
02CD478D |. OR EAX,FFFFFFFF
02CD4790 |. POP EBP
02CD4791 |. RETN
02CD4792 |> MOV EDX,DWORD PTR SS:[EBP+C]
02CD4795 |. MOV DWORD PTR DS:[EAX*4+2CDF138],EDX
02CD479C |. MOV ECX,DWORD PTR SS:[EBP+8]
02CD479F |. MOV DWORD PTR DS:[EAX*4+2CE136C],ECX
02CD47A6 |. POP EBP
02CD47A7 \. RETN
02CD47A8 /. PUSH EBP
02CD47A9 |. MOV EBP,ESP
02CD47AB |. MOV EAX,DWORD PTR SS:[EBP+C]
02CD47AE |. MOV ECX,DWORD PTR SS:[EBP+8]
02CD47B1 |. CMP EAX,-1
02CD47B4 |. JNZ SHORT Labelmas.02CD47D0
02CD47B6 |. XOR EAX,EAX
02CD47B8 |. MOV EDX,Labelmas.02CDF138
02CD47BD |. JMP SHORT Labelmas.02CD47C3
02CD47BF |> /INC EAX
02CD47C0 |. |ADD EDX,4
02CD47C3 |> CMP EAX,DWORD PTR DS:[2CDF134]
02CD47C9 |. |JGE SHORT Labelmas.02CD47D0
02CD47CB |. |CMP DWORD PTR DS:[EDX],0
02CD47CE |. \JNZ SHORT Labelmas.02CD47BF
02CD47D0 |> MOV EDX,DWORD PTR DS:[2CDF134]
02CD47D6 |. CMP EDX,ECX
02CD47D8 |. JBE SHORT Labelmas.02CD47DE
02CD47DA |. CMP EDX,EAX
02CD47DC |. JA SHORT Labelmas.02CD47E3
02CD47DE |> OR EAX,FFFFFFFF
02CD47E1 |. POP EBP
02CD47E2 |. RETN
02CD47E3 |> MOV EDX,DWORD PTR DS:[ECX*4+2CDF138]
02CD47EA |. TEST EDX,EDX
02CD47EC |. JE SHORT Labelmas.02CD47F8
02CD47EE |. CMP DWORD PTR DS:[EAX*4+2CDF138],0
02CD47F6 |. JE SHORT Labelmas.02CD47FD
02CD47F8 |> OR EAX,FFFFFFFF
02CD47FB |. POP EBP
02CD47FC |. RETN
02CD47FD |> MOV DWORD PTR DS:[EAX*4+2CDF138],EDX
02CD4804 |. MOV ECX,DWORD PTR SS:[EBP+10]
02CD4807 |. MOV DWORD PTR DS:[EAX*4+2CE136C],ECX
02CD480E |. POP EBP
02CD480F \. RETN
02CD4810 /. PUSH EBP
02CD4811 |. MOV EBP,ESP
02CD4813 |. MOV EAX,DWORD PTR SS:[EBP+8]
02CD4816 |. CMP EAX,DWORD PTR DS:[2CDF134]
02CD481C |. JNB SHORT Labelmas.02CD4827
02CD481E |. XOR EDX,EDX
02CD4820 |. MOV DWORD PTR DS:[EAX*4+2CDF138],EDX
02CD4827 |> POP EBP
02CD4828 \. RETN
02CD4829 NOP
02CD482A NOP
02CD482B NOP
02CD482C /. PUSH EBP
02CD482D |. MOV EBP,ESP
02CD482F |. ADD ESP,-8
02CD4832 |. MOV EAX,DWORD PTR DS:[2CDF134]
02CD4837 |. TEST EAX,EAX
02CD4839 |. PUSH ESI
02CD483A |. MOV ESI,DWORD PTR SS:[EBP+8]
02CD483D |. LEA EDX,DWORD PTR DS:[EAX*4+2CDF134]
02CD4844 |. JE SHORT Labelmas.02CD4853
02CD4846 |> /CMP DWORD PTR DS:[EDX],0
02CD4849 |. |JNZ SHORT Labelmas.02CD4853
02CD484B |. |DEC EAX
02CD484C |. |ADD EDX,-4
02CD484F |. |TEST EAX,EAX
02CD4851 |. \JNZ SHORT Labelmas.02CD4846
02CD4853 |> TEST ESI,ESI
02CD4855 |. JNZ SHORT Labelmas.02CD4869
02CD4857 |. TEST EAX,EAX
02CD4859 |. JNZ SHORT Labelmas.02CD485F
02CD485B |. XOR EAX,EAX
02CD485D |. JMP SHORT Labelmas.02CD48C1
02CD485F |> LEA EDX,DWORD PTR DS:[EAX+EAX*4]
02CD4862 |. ADD EDX,4
02CD4865 |. MOV EAX,EDX
02CD4867 |. JMP SHORT Labelmas.02CD48C1
02CD4869 |> MOV DWORD PTR DS:[ESI],EAX
02CD486B |. XOR ECX,ECX
02CD486D |. MOV DWORD PTR SS:[EBP-4],ECX
02CD4870 |. ADD ESI,4
02CD4873 |. MOV DWORD PTR SS:[EBP-8],Labelmas.02CDF1>
02CD487A |. CMP EAX,DWORD PTR SS:[EBP-4]
02CD487D |. JLE SHORT Labelmas.02CD48AD
02CD487F |> /MOV CL,1
02CD4881 |. |MOV EDX,DWORD PTR SS:[EBP-8]
02CD4884 |. |MOV EDX,DWORD PTR DS:[EDX]
02CD4886 |. |TEST DH,8
02CD4889 |. |JE SHORT Labelmas.02CD488E
02CD488B |. |OR CL,20
02CD488E |> |TEST DH,80
02CD4891 |. |JNZ SHORT Labelmas.02CD4896
02CD4893 |. |OR CL,80
02CD4896 |> |TEST DH,20
02CD4899 |. |JE SHORT Labelmas.02CD489E
02CD489B |. |OR CL,40
02CD489E |> |MOV BYTE PTR DS:[ESI],CL
02CD48A0 |. |INC ESI
02CD48A1 |. |INC DWORD PTR SS:[EBP-4]
02CD48A4 |. |ADD DWORD PTR SS:[EBP-8],4
02CD48A8 |. |CMP EAX,DWORD PTR SS:[EBP-4]
02CD48AB |. \JG SHORT Labelmas.02CD487F
02CD48AD |> SHL EAX,2
02CD48B0 |. PUSH EAX ; /Arg3
02CD48B1 |. PUSH Labelmas.02CE136C ; |Arg2 = 02CE136C
02CD48B6 |. PUSH ESI ; |Arg1
02CD48B7 |. CALL Labelmas.02CD2888 ; \Labelmas.02CD2888
02CD48BC |. ADD ESP,0C
02CD48BF |. XOR EAX,EAX
02CD48C1 |> POP ESI
02CD48C2 |. POP ECX
02CD48C3 |. POP ECX
02CD48C4 |. POP EBP
02CD48C5 \. RETN
02CD48C6 NOP
02CD48C7 NOP
02CD48C8 . PUSH EBX
02CD48C9 . PUSH ESI
02CD48CA . PUSH EDI
02CD48CB . ADD ESP,-4C
02CD48CE . MOV EAX,DWORD PTR DS:[2CDF134]
02CD48D3 . PUSH EAX ; /nHandles => 32 (50.)
02CD48D4 . CALL <JMP.&KERNEL32.SetHandleCount> ; \SetHandleCount
02CD48D9 . MOV EBX,EAX
02CD48DB . CMP EAX,DWORD PTR DS:[2CDF134]
02CD48E1 . JNB SHORT Labelmas.02CD48E9
02CD48E3 . MOV DWORD PTR DS:[2CDF134],EBX
02CD48E9 > MOV DWORD PTR DS:[2CDEC78],Labelmas.02CD>
02CD48F3 . XOR EDX,EDX
02CD48F5 . MOV DWORD PTR SS:[ESP+4],EDX
02CD48F9 . LEA ECX,DWORD PTR SS:[ESP+8]
02CD48FD . PUSH ECX ; /pStartupinfo
02CD48FE . CALL <JMP.&KERNEL32.GetStartupInfoA> ; \GetStartupInfoA
02CD4903 . MOVZX EAX,WORD PTR SS:[ESP+3A]
02CD4908 . MOV ESI,DWORD PTR SS:[ESP+3C]
02CD490C . TEST EAX,EAX
02CD490E . JE Labelmas.02CD49AE
02CD4914 . MOV EDX,DWORD PTR DS:[ESI]
02CD4916 . MOV DWORD PTR SS:[ESP],EDX
02CD4919 . ADD ESI,4
02CD491C . MOV ECX,DWORD PTR SS:[ESP]
02CD491F . LEA ECX,DWORD PTR DS:[ECX+ECX*4]
02CD4922 . ADD ECX,4
02CD4925 . CMP ECX,EAX
02CD4927 . JNZ Labelmas.02CD49AE
02CD492D . MOV DWORD PTR SS:[ESP+4],1
02CD4935 . XOR EBX,EBX
02CD4937 . MOV EDI,Labelmas.02CDF138
02CD493C . CMP EBX,DWORD PTR SS:[ESP]
02CD493F . JGE SHORT Labelmas.02CD497D
02CD4941 > MOV DL,BYTE PTR DS:[ESI]
02CD4943 . INC ESI
02CD4944 . XOR EAX,EAX
02CD4946 . TEST DL,20
02CD4949 . JE SHORT Labelmas.02CD4950
02CD494B . OR EAX,800
02CD4950 > TEST DL,40
02CD4953 . JE SHORT Labelmas.02CD495A
02CD4955 . OR EAX,2000
02CD495A > TEST DL,80
02CD495D . JE SHORT Labelmas.02CD4966
02CD495F . OR EAX,4000
02CD4964 . JMP SHORT Labelmas.02CD496B
02CD4966 > OR EAX,8000
02CD496B > MOV ECX,DWORD PTR DS:[EDI]
02CD496D . INC EBX
02CD496E . AND ECX,3
02CD4971 . OR ECX,EAX
02CD4973 . MOV DWORD PTR DS:[EDI],ECX
02CD4975 . ADD EDI,4
02CD4978 . CMP EBX,DWORD PTR SS:[ESP]
02CD497B . JL SHORT Labelmas.02CD4941
02CD497D > MOV EBX,DWORD PTR SS:[ESP]
02CD4980 . LEA EAX,DWORD PTR DS:[EBX*4+2CDF138]
02CD4987 . JMP SHORT Labelmas.02CD4991
02CD4989 > XOR EDX,EDX
02CD498B . INC EBX
02CD498C . MOV DWORD PTR DS:[EAX],EDX
02CD498E . ADD EAX,4
02CD4991 > CMP EBX,DWORD PTR DS:[2CDF134]
02CD4997 . JB SHORT Labelmas.02CD4989
02CD4999 . MOV ECX,DWORD PTR SS:[ESP]
02CD499C . SHL ECX,2
02CD499F . PUSH ECX ; /Arg3
02CD49A0 . PUSH ESI ; |Arg2
02CD49A1 . PUSH Labelmas.02CE136C ; |Arg1 = 02CE136C
02CD49A6 . CALL Labelmas.02CD28AC ; \Labelmas.02CD28AC
02CD49AB . ADD ESP,0C
02CD49AE > CMP DWORD PTR SS:[ESP+4],0
02CD49B3 . JNZ SHORT Labelmas.02CD4A1A
02CD49B5 . PUSH -0A ; /DevType = STD_INPUT_HANDLE
02CD49B7 . CALL <JMP.&KERNEL32.GetStdHandle> ; \GetStdHandle
02CD49BC . MOV DWORD PTR DS:[2CE136C],EAX
02CD49C1 . PUSH -0B ; /DevType = STD_OUTPUT_HANDLE
02CD49C3 . CALL <JMP.&KERNEL32.GetStdHandle> ; \GetStdHandle
02CD49C8 . MOV DWORD PTR DS:[2CE1370],EAX
02CD49CD . PUSH -0C ; /DevType = STD_ERROR_HANDLE
02CD49CF . CALL <JMP.&KERNEL32.GetStdHandle> ; \GetStdHandle
02CD49D4 . MOV DWORD PTR DS:[2CE1374],EAX
02CD49D9 . XOR EBX,EBX
02CD49DB . MOV ESI,Labelmas.02CDF138
02CD49E0 > PUSH EBX ; /Arg1
02CD49E1 . CALL Labelmas.02CD3944 ; \Labelmas.02CD3944
02CD49E6 . POP ECX
02CD49E7 . TEST EAX,EAX
02CD49E9 . JNZ SHORT Labelmas.02CD49F4
02CD49EB . CMP DWORD PTR DS:[2CE0480],0
02CD49F2 . JE SHORT Labelmas.02CD4A0B
02CD49F4 > OR DWORD PTR DS:[ESI],2000
02CD49FA . CMP DWORD PTR DS:[2CE0480],0
02CD4A01 . JE SHORT Labelmas.02CD4A11
02CD4A03 . OR DWORD PTR DS:[ESI],10000
02CD4A09 . JMP SHORT Labelmas.02CD4A11
02CD4A0B > AND DWORD PTR DS:[ESI],FFFFDFFF
02CD4A11 > INC EBX
02CD4A12 . ADD ESI,4
02CD4A15 . CMP EBX,2
02CD4A18 . JLE SHORT Labelmas.02CD49E0
02CD4A1A > ADD ESP,4C
02CD4A1D . POP EDI
02CD4A1E . POP ESI
02CD4A1F . POP EBX
02CD4A20 . RETN
02CD4A21 NOP
02CD4A22 NOP
02CD4A23 NOP
Converted to HTML using
olly2html.pl
0.1 by Joe Stewart