Back to Index
Previous: sub_02CDAB44
Next: sub_02CDACB4
Labelmas.sub_02CDAB88
02CDAB88 /$ PUSH EBP
02CDAB89 |. MOV EBP,ESP
02CDAB8B |. ADD ESP,-84
02CDAB91 |. CMP DWORD PTR DS:[2CE0364],0
02CDAB98 |. PUSH EBX
02CDAB99 |. PUSH ESI
02CDAB9A |. MOV ESI,DWORD PTR SS:[EBP+8]
02CDAB9D |. JNZ Labelmas.02CDAC62
02CDABA3 |. CMP DWORD PTR DS:[2CE0360],0
02CDABAA |. JNZ Labelmas.02CDAC62
02CDABB0 |. CMP DWORD PTR DS:[2CE0480],0
02CDABB7 |. JE SHORT Labelmas.02CDAC1C
02CDABB9 |. PUSH 80 ; /BufSize = 80 (128.)
02CDABBE |. LEA EAX,DWORD PTR SS:[EBP-84] ; |
02CDABC4 |. PUSH EAX ; |PathBuffer
02CDABC5 |. PUSH 0 ; |hModule = NULL
02CDABC7 |. CALL <JMP.&KERNEL32.GetModuleFileNameA> ; \GetModuleFileNameA
02CDABCC |. PUSH 5C ; /Arg2 = 0000005C
02CDABCE |. LEA EDX,DWORD PTR SS:[EBP-84] ; |
02CDABD4 |. PUSH EDX ; |Arg1
02CDABD5 |. CALL Labelmas.02CDA978 ; \Labelmas.02CDA978
02CDABDA |. ADD ESP,8
02CDABDD |. MOV EBX,EAX
02CDABDF |. TEST EAX,EAX
02CDABE1 |. JNZ SHORT Labelmas.02CDAC02
02CDABE3 |. PUSH 3A ; /Arg2 = 0000003A
02CDABE5 |. LEA EDX,DWORD PTR SS:[EBP-84] ; |
02CDABEB |. PUSH EDX ; |Arg1
02CDABEC |. CALL Labelmas.02CDA978 ; \Labelmas.02CDA978
02CDABF1 |. ADD ESP,8
02CDABF4 |. MOV EBX,EAX
02CDABF6 |. TEST EAX,EAX
02CDABF8 |. JNZ SHORT Labelmas.02CDAC02
02CDABFA |. LEA EBX,DWORD PTR SS:[EBP-84]
02CDAC00 |. JMP SHORT Labelmas.02CDAC03
02CDAC02 |> INC EBX
02CDAC03 |> CALL Labelmas.02CDAB44
02CDAC08 |. OR EAX,10010
02CDAC0D |. PUSH EAX ; /Style
02CDAC0E |. PUSH EBX ; |Title
02CDAC0F |. PUSH ESI ; |Text
02CDAC10 |. PUSH 0 ; |hOwner = NULL
02CDAC12 |. CALL <JMP.&USER32.MessageBoxA> ; \MessageBoxA
02CDAC17 |. JMP Labelmas.02CDAC9D
02CDAC1C |> PUSH -0C ; /DevType = STD_ERROR_HANDLE
02CDAC1E |. CALL <JMP.&KERNEL32.GetStdHandle> ; \GetStdHandle
02CDAC23 |. MOV EBX,EAX
02CDAC25 |. LEA EAX,DWORD PTR SS:[EBP-4]
02CDAC28 |. PUSH 0 ; /pOverlapped = NULL
02CDAC2A |. PUSH EAX ; |pBytesWritten
02CDAC2B |. PUSH 2 ; |nBytesToWrite = 2
02CDAC2D |. PUSH Labelmas.02CE0368 ; |Buffer = Labelmas.02CE0368
02CDAC32 |. PUSH EBX ; |hFile
02CDAC33 |. CALL <JMP.&KERNEL32.WriteFile> ; \WriteFile
02CDAC38 |. PUSH 0
02CDAC3A |. LEA EDX,DWORD PTR SS:[EBP-4]
02CDAC3D |. PUSH EDX
02CDAC3E |. PUSH ESI
02CDAC3F |. CALL Labelmas.02CD2A2C
02CDAC44 |. POP ECX ; |
02CDAC45 |. PUSH EAX ; |nBytesToWrite
02CDAC46 |. PUSH ESI ; |Buffer
02CDAC47 |. PUSH EBX ; |hFile
02CDAC48 |. CALL <JMP.&KERNEL32.WriteFile> ; \WriteFile
02CDAC4D |. PUSH 0 ; /pOverlapped = NULL
02CDAC4F |. LEA ECX,DWORD PTR SS:[EBP-4] ; |
02CDAC52 |. PUSH ECX ; |pBytesWritten
02CDAC53 |. PUSH 2 ; |nBytesToWrite = 2
02CDAC55 |. PUSH Labelmas.02CE036B ; |Buffer = Labelmas.02CE036B
02CDAC5A |. PUSH EBX ; |hFile
02CDAC5B |. CALL <JMP.&KERNEL32.WriteFile> ; \WriteFile
02CDAC60 |. JMP SHORT Labelmas.02CDAC9D
02CDAC62 |> CMP DWORD PTR DS:[2CE0360],0
02CDAC69 |. JE SHORT Labelmas.02CDAC7C
02CDAC6B |. CMP DWORD PTR DS:[2CE0360],-1
02CDAC72 |. JE SHORT Labelmas.02CDAC9D
02CDAC74 |. PUSH ESI
02CDAC75 |. CALL DWORD PTR DS:[2CE0360]
02CDAC7B |. POP ECX
02CDAC7C |> MOV EAX,DWORD PTR DS:[2CE0364]
02CDAC81 |. TEST EAX,EAX
02CDAC83 |. JE SHORT Labelmas.02CDAC9D
02CDAC85 |. CMP DWORD PTR DS:[2CE0364],-1
02CDAC8C |. JE SHORT Labelmas.02CDAC9D
02CDAC8E |. CMP BYTE PTR DS:[EAX],0
02CDAC91 |. JE SHORT Labelmas.02CDAC9D
02CDAC93 |. PUSH ESI ; /Arg2
02CDAC94 |. PUSH EAX ; |Arg1 => 00000000
02CDAC95 |. CALL Labelmas.02CDAAC8 ; \Labelmas.02CDAAC8
02CDAC9A |. ADD ESP,8
02CDAC9D |> POP ESI
02CDAC9E |. POP EBX
02CDAC9F |. MOV ESP,EBP
02CDACA1 |. POP EBP
02CDACA2 \. RETN
02CDACA3 NOP
02CDACA4 /. PUSH EBP
02CDACA5 |. MOV EBP,ESP
02CDACA7 |. MOV EAX,DWORD PTR SS:[EBP+8]
02CDACAA |. PUSH EAX
02CDACAB |. CALL Labelmas.02CDAB88
02CDACB0 |. POP ECX
02CDACB1 |. POP EBP
02CDACB2 \. RETN
02CDACB3 NOP
Converted to HTML using
olly2html.pl
0.1 by Joe Stewart