Back to Index
Previous: sub_02CDB640
Next: sub_02CDB830

Labelmas.sub_02CDB6AC

02CDB6AC  /$ PUSH EBP 
02CDB6AD  |. MOV EBP,ESP 
02CDB6AF  |. ADD ESP,-8 
02CDB6B2  |. PUSH EBX 
02CDB6B3  |. PUSH ESI 
02CDB6B4  |. PUSH EDI 
02CDB6B5  |. MOV EDI,DWORD PTR SS:[EBP+14] 
02CDB6B8  |. MOV ESI,DWORD PTR SS:[EBP+8] 
02CDB6BB  |. MOV DWORD PTR SS:[EBP-8],1 
02CDB6C2  |. MOV DWORD PTR SS:[EBP-4],ESI 
02CDB6C5  |. CMP EDI,1 
02CDB6C8  |. JNZ SHORT Labelmas.02CDB732 
02CDB6CA  |. MOV EAX,DWORD PTR DS:[2CE16C0] 
02CDB6CF  |. INC DWORD PTR DS:[2CE16C0] 
02CDB6D5  |. TEST EAX,EAX 
02CDB6D7  |. JNZ SHORT Labelmas.02CDB732 
02CDB6D9  |. CALL <JMP.&KERNEL32.GetEnvironmentString> ; [GetEnvironmentStrings
02CDB6DE  |. MOV DWORD PTR DS:[2CE1690],EAX 
02CDB6E3  |. MOV EDX,DWORD PTR SS:[EBP+10] 
02CDB6E6  |. MOV DWORD PTR DS:[2CDE0F3],EDX 
02CDB6EC  |. MOV ECX,DWORD PTR DS:[ESI+44] 
02CDB6EF  |. PUSH ECX                                  ; /Arg1
02CDB6F0  |. CALL Labelmas.02CD41D0                    ; \Labelmas.02CD41D0
02CDB6F5  |. POP ECX 
02CDB6F6  |. CMP DWORD PTR DS:[2CE03C8],0 
02CDB6FD  |. JE SHORT Labelmas.02CDB71D 
02CDB6FF  |. CALL Labelmas.02CDB564 
02CDB704  |. MOV EBX,EAX 
02CDB706  |. TEST EAX,EAX 
02CDB708  |. JE SHORT Labelmas.02CDB71D 
02CDB70A  |. MOV EDX,DWORD PTR DS:[EBX] 
02CDB70C  |. CMP DWORD PTR DS:[EBX+EDX*4+4],-1 
02CDB711  |. JE SHORT Labelmas.02CDB71D 
02CDB713  |. MOV ECX,DWORD PTR DS:[EBX] 
02CDB715  |. INC DWORD PTR DS:[EBX] 
02CDB717  |. MOV DWORD PTR DS:[EBX+ECX*4+4],ESI 
02CDB71B  |. JMP SHORT Labelmas.02CDB732 
02CDB71D  |> XOR EAX,EAX 
02CDB71F  |. LEA EDX,DWORD PTR SS:[EBP-8] 
02CDB722  |. PUSH 0                                    ; /Arg2 = 00000000
02CDB724  |. PUSH EDX                                  ; |Arg1
02CDB725  |. MOV DWORD PTR DS:[2CE03C8],EAX            ; |
02CDB72A  |. CALL Labelmas.02CDB56C                    ; \Labelmas.02CDB56C
02CDB72F  |. ADD ESP,8 
02CDB732  |> MOV ECX,DWORD PTR SS:[EBP+18] 
02CDB735  |. PUSH ECX                                  ; /Arg4
02CDB736  |. PUSH EDI                                  ; |Arg3
02CDB737  |. MOV EAX,DWORD PTR SS:[EBP+10]             ; |
02CDB73A  |. PUSH EAX                                  ; |Arg2
02CDB73B  |. MOV EDX,DWORD PTR DS:[ESI+18]             ; |
02CDB73E  |. PUSH EDX                                  ; |Arg1
02CDB73F  |. CALL Labelmas.02CDB840                    ; \Labelmas.02CDB840
02CDB744  |. MOV EBX,EAX 
02CDB746  |. TEST EDI,EDI 
02CDB748  |. JNZ SHORT Labelmas.02CDB7A1 
02CDB74A  |. TEST EDI,EDI 
02CDB74C  |. JNZ SHORT Labelmas.02CDB772 
02CDB74E  |. DEC DWORD PTR DS:[2CE16C0] 
02CDB754  |. JNZ SHORT Labelmas.02CDB772 
02CDB756  |. CMP DWORD PTR DS:[2CE1690],0 
02CDB75D  |. JE SHORT Labelmas.02CDB772 
02CDB75F  |. MOV EAX,DWORD PTR DS:[2CE1690] 
02CDB764  |. PUSH EAX                                  ; /EnvironmentBlock => 005C1230
02CDB765  |. CALL <JMP.&KERNEL32.FreeEnvironmentStrin> ; \FreeEnvironmentStringsA
02CDB76A  |. XOR EDX,EDX 
02CDB76C  |. MOV DWORD PTR DS:[2CE1690],EDX 
02CDB772  |> CMP DWORD PTR DS:[2CE16C0],0 
02CDB779  |. JNZ SHORT Labelmas.02CDB7A1 
02CDB77B  |. CMP DWORD PTR DS:[2CE03C8],0 
02CDB782  |. JNZ SHORT Labelmas.02CDB7A1 
02CDB784  |. CMP DWORD PTR DS:[2CE03B8],0 
02CDB78B  |. JE SHORT Labelmas.02CDB793 
02CDB78D  |. CALL DWORD PTR DS:[2CE03B8] 
02CDB793  |> PUSH 1                                    ; /Arg2 = 00000001
02CDB795  |. LEA ECX,DWORD PTR SS:[EBP-8]              ; |
02CDB798  |. PUSH ECX                                  ; |Arg1
02CDB799  |. CALL Labelmas.02CDB56C                    ; \Labelmas.02CDB56C
02CDB79E  |. ADD ESP,8 
02CDB7A1  |> MOV EAX,EBX 
02CDB7A3  |. POP EDI 
02CDB7A4  |. POP ESI 
02CDB7A5  |. POP EBX 
02CDB7A6  |. POP ECX 
02CDB7A7  |. POP ECX 
02CDB7A8  |. POP EBP 
02CDB7A9  \. RETN 
02CDB7AA     NOP 
02CDB7AB     NOP 
02CDB7AC  /. PUSH EBP 
02CDB7AD  |. MOV EBP,ESP 
02CDB7AF  |. ADD ESP,-300 
02CDB7B5  |. MOV ECX,40 
02CDB7BA  |. PUSH EBX 
02CDB7BB  |. PUSH ESI 
02CDB7BC  |. PUSH EDI 
02CDB7BD  |. LEA EDI,DWORD PTR SS:[EBP-300] 
02CDB7C3  |. MOV EAX,DWORD PTR SS:[EBP+8] 
02CDB7C6  |. MOV ESI,Labelmas.02CE048C 
02CDB7CB  |. MOV EBX,DWORD PTR DS:[EAX] 
02CDB7CD  |. REP MOVS DWORD PTR ES:[EDI],DWORD PTR DS> 
02CDB7CF  |. CMP DWORD PTR DS:[2CE0488],0 
02CDB7D6  |. JE SHORT Labelmas.02CDB820 
02CDB7D8  |. XOR EAX,EAX 
02CDB7DA  |. LEA EDX,DWORD PTR SS:[EBP-300] 
02CDB7E0  |. MOV DWORD PTR DS:[2CE0488],EAX 
02CDB7E5  |. PUSH 100                                  ; /BufSize = 100 (256.)
02CDB7EA  |. PUSH EDX                                  ; |PathBuffer
02CDB7EB  |. MOV ECX,DWORD PTR DS:[2CE16C4]            ; |Labelmas.02CD0000
02CDB7F1  |. PUSH ECX                                  ; |hModule => 02CD0000 (Labelmas)
02CDB7F2  |. CALL <JMP.&KERNEL32.GetModuleFileNameA>   ; \GetModuleFileNameA
02CDB7F7  |. LEA EAX,DWORD PTR SS:[EBP-300] 
02CDB7FD  |. PUSH EAX                                  ; /<%s>
02CDB7FE  |. PUSH EBX                                  ; |<%08X>
02CDB7FF  |. PUSH Labelmas.02CE058D                    ; |Format = "An exception (%08X) occurred during DllEntryPoint or DllMain in module:\n%s"
02CDB804  |. LEA EDX,DWORD PTR SS:[EBP-200]            ; |
02CDB80A  |. PUSH EDX                                  ; |s
02CDB80B  |. CALL <JMP.&USER32.wsprintfA>              ; \wsprintfA
02CDB810  |. ADD ESP,10 
02CDB813  |. LEA ECX,DWORD PTR SS:[EBP-200] 
02CDB819  |. PUSH ECX 
02CDB81A  |. CALL Labelmas.02CDAB88 
02CDB81F  |. POP ECX 
02CDB820  |> MOV EAX,1 
02CDB825  |. POP EDI 
02CDB826  |. POP ESI 
02CDB827  |. POP EBX 
02CDB828  |. MOV ESP,EBP 
02CDB82A  |. POP EBP 
02CDB82B  \. RETN 0C 
02CDB82E     NOP 
02CDB82F     NOP 

Converted to HTML using olly2html.pl 0.1 by Joe Stewart