Back to Index
Previous: sub_02CDB640
Next: sub_02CDB830
Labelmas.sub_02CDB6AC
02CDB6AC /$ PUSH EBP
02CDB6AD |. MOV EBP,ESP
02CDB6AF |. ADD ESP,-8
02CDB6B2 |. PUSH EBX
02CDB6B3 |. PUSH ESI
02CDB6B4 |. PUSH EDI
02CDB6B5 |. MOV EDI,DWORD PTR SS:[EBP+14]
02CDB6B8 |. MOV ESI,DWORD PTR SS:[EBP+8]
02CDB6BB |. MOV DWORD PTR SS:[EBP-8],1
02CDB6C2 |. MOV DWORD PTR SS:[EBP-4],ESI
02CDB6C5 |. CMP EDI,1
02CDB6C8 |. JNZ SHORT Labelmas.02CDB732
02CDB6CA |. MOV EAX,DWORD PTR DS:[2CE16C0]
02CDB6CF |. INC DWORD PTR DS:[2CE16C0]
02CDB6D5 |. TEST EAX,EAX
02CDB6D7 |. JNZ SHORT Labelmas.02CDB732
02CDB6D9 |. CALL <JMP.&KERNEL32.GetEnvironmentString> ; [GetEnvironmentStrings
02CDB6DE |. MOV DWORD PTR DS:[2CE1690],EAX
02CDB6E3 |. MOV EDX,DWORD PTR SS:[EBP+10]
02CDB6E6 |. MOV DWORD PTR DS:[2CDE0F3],EDX
02CDB6EC |. MOV ECX,DWORD PTR DS:[ESI+44]
02CDB6EF |. PUSH ECX ; /Arg1
02CDB6F0 |. CALL Labelmas.02CD41D0 ; \Labelmas.02CD41D0
02CDB6F5 |. POP ECX
02CDB6F6 |. CMP DWORD PTR DS:[2CE03C8],0
02CDB6FD |. JE SHORT Labelmas.02CDB71D
02CDB6FF |. CALL Labelmas.02CDB564
02CDB704 |. MOV EBX,EAX
02CDB706 |. TEST EAX,EAX
02CDB708 |. JE SHORT Labelmas.02CDB71D
02CDB70A |. MOV EDX,DWORD PTR DS:[EBX]
02CDB70C |. CMP DWORD PTR DS:[EBX+EDX*4+4],-1
02CDB711 |. JE SHORT Labelmas.02CDB71D
02CDB713 |. MOV ECX,DWORD PTR DS:[EBX]
02CDB715 |. INC DWORD PTR DS:[EBX]
02CDB717 |. MOV DWORD PTR DS:[EBX+ECX*4+4],ESI
02CDB71B |. JMP SHORT Labelmas.02CDB732
02CDB71D |> XOR EAX,EAX
02CDB71F |. LEA EDX,DWORD PTR SS:[EBP-8]
02CDB722 |. PUSH 0 ; /Arg2 = 00000000
02CDB724 |. PUSH EDX ; |Arg1
02CDB725 |. MOV DWORD PTR DS:[2CE03C8],EAX ; |
02CDB72A |. CALL Labelmas.02CDB56C ; \Labelmas.02CDB56C
02CDB72F |. ADD ESP,8
02CDB732 |> MOV ECX,DWORD PTR SS:[EBP+18]
02CDB735 |. PUSH ECX ; /Arg4
02CDB736 |. PUSH EDI ; |Arg3
02CDB737 |. MOV EAX,DWORD PTR SS:[EBP+10] ; |
02CDB73A |. PUSH EAX ; |Arg2
02CDB73B |. MOV EDX,DWORD PTR DS:[ESI+18] ; |
02CDB73E |. PUSH EDX ; |Arg1
02CDB73F |. CALL Labelmas.02CDB840 ; \Labelmas.02CDB840
02CDB744 |. MOV EBX,EAX
02CDB746 |. TEST EDI,EDI
02CDB748 |. JNZ SHORT Labelmas.02CDB7A1
02CDB74A |. TEST EDI,EDI
02CDB74C |. JNZ SHORT Labelmas.02CDB772
02CDB74E |. DEC DWORD PTR DS:[2CE16C0]
02CDB754 |. JNZ SHORT Labelmas.02CDB772
02CDB756 |. CMP DWORD PTR DS:[2CE1690],0
02CDB75D |. JE SHORT Labelmas.02CDB772
02CDB75F |. MOV EAX,DWORD PTR DS:[2CE1690]
02CDB764 |. PUSH EAX ; /EnvironmentBlock => 005C1230
02CDB765 |. CALL <JMP.&KERNEL32.FreeEnvironmentStrin> ; \FreeEnvironmentStringsA
02CDB76A |. XOR EDX,EDX
02CDB76C |. MOV DWORD PTR DS:[2CE1690],EDX
02CDB772 |> CMP DWORD PTR DS:[2CE16C0],0
02CDB779 |. JNZ SHORT Labelmas.02CDB7A1
02CDB77B |. CMP DWORD PTR DS:[2CE03C8],0
02CDB782 |. JNZ SHORT Labelmas.02CDB7A1
02CDB784 |. CMP DWORD PTR DS:[2CE03B8],0
02CDB78B |. JE SHORT Labelmas.02CDB793
02CDB78D |. CALL DWORD PTR DS:[2CE03B8]
02CDB793 |> PUSH 1 ; /Arg2 = 00000001
02CDB795 |. LEA ECX,DWORD PTR SS:[EBP-8] ; |
02CDB798 |. PUSH ECX ; |Arg1
02CDB799 |. CALL Labelmas.02CDB56C ; \Labelmas.02CDB56C
02CDB79E |. ADD ESP,8
02CDB7A1 |> MOV EAX,EBX
02CDB7A3 |. POP EDI
02CDB7A4 |. POP ESI
02CDB7A5 |. POP EBX
02CDB7A6 |. POP ECX
02CDB7A7 |. POP ECX
02CDB7A8 |. POP EBP
02CDB7A9 \. RETN
02CDB7AA NOP
02CDB7AB NOP
02CDB7AC /. PUSH EBP
02CDB7AD |. MOV EBP,ESP
02CDB7AF |. ADD ESP,-300
02CDB7B5 |. MOV ECX,40
02CDB7BA |. PUSH EBX
02CDB7BB |. PUSH ESI
02CDB7BC |. PUSH EDI
02CDB7BD |. LEA EDI,DWORD PTR SS:[EBP-300]
02CDB7C3 |. MOV EAX,DWORD PTR SS:[EBP+8]
02CDB7C6 |. MOV ESI,Labelmas.02CE048C
02CDB7CB |. MOV EBX,DWORD PTR DS:[EAX]
02CDB7CD |. REP MOVS DWORD PTR ES:[EDI],DWORD PTR DS>
02CDB7CF |. CMP DWORD PTR DS:[2CE0488],0
02CDB7D6 |. JE SHORT Labelmas.02CDB820
02CDB7D8 |. XOR EAX,EAX
02CDB7DA |. LEA EDX,DWORD PTR SS:[EBP-300]
02CDB7E0 |. MOV DWORD PTR DS:[2CE0488],EAX
02CDB7E5 |. PUSH 100 ; /BufSize = 100 (256.)
02CDB7EA |. PUSH EDX ; |PathBuffer
02CDB7EB |. MOV ECX,DWORD PTR DS:[2CE16C4] ; |Labelmas.02CD0000
02CDB7F1 |. PUSH ECX ; |hModule => 02CD0000 (Labelmas)
02CDB7F2 |. CALL <JMP.&KERNEL32.GetModuleFileNameA> ; \GetModuleFileNameA
02CDB7F7 |. LEA EAX,DWORD PTR SS:[EBP-300]
02CDB7FD |. PUSH EAX ; /<%s>
02CDB7FE |. PUSH EBX ; |<%08X>
02CDB7FF |. PUSH Labelmas.02CE058D ; |Format = "An exception (%08X) occurred during DllEntryPoint or DllMain in module:\n%s"
02CDB804 |. LEA EDX,DWORD PTR SS:[EBP-200] ; |
02CDB80A |. PUSH EDX ; |s
02CDB80B |. CALL <JMP.&USER32.wsprintfA> ; \wsprintfA
02CDB810 |. ADD ESP,10
02CDB813 |. LEA ECX,DWORD PTR SS:[EBP-200]
02CDB819 |. PUSH ECX
02CDB81A |. CALL Labelmas.02CDAB88
02CDB81F |. POP ECX
02CDB820 |> MOV EAX,1
02CDB825 |. POP EDI
02CDB826 |. POP ESI
02CDB827 |. POP EBX
02CDB828 |. MOV ESP,EBP
02CDB82A |. POP EBP
02CDB82B \. RETN 0C
02CDB82E NOP
02CDB82F NOP
Converted to HTML using
olly2html.pl
0.1 by Joe Stewart