API tools faq
paste
stoneharry

Untitled

stoneharry
Jan 12th, 2013
217
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.78 KB | None | 0 0
raw download clone embed print report
  1. 00401772 . 74 0F JE SHORT WoW-inst.00401783
  2. 00401774 . 68 80000000 PUSH 80 ; /FileAttributes = NORMAL
  3. 00401779 . 8D45 88 LEA EAX,DWORD PTR SS:[EBP-78] ; |
  4. 0040177C . 50 PUSH EAX ; |FileName
  5. 0040177D . FF15 3C004100 CALL DWORD PTR DS:[<&KERNEL32.SetFileAtt>; \SetFileAttributesA
  6. 00401783 > 8D45 88 LEA EAX,DWORD PTR SS:[EBP-78]
  7. 00401786 . 50 PUSH EAX ; /FileName
  8. 00401787 . FF15 38004100 CALL DWORD PTR DS:[<&KERNEL32.DeleteFile>; \DeleteFileA
  9. 0040178D > 33C0 XOR EAX,EAX
  10. 0040178F > 8B8D 8C000000 MOV ECX,DWORD PTR SS:[EBP+8C]
  11. 00401795 . 5F POP EDI
  12. 00401796 . 5E POP ESI
  13. 00401797 . 33CD XOR ECX,EBP
  14. 00401799 . 5B POP EBX
  15. 0040179A . E8 464D0000 CALL WoW-inst.004064E5
  16. 0040179F . 81C5 90000000 ADD EBP,90
  17. 004017A5 . C9 LEAVE
  18. 004017A6 . C3 RETN
  19. 004017A7 /$ 55 PUSH EBP
  20. 004017A8 |. 8DAC24 70FFFFF>LEA EBP,DWORD PTR SS:[ESP-90]
  21. 004017AF |. 81EC 10010000 SUB ESP,110
  22. 004017B5 |. A1 40704100 MOV EAX,DWORD PTR DS:[417040]
  23. 004017BA |. 33C5 XOR EAX,EBP
  24. 004017BC |. 8985 8C000000 MOV DWORD PTR SS:[EBP+8C],EAX
  25. 004017C2 |. 56 PUSH ESI
  26. 004017C3 |. 68 04010000 PUSH 104
  27. 004017C8 |. 8D45 88 LEA EAX,DWORD PTR SS:[EBP-78]
  28. 004017CB |. 6A 00 PUSH 0
  29. 004017CD |. 50 PUSH EAX
  30. 004017CE |. E8 9D500000 CALL WoW-inst.00406870
  31. 004017D3 |. BE 03010000 MOV ESI,103
  32. 004017D8 |. 56 PUSH ESI
  33. 004017D9 |. 8D45 88 LEA EAX,DWORD PTR SS:[EBP-78]
  34. 004017DC |. 57 PUSH EDI
  35. 004017DD |. 50 PUSH EAX
  36. 004017DE |. E8 87540000 CALL WoW-inst.00406C6A
  37. 004017E3 |. 56 PUSH ESI
  38. 004017E4 |. 8D45 88 LEA EAX,DWORD PTR SS:[EBP-78]
  39. 004017E7 |. 68 30024100 PUSH WoW-inst.00410230
  40. 004017EC |. 50 PUSH EAX
  41. 004017ED |. E8 80530000 CALL WoW-inst.00406B72
  42. 004017F2 |. 8D45 88 LEA EAX,DWORD PTR SS:[EBP-78]
  43. 004017F5 |. 8945 80 MOV DWORD PTR SS:[EBP-80],EAX
  44. 004017F8 |. 8B85 98000000 MOV EAX,DWORD PTR SS:[EBP+98]
  45. 004017FE |. 83C4 24 ADD ESP,24
  46. 00401801 |. 8945 84 MOV DWORD PTR SS:[EBP-7C],EAX
  47. 00401804 |. 6A 01 PUSH 1
  48. 00401806 |. 8D45 80 LEA EAX,DWORD PTR SS:[EBP-80]
  49. 00401809 |. 50 PUSH EAX
  50. 0040180A |. 68 69164000 PUSH WoW-inst.00401669
  51. 0040180F |. BA 2C024100 MOV EDX,WoW-inst.0041022C
  52. 00401814 |. 8D4D 88 LEA ECX,DWORD PTR SS:[EBP-78]
  53. 00401817 |. E8 E7FCFFFF CALL WoW-inst.00401503
  54. 0040181C |. 57 PUSH EDI ; /Path
  55. 0040181D |. FF15 40004100 CALL DWORD PTR DS:[<&KERNEL32.RemoveDire>; \RemoveDirectoryA
  56. 00401823 |. 8B8D 8C000000 MOV ECX,DWORD PTR SS:[EBP+8C]
  57. 00401829 |. 33CD XOR ECX,EBP
  58. 0040182B |. 5E POP ESI
  59. 0040182C |. E8 B44C0000 CALL WoW-inst.004064E5
  60. 00401831 |. 81C5 90000000 ADD EBP,90
  61. 00401837 |. C9 LEAVE
  62. 00401838 \. C2 0400 RETN 4
  63. 0040183B /$ 55 PUSH EBP
  64. 0040183C |. 8BEC MOV EBP,ESP
  65. 0040183E |. 81EC 08010000 SUB ESP,108
  66. 00401844 |. A1 40704100 MOV EAX,DWORD PTR DS:[417040]
  67. 00401849 |. 33C5 XOR EAX,EBP
  68. 0040184B |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
  69. 0040184E |. 56 PUSH ESI
  70. 0040184F |. 57 PUSH EDI
  71. 00401850 |. 8D85 F8FEFFFF LEA EAX,DWORD PTR SS:[EBP-108]
  72. 00401856 |. 50 PUSH EAX ; /Buffer
  73. 00401857 |. BE 04010000 MOV ESI,104 ; |
  74. 0040185C |. 56 PUSH ESI ; |BufSize => 104 (260.)
  75. 0040185D |. 8BF9 MOV EDI,ECX ; |
  76. 0040185F |. FF15 6C004100 CALL DWORD PTR DS:[<&KERNEL32.GetTempPat>; \GetTempPathA
  77. 00401865 |. FF15 68004100 CALL DWORD PTR DS:[<&KERNEL32.GetTickCou>; [GetTickCount
  78. 0040186B |. 50 PUSH EAX
  79. 0040186C |. 8D85 F8FEFFFF LEA EAX,DWORD PTR SS:[EBP-108]
  80. 00401872 |. 50 PUSH EAX
  81. 00401873 |. 68 3C024100 PUSH WoW-inst.0041023C ; ASCII "%sBlizzard Installer Bootstrap - %08x\"
  82. 00401878 |. 56 PUSH ESI
  83. 00401879 |. 57 PUSH EDI
  84. 0040187A |. E8 31580000 CALL WoW-inst.004070B0
  85. 0040187F |. 83C4 14 ADD ESP,14
  86. 00401882 |. 6A 01 PUSH 1
  87. 00401884 |. E8 1EFFFFFF CALL WoW-inst.004017A7
  88. 00401889 |. 6A 00 PUSH 0 ; /pSecurity = NULL
  89. 0040188B |. 57 PUSH EDI ; |Path
  90. 0040188C |. FF15 64004100 CALL DWORD PTR DS:[<&KERNEL32.CreateDire>; \CreateDirectoryA
  91. 00401892 |. 8B4D FC MOV ECX,DWORD PTR SS:[EBP-4]
  92. 00401895 |. 8BC7 MOV EAX,EDI
  93. 00401897 |. 5F POP EDI
  94. 00401898 |. 33CD XOR ECX,EBP
  95. 0040189A |. 5E POP ESI
  96. 0040189B |. E8 454C0000 CALL WoW-inst.004064E5
  97. 004018A0 |. C9 LEAVE
  98. 004018A1 \. C3 RETN
  99. 004018A2 /$ 55 PUSH EBP
  100. 004018A3 |. 8DAC24 9CF3FFF>LEA EBP,DWORD PTR SS:[ESP-C64]
  101. 004018AA |. 81EC E40C0000 SUB ESP,0CE4
  102. 004018B0 |. A1 40704100 MOV EAX,DWORD PTR DS:[417040]
  103. 004018B5 |. 33C5 XOR EAX,EBP
  104. 004018B7 |. 8985 600C0000 MOV DWORD PTR SS:[EBP+C60],EAX
  105. 004018BD |. 8B85 6C0C0000 MOV EAX,DWORD PTR SS:[EBP+C6C]
  106. 004018C3 |. 53 PUSH EBX
  107. 004018C4 |. 56 PUSH ESI
  108. 004018C5 |. 8945 C4 MOV DWORD PTR SS:[EBP-3C],EAX
  109. 004018C8 |. BE 04010000 MOV ESI,104
  110. 004018CD |. 56 PUSH ESI ; /BufSize => 104 (260.)
  111. 004018CE |. 8D85 180A0000 LEA EAX,DWORD PTR SS:[EBP+A18] ; |
  112. 004018D4 |. 50 PUSH EAX ; |PathBuffer
  113. 004018D5 |. 33DB XOR EBX,EBX ; |
  114. 004018D7 |. 53 PUSH EBX ; |hModule => NULL
  115. 004018D8 |. FF15 50004100 CALL DWORD PTR DS:[<&KERNEL32.GetModuleF>; \GetModuleFileNameA
  116. 004018DE |. E8 EFF9FFFF CALL WoW-inst.004012D2
  117. 004018E3 |. 8845 07 MOV BYTE PTR SS:[EBP+7],AL
  118. 004018E6 |. 8D85 180A0000 LEA EAX,DWORD PTR SS:[EBP+A18]
  119. 004018EC |. 50 PUSH EAX
  120. 004018ED |. 8D8D 10010000 LEA ECX,DWORD PTR SS:[EBP+110]
  121. 004018F3 |. 889D 14010000 MOV BYTE PTR SS:[EBP+114],BL
  122. 004018F9 |. E8 D1FAFFFF CALL WoW-inst.004013CF
  123. 004018FE |. 84C0 TEST AL,AL
  124. 00401900 |. 8D8D 10010000 LEA ECX,DWORD PTR SS:[EBP+110]
  125. 00401906 |. 75 0C JNZ SHORT WoW-inst.00401914
  126. 00401908 |> E8 74FBFFFF CALL WoW-inst.00401481
  127. 0040190D |. 32C0 XOR AL,AL
  128. 0040190F |. E9 3F030000 JMP WoW-inst.00401C53
  129. 00401914 |> 8D45 FC LEA EAX,DWORD PTR SS:[EBP-4]
  130. 00401917 |. 50 PUSH EAX
  131. 00401918 |. E8 E3F6FFFF CALL WoW-inst.00401000
  132. 0040191D |. 84C0 TEST AL,AL
  133. 0040191F |. 8D8D 10010000 LEA ECX,DWORD PTR SS:[EBP+110]
  134. 00401925 |.^74 E1 JE SHORT WoW-inst.00401908
  135. 00401927 |. 57 PUSH EDI
  136. 00401928 |. 8B7D FC MOV EDI,DWORD PTR SS:[EBP-4]
  137. 0040192B |. 8D45 CC LEA EAX,DWORD PTR SS:[EBP-34]
  138. 0040192E |. 50 PUSH EAX ; /Arg3
  139. 0040192F |. 6A 10 PUSH 10 ; |Arg2 = 00000010
  140. 00401931 |. 8D47 F0 LEA EAX,DWORD PTR DS:[EDI-10] ; |
  141. 00401934 |. 50 PUSH EAX ; |Arg1
  142. 00401935 |. E8 02F7FFFF CALL WoW-inst.0040103C ; \WoW-inst.0040103C
  143. 0040193A |. 84C0 TEST AL,AL
  144. 0040193C |. 0F84 03030000 JE WoW-inst.00401C45
  145. 00401942 |. 817D D8 42736E>CMP DWORD PTR SS:[EBP-28],496E7342
  146. 00401949 |. 74 5E JE SHORT WoW-inst.004019A9
  147. 0040194B |. 8D45 CC LEA EAX,DWORD PTR SS:[EBP-34]
  148. 0040194E |. 50 PUSH EAX ; /Arg3
  149. 0040194F |. 6A 10 PUSH 10 ; |Arg2 = 00000010
  150. 00401951 |. 8D87 ECFEFFFF LEA EAX,DWORD PTR DS:[EDI-114] ; |
  151. 00401957 |. 50 PUSH EAX ; |Arg1
  152. 00401958 |. 8D8D 10010000 LEA ECX,DWORD PTR SS:[EBP+110] ; |
  153. 0040195E |. E8 D9F6FFFF CALL WoW-inst.0040103C ; \WoW-inst.0040103C
  154. 00401963 |. 84C0 TEST AL,AL
  155. 00401965 |. 0F84 DA020000 JE WoW-inst.00401C45
  156. 0040196B |. 817D D8 42736E>CMP DWORD PTR SS:[EBP-28],496E7342
  157. 00401972 |. 74 35 JE SHORT WoW-inst.004019A9
  158. 00401974 |. 81C7 ECFEFFFF ADD EDI,-114
  159. 0040197A |. EB 24 JMP SHORT WoW-inst.004019A0
  160. 0040197C |> 8D45 CC /LEA EAX,DWORD PTR SS:[EBP-34]
  161. 0040197F |. 50 |PUSH EAX ; /Arg3
  162. 00401980 |. 6A 10 |PUSH 10 ; |Arg2 = 00000010
  163. 00401982 |. 4F |DEC EDI ; |
  164. 00401983 |. 57 |PUSH EDI ; |Arg1
  165. 00401984 |. 8D8D 10010000 |LEA ECX,DWORD PTR SS:[EBP+110] ; |
  166. 0040198A |. E8 ADF6FFFF |CALL WoW-inst.0040103C ; \WoW-inst.0040103C
  167. 0040198F |. 84C0 |TEST AL,AL
  168. 00401991 |. 0F84 AE020000 |JE WoW-inst.00401C45
  169. 00401997 |. 817D D8 42736E>|CMP DWORD PTR SS:[EBP-28],496E7342
  170. 0040199E |. 74 09 |JE SHORT WoW-inst.004019A9
  171. 004019A0 |> 3BFB CMP EDI,EBX
  172. 004019A2 |.^7F D8 \JG SHORT WoW-inst.0040197C
  173. 004019A4 |. E9 9C020000 JMP WoW-inst.00401C45
  174. 004019A9 |> 8B45 D0 MOV EAX,DWORD PTR SS:[EBP-30]
  175. 004019AC |. 8B7D D4 MOV EDI,DWORD PTR SS:[EBP-2C]
  176. 004019AF |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
  177. 004019B2 |. 6BC0 4C IMUL EAX,EAX,4C
  178. 004019B5 |. 50 PUSH EAX
  179. 004019B6 |. 8945 00 MOV DWORD PTR SS:[EBP],EAX
  180. 004019B9 |. E8 E5430000 CALL WoW-inst.00405DA3
  181. 004019BE |. 59 POP ECX
  182. 004019BF |. 50 PUSH EAX ; /Arg3
  183. 004019C0 |. FF75 00 PUSH DWORD PTR SS:[EBP] ; |Arg2
  184. 004019C3 |. 8D8D 10010000 LEA ECX,DWORD PTR SS:[EBP+110] ; |
  185. 004019C9 |. 57 PUSH EDI ; |Arg1
  186. 004019CA |. 8945 EC MOV DWORD PTR SS:[EBP-14],EAX ; |
  187. 004019CD |. E8 6AF6FFFF CALL WoW-inst.0040103C ; \WoW-inst.0040103C
  188. 004019D2 |. 84C0 TEST AL,AL
  189. 004019D4 |. 75 0D JNZ SHORT WoW-inst.004019E3
  190. 004019D6 |. FF75 EC PUSH DWORD PTR SS:[EBP-14]
  191. 004019D9 |. E8 A6450000 CALL WoW-inst.00405F84
  192. 004019DE |. E9 3F020000 JMP WoW-inst.00401C22
  193. 004019E3 |> 56 PUSH ESI
  194. 004019E4 |. 8D85 1C0B0000 LEA EAX,DWORD PTR SS:[EBP+B1C]
  195. 004019EA |. 53 PUSH EBX
  196. 004019EB |. 50 PUSH EAX
  197. 004019EC |. E8 7F4E0000 CALL WoW-inst.00406870
  198. 004019F1 |. 83C4 0C ADD ESP,0C
  199. 004019F4 |. 395D FC CMP DWORD PTR SS:[EBP-4],EBX
  200. 004019F7 |. 895D 00 MOV DWORD PTR SS:[EBP],EBX
  201. 004019FA |. 0F8E A4010000 JLE WoW-inst.00401BA4
  202. 00401A00 |. 8B75 EC MOV ESI,DWORD PTR SS:[EBP-14]
  203. 00401A03 |. 83C6 04 ADD ESI,4
  204. 00401A06 |> FF36 /PUSH DWORD PTR DS:[ESI]
  205. 00401A08 |. E8 96430000 |CALL WoW-inst.00405DA3
  206. 00401A0D |. 59 |POP ECX
  207. 00401A0E |. 50 |PUSH EAX ; /Arg3
  208. 00401A0F |. FF36 |PUSH DWORD PTR DS:[ESI] ; |Arg2
  209. 00401A11 |. 8D8D 10010000 |LEA ECX,DWORD PTR SS:[EBP+110] ; |
  210. 00401A17 |. FF76 FC |PUSH DWORD PTR DS:[ESI-4] ; |Arg1
  211. 00401A1A |. 8945 F4 |MOV DWORD PTR SS:[EBP-C],EAX ; |
  212. 00401A1D |. E8 1AF6FFFF |CALL WoW-inst.0040103C ; \WoW-inst.0040103C
  213. 00401A22 |. 84C0 |TEST AL,AL
  214. 00401A24 |. 0F84 E7010000 |JE WoW-inst.00401C11
  215. 00401A2A |. 8B7E 04 |MOV EDI,DWORD PTR DS:[ESI+4]
  216. 00401A2D |. 57 |PUSH EDI
  217. 00401A2E |. E8 70430000 |CALL WoW-inst.00405DA3
  218. 00401A33 |. 59 |POP ECX
  219. 00401A34 |. FF36 |PUSH DWORD PTR DS:[ESI] ; /Arg2
  220. 00401A36 |. 8BC8 |MOV ECX,EAX ; |
  221. 00401A38 |. 8B46 04 |MOV EAX,DWORD PTR DS:[ESI+4] ; |
  222. 00401A3B |. FF75 F4 |PUSH DWORD PTR SS:[EBP-C] ; |Arg1
  223. 00401A3E |. 8D55 C8 |LEA EDX,DWORD PTR SS:[EBP-38] ; |
  224. 00401A41 |. 894D E4 |MOV DWORD PTR SS:[EBP-1C],ECX ; |
  225. 00401A44 |. 8945 C8 |MOV DWORD PTR SS:[EBP-38],EAX ; |
  226. 00401A47 |. E8 75420000 |CALL WoW-inst.00405CC1 ; \WoW-inst.00405CC1
  227. 00401A4C |. 85C0 |TEST EAX,EAX
  228. 00401A4E |. 0F85 D6010000 |JNZ WoW-inst.00401C2A
  229. 00401A54 |. 8D46 08 |LEA EAX,DWORD PTR DS:[ESI+8]
  230. 00401A57 |. 50 |PUSH EAX
  231. 00401A58 |. 8D85 200C0000 |LEA EAX,DWORD PTR SS:[EBP+C20]
  232. 00401A5E |. 68 DC014100 |PUSH WoW-inst.004101DC ; ASCII "%s"
  233. 00401A63 |. 50 |PUSH EAX
  234. 00401A64 |. E8 2A580000 |CALL WoW-inst.00407293
  235. 00401A69 |. 83C4 0C |ADD ESP,0C
  236. 00401A6C |. 385D 07 |CMP BYTE PTR SS:[EBP+7],BL
  237. 00401A6F |. 74 36 |JE SHORT WoW-inst.00401AA7
  238. 00401A71 |. 8D85 200C0000 |LEA EAX,DWORD PTR SS:[EBP+C20]
  239. 00401A77 |. 68 94024100 |PUSH WoW-inst.00410294 ; ASCII "RichEd20.dll"
  240. 00401A7C |. 50 |PUSH EAX
  241. 00401A7D |. E8 1B560000 |CALL WoW-inst.0040709D
  242. 00401A82 |. 85C0 |TEST EAX,EAX
  243. 00401A84 |. 59 |POP ECX
  244. 00401A85 |. 59 |POP ECX
  245. 00401A86 |. 0F84 F4000000 |JE WoW-inst.00401B80
  246. 00401A8C |. 8D85 200C0000 |LEA EAX,DWORD PTR SS:[EBP+C20]
  247. 00401A92 |. 68 88024100 |PUSH WoW-inst.00410288 ; ASCII "Unicows.dll"
  248. 00401A97 |. 50 |PUSH EAX
  249. 00401A98 |. E8 00560000 |CALL WoW-inst.0040709D
  250. 00401A9D |. 85C0 |TEST EAX,EAX
  251. 00401A9F |. 59 |POP ECX
  252. 00401AA0 |. 59 |POP ECX
  253. 00401AA1 |. 0F84 D9000000 |JE WoW-inst.00401B80
  254. 00401AA7 |> 68 00040000 |PUSH 400
  255. 00401AAC |. 8D85 18060000 |LEA EAX,DWORD PTR SS:[EBP+618]
  256. 00401AB2 |. 53 |PUSH EBX
  257. 00401AB3 |. 50 |PUSH EAX
  258. 00401AB4 |. E8 B74D0000 |CALL WoW-inst.00406870
  259. 00401AB9 |. 83C4 0C |ADD ESP,0C
  260. 00401ABC |. F605 A4804100 >|TEST BYTE PTR DS:[4180A4],1
  261. 00401AC3 |. 75 1C |JNZ SHORT WoW-inst.00401AE1
  262. 00401AC5 |. 830D A4804100 >|OR DWORD PTR DS:[4180A4],1
  263. 00401ACC |. B9 A07F4100 |MOV ECX,WoW-inst.00417FA0
  264. 00401AD1 |. E8 65FDFFFF |CALL WoW-inst.0040183B
  265. 00401AD6 |. 68 98F04000 |PUSH WoW-inst.0040F098
  266. 00401ADB |. E8 A1570000 |CALL WoW-inst.00407281
  267. 00401AE0 |. 59 |POP ECX
  268. 00401AE1 |> 8D85 200C0000 |LEA EAX,DWORD PTR SS:[EBP+C20]
  269. 00401AE7 |. 50 |PUSH EAX
  270. 00401AE8 |. 68 A07F4100 |PUSH WoW-inst.00417FA0
  271. 00401AED |. 68 80024100 |PUSH WoW-inst.00410280 ; ASCII "%s%s"
  272. 00401AF2 |. 8D85 18060000 |LEA EAX,DWORD PTR SS:[EBP+618]
  273. 00401AF8 |. 68 FF030000 |PUSH 3FF
  274. 00401AFD |. 50 |PUSH EAX
  275. 00401AFE |. E8 AD550000 |CALL WoW-inst.004070B0
  276. 00401B03 |. 83C4 14 |ADD ESP,14
  277. 00401B06 |. 8D85 18060000 |LEA EAX,DWORD PTR SS:[EBP+618]
  278. 00401B0C |. 50 |PUSH EAX
  279. 00401B0D |. 8D4D 08 |LEA ECX,DWORD PTR SS:[EBP+8]
  280. 00401B10 |. 885D 0C |MOV BYTE PTR SS:[EBP+C],BL
  281. 00401B13 |. E8 2CF9FFFF |CALL WoW-inst.00401444
  282. 00401B18 |. 84C0 |TEST AL,AL
  283. 00401B1A |. 8D4D 08 |LEA ECX,DWORD PTR SS:[EBP+8]
  284. 00401B1D |. 0F84 02010000 |JE WoW-inst.00401C25
  285. 00401B23 |. FF75 E4 |PUSH DWORD PTR SS:[EBP-1C] ; /Arg3
  286. 00401B26 |. 57 |PUSH EDI ; |Arg2
  287. 00401B27 |. 53 |PUSH EBX ; |Arg1
  288. 00401B28 |. E8 5DF5FFFF |CALL WoW-inst.0040108A ; \WoW-inst.0040108A
  289. 00401B2D |. 84C0 |TEST AL,AL
  290. 00401B2F |. 0F84 37010000 |JE WoW-inst.00401C6C
  291. 00401B35 |. 8D8D 18060000 |LEA ECX,DWORD PTR SS:[EBP+618]
  292. 00401B3B |. E8 52F7FFFF |CALL WoW-inst.00401292
  293. 00401B40 |. 8D85 200C0000 |LEA EAX,DWORD PTR SS:[EBP+C20]
  294. 00401B46 |. 6A 2E |PUSH 2E
  295. 00401B48 |. 50 |PUSH EAX
  296. 00401B49 |. E8 F3510000 |CALL WoW-inst.00406D41
  297. 00401B4E |. 3BC3 |CMP EAX,EBX
  298. 00401B50 |. 59 |POP ECX
  299. 00401B51 |. 59 |POP ECX
  300. 00401B52 |. 74 24 |JE SHORT WoW-inst.00401B78
  301. 00401B54 |. 68 78024100 |PUSH WoW-inst.00410278 ; ASCII ".exe"
  302. 00401B59 |. 50 |PUSH EAX
  303. 00401B5A |. E8 3E550000 |CALL WoW-inst.0040709D
  304. 00401B5F |. 85C0 |TEST EAX,EAX
  305. 00401B61 |. 59 |POP ECX
  306. 00401B62 |. 59 |POP ECX
  307. 00401B63 |. 75 13 |JNZ SHORT WoW-inst.00401B78
  308. 00401B65 |> 8A8C05 1806000>|/MOV CL,BYTE PTR SS:[EBP+EAX+618]
  309. 00401B6C |. 888C05 1C0B000>||MOV BYTE PTR SS:[EBP+EAX+B1C],CL
  310. 00401B73 |. 40 ||INC EAX
  311. 00401B74 |. 3ACB ||CMP CL,BL
  312. 00401B76 |.^75 ED |\JNZ SHORT WoW-inst.00401B65
  313. 00401B78 |> 8D4D 08 |LEA ECX,DWORD PTR SS:[EBP+8]
  314. 00401B7B |. E8 01F9FFFF |CALL WoW-inst.00401481
  315. 00401B80 |> FF75 E4 |PUSH DWORD PTR SS:[EBP-1C]
  316. 00401B83 |. E8 FC430000 |CALL WoW-inst.00405F84
  317. 00401B88 |. FF75 F4 |PUSH DWORD PTR SS:[EBP-C]
  318. 00401B8B |. E8 F4430000 |CALL WoW-inst.00405F84
  319. 00401B90 |. FF45 00 |INC DWORD PTR SS:[EBP]
  320. 00401B93 |. 8B45 00 |MOV EAX,DWORD PTR SS:[EBP]
  321. 00401B96 |. 59 |POP ECX
  322. 00401B97 |. 83C6 4C |ADD ESI,4C
  323. 00401B9A |. 3B45 FC |CMP EAX,DWORD PTR SS:[EBP-4]
  324. 00401B9D |. 59 |POP ECX
  325. 00401B9E |.^0F8C 62FEFFFF \JL WoW-inst.00401A06
  326. 00401BA4 |> 389D 1C0B0000 CMP BYTE PTR SS:[EBP+B1C],BL
  327. 00401BAA |. 74 61 JE SHORT WoW-inst.00401C0D
  328. 00401BAC |. 6A 44 PUSH 44
  329. 00401BAE |. 5E POP ESI
  330. 00401BAF |. 56 PUSH ESI
  331. 00401BB0 |. 8D45 80 LEA EAX,DWORD PTR SS:[EBP-80]
  332. 00401BB3 |. 53 PUSH EBX
  333. 00401BB4 |. 50 PUSH EAX
  334. 00401BB5 |. E8 B64C0000 CALL WoW-inst.00406870
  335. 00401BBA |. 33C0 XOR EAX,EAX
  336. 00401BBC |. 8D7D DC LEA EDI,DWORD PTR SS:[EBP-24]
  337. 00401BBF |. AB STOS DWORD PTR ES:[EDI]
  338. 00401BC0 |. AB STOS DWORD PTR ES:[EDI]
  339. 00401BC1 |. AB STOS DWORD PTR ES:[EDI]
  340. 00401BC2 |. AB STOS DWORD PTR ES:[EDI]
  341. 00401BC3 |. 8D85 180A0000 LEA EAX,DWORD PTR SS:[EBP+A18]
  342. 00401BC9 |. 50 PUSH EAX
  343. 00401BCA |. FF75 C4 PUSH DWORD PTR SS:[EBP-3C]
  344. 00401BCD |. 8D85 1C0B0000 LEA EAX,DWORD PTR SS:[EBP+B1C]
  345. 00401BD3 |. 50 PUSH EAX
  346. 00401BD4 |. 68 64024100 PUSH WoW-inst.00410264 ; ASCII ""%s" %s --path="%s""
  347. 00401BD9 |. 8D85 18020000 LEA EAX,DWORD PTR SS:[EBP+218]
  348. 00401BDF |. 68 FF030000 PUSH 3FF
  349. 00401BE4 |. 50 PUSH EAX
  350. 00401BE5 |. 8975 80 MOV DWORD PTR SS:[EBP-80],ESI
  351. 00401BE8 |. E8 C3540000 CALL WoW-inst.004070B0
  352. 00401BED |. 83C4 24 ADD ESP,24
  353. 00401BF0 |. 8D45 DC LEA EAX,DWORD PTR SS:[EBP-24]
  354. 00401BF3 |. 50 PUSH EAX ; /pProcessInfo
  355. 00401BF4 |. 8D45 80 LEA EAX,DWORD PTR SS:[EBP-80] ; |
  356. 00401BF7 |. 50 PUSH EAX ; |pStartupInfo
  357. 00401BF8 |. 53 PUSH EBX ; |CurrentDir
  358. 00401BF9 |. 53 PUSH EBX ; |pEnvironment
  359. 00401BFA |. 6A 20 PUSH 20 ; |CreationFlags = NORMAL_PRIORITY_CLASS
  360. 00401BFC |. 53 PUSH EBX ; |InheritHandles
  361. 00401BFD |. 53 PUSH EBX ; |pThreadSecurity
  362. 00401BFE |. 53 PUSH EBX ; |pProcessSecurity
  363. 00401BFF |. 8D85 18020000 LEA EAX,DWORD PTR SS:[EBP+218] ; |
  364. 00401C05 |. 50 PUSH EAX ; |CommandLine
  365. 00401C06 |. 53 PUSH EBX ; |ModuleFileName
  366. 00401C07 |. FF15 70004100 CALL DWORD PTR DS:[<&KERNEL32.CreateProc>; \CreateProcessA
  367. 00401C0D |> B3 01 MOV BL,1
  368. 00401C0F |. EB 75 JMP SHORT WoW-inst.00401C86
  369. 00401C11 |> FF75 F4 PUSH DWORD PTR SS:[EBP-C]
  370. 00401C14 |. E8 6B430000 CALL WoW-inst.00405F84
  371. 00401C19 |. FF75 EC PUSH DWORD PTR SS:[EBP-14]
  372. 00401C1C |. E8 63430000 CALL WoW-inst.00405F84
  373. 00401C21 |. 59 POP ECX
  374. 00401C22 |> 59 POP ECX
  375. 00401C23 |. EB 20 JMP SHORT WoW-inst.00401C45
  376. 00401C25 |> E8 57F8FFFF CALL WoW-inst.00401481
  377. 00401C2A |> FF75 E4 PUSH DWORD PTR SS:[EBP-1C]
  378. 00401C2D |. E8 52430000 CALL WoW-inst.00405F84
  379. 00401C32 |. FF75 F4 PUSH DWORD PTR SS:[EBP-C]
  380. 00401C35 |. E8 4A430000 CALL WoW-inst.00405F84
  381. 00401C3A |. FF75 EC PUSH DWORD PTR SS:[EBP-14]
  382. 00401C3D |. E8 42430000 CALL WoW-inst.00405F84
  383. 00401C42 |. 83C4 0C ADD ESP,0C
  384. 00401C45 |> 8D8D 10010000 LEA ECX,DWORD PTR SS:[EBP+110]
  385. 00401C4B |. E8 31F8FFFF CALL WoW-inst.00401481
  386. 00401C50 |. 32C0 XOR AL,AL
  387. 00401C52 |> 5F POP EDI
  388. 00401C53 |> 8B8D 600C0000 MOV ECX,DWORD PTR SS:[EBP+C60]
  389. 00401C59 |. 5E POP ESI
  390. 00401C5A |. 33CD XOR ECX,EBP
  391. 00401C5C |. 5B POP EBX
  392. 00401C5D |. E8 83480000 CALL WoW-inst.004064E5
  393. 00401C62 |. 81C5 640C0000 ADD EBP,0C64
  394. 00401C68 |. C9 LEAVE
  395. 00401C69 |. C2 0400 RETN 4
  396. 00401C6C |> 8D4D 08 LEA ECX,DWORD PTR SS:[EBP+8]
  397. 00401C6F |. E8 0DF8FFFF CALL WoW-inst.00401481
  398. 00401C74 |. FF75 E4 PUSH DWORD PTR SS:[EBP-1C]
  399. 00401C77 |. E8 08430000 CALL WoW-inst.00405F84
  400. 00401C7C |. FF75 F4 PUSH DWORD PTR SS:[EBP-C]
  401. 00401C7F |. E8 00430000 CALL WoW-inst.00405F84
  402. 00401C84 |. 59 POP ECX
  403. 00401C85 |. 59 POP ECX
  404. 00401C86 |> FF75 EC PUSH DWORD PTR SS:[EBP-14]
  405. 00401C89 |. E8 F6420000 CALL WoW-inst.00405F84
  406. 00401C8E |. 59 POP ECX
  407. 00401C8F |. 8D8D 10010000 LEA ECX,DWORD PTR SS:[EBP+110]
  408. 00401C95 |. E8 E7F7FFFF CALL WoW-inst.00401481
  409. 00401C9A |. 8AC3 MOV AL,BL
  410. 00401C9C \.^EB B4 JMP SHORT WoW-inst.00401C52
  411. 00401C9E /$ 55 PUSH EBP
  412. 00401C9F |. 8BEC MOV EBP,ESP
  413. 00401CA1 |. 51 PUSH ECX
  414. 00401CA2 |. 8D4D FC LEA ECX,DWORD PTR SS:[EBP-4]
  415. 00401CA5 |. E8 7EF6FFFF CALL WoW-inst.00401328
  416. 00401CAA |. 84C0 TEST AL,AL
  417. 00401CAC |. 74 20 JE SHORT WoW-inst.00401CCE
  418. 00401CAE |. FF75 10 PUSH DWORD PTR SS:[EBP+10]
  419. 00401CB1 |. E8 ECFBFFFF CALL WoW-inst.004018A2
  420. 00401CB6 |. 84C0 TEST AL,AL
  421. 00401CB8 |. 75 14 JNZ SHORT WoW-inst.00401CCE
  422. 00401CBA |. 6A 10 PUSH 10 ; /Style = MB_OK|MB_ICONHAND|MB_APPLMODAL
  423. 00401CBC |. 68 FC024100 PUSH WoW-inst.004102FC ; |Title = "Installer"
  424. 00401CC1 |. 68 A8024100 PUSH WoW-inst.004102A8 ; |Text = "Sorry, the installer was unable to start up. You may be out of hard drive space."
  425. 00401CC6 |. 6A 00 PUSH 0 ; |hOwner = NULL
  426. 00401CC8 |. FF15 6C014100 CALL DWORD PTR DS:[<&USER32.MessageBoxA>>; \MessageBoxA
  427. 00401CCE |> 68 88130000 PUSH 1388 ; /Timeout = 5000. ms
  428. 00401CD3 |. FF15 74004100 CALL DWORD PTR DS:[<&KERNEL32.Sleep>] ; \Sleep
  429. 00401CD9 |. FF75 FC PUSH DWORD PTR SS:[EBP-4] ; /hObject
  430. 00401CDC |. FF15 14004100 CALL DWORD PTR DS:[<&KERNEL32.CloseHandl>; \CloseHandle
  431. 00401CE2 |. 33C0 XOR EAX,EAX
  432. 00401CE4 |. C9 LEAVE
  433. 00401CE5 \. C2 1000 RETN 10
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!