XtrapVA.dll
Hi guys i have just unpacked my crossfire.exe (ph) and i found this .
Could someone explain it to me? Thank-you in advance
Could someone explain it to me? Thank-you in advance
Code:
005B21F8 56 PUSH ESI 005B21F9 57 PUSH EDI 005B21FA B9 40000000 MOV ECX,0x40 005B21FF 33C0 XOR EAX,EAX 005B2201 8D7C24 11 LEA EDI,DWORD PTR SS:[ESP+0x11] 005B2205 C64424 10 00 MOV BYTE PTR SS:[ESP+0x10],0x0 005B220A F3:AB REP STOS DWORD PTR ES:[EDI] 005B220C 66:AB STOS WORD PTR ES:[EDI] 005B220E AA STOS BYTE PTR ES:[EDI] 005B220F A1 F4C2B500 MOV EAX,DWORD PTR DS:[0xB5C2F4] 005B2214 85C0 TEST EAX,EAX 005B2216 74 19 JE SHORT crossfir.005B2231 005B2218 A1 20C3B500 MOV EAX,DWORD PTR DS:[0xB5C320] 005B221D 5F POP EDI 005B221E 5E POP ESI 005B221F 5D POP EBP 005B2220 C740 08 03200000 MOV DWORD PTR DS:[EAX+0x8],0x2003 005B2227 33C0 XOR EAX,EAX 005B2229 5B POP EBX 005B222A 81C4 04010000 ADD ESP,0x104 005B2230 C3 RETN 005B2231 8B8C24 18010000 MOV ECX,DWORD PTR SS:[ESP+0x118] 005B2238 8B3D 94846C00 MOV EDI,DWORD PTR DS:[0x6C8494] ; MSVCR80.sprintf 005B223E 68 1CAC7300 PUSH crossfir.0073AC1C ; ASCII "XTrapVa.dll" 005B2243 51 PUSH ECX 005B2244 8D5424 18 LEA EDX,DWORD PTR SS:[ESP+0x18] 005B2248 68 B0AA7300 PUSH crossfir.0073AAB0 ; ASCII "%s\%s" 005B224D 52 PUSH EDX 005B224E FFD7 CALL EDI 005B2250 8B1D E4806C00 MOV EBX,DWORD PTR DS:[0x6C80E4] ; kernel32.LoadLibraryA 005B2256 83C4 10 ADD ESP,0x10 005B2259 8D4424 10 LEA EAX,DWORD PTR SS:[ESP+0x10] 005B225D 50 PUSH EAX 005B225E FFD3 CALL EBX 005B2260 8BF0 MOV ESI,EAX 005B2262 85F6 TEST ESI,ESI 005B2264 75 50 JNZ SHORT crossfir.005B22B6 005B2266 FF15 70826C00 CALL DWORD PTR DS:[0x6C8270] ; kernel32.GetLastError 005B226C 8BE8 MOV EBP,EAX 005B226E 83FD 7E CMP EBP,0x7E 005B2271 75 21 JNZ SHORT crossfir.005B2294 005B2273 68 1CAC7300 PUSH crossfir.0073AC1C ; ASCII "XTrapVa.dll" 005B2278 8D4C24 14 LEA ECX,DWORD PTR SS:[ESP+0x14] 005B227C 68 10AC7300 PUSH crossfir.0073AC10 ; ASCII ".\XTrap\%s" 005B2281 51 PUSH ECX 005B2282 FFD7 CALL EDI 005B2284 83C4 0C ADD ESP,0xC 005B2287 8D5424 10 LEA EDX,DWORD PTR SS:[ESP+0x10] 005B228B 52 PUSH EDX 005B228C FFD3 CALL EBX 005B228E 8BF0 MOV ESI,EAX 005B2290 85F6 TEST ESI,ESI 005B2292 75 22 JNZ SHORT crossfir.005B22B6 005B2294 A1 20C3B500 MOV EAX,DWORD PTR DS:[0xB5C320] 005B2299 5F POP EDI 005B229A 5E POP ESI 005B229B 8968 04 MOV DWORD PTR DS:[EAX+0x4],EBP 005B229E 8B0D 20C3B500 MOV ECX,DWORD PTR DS:[0xB5C320] ; crossfir.0074AA60 005B22A4 5D POP EBP 005B22A5 33C0 XOR EAX,EAX 005B22A7 C741 08 04200000 MOV DWORD PTR DS:[ECX+0x8],0x2004 005B22AE 5B POP EBX 005B22AF 81C4 04010000 ADD ESP,0x104 005B22B5 C3 RETN 005B22B6 8D5424 10 LEA EDX,DWORD PTR SS:[ESP+0x10] 005B22BA 56 PUSH ESI 005B22BB 52 PUSH EDX 005B22BC E8 EF060000 CALL crossfir.005B29B0 005B22C1 83C4 08 ADD ESP,0x8 005B22C4 8935 F4C2B500 MOV DWORD PTR DS:[0xB5C2F4],ESI 005B22CA 56 PUSH ESI 005B22CB E8 80050000 CALL crossfir.005B2850 005B22D0 8BC8 MOV ECX,EAX 005B22D2 E8 49060000 CALL crossfir.005B2920 005B22D7 5F POP EDI 005B22D8 5E POP ESI 005B22D9 5D POP EBP 005B22DA B8 01000000 MOV EAX,0x1 005B22DF 5B POP EBX 005B22E0 81C4 04010000 ADD ESP,0x104 005B22E6 C3 RETN
