XtrapVA.dll

005B21F8   56               PUSH ESI
005B21F9   57               PUSH EDI
005B21FA   B9 40000000      MOV ECX,0x40
005B21FF   33C0             XOR EAX,EAX
005B2201   8D7C24 11        LEA EDI,DWORD PTR SS:[ESP+0x11]
005B2205   C64424 10 00     MOV BYTE PTR SS:[ESP+0x10],0x0
005B220A   F3:AB            REP STOS DWORD PTR ES:[EDI]
005B220C   66:AB            STOS WORD PTR ES:[EDI]
005B220E   AA               STOS BYTE PTR ES:[EDI]
005B220F   A1 F4C2B500      MOV EAX,DWORD PTR DS:[0xB5C2F4]
005B2214   85C0             TEST EAX,EAX
005B2216   74 19            JE SHORT crossfir.005B2231
005B2218   A1 20C3B500      MOV EAX,DWORD PTR DS:[0xB5C320]
005B221D   5F               POP EDI
005B221E   5E               POP ESI
005B221F   5D               POP EBP
005B2220   C740 08 03200000 MOV DWORD PTR DS:[EAX+0x8],0x2003
005B2227   33C0             XOR EAX,EAX
005B2229   5B               POP EBX
005B222A   81C4 04010000    ADD ESP,0x104
005B2230   C3               RETN
005B2231   8B8C24 18010000  MOV ECX,DWORD PTR SS:[ESP+0x118]
005B2238   8B3D 94846C00    MOV EDI,DWORD PTR DS:[0x6C8494]                  ; MSVCR80.sprintf
005B223E   68 1CAC7300      PUSH crossfir.0073AC1C                           ; ASCII "XTrapVa.dll"
005B2243   51               PUSH ECX
005B2244   8D5424 18        LEA EDX,DWORD PTR SS:[ESP+0x18]
005B2248   68 B0AA7300      PUSH crossfir.0073AAB0                           ; ASCII "%s\%s"
005B224D   52               PUSH EDX
005B224E   FFD7             CALL EDI
005B2250   8B1D E4806C00    MOV EBX,DWORD PTR DS:[0x6C80E4]                  ; kernel32.LoadLibraryA
005B2256   83C4 10          ADD ESP,0x10
005B2259   8D4424 10        LEA EAX,DWORD PTR SS:[ESP+0x10]
005B225D   50               PUSH EAX
005B225E   FFD3             CALL EBX
005B2260   8BF0             MOV ESI,EAX
005B2262   85F6             TEST ESI,ESI
005B2264   75 50            JNZ SHORT crossfir.005B22B6
005B2266   FF15 70826C00    CALL DWORD PTR DS:[0x6C8270]                     ; kernel32.GetLastError
005B226C   8BE8             MOV EBP,EAX
005B226E   83FD 7E          CMP EBP,0x7E
005B2271   75 21            JNZ SHORT crossfir.005B2294
005B2273   68 1CAC7300      PUSH crossfir.0073AC1C                           ; ASCII "XTrapVa.dll"
005B2278   8D4C24 14        LEA ECX,DWORD PTR SS:[ESP+0x14]
005B227C   68 10AC7300      PUSH crossfir.0073AC10                           ; ASCII ".\XTrap\%s"
005B2281   51               PUSH ECX
005B2282   FFD7             CALL EDI
005B2284   83C4 0C          ADD ESP,0xC
005B2287   8D5424 10        LEA EDX,DWORD PTR SS:[ESP+0x10]
005B228B   52               PUSH EDX
005B228C   FFD3             CALL EBX
005B228E   8BF0             MOV ESI,EAX
005B2290   85F6             TEST ESI,ESI
005B2292   75 22            JNZ SHORT crossfir.005B22B6
005B2294   A1 20C3B500      MOV EAX,DWORD PTR DS:[0xB5C320]
005B2299   5F               POP EDI
005B229A   5E               POP ESI
005B229B   8968 04          MOV DWORD PTR DS:[EAX+0x4],EBP
005B229E   8B0D 20C3B500    MOV ECX,DWORD PTR DS:[0xB5C320]                  ; crossfir.0074AA60
005B22A4   5D               POP EBP
005B22A5   33C0             XOR EAX,EAX
005B22A7   C741 08 04200000 MOV DWORD PTR DS:[ECX+0x8],0x2004
005B22AE   5B               POP EBX
005B22AF   81C4 04010000    ADD ESP,0x104
005B22B5   C3               RETN
005B22B6   8D5424 10        LEA EDX,DWORD PTR SS:[ESP+0x10]
005B22BA   56               PUSH ESI
005B22BB   52               PUSH EDX
005B22BC   E8 EF060000      CALL crossfir.005B29B0
005B22C1   83C4 08          ADD ESP,0x8
005B22C4   8935 F4C2B500    MOV DWORD PTR DS:[0xB5C2F4],ESI
005B22CA   56               PUSH ESI
005B22CB   E8 80050000      CALL crossfir.005B2850
005B22D0   8BC8             MOV ECX,EAX
005B22D2   E8 49060000      CALL crossfir.005B2920
005B22D7   5F               POP EDI
005B22D8   5E               POP ESI
005B22D9   5D               POP EBP
005B22DA   B8 01000000      MOV EAX,0x1
005B22DF   5B               POP EBX
005B22E0   81C4 04010000    ADD ESP,0x104
005B22E6   C3               RETN