View Single Post
  #3  
Old 02-06-2009, 03:21 AM
Alkatraz Alkatraz is offline
Administrator
 
Join Date: Jan 2007
Posts: 72
Default

Information for AAO (v2.149 | A1371)


Credits uNrEaL and rover_turbo


Code:
; int __stdcall sub_402723(char *)
.text:00402723 sub_402723      proc near               ; CODE XREF: sub_4415C1+1FCp
.text:00402723                                         ; sub_4415C1+5EFp ...
.text:00402723
.text:00402723 var_8CC         = byte ptr -8CCh
.text:00402723 var_CC          = byte ptr -0CCh
.text:00402723 arg_0           = dword ptr  8
.text:00402723
.text:00402723                 push    ebp
.text:00402724                 lea     ebp, [esp-74h]
.text:00402728                 sub     esp, 8CCh
.text:0040272E                 push    esi
.text:0040272F                 push    edi
.text:00402730                 xor     esi, esi
.text:00402732                 push    esi
.text:00402733                 push    esi
.text:00402734                 mov     edi, ecx
.text:00402736                 call    sub_402550
.text:0040273B                 test    eax, eax
.text:0040273D                 jz      short loc_402796
.text:0040273F                 lea     ecx, [ebp+74h+var_CC] ; void *
.text:00402742                 call    sub_4023E9
.text:00402747                 push    esi
.text:00402748                 lea     ecx, [ebp+74h+var_CC]
.text:0040274B                 call    Md5Init // sub_004021C0
.text:00402750                 mov     esi, 800h
.text:00402755                 jmp     short loc_402764
.text:00402757 ; ---------------------------------------------------------------------------
.text:00402757
.text:00402757 loc_402757:                             ; CODE XREF: sub_402723+56j
.text:00402757                 push    eax
.text:00402758                 lea     eax, [ebp+74h+var_8CC]
.text:0040275E                 push    eax
.text:0040275F                 call    ScanFunction // sub_00402204
.text:00402764
.text:00402764 loc_402764:                             ; CODE XREF: sub_402723+32j
.text:00402764                 lea     eax, [ebp+74h+var_8CC]
.text:0040276A                 push    esi
.text:0040276B                 mov     ecx, edi
.text:0040276D                 push    eax
.text:0040276E                 call    sub_4025F3
.text:00402773                 cmp     eax, 1
.text:00402776                 lea     ecx, [ebp+74h+var_CC]
.text:00402779                 jge     short loc_402757
.text:0040277B                 call    sub_402291
.text:00402780                 lea     ecx, [ebp+74h+var_CC]
.text:00402783                 call    MD5Crypt // sub_004023BD
.text:00402788                 push    eax             ; char *
.text:00402789                 push    [ebp+74h+arg_0] ; char *
.text:0040278C                 call    _strcpy
.text:00402791                 pop     ecx
.text:00402792                 xor     eax, eax
.text:00402794                 pop     ecx
.text:00402795                 inc     eax
.text:00402796
.text:00402796 loc_402796:                             ; CODE XREF: sub_402723+1Aj
.text:00402796                 pop     edi
.text:00402797                 pop     esi
.text:00402798                 add     ebp, 74h
.text:0040279B                 leave
.text:0040279C                 retn    4
.text:0040279C sub_402723      endp
Also, to anyone who finds themselves messing with the above. You will find the ScanFunction and MD5Init being used in other routine's. All credit's goto uNrEaL, i don't want none for simply posting any of this.
Reply With Quote