home *** CD-ROM | disk | FTP | other *** search
- * Referenced by a CALL at Address:
- |:004856DA
- |
- :00485634 55 push ebp
- :00485635 8BEC mov ebp, esp
- :00485637 83EC24 sub esp, 00000024
- :0048563A 8D45E8 lea eax, dword ptr [ebp-18]
- :0048563D 50 push eax
- :0048563E 8D4DE4 lea ecx, dword ptr [ebp-1C]
- :00485641 51 push ecx
- :00485642 8D55E0 lea edx, dword ptr [ebp-20]
- :00485645 52 push edx
- :00485646 8D45EC lea eax, dword ptr [ebp-14]
- :00485649 50 push eax
- :0048564A 68A0B38700 push 0087B3A0
-
- * Reference To: KERNEL32.GetDiskFreeSpaceA, Ord:00DBh
- |
- :0048564F FF15F8005200 Call dword ptr [005200F8]
- :00485655 85C0 test eax, eax << check free disk space on cd-rom?
- :00485657 7504 jne 0048565D << got to return a non-zero
- :00485659 33C0 xor eax, eax
- :0048565B EB76 jmp 004856D3
-
- * Referenced by a (U)nconditional or (C)onditional Jump at Address:
- |:00485657(C)
- |
- :0048565D 837DE400 cmp dword ptr [ebp-1C], 00000000
- :00485661 7404 je 00485667
- :00485663 33C0 xor eax, eax
- :00485665 EB6C jmp 004856D3
-
- * Referenced by a (U)nconditional or (C)onditional Jump at Address:
- |:00485661(C)
- |
-
- * Possible Ref to Menu: APPMENU, Item: "About.. F1"
- |
- :00485667 6A01 push 00000001
-
- * Reference To: KERNEL32.SetErrorMode, Ord:0213h
- |
- :00485669 FF15F4005200 Call dword ptr [005200F4]
- :0048566F 8945DC mov dword ptr [ebp-24], eax
- :00485672 6800010000 push 00000100
- :00485677 6898A18600 push 0086A198
- :0048567C 8D4DFC lea ecx, dword ptr [ebp-04]
- :0048567F 51 push ecx
- :00485680 8D55F8 lea edx, dword ptr [ebp-08]
- :00485683 52 push edx
- :00485684 8D45F0 lea eax, dword ptr [ebp-10]
- :00485687 50 push eax
- :00485688 6800010000 push 00000100
- :0048568D 6898A28600 push 0086A298
- :00485692 68A0B38700 push 0087B3A0
-
- * Reference To: KERNEL32.GetVolumeInformationA, Ord:014Fh
- |
- :00485697 FF15F0005200 Call dword ptr [005200F0]
- :0048569D 8945F4 mov dword ptr [ebp-0C], eax
- :004856A0 8B4DDC mov ecx, dword ptr [ebp-24]
- :004856A3 51 push ecx
-
- * Reference To: KERNEL32.SetErrorMode, Ord:0213h
- |
- :004856A4 FF15F4005200 Call dword ptr [005200F4]
- :004856AA 837DF400 cmp dword ptr [ebp-0C], 00000000
- :004856AE 7504 jne 004856B4
- :004856B0 33C0 xor eax, eax
- :004856B2 EB1F jmp 004856D3
-
- * Referenced by a (U)nconditional or (C)onditional Jump at Address:
- |:004856AE(C)
- |
-
- * Possible StringData Ref from Data Obj ->"FORSAKEN"
- |
- :004856B4 68704E5B00 push 005B4E70
- :004856B9 6898A28600 push 0086A298
- :004856BE E84D960800 call 0050ED10 << check the name of the CD
- :004856C3 83C408 add esp, 00000008
- :004856C6 85C0 test eax, eax
- :004856C8 7404 je 004856CE
- :004856CA 33C0 xor eax, eax
- :004856CC EB05 jmp 004856D3
-
- * Referenced by a (U)nconditional or (C)onditional Jump at Address:
- |:004856C8(C)
- |
-
- * Possible Ref to Menu: APPMENU, Item: "About.. F1"
- |
- :004856CE B801000000 mov eax, 00000001 << end up here for a good CD check
- << (or fake it after the call)
- * Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
- |:0048565B(U), :00485665(U), :004856B2(U), :004856CC(U)
- |
- :004856D3 8BE5 mov esp, ebp
- :004856D5 5D pop ebp
- :004856D6 C3 ret
-