-
-
求教此程序如何下断点1
-
发表于: 2006-4-14 08:46 4061
-
10001000 56 push esi
10001001 57 push edi
10001002 FF15 08500010 call dword ptr ds:[<&KERNEL32.GetCommandLineA>] ; kernel32.GetCommandLineA
10001008 8BF0 mov esi,eax
1000100A 8A06 mov al,byte ptr ds:[esi]
1000100C 46 inc esi
1000100D 3C 22 cmp al,22
1000100F 75 3E jnz short 驾校无纸.1000104F
10001011 E8 DA000000 call 驾校无纸.100010F0
10001016 85C0 test eax,eax
10001018 6A 22 push 22
1000101A 56 push esi
1000101B 74 07 je short 驾校无纸.10001024
1000101D E8 7E070000 call 驾校无纸.100017A0
10001022 EB 05 jmp short 驾校无纸.10001029
10001024 E8 B7060000 call 驾校无纸.100016E0
10001029 8BD0 mov edx,eax
1000102B 83C4 08 add esp,8
1000102E 85D2 test edx,edx
10001030 74 44 je short 驾校无纸.10001076
10001032 8BFA mov edi,edx
10001034 83C9 FF or ecx,FFFFFFFF
10001037 33C0 xor eax,eax
10001039 F2:AE repne scas byte ptr es:[edi]
1000103B F7D1 not ecx
1000103D 49 dec ecx
1000103E 83F9 02 cmp ecx,2
10001041 77 07 ja short 驾校无纸.1000104A
10001043 BE B0840010 mov esi,驾校无纸.100084B0
10001048 EB 2C jmp short 驾校无纸.10001076
1000104A 8D72 02 lea esi,dword ptr ds:[edx+2]
1000104D EB 27 jmp short 驾校无纸.10001076
1000104F E8 9C000000 call 驾校无纸.100010F0
10001054 85C0 test eax,eax
10001056 6A 20 push 20
10001058 56 push esi
10001059 74 07 je short 驾校无纸.10001062
1000105B E8 40070000 call 驾校无纸.100017A0
10001060 EB 05 jmp short 驾校无纸.10001067
10001062 E8 79060000 call 驾校无纸.100016E0
10001067 83C4 08 add esp,8
1000106A BE B4840010 mov esi,驾校无纸.100084B4
1000106F 85C0 test eax,eax
10001071 74 03 je short 驾校无纸.10001076
10001073 8D70 01 lea esi,dword ptr ds:[eax+1]
10001076 8B4C24 18 mov ecx,dword ptr ss:[esp+18]
1000107A 8B5424 10 mov edx,dword ptr ss:[esp+10]
1000107E 8B4424 0C mov eax,dword ptr ss:[esp+C]
10001082 6A 00 push 0
10001084 68 E8030000 push 3E8
10001089 51 push ecx
1000108A 56 push esi
1000108B 52 push edx
1000108C 50 push eax
1000108D E8 2E060000 call <jmp.&PBVM80.#137>
10001092 5F pop edi
10001093 5E pop esi
10001094 C2 1000 retn 10
10001097 90 nop
10001098 90 nop
10001099 90 nop
1000109A 90 nop
1000109B 90 nop
1000109C 90 nop
1000109D 90 nop
1000109E 90 nop
1000109F 90 nop
100010A0 E9 0B000000 jmp 驾校无纸.100010B0
100010A5 90 nop
100010A6 90 nop
100010A7 90 nop
100010A8 90 nop
100010A9 90 nop
100010AA 90 nop
100010AB 90 nop
100010AC 90 nop
100010AD 90 nop
100010AE 90 nop
100010AF 90 nop
100010B0 E8 0B000000 call 驾校无纸.100010C0
100010B5 A3 B8840010 mov dword ptr ds:[100084B8],eax
100010BA C3 retn
100010BB 90 nop
100010BC 90 nop
100010BD 90 nop
100010BE 90 nop
100010BF 90 nop
100010C0 83EC 14 sub esp,14
100010C3 8D4424 00 lea eax,dword ptr ss:[esp]
100010C7 50 push eax
100010C8 6A 00 push 0
100010CA FF15 0C500010 call dword ptr ds:[<&KERNEL32.GetCPInfo>] ; kernel32.GetCPInfo
100010D0 8B5424 00 mov edx,dword ptr ss:[esp]
100010D4 B9 01000000 mov ecx,1
100010D9 3BCA cmp ecx,edx
100010DB 1BC0 sbb eax,eax
100010DD F7D8 neg eax
100010DF 83C4 14 add esp,14
100010E2 C3 retn
100010E3 90 nop
100010E4 90 nop
100010E5 90 nop
100010E6 90 nop
100010E7 90 nop
100010E8 90 nop
100010E9 90 nop
100010EA 90 nop
100010EB 90 nop
100010EC 90 nop
100010ED 90 nop
100010EE 90 nop
100010EF 90 nop
100010F0 A1 B8840010 mov eax,dword ptr ds:[100084B8]
100010F5 C3 retn
100010F6 90 nop
100010F7 90 nop
100010F8 90 nop
100010F9 90 nop
100010FA 90 nop
100010FB 90 nop
100010FC 90 nop
100010FD 90 nop
100010FE 90 nop
100010FF 90 nop
10001100 51 push ecx
10001101 8B4424 0C mov eax,dword ptr ss:[esp+C]
10001105 33D2 xor edx,edx
10001107 53 push ebx
10001108 55 push ebp
10001109 8AD4 mov dl,ah
1000110B 56 push esi
1000110C 8BC8 mov ecx,eax
1000110E 57 push edi
1000110F 8BEA mov ebp,edx
10001111 33FF xor edi,edi
10001113 81E1 FF000000 and ecx,0FF
10001119 85ED test ebp,ebp
1000111B 894C24 10 mov dword ptr ss:[esp+10],ecx
1000111F 75 20 jnz short 驾校无纸.10001141
10001121 85C9 test ecx,ecx
10001123 75 1C jnz short 驾校无纸.10001141
10001125 8B5424 18 mov edx,dword ptr ss:[esp+18]
10001129 83C9 FF or ecx,FFFFFFFF
1000112C 8BFA mov edi,edx
1000112E 33C0 xor eax,eax
10001130 F2:AE repne scas byte ptr es:[edi]
10001132 F7D1 not ecx
10001134 49 dec ecx
10001135 8BC1 mov eax,ecx
10001137 03C2 add eax,edx
10001139 5F pop edi
1000113A 5E pop esi
1000113B 5D pop ebp
1000113C 5B pop ebx
1000113D 59 pop ecx
1000113E C2 0800 retn 8
10001141 8B7424 18 mov esi,dword ptr ss:[esp+18]
10001145 33DB xor ebx,ebx
10001147 803E 00 cmp byte ptr ds:[esi],0
1000114A 74 51 je short 驾校无纸.1000119D
1000114C EB 04 jmp short 驾校无纸.10001152
1000114E 8B4C24 10 mov ecx,dword ptr ss:[esp+10]
10001152 85FF test edi,edi
10001154 74 1D je short 驾校无纸.10001173
10001156 33FF xor edi,edi
10001158 85ED test ebp,ebp
1000115A 74 39 je short 驾校无纸.10001195
1000115C 8D46 FF lea eax,dword ptr ds:[esi-1]
1000115F 33D2 xor edx,edx
10001161 8A10 mov dl,byte ptr ds:[eax]
10001163 3BD5 cmp edx,ebp
10001165 75 2E jnz short 驾校无纸.10001195
10001167 33D2 xor edx,edx
10001169 8A16 mov dl,byte ptr ds:[esi]
1000116B 3BD1 cmp edx,ecx
1000116D 75 26 jnz short 驾校无纸.10001195
1000116F 8BD8 mov ebx,eax
10001171 EB 22 jmp short 驾校无纸.10001195
10001173 8A06 mov al,byte ptr ds:[esi]
10001175 50 push eax
10001176 FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
1000117C 85C0 test eax,eax
1000117E 74 07 je short 驾校无纸.10001187
10001180 BF 01000000 mov edi,1
10001185 EB 0E jmp short 驾校无纸.10001195
10001187 8B4424 1C mov eax,dword ptr ss:[esp+1C]
1000118B 33C9 xor ecx,ecx
1000118D 8A0E mov cl,byte ptr ds:[esi]
1000118F 3BC8 cmp ecx,eax
10001191 75 02 jnz short 驾校无纸.10001195
10001193 8BDE mov ebx,esi
10001195 8A46 01 mov al,byte ptr ds:[esi+1]
10001198 46 inc esi
10001199 84C0 test al,al
1000119B ^ 75 B1 jnz short 驾校无纸.1000114E
1000119D 5F pop edi
1000119E 5E pop esi
1000119F 8BC3 mov eax,ebx
100011A1 5D pop ebp
100011A2 5B pop ebx
100011A3 59 pop ecx
100011A4 C2 0800 retn 8
100011A7 90 nop
100011A8 90 nop
100011A9 90 nop
100011AA 90 nop
100011AB 90 nop
100011AC 90 nop
100011AD 90 nop
100011AE 90 nop
100011AF 90 nop
100011B0 51 push ecx
100011B1 8B4424 0C mov eax,dword ptr ss:[esp+C]
100011B5 53 push ebx
100011B6 33C9 xor ecx,ecx
100011B8 55 push ebp
100011B9 56 push esi
100011BA 8ACC mov cl,ah
100011BC 57 push edi
100011BD 8BD8 mov ebx,eax
100011BF 33FF xor edi,edi
100011C1 8BE9 mov ebp,ecx
100011C3 81E3 FF000000 and ebx,0FF
100011C9 3BEF cmp ebp,edi
100011CB 75 20 jnz short 驾校无纸.100011ED
100011CD 3BDF cmp ebx,edi
100011CF 75 1C jnz short 驾校无纸.100011ED
100011D1 8B5424 18 mov edx,dword ptr ss:[esp+18]
100011D5 83C9 FF or ecx,FFFFFFFF
100011D8 8BFA mov edi,edx
100011DA 33C0 xor eax,eax
100011DC F2:AE repne scas byte ptr es:[edi]
100011DE F7D1 not ecx
100011E0 49 dec ecx
100011E1 8BC1 mov eax,ecx
100011E3 03C2 add eax,edx
100011E5 5F pop edi
100011E6 5E pop esi
100011E7 5D pop ebp
100011E8 5B pop ebx
100011E9 59 pop ecx
100011EA C2 0800 retn 8
100011ED 8B7424 18 mov esi,dword ptr ss:[esp+18]
100011F1 897C24 10 mov dword ptr ss:[esp+10],edi
100011F5 803E 00 cmp byte ptr ds:[esi],0
100011F8 74 56 je short 驾校无纸.10001250
100011FA 85FF test edi,edi
100011FC 74 19 je short 驾校无纸.10001217
100011FE 33FF xor edi,edi
10001200 85ED test ebp,ebp
10001202 74 33 je short 驾校无纸.10001237
10001204 33D2 xor edx,edx
10001206 8A56 FF mov dl,byte ptr ds:[esi-1]
10001209 3BD5 cmp edx,ebp
1000120B 75 2A jnz short 驾校无纸.10001237
1000120D 33C0 xor eax,eax
1000120F 8A06 mov al,byte ptr ds:[esi]
10001211 3BC3 cmp eax,ebx
10001213 74 36 je short 驾校无纸.1000124B
10001215 EB 20 jmp short 驾校无纸.10001237
10001217 8A0E mov cl,byte ptr ds:[esi]
10001219 51 push ecx
1000121A FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
10001220 85C0 test eax,eax
10001222 74 07 je short 驾校无纸.1000122B
10001224 BF 01000000 mov edi,1
10001229 EB 0C jmp short 驾校无纸.10001237
1000122B 8B4424 1C mov eax,dword ptr ss:[esp+1C]
1000122F 33D2 xor edx,edx
10001231 8A16 mov dl,byte ptr ds:[esi]
10001233 3BD0 cmp edx,eax
10001235 74 15 je short 驾校无纸.1000124C
10001237 8A46 01 mov al,byte ptr ds:[esi+1]
1000123A 46 inc esi
1000123B 84C0 test al,al
1000123D ^ 75 BB jnz short 驾校无纸.100011FA
1000123F 8B4424 10 mov eax,dword ptr ss:[esp+10]
10001243 5F pop edi
10001244 5E pop esi
10001245 5D pop ebp
10001246 5B pop ebx
10001247 59 pop ecx
10001248 C2 0800 retn 8
1000124B 4E dec esi
1000124C 897424 10 mov dword ptr ss:[esp+10],esi
10001250 8B4424 10 mov eax,dword ptr ss:[esp+10]
10001254 5F pop edi
10001255 5E pop esi
10001256 5D pop ebp
10001257 5B pop ebx
10001258 59 pop ecx
10001259 C2 0800 retn 8
1000125C 90 nop
1000125D 90 nop
1000125E 90 nop
1000125F 90 nop
10001260 53 push ebx
10001261 55 push ebp
10001262 56 push esi
10001263 8B7424 10 mov esi,dword ptr ss:[esp+10]
10001267 33DB xor ebx,ebx
10001269 33ED xor ebp,ebp
1000126B 8A06 mov al,byte ptr ds:[esi]
1000126D 57 push edi
1000126E 84C0 test al,al
10001270 74 5F je short 驾校无纸.100012D1
10001272 8B7C24 14 mov edi,dword ptr ss:[esp+14]
10001276 85DB test ebx,ebx
10001278 74 0A je short 驾校无纸.10001284
1000127A 33C0 xor eax,eax
1000127C 33DB xor ebx,ebx
1000127E 8A06 mov al,byte ptr ds:[esi]
10001280 0BF8 or edi,eax
10001282 EB 24 jmp short 驾校无纸.100012A8
10001284 8A0E mov cl,byte ptr ds:[esi]
10001286 51 push ecx
10001287 FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
1000128D 85C0 test eax,eax
1000128F 74 0F je short 驾校无纸.100012A0
10001291 33D2 xor edx,edx
10001293 BB 01000000 mov ebx,1
10001298 8A36 mov dh,byte ptr ds:[esi]
1000129A 8BEE mov ebp,esi
1000129C 8BFA mov edi,edx
1000129E EB 17 jmp short 驾校无纸.100012B7
100012A0 33C0 xor eax,eax
100012A2 8BEE mov ebp,esi
100012A4 8A06 mov al,byte ptr ds:[esi]
100012A6 8BF8 mov edi,eax
100012A8 8B4C24 18 mov ecx,dword ptr ss:[esp+18]
100012AC 57 push edi
100012AD 51 push ecx
100012AE E8 FDFEFFFF call 驾校无纸.100011B0
100012B3 85C0 test eax,eax
100012B5 75 11 jnz short 驾校无纸.100012C8
100012B7 8A46 01 mov al,byte ptr ds:[esi+1]
100012BA 46 inc esi
100012BB 84C0 test al,al
100012BD ^ 75 B7 jnz short 驾校无纸.10001276
100012BF 33C0 xor eax,eax
100012C1 5F pop edi
100012C2 5E pop esi
100012C3 5D pop ebp
100012C4 5B pop ebx
100012C5 C2 0800 retn 8
100012C8 8BC5 mov eax,ebp
100012CA 5F pop edi
100012CB 5E pop esi
100012CC 5D pop ebp
100012CD 5B pop ebx
100012CE C2 0800 retn 8
100012D1 5F pop edi
100012D2 5E pop esi
100012D3 5D pop ebp
100012D4 33C0 xor eax,eax
100012D6 5B pop ebx
100012D7 C2 0800 retn 8
100012DA 90 nop
100012DB 90 nop
100012DC 90 nop
100012DD 90 nop
100012DE 90 nop
100012DF 90 nop
100012E0 83EC 08 sub esp,8
100012E3 53 push ebx
100012E4 55 push ebp
100012E5 8B6C24 14 mov ebp,dword ptr ss:[esp+14]
100012E9 56 push esi
100012EA 57 push edi
100012EB C74424 10 00000>mov dword ptr ss:[esp+10],0
100012F3 8A45 00 mov al,byte ptr ss:[ebp]
100012F6 896C24 1C mov dword ptr ss:[esp+1C],ebp
100012FA 84C0 test al,al
100012FC 0F84 C3000000 je 驾校无纸.100013C5
10001302 8B7424 20 mov esi,dword ptr ss:[esp+20]
10001306 83C9 FF or ecx,FFFFFFFF
10001309 8BFE mov edi,esi
1000130B 33C0 xor eax,eax
1000130D F2:AE repne scas byte ptr es:[edi]
1000130F F7D1 not ecx
10001311 49 dec ecx
10001312 8BFD mov edi,ebp
10001314 8BD1 mov edx,ecx
10001316 83C9 FF or ecx,FFFFFFFF
10001319 F2:AE repne scas byte ptr es:[edi]
1000131B F7D1 not ecx
1000131D 49 dec ecx
1000131E 3BD1 cmp edx,ecx
10001320 0F87 9F000000 ja 驾校无纸.100013C5
10001326 8B4424 10 mov eax,dword ptr ss:[esp+10]
1000132A 85C0 test eax,eax
1000132C 74 0A je short 驾校无纸.10001338
1000132E C74424 10 00000>mov dword ptr ss:[esp+10],0
10001336 EB 65 jmp short 驾校无纸.1000139D
10001338 8A45 00 mov al,byte ptr ss:[ebp]
1000133B 50 push eax
1000133C FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
10001342 85C0 test eax,eax
10001344 74 08 je short 驾校无纸.1000134E
10001346 C74424 10 01000>mov dword ptr ss:[esp+10],1
1000134E 8A06 mov al,byte ptr ds:[esi]
10001350 8BD6 mov edx,esi
10001352 84C0 test al,al
10001354 74 42 je short 驾校无纸.10001398
10001356 2BEE sub ebp,esi
10001358 8A1C2A mov bl,byte ptr ds:[edx+ebp]
1000135B 8D342A lea esi,dword ptr ds:[edx+ebp]
1000135E 84DB test bl,bl
10001360 74 32 je short 驾校无纸.10001394
10001362 8BFA mov edi,edx
10001364 83C9 FF or ecx,FFFFFFFF
10001367 33C0 xor eax,eax
10001369 F2:AE repne scas byte ptr es:[edi]
1000136B F7D1 not ecx
1000136D 49 dec ecx
1000136E 8BFE mov edi,esi
10001370 8BC1 mov eax,ecx
10001372 83C9 FF or ecx,FFFFFFFF
10001375 894424 14 mov dword ptr ss:[esp+14],eax
10001379 33C0 xor eax,eax
1000137B F2:AE repne scas byte ptr es:[edi]
1000137D 8B4424 14 mov eax,dword ptr ss:[esp+14]
10001381 F7D1 not ecx
10001383 49 dec ecx
10001384 3BC8 cmp ecx,eax
10001386 72 0C jb short 驾校无纸.10001394
10001388 3A1A cmp bl,byte ptr ds:[edx]
1000138A 75 08 jnz short 驾校无纸.10001394
1000138C 8A42 01 mov al,byte ptr ds:[edx+1]
1000138F 42 inc edx
10001390 84C0 test al,al
10001392 ^ 75 C4 jnz short 驾校无纸.10001358
10001394 8B6C24 1C mov ebp,dword ptr ss:[esp+1C]
10001398 803A 00 cmp byte ptr ds:[edx],0
1000139B 74 1C je short 驾校无纸.100013B9
1000139D 8A45 01 mov al,byte ptr ss:[ebp+1]
100013A0 45 inc ebp
100013A1 84C0 test al,al
100013A3 896C24 1C mov dword ptr ss:[esp+1C],ebp
100013A7 ^ 0F85 55FFFFFF jnz 驾校无纸.10001302
100013AD 33C0 xor eax,eax
100013AF 5F pop edi
100013B0 5E pop esi
100013B1 5D pop ebp
100013B2 5B pop ebx
100013B3 83C4 08 add esp,8
100013B6 C2 0800 retn 8
100013B9 8BC5 mov eax,ebp
100013BB 5F pop edi
100013BC 5E pop esi
100013BD 5D pop ebp
100013BE 5B pop ebx
100013BF 83C4 08 add esp,8
100013C2 C2 0800 retn 8
100013C5 5F pop edi
100013C6 5E pop esi
100013C7 5D pop ebp
100013C8 33C0 xor eax,eax
100013CA 5B pop ebx
100013CB 83C4 08 add esp,8
100013CE C2 0800 retn 8
100013D1 90 nop
100013D2 90 nop
100013D3 90 nop
100013D4 90 nop
100013D5 90 nop
100013D6 90 nop
100013D7 90 nop
100013D8 90 nop
100013D9 90 nop
100013DA 90 nop
100013DB 90 nop
100013DC 90 nop
100013DD 90 nop
100013DE 90 nop
100013DF 90 nop
100013E0 53 push ebx
100013E1 55 push ebp
100013E2 56 push esi
100013E3 8B7424 10 mov esi,dword ptr ss:[esp+10]
100013E7 57 push edi
100013E8 33ED xor ebp,ebp
100013EA 8A06 mov al,byte ptr ds:[esi]
100013EC 33FF xor edi,edi
100013EE 84C0 test al,al
100013F0 74 76 je short 驾校无纸.10001468
100013F2 8A5C24 1C mov bl,byte ptr ss:[esp+1C]
100013F6 3B6C24 18 cmp ebp,dword ptr ss:[esp+18]
100013FA 7D 6C jge short 驾校无纸.10001468
100013FC 85FF test edi,edi
100013FE 74 04 je short 驾校无纸.10001404
10001400 33FF xor edi,edi
10001402 EB 5B jmp short 驾校无纸.1000145F
10001404 8A06 mov al,byte ptr ds:[esi]
10001406 50 push eax
10001407 FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
1000140D 85C0 test eax,eax
1000140F 74 07 je short 驾校无纸.10001418
10001411 BF 01000000 mov edi,1
10001416 EB 47 jmp short 驾校无纸.1000145F
10001418 F6C3 01 test bl,1
1000141B 74 1D je short 驾校无纸.1000143A
1000141D 33C9 xor ecx,ecx
1000141F 8A0E mov cl,byte ptr ds:[esi]
10001421 51 push ecx
10001422 E8 59050000 call 驾校无纸.10001980
10001427 83C4 04 add esp,4
1000142A 85C0 test eax,eax
1000142C 74 0C je short 驾校无纸.1000143A
1000142E 33D2 xor edx,edx
10001430 8A16 mov dl,byte ptr ds:[esi]
10001432 52 push edx
10001433 E8 78050000 call 驾校无纸.100019B0
10001438 EB 20 jmp short 驾校无纸.1000145A
1000143A F6C3 02 test bl,2
1000143D 74 20 je short 驾校无纸.1000145F
1000143F 33C0 xor eax,eax
10001441 8A06 mov al,byte ptr ds:[esi]
10001443 50 push eax
10001444 E8 07050000 call 驾校无纸.10001950
10001449 83C4 04 add esp,4
1000144C 85C0 test eax,eax
1000144E 74 0F je short 驾校无纸.1000145F
10001450 33C9 xor ecx,ecx
10001452 8A0E mov cl,byte ptr ds:[esi]
10001454 51 push ecx
10001455 E8 F6030000 call 驾校无纸.10001850
1000145A 83C4 04 add esp,4
1000145D 8806 mov byte ptr ds:[esi],al
1000145F 8A46 01 mov al,byte ptr ds:[esi+1]
10001462 46 inc esi
10001463 45 inc ebp
10001464 84C0 test al,al
10001466 ^ 75 8E jnz short 驾校无纸.100013F6
10001468 5F pop edi
10001469 8BC5 mov eax,ebp
1000146B 5E pop esi
1000146C 5D pop ebp
1000146D 5B pop ebx
1000146E C2 0C00 retn 0C
10001471 90 nop
10001472 90 nop
10001473 90 nop
10001474 90 nop
10001475 90 nop
10001476 90 nop
10001477 90 nop
10001478 90 nop
10001479 90 nop
1000147A 90 nop
1000147B 90 nop
1000147C 90 nop
1000147D 90 nop
1000147E 90 nop
1000147F 90 nop
10001480 8B4424 08 mov eax,dword ptr ss:[esp+8]
10001484 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
10001488 6A 02 push 2
1000148A 50 push eax
1000148B 51 push ecx
1000148C E8 4FFFFFFF call 驾校无纸.100013E0
10001491 C2 0800 retn 8
10001494 90 nop
10001495 90 nop
10001496 90 nop
10001497 90 nop
10001498 90 nop
10001499 90 nop
1000149A 90 nop
1000149B 90 nop
1000149C 90 nop
1000149D 90 nop
1000149E 90 nop
1000149F 90 nop
100014A0 8B4424 08 mov eax,dword ptr ss:[esp+8]
100014A4 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
100014A8 6A 01 push 1
100014AA 50 push eax
100014AB 51 push ecx
100014AC E8 2FFFFFFF call 驾校无纸.100013E0
100014B1 C2 0800 retn 8
100014B4 90 nop
100014B5 90 nop
100014B6 90 nop
100014B7 90 nop
100014B8 90 nop
100014B9 90 nop
100014BA 90 nop
100014BB 90 nop
100014BC 90 nop
100014BD 90 nop
100014BE 90 nop
100014BF 90 nop
100014C0 56 push esi
100014C1 8B7424 08 mov esi,dword ptr ss:[esp+8]
100014C5 57 push edi
100014C6 8BFE mov edi,esi
100014C8 83C9 FF or ecx,FFFFFFFF
100014CB 33C0 xor eax,eax
100014CD F2:AE repne scas byte ptr es:[edi]
100014CF F7D1 not ecx
100014D1 49 dec ecx
100014D2 6A 02 push 2
100014D4 51 push ecx
100014D5 56 push esi
100014D6 E8 05FFFFFF call 驾校无纸.100013E0
100014DB 8BC6 mov eax,esi
100014DD 5F pop edi
100014DE 5E pop esi
100014DF C2 0400 retn 4
100014E2 90 nop
100014E3 90 nop
100014E4 90 nop
100014E5 90 nop
100014E6 90 nop
100014E7 90 nop
100014E8 90 nop
100014E9 90 nop
100014EA 90 nop
100014EB 90 nop
100014EC 90 nop
100014ED 90 nop
100014EE 90 nop
100014EF 90 nop
100014F0 56 push esi
100014F1 8B7424 08 mov esi,dword ptr ss:[esp+8]
100014F5 57 push edi
100014F6 8BFE mov edi,esi
100014F8 83C9 FF or ecx,FFFFFFFF
100014FB 33C0 xor eax,eax
100014FD F2:AE repne scas byte ptr es:[edi]
100014FF F7D1 not ecx
10001501 49 dec ecx
10001502 6A 01 push 1
10001504 51 push ecx
10001505 56 push esi
10001506 E8 D5FEFFFF call 驾校无纸.100013E0
1000150B 8BC6 mov eax,esi
1000150D 5F pop edi
1000150E 5E pop esi
1000150F C2 0400 retn 4
10001512 90 nop
10001513 90 nop
10001514 90 nop
10001515 90 nop
10001516 90 nop
10001517 90 nop
10001518 90 nop
10001519 90 nop
1000151A 90 nop
1000151B 90 nop
1000151C 90 nop
1000151D 90 nop
1000151E 90 nop
1000151F 90 nop
10001520 53 push ebx
10001521 55 push ebp
10001522 56 push esi
10001523 8B7424 10 mov esi,dword ptr ss:[esp+10]
10001527 57 push edi
10001528 83C8 FF or eax,FFFFFFFF
1000152B 8A0E mov cl,byte ptr ds:[esi]
1000152D 33FF xor edi,edi
1000152F 84C9 test cl,cl
10001531 74 4B je short 驾校无纸.1000157E
10001533 8B5C24 18 mov ebx,dword ptr ss:[esp+18]
10001537 8B2D 10500010 mov ebp,dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
1000153D 3BFB cmp edi,ebx
1000153F 7F 3D jg short 驾校无纸.1000157E
10001541 83F8 01 cmp eax,1
10001544 75 16 jnz short 驾校无纸.1000155C
10001546 33C0 xor eax,eax
10001548 8A06 mov al,byte ptr ds:[esi]
1000154A 50 push eax
1000154B E8 80050000 call 驾校无纸.10001AD0
10001550 83C4 04 add esp,4
10001553 F7D8 neg eax
10001555 1BC0 sbb eax,eax
10001557 83E0 03 and eax,3
1000155A EB 18 jmp short 驾校无纸.10001574
1000155C 8A0E mov cl,byte ptr ds:[esi]
1000155E 51 push ecx
1000155F FFD5 call ebp
10001561 85C0 test eax,eax
10001563 74 07 je short 驾校无纸.1000156C
10001565 B8 01000000 mov eax,1
1000156A EB 09 jmp short 驾校无纸.10001575
1000156C 8A06 mov al,byte ptr ds:[esi]
1000156E F6D8 neg al
10001570 1BC0 sbb eax,eax
10001572 F7D8 neg eax
10001574 48 dec eax
10001575 8A4E 01 mov cl,byte ptr ds:[esi+1]
10001578 46 inc esi
10001579 47 inc edi
1000157A 84C9 test cl,cl
1000157C ^ 75 BF jnz short 驾校无纸.1000153D
1000157E 5F pop edi
1000157F 5E pop esi
10001580 5D pop ebp
10001581 5B pop ebx
10001582 C2 0800 retn 8
10001585 90 nop
10001586 90 nop
10001587 90 nop
10001588 90 nop
10001589 90 nop
1000158A 90 nop
1000158B 90 nop
1000158C 90 nop
1000158D 90 nop
1000158E 90 nop
1000158F 90 nop
10001590 53 push ebx
10001591 55 push ebp
10001592 56 push esi
10001593 57 push edi
10001594 8B7C24 14 mov edi,dword ptr ss:[esp+14]
10001598 33F6 xor esi,esi
1000159A 85FF test edi,edi
1000159C 74 26 je short 驾校无纸.100015C4
1000159E 8A07 mov al,byte ptr ds:[edi]
100015A0 84C0 test al,al
100015A2 74 20 je short 驾校无纸.100015C4
100015A4 8B2D 10500010 mov ebp,dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
100015AA 33DB xor ebx,ebx
100015AC 85F6 test esi,esi
100015AE 74 1D je short 驾校无纸.100015CD
100015B0 33F6 xor esi,esi
100015B2 43 inc ebx
100015B3 8A47 01 mov al,byte ptr ds:[edi+1]
100015B6 47 inc edi
100015B7 84C0 test al,al
100015B9 ^ 75 F1 jnz short 驾校无纸.100015AC
100015BB 8BC3 mov eax,ebx
100015BD 5F pop edi
100015BE 5E pop esi
100015BF 5D pop ebp
100015C0 5B pop ebx
100015C1 C2 0400 retn 4
100015C4 5F pop edi
100015C5 5E pop esi
100015C6 5D pop ebp
100015C7 33C0 xor eax,eax
100015C9 5B pop ebx
100015CA C2 0400 retn 4
100015CD 50 push eax
100015CE FFD5 call ebp
100015D0 85C0 test eax,eax
100015D2 ^ 74 DE je short 驾校无纸.100015B2
100015D4 BE 01000000 mov esi,1
100015D9 ^ EB D8 jmp short 驾校无纸.100015B3
100015DB 90 nop
100015DC 90 nop
100015DD 90 nop
100015DE 90 nop
100015DF 90 nop
100015E0 53 push ebx
100015E1 55 push ebp
100015E2 56 push esi
100015E3 8B7424 10 mov esi,dword ptr ss:[esp+10]
100015E7 57 push edi
100015E8 33FF xor edi,edi
100015EA 85F6 test esi,esi
100015EC 74 29 je short 驾校无纸.10001617
100015EE 8A06 mov al,byte ptr ds:[esi]
100015F0 84C0 test al,al
100015F2 74 23 je short 驾校无纸.10001617
100015F4 33ED xor ebp,ebp
100015F6 33DB xor ebx,ebx
100015F8 3B5C24 18 cmp ebx,dword ptr ss:[esp+18]
100015FC 73 10 jnb short 驾校无纸.1000160E
100015FE 85FF test edi,edi
10001600 74 1E je short 驾校无纸.10001620
10001602 33FF xor edi,edi
10001604 43 inc ebx
10001605 8A46 01 mov al,byte ptr ds:[esi+1]
10001608 46 inc esi
10001609 45 inc ebp
1000160A 84C0 test al,al
1000160C ^ 75 EA jnz short 驾校无纸.100015F8
1000160E 8BC5 mov eax,ebp
10001610 5F pop edi
10001611 5E pop esi
10001612 5D pop ebp
10001613 5B pop ebx
10001614 C2 0800 retn 8
10001617 5F pop edi
10001618 5E pop esi
10001619 5D pop ebp
1000161A 33C0 xor eax,eax
1000161C 5B pop ebx
1000161D C2 0800 retn 8
10001620 50 push eax
10001621 FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
10001627 85C0 test eax,eax
10001629 ^ 74 D9 je short 驾校无纸.10001604
1000162B BF 01000000 mov edi,1
10001630 ^ EB D3 jmp short 驾校无纸.10001605
10001632 90 nop
10001633 90 nop
10001634 90 nop
10001635 90 nop
10001636 90 nop
10001637 90 nop
10001638 90 nop
10001639 90 nop
1000163A 90 nop
1000163B 90 nop
1000163C 90 nop
1000163D 90 nop
1000163E 90 nop
1000163F 90 nop
10001640 53 push ebx
10001641 55 push ebp
10001642 56 push esi
10001643 8B7424 10 mov esi,dword ptr ss:[esp+10]
10001647 57 push edi
10001648 33FF xor edi,edi
1000164A 85F6 test esi,esi
1000164C 74 29 je short 驾校无纸.10001677
1000164E 8A06 mov al,byte ptr ds:[esi]
10001650 84C0 test al,al
10001652 74 23 je short 驾校无纸.10001677
10001654 33ED xor ebp,ebp
10001656 33DB xor ebx,ebx
10001658 3B5C24 18 cmp ebx,dword ptr ss:[esp+18]
1000165C 73 10 jnb short 驾校无纸.1000166E
1000165E 85FF test edi,edi
10001660 74 1E je short 驾校无纸.10001680
10001662 33FF xor edi,edi
10001664 45 inc ebp
10001665 8A46 01 mov al,byte ptr ds:[esi+1]
10001668 46 inc esi
10001669 43 inc ebx
1000166A 84C0 test al,al
1000166C ^ 75 EA jnz short 驾校无纸.10001658
1000166E 8BC5 mov eax,ebp
10001670 5F pop edi
10001671 5E pop esi
10001672 5D pop ebp
10001673 5B pop ebx
10001674 C2 0800 retn 8
10001677 5F pop edi
10001678 5E pop esi
10001679 5D pop ebp
1000167A 33C0 xor eax,eax
1000167C 5B pop ebx
1000167D C2 0800 retn 8
10001680 50 push eax
10001681 FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
10001687 85C0 test eax,eax
10001689 ^ 74 D9 je short 驾校无纸.10001664
1000168B BF 01000000 mov edi,1
10001690 ^ EB D3 jmp short 驾校无纸.10001665
10001692 90 nop
10001693 90 nop
10001694 90 nop
10001695 90 nop
10001696 90 nop
10001697 90 nop
10001698 90 nop
10001699 90 nop
1000169A 90 nop
1000169B 90 nop
1000169C 90 nop
1000169D 90 nop
1000169E 90 nop
1000169F 90 nop
100016A0 8B4424 04 mov eax,dword ptr ss:[esp+4]
100016A4 A8 80 test al,80
100016A6 75 12 jnz short 驾校无纸.100016BA
100016A8 83F8 30 cmp eax,30
100016AB 7C 0D jl short 驾校无纸.100016BA
100016AD 83F8 39 cmp eax,39
100016B0 7F 08 jg short 驾校无纸.100016BA
100016B2 B8 01000000 mov eax,1
100016B7 C2 0400 retn 4
100016BA 33C0 xor eax,eax
100016BC C2 0400 retn 4
100016BF 90 nop
100016C0 - FF25 94500010 jmp dword ptr ds:[<&PBVM80.#137>] ; PBVM80.FN_RunExecutable
100016C6 CC int3
100016C7 CC int3
100016C8 CC int3
100016C9 CC int3
100016CA CC int3
100016CB CC int3
100016CC CC int3
100016CD CC int3
100016CE CC int3
100016CF CC int3
100016D0 8D42 FF lea eax,dword ptr ds:[edx-1]
100016D3 5B pop ebx
100016D4 C3 retn
100016D5 2E:8BC0 mov eax,eax
100016D8 2E:8BC0 mov eax,eax
100016DB 2E:8BC0 mov eax,eax
100016DE 8BC0 mov eax,eax
100016E0 33C0 xor eax,eax
100016E2 8A4424 08 mov al,byte ptr ss:[esp+8]
100016E6 53 push ebx
100016E7 8BD8 mov ebx,eax
100016E9 C1E0 08 shl eax,8
100016EC 8B5424 08 mov edx,dword ptr ss:[esp+8]
100016F0 F7C2 03000000 test edx,3
100016F6 74 13 je short 驾校无纸.1000170B
100016F8 8A0A mov cl,byte ptr ds:[edx]
100016FA 42 inc edx
100016FB 38D9 cmp cl,bl
100016FD ^ 74 D1 je short 驾校无纸.100016D0
100016FF 84C9 test cl,cl
10001701 74 51 je short 驾校无纸.10001754
10001703 F7C2 03000000 test edx,3
10001709 ^ 75 ED jnz short 驾校无纸.100016F8
1000170B 0BD8 or ebx,eax
1000170D 57 push edi
1000170E 8BC3 mov eax,ebx
10001710 C1E3 10 shl ebx,10
10001713 56 push esi
10001714 0BD8 or ebx,eax
10001716 8B0A mov ecx,dword ptr ds:[edx]
10001718 BF FFFEFE7E mov edi,7EFEFEFF
1000171D 8BC1 mov eax,ecx
1000171F 8BF7 mov esi,edi
10001721 33CB xor ecx,ebx
10001723 03F0 add esi,eax
10001725 03F9 add edi,ecx
10001727 83F1 FF xor ecx,FFFFFFFF
1000172A 83F0 FF xor eax,FFFFFFFF
1000172D 33CF xor ecx,edi
1000172F 33C6 xor eax,esi
10001731 83C2 04 add edx,4
10001734 81E1 00010181 and ecx,81010100
1000173A 75 1C jnz short 驾校无纸.10001758
1000173C 25 00010181 and eax,81010100
10001741 ^ 74 D3 je short 驾校无纸.10001716
10001743 25 00010101 and eax,1010100
10001748 75 08 jnz short 驾校无纸.10001752
1000174A 81E6 00000080 and esi,80000000
10001750 ^ 75 C4 jnz short 驾校无纸.10001716
10001752 5E pop esi
10001753 5F pop edi
10001754 5B pop ebx
10001755 33C0 xor eax,eax
10001757 C3 retn
10001758 8B42 FC mov eax,dword ptr ds:[edx-4]
1000175B 38D8 cmp al,bl
1000175D 74 36 je short 驾校无纸.10001795
1000175F 84C0 test al,al
10001761 ^ 74 EF je short 驾校无纸.10001752
10001763 38DC cmp ah,bl
10001765 74 27 je short 驾校无纸.1000178E
10001767 84E4 test ah,ah
10001769 ^ 74 E7 je short 驾校无纸.10001752
1000176B C1E8 10 shr eax,10
1000176E 38D8 cmp al,bl
10001770 74 15 je short 驾校无纸.10001787
10001772 84C0 test al,al
10001774 ^ 74 DC je short 驾校无纸.10001752
10001776 38DC cmp ah,bl
10001778 74 06 je short 驾校无纸.10001780
1000177A 84E4 test ah,ah
1000177C ^ 74 D4 je short 驾校无纸.10001752
1000177E ^ EB 96 jmp short 驾校无纸.10001716
10001780 5E pop esi
10001781 5F pop edi
10001782 8D42 FF lea eax,dword ptr ds:[edx-1]
10001785 5B pop ebx
10001786 C3 retn
10001787 8D42 FE lea eax,dword ptr ds:[edx-2]
1000178A 5E pop esi
1000178B 5F pop edi
1000178C 5B pop ebx
1000178D C3 retn
1000178E 8D42 FD lea eax,dword ptr ds:[edx-3]
10001791 5E pop esi
10001792 5F pop edi
10001793 5B pop ebx
10001794 C3 retn
10001795 8D42 FC lea eax,dword ptr ds:[edx-4]
10001798 5E pop esi
10001799 5F pop edi
1000179A 5B pop ebx
1000179B C3 retn
1000179C CC int3
1000179D CC int3
1000179E CC int3
1000179F CC int3
100017A0 A1 D0860010 mov eax,dword ptr ds:[100086D0]
100017A5 53 push ebx
100017A6 85C0 test eax,eax
100017A8 56 push esi
100017A9 75 15 jnz short 驾校无纸.100017C0
100017AB 8B4424 10 mov eax,dword ptr ss:[esp+10]
100017AF 8B4C24 0C mov ecx,dword ptr ss:[esp+C]
100017B3 50 push eax
100017B4 51 push ecx
100017B5 E8 26FFFFFF call 驾校无纸.100016E0
100017BA 83C4 08 add esp,8
100017BD 5E pop esi
100017BE 5B pop ebx
100017BF C3 retn
100017C0 8B5424 0C mov edx,dword ptr ss:[esp+C]
100017C4 8B7424 10 mov esi,dword ptr ss:[esp+10]
100017C8 66:0FB602 movzx ax,byte ptr ds:[edx]
100017CC 66:85C0 test ax,ax
100017CF 74 66 je short 驾校无纸.10001837
100017D1 B3 04 mov bl,4
100017D3 8BC8 mov ecx,eax
100017D5 81E1 FF000000 and ecx,0FF
100017DB 8499 C9840010 test byte ptr ds:[ecx+100084C9],bl
100017E1 74 1E je short 驾校无纸.10001801
100017E3 8A4A 01 mov cl,byte ptr ds:[edx+1]
100017E6 42 inc edx
100017E7 84C9 test cl,cl
100017E9 74 41 je short 驾校无纸.1000182C
100017EB 25 FFFF0000 and eax,0FFFF
100017F0 81E1 FF000000 and ecx,0FF
100017F6 C1E0 08 shl eax,8
100017F9 0BC1 or eax,ecx
100017FB 3BF0 cmp esi,eax
100017FD 74 32 je short 驾校无纸.10001831
100017FF EB 0C jmp short 驾校无纸.1000180D
10001801 8BC8 mov ecx,eax
10001803 81E1 FFFF0000 and ecx,0FFFF
10001809 3BF1 cmp esi,ecx
1000180B 74 2A je short 驾校无纸.10001837
1000180D 66:0FB642 01 movzx ax,byte ptr ds:[edx+1]
10001812 42 inc edx
10001813 66:85C0 test ax,ax
10001816 ^ 75 BB jnz short 驾校无纸.100017D3
10001818 25 FFFF0000 and eax,0FFFF
1000181D 33C9 xor ecx,ecx
1000181F 3BF0 cmp esi,eax
10001821 0F95C1 setne cl
10001824 49 dec ecx
10001825 23CA and ecx,edx
10001827 8BC1 mov eax,ecx
10001829 5E pop esi
1000182A 5B pop ebx
1000182B C3 retn
1000182C 33C0 xor eax,eax
1000182E 5E pop esi
1000182F 5B pop ebx
10001830 C3 retn
10001831 8D42 FF lea eax,dword ptr ds:[edx-1]
10001834 5E pop esi
10001835 5B pop ebx
10001836 C3 retn
10001837 25 FFFF0000 and eax,0FFFF
1000183C 33C9 xor ecx,ecx
1000183E 3BF0 cmp esi,eax
10001840 5E pop esi
10001841 0F95C1 setne cl
10001844 49 dec ecx
10001845 5B pop ebx
10001846 23CA and ecx,edx
10001848 8BC1 mov eax,ecx
1000184A C3 retn
1000184B 90 nop
1000184C 90 nop
1000184D 90 nop
1000184E 90 nop
1000184F 90 nop
10001850 A1 F8860010 mov eax,dword ptr ds:[100086F8]
10001855 83EC 08 sub esp,8
10001858 85C0 test eax,eax
1000185A 53 push ebx
1000185B 75 1E jnz short 驾校无纸.1000187B
1000185D 8B4424 10 mov eax,dword ptr ss:[esp+10]
10001861 83F8 41 cmp eax,41
10001864 0F8C DF000000 jl 驾校无纸.10001949
1000186A 83F8 5A cmp eax,5A
1000186D 0F8F D6000000 jg 驾校无纸.10001949
10001873 83C0 20 add eax,20
10001876 5B pop ebx
10001877 83C4 08 add esp,8
1000187A C3 retn
1000187B 8B5C24 10 mov ebx,dword ptr ss:[esp+10]
1000187F 81FB 00010000 cmp ebx,100
10001885 7D 2C jge short 驾校无纸.100018B3
10001887 833D 3C630010 0>cmp dword ptr ds:[1000633C],1
1000188E 7E 0D jle short 驾校无纸.1000189D
10001890 6A 01 push 1
10001892 53 push ebx
10001893 E8 E80B0000 call 驾校无纸.10002480
10001898 83C4 08 add esp,8
1000189B EB 0B jmp short 驾校无纸.100018A8
1000189D A1 30610010 mov eax,dword ptr ds:[10006130]
100018A2 8A0458 mov al,byte ptr ds:[eax+ebx*2]
100018A5 83E0 01 and eax,1
100018A8 85C0 test eax,eax
100018AA 75 07 jnz short 驾校无纸.100018B3
100018AC 8BC3 mov eax,ebx
100018AE 5B pop ebx
100018AF 83C4 08 add esp,8
100018B2 C3 retn
100018B3 8B15 30610010 mov edx,dword ptr ds:[10006130] ; 驾校无纸.1000613A
100018B9 8BC3 mov eax,ebx
100018BB C1F8 08 sar eax,8
100018BE 8BC8 mov ecx,eax
100018C0 81E1 FF000000 and ecx,0FF
100018C6 F6444A 01 80 test byte ptr ds:[edx+ecx*2+1],80
100018CB 74 14 je short 驾校无纸.100018E1
100018CD 884424 10 mov byte ptr ss:[esp+10],al
100018D1 885C24 11 mov byte ptr ss:[esp+11],bl
100018D5 C64424 12 00 mov byte ptr ss:[esp+12],0
100018DA B8 02000000 mov eax,2
100018DF EB 0E jmp short 驾校无纸.100018EF
100018E1 885C24 10 mov byte ptr ss:[esp+10],bl
100018E5 C64424 11 00 mov byte ptr ss:[esp+11],0
100018EA B8 01000000 mov eax,1
100018EF 6A 01 push 1
100018F1 6A 00 push 0
100018F3 8D4C24 0C lea ecx,dword ptr ss:[esp+C]
100018F7 6A 03 push 3
100018F9 51 push ecx
100018FA 8D5424 20 lea edx,dword ptr ss:[esp+20]
100018FE 50 push eax
100018FF A1 F8860010 mov eax,dword ptr ds:[100086F8]
10001904 52 push edx
10001905 68 00010000 push 100
1000190A 50 push eax
1000190B E8 10090000 call 驾校无纸.10002220
10001910 83C4 20 add esp,20
10001913 85C0 test eax,eax
10001915 75 07 jnz short 驾校无纸.1000191E
10001917 8BC3 mov eax,ebx
10001919 5B pop ebx
1000191A 83C4 08 add esp,8
1000191D C3 retn
1000191E 83F8 01 cmp eax,1
10001921 75 0E jnz short 驾校无纸.10001931
10001923 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001927 25 FF000000 and eax,0FF
1000192C 5B pop ebx
1000192D 83C4 08 add esp,8
10001930 C3 retn
10001931 8B4424 05 mov eax,dword ptr ss:[esp+5]
10001935 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
10001939 25 FF000000 and eax,0FF
1000193E 81E1 FF000000 and ecx,0FF
10001944 C1E0 08 shl eax,8
10001947 0BC1 or eax,ecx
10001949 5B pop ebx
1000194A 83C4 08 add esp,8
1000194D C3 retn
1000194E 90 nop
1000194F 90 nop
10001950 833D 3C630010 0>cmp dword ptr ds:[1000633C],1
10001957 7E 10 jle short 驾校无纸.10001969
10001959 8B4424 04 mov eax,dword ptr ss:[esp+4]
1000195D 6A 01 push 1
1000195F 50 push eax
10001960 E8 1B0B0000 call 驾校无纸.10002480
10001965 83C4 08 add esp,8
10001968 C3 retn
10001969 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
1000196D 8B15 30610010 mov edx,dword ptr ds:[10006130] ; 驾校无纸.1000613A
10001973 8A044A mov al,byte ptr ds:[edx+ecx*2]
10001976 83E0 01 and eax,1
10001979 C3 retn
1000197A 90 nop
1000197B 90 nop
1000197C 90 nop
1000197D 90 nop
1000197E 90 nop
1000197F 90 nop
10001980 833D 3C630010 0>cmp dword ptr ds:[1000633C],1
10001987 7E 10 jle short 驾校无纸.10001999
10001989 8B4424 04 mov eax,dword ptr ss:[esp+4]
1000198D 6A 02 push 2
1000198F 50 push eax
10001990 E8 EB0A0000 call 驾校无纸.10002480
10001995 83C4 08 add esp,8
10001998 C3 retn
10001999 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
1000199D 8B15 30610010 mov edx,dword ptr ds:[10006130] ; 驾校无纸.1000613A
100019A3 8A044A mov al,byte ptr ds:[edx+ecx*2]
100019A6 83E0 02 and eax,2
100019A9 C3 retn
100019AA 90 nop
100019AB 90 nop
100019AC 90 nop
100019AD 90 nop
100019AE 90 nop
100019AF 90 nop
100019B0 A1 F8860010 mov eax,dword ptr ds:[100086F8]
100019B5 83EC 08 sub esp,8
100019B8 85C0 test eax,eax
100019BA 53 push ebx
100019BB 75 1E jnz short 驾校无纸.100019DB
100019BD 8B4424 10 mov eax,dword ptr ss:[esp+10]
100019C1 83F8 61 cmp eax,61
100019C4 0F8C DF000000 jl 驾校无纸.10001AA9
100019CA 83F8 7A cmp eax,7A
100019CD 0F8F D6000000 jg 驾校无纸.10001AA9
100019D3 83E8 20 sub eax,20
100019D6 5B pop ebx
100019D7 83C4 08 add esp,8
100019DA C3 retn
100019DB 8B5C24 10 mov ebx,dword ptr ss:[esp+10]
100019DF 81FB 00010000 cmp ebx,100
100019E5 7D 2C jge short 驾校无纸.10001A13
100019E7 833D 3C630010 0>cmp dword ptr ds:[1000633C],1
100019EE 7E 0D jle short 驾校无纸.100019FD
100019F0 6A 02 push 2
100019F2 53 push ebx
100019F3 E8 880A0000 call 驾校无纸.10002480
100019F8 83C4 08 add esp,8
100019FB EB 0B jmp short 驾校无纸.10001A08
100019FD A1 30610010 mov eax,dword ptr ds:[10006130]
10001A02 8A0458 mov al,byte ptr ds:[eax+ebx*2]
10001A05 83E0 02 and eax,2
10001A08 85C0 test eax,eax
10001A0A 75 07 jnz short 驾校无纸.10001A13
10001A0C 8BC3 mov eax,ebx
10001A0E 5B pop ebx
10001A0F 83C4 08 add esp,8
10001A12 C3 retn
10001A13 8B15 30610010 mov edx,dword ptr ds:[10006130] ; 驾校无纸.1000613A
10001A19 8BC3 mov eax,ebx
10001A1B C1F8 08 sar eax,8
10001A1E 8BC8 mov ecx,eax
10001A20 81E1 FF000000 and ecx,0FF
10001A26 F6444A 01 80 test byte ptr ds:[edx+ecx*2+1],80
10001A2B 74 14 je short 驾校无纸.10001A41
10001A2D 884424 10 mov byte ptr ss:[esp+10],al
10001A31 885C24 11 mov byte ptr ss:[esp+11],bl
10001A35 C64424 12 00 mov byte ptr ss:[esp+12],0
10001A3A B8 02000000 mov eax,2
10001A3F EB 0E jmp short 驾校无纸.10001A4F
10001A41 885C24 10 mov byte ptr ss:[esp+10],bl
10001A45 C64424 11 00 mov byte ptr ss:[esp+11],0
10001A4A B8 01000000 mov eax,1
10001A4F 6A 01 push 1
10001A51 6A 00 push 0
10001A53 8D4C24 0C lea ecx,dword ptr ss:[esp+C]
10001A57 6A 03 push 3
10001A59 51 push ecx
10001A5A 8D5424 20 lea edx,dword ptr ss:[esp+20]
10001A5E 50 push eax
10001A5F A1 F8860010 mov eax,dword ptr ds:[100086F8]
10001A64 52 push edx
10001A65 68 00020000 push 200
10001A6A 50 push eax
10001A6B E8 B0070000 call 驾校无纸.10002220
10001A70 83C4 20 add esp,20
10001A73 85C0 test eax,eax
10001A75 75 07 jnz short 驾校无纸.10001A7E
10001A77 8BC3 mov eax,ebx
10001A79 5B pop ebx
10001A7A 83C4 08 add esp,8
10001A7D C3 retn
10001A7E 83F8 01 cmp eax,1
10001A81 75 0E jnz short 驾校无纸.10001A91
10001A83 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001A87 25 FF000000 and eax,0FF
10001A8C 5B pop ebx
10001A8D 83C4 08 add esp,8
10001A90 C3 retn
10001A91 8B4424 05 mov eax,dword ptr ss:[esp+5]
10001A95 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
10001A99 25 FF000000 and eax,0FF
10001A9E 81E1 FF000000 and ecx,0FF
10001AA4 C1E0 08 shl eax,8
10001AA7 0BC1 or eax,ecx
10001AA9 5B pop ebx
10001AAA 83C4 08 add esp,8
10001AAD C3 retn
10001AAE 90 nop
10001AAF 90 nop
10001AB0 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001AB4 6A 04 push 4
10001AB6 6A 00 push 0
10001AB8 50 push eax
10001AB9 E8 32000000 call 驾校无纸.10001AF0
10001ABE 83C4 0C add esp,0C
10001AC1 C3 retn
10001AC2 90 nop
10001AC3 90 nop
10001AC4 90 nop
10001AC5 90 nop
10001AC6 90 nop
10001AC7 90 nop
10001AC8 90 nop
10001AC9 90 nop
10001ACA 90 nop
10001ACB 90 nop
10001ACC 90 nop
10001ACD 90 nop
10001ACE 90 nop
10001ACF 90 nop
10001AD0 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001AD4 6A 08 push 8
10001AD6 6A 00 push 0
10001AD8 50 push eax
10001AD9 E8 12000000 call 驾校无纸.10001AF0
10001ADE 83C4 0C add esp,0C
10001AE1 C3 retn
10001AE2 90 nop
10001AE3 90 nop
10001AE4 90 nop
10001AE5 90 nop
10001AE6 90 nop
10001AE7 90 nop
10001AE8 90 nop
10001AE9 90 nop
10001AEA 90 nop
10001AEB 90 nop
10001AEC 90 nop
10001AED 90 nop
10001AEE 90 nop
10001AEF 90 nop
10001AF0 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001AF4 8A4C24 0C mov cl,byte ptr ss:[esp+C]
10001AF8 25 FF000000 and eax,0FF
10001AFD 8488 C9840010 test byte ptr ds:[eax+100084C9],cl
10001B03 75 1F jnz short 驾校无纸.10001B24
10001B05 8B4C24 08 mov ecx,dword ptr ss:[esp+8]
10001B09 85C9 test ecx,ecx
10001B0B 74 10 je short 驾校无纸.10001B1D
10001B0D 33D2 xor edx,edx
10001B0F 66:8B1445 3A610>mov dx,word ptr ds:[eax*2+1000613A]
10001B17 8BC2 mov eax,edx
10001B19 23C1 and eax,ecx
10001B1B EB 02 jmp short 驾校无纸.10001B1F
10001B1D 33C0 xor eax,eax
10001B1F 85C0 test eax,eax
10001B21 75 01 jnz short 驾校无纸.10001B24
10001B23 C3 retn
10001B24 B8 01000000 mov eax,1
10001B29 C3 retn
10001B2A 90 nop
10001B2B 90 nop
10001B2C 90 nop
10001B2D 90 nop
10001B2E 90 nop
10001B2F 90 nop
10001B30 > 55 push ebp
10001B31 8BEC mov ebp,esp
10001B33 6A FF push -1
10001B35 68 A0500010 push 驾校无纸.100050A0
10001B3A 68 28300010 push 驾校无纸.10003028
10001B3F 64:A1 00000000 mov eax,dword ptr fs:[0]
10001B45 50 push eax
10001B46 64:8925 0000000>mov dword ptr fs:[0],esp
10001B4D 83C4 A8 add esp,-58
10001B50 53 push ebx
10001B51 56 push esi
10001B52 57 push edi
10001B53 8965 E8 mov dword ptr ss:[ebp-18],esp
10001B56 FF15 1C500010 call dword ptr ds:[<&KERNEL32.GetVersion>] ; kernel32.GetVersion
10001B5C 33D2 xor edx,edx
10001B5E 8AD4 mov dl,ah
10001B60 8915 24870010 mov dword ptr ds:[10008724],edx
10001B66 8BC8 mov ecx,eax
10001B68 81E1 FF000000 and ecx,0FF
10001B6E 890D 20870010 mov dword ptr ds:[10008720],ecx
10001B74 C1E1 08 shl ecx,8
10001B77 03CA add ecx,edx
10001B79 890D 1C870010 mov dword ptr ds:[1000871C],ecx
10001B7F C1E8 10 shr eax,10
10001B82 A3 18870010 mov dword ptr ds:[10008718],eax
10001B87 E8 64130000 call 驾校无纸.10002EF0
10001B8C 85C0 test eax,eax
10001B8E 75 0A jnz short 驾校无纸.10001B9A
10001B90 6A 1C push 1C
10001B92 E8 69010000 call 驾校无纸.10001D00
10001B97 83C4 04 add esp,4
10001B9A C745 FC 0000000>mov dword ptr ss:[ebp-4],0
10001BA1 E8 4A110000 call 驾校无纸.10002CF0
10001BA6 E8 65060000 call 驾校无纸.10002210
10001BAB FF15 08500010 call dword ptr ds:[<&KERNEL32.GetCommandLineA>] ; kernel32.GetCommandLineA
10001BB1 A3 B4890010 mov dword ptr ds:[100089B4],eax
10001BB6 E8 D50F0000 call 驾校无纸.10002B90
10001BBB A3 BC840010 mov dword ptr ds:[100084BC],eax
10001BC0 85C0 test eax,eax
10001BC2 74 09 je short 驾校无纸.10001BCD
10001BC4 A1 B4890010 mov eax,dword ptr ds:[100089B4]
10001BC9 85C0 test eax,eax
10001BCB 75 0A jnz short 驾校无纸.10001BD7
10001BCD 6A FF push -1
10001BCF E8 7C090000 call 驾校无纸.10002550
10001BD4 83C4 04 add esp,4
10001BD7 E8 040D0000 call 驾校无纸.100028E0
10001BDC E8 0F0C0000 call 驾校无纸.100027F0
10001BE1 E8 3A090000 call 驾校无纸.10002520
10001BE6 8B35 B4890010 mov esi,dword ptr ds:[100089B4]
10001BEC 8975 9C mov dword ptr ss:[ebp-64],esi
10001BEF 803E 22 cmp byte ptr ds:[esi],22
10001BF2 0F85 BE000000 jnz 驾校无纸.10001CB6
10001BF8 46 inc esi
10001BF9 8975 9C mov dword ptr ss:[ebp-64],esi
10001BFC 8A06 mov al,byte ptr ds:[esi]
10001BFE 3C 22 cmp al,22
10001C00 74 1C je short 驾校无纸.10001C1E
10001C02 84C0 test al,al
10001C04 74 18 je short 驾校无纸.10001C1E
10001C06 25 FF000000 and eax,0FF
10001C0B 50 push eax
10001C0C E8 9FFEFFFF call 驾校无纸.10001AB0
10001C11 83C4 04 add esp,4
10001C14 85C0 test eax,eax
10001C16 ^ 74 E0 je short 驾校无纸.10001BF8
10001C18 46 inc esi
10001C19 8975 9C mov dword ptr ss:[ebp-64],esi
10001C1C ^ EB DA jmp short 驾校无纸.10001BF8
10001C1E 803E 22 cmp byte ptr ds:[esi],22
10001C21 75 04 jnz short 驾校无纸.10001C27
10001C23 46 inc esi
10001C24 8975 9C mov dword ptr ss:[ebp-64],esi
10001C27 8A06 mov al,byte ptr ds:[esi]
10001C29 84C0 test al,al
10001C2B 74 0A je short 驾校无纸.10001C37
10001C2D 3C 20 cmp al,20
10001C2F 77 06 ja short 驾校无纸.10001C37
10001C31 46 inc esi
10001C32 8975 9C mov dword ptr ss:[ebp-64],esi
10001C35 ^ EB F0 jmp short 驾校无纸.10001C27
10001C37 C745 D0 0000000>mov dword ptr ss:[ebp-30],0
10001C3E 8D45 A4 lea eax,dword ptr ss:[ebp-5C]
10001C41 50 push eax
10001C42 FF15 18500010 call dword ptr ds:[<&KERNEL32.GetStartupInfoA>] ; kernel32.GetStartupInfoA
10001C48 F645 D0 01 test byte ptr ss:[ebp-30],1
10001C4C 74 0A je short 驾校无纸.10001C58
10001C4E 8B45 D4 mov eax,dword ptr ss:[ebp-2C]
10001C51 25 FFFF0000 and eax,0FFFF
10001C56 EB 05 jmp short 驾校无纸.10001C5D
10001C58 B8 0A000000 mov eax,0A
10001C5D 50 push eax
10001C5E 56 push esi
10001C5F 6A 00 push 0
10001C61 6A 00 push 0
10001C63 FF15 14500010 call dword ptr ds:[<&KERNEL32.GetModuleHandleA>] ; kernel32.GetModuleHandleA
10001C69 50 push eax
10001C6A E8 91F3FFFF call 驾校无纸.10001000
10001C6F 8945 A0 mov dword ptr ss:[ebp-60],eax
10001C72 50 push eax
10001C73 E8 D8080000 call 驾校无纸.10002550
10001C78 EB 21 jmp short 驾校无纸.10001C9B
10001C7A 8B45 EC mov eax,dword ptr ss:[ebp-14]
10001C7D 8B08 mov ecx,dword ptr ds:[eax]
10001C7F 8B09 mov ecx,dword ptr ds:[ecx]
10001C81 894D 98 mov dword ptr ss:[ebp-68],ecx
10001C84 50 push eax
10001C85 51 push ecx
10001C86 E8 D5090000 call 驾校无纸.10002660
10001C8B 83C4 08 add esp,8
10001C8E C3 retn
10001C8F 8B65 E8 mov esp,dword ptr ss:[ebp-18]
10001C92 8B55 98 mov edx,dword ptr ss:[ebp-68]
10001C95 52 push edx
10001C96 E8 D5080000 call 驾校无纸.10002570
10001C9B 83C4 04 add esp,4
10001C9E C745 FC FFFFFFF>mov dword ptr ss:[ebp-4],-1
10001CA5 8B4D F0 mov ecx,dword ptr ss:[ebp-10]
10001CA8 64:890D 0000000>mov dword ptr fs:[0],ecx
10001CAF 5F pop edi
10001CB0 5E pop esi
10001CB1 5B pop ebx
10001CB2 8BE5 mov esp,ebp
10001CB4 5D pop ebp
10001CB5 C3 retn
10001CB6 803E 20 cmp byte ptr ds:[esi],20
10001CB9 ^ 0F86 68FFFFFF jbe 驾校无纸.10001C27
10001CBF 46 inc esi
10001CC0 8975 9C mov dword ptr ss:[ebp-64],esi
10001CC3 ^ EB F1 jmp short 驾校无纸.10001CB6
10001CC5 90 nop
10001CC6 90 nop
10001CC7 90 nop
10001CC8 90 nop
10001CC9 90 nop
10001CCA 90 nop
10001CCB 90 nop
10001CCC 90 nop
10001CCD 90 nop
10001CCE 90 nop
10001CCF 90 nop
10001CD0 833D C4840010 0>cmp dword ptr ds:[100084C4],1
10001CD7 75 05 jnz short 驾校无纸.10001CDE
10001CD9 E8 22140000 call 驾校无纸.10003100
10001CDE 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001CE2 50 push eax
10001CE3 E8 58140000 call 驾校无纸.10003140
10001CE8 83C4 04 add esp,4
10001CEB 68 FF000000 push 0FF
10001CF0 FF15 30600010 call dword ptr ds:[10006030] ; 驾校无纸.10002570
10001CF6 83C4 04 add esp,4
10001CF9 C3 retn
10001CFA 90 nop
10001CFB 90 nop
10001CFC 90 nop
10001CFD 90 nop
10001CFE 90 nop
10001CFF 90 nop
10001D00 833D C4840010 0>cmp dword ptr ds:[100084C4],1
10001D07 75 05 jnz short 驾校无纸.10001D0E
10001D09 E8 F2130000 call 驾校无纸.10003100
10001D0E 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001D12 50 push eax
10001D13 E8 28140000 call 驾校无纸.10003140
10001D18 83C4 04 add esp,4
10001D1B 68 FF000000 push 0FF
10001D20 FF15 20500010 call dword ptr ds:[<&KERNEL32.ExitProcess>] ; kernel32.ExitProcess
10001D26 C3 retn
10001D27 90 nop
10001D28 90 nop
10001D29 90 nop
10001D2A 90 nop
10001D2B 90 nop
10001D2C 90 nop
10001D2D 90 nop
10001D2E 90 nop
10001D2F 90 nop
10001D30 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001D34 83EC 14 sub esp,14
10001D37 53 push ebx
10001D38 55 push ebp
10001D39 56 push esi
10001D3A 57 push edi
10001D3B 50 push eax
10001D3C E8 FF010000 call 驾校无纸.10001F40
10001D41 8BC8 mov ecx,eax
10001D43 A1 D0860010 mov eax,dword ptr ds:[100086D0]
10001D48 83C4 04 add esp,4
10001D4B 3BC8 cmp ecx,eax
10001D4D 894C24 28 mov dword ptr ss:[esp+28],ecx
10001D51 75 0A jnz short 驾校无纸.10001D5D
10001D53 33C0 xor eax,eax
10001D55 5F pop edi
10001D56 5E pop esi
10001D57 5D pop ebp
10001D58 5B pop ebx
10001D59 83C4 14 add esp,14
10001D5C C3 retn
10001D5D 85C9 test ecx,ecx
10001D5F 75 14 jnz short 驾校无纸.10001D75
10001D61 E8 8A020000 call 驾校无纸.10001FF0
10001D66 E8 C5020000 call 驾校无纸.10002030
10001D6B 33C0 xor eax,eax
10001D6D 5F pop edi
10001D6E 5E pop esi
10001D6F 5D pop ebp
10001D70 5B pop ebx
10001D71 83C4 14 add esp,14
10001D74 C3 retn
10001D75 33D2 xor edx,edx
10001D77 B8 40600010 mov eax,驾校无纸.10006040
10001D7C 3908 cmp dword ptr ds:[eax],ecx
10001D7E 0F84 07010000 je 驾校无纸.10001E8B
10001D84 83C0 30 add eax,30
10001D87 42 inc edx
10001D88 3D 30610010 cmp eax,驾校无纸.10006130
10001D8D ^ 72 ED jb short 驾校无纸.10001D7C
10001D8F 8D5424 10 lea edx,dword ptr ss:[esp+10]
10001D93 52 push edx
10001D94 51 push ecx
10001D95 FF15 0C500010 call dword ptr ds:[<&KERNEL32.GetCPInfo>] ; kernel32.GetCPInfo
10001D9B BE 01000000 mov esi,1
10001DA0 3BC6 cmp eax,esi
10001DA2 0F85 BB000000 jnz 驾校无纸.10001E63
10001DA8 B9 40000000 mov ecx,40
10001DAD 33C0 xor eax,eax
10001DAF BF C8840010 mov edi,驾校无纸.100084C8
10001DB4 F3:AB rep stos dword ptr es:[edi]
10001DB6 8B4C24 10 mov ecx,dword ptr ss:[esp+10]
10001DBA AA stos byte ptr es:[edi]
10001DBB 8B7C24 28 mov edi,dword ptr ss:[esp+28]
10001DBF 33C0 xor eax,eax
10001DC1 3BCE cmp ecx,esi
10001DC3 893D D0860010 mov dword ptr ds:[100086D0],edi
10001DC9 A3 D4860010 mov dword ptr ds:[100086D4],eax
10001DCE 76 6E jbe short 驾校无纸.10001E3E
10001DD0 8A4424 16 mov al,byte ptr ss:[esp+16]
10001DD4 84C0 test al,al
10001DD6 74 37 je short 驾校无纸.10001E0F
10001DD8 8D5424 17 lea edx,dword ptr ss:[esp+17]
10001DDC 8A0A mov cl,byte ptr ds:[edx]
10001DDE 84C9 test cl,cl
10001DE0 74 2D je short 驾校无纸.10001E0F
10001DE2 33C0 xor eax,eax
10001DE4 81E1 FF000000 and ecx,0FF
10001DEA 8A42 FF mov al,byte ptr ds:[edx-1]
10001DED 3BC1 cmp eax,ecx
10001DEF 77 14 ja short 驾校无纸.10001E05
10001DF1 8A98 C9840010 mov bl,byte ptr ds:[eax+100084C9]
10001DF7 80CB 04 or bl,4
10001DFA 8898 C9840010 mov byte ptr ds:[eax+100084C9],bl
10001E00 40 inc eax
10001E01 3BC1 cmp eax,ecx
10001E03 ^ 76 EC jbe short 驾校无纸.10001DF1
10001E05 8A42 01 mov al,byte ptr ds:[edx+1]
10001E08 83C2 02 add edx,2
10001E0B 84C0 test al,al
10001E0D ^ 75 CD jnz short 驾校无纸.10001DDC
10001E0F 8BC6 mov eax,esi
10001E11 8A98 C9840010 mov bl,byte ptr ds:[eax+100084C9]
10001E17 80CB 08 or bl,8
10001E1A 8898 C9840010 mov byte ptr ds:[eax+100084C9],bl
10001E20 40 inc eax
10001E21 3D FF000000 cmp eax,0FF
10001E26 ^ 72 E9 jb short 驾校无纸.10001E11
10001E28 57 push edi
10001E29 E8 62010000 call 驾校无纸.10001F90
10001E2E 83C4 04 add esp,4
10001E31 A3 D4860010 mov dword ptr ds:[100086D4],eax
10001E36 8935 B0890010 mov dword ptr ds:[100089B0],esi
10001E3C EB 05 jmp short 驾校无纸.10001E43
10001E3E A3 B0890010 mov dword ptr ds:[100089B0],eax
10001E43 33C0 xor eax,eax
10001E45 A3 D8860010 mov dword ptr ds:[100086D8],eax
10001E4A A3 DC860010 mov dword ptr ds:[100086DC],eax
10001E4F A3 E0860010 mov dword ptr ds:[100086E0],eax
10001E54 E8 D7010000 call 驾校无纸.10002030
10001E59 33C0 xor eax,eax
10001E5B 5F pop edi
10001E5C 5E pop esi
10001E5D 5D pop ebp
10001E5E 5B pop ebx
10001E5F 83C4 14 add esp,14
10001E62 C3 retn
10001E63 A1 E4860010 mov eax,dword ptr ds:[100086E4]
10001E68 85C0 test eax,eax
10001E6A 74 14 je short 驾校无纸.10001E80
10001E6C E8 7F010000 call 驾校无纸.10001FF0
10001E71 E8 BA010000 call 驾校无纸.10002030
10001E76 33C0 xor eax,eax
10001E78 5F pop edi
10001E79 5E pop esi
10001E7A 5D pop ebp
10001E7B 5B pop ebx
10001E7C 83C4 14 add esp,14
10001E7F C3 retn
10001E80 83C8 FF or eax,FFFFFFFF
10001E83 5F pop edi
10001E84 5E pop esi
10001E85 5D pop ebp
10001E86 5B pop ebx
10001E87 83C4 14 add esp,14
10001E8A C3 retn
10001E8B B9 40000000 mov ecx,40
10001E90 33C0 xor eax,eax
10001E92 BF C8840010 mov edi,驾校无纸.100084C8
10001E97 8D1C52 lea ebx,dword ptr ds:[edx+edx*2]
10001E9A F3:AB rep stos dword ptr es:[edi]
10001E9C AA stos byte ptr es:[edi]
10001E9D 33FF xor edi,edi
10001E9F C1E3 04 shl ebx,4
10001EA2 8DAB 50600010 lea ebp,dword ptr ds:[ebx+10006050]
10001EA8 8A45 00 mov al,byte ptr ss:[ebp]
10001EAB 8BF5 mov esi,ebp
10001EAD 84C0 test al,al
10001EAF 74 30 je short 驾校无纸.10001EE1
10001EB1 8A4E 01 mov cl,byte ptr ds:[esi+1]
10001EB4 84C9 test cl,cl
10001EB6 74 29 je short 驾校无纸.10001EE1
10001EB8 33C0 xor eax,eax
10001EBA 81E1 FF000000 and ecx,0FF
10001EC0 8A06 mov al,byte ptr ds:[esi]
10001EC2 3BC1 cmp eax,ecx
10001EC4 77 11 ja short 驾校无纸.10001ED7
10001EC6 8A97 38600010 mov dl,byte ptr ds:[edi+10006038]
10001ECC 0890 C9840010 or byte ptr ds:[eax+100084C9],dl
10001ED2 40 inc eax
10001ED3 3BC1 cmp eax,ecx
10001ED5 ^ 76 F5 jbe short 驾校无纸.10001ECC
10001ED7 8A46 02 mov al,byte ptr ds:[esi+2]
10001EDA 83C6 02 add esi,2
10001EDD 84C0 test al,al
10001EDF ^ 75 D0 jnz short 驾校无纸.10001EB1
10001EE1 47 inc edi
10001EE2 83C5 08 add ebp,8
10001EE5 83FF 04 cmp edi,4
10001EE8 ^ 72 BE jb short 驾校无纸.10001EA8
10001EEA 8B4424 28 mov eax,dword ptr ss:[esp+28]
10001EEE C705 B0890010 0>mov dword ptr ds:[100089B0],1
10001EF8 50 push eax
10001EF9 A3 D0860010 mov dword ptr ds:[100086D0],eax
10001EFE E8 8D000000 call 驾校无纸.10001F90
10001F03 8B8B 44600010 mov ecx,dword ptr ds:[ebx+10006044]
10001F09 8B93 48600010 mov edx,dword ptr ds:[ebx+10006048]
10001F0F A3 D4860010 mov dword ptr ds:[100086D4],eax
10001F14 8D83 44600010 lea eax,dword ptr ds:[ebx+10006044]
10001F1A 83C4 04 add esp,4
10001F1D 890D D8860010 mov dword ptr ds:[100086D8],ecx
10001F23 8B40 08 mov eax,dword ptr ds:[eax+8]
10001F26 8915 DC860010 mov dword ptr ds:[100086DC],edx
10001F2C A3 E0860010 mov dword ptr ds:[100086E0],eax
10001F31 E8 FA000000 call 驾校无纸.10002030
10001F36 5F pop edi
10001F37 5E pop esi
10001F38 5D pop ebp
10001F39 33C0 xor eax,eax
10001F3B 5B pop ebx
10001F3C 83C4 14 add esp,14
10001F3F C3 retn
10001F40 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001F44 C705 E4860010 0>mov dword ptr ds:[100086E4],0
10001F4E 83F8 FE cmp eax,-2
10001F51 75 10 jnz short 驾校无纸.10001F63
10001F53 C705 E4860010 0>mov dword ptr ds:[100086E4],1
10001F5D - FF25 28500010 jmp dword ptr ds:[<&KERNEL32.GetOEMCP>] ; kernel32.GetOEMCP
10001F63 83F8 FD cmp eax,-3
10001F66 75 10 jnz short 驾校无纸.10001F78
10001F68 C705 E4860010 0>mov dword ptr ds:[100086E4],1
10001F72 - FF25 24500010 jmp dword ptr ds:[<&KERNEL32.GetACP>] ; kernel32.GetACP
10001F78 83F8 FC cmp eax,-4
10001F7B 75 0F jnz short 驾校无纸.10001F8C
10001F7D A1 08870010 mov eax,dword ptr ds:[10008708]
10001F82 C705 E4860010 0>mov dword ptr ds:[100086E4],1
10001F8C C3 retn
10001F8D 90 nop
10001F8E 90 nop
10001F8F 90 nop
10001F90 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001F94 05 5CFCFFFF add eax,-3A4
10001F99 83F8 12 cmp eax,12
10001F9C 77 27 ja short 驾校无纸.10001FC5
10001F9E 33C9 xor ecx,ecx
10001FA0 8A88 DC1F0010 mov cl,byte ptr ds:[eax+10001FDC]
10001FA6 FF248D C81F0010 jmp dword ptr ds:[ecx*4+10001FC8]
10001FAD B8 11040000 mov eax,411
10001FB2 C3 retn
10001FB3 B8 04080000 mov eax,804
10001FB8 C3 retn
10001FB9 B8 12040000 mov eax,412
10001FBE C3 retn
10001FBF B8 04040000 mov eax,404
10001FC4 C3 retn
10001FC5 33C0 xor eax,eax
10001FC7 C3 retn
10001FC8 AD lods dword ptr ds:[esi]
10001FC9 1F pop ds
10001FCA 0010 add byte ptr ds:[eax],dl
10001FCC B3 1F mov bl,1F
10001FCE 0010 add byte ptr ds:[eax],dl
10001FD0 B9 1F0010BF mov ecx,BF10001F
10001FD5 1F pop ds
10001FD6 0010 add byte ptr ds:[eax],dl
10001FD8 C51F lds ebx,fword ptr ds:[edi]
10001FDA 0010 add byte ptr ds:[eax],dl
10001FDC 000404 add byte ptr ss:[esp+eax],al
10001FDF 04 01 add al,1
10001FE1 04 04 add al,4
10001FE3 04 04 add al,4
10001FE5 04 04 add al,4
10001FE7 04 04 add al,4
10001FE9 04 04 add al,4
10001FEB 04 04 add al,4
10001FED 0203 add al,byte ptr ds:[ebx]
10001FEF 90 nop
10001FF0 57 push edi
10001FF1 B9 40000000 mov ecx,40
10001FF6 33C0 xor eax,eax
10001FF8 BF C8840010 mov edi,驾校无纸.100084C8
10001FFD F3:AB rep stos dword ptr es:[edi]
10001FFF AA stos byte ptr es:[edi]
10002000 33C0 xor eax,eax
10002002 5F pop edi
10002003 A3 D0860010 mov dword ptr ds:[100086D0],eax
10002008 A3 B0890010 mov dword ptr ds:[100089B0],eax
1000200D A3 D4860010 mov dword ptr ds:[100086D4],eax
10002012 A3 D8860010 mov dword ptr ds:[100086D8],eax
10002017 A3 DC860010 mov dword ptr ds:[100086DC],eax
1000201C A3 E0860010 mov dword ptr ds:[100086E0],eax
10002021 C3 retn
10002022 90 nop
10002023 90 nop
10002024 90 nop
10002025 90 nop
10002026 90 nop
10002027 90 nop
10002028 90 nop
10002029 90 nop
1000202A 90 nop
1000202B 90 nop
1000202C 90 nop
1000202D 90 nop
1000202E 90 nop
1000202F 90 nop
10002030 8B0D D0860010 mov ecx,dword ptr ds:[100086D0]
10002036 81EC 14050000 sub esp,514
1000203C 8D4424 00 lea eax,dword ptr ss:[esp]
10002040 53 push ebx
10002041 50 push eax
10002042 51 push ecx
10002043 FF15 0C500010 call dword ptr ds:[<&KERNEL32.GetCPInfo>] ; kernel32.GetCPInfo
10002049 83F8 01 cmp eax,1
1000204C 0F85 52010000 jnz 驾校无纸.100021A4
10002052 57 push edi
10002053 56 push esi
10002054 33C0 xor eax,eax
10002056 884404 20 mov byte ptr ss:[esp+eax+20],al
1000205A 40 inc eax
1000205B 3D 00010000 cmp eax,100
10002060 ^ 72 F4 jb short 驾校无纸.10002056
10002062 8A4424 12 mov al,byte ptr ss:[esp+12]
10002066 C64424 20 20 mov byte ptr ss:[esp+20],20
1000206B 84C0 test al,al
1000206D 74 35 je short 驾校无纸.100020A4
1000206F 8D5424 13 lea edx,dword ptr ss:[esp+13]
10002073 33C9 xor ecx,ecx
10002075 25 FF000000 and eax,0FF
1000207A 8A0A mov cl,byte ptr ds:[edx]
1000207C 3BC1 cmp eax,ecx
1000207E 77 1A ja short 驾校无纸.1000209A
10002080 2BC8 sub ecx,eax
10002082 8D7C04 20 lea edi,dword ptr ss:[esp+eax+20]
10002086 41 inc ecx
10002087 B8 20202020 mov eax,20202020
1000208C 8BF1 mov esi,ecx
1000208E C1E9 02 shr ecx,2
10002091 F3:AB rep stos dword ptr es:[edi]
10002093 8BCE mov ecx,esi
10002095 83E1 03 and ecx,3
10002098 F3:AA rep stos byte ptr es:[edi]
1000209A 8A42 01 mov al,byte ptr ds:[edx+1]
1000209D 83C2 02 add edx,2
100020A0 84C0 test al,al
100020A2 ^ 75 CF jnz short 驾校无纸.10002073
100020A4 8B15 D4860010 mov edx,dword ptr ds:[100086D4]
100020AA A1 D0860010 mov eax,dword ptr ds:[100086D0]
100020AF 6A 00 push 0
100020B1 52 push edx
100020B2 8D8C24 28030000 lea ecx,dword ptr ss:[esp+328]
100020B9 50 push eax
100020BA 51 push ecx
100020BB 8D5424 30 lea edx,dword ptr ss:[esp+30]
100020BF 68 00010000 push 100
100020C4 52 push edx
100020C5 6A 01 push 1
100020C7 E8 54120000 call 驾校无纸.10003320
100020CC A1 D0860010 mov eax,dword ptr ds:[100086D0]
100020D1 83C4 1C add esp,1C
100020D4 8D8C24 20010000 lea ecx,dword ptr ss:[esp+120]
100020DB 8D5424 20 lea edx,dword ptr ss:[esp+20]
100020DF 6A 00 push 0
100020E1 50 push eax
100020E2 A1 D4860010 mov eax,dword ptr ds:[100086D4]
100020E7 68 00010000 push 100
100020EC 51 push ecx
100020ED 68 00010000 push 100
100020F2 52 push edx
100020F3 68 00010000 push 100
100020F8 50 push eax
100020F9 E8 22010000 call 驾校无纸.10002220
100020FE 8B0D D0860010 mov ecx,dword ptr ds:[100086D0]
10002104 83C4 20 add esp,20
10002107 8D9424 20020000 lea edx,dword ptr ss:[esp+220]
1000210E 8D4424 20 lea eax,dword ptr ss:[esp+20]
10002112 6A 00 push 0
10002114 51 push ecx
10002115 8B0D D4860010 mov ecx,dword ptr ds:[100086D4]
1000211B 68 00010000 push 100
10002120 52 push edx
10002121 68 00010000 push 100
10002126 50 push eax
10002127 68 00020000 push 200
1000212C 51 push ecx
1000212D E8 EE000000 call 驾校无纸.10002220
10002132 83C4 20 add esp,20
10002135 33C0 xor eax,eax
10002137 8D9424 20030000 lea edx,dword ptr ss:[esp+320]
1000213E B3 10 mov bl,10
10002140 66:8B0A mov cx,word ptr ds:[edx]
10002143 F6C1 01 test cl,1
10002146 74 1D je short 驾校无纸.10002165
10002148 8A88 C9840010 mov cl,byte ptr ds:[eax+100084C9]
1000214E 0ACB or cl,bl
10002150 8888 C9840010 mov byte ptr ds:[eax+100084C9],cl
10002156 8A8C04 20010000 mov cl,byte ptr ss:[esp+eax+120]
1000215D 8888 D0850010 mov byte ptr ds:[eax+100085D0],cl
10002163 EB 2A jmp short 驾校无纸.1000218F
10002165 F6C1 02 test cl,2
10002168 74 1E je short 驾校无纸.10002188
1000216A 8A88 C9840010 mov cl,byte ptr ds:[eax+100084C9]
10002170 80C9 20 or cl,20
10002173 8888 C9840010 mov byte ptr ds:[eax+100084C9],cl
10002179 8A8C04 20020000 mov cl,byte ptr ss:[esp+eax+220]
10002180 8888 D0850010 mov byte ptr ds:[eax+100085D0],cl
10002186 EB 07 jmp short 驾校无纸.1000218F
10002188 C680 D0850010 0>mov byte ptr ds:[eax+100085D0],0
1000218F 40 inc eax
10002190 83C2 02 add edx,2
10002193 3D 00010000 cmp eax,100
10002198 ^ 72 A6 jb short 驾校无纸.10002140
1000219A 5E pop esi
1000219B 5F pop edi
1000219C 5B pop ebx
1000219D 81C4 14050000 add esp,514
100021A3 C3 retn
100021A4 33C0 xor eax,eax
100021A6 B3 10 mov bl,10
100021A8 83F8 41 cmp eax,41
100021AB 72 20 jb short 驾校无纸.100021CD
100021AD 83F8 5A cmp eax,5A
100021B0 77 1B ja short 驾校无纸.100021CD
100021B2 8A90 C9840010 mov dl,byte ptr ds:[eax+100084C9]
100021B8 0AD3 or dl,bl
100021BA 8890 C9840010 mov byte ptr ds:[eax+100084C9],dl
100021C0 8AD0 mov dl,al
100021C2 80C2 20 add dl,20
100021C5 8890 D0850010 mov byte ptr ds:[eax+100085D0],dl
100021CB EB 2D jmp short 驾校无纸.100021FA
100021CD 83F8 61 cmp eax,61
100021D0 72 21 jb short 驾校无纸.100021F3
100021D2 83F8 7A cmp eax,7A
100021D5 77 1C ja short 驾校无纸.100021F3
100021D7 8A88 C9840010 mov cl,byte ptr ds:[eax+100084C9]
100021DD 80C9 20 or cl,20
100021E0 8888 C9840010 mov byte ptr ds:[eax+100084C9],cl
100021E6 8AC8 mov cl,al
100021E8 80E9 20 sub cl,20
100021EB 8888 D0850010 mov byte ptr ds:[eax+100085D0],cl
100021F1 EB 07 jmp short 驾校无纸.100021FA
100021F3 C680 D0850010 0>mov byte ptr ds:[eax+100085D0],0
100021FA 40 inc eax
100021FB 3D 00010000 cmp eax,100
10002200 ^ 72 A6 jb short 驾校无纸.100021A8
10002202 5B pop ebx
10002203 81C4 14050000 add esp,514
10002209 C3 retn
1000220A 90 nop
1000220B 90 nop
1000220C 90 nop
1000220D 90 nop
1000220E 90 nop
1000220F 90 nop
10002210 6A FD push -3
10002212 E8 19FBFFFF call 驾校无纸.10001D30
10002217 83C4 04 add esp,4
1000221A C3 retn
1000221B 90 nop
1000221C 90 nop
1000221D 90 nop
1000221E 90 nop
1000221F 90 nop
10002220 A1 EC860010 mov eax,dword ptr ds:[100086EC]
10002225 53 push ebx
10002226 8B1D 34500010 mov ebx,dword ptr ds:[<&KERNEL32.LCMapStringA>] ; kernel32.LCMapStringA
1000222C 55 push ebp
1000222D 56 push esi
1000222E 57 push edi
1000222F 85C0 test eax,eax
10002231 75 49 jnz short 驾校无纸.1000227C
10002233 6A 00 push 0
10002235 6A 00 push 0
10002237 6A 01 push 1
10002239 68 B0500010 push 驾校无纸.100050B0
1000223E 68 00010000 push 100
10002243 6A 00 push 0
10002245 FF15 38500010 call dword ptr ds:[<&KERNEL32.LCMapStringW>] ; kernel32.LCMapStringW
1000224B 85C0 test eax,eax
1000224D 74 07 je short 驾校无纸.10002256
1000224F B8 01000000 mov eax,1
10002254 EB 21 jmp short 驾校无纸.10002277
10002256 6A 00 push 0
10002258 6A 00 push 0
1000225A 6A 01 push 1
1000225C 68 AC500010 push 驾校无纸.100050AC
10002261 68 00010000 push 100
10002266 6A 00 push 0
10002268 FFD3 call ebx
1000226A 85C0 test eax,eax
1000226C 0F84 CC010000 je 驾校无纸.1000243E
10002272 B8 02000000 mov eax,2
10002277 A3 EC860010 mov dword ptr ds:[100086EC],eax
1000227C 8B7424 20 mov esi,dword ptr ss:[esp+20]
10002280 85F6 test esi,esi
10002282 7E 17 jle short 驾校无纸.1000229B
10002284 8B7C24 1C mov edi,dword ptr ss:[esp+1C]
10002288 56 push esi
10002289 57 push edi
1000228A E8 C1010000 call 驾校无纸.10002450
1000228F 8BF0 mov esi,eax
10002291 A1 EC860010 mov eax,dword ptr ds:[100086EC]
10002296 83C4 08 add esp,8
10002299 EB 04 jmp short 驾校无纸.1000229F
1000229B 8B7C24 1C mov edi,dword ptr ss:[esp+1C]
1000229F 83F8 02 cmp eax,2
100022A2 75 1D jnz short 驾校无纸.100022C1
100022A4 8B4424 28 mov eax,dword ptr ss:[esp+28]
100022A8 8B4C24 24 mov ecx,dword ptr ss:[esp+24]
100022AC 8B5424 18 mov edx,dword ptr ss:[esp+18]
100022B0 50 push eax
100022B1 8B4424 18 mov eax,dword ptr ss:[esp+18]
100022B5 51 push ecx
100022B6 56 push esi
100022B7 57 push edi
100022B8 52 push edx
100022B9 50 push eax
100022BA FFD3 call ebx
100022BC 5F pop edi
100022BD 5E pop esi
100022BE 5D pop ebp
100022BF 5B pop ebx
100022C0 C3 retn
100022C1 83F8 01 cmp eax,1
100022C4 0F85 DD000000 jnz 驾校无纸.100023A7
100022CA 8B6C24 2C mov ebp,dword ptr ss:[esp+2C]
100022CE C74424 20 00000>mov dword ptr ss:[esp+20],0
100022D6 85ED test ebp,ebp
100022D8 75 0C jnz short 驾校无纸.100022E6
100022DA 8B0D 08870010 mov ecx,dword ptr ds:[10008708]
100022E0 894C24 2C mov dword ptr ss:[esp+2C],ecx
100022E4 8BE9 mov ebp,ecx
100022E6 8B5424 30 mov edx,dword ptr ss:[esp+30]
100022EA 6A 00 push 0
100022EC F7DA neg edx
100022EE 1BD2 sbb edx,edx
100022F0 6A 00 push 0
100022F2 83E2 08 and edx,8
100022F5 56 push esi
100022F6 42 inc edx
100022F7 57 push edi
100022F8 52 push edx
100022F9 55 push ebp
100022FA FF15 2C500010 call dword ptr ds:[<&KERNEL32.MultiByteToWideChar>] ; kernel32.MultiByteToWideChar
10002300 8BF8 mov edi,eax
10002302 85FF test edi,edi
10002304 75 05 jnz short 驾校无纸.1000230B
10002306 5F pop edi
10002307 5E pop esi
10002308 5D pop ebp
10002309 5B pop ebx
1000230A C3 retn
1000230B 8D043F lea eax,dword ptr ds:[edi+edi]
1000230E 50 push eax
1000230F E8 9C120000 call 驾校无纸.100035B0
10002314 8BD8 mov ebx,eax
10002316 83C4 04 add esp,4
10002319 85DB test ebx,ebx
1000231B 75 05 jnz short 驾校无纸.10002322
1000231D 5F pop edi
1000231E 5E pop esi
1000231F 5D pop ebp
10002320 5B pop ebx
10002321 C3 retn
10002322 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
10002326 57 push edi
10002327 53 push ebx
10002328 56 push esi
10002329 51 push ecx
1000232A 6A 01 push 1
1000232C 55 push ebp
1000232D FF15 2C500010 call dword ptr ds:[<&KERNEL32.MultiByteToWideChar>] ; kernel32.MultiByteToWideChar
10002333 85C0 test eax,eax
10002335 0F84 ED000000 je 驾校无纸.10002428
1000233B 8B6C24 18 mov ebp,dword ptr ss:[esp+18]
1000233F 8B5424 14 mov edx,dword ptr ss:[esp+14]
10002343 6A 00 push 0
10002345 6A 00 push 0
10002347 57 push edi
10002348 53 push ebx
10002349 55 push ebp
1000234A 52 push edx
1000234B FF15 38500010 call dword ptr ds:[<&KERNEL32.LCMapStringW>] ; kernel32.LCMapStringW
10002351 8BF0 mov esi,eax
10002353 85F6 test esi,esi
10002355 0F84 CD000000 je 驾校无纸.10002428
1000235B F7C5 00040000 test ebp,400
10002361 74 49 je short 驾校无纸.100023AC
10002363 8B4424 28 mov eax,dword ptr ss:[esp+28]
10002367 85C0 test eax,eax
10002369 74 24 je short 驾校无纸.1000238F
1000236B 3BF0 cmp esi,eax
1000236D 0F8F B5000000 jg 驾校无纸.10002428
10002373 8B4C24 14 mov ecx,dword ptr ss:[esp+14]
10002377 50 push eax
10002378 8B4424 28 mov eax,dword ptr ss:[esp+28]
1000237C 50 push eax
1000237D 57 push edi
1000237E 53 push ebx
1000237F 55 push ebp
10002380 51 push ecx
10002381 FF15 38500010 call dword ptr ds:[<&KERNEL32.LCMapStringW>] ; kernel32.LCMapStringW
10002387 85C0 test eax,eax
10002389 0F84 99000000 je 驾校无纸.10002428
1000238F 53 push ebx
10002390 E8 CB100000 call 驾校无纸.10003460
10002395 8B5424 24 mov edx,dword ptr ss:[esp+24]
10002399 83C4 04 add esp,4
1000239C 52 push edx
1000239D E8 BE100000 call 驾校无纸.10003460
100023A2 83C4 04 add esp,4
100023A5 8BC6 mov eax,esi
100023A7 5F pop edi
100023A8 5E pop esi
100023A9 5D pop ebp
100023AA 5B pop ebx
100023AB C3 retn
100023AC 8D1436 lea edx,dword ptr ds:[esi+esi]
100023AF 52 push edx
100023B0 E8 FB110000 call 驾校无纸.100035B0
100023B5 83C4 04 add esp,4
100023B8 894424 20 mov dword ptr ss:[esp+20],eax
100023BC 85C0 test eax,eax
100023BE 74 68 je short 驾校无纸.10002428
100023C0 8B4C24 14 mov ecx,dword ptr ss:[esp+14]
100023C4 56 push esi
100023C5 50 push eax
100023C6 57 push edi
100023C7 53 push ebx
100023C8 55 push ebp
100023C9 51 push ecx
100023CA FF15 38500010 call dword ptr ds:[<&KERNEL32.LCMapStringW>] ; kernel32.LCMapStringW
100023D0 85C0 test eax,eax
100023D2 74 54 je short 驾校无纸.10002428
100023D4 8B4424 28 mov eax,dword ptr ss:[esp+28]
100023D8 6A 00 push 0
100023DA 85C0 test eax,eax
100023DC 6A 00 push 0
100023DE 75 22 jnz short 驾校无纸.10002402
100023E0 8B5424 28 mov edx,dword ptr ss:[esp+28]
100023E4 8B4424 34 mov eax,dword ptr ss:[esp+34]
100023E8 6A 00 push 0
100023EA 6A 00 push 0
100023EC 56 push esi
100023ED 52 push edx
100023EE 68 20020000 push 220
100023F3 50 push eax
100023F4 FF15 30500010 call dword ptr ds:[<&KERNEL32.WideCharToMultiByte>] ; kernel32.WideCharToMultiByte
100023FA 8BF0 mov esi,eax
100023FC 85F6 test esi,esi
100023FE 74 28 je short 驾校无纸.10002428
10002400 ^ EB 8D jmp short 驾校无纸.1000238F
10002402 8B4C24 2C mov ecx,dword ptr ss:[esp+2C]
10002406 8B5424 28 mov edx,dword ptr ss:[esp+28]
1000240A 50 push eax
1000240B 8B4424 38 mov eax,dword ptr ss:[esp+38]
1000240F 51 push ecx
10002410 56 push esi
10002411 52 push edx
10002412 68 20020000 push 220
10002417 50 push eax
10002418 FF15 30500010 call dword ptr ds:[<&KERNEL32.WideCharToMultiByte>] ; kernel32.WideCharToMultiByte
1000241E 8BF0 mov esi,eax
10002420 85F6 test esi,esi
10002422 ^ 0F85 67FFFFFF jnz 驾校无纸.1000238F
10002428 53 push ebx
10002429 E8 32100000 call 驾校无纸.10003460
1000242E 8B4C24 24 mov ecx,dword ptr ss:[esp+24]
10002432 83C4 04 add esp,4
10002435 51 push ecx
10002436 E8 25100000 call 驾校无纸.10003460
1000243B 83C4 04 add esp,4
1000243E 5F pop edi
1000243F 5E pop esi
10002440 5D pop ebp
10002441 33C0 xor eax,eax
10002443 5B pop ebx
10002444 C3 retn
10002445 90 nop
10002446 90 nop
10002447 90 nop
10002448 90 nop
10002449 90 nop
1000244A 90 nop
1000244B 90 nop
1000244C 90 nop
1000244D 90 nop
1000244E 90 nop
1000244F 90 nop
10002450 8B5424 08 mov edx,dword ptr ss:[esp+8]
10002454 56 push esi
10002455 8B7424 08 mov esi,dword ptr ss:[esp+8]
10002459 85D2 test edx,edx
1000245B 57 push edi
1000245C 8BC6 mov eax,esi
1000245E 8D4A FF lea ecx,dword ptr ds:[edx-1]
10002461 74 0D je short 驾校无纸.10002470
10002463 8038 00 cmp byte ptr ds:[eax],0
10002466 74 08 je short 驾校无纸.10002470
10002468 40 inc eax
10002469 8BF9 mov edi,ecx
1000246B 49 dec ecx
1000246C 85FF test edi,edi
1000246E ^ 75 F3 jnz short 驾校无纸.10002463
10002470 8038 00 cmp byte ptr ds:[eax],0
10002473 75 05 jnz short 驾校无纸.1000247A
10002475 2BC6 sub eax,esi
10002477 5F pop edi
10002478 5E pop esi
10002479 C3 retn
1000247A 5F pop edi
1000247B 5E pop esi
1000247C 8BC2 mov eax,edx
1000247E C3 retn
1000247F 90 nop
10002480 51 push ecx
10002481 8B4C24 08 mov ecx,dword ptr ss:[esp+8]
10002485 56 push esi
10002486 8D41 01 lea eax,dword ptr ds:[ecx+1]
10002489 3D 00010000 cmp eax,100
1000248E 77 15 ja short 驾校无纸.100024A5
10002490 8B15 30610010 mov edx,dword ptr ds:[10006130] ; 驾校无纸.1000613A
10002496 33C0 xor eax,eax
10002498 66:8B044A mov ax,word ptr ds:[edx+ecx*2]
1000249C 8B4C24 10 mov ecx,dword ptr ss:[esp+10]
100024A0 23C1 and eax,ecx
100024A2 5E pop esi
100024A3 59 pop ecx
100024A4 C3 retn
100024A5 8B35 30610010 mov esi,dword ptr ds:[10006130] ; 驾校无纸.1000613A
100024AB 8BC1 mov eax,ecx
100024AD C1F8 08 sar eax,8
100024B0 8BD0 mov edx,eax
100024B2 81E2 FF000000 and edx,0FF
100024B8 F64456 01 80 test byte ptr ds:[esi+edx*2+1],80
100024BD 74 14 je short 驾校无纸.100024D3
100024BF 884424 0C mov byte ptr ss:[esp+C],al
100024C3 884C24 0D mov byte ptr ss:[esp+D],cl
100024C7 C64424 0E 00 mov byte ptr ss:[esp+E],0
100024CC B8 02000000 mov eax,2
100024D1 EB 0E jmp short 驾校无纸.100024E1
100024D3 884C24 0C mov byte ptr ss:[esp+C],cl
100024D7 C64424 0D 00 mov byte ptr ss:[esp+D],0
100024DC B8 01000000 mov eax,1
100024E1 6A 01 push 1
100024E3 6A 00 push 0
100024E5 8D4C24 0C lea ecx,dword ptr ss:[esp+C]
100024E9 6A 00 push 0
100024EB 51 push ecx
100024EC 8D5424 1C lea edx,dword ptr ss:[esp+1C]
100024F0 50 push eax
100024F1 52 push edx
100024F2 6A 01 push 1
100024F4 E8 270E0000 call 驾校无纸.10003320
100024F9 83C4 1C add esp,1C
100024FC 85C0 test eax,eax
100024FE 75 03 jnz short 驾校无纸.10002503
10002500 5E pop esi
10002501 59 pop ecx
10002502 C3 retn
10002503 8B4424 04 mov eax,dword ptr ss:[esp+4]
10002507 8B4C24 10 mov ecx,dword ptr ss:[esp+10]
1000250B 25 FFFF0000 and eax,0FFFF
10002510 5E pop esi
10002511 23C1 and eax,ecx
10002513 59 pop ecx
10002514 C3 retn
10002515 90 nop
10002516 90 nop
10002517 90 nop
10002518 90 nop
10002519 90 nop
1000251A 90 nop
1000251B 90 nop
1000251C 90 nop
1000251D 90 nop
1000251E 90 nop
1000251F 90 nop
10002520 A1 AC890010 mov eax,dword ptr ds:[100089AC]
10002525 85C0 test eax,eax
10002527 74 02 je short 驾校无纸.1000252B
10002529 FFD0 call eax
1000252B 68 10600010 push 驾校无纸.10006010
10002530 68 0C600010 push 驾校无纸.1000600C
10002535 E8 06010000 call 驾校无纸.10002640
1000253A 83C4 08 add esp,8
1000253D 68 08600010 push 驾校无纸.10006008
10002542 68 00600010 push 驾校无纸.10006000
10002547 E8 F4000000 call 驾校无纸.10002640
1000254C 83C4 08 add esp,8
1000254F C3 retn
10002550 8B4424 04 mov eax,dword ptr ss:[esp+4]
10002554 6A 00 push 0
10002556 6A 00 push 0
10002558 50 push eax
10002559 E8 32000000 call 驾校无纸.10002590
1000255E 83C4 0C add esp,0C
10002561 C3 retn
10002562 90 nop
10002563 90 nop
10002564 90 nop
10002565 90 nop
10002566 90 nop
10002567 90 nop
10002568 90 nop
10002569 90 nop
1000256A 90 nop
1000256B 90 nop
1000256C 90 nop
1000256D 90 nop
1000256E 90 nop
1000256F 90 nop
10002570 8B4424 04 mov eax,dword ptr ss:[esp+4]
10002574 6A 00 push 0
10002576 6A 01 push 1
10002578 50 push eax
10002579 E8 12000000 call 驾校无纸.10002590
1000257E 83C4 0C add esp,0C
10002581 C3 retn
10002582 90 nop
10002583 90 nop
10002584 90 nop
10002585 90 nop
10002586 90 nop
10002587 90 nop
10002588 90 nop
10002589 90 nop
1000258A 90 nop
1000258B 90 nop
1000258C 90 nop
1000258D 90 nop
1000258E 90 nop
1000258F 90 nop
10002590 A1 54870010 mov eax,dword ptr ds:[10008754]
10002595 53 push ebx
10002596 55 push ebp
10002597 8B6C24 0C mov ebp,dword ptr ss:[esp+C]
1000259B 83F8 01 cmp eax,1
1000259E 56 push esi
1000259F 75 0E jnz short 驾校无纸.100025AF
100025A1 55 push ebp
100025A2 FF15 40500010 call dword ptr ds:[<&KERNEL32.GetCurrentProcess>] ; kernel32.GetCurrentProcess
100025A8 50 push eax
100025A9 FF15 3C500010 call dword ptr ds:[<&KERNEL32.TerminateProcess>] ; kernel32.TerminateProcess
100025AF 8B4424 14 mov eax,dword ptr ss:[esp+14]
100025B3 8B5C24 18 mov ebx,dword ptr ss:[esp+18]
100025B7 85C0 test eax,eax
100025B9 C705 50870010 0>mov dword ptr ds:[10008750],1
100025C3 881D 4C870010 mov byte ptr ds:[1000874C],bl
100025C9 75 3E jnz short 驾校无纸.10002609
100025CB 8B0D A8890010 mov ecx,dword ptr ds:[100089A8]
100025D1 85C9 test ecx,ecx
100025D3 74 22 je short 驾校无纸.100025F7
100025D5 8B35 A4890010 mov esi,dword ptr ds:[100089A4]
100025DB 83EE 04 sub esi,4
100025DE 3BF1 cmp esi,ecx
100025E0 72 15 jb short 驾校无纸.100025F7
100025E2 8B06 mov eax,dword ptr ds:[esi]
100025E4 85C0 test eax,eax
100025E6 74 08 je short 驾校无纸.100025F0
100025E8 FFD0 call eax
100025EA 8B0D A8890010 mov ecx,dword ptr ds:[100089A8]
100025F0 83EE 04 sub esi,4
100025F3 3BF1 cmp esi,ecx
100025F5 ^ 73 EB jnb short 驾校无纸.100025E2
100025F7 68 18600010 push 驾校无纸.10006018
100025FC 68 14600010 push 驾校无纸.10006014
10002601 E8 3A000000 call 驾校无纸.10002640
10002606 83C4 08 add esp,8
10002609 68 20600010 push 驾校无纸.10006020
1000260E 68 1C600010 push 驾校无纸.1000601C
10002613 E8 28000000 call 驾校无纸.10002640
10002618 83C4 08 add esp,8
1000261B 85DB test ebx,ebx
1000261D 75 11 jnz short 驾校无纸.10002630
1000261F 55 push ebp
10002620 C705 54870010 0>mov dword ptr ds:[10008754],1
1000262A FF15 20500010 call dword ptr ds:[<&KERNEL32.ExitProcess>] ; kernel32.ExitProcess
10002630 5E pop esi
10002631 5D pop ebp
10002632 5B pop ebx
10002633 C3 retn
10002634 90 nop
10002635 90 nop
10002636 90 nop
10002637 90 nop
10002638 90 nop
10002639 90 nop
1000263A 90 nop
1000263B 90 nop
1000263C 90 nop
1000263D 90 nop
1000263E 90 nop
1000263F 90 nop
10002640 56 push esi
10002641 8B7424 08 mov esi,dword ptr ss:[esp+8]
10002645 57 push edi
10002646 8B7C24 10 mov edi,dword ptr ss:[esp+10]
1000264A 3BF7 cmp esi,edi
1000264C 73 0F jnb short 驾校无纸.1000265D
1000264E 8B06 mov eax,dword ptr ds:[esi]
10002650 85C0 test eax,eax
10002652 74 02 je short 驾校无纸.10002656
10002654 FFD0 call eax
10002656 83C6 04 add esi,4
10002659 3BF7 cmp esi,edi
1000265B ^ 72 F1 jb short 驾校无纸.1000264E
1000265D 5F pop edi
1000265E 5E pop esi
1000265F C3 retn
10002660 8B4424 04 mov eax,dword ptr ss:[esp+4]
10002664 53 push ebx
10002665 55 push ebp
10002666 56 push esi
10002667 50 push eax
10002668 E8 33010000 call 驾校无纸.100027A0
1000266D 83C4 04 add esp,4
10002670 85C0 test eax,eax
10002672 0F84 17010000 je 驾校无纸.1000278F
10002678 8B58 08 mov ebx,dword ptr ds:[eax+8]
1000267B 85DB test ebx,ebx
1000267D 0F84 0C010000 je 驾校无纸.1000278F
10002683 83FB 05 cmp ebx,5
10002686 75 10 jnz short 驾校无纸.10002698
10002688 C740 08 0000000>mov dword ptr ds:[eax+8],0
1000268F B8 01000000 mov eax,1
10002694 5E pop esi
10002695 5D pop ebp
10002696 5B pop ebx
10002697 C3 retn
10002698 83FB 01 cmp ebx,1
1000269B 75 07 jnz short 驾校无纸.100026A4
1000269D 83C8 FF or eax,FFFFFFFF
100026A0 5E pop esi
100026A1 5D pop ebp
100026A2 5B pop ebx
100026A3 C3 retn
100026A4 8B4C24 14 mov ecx,dword ptr ss:[esp+14]
100026A8 8B2D 58870010 mov ebp,dword ptr ds:[10008758]
100026AE 890D 58870010 mov dword ptr ds:[10008758],ecx
100026B4 8B48 04 mov ecx,dword ptr ds:[eax+4]
100026B7 83F9 08 cmp ecx,8
100026BA 0F85 B5000000 jnz 驾校无纸.10002775
100026C0 8B35 C0630010 mov esi,dword ptr ds:[100063C0]
100026C6 8B15 C4630010 mov edx,dword ptr ds:[100063C4]
100026CC 03D6 add edx,esi
100026CE 3BF2 cmp esi,edx
100026D0 7D 18 jge short 驾校无纸.100026EA
100026D2 8D0C76 lea ecx,dword ptr ds:[esi+esi*2]
100026D5 2BD6 sub edx,esi
100026D7 8D0C8D 50630010 lea ecx,dword ptr ds:[ecx*4+10006350]
100026DE C701 00000000 mov dword ptr ds:[ecx],0
100026E4 83C1 0C add ecx,0C
100026E7 4A dec edx
100026E8 ^ 75 F4 jnz short 驾校无纸.100026DE
100026EA 8B00 mov eax,dword ptr ds:[eax]
100026EC 8B0D CC630010 mov ecx,dword ptr ds:[100063CC]
100026F2 3D 8E0000C0 cmp eax,C000008E
100026F7 8BF1 mov esi,ecx
100026F9 75 07 jnz short 驾校无纸.10002702
100026FB B9 83000000 mov ecx,83
10002700 EB 52 jmp short 驾校无纸.10002754
10002702 3D 900000C0 cmp eax,C0000090
10002707 75 07 jnz short 驾校无纸.10002710
10002709 B9 81000000 mov ecx,81
1000270E EB 44 jmp short 驾校无纸.10002754
10002710 3D 910000C0 cmp eax,C0000091
10002715 75 07 jnz short 驾校无纸.1000271E
10002717 B9 84000000 mov ecx,84
1000271C EB 36 jmp short 驾校无纸.10002754
1000271E 3D 930000C0 cmp eax,C0000093
10002723 75 07 jnz short 驾校无纸.1000272C
10002725 B9 85000000 mov ecx,85
1000272A EB 28 jmp short 驾校无纸.10002754
1000272C 3D 8D0000C0 cmp eax,C000008D
10002731 75 07 jnz short 驾校无纸.1000273A
10002733 B9 82000000 mov ecx,82
10002738 EB 1A jmp short 驾校无纸.10002754
1000273A 3D 8F0000C0 cmp eax,C000008F
1000273F 75 07 jnz short 驾校无纸.10002748
10002741 B9 86000000 mov ecx,86
10002746 EB 0C jmp short 驾校无纸.10002754
10002748 3D 920000C0 cmp eax,C0000092
1000274D 75 0B jnz short 驾校无纸.1000275A
1000274F B9 8A000000 mov ecx,8A
10002754 890D CC630010 mov dword ptr ds:[100063CC],ecx
1000275A 51 push ecx
1000275B 6A 08 push 8
1000275D FFD3 call ebx
1000275F 83C4 08 add esp,8
10002762 8935 CC630010 mov dword ptr ds:[100063CC],esi
10002768 892D 58870010 mov dword ptr ds:[10008758],ebp
1000276E 83C8 FF or eax,FFFFFFFF
10002771 5E pop esi
10002772 5D pop ebp
10002773 5B pop ebx
10002774 C3 retn
10002775 51 push ecx
10002776 C740 08 0000000>mov dword ptr ds:[eax+8],0
1000277D FFD3 call ebx
1000277F 83C4 04 add esp,4
10002782 892D 58870010 mov dword ptr ds:[10008758],ebp
10002788 83C8 FF or eax,FFFFFFFF
1000278B 5E pop esi
1000278C 5D pop ebp
1000278D 5B pop ebx
1000278E C3 retn
1000278F 8B5424 14 mov edx,dword ptr ss:[esp+14]
10002793 52 push edx
10002794 FF15 44500010 call dword ptr ds:[<&KERNEL32.UnhandledExceptionFilt>; kernel32.UnhandledExceptionFilter
1000279A 5E pop esi
1000279B 5D pop ebp
1000279C 5B pop ebx
1000279D C3 retn
1000279E 90 nop
1000279F 90 nop
100027A0 8B5424 04 mov edx,dword ptr ss:[esp+4]
100027A4 8B0D 48630010 mov ecx,dword ptr ds:[10006348]
100027AA 56 push esi
100027AB 8B35 C8630010 mov esi,dword ptr ds:[100063C8]
100027B1 3BCA cmp ecx,edx
100027B3 B8 48630010 mov eax,驾校无纸.10006348
100027B8 74 15 je short 驾校无纸.100027CF
100027BA 8D0C76 lea ecx,dword ptr ds:[esi+esi*2]
100027BD 8D0C8D 48630010 lea ecx,dword ptr ds:[ecx*4+10006348]
100027C4 83C0 0C add eax,0C
100027C7 3BC1 cmp eax,ecx
100027C9 73 04 jnb short 驾校无纸.100027CF
100027CB 3910 cmp dword ptr ds:[eax],edx
100027CD ^ 75 F5 jnz short 驾校无纸.100027C4
100027CF 8D0C76 lea ecx,dword ptr ds:[esi+esi*2]
100027D2 8D0C8D 48630010 lea ecx,dword ptr ds:[ecx*4+10006348]
100027D9 3BC1 cmp eax,ecx
100027DB 73 04 jnb short 驾校无纸.100027E1
100027DD 3910 cmp dword ptr ds:[eax],edx
100027DF 74 02 je short 驾校无纸.100027E3
100027E1 33C0 xor eax,eax
100027E3 5E pop esi
100027E4 C3 retn
100027E5 90 nop
100027E6 90 nop
100027E7 90 nop
100027E8 90 nop
100027E9 90 nop
100027EA 90 nop
100027EB 90 nop
100027EC 90 nop
100027ED 90 nop
100027EE 90 nop
100027EF 90 nop
100027F0 51 push ecx
100027F1 8B15 BC840010 mov edx,dword ptr ds:[100084BC]
100027F7 53 push ebx
100027F8 55 push ebp
100027F9 56 push esi
100027FA 8A02 mov al,byte ptr ds:[edx]
100027FC 33F6 xor esi,esi
100027FE 84C0 test al,al
10002800 57 push edi
10002801 74 1D je short 驾校无纸.10002820
10002803 3C 3D cmp al,3D
10002805 74 01 je short 驾校无纸.10002808
10002807 46 inc esi
10002808 8BFA mov edi,edx
1000280A 83C9 FF or ecx,FFFFFFFF
1000280D 33C0 xor eax,eax
1000280F F2:AE repne scas byte ptr es:[edi]
10002811 F7D1 not ecx
10002813 49 dec ecx
10002814 8A440A 01 mov al,byte ptr ds:[edx+ecx+1]
10002818 8D540A 01 lea edx,dword ptr ds:[edx+ecx+1]
1000281C 84C0 test al,al
1000281E ^ 75 E3 jnz short 驾校无纸.10002803
10002820 8D04B5 04000000 lea eax,dword ptr ds:[esi*4+4]
10002827 50 push eax
10002828 E8 830D0000 call 驾校无纸.100035B0
1000282D 8BF0 mov esi,eax
1000282F 83C4 04 add esp,4
10002832 85F6 test esi,esi
10002834 897424 10 mov dword ptr ss:[esp+10],esi
10002838 8935 34870010 mov dword ptr ds:[10008734],esi
1000283E 75 0A jnz short 驾校无纸.1000284A
10002840 6A 09 push 9
10002842 E8 89F4FFFF call 驾校无纸.10001CD0
10002847 83C4 04 add esp,4
1000284A 8B2D BC840010 mov ebp,dword ptr ds:[100084BC]
10002850 8A55 00 mov dl,byte ptr ss:[ebp]
10002853 84D2 test dl,dl
10002855 74 63 je short 驾校无纸.100028BA
10002857 8BFD mov edi,ebp
10002859 83C9 FF or ecx,FFFFFFFF
1000285C 33C0 xor eax,eax
1000285E F2:AE repne scas byte ptr es:[edi]
10002860 F7D1 not ecx
10002862 49 dec ecx
10002863 8BD9 mov ebx,ecx
10002865 43 inc ebx
10002866 80FA 3D cmp dl,3D
10002869 74 45 je short 驾校无纸.100028B0
1000286B 53 push ebx
1000286C E8 3F0D0000 call 驾校无纸.100035B0
10002871 83C4 04 add esp,4
10002874 8906 mov dword ptr ds:[esi],eax
10002876 85C0 test eax,eax
10002878 75 0A jnz short 驾校无纸.10002884
1000287A 6A 09 push 9
1000287C E8 4FF4FFFF call 驾校无纸.10001CD0
10002881 83C4 04 add esp,4
10002884 8BFD mov edi,ebp
10002886 83C9 FF or ecx,FFFFFFFF
10002889 33C0 xor eax,eax
1000288B F2:AE repne scas byte ptr es:[edi]
1000288D 8B4424 10 mov eax,dword ptr ss:[esp+10]
10002891 F7D1 not ecx
10002893 2BF9 sub edi,ecx
10002895 8BD1 mov edx,ecx
10002897 8BF7 mov esi,edi
10002899 8B38 mov edi,dword ptr ds:[eax]
1000289B C1E9 02 shr ecx,2
1000289E F3:A5 rep movs dword ptr es:[edi],dword ptr ds:[esi]
100028A0 8BCA mov ecx,edx
100028A2 83E1 03 and ecx,3
100028A5 83C0 04 add eax,4
100028A8 F3:A4 rep movs byte ptr es:[edi],byte ptr ds:[esi]
100028AA 894424 10 mov dword ptr ss:[esp+10],eax
100028AE 8BF0 mov esi,eax
100028B0 8A541D 00 mov dl,byte ptr ss:[ebp+ebx]
100028B4 03EB add ebp,ebx
100028B6 84D2 test dl,dl
100028B8 ^ 75 9D jnz short 驾校无纸.10002857
100028BA A1 BC840010 mov eax,dword ptr ds:[100084BC]
100028BF 50 push eax
100028C0 E8 9B0B0000 call 驾校无纸.10003460
100028C5 83C4 04 add esp,4
100028C8 C705 BC840010 0>mov dword ptr ds:[100084BC],0
100028D2 C706 00000000 mov dword ptr ds:[esi],0
100028D8 5F pop edi
100028D9 5E pop esi
100028DA 5D pop ebp
100028DB 5B pop ebx
100028DC 59 pop ecx
100028DD C3 retn
100028DE 90 nop
100028DF 90 nop
100028E0 83EC 08 sub esp,8
100028E3 56 push esi
100028E4 57 push edi
100028E5 68 04010000 push 104
100028EA 68 60870010 push 驾校无纸.10008760
100028EF 6A 00 push 0
100028F1 FF15 48500010 call dword ptr ds:[<&KERNEL32.GetModuleFileNameA>] ; kernel32.GetModuleFileNameA
100028F7 8B3D B4890010 mov edi,dword ptr ds:[100089B4]
100028FD C705 44870010 6>mov dword ptr ds:[10008744],驾校无纸.10008760
10002907 803F 00 cmp byte ptr ds:[edi],0
1000290A 75 05 jnz short 驾校无纸.10002911
1000290C BF 60870010 mov edi,驾校无纸.10008760
10002911 8D4424 0C lea eax,dword ptr ss:[esp+C]
10002915 8D4C24 08 lea ecx,dword ptr ss:[esp+8]
10002919 50 push eax
1000291A 51 push ecx
1000291B 6A 00 push 0
1000291D 6A 00 push 0
1000291F 57 push edi
10002920 E8 5B000000 call 驾校无纸.10002980
10002925 8B5424 20 mov edx,dword ptr ss:[esp+20]
10002929 8B4424 1C mov eax,dword ptr ss:[esp+1C]
1000292D 83C4 14 add esp,14
10002930 8D0C82 lea ecx,dword ptr ds:[edx+eax*4]
10002933 51 push ecx
10002934 E8 770C0000 call 驾校无纸.100035B0
10002939 8BF0 mov esi,eax
1000293B 83C4 04 add esp,4
1000293E 85F6 test esi,esi
10002940 75 0A jnz short 驾校无纸.1000294C
10002942 6A 08 push 8
10002944 E8 87F3FFFF call 驾校无纸.10001CD0
10002949 83C4 04 add esp,4
1000294C 8B4C24 08 mov ecx,dword ptr ss:[esp+8]
10002950 8D5424 0C lea edx,dword ptr ss:[esp+C]
10002954 52 push edx
10002955 8D4424 0C lea eax,dword ptr ss:[esp+C]
10002959 8D148E lea edx,dword ptr ds:[esi+ecx*4]
1000295C 50 push eax
1000295D 52 push edx
1000295E 56 push esi
1000295F 57 push edi
10002960 E8 1B000000 call 驾校无纸.10002980
10002965 8B4424 1C mov eax,dword ptr ss:[esp+1C]
10002969 83C4 14 add esp,14
1000296C 48 dec eax
1000296D 8935 2C870010 mov dword ptr ds:[1000872C],esi
10002973 5F pop edi
10002974 A3 28870010 mov dword ptr ds:[10008728],eax
10002979 5E pop esi
1000297A 83C4 08 add esp,8
1000297D C3 retn
1000297E 90 nop
1000297F 90 nop
10002980 8B4424 10 mov eax,dword ptr ss:[esp+10]
10002984 53 push ebx
10002985 55 push ebp
10002986 8B6C24 10 mov ebp,dword ptr ss:[esp+10]
1000298A 56 push esi
1000298B 8B7424 18 mov esi,dword ptr ss:[esp+18]
1000298F 57 push edi
10002990 8B7C24 24 mov edi,dword ptr ss:[esp+24]
10002994 85ED test ebp,ebp
10002996 C707 00000000 mov dword ptr ds:[edi],0
1000299C C700 01000000 mov dword ptr ds:[eax],1
100029A2 8B4424 14 mov eax,dword ptr ss:[esp+14]
100029A6 BB 04000000 mov ebx,4
100029AB 74 09 je short 驾校无纸.100029B6
100029AD 8975 00 mov dword ptr ss:[ebp],esi
100029B0 03EB add ebp,ebx
100029B2 896C24 18 mov dword ptr ss:[esp+18],ebp
100029B6 8038 22 cmp byte ptr ds:[eax],22
100029B9 75 56 jnz short 驾校无纸.10002A11
100029BB 8A48 01 mov cl,byte ptr ds:[eax+1]
100029BE 40 inc eax
100029BF 80F9 22 cmp cl,22
100029C2 74 38 je short 驾校无纸.100029FC
100029C4 84C9 test cl,cl
100029C6 74 34 je short 驾校无纸.100029FC
100029C8 81E1 FF000000 and ecx,0FF
100029CE 8499 C9840010 test byte ptr ds:[ecx+100084C9],bl
100029D4 74 0F je short 驾校无纸.100029E5
100029D6 8B17 mov edx,dword ptr ds:[edi]
100029D8 42 inc edx
100029D9 85F6 test esi,esi
100029DB 8917 mov dword ptr ds:[edi],edx
100029DD 74 06 je short 驾校无纸.100029E5
100029DF 8A08 mov cl,byte ptr ds:[eax]
100029E1 880E mov byte ptr ds:[esi],cl
100029E3 46 inc esi
100029E4 40 inc eax
100029E5 8B17 mov edx,dword ptr ds:[edi]
100029E7 42 inc edx
100029E8 85F6 test esi,esi
100029EA 8917 mov dword ptr ds:[edi],edx
100029EC 74 05 je short 驾校无纸.100029F3
100029EE 8A10 mov dl,byte ptr ds:[eax]
100029F0 8816 mov byte ptr ds:[esi],dl
100029F2 46 inc esi
100029F3 8A48 01 mov cl,byte ptr ds:[eax+1]
100029F6 40 inc eax
100029F7 80F9 22 cmp cl,22
100029FA ^ 75 C8 jnz short 驾校无纸.100029C4
100029FC 8B17 mov edx,dword ptr ds:[edi]
100029FE 42 inc edx
100029FF 85F6 test esi,esi
10002A01 8917 mov dword ptr ds:[edi],edx
10002A03 74 04 je short 驾校无纸.10002A09
10002A05 C606 00 mov byte ptr ds:[esi],0
10002A08 46 inc esi
10002A09 8038 22 cmp byte ptr ds:[eax],22
10002A0C 75 56 jnz short 驾校无纸.10002A64
10002A0E 40 inc eax
10002A0F EB 53 jmp short 驾校无纸.10002A64
10002A11 8B17 mov edx,dword ptr ds:[edi]
10002A13 42 inc edx
10002A14 85F6 test esi,esi
10002A16 8917 mov dword ptr ds:[edi],edx
10002A18 74 05 je short 驾校无纸.10002A1F
10002A1A 8A08 mov cl,byte ptr ds:[eax]
10002A1C 880E mov byte ptr ds:[esi],cl
10002A1E 46 inc esi
10002A1F 8A08 mov cl,byte ptr ds:[eax]
10002A21 40 inc eax
10002A22 884C24 24 mov byte ptr ss:[esp+24],cl
10002A26 8B5424 24 mov edx,dword ptr ss:[esp+24]
10002A2A 81E2 FF000000 and edx,0FF
10002A30 849A C9840010 test byte ptr ds:[edx+100084C9],bl
10002A36 74 0F je short 驾校无纸.10002A47
10002A38 8B17 mov edx,dword ptr ds:[edi]
10002A3A 42 inc edx
10002A3B 85F6 test esi,esi
10002A3D 8917 mov dword ptr ds:[edi],edx
10002A3F 74 05 je short 驾校无纸.10002A46
10002A41 8A10 mov dl,byte ptr ds:[eax]
10002A43 8816 mov byte ptr ds:[esi],dl
10002A45 46 inc esi
10002A46 40 inc eax
10002A47 80F9 20 cmp cl,20
10002A4A 74 09 je short 驾校无纸.10002A55
10002A4C 84C9 test cl,cl
10002A4E 74 09 je short 驾校无纸.10002A59
10002A50 80F9 09 cmp cl,9
10002A53 ^ 75 BC jnz short 驾校无纸.10002A11
10002A55 84C9 test cl,cl
10002A57 75 03 jnz short 驾校无纸.10002A5C
10002A59 48 dec eax
10002A5A EB 08 jmp short 驾校无纸.10002A64
10002A5C 85F6 test esi,esi
10002A5E 74 04 je short 驾校无纸.10002A64
10002A60 C646 FF 00 mov byte ptr ds:[esi-1],0
10002A64 33D2 xor edx,edx
10002A66 895424 24 mov dword ptr ss:[esp+24],edx
10002A6A 8038 00 cmp byte ptr ds:[eax],0
10002A6D 0F84 03010000 je 驾校无纸.10002B76
10002A73 8A08 mov cl,byte ptr ds:[eax]
10002A75 80F9 20 cmp cl,20
10002A78 74 05 je short 驾校无纸.10002A7F
10002A7A 80F9 09 cmp cl,9
10002A7D 75 03 jnz short 驾校无纸.10002A82
10002A7F 40 inc eax
10002A80 ^ EB F1 jmp short 驾校无纸.10002A73
10002A82 8038 00 cmp byte ptr ds:[eax],0
10002A85 0F84 EB000000 je 驾校无纸.10002B76
10002A8B 85ED test ebp,ebp
10002A8D 74 09 je short 驾校无纸.10002A98
10002A8F 8975 00 mov dword ptr ss:[ebp],esi
10002A92 03EB add ebp,ebx
10002A94 896C24 18 mov dword ptr ss:[esp+18],ebp
10002A98 8B4C24 20 mov ecx,dword ptr ss:[esp+20]
10002A9C FF01 inc dword ptr ds:[ecx]
10002A9E 8A18 mov bl,byte ptr ds:[eax]
10002AA0 33C9 xor ecx,ecx
10002AA2 80FB 5C cmp bl,5C
10002AA5 BD 01000000 mov ebp,1
10002AAA 75 0A jnz short 驾校无纸.10002AB6
10002AAC 8A58 01 mov bl,byte ptr ds:[eax+1]
10002AAF 40 inc eax
10002AB0 41 inc ecx
10002AB1 80FB 5C cmp bl,5C
10002AB4 ^ 74 F6 je short 驾校无纸.10002AAC
10002AB6 8038 22 cmp byte ptr ds:[eax],22
10002AB9 75 25 jnz short 驾校无纸.10002AE0
10002ABB F6C1 01 test cl,1
10002ABE 75 1E jnz short 驾校无纸.10002ADE
10002AC0 85D2 test edx,edx
10002AC2 74 09 je short 驾校无纸.10002ACD
10002AC4 8078 01 22 cmp byte ptr ds:[eax+1],22
10002AC8 75 03 jnz short 驾校无纸.10002ACD
10002ACA 40 inc eax
10002ACB EB 02 jmp short 驾校无纸.10002ACF
10002ACD 33ED xor ebp,ebp
10002ACF 8B5C24 24 mov ebx,dword ptr ss:[esp+24]
10002AD3 33D2 xor edx,edx
10002AD5 85DB test ebx,ebx
10002AD7 0F94C2 sete dl
10002ADA 895424 24 mov dword ptr ss:[esp+24],edx
10002ADE D1E9 shr ecx,1
10002AE0 8BD9 mov ebx,ecx
10002AE2 49 dec ecx
10002AE3 85DB test ebx,ebx
10002AE5 74 11 je short 驾校无纸.10002AF8
10002AE7 41 inc ecx
10002AE8 85F6 test esi,esi
10002AEA 74 04 je short 驾校无纸.10002AF0
10002AEC C606 5C mov byte ptr ds:[esi],5C
10002AEF 46 inc esi
10002AF0 8B1F mov ebx,dword ptr ds:[edi]
10002AF2 43 inc ebx
10002AF3 49 dec ecx
10002AF4 891F mov dword ptr ds:[edi],ebx
10002AF6 ^ 75 F0 jnz short 驾校无纸.10002AE8
10002AF8 8A08 mov cl,byte ptr ds:[eax]
10002AFA 84C9 test cl,cl
10002AFC 74 5D je short 驾校无纸.10002B5B
10002AFE 85D2 test edx,edx
10002B00 75 0A jnz short 驾校无纸.10002B0C
10002B02 80F9 20 cmp cl,20
10002B05 74 54 je short 驾校无纸.10002B5B
10002B07 80F9 09 cmp cl,9
10002B0A 74 4F je short 驾校无纸.10002B5B
10002B0C 85ED test ebp,ebp
10002B0E 74 45 je short 驾校无纸.10002B55
10002B10 85F6 test esi,esi
10002B12 74 2A je short 驾校无纸.10002B3E
10002B14 8BD9 mov ebx,ecx
10002B16 81E3 FF000000 and ebx,0FF
10002B1C F683 C9840010 0>test byte ptr ds:[ebx+100084C9],4
10002B23 74 09 je short 驾校无纸.10002B2E
10002B25 880E mov byte ptr ds:[esi],cl
10002B27 8B0F mov ecx,dword ptr ds:[edi]
10002B29 46 inc esi
10002B2A 40 inc eax
10002B2B 41 inc ecx
10002B2C 890F mov dword ptr ds:[edi],ecx
10002B2E 8A08 mov cl,byte ptr ds:[eax]
10002B30 880E mov byte ptr ds:[esi],cl
10002B32 8B0F mov ecx,dword ptr ds:[edi]
10002B34 46 inc esi
10002B35 41 inc ecx
10002B36 890F mov dword ptr ds:[edi],ecx
10002B38 40 inc eax
10002B39 ^ E9 60FFFFFF jmp 驾校无纸.10002A9E
10002B3E 81E1 FF000000 and ecx,0FF
10002B44 F681 C9840010 0>test byte ptr ds:[ecx+100084C9],4
10002B4B 74 06 je short 驾校无纸.10002B53
10002B4D 8B0F mov ecx,dword ptr ds:[edi]
10002B4F 40 inc eax
10002B50 41 inc ecx
10002B51 890F mov dword ptr ds:[edi],ecx
10002B53 FF07 inc dword ptr ds:[edi]
10002B55 40 inc eax
10002B56 ^ E9 43FFFFFF jmp 驾校无纸.10002A9E
10002B5B 85F6 test esi,esi
10002B5D 74 04 je short 驾校无纸.10002B63
10002B5F C606 00 mov byte ptr ds:[esi],0
10002B62 46 inc esi
10002B63 8B0F mov ecx,dword ptr ds:[edi]
10002B65 8B6C24 18 mov ebp,dword ptr ss:[esp+18]
10002B69 41 inc ecx
10002B6A BB 04000000 mov ebx,4
10002B6F 890F mov dword ptr ds:[edi],ecx
10002B71 ^ E9 F4FEFFFF jmp 驾校无纸.10002A6A
10002B76 85ED test ebp,ebp
10002B78 74 07 je short 驾校无纸.10002B81
10002B7A C745 00 0000000>mov dword ptr ss:[ebp],0
10002B81 8B4424 20 mov eax,dword ptr ss:[esp+20]
10002B85 5F pop edi
10002B86 5E pop esi
10002B87 5D pop ebp
10002B88 8B08 mov ecx,dword ptr ds:[eax]
10002B8A 5B pop ebx
10002B8B 41 inc ecx
10002B8C 8908 mov dword ptr ds:[eax],ecx
10002B8E C3 retn
10002B8F 90 nop
10002B90 A1 68880010 mov eax,dword ptr ds:[10008868]
10002B95 53 push ebx
10002B96 55 push ebp
10002B97 8B2D 54500010 mov ebp,dword ptr ds:[<&KERNEL32.GetEnvironmentStrin>; kernel32.GetEnvironmentStringsA
10002B9D 56 push esi
10002B9E 33F6 xor esi,esi
10002BA0 33DB xor ebx,ebx
10002BA2 57 push edi
10002BA3 8B3D 58500010 mov edi,dword ptr ds:[<&KERNEL32.GetEnvironmentStrin>; kernel32.GetEnvironmentStringsW
10002BA9 85C0 test eax,eax
10002BAB 75 25 jnz short 驾校无纸.10002BD2
10002BAD FFD7 call edi
10002BAF 8BF0 mov esi,eax
10002BB1 85F6 test esi,esi
10002BB3 74 07 je short 驾校无纸.10002BBC
10002BB5 B8 01000000 mov eax,1
10002BBA EB 11 jmp short 驾校无纸.10002BCD
10002BBC FFD5 call ebp
10002BBE 8BD8 mov ebx,eax
10002BC0 85DB test ebx,ebx
10002BC2 0F84 17010000 je 驾校无纸.10002CDF
10002BC8 B8 02000000 mov eax,2
10002BCD A3 68880010 mov dword ptr ds:[10008868],eax
10002BD2 83F8 01 cmp eax,1
10002BD5 0F85 97000000 jnz 驾校无纸.10002C72
10002BDB 85F6 test esi,esi
10002BDD 75 0C jnz short 驾校无纸.10002BEB
10002BDF FFD7 call edi
10002BE1 8BF0 mov esi,eax
10002BE3 85F6 test esi,esi
10002BE5 0F84 F4000000 je 驾校无纸.10002CDF
10002BEB 66:833E 00 cmp word ptr ds:[esi],0
10002BEF 8BC6 mov eax,esi
10002BF1 74 12 je short 驾校无纸.10002C05
10002BF3 83C0 02 add eax,2
10002BF6 66:8338 00 cmp word ptr ds:[eax],0
10002BFA ^ 75 F7 jnz short 驾校无纸.10002BF3
10002BFC 83C0 02 add eax,2
10002BFF 66:8338 00 cmp word ptr ds:[eax],0
10002C03 ^ 75 EE jnz short 驾校无纸.10002BF3
10002C05 2BC6 sub eax,esi
10002C07 6A 00 push 0
10002C09 D1F8 sar eax,1
10002C0B 40 inc eax
10002C0C 6A 00 push 0
10002C0E 8BE8 mov ebp,eax
10002C10 6A 00 push 0
10002C12 6A 00 push 0
10002C14 55 push ebp
10002C15 56 push esi
10002C16 6A 00 push 0
10002C18 6A 00 push 0
10002C1A FF15 30500010 call dword ptr ds:[<&KERNEL32.WideCharToMultiByte>] ; kernel32.WideCharToMultiByte
10002C20 8BF8 mov edi,eax
10002C22 85FF test edi,edi
10002C24 74 3E je short 驾校无纸.10002C64
10002C26 57 push edi
10002C27 E8 84090000 call 驾校无纸.100035B0
10002C2C 8BD8 mov ebx,eax
10002C2E 83C4 04 add esp,4
10002C31 85DB test ebx,ebx
10002C33 74 2F je short 驾校无纸.10002C64
10002C35 6A 00 push 0
10002C37 6A 00 push 0
10002C39 57 push edi
10002C3A 53 push ebx
10002C3B 55 push ebp
10002C3C 56 push esi
10002C3D 6A 00 push 0
10002C3F 6A 00 push 0
10002C41 FF15 30500010 call dword ptr ds:[<&KERNEL32.WideCharToMultiByte>] ; kernel32.WideCharToMultiByte
10002C47 85C0 test eax,eax
10002C49 75 0B jnz short 驾校无纸.10002C56
10002C4B 53 push ebx
10002C4C E8 0F080000 call 驾校无纸.10003460
10002C51 83C4 04 add esp,4
10002C54 33DB xor ebx,ebx
10002C56 56 push esi
10002C57 FF15 04500010 call dword ptr ds:[<&KERNEL32.FreeEnvironmentStrings>; kernel32.FreeEnvironmentStringsW
10002C5D 8BC3 mov eax,ebx
10002C5F 5F pop edi
10002C60 5E pop esi
10002C61 5D pop ebp
10002C62 5B pop ebx
10002C63 C3 retn
10002C64 56 push esi
10002C65 FF15 04500010 call dword ptr ds:[<&KERNEL32.FreeEnvironmentStrings>; kernel32.FreeEnvironmentStringsW
10002C6B 33C0 xor eax,eax
10002C6D 5F pop edi
10002C6E 5E pop esi
10002C6F 5D pop ebp
10002C70 5B pop ebx
10002C71 C3 retn
10002C72 83F8 02 cmp eax,2
10002C75 75 68 jnz short 驾校无纸.10002CDF
10002C77 85DB test ebx,ebx
10002C79 75 08 jnz short 驾校无纸.10002C83
10002C7B FFD5 call ebp
10002C7D 8BD8 mov ebx,eax
10002C7F 85DB test ebx,ebx
10002C81 74 5C je short 驾校无纸.10002CDF
10002C83 8A0B mov cl,byte ptr ds:[ebx]
10002C85 8BC3 mov eax,ebx
10002C87 84C9 test cl,cl
10002C89 74 10 je short 驾校无纸.10002C9B
10002C8B 8A48 01 mov cl,byte ptr ds:[eax+1]
10002C8E 40 inc eax
10002C8F 84C9 test cl,cl
10002C91 ^ 75 F8 jnz short 驾校无纸.10002C8B
10002C93 8A48 01 mov cl,byte ptr ds:[eax+1]
10002C96 40 inc eax
10002C97 84C9 test cl,cl
10002C99 ^ 75 F0 jnz short 驾校无纸.10002C8B
10002C9B 2BC3 sub eax,ebx
10002C9D 40 inc eax
10002C9E 8BF0 mov esi,eax
10002CA0 56 push esi
10002CA1 E8 0A090000 call 驾校无纸.100035B0
10002CA6 8BE8 mov ebp,eax
10002CA8 83C4 04 add esp,4
10002CAB 85ED test ebp,ebp
10002CAD 75 0E jnz short 驾校无纸.10002CBD
10002CAF 53 push ebx
10002CB0 FF15 00500010 call dword ptr ds:[<&KERNEL32.FreeEnvironmentStrings>; kernel32.FreeEnvironmentStringsA
10002CB6 33C0 xor eax,eax
10002CB8 5F pop edi
10002CB9 5E pop esi
10002CBA 5D pop ebp
10002CBB 5B pop ebx
10002CBC C3 retn
10002CBD 8BCE mov ecx,esi
10002CBF 8BF3 mov esi,ebx
10002CC1 8BC1 mov eax,ecx
10002CC3 8BFD mov edi,ebp
10002CC5 C1E9 02 shr ecx,2
10002CC8 F3:A5 rep movs dword ptr es:[edi],dword ptr ds:[esi]
10002CCA 8BC8 mov ecx,eax
10002CCC 53 push ebx
10002CCD 83E1 03 and ecx,3
10002CD0 F3:A4 rep movs byte ptr es:[edi],byte ptr ds:[esi]
10002CD2 FF15 00500010 call dword ptr ds:[<&KERNEL32.FreeEnvironmentStrings>; kernel32.FreeEnvironmentStringsA
10002CD8 8BC5 mov eax,ebp
10002CDA 5F pop edi
10002CDB 5E pop esi
10002CDC 5D pop ebp
10002CDD 5B pop ebx
10002CDE C3 retn
10002CDF 5F pop edi
10002CE0 5E pop esi
10002CE1 5D pop ebp
10002CE2 33C0 xor eax,eax
10002CE4 5B pop ebx
10002CE5 C3 retn
10002CE6 90 nop
10002CE7 90 nop
10002CE8 90 nop
10002CE9 90 nop
10002CEA 90 nop
10002CEB 90 nop
10002CEC 90 nop
10002CED 90 nop
10002CEE 90 nop
10002CEF 90 nop
10002CF0 83EC 48 sub esp,48
10002CF3 53 push ebx
10002CF4 55 push ebp
10002CF5 56 push esi
10002CF6 57 push edi
10002CF7 68 00010000 push 100
10002CFC E8 AF080000 call 驾校无纸.100035B0
10002D01 8BF0 mov esi,eax
10002D03 83C4 04 add esp,4
10002D06 85F6 test esi,esi
10002D08 75 0A jnz short 驾校无纸.10002D14
10002D0A 6A 1B push 1B
10002D0C E8 BFEFFFFF call 驾校无纸.10001CD0
10002D11 83C4 04 add esp,4
10002D14 8D86 00010000 lea eax,dword ptr ds:[esi+100]
10002D1A 8935 A0880010 mov dword ptr ds:[100088A0],esi
10002D20 3BF0 cmp esi,eax
10002D22 C705 A0890010 2>mov dword ptr ds:[100089A0],20
10002D2C B3 0A mov bl,0A
10002D2E 73 20 jnb short 驾校无纸.10002D50
10002D30 C646 04 00 mov byte ptr ds:[esi+4],0
10002D34 C706 FFFFFFFF mov dword ptr ds:[esi],-1
10002D3A 885E 05 mov byte ptr ds:[esi+5],bl
10002D3D 8B0D A0880010 mov ecx,dword ptr ds:[100088A0]
10002D43 83C6 08 add esi,8
10002D46 81C1 00010000 add ecx,100
10002D4C 3BF1 cmp esi,ecx
10002D4E ^ 72 E0 jb short 驾校无纸.10002D30
10002D50 8D5424 14 lea edx,dword ptr ss:[esp+14]
10002D54 52 push edx
10002D55 FF15 18500010 call dword ptr ds:[<&KERNEL32.GetStartupInfoA>] ; kernel32.GetStartupInfoA
10002D5B 66:837C24 46 00 cmp word ptr ss:[esp+46],0
10002D61 0F84 F2000000 je 驾校无纸.10002E59
10002D67 8B4424 48 mov eax,dword ptr ss:[esp+48]
10002D6B 85C0 test eax,eax
10002D6D 0F84 E6000000 je 驾校无纸.10002E59
10002D73 8B08 mov ecx,dword ptr ds:[eax]
10002D75 8D78 04 lea edi,dword ptr ds:[eax+4]
10002D78 81F9 00080000 cmp ecx,800
10002D7E 894C24 10 mov dword ptr ss:[esp+10],ecx
10002D82 8D2C0F lea ebp,dword ptr ds:[edi+ecx]
10002D85 7C 08 jl short 驾校无纸.10002D8F
10002D87 C74424 10 00080>mov dword ptr ss:[esp+10],800
10002D8F 8B4424 10 mov eax,dword ptr ss:[esp+10]
10002D93 8B0D A0890010 mov ecx,dword ptr ds:[100089A0]
10002D99 3BC8 cmp ecx,eax
10002D9B 7D 69 jge short 驾校无纸.10002E06
10002D9D BE A4880010 mov esi,驾校无纸.100088A4
10002DA2 68 00010000 push 100
10002DA7 E8 04080000 call 驾校无纸.100035B0
10002DAC 83C4 04 add esp,4
10002DAF 85C0 test eax,eax
10002DB1 74 49 je short 驾校无纸.10002DFC
10002DB3 8B0D A0890010 mov ecx,dword ptr ds:[100089A0]
10002DB9 8906 mov dword ptr ds:[esi],eax
10002DBB 83C1 20 add ecx,20
10002DBE 890D A0890010 mov dword ptr ds:[100089A0],ecx
10002DC4 8D88 00010000 lea ecx,dword ptr ds:[eax+100]
10002DCA 3BC1 cmp eax,ecx
10002DCC 73 1C jnb short 驾校无纸.10002DEA
10002DCE C640 04 00 mov byte ptr ds:[eax+4],0
10002DD2 C700 FFFFFFFF mov dword ptr ds:[eax],-1
10002DD8 8858 05 mov byte ptr ds:[eax+5],bl
10002DDB 8B16 mov edx,dword ptr ds:[esi]
10002DDD 83C0 08 add eax,8
10002DE0 81C2 00010000 add edx,100
10002DE6 3BC2 cmp eax,edx
10002DE8 ^ 72 E4 jb short 驾校无纸.10002DCE
10002DEA A1 A0890010 mov eax,dword ptr ds:[100089A0]
10002DEF 8B4C24 10 mov ecx,dword ptr ss:[esp+10]
10002DF3 83C6 04 add esi,4
10002DF6 3BC1 cmp eax,ecx
10002DF8 ^ 7C A8 jl short 驾校无纸.10002DA2
10002DFA EB 0A jmp short 驾校无纸.10002E06
10002DFC 8B0D A0890010 mov ecx,dword ptr ds:[100089A0]
10002E02 894C24 10 mov dword ptr ss:[esp+10],ecx
10002E06 8B4424 10 mov eax,dword ptr ss:[esp+10]
10002E0A 33F6 xor esi,esi
10002E0C 85C0 test eax,eax
10002E0E 7E 49 jle short 驾校无纸.10002E59
10002E10 8B4D 00 mov ecx,dword ptr ss:[ebp]
10002E13 83F9 FF cmp ecx,-1
10002E16 74 34 je short 驾校无纸.10002E4C
10002E18 8A07 mov al,byte ptr ds:[edi]
10002E1A A8 01 test al,1
10002E1C 74 2E je short 驾校无纸.10002E4C
10002E1E A8 08 test al,8
10002E20 75 0B jnz short 驾校无纸.10002E2D
10002E22 51 push ecx
10002E23 FF15 64500010 call dword ptr ds:[<&KERNEL32.GetFileType>] ; kernel32.GetFileType
10002E29 85C0 test eax,eax
10002E2B 74 1F je short 驾校无纸.10002E4C
10002E2D 8BD6 mov edx,esi
10002E2F 8BC6 mov eax,esi
10002E31 C1FA 05 sar edx,5
10002E34 83E0 1F and eax,1F
10002E37 8B0C95 A0880010 mov ecx,dword ptr ds:[edx*4+100088A0]
10002E3E 8B55 00 mov edx,dword ptr ss:[ebp]
10002E41 8914C1 mov dword ptr ds:[ecx+eax*8],edx
10002E44 8D04C1 lea eax,dword ptr ds:[ecx+eax*8]
10002E47 8A0F mov cl,byte ptr ds:[edi]
10002E49 8848 04 mov byte ptr ds:[eax+4],cl
10002E4C 8B4424 10 mov eax,dword ptr ss:[esp+10]
10002E50 46 inc esi
10002E51 47 inc edi
10002E52 83C5 04 add ebp,4
10002E55 3BF0 cmp esi,eax
10002E57 ^ 7C B7 jl short 驾校无纸.10002E10
10002E59 8B2D 60500010 mov ebp,dword ptr ds:[<&KERNEL32.GetStdHandle>] ; kernel32.GetStdHandle
10002E5F 33DB xor ebx,ebx
10002E61 8B15 A0880010 mov edx,dword ptr ds:[100088A0]
10002E67 8B04DA mov eax,dword ptr ds:[edx+ebx*8]
10002E6A 8D34DA lea esi,dword ptr ds:[edx+ebx*8]
10002E6D 83F8 FF cmp eax,-1
10002E70 75 54 jnz short 驾校无纸.10002EC6
10002E72 85DB test ebx,ebx
10002E74 C646 04 81 mov byte ptr ds:[esi+4],81
10002E78 75 07 jnz short 驾校无纸.10002E81
10002E7A B8 F6FFFFFF mov eax,-0A
10002E7F EB 0A jmp short 驾校无纸.10002E8B
10002E81 8BC3 mov eax,ebx
10002E83 48 dec eax
10002E84 F7D8 neg eax
10002E86 1BC0 sbb eax,eax
10002E88 83C0 F5 add eax,-0B
10002E8B 50 push eax
10002E8C FFD5 call ebp
10002E8E 8BF8 mov edi,eax
10002E90 83FF FF cmp edi,-1
10002E93 74 2A je short 驾校无纸.10002EBF
10002E95 57 push edi
10002E96 FF15 64500010 call dword ptr ds:[<&KERNEL32.GetFileType>] ; kernel32.GetFileType
10002E9C 85C0 test eax,eax
10002E9E 74 1F je short 驾校无纸.10002EBF
10002EA0 25 FF000000 and eax,0FF
10002EA5 893E mov dword ptr ds:[esi],edi
10002EA7 83F8 02 cmp eax,2
10002EAA 75 07 jnz short 驾校无纸.10002EB3
10002EAC 8A46 04 mov al,byte ptr ds:[esi+4]
10002EAF 0C 40 or al,40
10002EB1 EB 18 jmp short 驾校无纸.10002ECB
10002EB3 83F8 03 cmp eax,3
10002EB6 75 16 jnz short 驾校无纸.10002ECE
10002EB8 8A46 04 mov al,byte ptr ds:[esi+4]
10002EBB 0C 08 or al,8
10002EBD EB 0C jmp short 驾校无纸.10002ECB
10002EBF 8A46 04 mov al,byte ptr ds:[esi+4]
10002EC2 0C 40 or al,40
10002EC4 EB 05 jmp short 驾校无纸.10002ECB
10002EC6 8A46 04 mov al,byte ptr ds:[esi+4]
10002EC9 0C 80 or al,80
10002ECB 8846 04 mov byte ptr ds:[esi+4],al
10002ECE 43 inc ebx
10002ECF 83FB 03 cmp ebx,3
10002ED2 ^ 7C 8D jl short 驾校无纸.10002E61
10002ED4 A1 A0890010 mov eax,dword ptr ds:[100089A0]
10002ED9 50 push eax
10002EDA FF15 5C500010 call dword ptr ds:[<&KERNEL32.SetHandleCount>] ; kernel32.SetHandleCount
10002EE0 5F pop edi
10002EE1 5E pop esi
10002EE2 5D pop ebp
10002EE3 5B pop ebx
10002EE4 83C4 48 add esp,48
10002EE7 C3 retn
10002EE8 90 nop
10002EE9 90 nop
10002EEA 90 nop
10002EEB 90 nop
10002EEC 90 nop
10002EED 90 nop
10002EEE 90 nop
10002EEF 90 nop
10002EF0 6A 00 push 0
10002EF2 68 00100000 push 1000
10002EF7 6A 01 push 1
10002EF9 FF15 6C500010 call dword ptr ds:[<&KERNEL32.HeapCreate>] ; kernel32.HeapCreate
10002EFF 85C0 test eax,eax
10002F01 A3 90880010 mov dword ptr ds:[10008890],eax
10002F06 75 01 jnz short 驾校无纸.10002F09
10002F08 C3 retn
10002F09 E8 52070000 call 驾校无纸.10003660
10002F0E 85C0 test eax,eax
10002F10 75 0F jnz short 驾校无纸.10002F21
10002F12 A1 90880010 mov eax,dword ptr ds:[10008890]
10002F17 50 push eax
10002F18 FF15 68500010 call dword ptr ds:[<&KERNEL32.HeapDestroy>] ; kernel32.HeapDestroy
10002F1E 33C0 xor eax,eax
10002F20 C3 retn
10002F21 B8 01000000 mov eax,1
10002F26 C3 retn
10002F27 90 nop
10002F28 90 nop
10002F29 90 nop
10002F2A 90 nop
10002F2B 90 nop
10002F2C 90 nop
10002F2D 90 nop
10002F2E 90 nop
10002F2F 90 nop
10002F30 55 push ebp
10002F31 8BEC mov ebp,esp
10002F33 53 push ebx
10002F34 56 push esi
10002F35 57 push edi
10002F36 55 push ebp
10002F37 6A 00 push 0
10002F39 6A 00 push 0
10002F3B 68 482F0010 push 驾校无纸.10002F48
10002F40 FF75 08 push dword ptr ss:[ebp+8]
10002F43 E8 C8120000 call <jmp.&KERNEL32.RtlUnwind>
10002F48 5D pop ebp
10002F49 5F pop edi
10002F4A 5E pop esi
10002F4B 5B pop ebx
10002F4C 8BE5 mov esp,ebp
10002F4E 5D pop ebp
10002F4F C3 retn
10001001 57 push edi
10001002 FF15 08500010 call dword ptr ds:[<&KERNEL32.GetCommandLineA>] ; kernel32.GetCommandLineA
10001008 8BF0 mov esi,eax
1000100A 8A06 mov al,byte ptr ds:[esi]
1000100C 46 inc esi
1000100D 3C 22 cmp al,22
1000100F 75 3E jnz short 驾校无纸.1000104F
10001011 E8 DA000000 call 驾校无纸.100010F0
10001016 85C0 test eax,eax
10001018 6A 22 push 22
1000101A 56 push esi
1000101B 74 07 je short 驾校无纸.10001024
1000101D E8 7E070000 call 驾校无纸.100017A0
10001022 EB 05 jmp short 驾校无纸.10001029
10001024 E8 B7060000 call 驾校无纸.100016E0
10001029 8BD0 mov edx,eax
1000102B 83C4 08 add esp,8
1000102E 85D2 test edx,edx
10001030 74 44 je short 驾校无纸.10001076
10001032 8BFA mov edi,edx
10001034 83C9 FF or ecx,FFFFFFFF
10001037 33C0 xor eax,eax
10001039 F2:AE repne scas byte ptr es:[edi]
1000103B F7D1 not ecx
1000103D 49 dec ecx
1000103E 83F9 02 cmp ecx,2
10001041 77 07 ja short 驾校无纸.1000104A
10001043 BE B0840010 mov esi,驾校无纸.100084B0
10001048 EB 2C jmp short 驾校无纸.10001076
1000104A 8D72 02 lea esi,dword ptr ds:[edx+2]
1000104D EB 27 jmp short 驾校无纸.10001076
1000104F E8 9C000000 call 驾校无纸.100010F0
10001054 85C0 test eax,eax
10001056 6A 20 push 20
10001058 56 push esi
10001059 74 07 je short 驾校无纸.10001062
1000105B E8 40070000 call 驾校无纸.100017A0
10001060 EB 05 jmp short 驾校无纸.10001067
10001062 E8 79060000 call 驾校无纸.100016E0
10001067 83C4 08 add esp,8
1000106A BE B4840010 mov esi,驾校无纸.100084B4
1000106F 85C0 test eax,eax
10001071 74 03 je short 驾校无纸.10001076
10001073 8D70 01 lea esi,dword ptr ds:[eax+1]
10001076 8B4C24 18 mov ecx,dword ptr ss:[esp+18]
1000107A 8B5424 10 mov edx,dword ptr ss:[esp+10]
1000107E 8B4424 0C mov eax,dword ptr ss:[esp+C]
10001082 6A 00 push 0
10001084 68 E8030000 push 3E8
10001089 51 push ecx
1000108A 56 push esi
1000108B 52 push edx
1000108C 50 push eax
1000108D E8 2E060000 call <jmp.&PBVM80.#137>
10001092 5F pop edi
10001093 5E pop esi
10001094 C2 1000 retn 10
10001097 90 nop
10001098 90 nop
10001099 90 nop
1000109A 90 nop
1000109B 90 nop
1000109C 90 nop
1000109D 90 nop
1000109E 90 nop
1000109F 90 nop
100010A0 E9 0B000000 jmp 驾校无纸.100010B0
100010A5 90 nop
100010A6 90 nop
100010A7 90 nop
100010A8 90 nop
100010A9 90 nop
100010AA 90 nop
100010AB 90 nop
100010AC 90 nop
100010AD 90 nop
100010AE 90 nop
100010AF 90 nop
100010B0 E8 0B000000 call 驾校无纸.100010C0
100010B5 A3 B8840010 mov dword ptr ds:[100084B8],eax
100010BA C3 retn
100010BB 90 nop
100010BC 90 nop
100010BD 90 nop
100010BE 90 nop
100010BF 90 nop
100010C0 83EC 14 sub esp,14
100010C3 8D4424 00 lea eax,dword ptr ss:[esp]
100010C7 50 push eax
100010C8 6A 00 push 0
100010CA FF15 0C500010 call dword ptr ds:[<&KERNEL32.GetCPInfo>] ; kernel32.GetCPInfo
100010D0 8B5424 00 mov edx,dword ptr ss:[esp]
100010D4 B9 01000000 mov ecx,1
100010D9 3BCA cmp ecx,edx
100010DB 1BC0 sbb eax,eax
100010DD F7D8 neg eax
100010DF 83C4 14 add esp,14
100010E2 C3 retn
100010E3 90 nop
100010E4 90 nop
100010E5 90 nop
100010E6 90 nop
100010E7 90 nop
100010E8 90 nop
100010E9 90 nop
100010EA 90 nop
100010EB 90 nop
100010EC 90 nop
100010ED 90 nop
100010EE 90 nop
100010EF 90 nop
100010F0 A1 B8840010 mov eax,dword ptr ds:[100084B8]
100010F5 C3 retn
100010F6 90 nop
100010F7 90 nop
100010F8 90 nop
100010F9 90 nop
100010FA 90 nop
100010FB 90 nop
100010FC 90 nop
100010FD 90 nop
100010FE 90 nop
100010FF 90 nop
10001100 51 push ecx
10001101 8B4424 0C mov eax,dword ptr ss:[esp+C]
10001105 33D2 xor edx,edx
10001107 53 push ebx
10001108 55 push ebp
10001109 8AD4 mov dl,ah
1000110B 56 push esi
1000110C 8BC8 mov ecx,eax
1000110E 57 push edi
1000110F 8BEA mov ebp,edx
10001111 33FF xor edi,edi
10001113 81E1 FF000000 and ecx,0FF
10001119 85ED test ebp,ebp
1000111B 894C24 10 mov dword ptr ss:[esp+10],ecx
1000111F 75 20 jnz short 驾校无纸.10001141
10001121 85C9 test ecx,ecx
10001123 75 1C jnz short 驾校无纸.10001141
10001125 8B5424 18 mov edx,dword ptr ss:[esp+18]
10001129 83C9 FF or ecx,FFFFFFFF
1000112C 8BFA mov edi,edx
1000112E 33C0 xor eax,eax
10001130 F2:AE repne scas byte ptr es:[edi]
10001132 F7D1 not ecx
10001134 49 dec ecx
10001135 8BC1 mov eax,ecx
10001137 03C2 add eax,edx
10001139 5F pop edi
1000113A 5E pop esi
1000113B 5D pop ebp
1000113C 5B pop ebx
1000113D 59 pop ecx
1000113E C2 0800 retn 8
10001141 8B7424 18 mov esi,dword ptr ss:[esp+18]
10001145 33DB xor ebx,ebx
10001147 803E 00 cmp byte ptr ds:[esi],0
1000114A 74 51 je short 驾校无纸.1000119D
1000114C EB 04 jmp short 驾校无纸.10001152
1000114E 8B4C24 10 mov ecx,dword ptr ss:[esp+10]
10001152 85FF test edi,edi
10001154 74 1D je short 驾校无纸.10001173
10001156 33FF xor edi,edi
10001158 85ED test ebp,ebp
1000115A 74 39 je short 驾校无纸.10001195
1000115C 8D46 FF lea eax,dword ptr ds:[esi-1]
1000115F 33D2 xor edx,edx
10001161 8A10 mov dl,byte ptr ds:[eax]
10001163 3BD5 cmp edx,ebp
10001165 75 2E jnz short 驾校无纸.10001195
10001167 33D2 xor edx,edx
10001169 8A16 mov dl,byte ptr ds:[esi]
1000116B 3BD1 cmp edx,ecx
1000116D 75 26 jnz short 驾校无纸.10001195
1000116F 8BD8 mov ebx,eax
10001171 EB 22 jmp short 驾校无纸.10001195
10001173 8A06 mov al,byte ptr ds:[esi]
10001175 50 push eax
10001176 FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
1000117C 85C0 test eax,eax
1000117E 74 07 je short 驾校无纸.10001187
10001180 BF 01000000 mov edi,1
10001185 EB 0E jmp short 驾校无纸.10001195
10001187 8B4424 1C mov eax,dword ptr ss:[esp+1C]
1000118B 33C9 xor ecx,ecx
1000118D 8A0E mov cl,byte ptr ds:[esi]
1000118F 3BC8 cmp ecx,eax
10001191 75 02 jnz short 驾校无纸.10001195
10001193 8BDE mov ebx,esi
10001195 8A46 01 mov al,byte ptr ds:[esi+1]
10001198 46 inc esi
10001199 84C0 test al,al
1000119B ^ 75 B1 jnz short 驾校无纸.1000114E
1000119D 5F pop edi
1000119E 5E pop esi
1000119F 8BC3 mov eax,ebx
100011A1 5D pop ebp
100011A2 5B pop ebx
100011A3 59 pop ecx
100011A4 C2 0800 retn 8
100011A7 90 nop
100011A8 90 nop
100011A9 90 nop
100011AA 90 nop
100011AB 90 nop
100011AC 90 nop
100011AD 90 nop
100011AE 90 nop
100011AF 90 nop
100011B0 51 push ecx
100011B1 8B4424 0C mov eax,dword ptr ss:[esp+C]
100011B5 53 push ebx
100011B6 33C9 xor ecx,ecx
100011B8 55 push ebp
100011B9 56 push esi
100011BA 8ACC mov cl,ah
100011BC 57 push edi
100011BD 8BD8 mov ebx,eax
100011BF 33FF xor edi,edi
100011C1 8BE9 mov ebp,ecx
100011C3 81E3 FF000000 and ebx,0FF
100011C9 3BEF cmp ebp,edi
100011CB 75 20 jnz short 驾校无纸.100011ED
100011CD 3BDF cmp ebx,edi
100011CF 75 1C jnz short 驾校无纸.100011ED
100011D1 8B5424 18 mov edx,dword ptr ss:[esp+18]
100011D5 83C9 FF or ecx,FFFFFFFF
100011D8 8BFA mov edi,edx
100011DA 33C0 xor eax,eax
100011DC F2:AE repne scas byte ptr es:[edi]
100011DE F7D1 not ecx
100011E0 49 dec ecx
100011E1 8BC1 mov eax,ecx
100011E3 03C2 add eax,edx
100011E5 5F pop edi
100011E6 5E pop esi
100011E7 5D pop ebp
100011E8 5B pop ebx
100011E9 59 pop ecx
100011EA C2 0800 retn 8
100011ED 8B7424 18 mov esi,dword ptr ss:[esp+18]
100011F1 897C24 10 mov dword ptr ss:[esp+10],edi
100011F5 803E 00 cmp byte ptr ds:[esi],0
100011F8 74 56 je short 驾校无纸.10001250
100011FA 85FF test edi,edi
100011FC 74 19 je short 驾校无纸.10001217
100011FE 33FF xor edi,edi
10001200 85ED test ebp,ebp
10001202 74 33 je short 驾校无纸.10001237
10001204 33D2 xor edx,edx
10001206 8A56 FF mov dl,byte ptr ds:[esi-1]
10001209 3BD5 cmp edx,ebp
1000120B 75 2A jnz short 驾校无纸.10001237
1000120D 33C0 xor eax,eax
1000120F 8A06 mov al,byte ptr ds:[esi]
10001211 3BC3 cmp eax,ebx
10001213 74 36 je short 驾校无纸.1000124B
10001215 EB 20 jmp short 驾校无纸.10001237
10001217 8A0E mov cl,byte ptr ds:[esi]
10001219 51 push ecx
1000121A FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
10001220 85C0 test eax,eax
10001222 74 07 je short 驾校无纸.1000122B
10001224 BF 01000000 mov edi,1
10001229 EB 0C jmp short 驾校无纸.10001237
1000122B 8B4424 1C mov eax,dword ptr ss:[esp+1C]
1000122F 33D2 xor edx,edx
10001231 8A16 mov dl,byte ptr ds:[esi]
10001233 3BD0 cmp edx,eax
10001235 74 15 je short 驾校无纸.1000124C
10001237 8A46 01 mov al,byte ptr ds:[esi+1]
1000123A 46 inc esi
1000123B 84C0 test al,al
1000123D ^ 75 BB jnz short 驾校无纸.100011FA
1000123F 8B4424 10 mov eax,dword ptr ss:[esp+10]
10001243 5F pop edi
10001244 5E pop esi
10001245 5D pop ebp
10001246 5B pop ebx
10001247 59 pop ecx
10001248 C2 0800 retn 8
1000124B 4E dec esi
1000124C 897424 10 mov dword ptr ss:[esp+10],esi
10001250 8B4424 10 mov eax,dword ptr ss:[esp+10]
10001254 5F pop edi
10001255 5E pop esi
10001256 5D pop ebp
10001257 5B pop ebx
10001258 59 pop ecx
10001259 C2 0800 retn 8
1000125C 90 nop
1000125D 90 nop
1000125E 90 nop
1000125F 90 nop
10001260 53 push ebx
10001261 55 push ebp
10001262 56 push esi
10001263 8B7424 10 mov esi,dword ptr ss:[esp+10]
10001267 33DB xor ebx,ebx
10001269 33ED xor ebp,ebp
1000126B 8A06 mov al,byte ptr ds:[esi]
1000126D 57 push edi
1000126E 84C0 test al,al
10001270 74 5F je short 驾校无纸.100012D1
10001272 8B7C24 14 mov edi,dword ptr ss:[esp+14]
10001276 85DB test ebx,ebx
10001278 74 0A je short 驾校无纸.10001284
1000127A 33C0 xor eax,eax
1000127C 33DB xor ebx,ebx
1000127E 8A06 mov al,byte ptr ds:[esi]
10001280 0BF8 or edi,eax
10001282 EB 24 jmp short 驾校无纸.100012A8
10001284 8A0E mov cl,byte ptr ds:[esi]
10001286 51 push ecx
10001287 FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
1000128D 85C0 test eax,eax
1000128F 74 0F je short 驾校无纸.100012A0
10001291 33D2 xor edx,edx
10001293 BB 01000000 mov ebx,1
10001298 8A36 mov dh,byte ptr ds:[esi]
1000129A 8BEE mov ebp,esi
1000129C 8BFA mov edi,edx
1000129E EB 17 jmp short 驾校无纸.100012B7
100012A0 33C0 xor eax,eax
100012A2 8BEE mov ebp,esi
100012A4 8A06 mov al,byte ptr ds:[esi]
100012A6 8BF8 mov edi,eax
100012A8 8B4C24 18 mov ecx,dword ptr ss:[esp+18]
100012AC 57 push edi
100012AD 51 push ecx
100012AE E8 FDFEFFFF call 驾校无纸.100011B0
100012B3 85C0 test eax,eax
100012B5 75 11 jnz short 驾校无纸.100012C8
100012B7 8A46 01 mov al,byte ptr ds:[esi+1]
100012BA 46 inc esi
100012BB 84C0 test al,al
100012BD ^ 75 B7 jnz short 驾校无纸.10001276
100012BF 33C0 xor eax,eax
100012C1 5F pop edi
100012C2 5E pop esi
100012C3 5D pop ebp
100012C4 5B pop ebx
100012C5 C2 0800 retn 8
100012C8 8BC5 mov eax,ebp
100012CA 5F pop edi
100012CB 5E pop esi
100012CC 5D pop ebp
100012CD 5B pop ebx
100012CE C2 0800 retn 8
100012D1 5F pop edi
100012D2 5E pop esi
100012D3 5D pop ebp
100012D4 33C0 xor eax,eax
100012D6 5B pop ebx
100012D7 C2 0800 retn 8
100012DA 90 nop
100012DB 90 nop
100012DC 90 nop
100012DD 90 nop
100012DE 90 nop
100012DF 90 nop
100012E0 83EC 08 sub esp,8
100012E3 53 push ebx
100012E4 55 push ebp
100012E5 8B6C24 14 mov ebp,dword ptr ss:[esp+14]
100012E9 56 push esi
100012EA 57 push edi
100012EB C74424 10 00000>mov dword ptr ss:[esp+10],0
100012F3 8A45 00 mov al,byte ptr ss:[ebp]
100012F6 896C24 1C mov dword ptr ss:[esp+1C],ebp
100012FA 84C0 test al,al
100012FC 0F84 C3000000 je 驾校无纸.100013C5
10001302 8B7424 20 mov esi,dword ptr ss:[esp+20]
10001306 83C9 FF or ecx,FFFFFFFF
10001309 8BFE mov edi,esi
1000130B 33C0 xor eax,eax
1000130D F2:AE repne scas byte ptr es:[edi]
1000130F F7D1 not ecx
10001311 49 dec ecx
10001312 8BFD mov edi,ebp
10001314 8BD1 mov edx,ecx
10001316 83C9 FF or ecx,FFFFFFFF
10001319 F2:AE repne scas byte ptr es:[edi]
1000131B F7D1 not ecx
1000131D 49 dec ecx
1000131E 3BD1 cmp edx,ecx
10001320 0F87 9F000000 ja 驾校无纸.100013C5
10001326 8B4424 10 mov eax,dword ptr ss:[esp+10]
1000132A 85C0 test eax,eax
1000132C 74 0A je short 驾校无纸.10001338
1000132E C74424 10 00000>mov dword ptr ss:[esp+10],0
10001336 EB 65 jmp short 驾校无纸.1000139D
10001338 8A45 00 mov al,byte ptr ss:[ebp]
1000133B 50 push eax
1000133C FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
10001342 85C0 test eax,eax
10001344 74 08 je short 驾校无纸.1000134E
10001346 C74424 10 01000>mov dword ptr ss:[esp+10],1
1000134E 8A06 mov al,byte ptr ds:[esi]
10001350 8BD6 mov edx,esi
10001352 84C0 test al,al
10001354 74 42 je short 驾校无纸.10001398
10001356 2BEE sub ebp,esi
10001358 8A1C2A mov bl,byte ptr ds:[edx+ebp]
1000135B 8D342A lea esi,dword ptr ds:[edx+ebp]
1000135E 84DB test bl,bl
10001360 74 32 je short 驾校无纸.10001394
10001362 8BFA mov edi,edx
10001364 83C9 FF or ecx,FFFFFFFF
10001367 33C0 xor eax,eax
10001369 F2:AE repne scas byte ptr es:[edi]
1000136B F7D1 not ecx
1000136D 49 dec ecx
1000136E 8BFE mov edi,esi
10001370 8BC1 mov eax,ecx
10001372 83C9 FF or ecx,FFFFFFFF
10001375 894424 14 mov dword ptr ss:[esp+14],eax
10001379 33C0 xor eax,eax
1000137B F2:AE repne scas byte ptr es:[edi]
1000137D 8B4424 14 mov eax,dword ptr ss:[esp+14]
10001381 F7D1 not ecx
10001383 49 dec ecx
10001384 3BC8 cmp ecx,eax
10001386 72 0C jb short 驾校无纸.10001394
10001388 3A1A cmp bl,byte ptr ds:[edx]
1000138A 75 08 jnz short 驾校无纸.10001394
1000138C 8A42 01 mov al,byte ptr ds:[edx+1]
1000138F 42 inc edx
10001390 84C0 test al,al
10001392 ^ 75 C4 jnz short 驾校无纸.10001358
10001394 8B6C24 1C mov ebp,dword ptr ss:[esp+1C]
10001398 803A 00 cmp byte ptr ds:[edx],0
1000139B 74 1C je short 驾校无纸.100013B9
1000139D 8A45 01 mov al,byte ptr ss:[ebp+1]
100013A0 45 inc ebp
100013A1 84C0 test al,al
100013A3 896C24 1C mov dword ptr ss:[esp+1C],ebp
100013A7 ^ 0F85 55FFFFFF jnz 驾校无纸.10001302
100013AD 33C0 xor eax,eax
100013AF 5F pop edi
100013B0 5E pop esi
100013B1 5D pop ebp
100013B2 5B pop ebx
100013B3 83C4 08 add esp,8
100013B6 C2 0800 retn 8
100013B9 8BC5 mov eax,ebp
100013BB 5F pop edi
100013BC 5E pop esi
100013BD 5D pop ebp
100013BE 5B pop ebx
100013BF 83C4 08 add esp,8
100013C2 C2 0800 retn 8
100013C5 5F pop edi
100013C6 5E pop esi
100013C7 5D pop ebp
100013C8 33C0 xor eax,eax
100013CA 5B pop ebx
100013CB 83C4 08 add esp,8
100013CE C2 0800 retn 8
100013D1 90 nop
100013D2 90 nop
100013D3 90 nop
100013D4 90 nop
100013D5 90 nop
100013D6 90 nop
100013D7 90 nop
100013D8 90 nop
100013D9 90 nop
100013DA 90 nop
100013DB 90 nop
100013DC 90 nop
100013DD 90 nop
100013DE 90 nop
100013DF 90 nop
100013E0 53 push ebx
100013E1 55 push ebp
100013E2 56 push esi
100013E3 8B7424 10 mov esi,dword ptr ss:[esp+10]
100013E7 57 push edi
100013E8 33ED xor ebp,ebp
100013EA 8A06 mov al,byte ptr ds:[esi]
100013EC 33FF xor edi,edi
100013EE 84C0 test al,al
100013F0 74 76 je short 驾校无纸.10001468
100013F2 8A5C24 1C mov bl,byte ptr ss:[esp+1C]
100013F6 3B6C24 18 cmp ebp,dword ptr ss:[esp+18]
100013FA 7D 6C jge short 驾校无纸.10001468
100013FC 85FF test edi,edi
100013FE 74 04 je short 驾校无纸.10001404
10001400 33FF xor edi,edi
10001402 EB 5B jmp short 驾校无纸.1000145F
10001404 8A06 mov al,byte ptr ds:[esi]
10001406 50 push eax
10001407 FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
1000140D 85C0 test eax,eax
1000140F 74 07 je short 驾校无纸.10001418
10001411 BF 01000000 mov edi,1
10001416 EB 47 jmp short 驾校无纸.1000145F
10001418 F6C3 01 test bl,1
1000141B 74 1D je short 驾校无纸.1000143A
1000141D 33C9 xor ecx,ecx
1000141F 8A0E mov cl,byte ptr ds:[esi]
10001421 51 push ecx
10001422 E8 59050000 call 驾校无纸.10001980
10001427 83C4 04 add esp,4
1000142A 85C0 test eax,eax
1000142C 74 0C je short 驾校无纸.1000143A
1000142E 33D2 xor edx,edx
10001430 8A16 mov dl,byte ptr ds:[esi]
10001432 52 push edx
10001433 E8 78050000 call 驾校无纸.100019B0
10001438 EB 20 jmp short 驾校无纸.1000145A
1000143A F6C3 02 test bl,2
1000143D 74 20 je short 驾校无纸.1000145F
1000143F 33C0 xor eax,eax
10001441 8A06 mov al,byte ptr ds:[esi]
10001443 50 push eax
10001444 E8 07050000 call 驾校无纸.10001950
10001449 83C4 04 add esp,4
1000144C 85C0 test eax,eax
1000144E 74 0F je short 驾校无纸.1000145F
10001450 33C9 xor ecx,ecx
10001452 8A0E mov cl,byte ptr ds:[esi]
10001454 51 push ecx
10001455 E8 F6030000 call 驾校无纸.10001850
1000145A 83C4 04 add esp,4
1000145D 8806 mov byte ptr ds:[esi],al
1000145F 8A46 01 mov al,byte ptr ds:[esi+1]
10001462 46 inc esi
10001463 45 inc ebp
10001464 84C0 test al,al
10001466 ^ 75 8E jnz short 驾校无纸.100013F6
10001468 5F pop edi
10001469 8BC5 mov eax,ebp
1000146B 5E pop esi
1000146C 5D pop ebp
1000146D 5B pop ebx
1000146E C2 0C00 retn 0C
10001471 90 nop
10001472 90 nop
10001473 90 nop
10001474 90 nop
10001475 90 nop
10001476 90 nop
10001477 90 nop
10001478 90 nop
10001479 90 nop
1000147A 90 nop
1000147B 90 nop
1000147C 90 nop
1000147D 90 nop
1000147E 90 nop
1000147F 90 nop
10001480 8B4424 08 mov eax,dword ptr ss:[esp+8]
10001484 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
10001488 6A 02 push 2
1000148A 50 push eax
1000148B 51 push ecx
1000148C E8 4FFFFFFF call 驾校无纸.100013E0
10001491 C2 0800 retn 8
10001494 90 nop
10001495 90 nop
10001496 90 nop
10001497 90 nop
10001498 90 nop
10001499 90 nop
1000149A 90 nop
1000149B 90 nop
1000149C 90 nop
1000149D 90 nop
1000149E 90 nop
1000149F 90 nop
100014A0 8B4424 08 mov eax,dword ptr ss:[esp+8]
100014A4 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
100014A8 6A 01 push 1
100014AA 50 push eax
100014AB 51 push ecx
100014AC E8 2FFFFFFF call 驾校无纸.100013E0
100014B1 C2 0800 retn 8
100014B4 90 nop
100014B5 90 nop
100014B6 90 nop
100014B7 90 nop
100014B8 90 nop
100014B9 90 nop
100014BA 90 nop
100014BB 90 nop
100014BC 90 nop
100014BD 90 nop
100014BE 90 nop
100014BF 90 nop
100014C0 56 push esi
100014C1 8B7424 08 mov esi,dword ptr ss:[esp+8]
100014C5 57 push edi
100014C6 8BFE mov edi,esi
100014C8 83C9 FF or ecx,FFFFFFFF
100014CB 33C0 xor eax,eax
100014CD F2:AE repne scas byte ptr es:[edi]
100014CF F7D1 not ecx
100014D1 49 dec ecx
100014D2 6A 02 push 2
100014D4 51 push ecx
100014D5 56 push esi
100014D6 E8 05FFFFFF call 驾校无纸.100013E0
100014DB 8BC6 mov eax,esi
100014DD 5F pop edi
100014DE 5E pop esi
100014DF C2 0400 retn 4
100014E2 90 nop
100014E3 90 nop
100014E4 90 nop
100014E5 90 nop
100014E6 90 nop
100014E7 90 nop
100014E8 90 nop
100014E9 90 nop
100014EA 90 nop
100014EB 90 nop
100014EC 90 nop
100014ED 90 nop
100014EE 90 nop
100014EF 90 nop
100014F0 56 push esi
100014F1 8B7424 08 mov esi,dword ptr ss:[esp+8]
100014F5 57 push edi
100014F6 8BFE mov edi,esi
100014F8 83C9 FF or ecx,FFFFFFFF
100014FB 33C0 xor eax,eax
100014FD F2:AE repne scas byte ptr es:[edi]
100014FF F7D1 not ecx
10001501 49 dec ecx
10001502 6A 01 push 1
10001504 51 push ecx
10001505 56 push esi
10001506 E8 D5FEFFFF call 驾校无纸.100013E0
1000150B 8BC6 mov eax,esi
1000150D 5F pop edi
1000150E 5E pop esi
1000150F C2 0400 retn 4
10001512 90 nop
10001513 90 nop
10001514 90 nop
10001515 90 nop
10001516 90 nop
10001517 90 nop
10001518 90 nop
10001519 90 nop
1000151A 90 nop
1000151B 90 nop
1000151C 90 nop
1000151D 90 nop
1000151E 90 nop
1000151F 90 nop
10001520 53 push ebx
10001521 55 push ebp
10001522 56 push esi
10001523 8B7424 10 mov esi,dword ptr ss:[esp+10]
10001527 57 push edi
10001528 83C8 FF or eax,FFFFFFFF
1000152B 8A0E mov cl,byte ptr ds:[esi]
1000152D 33FF xor edi,edi
1000152F 84C9 test cl,cl
10001531 74 4B je short 驾校无纸.1000157E
10001533 8B5C24 18 mov ebx,dword ptr ss:[esp+18]
10001537 8B2D 10500010 mov ebp,dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
1000153D 3BFB cmp edi,ebx
1000153F 7F 3D jg short 驾校无纸.1000157E
10001541 83F8 01 cmp eax,1
10001544 75 16 jnz short 驾校无纸.1000155C
10001546 33C0 xor eax,eax
10001548 8A06 mov al,byte ptr ds:[esi]
1000154A 50 push eax
1000154B E8 80050000 call 驾校无纸.10001AD0
10001550 83C4 04 add esp,4
10001553 F7D8 neg eax
10001555 1BC0 sbb eax,eax
10001557 83E0 03 and eax,3
1000155A EB 18 jmp short 驾校无纸.10001574
1000155C 8A0E mov cl,byte ptr ds:[esi]
1000155E 51 push ecx
1000155F FFD5 call ebp
10001561 85C0 test eax,eax
10001563 74 07 je short 驾校无纸.1000156C
10001565 B8 01000000 mov eax,1
1000156A EB 09 jmp short 驾校无纸.10001575
1000156C 8A06 mov al,byte ptr ds:[esi]
1000156E F6D8 neg al
10001570 1BC0 sbb eax,eax
10001572 F7D8 neg eax
10001574 48 dec eax
10001575 8A4E 01 mov cl,byte ptr ds:[esi+1]
10001578 46 inc esi
10001579 47 inc edi
1000157A 84C9 test cl,cl
1000157C ^ 75 BF jnz short 驾校无纸.1000153D
1000157E 5F pop edi
1000157F 5E pop esi
10001580 5D pop ebp
10001581 5B pop ebx
10001582 C2 0800 retn 8
10001585 90 nop
10001586 90 nop
10001587 90 nop
10001588 90 nop
10001589 90 nop
1000158A 90 nop
1000158B 90 nop
1000158C 90 nop
1000158D 90 nop
1000158E 90 nop
1000158F 90 nop
10001590 53 push ebx
10001591 55 push ebp
10001592 56 push esi
10001593 57 push edi
10001594 8B7C24 14 mov edi,dword ptr ss:[esp+14]
10001598 33F6 xor esi,esi
1000159A 85FF test edi,edi
1000159C 74 26 je short 驾校无纸.100015C4
1000159E 8A07 mov al,byte ptr ds:[edi]
100015A0 84C0 test al,al
100015A2 74 20 je short 驾校无纸.100015C4
100015A4 8B2D 10500010 mov ebp,dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
100015AA 33DB xor ebx,ebx
100015AC 85F6 test esi,esi
100015AE 74 1D je short 驾校无纸.100015CD
100015B0 33F6 xor esi,esi
100015B2 43 inc ebx
100015B3 8A47 01 mov al,byte ptr ds:[edi+1]
100015B6 47 inc edi
100015B7 84C0 test al,al
100015B9 ^ 75 F1 jnz short 驾校无纸.100015AC
100015BB 8BC3 mov eax,ebx
100015BD 5F pop edi
100015BE 5E pop esi
100015BF 5D pop ebp
100015C0 5B pop ebx
100015C1 C2 0400 retn 4
100015C4 5F pop edi
100015C5 5E pop esi
100015C6 5D pop ebp
100015C7 33C0 xor eax,eax
100015C9 5B pop ebx
100015CA C2 0400 retn 4
100015CD 50 push eax
100015CE FFD5 call ebp
100015D0 85C0 test eax,eax
100015D2 ^ 74 DE je short 驾校无纸.100015B2
100015D4 BE 01000000 mov esi,1
100015D9 ^ EB D8 jmp short 驾校无纸.100015B3
100015DB 90 nop
100015DC 90 nop
100015DD 90 nop
100015DE 90 nop
100015DF 90 nop
100015E0 53 push ebx
100015E1 55 push ebp
100015E2 56 push esi
100015E3 8B7424 10 mov esi,dword ptr ss:[esp+10]
100015E7 57 push edi
100015E8 33FF xor edi,edi
100015EA 85F6 test esi,esi
100015EC 74 29 je short 驾校无纸.10001617
100015EE 8A06 mov al,byte ptr ds:[esi]
100015F0 84C0 test al,al
100015F2 74 23 je short 驾校无纸.10001617
100015F4 33ED xor ebp,ebp
100015F6 33DB xor ebx,ebx
100015F8 3B5C24 18 cmp ebx,dword ptr ss:[esp+18]
100015FC 73 10 jnb short 驾校无纸.1000160E
100015FE 85FF test edi,edi
10001600 74 1E je short 驾校无纸.10001620
10001602 33FF xor edi,edi
10001604 43 inc ebx
10001605 8A46 01 mov al,byte ptr ds:[esi+1]
10001608 46 inc esi
10001609 45 inc ebp
1000160A 84C0 test al,al
1000160C ^ 75 EA jnz short 驾校无纸.100015F8
1000160E 8BC5 mov eax,ebp
10001610 5F pop edi
10001611 5E pop esi
10001612 5D pop ebp
10001613 5B pop ebx
10001614 C2 0800 retn 8
10001617 5F pop edi
10001618 5E pop esi
10001619 5D pop ebp
1000161A 33C0 xor eax,eax
1000161C 5B pop ebx
1000161D C2 0800 retn 8
10001620 50 push eax
10001621 FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
10001627 85C0 test eax,eax
10001629 ^ 74 D9 je short 驾校无纸.10001604
1000162B BF 01000000 mov edi,1
10001630 ^ EB D3 jmp short 驾校无纸.10001605
10001632 90 nop
10001633 90 nop
10001634 90 nop
10001635 90 nop
10001636 90 nop
10001637 90 nop
10001638 90 nop
10001639 90 nop
1000163A 90 nop
1000163B 90 nop
1000163C 90 nop
1000163D 90 nop
1000163E 90 nop
1000163F 90 nop
10001640 53 push ebx
10001641 55 push ebp
10001642 56 push esi
10001643 8B7424 10 mov esi,dword ptr ss:[esp+10]
10001647 57 push edi
10001648 33FF xor edi,edi
1000164A 85F6 test esi,esi
1000164C 74 29 je short 驾校无纸.10001677
1000164E 8A06 mov al,byte ptr ds:[esi]
10001650 84C0 test al,al
10001652 74 23 je short 驾校无纸.10001677
10001654 33ED xor ebp,ebp
10001656 33DB xor ebx,ebx
10001658 3B5C24 18 cmp ebx,dword ptr ss:[esp+18]
1000165C 73 10 jnb short 驾校无纸.1000166E
1000165E 85FF test edi,edi
10001660 74 1E je short 驾校无纸.10001680
10001662 33FF xor edi,edi
10001664 45 inc ebp
10001665 8A46 01 mov al,byte ptr ds:[esi+1]
10001668 46 inc esi
10001669 43 inc ebx
1000166A 84C0 test al,al
1000166C ^ 75 EA jnz short 驾校无纸.10001658
1000166E 8BC5 mov eax,ebp
10001670 5F pop edi
10001671 5E pop esi
10001672 5D pop ebp
10001673 5B pop ebx
10001674 C2 0800 retn 8
10001677 5F pop edi
10001678 5E pop esi
10001679 5D pop ebp
1000167A 33C0 xor eax,eax
1000167C 5B pop ebx
1000167D C2 0800 retn 8
10001680 50 push eax
10001681 FF15 10500010 call dword ptr ds:[<&KERNEL32.IsDBCSLeadByte>] ; kernel32.IsDBCSLeadByte
10001687 85C0 test eax,eax
10001689 ^ 74 D9 je short 驾校无纸.10001664
1000168B BF 01000000 mov edi,1
10001690 ^ EB D3 jmp short 驾校无纸.10001665
10001692 90 nop
10001693 90 nop
10001694 90 nop
10001695 90 nop
10001696 90 nop
10001697 90 nop
10001698 90 nop
10001699 90 nop
1000169A 90 nop
1000169B 90 nop
1000169C 90 nop
1000169D 90 nop
1000169E 90 nop
1000169F 90 nop
100016A0 8B4424 04 mov eax,dword ptr ss:[esp+4]
100016A4 A8 80 test al,80
100016A6 75 12 jnz short 驾校无纸.100016BA
100016A8 83F8 30 cmp eax,30
100016AB 7C 0D jl short 驾校无纸.100016BA
100016AD 83F8 39 cmp eax,39
100016B0 7F 08 jg short 驾校无纸.100016BA
100016B2 B8 01000000 mov eax,1
100016B7 C2 0400 retn 4
100016BA 33C0 xor eax,eax
100016BC C2 0400 retn 4
100016BF 90 nop
100016C0 - FF25 94500010 jmp dword ptr ds:[<&PBVM80.#137>] ; PBVM80.FN_RunExecutable
100016C6 CC int3
100016C7 CC int3
100016C8 CC int3
100016C9 CC int3
100016CA CC int3
100016CB CC int3
100016CC CC int3
100016CD CC int3
100016CE CC int3
100016CF CC int3
100016D0 8D42 FF lea eax,dword ptr ds:[edx-1]
100016D3 5B pop ebx
100016D4 C3 retn
100016D5 2E:8BC0 mov eax,eax
100016D8 2E:8BC0 mov eax,eax
100016DB 2E:8BC0 mov eax,eax
100016DE 8BC0 mov eax,eax
100016E0 33C0 xor eax,eax
100016E2 8A4424 08 mov al,byte ptr ss:[esp+8]
100016E6 53 push ebx
100016E7 8BD8 mov ebx,eax
100016E9 C1E0 08 shl eax,8
100016EC 8B5424 08 mov edx,dword ptr ss:[esp+8]
100016F0 F7C2 03000000 test edx,3
100016F6 74 13 je short 驾校无纸.1000170B
100016F8 8A0A mov cl,byte ptr ds:[edx]
100016FA 42 inc edx
100016FB 38D9 cmp cl,bl
100016FD ^ 74 D1 je short 驾校无纸.100016D0
100016FF 84C9 test cl,cl
10001701 74 51 je short 驾校无纸.10001754
10001703 F7C2 03000000 test edx,3
10001709 ^ 75 ED jnz short 驾校无纸.100016F8
1000170B 0BD8 or ebx,eax
1000170D 57 push edi
1000170E 8BC3 mov eax,ebx
10001710 C1E3 10 shl ebx,10
10001713 56 push esi
10001714 0BD8 or ebx,eax
10001716 8B0A mov ecx,dword ptr ds:[edx]
10001718 BF FFFEFE7E mov edi,7EFEFEFF
1000171D 8BC1 mov eax,ecx
1000171F 8BF7 mov esi,edi
10001721 33CB xor ecx,ebx
10001723 03F0 add esi,eax
10001725 03F9 add edi,ecx
10001727 83F1 FF xor ecx,FFFFFFFF
1000172A 83F0 FF xor eax,FFFFFFFF
1000172D 33CF xor ecx,edi
1000172F 33C6 xor eax,esi
10001731 83C2 04 add edx,4
10001734 81E1 00010181 and ecx,81010100
1000173A 75 1C jnz short 驾校无纸.10001758
1000173C 25 00010181 and eax,81010100
10001741 ^ 74 D3 je short 驾校无纸.10001716
10001743 25 00010101 and eax,1010100
10001748 75 08 jnz short 驾校无纸.10001752
1000174A 81E6 00000080 and esi,80000000
10001750 ^ 75 C4 jnz short 驾校无纸.10001716
10001752 5E pop esi
10001753 5F pop edi
10001754 5B pop ebx
10001755 33C0 xor eax,eax
10001757 C3 retn
10001758 8B42 FC mov eax,dword ptr ds:[edx-4]
1000175B 38D8 cmp al,bl
1000175D 74 36 je short 驾校无纸.10001795
1000175F 84C0 test al,al
10001761 ^ 74 EF je short 驾校无纸.10001752
10001763 38DC cmp ah,bl
10001765 74 27 je short 驾校无纸.1000178E
10001767 84E4 test ah,ah
10001769 ^ 74 E7 je short 驾校无纸.10001752
1000176B C1E8 10 shr eax,10
1000176E 38D8 cmp al,bl
10001770 74 15 je short 驾校无纸.10001787
10001772 84C0 test al,al
10001774 ^ 74 DC je short 驾校无纸.10001752
10001776 38DC cmp ah,bl
10001778 74 06 je short 驾校无纸.10001780
1000177A 84E4 test ah,ah
1000177C ^ 74 D4 je short 驾校无纸.10001752
1000177E ^ EB 96 jmp short 驾校无纸.10001716
10001780 5E pop esi
10001781 5F pop edi
10001782 8D42 FF lea eax,dword ptr ds:[edx-1]
10001785 5B pop ebx
10001786 C3 retn
10001787 8D42 FE lea eax,dword ptr ds:[edx-2]
1000178A 5E pop esi
1000178B 5F pop edi
1000178C 5B pop ebx
1000178D C3 retn
1000178E 8D42 FD lea eax,dword ptr ds:[edx-3]
10001791 5E pop esi
10001792 5F pop edi
10001793 5B pop ebx
10001794 C3 retn
10001795 8D42 FC lea eax,dword ptr ds:[edx-4]
10001798 5E pop esi
10001799 5F pop edi
1000179A 5B pop ebx
1000179B C3 retn
1000179C CC int3
1000179D CC int3
1000179E CC int3
1000179F CC int3
100017A0 A1 D0860010 mov eax,dword ptr ds:[100086D0]
100017A5 53 push ebx
100017A6 85C0 test eax,eax
100017A8 56 push esi
100017A9 75 15 jnz short 驾校无纸.100017C0
100017AB 8B4424 10 mov eax,dword ptr ss:[esp+10]
100017AF 8B4C24 0C mov ecx,dword ptr ss:[esp+C]
100017B3 50 push eax
100017B4 51 push ecx
100017B5 E8 26FFFFFF call 驾校无纸.100016E0
100017BA 83C4 08 add esp,8
100017BD 5E pop esi
100017BE 5B pop ebx
100017BF C3 retn
100017C0 8B5424 0C mov edx,dword ptr ss:[esp+C]
100017C4 8B7424 10 mov esi,dword ptr ss:[esp+10]
100017C8 66:0FB602 movzx ax,byte ptr ds:[edx]
100017CC 66:85C0 test ax,ax
100017CF 74 66 je short 驾校无纸.10001837
100017D1 B3 04 mov bl,4
100017D3 8BC8 mov ecx,eax
100017D5 81E1 FF000000 and ecx,0FF
100017DB 8499 C9840010 test byte ptr ds:[ecx+100084C9],bl
100017E1 74 1E je short 驾校无纸.10001801
100017E3 8A4A 01 mov cl,byte ptr ds:[edx+1]
100017E6 42 inc edx
100017E7 84C9 test cl,cl
100017E9 74 41 je short 驾校无纸.1000182C
100017EB 25 FFFF0000 and eax,0FFFF
100017F0 81E1 FF000000 and ecx,0FF
100017F6 C1E0 08 shl eax,8
100017F9 0BC1 or eax,ecx
100017FB 3BF0 cmp esi,eax
100017FD 74 32 je short 驾校无纸.10001831
100017FF EB 0C jmp short 驾校无纸.1000180D
10001801 8BC8 mov ecx,eax
10001803 81E1 FFFF0000 and ecx,0FFFF
10001809 3BF1 cmp esi,ecx
1000180B 74 2A je short 驾校无纸.10001837
1000180D 66:0FB642 01 movzx ax,byte ptr ds:[edx+1]
10001812 42 inc edx
10001813 66:85C0 test ax,ax
10001816 ^ 75 BB jnz short 驾校无纸.100017D3
10001818 25 FFFF0000 and eax,0FFFF
1000181D 33C9 xor ecx,ecx
1000181F 3BF0 cmp esi,eax
10001821 0F95C1 setne cl
10001824 49 dec ecx
10001825 23CA and ecx,edx
10001827 8BC1 mov eax,ecx
10001829 5E pop esi
1000182A 5B pop ebx
1000182B C3 retn
1000182C 33C0 xor eax,eax
1000182E 5E pop esi
1000182F 5B pop ebx
10001830 C3 retn
10001831 8D42 FF lea eax,dword ptr ds:[edx-1]
10001834 5E pop esi
10001835 5B pop ebx
10001836 C3 retn
10001837 25 FFFF0000 and eax,0FFFF
1000183C 33C9 xor ecx,ecx
1000183E 3BF0 cmp esi,eax
10001840 5E pop esi
10001841 0F95C1 setne cl
10001844 49 dec ecx
10001845 5B pop ebx
10001846 23CA and ecx,edx
10001848 8BC1 mov eax,ecx
1000184A C3 retn
1000184B 90 nop
1000184C 90 nop
1000184D 90 nop
1000184E 90 nop
1000184F 90 nop
10001850 A1 F8860010 mov eax,dword ptr ds:[100086F8]
10001855 83EC 08 sub esp,8
10001858 85C0 test eax,eax
1000185A 53 push ebx
1000185B 75 1E jnz short 驾校无纸.1000187B
1000185D 8B4424 10 mov eax,dword ptr ss:[esp+10]
10001861 83F8 41 cmp eax,41
10001864 0F8C DF000000 jl 驾校无纸.10001949
1000186A 83F8 5A cmp eax,5A
1000186D 0F8F D6000000 jg 驾校无纸.10001949
10001873 83C0 20 add eax,20
10001876 5B pop ebx
10001877 83C4 08 add esp,8
1000187A C3 retn
1000187B 8B5C24 10 mov ebx,dword ptr ss:[esp+10]
1000187F 81FB 00010000 cmp ebx,100
10001885 7D 2C jge short 驾校无纸.100018B3
10001887 833D 3C630010 0>cmp dword ptr ds:[1000633C],1
1000188E 7E 0D jle short 驾校无纸.1000189D
10001890 6A 01 push 1
10001892 53 push ebx
10001893 E8 E80B0000 call 驾校无纸.10002480
10001898 83C4 08 add esp,8
1000189B EB 0B jmp short 驾校无纸.100018A8
1000189D A1 30610010 mov eax,dword ptr ds:[10006130]
100018A2 8A0458 mov al,byte ptr ds:[eax+ebx*2]
100018A5 83E0 01 and eax,1
100018A8 85C0 test eax,eax
100018AA 75 07 jnz short 驾校无纸.100018B3
100018AC 8BC3 mov eax,ebx
100018AE 5B pop ebx
100018AF 83C4 08 add esp,8
100018B2 C3 retn
100018B3 8B15 30610010 mov edx,dword ptr ds:[10006130] ; 驾校无纸.1000613A
100018B9 8BC3 mov eax,ebx
100018BB C1F8 08 sar eax,8
100018BE 8BC8 mov ecx,eax
100018C0 81E1 FF000000 and ecx,0FF
100018C6 F6444A 01 80 test byte ptr ds:[edx+ecx*2+1],80
100018CB 74 14 je short 驾校无纸.100018E1
100018CD 884424 10 mov byte ptr ss:[esp+10],al
100018D1 885C24 11 mov byte ptr ss:[esp+11],bl
100018D5 C64424 12 00 mov byte ptr ss:[esp+12],0
100018DA B8 02000000 mov eax,2
100018DF EB 0E jmp short 驾校无纸.100018EF
100018E1 885C24 10 mov byte ptr ss:[esp+10],bl
100018E5 C64424 11 00 mov byte ptr ss:[esp+11],0
100018EA B8 01000000 mov eax,1
100018EF 6A 01 push 1
100018F1 6A 00 push 0
100018F3 8D4C24 0C lea ecx,dword ptr ss:[esp+C]
100018F7 6A 03 push 3
100018F9 51 push ecx
100018FA 8D5424 20 lea edx,dword ptr ss:[esp+20]
100018FE 50 push eax
100018FF A1 F8860010 mov eax,dword ptr ds:[100086F8]
10001904 52 push edx
10001905 68 00010000 push 100
1000190A 50 push eax
1000190B E8 10090000 call 驾校无纸.10002220
10001910 83C4 20 add esp,20
10001913 85C0 test eax,eax
10001915 75 07 jnz short 驾校无纸.1000191E
10001917 8BC3 mov eax,ebx
10001919 5B pop ebx
1000191A 83C4 08 add esp,8
1000191D C3 retn
1000191E 83F8 01 cmp eax,1
10001921 75 0E jnz short 驾校无纸.10001931
10001923 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001927 25 FF000000 and eax,0FF
1000192C 5B pop ebx
1000192D 83C4 08 add esp,8
10001930 C3 retn
10001931 8B4424 05 mov eax,dword ptr ss:[esp+5]
10001935 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
10001939 25 FF000000 and eax,0FF
1000193E 81E1 FF000000 and ecx,0FF
10001944 C1E0 08 shl eax,8
10001947 0BC1 or eax,ecx
10001949 5B pop ebx
1000194A 83C4 08 add esp,8
1000194D C3 retn
1000194E 90 nop
1000194F 90 nop
10001950 833D 3C630010 0>cmp dword ptr ds:[1000633C],1
10001957 7E 10 jle short 驾校无纸.10001969
10001959 8B4424 04 mov eax,dword ptr ss:[esp+4]
1000195D 6A 01 push 1
1000195F 50 push eax
10001960 E8 1B0B0000 call 驾校无纸.10002480
10001965 83C4 08 add esp,8
10001968 C3 retn
10001969 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
1000196D 8B15 30610010 mov edx,dword ptr ds:[10006130] ; 驾校无纸.1000613A
10001973 8A044A mov al,byte ptr ds:[edx+ecx*2]
10001976 83E0 01 and eax,1
10001979 C3 retn
1000197A 90 nop
1000197B 90 nop
1000197C 90 nop
1000197D 90 nop
1000197E 90 nop
1000197F 90 nop
10001980 833D 3C630010 0>cmp dword ptr ds:[1000633C],1
10001987 7E 10 jle short 驾校无纸.10001999
10001989 8B4424 04 mov eax,dword ptr ss:[esp+4]
1000198D 6A 02 push 2
1000198F 50 push eax
10001990 E8 EB0A0000 call 驾校无纸.10002480
10001995 83C4 08 add esp,8
10001998 C3 retn
10001999 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
1000199D 8B15 30610010 mov edx,dword ptr ds:[10006130] ; 驾校无纸.1000613A
100019A3 8A044A mov al,byte ptr ds:[edx+ecx*2]
100019A6 83E0 02 and eax,2
100019A9 C3 retn
100019AA 90 nop
100019AB 90 nop
100019AC 90 nop
100019AD 90 nop
100019AE 90 nop
100019AF 90 nop
100019B0 A1 F8860010 mov eax,dword ptr ds:[100086F8]
100019B5 83EC 08 sub esp,8
100019B8 85C0 test eax,eax
100019BA 53 push ebx
100019BB 75 1E jnz short 驾校无纸.100019DB
100019BD 8B4424 10 mov eax,dword ptr ss:[esp+10]
100019C1 83F8 61 cmp eax,61
100019C4 0F8C DF000000 jl 驾校无纸.10001AA9
100019CA 83F8 7A cmp eax,7A
100019CD 0F8F D6000000 jg 驾校无纸.10001AA9
100019D3 83E8 20 sub eax,20
100019D6 5B pop ebx
100019D7 83C4 08 add esp,8
100019DA C3 retn
100019DB 8B5C24 10 mov ebx,dword ptr ss:[esp+10]
100019DF 81FB 00010000 cmp ebx,100
100019E5 7D 2C jge short 驾校无纸.10001A13
100019E7 833D 3C630010 0>cmp dword ptr ds:[1000633C],1
100019EE 7E 0D jle short 驾校无纸.100019FD
100019F0 6A 02 push 2
100019F2 53 push ebx
100019F3 E8 880A0000 call 驾校无纸.10002480
100019F8 83C4 08 add esp,8
100019FB EB 0B jmp short 驾校无纸.10001A08
100019FD A1 30610010 mov eax,dword ptr ds:[10006130]
10001A02 8A0458 mov al,byte ptr ds:[eax+ebx*2]
10001A05 83E0 02 and eax,2
10001A08 85C0 test eax,eax
10001A0A 75 07 jnz short 驾校无纸.10001A13
10001A0C 8BC3 mov eax,ebx
10001A0E 5B pop ebx
10001A0F 83C4 08 add esp,8
10001A12 C3 retn
10001A13 8B15 30610010 mov edx,dword ptr ds:[10006130] ; 驾校无纸.1000613A
10001A19 8BC3 mov eax,ebx
10001A1B C1F8 08 sar eax,8
10001A1E 8BC8 mov ecx,eax
10001A20 81E1 FF000000 and ecx,0FF
10001A26 F6444A 01 80 test byte ptr ds:[edx+ecx*2+1],80
10001A2B 74 14 je short 驾校无纸.10001A41
10001A2D 884424 10 mov byte ptr ss:[esp+10],al
10001A31 885C24 11 mov byte ptr ss:[esp+11],bl
10001A35 C64424 12 00 mov byte ptr ss:[esp+12],0
10001A3A B8 02000000 mov eax,2
10001A3F EB 0E jmp short 驾校无纸.10001A4F
10001A41 885C24 10 mov byte ptr ss:[esp+10],bl
10001A45 C64424 11 00 mov byte ptr ss:[esp+11],0
10001A4A B8 01000000 mov eax,1
10001A4F 6A 01 push 1
10001A51 6A 00 push 0
10001A53 8D4C24 0C lea ecx,dword ptr ss:[esp+C]
10001A57 6A 03 push 3
10001A59 51 push ecx
10001A5A 8D5424 20 lea edx,dword ptr ss:[esp+20]
10001A5E 50 push eax
10001A5F A1 F8860010 mov eax,dword ptr ds:[100086F8]
10001A64 52 push edx
10001A65 68 00020000 push 200
10001A6A 50 push eax
10001A6B E8 B0070000 call 驾校无纸.10002220
10001A70 83C4 20 add esp,20
10001A73 85C0 test eax,eax
10001A75 75 07 jnz short 驾校无纸.10001A7E
10001A77 8BC3 mov eax,ebx
10001A79 5B pop ebx
10001A7A 83C4 08 add esp,8
10001A7D C3 retn
10001A7E 83F8 01 cmp eax,1
10001A81 75 0E jnz short 驾校无纸.10001A91
10001A83 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001A87 25 FF000000 and eax,0FF
10001A8C 5B pop ebx
10001A8D 83C4 08 add esp,8
10001A90 C3 retn
10001A91 8B4424 05 mov eax,dword ptr ss:[esp+5]
10001A95 8B4C24 04 mov ecx,dword ptr ss:[esp+4]
10001A99 25 FF000000 and eax,0FF
10001A9E 81E1 FF000000 and ecx,0FF
10001AA4 C1E0 08 shl eax,8
10001AA7 0BC1 or eax,ecx
10001AA9 5B pop ebx
10001AAA 83C4 08 add esp,8
10001AAD C3 retn
10001AAE 90 nop
10001AAF 90 nop
10001AB0 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001AB4 6A 04 push 4
10001AB6 6A 00 push 0
10001AB8 50 push eax
10001AB9 E8 32000000 call 驾校无纸.10001AF0
10001ABE 83C4 0C add esp,0C
10001AC1 C3 retn
10001AC2 90 nop
10001AC3 90 nop
10001AC4 90 nop
10001AC5 90 nop
10001AC6 90 nop
10001AC7 90 nop
10001AC8 90 nop
10001AC9 90 nop
10001ACA 90 nop
10001ACB 90 nop
10001ACC 90 nop
10001ACD 90 nop
10001ACE 90 nop
10001ACF 90 nop
10001AD0 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001AD4 6A 08 push 8
10001AD6 6A 00 push 0
10001AD8 50 push eax
10001AD9 E8 12000000 call 驾校无纸.10001AF0
10001ADE 83C4 0C add esp,0C
10001AE1 C3 retn
10001AE2 90 nop
10001AE3 90 nop
10001AE4 90 nop
10001AE5 90 nop
10001AE6 90 nop
10001AE7 90 nop
10001AE8 90 nop
10001AE9 90 nop
10001AEA 90 nop
10001AEB 90 nop
10001AEC 90 nop
10001AED 90 nop
10001AEE 90 nop
10001AEF 90 nop
10001AF0 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001AF4 8A4C24 0C mov cl,byte ptr ss:[esp+C]
10001AF8 25 FF000000 and eax,0FF
10001AFD 8488 C9840010 test byte ptr ds:[eax+100084C9],cl
10001B03 75 1F jnz short 驾校无纸.10001B24
10001B05 8B4C24 08 mov ecx,dword ptr ss:[esp+8]
10001B09 85C9 test ecx,ecx
10001B0B 74 10 je short 驾校无纸.10001B1D
10001B0D 33D2 xor edx,edx
10001B0F 66:8B1445 3A610>mov dx,word ptr ds:[eax*2+1000613A]
10001B17 8BC2 mov eax,edx
10001B19 23C1 and eax,ecx
10001B1B EB 02 jmp short 驾校无纸.10001B1F
10001B1D 33C0 xor eax,eax
10001B1F 85C0 test eax,eax
10001B21 75 01 jnz short 驾校无纸.10001B24
10001B23 C3 retn
10001B24 B8 01000000 mov eax,1
10001B29 C3 retn
10001B2A 90 nop
10001B2B 90 nop
10001B2C 90 nop
10001B2D 90 nop
10001B2E 90 nop
10001B2F 90 nop
10001B30 > 55 push ebp
10001B31 8BEC mov ebp,esp
10001B33 6A FF push -1
10001B35 68 A0500010 push 驾校无纸.100050A0
10001B3A 68 28300010 push 驾校无纸.10003028
10001B3F 64:A1 00000000 mov eax,dword ptr fs:[0]
10001B45 50 push eax
10001B46 64:8925 0000000>mov dword ptr fs:[0],esp
10001B4D 83C4 A8 add esp,-58
10001B50 53 push ebx
10001B51 56 push esi
10001B52 57 push edi
10001B53 8965 E8 mov dword ptr ss:[ebp-18],esp
10001B56 FF15 1C500010 call dword ptr ds:[<&KERNEL32.GetVersion>] ; kernel32.GetVersion
10001B5C 33D2 xor edx,edx
10001B5E 8AD4 mov dl,ah
10001B60 8915 24870010 mov dword ptr ds:[10008724],edx
10001B66 8BC8 mov ecx,eax
10001B68 81E1 FF000000 and ecx,0FF
10001B6E 890D 20870010 mov dword ptr ds:[10008720],ecx
10001B74 C1E1 08 shl ecx,8
10001B77 03CA add ecx,edx
10001B79 890D 1C870010 mov dword ptr ds:[1000871C],ecx
10001B7F C1E8 10 shr eax,10
10001B82 A3 18870010 mov dword ptr ds:[10008718],eax
10001B87 E8 64130000 call 驾校无纸.10002EF0
10001B8C 85C0 test eax,eax
10001B8E 75 0A jnz short 驾校无纸.10001B9A
10001B90 6A 1C push 1C
10001B92 E8 69010000 call 驾校无纸.10001D00
10001B97 83C4 04 add esp,4
10001B9A C745 FC 0000000>mov dword ptr ss:[ebp-4],0
10001BA1 E8 4A110000 call 驾校无纸.10002CF0
10001BA6 E8 65060000 call 驾校无纸.10002210
10001BAB FF15 08500010 call dword ptr ds:[<&KERNEL32.GetCommandLineA>] ; kernel32.GetCommandLineA
10001BB1 A3 B4890010 mov dword ptr ds:[100089B4],eax
10001BB6 E8 D50F0000 call 驾校无纸.10002B90
10001BBB A3 BC840010 mov dword ptr ds:[100084BC],eax
10001BC0 85C0 test eax,eax
10001BC2 74 09 je short 驾校无纸.10001BCD
10001BC4 A1 B4890010 mov eax,dword ptr ds:[100089B4]
10001BC9 85C0 test eax,eax
10001BCB 75 0A jnz short 驾校无纸.10001BD7
10001BCD 6A FF push -1
10001BCF E8 7C090000 call 驾校无纸.10002550
10001BD4 83C4 04 add esp,4
10001BD7 E8 040D0000 call 驾校无纸.100028E0
10001BDC E8 0F0C0000 call 驾校无纸.100027F0
10001BE1 E8 3A090000 call 驾校无纸.10002520
10001BE6 8B35 B4890010 mov esi,dword ptr ds:[100089B4]
10001BEC 8975 9C mov dword ptr ss:[ebp-64],esi
10001BEF 803E 22 cmp byte ptr ds:[esi],22
10001BF2 0F85 BE000000 jnz 驾校无纸.10001CB6
10001BF8 46 inc esi
10001BF9 8975 9C mov dword ptr ss:[ebp-64],esi
10001BFC 8A06 mov al,byte ptr ds:[esi]
10001BFE 3C 22 cmp al,22
10001C00 74 1C je short 驾校无纸.10001C1E
10001C02 84C0 test al,al
10001C04 74 18 je short 驾校无纸.10001C1E
10001C06 25 FF000000 and eax,0FF
10001C0B 50 push eax
10001C0C E8 9FFEFFFF call 驾校无纸.10001AB0
10001C11 83C4 04 add esp,4
10001C14 85C0 test eax,eax
10001C16 ^ 74 E0 je short 驾校无纸.10001BF8
10001C18 46 inc esi
10001C19 8975 9C mov dword ptr ss:[ebp-64],esi
10001C1C ^ EB DA jmp short 驾校无纸.10001BF8
10001C1E 803E 22 cmp byte ptr ds:[esi],22
10001C21 75 04 jnz short 驾校无纸.10001C27
10001C23 46 inc esi
10001C24 8975 9C mov dword ptr ss:[ebp-64],esi
10001C27 8A06 mov al,byte ptr ds:[esi]
10001C29 84C0 test al,al
10001C2B 74 0A je short 驾校无纸.10001C37
10001C2D 3C 20 cmp al,20
10001C2F 77 06 ja short 驾校无纸.10001C37
10001C31 46 inc esi
10001C32 8975 9C mov dword ptr ss:[ebp-64],esi
10001C35 ^ EB F0 jmp short 驾校无纸.10001C27
10001C37 C745 D0 0000000>mov dword ptr ss:[ebp-30],0
10001C3E 8D45 A4 lea eax,dword ptr ss:[ebp-5C]
10001C41 50 push eax
10001C42 FF15 18500010 call dword ptr ds:[<&KERNEL32.GetStartupInfoA>] ; kernel32.GetStartupInfoA
10001C48 F645 D0 01 test byte ptr ss:[ebp-30],1
10001C4C 74 0A je short 驾校无纸.10001C58
10001C4E 8B45 D4 mov eax,dword ptr ss:[ebp-2C]
10001C51 25 FFFF0000 and eax,0FFFF
10001C56 EB 05 jmp short 驾校无纸.10001C5D
10001C58 B8 0A000000 mov eax,0A
10001C5D 50 push eax
10001C5E 56 push esi
10001C5F 6A 00 push 0
10001C61 6A 00 push 0
10001C63 FF15 14500010 call dword ptr ds:[<&KERNEL32.GetModuleHandleA>] ; kernel32.GetModuleHandleA
10001C69 50 push eax
10001C6A E8 91F3FFFF call 驾校无纸.10001000
10001C6F 8945 A0 mov dword ptr ss:[ebp-60],eax
10001C72 50 push eax
10001C73 E8 D8080000 call 驾校无纸.10002550
10001C78 EB 21 jmp short 驾校无纸.10001C9B
10001C7A 8B45 EC mov eax,dword ptr ss:[ebp-14]
10001C7D 8B08 mov ecx,dword ptr ds:[eax]
10001C7F 8B09 mov ecx,dword ptr ds:[ecx]
10001C81 894D 98 mov dword ptr ss:[ebp-68],ecx
10001C84 50 push eax
10001C85 51 push ecx
10001C86 E8 D5090000 call 驾校无纸.10002660
10001C8B 83C4 08 add esp,8
10001C8E C3 retn
10001C8F 8B65 E8 mov esp,dword ptr ss:[ebp-18]
10001C92 8B55 98 mov edx,dword ptr ss:[ebp-68]
10001C95 52 push edx
10001C96 E8 D5080000 call 驾校无纸.10002570
10001C9B 83C4 04 add esp,4
10001C9E C745 FC FFFFFFF>mov dword ptr ss:[ebp-4],-1
10001CA5 8B4D F0 mov ecx,dword ptr ss:[ebp-10]
10001CA8 64:890D 0000000>mov dword ptr fs:[0],ecx
10001CAF 5F pop edi
10001CB0 5E pop esi
10001CB1 5B pop ebx
10001CB2 8BE5 mov esp,ebp
10001CB4 5D pop ebp
10001CB5 C3 retn
10001CB6 803E 20 cmp byte ptr ds:[esi],20
10001CB9 ^ 0F86 68FFFFFF jbe 驾校无纸.10001C27
10001CBF 46 inc esi
10001CC0 8975 9C mov dword ptr ss:[ebp-64],esi
10001CC3 ^ EB F1 jmp short 驾校无纸.10001CB6
10001CC5 90 nop
10001CC6 90 nop
10001CC7 90 nop
10001CC8 90 nop
10001CC9 90 nop
10001CCA 90 nop
10001CCB 90 nop
10001CCC 90 nop
10001CCD 90 nop
10001CCE 90 nop
10001CCF 90 nop
10001CD0 833D C4840010 0>cmp dword ptr ds:[100084C4],1
10001CD7 75 05 jnz short 驾校无纸.10001CDE
10001CD9 E8 22140000 call 驾校无纸.10003100
10001CDE 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001CE2 50 push eax
10001CE3 E8 58140000 call 驾校无纸.10003140
10001CE8 83C4 04 add esp,4
10001CEB 68 FF000000 push 0FF
10001CF0 FF15 30600010 call dword ptr ds:[10006030] ; 驾校无纸.10002570
10001CF6 83C4 04 add esp,4
10001CF9 C3 retn
10001CFA 90 nop
10001CFB 90 nop
10001CFC 90 nop
10001CFD 90 nop
10001CFE 90 nop
10001CFF 90 nop
10001D00 833D C4840010 0>cmp dword ptr ds:[100084C4],1
10001D07 75 05 jnz short 驾校无纸.10001D0E
10001D09 E8 F2130000 call 驾校无纸.10003100
10001D0E 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001D12 50 push eax
10001D13 E8 28140000 call 驾校无纸.10003140
10001D18 83C4 04 add esp,4
10001D1B 68 FF000000 push 0FF
10001D20 FF15 20500010 call dword ptr ds:[<&KERNEL32.ExitProcess>] ; kernel32.ExitProcess
10001D26 C3 retn
10001D27 90 nop
10001D28 90 nop
10001D29 90 nop
10001D2A 90 nop
10001D2B 90 nop
10001D2C 90 nop
10001D2D 90 nop
10001D2E 90 nop
10001D2F 90 nop
10001D30 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001D34 83EC 14 sub esp,14
10001D37 53 push ebx
10001D38 55 push ebp
10001D39 56 push esi
10001D3A 57 push edi
10001D3B 50 push eax
10001D3C E8 FF010000 call 驾校无纸.10001F40
10001D41 8BC8 mov ecx,eax
10001D43 A1 D0860010 mov eax,dword ptr ds:[100086D0]
10001D48 83C4 04 add esp,4
10001D4B 3BC8 cmp ecx,eax
10001D4D 894C24 28 mov dword ptr ss:[esp+28],ecx
10001D51 75 0A jnz short 驾校无纸.10001D5D
10001D53 33C0 xor eax,eax
10001D55 5F pop edi
10001D56 5E pop esi
10001D57 5D pop ebp
10001D58 5B pop ebx
10001D59 83C4 14 add esp,14
10001D5C C3 retn
10001D5D 85C9 test ecx,ecx
10001D5F 75 14 jnz short 驾校无纸.10001D75
10001D61 E8 8A020000 call 驾校无纸.10001FF0
10001D66 E8 C5020000 call 驾校无纸.10002030
10001D6B 33C0 xor eax,eax
10001D6D 5F pop edi
10001D6E 5E pop esi
10001D6F 5D pop ebp
10001D70 5B pop ebx
10001D71 83C4 14 add esp,14
10001D74 C3 retn
10001D75 33D2 xor edx,edx
10001D77 B8 40600010 mov eax,驾校无纸.10006040
10001D7C 3908 cmp dword ptr ds:[eax],ecx
10001D7E 0F84 07010000 je 驾校无纸.10001E8B
10001D84 83C0 30 add eax,30
10001D87 42 inc edx
10001D88 3D 30610010 cmp eax,驾校无纸.10006130
10001D8D ^ 72 ED jb short 驾校无纸.10001D7C
10001D8F 8D5424 10 lea edx,dword ptr ss:[esp+10]
10001D93 52 push edx
10001D94 51 push ecx
10001D95 FF15 0C500010 call dword ptr ds:[<&KERNEL32.GetCPInfo>] ; kernel32.GetCPInfo
10001D9B BE 01000000 mov esi,1
10001DA0 3BC6 cmp eax,esi
10001DA2 0F85 BB000000 jnz 驾校无纸.10001E63
10001DA8 B9 40000000 mov ecx,40
10001DAD 33C0 xor eax,eax
10001DAF BF C8840010 mov edi,驾校无纸.100084C8
10001DB4 F3:AB rep stos dword ptr es:[edi]
10001DB6 8B4C24 10 mov ecx,dword ptr ss:[esp+10]
10001DBA AA stos byte ptr es:[edi]
10001DBB 8B7C24 28 mov edi,dword ptr ss:[esp+28]
10001DBF 33C0 xor eax,eax
10001DC1 3BCE cmp ecx,esi
10001DC3 893D D0860010 mov dword ptr ds:[100086D0],edi
10001DC9 A3 D4860010 mov dword ptr ds:[100086D4],eax
10001DCE 76 6E jbe short 驾校无纸.10001E3E
10001DD0 8A4424 16 mov al,byte ptr ss:[esp+16]
10001DD4 84C0 test al,al
10001DD6 74 37 je short 驾校无纸.10001E0F
10001DD8 8D5424 17 lea edx,dword ptr ss:[esp+17]
10001DDC 8A0A mov cl,byte ptr ds:[edx]
10001DDE 84C9 test cl,cl
10001DE0 74 2D je short 驾校无纸.10001E0F
10001DE2 33C0 xor eax,eax
10001DE4 81E1 FF000000 and ecx,0FF
10001DEA 8A42 FF mov al,byte ptr ds:[edx-1]
10001DED 3BC1 cmp eax,ecx
10001DEF 77 14 ja short 驾校无纸.10001E05
10001DF1 8A98 C9840010 mov bl,byte ptr ds:[eax+100084C9]
10001DF7 80CB 04 or bl,4
10001DFA 8898 C9840010 mov byte ptr ds:[eax+100084C9],bl
10001E00 40 inc eax
10001E01 3BC1 cmp eax,ecx
10001E03 ^ 76 EC jbe short 驾校无纸.10001DF1
10001E05 8A42 01 mov al,byte ptr ds:[edx+1]
10001E08 83C2 02 add edx,2
10001E0B 84C0 test al,al
10001E0D ^ 75 CD jnz short 驾校无纸.10001DDC
10001E0F 8BC6 mov eax,esi
10001E11 8A98 C9840010 mov bl,byte ptr ds:[eax+100084C9]
10001E17 80CB 08 or bl,8
10001E1A 8898 C9840010 mov byte ptr ds:[eax+100084C9],bl
10001E20 40 inc eax
10001E21 3D FF000000 cmp eax,0FF
10001E26 ^ 72 E9 jb short 驾校无纸.10001E11
10001E28 57 push edi
10001E29 E8 62010000 call 驾校无纸.10001F90
10001E2E 83C4 04 add esp,4
10001E31 A3 D4860010 mov dword ptr ds:[100086D4],eax
10001E36 8935 B0890010 mov dword ptr ds:[100089B0],esi
10001E3C EB 05 jmp short 驾校无纸.10001E43
10001E3E A3 B0890010 mov dword ptr ds:[100089B0],eax
10001E43 33C0 xor eax,eax
10001E45 A3 D8860010 mov dword ptr ds:[100086D8],eax
10001E4A A3 DC860010 mov dword ptr ds:[100086DC],eax
10001E4F A3 E0860010 mov dword ptr ds:[100086E0],eax
10001E54 E8 D7010000 call 驾校无纸.10002030
10001E59 33C0 xor eax,eax
10001E5B 5F pop edi
10001E5C 5E pop esi
10001E5D 5D pop ebp
10001E5E 5B pop ebx
10001E5F 83C4 14 add esp,14
10001E62 C3 retn
10001E63 A1 E4860010 mov eax,dword ptr ds:[100086E4]
10001E68 85C0 test eax,eax
10001E6A 74 14 je short 驾校无纸.10001E80
10001E6C E8 7F010000 call 驾校无纸.10001FF0
10001E71 E8 BA010000 call 驾校无纸.10002030
10001E76 33C0 xor eax,eax
10001E78 5F pop edi
10001E79 5E pop esi
10001E7A 5D pop ebp
10001E7B 5B pop ebx
10001E7C 83C4 14 add esp,14
10001E7F C3 retn
10001E80 83C8 FF or eax,FFFFFFFF
10001E83 5F pop edi
10001E84 5E pop esi
10001E85 5D pop ebp
10001E86 5B pop ebx
10001E87 83C4 14 add esp,14
10001E8A C3 retn
10001E8B B9 40000000 mov ecx,40
10001E90 33C0 xor eax,eax
10001E92 BF C8840010 mov edi,驾校无纸.100084C8
10001E97 8D1C52 lea ebx,dword ptr ds:[edx+edx*2]
10001E9A F3:AB rep stos dword ptr es:[edi]
10001E9C AA stos byte ptr es:[edi]
10001E9D 33FF xor edi,edi
10001E9F C1E3 04 shl ebx,4
10001EA2 8DAB 50600010 lea ebp,dword ptr ds:[ebx+10006050]
10001EA8 8A45 00 mov al,byte ptr ss:[ebp]
10001EAB 8BF5 mov esi,ebp
10001EAD 84C0 test al,al
10001EAF 74 30 je short 驾校无纸.10001EE1
10001EB1 8A4E 01 mov cl,byte ptr ds:[esi+1]
10001EB4 84C9 test cl,cl
10001EB6 74 29 je short 驾校无纸.10001EE1
10001EB8 33C0 xor eax,eax
10001EBA 81E1 FF000000 and ecx,0FF
10001EC0 8A06 mov al,byte ptr ds:[esi]
10001EC2 3BC1 cmp eax,ecx
10001EC4 77 11 ja short 驾校无纸.10001ED7
10001EC6 8A97 38600010 mov dl,byte ptr ds:[edi+10006038]
10001ECC 0890 C9840010 or byte ptr ds:[eax+100084C9],dl
10001ED2 40 inc eax
10001ED3 3BC1 cmp eax,ecx
10001ED5 ^ 76 F5 jbe short 驾校无纸.10001ECC
10001ED7 8A46 02 mov al,byte ptr ds:[esi+2]
10001EDA 83C6 02 add esi,2
10001EDD 84C0 test al,al
10001EDF ^ 75 D0 jnz short 驾校无纸.10001EB1
10001EE1 47 inc edi
10001EE2 83C5 08 add ebp,8
10001EE5 83FF 04 cmp edi,4
10001EE8 ^ 72 BE jb short 驾校无纸.10001EA8
10001EEA 8B4424 28 mov eax,dword ptr ss:[esp+28]
10001EEE C705 B0890010 0>mov dword ptr ds:[100089B0],1
10001EF8 50 push eax
10001EF9 A3 D0860010 mov dword ptr ds:[100086D0],eax
10001EFE E8 8D000000 call 驾校无纸.10001F90
10001F03 8B8B 44600010 mov ecx,dword ptr ds:[ebx+10006044]
10001F09 8B93 48600010 mov edx,dword ptr ds:[ebx+10006048]
10001F0F A3 D4860010 mov dword ptr ds:[100086D4],eax
10001F14 8D83 44600010 lea eax,dword ptr ds:[ebx+10006044]
10001F1A 83C4 04 add esp,4
10001F1D 890D D8860010 mov dword ptr ds:[100086D8],ecx
10001F23 8B40 08 mov eax,dword ptr ds:[eax+8]
10001F26 8915 DC860010 mov dword ptr ds:[100086DC],edx
10001F2C A3 E0860010 mov dword ptr ds:[100086E0],eax
10001F31 E8 FA000000 call 驾校无纸.10002030
10001F36 5F pop edi
10001F37 5E pop esi
10001F38 5D pop ebp
10001F39 33C0 xor eax,eax
10001F3B 5B pop ebx
10001F3C 83C4 14 add esp,14
10001F3F C3 retn
10001F40 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001F44 C705 E4860010 0>mov dword ptr ds:[100086E4],0
10001F4E 83F8 FE cmp eax,-2
10001F51 75 10 jnz short 驾校无纸.10001F63
10001F53 C705 E4860010 0>mov dword ptr ds:[100086E4],1
10001F5D - FF25 28500010 jmp dword ptr ds:[<&KERNEL32.GetOEMCP>] ; kernel32.GetOEMCP
10001F63 83F8 FD cmp eax,-3
10001F66 75 10 jnz short 驾校无纸.10001F78
10001F68 C705 E4860010 0>mov dword ptr ds:[100086E4],1
10001F72 - FF25 24500010 jmp dword ptr ds:[<&KERNEL32.GetACP>] ; kernel32.GetACP
10001F78 83F8 FC cmp eax,-4
10001F7B 75 0F jnz short 驾校无纸.10001F8C
10001F7D A1 08870010 mov eax,dword ptr ds:[10008708]
10001F82 C705 E4860010 0>mov dword ptr ds:[100086E4],1
10001F8C C3 retn
10001F8D 90 nop
10001F8E 90 nop
10001F8F 90 nop
10001F90 8B4424 04 mov eax,dword ptr ss:[esp+4]
10001F94 05 5CFCFFFF add eax,-3A4
10001F99 83F8 12 cmp eax,12
10001F9C 77 27 ja short 驾校无纸.10001FC5
10001F9E 33C9 xor ecx,ecx
10001FA0 8A88 DC1F0010 mov cl,byte ptr ds:[eax+10001FDC]
10001FA6 FF248D C81F0010 jmp dword ptr ds:[ecx*4+10001FC8]
10001FAD B8 11040000 mov eax,411
10001FB2 C3 retn
10001FB3 B8 04080000 mov eax,804
10001FB8 C3 retn
10001FB9 B8 12040000 mov eax,412
10001FBE C3 retn
10001FBF B8 04040000 mov eax,404
10001FC4 C3 retn
10001FC5 33C0 xor eax,eax
10001FC7 C3 retn
10001FC8 AD lods dword ptr ds:[esi]
10001FC9 1F pop ds
10001FCA 0010 add byte ptr ds:[eax],dl
10001FCC B3 1F mov bl,1F
10001FCE 0010 add byte ptr ds:[eax],dl
10001FD0 B9 1F0010BF mov ecx,BF10001F
10001FD5 1F pop ds
10001FD6 0010 add byte ptr ds:[eax],dl
10001FD8 C51F lds ebx,fword ptr ds:[edi]
10001FDA 0010 add byte ptr ds:[eax],dl
10001FDC 000404 add byte ptr ss:[esp+eax],al
10001FDF 04 01 add al,1
10001FE1 04 04 add al,4
10001FE3 04 04 add al,4
10001FE5 04 04 add al,4
10001FE7 04 04 add al,4
10001FE9 04 04 add al,4
10001FEB 04 04 add al,4
10001FED 0203 add al,byte ptr ds:[ebx]
10001FEF 90 nop
10001FF0 57 push edi
10001FF1 B9 40000000 mov ecx,40
10001FF6 33C0 xor eax,eax
10001FF8 BF C8840010 mov edi,驾校无纸.100084C8
10001FFD F3:AB rep stos dword ptr es:[edi]
10001FFF AA stos byte ptr es:[edi]
10002000 33C0 xor eax,eax
10002002 5F pop edi
10002003 A3 D0860010 mov dword ptr ds:[100086D0],eax
10002008 A3 B0890010 mov dword ptr ds:[100089B0],eax
1000200D A3 D4860010 mov dword ptr ds:[100086D4],eax
10002012 A3 D8860010 mov dword ptr ds:[100086D8],eax
10002017 A3 DC860010 mov dword ptr ds:[100086DC],eax
1000201C A3 E0860010 mov dword ptr ds:[100086E0],eax
10002021 C3 retn
10002022 90 nop
10002023 90 nop
10002024 90 nop
10002025 90 nop
10002026 90 nop
10002027 90 nop
10002028 90 nop
10002029 90 nop
1000202A 90 nop
1000202B 90 nop
1000202C 90 nop
1000202D 90 nop
1000202E 90 nop
1000202F 90 nop
10002030 8B0D D0860010 mov ecx,dword ptr ds:[100086D0]
10002036 81EC 14050000 sub esp,514
1000203C 8D4424 00 lea eax,dword ptr ss:[esp]
10002040 53 push ebx
10002041 50 push eax
10002042 51 push ecx
10002043 FF15 0C500010 call dword ptr ds:[<&KERNEL32.GetCPInfo>] ; kernel32.GetCPInfo
10002049 83F8 01 cmp eax,1
1000204C 0F85 52010000 jnz 驾校无纸.100021A4
10002052 57 push edi
10002053 56 push esi
10002054 33C0 xor eax,eax
10002056 884404 20 mov byte ptr ss:[esp+eax+20],al
1000205A 40 inc eax
1000205B 3D 00010000 cmp eax,100
10002060 ^ 72 F4 jb short 驾校无纸.10002056
10002062 8A4424 12 mov al,byte ptr ss:[esp+12]
10002066 C64424 20 20 mov byte ptr ss:[esp+20],20
1000206B 84C0 test al,al
1000206D 74 35 je short 驾校无纸.100020A4
1000206F 8D5424 13 lea edx,dword ptr ss:[esp+13]
10002073 33C9 xor ecx,ecx
10002075 25 FF000000 and eax,0FF
1000207A 8A0A mov cl,byte ptr ds:[edx]
1000207C 3BC1 cmp eax,ecx
1000207E 77 1A ja short 驾校无纸.1000209A
10002080 2BC8 sub ecx,eax
10002082 8D7C04 20 lea edi,dword ptr ss:[esp+eax+20]
10002086 41 inc ecx
10002087 B8 20202020 mov eax,20202020
1000208C 8BF1 mov esi,ecx
1000208E C1E9 02 shr ecx,2
10002091 F3:AB rep stos dword ptr es:[edi]
10002093 8BCE mov ecx,esi
10002095 83E1 03 and ecx,3
10002098 F3:AA rep stos byte ptr es:[edi]
1000209A 8A42 01 mov al,byte ptr ds:[edx+1]
1000209D 83C2 02 add edx,2
100020A0 84C0 test al,al
100020A2 ^ 75 CF jnz short 驾校无纸.10002073
100020A4 8B15 D4860010 mov edx,dword ptr ds:[100086D4]
100020AA A1 D0860010 mov eax,dword ptr ds:[100086D0]
100020AF 6A 00 push 0
100020B1 52 push edx
100020B2 8D8C24 28030000 lea ecx,dword ptr ss:[esp+328]
100020B9 50 push eax
100020BA 51 push ecx
100020BB 8D5424 30 lea edx,dword ptr ss:[esp+30]
100020BF 68 00010000 push 100
100020C4 52 push edx
100020C5 6A 01 push 1
100020C7 E8 54120000 call 驾校无纸.10003320
100020CC A1 D0860010 mov eax,dword ptr ds:[100086D0]
100020D1 83C4 1C add esp,1C
100020D4 8D8C24 20010000 lea ecx,dword ptr ss:[esp+120]
100020DB 8D5424 20 lea edx,dword ptr ss:[esp+20]
100020DF 6A 00 push 0
100020E1 50 push eax
100020E2 A1 D4860010 mov eax,dword ptr ds:[100086D4]
100020E7 68 00010000 push 100
100020EC 51 push ecx
100020ED 68 00010000 push 100
100020F2 52 push edx
100020F3 68 00010000 push 100
100020F8 50 push eax
100020F9 E8 22010000 call 驾校无纸.10002220
100020FE 8B0D D0860010 mov ecx,dword ptr ds:[100086D0]
10002104 83C4 20 add esp,20
10002107 8D9424 20020000 lea edx,dword ptr ss:[esp+220]
1000210E 8D4424 20 lea eax,dword ptr ss:[esp+20]
10002112 6A 00 push 0
10002114 51 push ecx
10002115 8B0D D4860010 mov ecx,dword ptr ds:[100086D4]
1000211B 68 00010000 push 100
10002120 52 push edx
10002121 68 00010000 push 100
10002126 50 push eax
10002127 68 00020000 push 200
1000212C 51 push ecx
1000212D E8 EE000000 call 驾校无纸.10002220
10002132 83C4 20 add esp,20
10002135 33C0 xor eax,eax
10002137 8D9424 20030000 lea edx,dword ptr ss:[esp+320]
1000213E B3 10 mov bl,10
10002140 66:8B0A mov cx,word ptr ds:[edx]
10002143 F6C1 01 test cl,1
10002146 74 1D je short 驾校无纸.10002165
10002148 8A88 C9840010 mov cl,byte ptr ds:[eax+100084C9]
1000214E 0ACB or cl,bl
10002150 8888 C9840010 mov byte ptr ds:[eax+100084C9],cl
10002156 8A8C04 20010000 mov cl,byte ptr ss:[esp+eax+120]
1000215D 8888 D0850010 mov byte ptr ds:[eax+100085D0],cl
10002163 EB 2A jmp short 驾校无纸.1000218F
10002165 F6C1 02 test cl,2
10002168 74 1E je short 驾校无纸.10002188
1000216A 8A88 C9840010 mov cl,byte ptr ds:[eax+100084C9]
10002170 80C9 20 or cl,20
10002173 8888 C9840010 mov byte ptr ds:[eax+100084C9],cl
10002179 8A8C04 20020000 mov cl,byte ptr ss:[esp+eax+220]
10002180 8888 D0850010 mov byte ptr ds:[eax+100085D0],cl
10002186 EB 07 jmp short 驾校无纸.1000218F
10002188 C680 D0850010 0>mov byte ptr ds:[eax+100085D0],0
1000218F 40 inc eax
10002190 83C2 02 add edx,2
10002193 3D 00010000 cmp eax,100
10002198 ^ 72 A6 jb short 驾校无纸.10002140
1000219A 5E pop esi
1000219B 5F pop edi
1000219C 5B pop ebx
1000219D 81C4 14050000 add esp,514
100021A3 C3 retn
100021A4 33C0 xor eax,eax
100021A6 B3 10 mov bl,10
100021A8 83F8 41 cmp eax,41
100021AB 72 20 jb short 驾校无纸.100021CD
100021AD 83F8 5A cmp eax,5A
100021B0 77 1B ja short 驾校无纸.100021CD
100021B2 8A90 C9840010 mov dl,byte ptr ds:[eax+100084C9]
100021B8 0AD3 or dl,bl
100021BA 8890 C9840010 mov byte ptr ds:[eax+100084C9],dl
100021C0 8AD0 mov dl,al
100021C2 80C2 20 add dl,20
100021C5 8890 D0850010 mov byte ptr ds:[eax+100085D0],dl
100021CB EB 2D jmp short 驾校无纸.100021FA
100021CD 83F8 61 cmp eax,61
100021D0 72 21 jb short 驾校无纸.100021F3
100021D2 83F8 7A cmp eax,7A
100021D5 77 1C ja short 驾校无纸.100021F3
100021D7 8A88 C9840010 mov cl,byte ptr ds:[eax+100084C9]
100021DD 80C9 20 or cl,20
100021E0 8888 C9840010 mov byte ptr ds:[eax+100084C9],cl
100021E6 8AC8 mov cl,al
100021E8 80E9 20 sub cl,20
100021EB 8888 D0850010 mov byte ptr ds:[eax+100085D0],cl
100021F1 EB 07 jmp short 驾校无纸.100021FA
100021F3 C680 D0850010 0>mov byte ptr ds:[eax+100085D0],0
100021FA 40 inc eax
100021FB 3D 00010000 cmp eax,100
10002200 ^ 72 A6 jb short 驾校无纸.100021A8
10002202 5B pop ebx
10002203 81C4 14050000 add esp,514
10002209 C3 retn
1000220A 90 nop
1000220B 90 nop
1000220C 90 nop
1000220D 90 nop
1000220E 90 nop
1000220F 90 nop
10002210 6A FD push -3
10002212 E8 19FBFFFF call 驾校无纸.10001D30
10002217 83C4 04 add esp,4
1000221A C3 retn
1000221B 90 nop
1000221C 90 nop
1000221D 90 nop
1000221E 90 nop
1000221F 90 nop
10002220 A1 EC860010 mov eax,dword ptr ds:[100086EC]
10002225 53 push ebx
10002226 8B1D 34500010 mov ebx,dword ptr ds:[<&KERNEL32.LCMapStringA>] ; kernel32.LCMapStringA
1000222C 55 push ebp
1000222D 56 push esi
1000222E 57 push edi
1000222F 85C0 test eax,eax
10002231 75 49 jnz short 驾校无纸.1000227C
10002233 6A 00 push 0
10002235 6A 00 push 0
10002237 6A 01 push 1
10002239 68 B0500010 push 驾校无纸.100050B0
1000223E 68 00010000 push 100
10002243 6A 00 push 0
10002245 FF15 38500010 call dword ptr ds:[<&KERNEL32.LCMapStringW>] ; kernel32.LCMapStringW
1000224B 85C0 test eax,eax
1000224D 74 07 je short 驾校无纸.10002256
1000224F B8 01000000 mov eax,1
10002254 EB 21 jmp short 驾校无纸.10002277
10002256 6A 00 push 0
10002258 6A 00 push 0
1000225A 6A 01 push 1
1000225C 68 AC500010 push 驾校无纸.100050AC
10002261 68 00010000 push 100
10002266 6A 00 push 0
10002268 FFD3 call ebx
1000226A 85C0 test eax,eax
1000226C 0F84 CC010000 je 驾校无纸.1000243E
10002272 B8 02000000 mov eax,2
10002277 A3 EC860010 mov dword ptr ds:[100086EC],eax
1000227C 8B7424 20 mov esi,dword ptr ss:[esp+20]
10002280 85F6 test esi,esi
10002282 7E 17 jle short 驾校无纸.1000229B
10002284 8B7C24 1C mov edi,dword ptr ss:[esp+1C]
10002288 56 push esi
10002289 57 push edi
1000228A E8 C1010000 call 驾校无纸.10002450
1000228F 8BF0 mov esi,eax
10002291 A1 EC860010 mov eax,dword ptr ds:[100086EC]
10002296 83C4 08 add esp,8
10002299 EB 04 jmp short 驾校无纸.1000229F
1000229B 8B7C24 1C mov edi,dword ptr ss:[esp+1C]
1000229F 83F8 02 cmp eax,2
100022A2 75 1D jnz short 驾校无纸.100022C1
100022A4 8B4424 28 mov eax,dword ptr ss:[esp+28]
100022A8 8B4C24 24 mov ecx,dword ptr ss:[esp+24]
100022AC 8B5424 18 mov edx,dword ptr ss:[esp+18]
100022B0 50 push eax
100022B1 8B4424 18 mov eax,dword ptr ss:[esp+18]
100022B5 51 push ecx
100022B6 56 push esi
100022B7 57 push edi
100022B8 52 push edx
100022B9 50 push eax
100022BA FFD3 call ebx
100022BC 5F pop edi
100022BD 5E pop esi
100022BE 5D pop ebp
100022BF 5B pop ebx
100022C0 C3 retn
100022C1 83F8 01 cmp eax,1
100022C4 0F85 DD000000 jnz 驾校无纸.100023A7
100022CA 8B6C24 2C mov ebp,dword ptr ss:[esp+2C]
100022CE C74424 20 00000>mov dword ptr ss:[esp+20],0
100022D6 85ED test ebp,ebp
100022D8 75 0C jnz short 驾校无纸.100022E6
100022DA 8B0D 08870010 mov ecx,dword ptr ds:[10008708]
100022E0 894C24 2C mov dword ptr ss:[esp+2C],ecx
100022E4 8BE9 mov ebp,ecx
100022E6 8B5424 30 mov edx,dword ptr ss:[esp+30]
100022EA 6A 00 push 0
100022EC F7DA neg edx
100022EE 1BD2 sbb edx,edx
100022F0 6A 00 push 0
100022F2 83E2 08 and edx,8
100022F5 56 push esi
100022F6 42 inc edx
100022F7 57 push edi
100022F8 52 push edx
100022F9 55 push ebp
100022FA FF15 2C500010 call dword ptr ds:[<&KERNEL32.MultiByteToWideChar>] ; kernel32.MultiByteToWideChar
10002300 8BF8 mov edi,eax
10002302 85FF test edi,edi
10002304 75 05 jnz short 驾校无纸.1000230B
10002306 5F pop edi
10002307 5E pop esi
10002308 5D pop ebp
10002309 5B pop ebx
1000230A C3 retn
1000230B 8D043F lea eax,dword ptr ds:[edi+edi]
1000230E 50 push eax
1000230F E8 9C120000 call 驾校无纸.100035B0
10002314 8BD8 mov ebx,eax
10002316 83C4 04 add esp,4
10002319 85DB test ebx,ebx
1000231B 75 05 jnz short 驾校无纸.10002322
1000231D 5F pop edi
1000231E 5E pop esi
1000231F 5D pop ebp
10002320 5B pop ebx
10002321 C3 retn
10002322 8B4C24 1C mov ecx,dword ptr ss:[esp+1C]
10002326 57 push edi
10002327 53 push ebx
10002328 56 push esi
10002329 51 push ecx
1000232A 6A 01 push 1
1000232C 55 push ebp
1000232D FF15 2C500010 call dword ptr ds:[<&KERNEL32.MultiByteToWideChar>] ; kernel32.MultiByteToWideChar
10002333 85C0 test eax,eax
10002335 0F84 ED000000 je 驾校无纸.10002428
1000233B 8B6C24 18 mov ebp,dword ptr ss:[esp+18]
1000233F 8B5424 14 mov edx,dword ptr ss:[esp+14]
10002343 6A 00 push 0
10002345 6A 00 push 0
10002347 57 push edi
10002348 53 push ebx
10002349 55 push ebp
1000234A 52 push edx
1000234B FF15 38500010 call dword ptr ds:[<&KERNEL32.LCMapStringW>] ; kernel32.LCMapStringW
10002351 8BF0 mov esi,eax
10002353 85F6 test esi,esi
10002355 0F84 CD000000 je 驾校无纸.10002428
1000235B F7C5 00040000 test ebp,400
10002361 74 49 je short 驾校无纸.100023AC
10002363 8B4424 28 mov eax,dword ptr ss:[esp+28]
10002367 85C0 test eax,eax
10002369 74 24 je short 驾校无纸.1000238F
1000236B 3BF0 cmp esi,eax
1000236D 0F8F B5000000 jg 驾校无纸.10002428
10002373 8B4C24 14 mov ecx,dword ptr ss:[esp+14]
10002377 50 push eax
10002378 8B4424 28 mov eax,dword ptr ss:[esp+28]
1000237C 50 push eax
1000237D 57 push edi
1000237E 53 push ebx
1000237F 55 push ebp
10002380 51 push ecx
10002381 FF15 38500010 call dword ptr ds:[<&KERNEL32.LCMapStringW>] ; kernel32.LCMapStringW
10002387 85C0 test eax,eax
10002389 0F84 99000000 je 驾校无纸.10002428
1000238F 53 push ebx
10002390 E8 CB100000 call 驾校无纸.10003460
10002395 8B5424 24 mov edx,dword ptr ss:[esp+24]
10002399 83C4 04 add esp,4
1000239C 52 push edx
1000239D E8 BE100000 call 驾校无纸.10003460
100023A2 83C4 04 add esp,4
100023A5 8BC6 mov eax,esi
100023A7 5F pop edi
100023A8 5E pop esi
100023A9 5D pop ebp
100023AA 5B pop ebx
100023AB C3 retn
100023AC 8D1436 lea edx,dword ptr ds:[esi+esi]
100023AF 52 push edx
100023B0 E8 FB110000 call 驾校无纸.100035B0
100023B5 83C4 04 add esp,4
100023B8 894424 20 mov dword ptr ss:[esp+20],eax
100023BC 85C0 test eax,eax
100023BE 74 68 je short 驾校无纸.10002428
100023C0 8B4C24 14 mov ecx,dword ptr ss:[esp+14]
100023C4 56 push esi
100023C5 50 push eax
100023C6 57 push edi
100023C7 53 push ebx
100023C8 55 push ebp
100023C9 51 push ecx
100023CA FF15 38500010 call dword ptr ds:[<&KERNEL32.LCMapStringW>] ; kernel32.LCMapStringW
100023D0 85C0 test eax,eax
100023D2 74 54 je short 驾校无纸.10002428
100023D4 8B4424 28 mov eax,dword ptr ss:[esp+28]
100023D8 6A 00 push 0
100023DA 85C0 test eax,eax
100023DC 6A 00 push 0
100023DE 75 22 jnz short 驾校无纸.10002402
100023E0 8B5424 28 mov edx,dword ptr ss:[esp+28]
100023E4 8B4424 34 mov eax,dword ptr ss:[esp+34]
100023E8 6A 00 push 0
100023EA 6A 00 push 0
100023EC 56 push esi
100023ED 52 push edx
100023EE 68 20020000 push 220
100023F3 50 push eax
100023F4 FF15 30500010 call dword ptr ds:[<&KERNEL32.WideCharToMultiByte>] ; kernel32.WideCharToMultiByte
100023FA 8BF0 mov esi,eax
100023FC 85F6 test esi,esi
100023FE 74 28 je short 驾校无纸.10002428
10002400 ^ EB 8D jmp short 驾校无纸.1000238F
10002402 8B4C24 2C mov ecx,dword ptr ss:[esp+2C]
10002406 8B5424 28 mov edx,dword ptr ss:[esp+28]
1000240A 50 push eax
1000240B 8B4424 38 mov eax,dword ptr ss:[esp+38]
1000240F 51 push ecx
10002410 56 push esi
10002411 52 push edx
10002412 68 20020000 push 220
10002417 50 push eax
10002418 FF15 30500010 call dword ptr ds:[<&KERNEL32.WideCharToMultiByte>] ; kernel32.WideCharToMultiByte
1000241E 8BF0 mov esi,eax
10002420 85F6 test esi,esi
10002422 ^ 0F85 67FFFFFF jnz 驾校无纸.1000238F
10002428 53 push ebx
10002429 E8 32100000 call 驾校无纸.10003460
1000242E 8B4C24 24 mov ecx,dword ptr ss:[esp+24]
10002432 83C4 04 add esp,4
10002435 51 push ecx
10002436 E8 25100000 call 驾校无纸.10003460
1000243B 83C4 04 add esp,4
1000243E 5F pop edi
1000243F 5E pop esi
10002440 5D pop ebp
10002441 33C0 xor eax,eax
10002443 5B pop ebx
10002444 C3 retn
10002445 90 nop
10002446 90 nop
10002447 90 nop
10002448 90 nop
10002449 90 nop
1000244A 90 nop
1000244B 90 nop
1000244C 90 nop
1000244D 90 nop
1000244E 90 nop
1000244F 90 nop
10002450 8B5424 08 mov edx,dword ptr ss:[esp+8]
10002454 56 push esi
10002455 8B7424 08 mov esi,dword ptr ss:[esp+8]
10002459 85D2 test edx,edx
1000245B 57 push edi
1000245C 8BC6 mov eax,esi
1000245E 8D4A FF lea ecx,dword ptr ds:[edx-1]
10002461 74 0D je short 驾校无纸.10002470
10002463 8038 00 cmp byte ptr ds:[eax],0
10002466 74 08 je short 驾校无纸.10002470
10002468 40 inc eax
10002469 8BF9 mov edi,ecx
1000246B 49 dec ecx
1000246C 85FF test edi,edi
1000246E ^ 75 F3 jnz short 驾校无纸.10002463
10002470 8038 00 cmp byte ptr ds:[eax],0
10002473 75 05 jnz short 驾校无纸.1000247A
10002475 2BC6 sub eax,esi
10002477 5F pop edi
10002478 5E pop esi
10002479 C3 retn
1000247A 5F pop edi
1000247B 5E pop esi
1000247C 8BC2 mov eax,edx
1000247E C3 retn
1000247F 90 nop
10002480 51 push ecx
10002481 8B4C24 08 mov ecx,dword ptr ss:[esp+8]
10002485 56 push esi
10002486 8D41 01 lea eax,dword ptr ds:[ecx+1]
10002489 3D 00010000 cmp eax,100
1000248E 77 15 ja short 驾校无纸.100024A5
10002490 8B15 30610010 mov edx,dword ptr ds:[10006130] ; 驾校无纸.1000613A
10002496 33C0 xor eax,eax
10002498 66:8B044A mov ax,word ptr ds:[edx+ecx*2]
1000249C 8B4C24 10 mov ecx,dword ptr ss:[esp+10]
100024A0 23C1 and eax,ecx
100024A2 5E pop esi
100024A3 59 pop ecx
100024A4 C3 retn
100024A5 8B35 30610010 mov esi,dword ptr ds:[10006130] ; 驾校无纸.1000613A
100024AB 8BC1 mov eax,ecx
100024AD C1F8 08 sar eax,8
100024B0 8BD0 mov edx,eax
100024B2 81E2 FF000000 and edx,0FF
100024B8 F64456 01 80 test byte ptr ds:[esi+edx*2+1],80
100024BD 74 14 je short 驾校无纸.100024D3
100024BF 884424 0C mov byte ptr ss:[esp+C],al
100024C3 884C24 0D mov byte ptr ss:[esp+D],cl
100024C7 C64424 0E 00 mov byte ptr ss:[esp+E],0
100024CC B8 02000000 mov eax,2
100024D1 EB 0E jmp short 驾校无纸.100024E1
100024D3 884C24 0C mov byte ptr ss:[esp+C],cl
100024D7 C64424 0D 00 mov byte ptr ss:[esp+D],0
100024DC B8 01000000 mov eax,1
100024E1 6A 01 push 1
100024E3 6A 00 push 0
100024E5 8D4C24 0C lea ecx,dword ptr ss:[esp+C]
100024E9 6A 00 push 0
100024EB 51 push ecx
100024EC 8D5424 1C lea edx,dword ptr ss:[esp+1C]
100024F0 50 push eax
100024F1 52 push edx
100024F2 6A 01 push 1
100024F4 E8 270E0000 call 驾校无纸.10003320
100024F9 83C4 1C add esp,1C
100024FC 85C0 test eax,eax
100024FE 75 03 jnz short 驾校无纸.10002503
10002500 5E pop esi
10002501 59 pop ecx
10002502 C3 retn
10002503 8B4424 04 mov eax,dword ptr ss:[esp+4]
10002507 8B4C24 10 mov ecx,dword ptr ss:[esp+10]
1000250B 25 FFFF0000 and eax,0FFFF
10002510 5E pop esi
10002511 23C1 and eax,ecx
10002513 59 pop ecx
10002514 C3 retn
10002515 90 nop
10002516 90 nop
10002517 90 nop
10002518 90 nop
10002519 90 nop
1000251A 90 nop
1000251B 90 nop
1000251C 90 nop
1000251D 90 nop
1000251E 90 nop
1000251F 90 nop
10002520 A1 AC890010 mov eax,dword ptr ds:[100089AC]
10002525 85C0 test eax,eax
10002527 74 02 je short 驾校无纸.1000252B
10002529 FFD0 call eax
1000252B 68 10600010 push 驾校无纸.10006010
10002530 68 0C600010 push 驾校无纸.1000600C
10002535 E8 06010000 call 驾校无纸.10002640
1000253A 83C4 08 add esp,8
1000253D 68 08600010 push 驾校无纸.10006008
10002542 68 00600010 push 驾校无纸.10006000
10002547 E8 F4000000 call 驾校无纸.10002640
1000254C 83C4 08 add esp,8
1000254F C3 retn
10002550 8B4424 04 mov eax,dword ptr ss:[esp+4]
10002554 6A 00 push 0
10002556 6A 00 push 0
10002558 50 push eax
10002559 E8 32000000 call 驾校无纸.10002590
1000255E 83C4 0C add esp,0C
10002561 C3 retn
10002562 90 nop
10002563 90 nop
10002564 90 nop
10002565 90 nop
10002566 90 nop
10002567 90 nop
10002568 90 nop
10002569 90 nop
1000256A 90 nop
1000256B 90 nop
1000256C 90 nop
1000256D 90 nop
1000256E 90 nop
1000256F 90 nop
10002570 8B4424 04 mov eax,dword ptr ss:[esp+4]
10002574 6A 00 push 0
10002576 6A 01 push 1
10002578 50 push eax
10002579 E8 12000000 call 驾校无纸.10002590
1000257E 83C4 0C add esp,0C
10002581 C3 retn
10002582 90 nop
10002583 90 nop
10002584 90 nop
10002585 90 nop
10002586 90 nop
10002587 90 nop
10002588 90 nop
10002589 90 nop
1000258A 90 nop
1000258B 90 nop
1000258C 90 nop
1000258D 90 nop
1000258E 90 nop
1000258F 90 nop
10002590 A1 54870010 mov eax,dword ptr ds:[10008754]
10002595 53 push ebx
10002596 55 push ebp
10002597 8B6C24 0C mov ebp,dword ptr ss:[esp+C]
1000259B 83F8 01 cmp eax,1
1000259E 56 push esi
1000259F 75 0E jnz short 驾校无纸.100025AF
100025A1 55 push ebp
100025A2 FF15 40500010 call dword ptr ds:[<&KERNEL32.GetCurrentProcess>] ; kernel32.GetCurrentProcess
100025A8 50 push eax
100025A9 FF15 3C500010 call dword ptr ds:[<&KERNEL32.TerminateProcess>] ; kernel32.TerminateProcess
100025AF 8B4424 14 mov eax,dword ptr ss:[esp+14]
100025B3 8B5C24 18 mov ebx,dword ptr ss:[esp+18]
100025B7 85C0 test eax,eax
100025B9 C705 50870010 0>mov dword ptr ds:[10008750],1
100025C3 881D 4C870010 mov byte ptr ds:[1000874C],bl
100025C9 75 3E jnz short 驾校无纸.10002609
100025CB 8B0D A8890010 mov ecx,dword ptr ds:[100089A8]
100025D1 85C9 test ecx,ecx
100025D3 74 22 je short 驾校无纸.100025F7
100025D5 8B35 A4890010 mov esi,dword ptr ds:[100089A4]
100025DB 83EE 04 sub esi,4
100025DE 3BF1 cmp esi,ecx
100025E0 72 15 jb short 驾校无纸.100025F7
100025E2 8B06 mov eax,dword ptr ds:[esi]
100025E4 85C0 test eax,eax
100025E6 74 08 je short 驾校无纸.100025F0
100025E8 FFD0 call eax
100025EA 8B0D A8890010 mov ecx,dword ptr ds:[100089A8]
100025F0 83EE 04 sub esi,4
100025F3 3BF1 cmp esi,ecx
100025F5 ^ 73 EB jnb short 驾校无纸.100025E2
100025F7 68 18600010 push 驾校无纸.10006018
100025FC 68 14600010 push 驾校无纸.10006014
10002601 E8 3A000000 call 驾校无纸.10002640
10002606 83C4 08 add esp,8
10002609 68 20600010 push 驾校无纸.10006020
1000260E 68 1C600010 push 驾校无纸.1000601C
10002613 E8 28000000 call 驾校无纸.10002640
10002618 83C4 08 add esp,8
1000261B 85DB test ebx,ebx
1000261D 75 11 jnz short 驾校无纸.10002630
1000261F 55 push ebp
10002620 C705 54870010 0>mov dword ptr ds:[10008754],1
1000262A FF15 20500010 call dword ptr ds:[<&KERNEL32.ExitProcess>] ; kernel32.ExitProcess
10002630 5E pop esi
10002631 5D pop ebp
10002632 5B pop ebx
10002633 C3 retn
10002634 90 nop
10002635 90 nop
10002636 90 nop
10002637 90 nop
10002638 90 nop
10002639 90 nop
1000263A 90 nop
1000263B 90 nop
1000263C 90 nop
1000263D 90 nop
1000263E 90 nop
1000263F 90 nop
10002640 56 push esi
10002641 8B7424 08 mov esi,dword ptr ss:[esp+8]
10002645 57 push edi
10002646 8B7C24 10 mov edi,dword ptr ss:[esp+10]
1000264A 3BF7 cmp esi,edi
1000264C 73 0F jnb short 驾校无纸.1000265D
1000264E 8B06 mov eax,dword ptr ds:[esi]
10002650 85C0 test eax,eax
10002652 74 02 je short 驾校无纸.10002656
10002654 FFD0 call eax
10002656 83C6 04 add esi,4
10002659 3BF7 cmp esi,edi
1000265B ^ 72 F1 jb short 驾校无纸.1000264E
1000265D 5F pop edi
1000265E 5E pop esi
1000265F C3 retn
10002660 8B4424 04 mov eax,dword ptr ss:[esp+4]
10002664 53 push ebx
10002665 55 push ebp
10002666 56 push esi
10002667 50 push eax
10002668 E8 33010000 call 驾校无纸.100027A0
1000266D 83C4 04 add esp,4
10002670 85C0 test eax,eax
10002672 0F84 17010000 je 驾校无纸.1000278F
10002678 8B58 08 mov ebx,dword ptr ds:[eax+8]
1000267B 85DB test ebx,ebx
1000267D 0F84 0C010000 je 驾校无纸.1000278F
10002683 83FB 05 cmp ebx,5
10002686 75 10 jnz short 驾校无纸.10002698
10002688 C740 08 0000000>mov dword ptr ds:[eax+8],0
1000268F B8 01000000 mov eax,1
10002694 5E pop esi
10002695 5D pop ebp
10002696 5B pop ebx
10002697 C3 retn
10002698 83FB 01 cmp ebx,1
1000269B 75 07 jnz short 驾校无纸.100026A4
1000269D 83C8 FF or eax,FFFFFFFF
100026A0 5E pop esi
100026A1 5D pop ebp
100026A2 5B pop ebx
100026A3 C3 retn
100026A4 8B4C24 14 mov ecx,dword ptr ss:[esp+14]
100026A8 8B2D 58870010 mov ebp,dword ptr ds:[10008758]
100026AE 890D 58870010 mov dword ptr ds:[10008758],ecx
100026B4 8B48 04 mov ecx,dword ptr ds:[eax+4]
100026B7 83F9 08 cmp ecx,8
100026BA 0F85 B5000000 jnz 驾校无纸.10002775
100026C0 8B35 C0630010 mov esi,dword ptr ds:[100063C0]
100026C6 8B15 C4630010 mov edx,dword ptr ds:[100063C4]
100026CC 03D6 add edx,esi
100026CE 3BF2 cmp esi,edx
100026D0 7D 18 jge short 驾校无纸.100026EA
100026D2 8D0C76 lea ecx,dword ptr ds:[esi+esi*2]
100026D5 2BD6 sub edx,esi
100026D7 8D0C8D 50630010 lea ecx,dword ptr ds:[ecx*4+10006350]
100026DE C701 00000000 mov dword ptr ds:[ecx],0
100026E4 83C1 0C add ecx,0C
100026E7 4A dec edx
100026E8 ^ 75 F4 jnz short 驾校无纸.100026DE
100026EA 8B00 mov eax,dword ptr ds:[eax]
100026EC 8B0D CC630010 mov ecx,dword ptr ds:[100063CC]
100026F2 3D 8E0000C0 cmp eax,C000008E
100026F7 8BF1 mov esi,ecx
100026F9 75 07 jnz short 驾校无纸.10002702
100026FB B9 83000000 mov ecx,83
10002700 EB 52 jmp short 驾校无纸.10002754
10002702 3D 900000C0 cmp eax,C0000090
10002707 75 07 jnz short 驾校无纸.10002710
10002709 B9 81000000 mov ecx,81
1000270E EB 44 jmp short 驾校无纸.10002754
10002710 3D 910000C0 cmp eax,C0000091
10002715 75 07 jnz short 驾校无纸.1000271E
10002717 B9 84000000 mov ecx,84
1000271C EB 36 jmp short 驾校无纸.10002754
1000271E 3D 930000C0 cmp eax,C0000093
10002723 75 07 jnz short 驾校无纸.1000272C
10002725 B9 85000000 mov ecx,85
1000272A EB 28 jmp short 驾校无纸.10002754
1000272C 3D 8D0000C0 cmp eax,C000008D
10002731 75 07 jnz short 驾校无纸.1000273A
10002733 B9 82000000 mov ecx,82
10002738 EB 1A jmp short 驾校无纸.10002754
1000273A 3D 8F0000C0 cmp eax,C000008F
1000273F 75 07 jnz short 驾校无纸.10002748
10002741 B9 86000000 mov ecx,86
10002746 EB 0C jmp short 驾校无纸.10002754
10002748 3D 920000C0 cmp eax,C0000092
1000274D 75 0B jnz short 驾校无纸.1000275A
1000274F B9 8A000000 mov ecx,8A
10002754 890D CC630010 mov dword ptr ds:[100063CC],ecx
1000275A 51 push ecx
1000275B 6A 08 push 8
1000275D FFD3 call ebx
1000275F 83C4 08 add esp,8
10002762 8935 CC630010 mov dword ptr ds:[100063CC],esi
10002768 892D 58870010 mov dword ptr ds:[10008758],ebp
1000276E 83C8 FF or eax,FFFFFFFF
10002771 5E pop esi
10002772 5D pop ebp
10002773 5B pop ebx
10002774 C3 retn
10002775 51 push ecx
10002776 C740 08 0000000>mov dword ptr ds:[eax+8],0
1000277D FFD3 call ebx
1000277F 83C4 04 add esp,4
10002782 892D 58870010 mov dword ptr ds:[10008758],ebp
10002788 83C8 FF or eax,FFFFFFFF
1000278B 5E pop esi
1000278C 5D pop ebp
1000278D 5B pop ebx
1000278E C3 retn
1000278F 8B5424 14 mov edx,dword ptr ss:[esp+14]
10002793 52 push edx
10002794 FF15 44500010 call dword ptr ds:[<&KERNEL32.UnhandledExceptionFilt>; kernel32.UnhandledExceptionFilter
1000279A 5E pop esi
1000279B 5D pop ebp
1000279C 5B pop ebx
1000279D C3 retn
1000279E 90 nop
1000279F 90 nop
100027A0 8B5424 04 mov edx,dword ptr ss:[esp+4]
100027A4 8B0D 48630010 mov ecx,dword ptr ds:[10006348]
100027AA 56 push esi
100027AB 8B35 C8630010 mov esi,dword ptr ds:[100063C8]
100027B1 3BCA cmp ecx,edx
100027B3 B8 48630010 mov eax,驾校无纸.10006348
100027B8 74 15 je short 驾校无纸.100027CF
100027BA 8D0C76 lea ecx,dword ptr ds:[esi+esi*2]
100027BD 8D0C8D 48630010 lea ecx,dword ptr ds:[ecx*4+10006348]
100027C4 83C0 0C add eax,0C
100027C7 3BC1 cmp eax,ecx
100027C9 73 04 jnb short 驾校无纸.100027CF
100027CB 3910 cmp dword ptr ds:[eax],edx
100027CD ^ 75 F5 jnz short 驾校无纸.100027C4
100027CF 8D0C76 lea ecx,dword ptr ds:[esi+esi*2]
100027D2 8D0C8D 48630010 lea ecx,dword ptr ds:[ecx*4+10006348]
100027D9 3BC1 cmp eax,ecx
100027DB 73 04 jnb short 驾校无纸.100027E1
100027DD 3910 cmp dword ptr ds:[eax],edx
100027DF 74 02 je short 驾校无纸.100027E3
100027E1 33C0 xor eax,eax
100027E3 5E pop esi
100027E4 C3 retn
100027E5 90 nop
100027E6 90 nop
100027E7 90 nop
100027E8 90 nop
100027E9 90 nop
100027EA 90 nop
100027EB 90 nop
100027EC 90 nop
100027ED 90 nop
100027EE 90 nop
100027EF 90 nop
100027F0 51 push ecx
100027F1 8B15 BC840010 mov edx,dword ptr ds:[100084BC]
100027F7 53 push ebx
100027F8 55 push ebp
100027F9 56 push esi
100027FA 8A02 mov al,byte ptr ds:[edx]
100027FC 33F6 xor esi,esi
100027FE 84C0 test al,al
10002800 57 push edi
10002801 74 1D je short 驾校无纸.10002820
10002803 3C 3D cmp al,3D
10002805 74 01 je short 驾校无纸.10002808
10002807 46 inc esi
10002808 8BFA mov edi,edx
1000280A 83C9 FF or ecx,FFFFFFFF
1000280D 33C0 xor eax,eax
1000280F F2:AE repne scas byte ptr es:[edi]
10002811 F7D1 not ecx
10002813 49 dec ecx
10002814 8A440A 01 mov al,byte ptr ds:[edx+ecx+1]
10002818 8D540A 01 lea edx,dword ptr ds:[edx+ecx+1]
1000281C 84C0 test al,al
1000281E ^ 75 E3 jnz short 驾校无纸.10002803
10002820 8D04B5 04000000 lea eax,dword ptr ds:[esi*4+4]
10002827 50 push eax
10002828 E8 830D0000 call 驾校无纸.100035B0
1000282D 8BF0 mov esi,eax
1000282F 83C4 04 add esp,4
10002832 85F6 test esi,esi
10002834 897424 10 mov dword ptr ss:[esp+10],esi
10002838 8935 34870010 mov dword ptr ds:[10008734],esi
1000283E 75 0A jnz short 驾校无纸.1000284A
10002840 6A 09 push 9
10002842 E8 89F4FFFF call 驾校无纸.10001CD0
10002847 83C4 04 add esp,4
1000284A 8B2D BC840010 mov ebp,dword ptr ds:[100084BC]
10002850 8A55 00 mov dl,byte ptr ss:[ebp]
10002853 84D2 test dl,dl
10002855 74 63 je short 驾校无纸.100028BA
10002857 8BFD mov edi,ebp
10002859 83C9 FF or ecx,FFFFFFFF
1000285C 33C0 xor eax,eax
1000285E F2:AE repne scas byte ptr es:[edi]
10002860 F7D1 not ecx
10002862 49 dec ecx
10002863 8BD9 mov ebx,ecx
10002865 43 inc ebx
10002866 80FA 3D cmp dl,3D
10002869 74 45 je short 驾校无纸.100028B0
1000286B 53 push ebx
1000286C E8 3F0D0000 call 驾校无纸.100035B0
10002871 83C4 04 add esp,4
10002874 8906 mov dword ptr ds:[esi],eax
10002876 85C0 test eax,eax
10002878 75 0A jnz short 驾校无纸.10002884
1000287A 6A 09 push 9
1000287C E8 4FF4FFFF call 驾校无纸.10001CD0
10002881 83C4 04 add esp,4
10002884 8BFD mov edi,ebp
10002886 83C9 FF or ecx,FFFFFFFF
10002889 33C0 xor eax,eax
1000288B F2:AE repne scas byte ptr es:[edi]
1000288D 8B4424 10 mov eax,dword ptr ss:[esp+10]
10002891 F7D1 not ecx
10002893 2BF9 sub edi,ecx
10002895 8BD1 mov edx,ecx
10002897 8BF7 mov esi,edi
10002899 8B38 mov edi,dword ptr ds:[eax]
1000289B C1E9 02 shr ecx,2
1000289E F3:A5 rep movs dword ptr es:[edi],dword ptr ds:[esi]
100028A0 8BCA mov ecx,edx
100028A2 83E1 03 and ecx,3
100028A5 83C0 04 add eax,4
100028A8 F3:A4 rep movs byte ptr es:[edi],byte ptr ds:[esi]
100028AA 894424 10 mov dword ptr ss:[esp+10],eax
100028AE 8BF0 mov esi,eax
100028B0 8A541D 00 mov dl,byte ptr ss:[ebp+ebx]
100028B4 03EB add ebp,ebx
100028B6 84D2 test dl,dl
100028B8 ^ 75 9D jnz short 驾校无纸.10002857
100028BA A1 BC840010 mov eax,dword ptr ds:[100084BC]
100028BF 50 push eax
100028C0 E8 9B0B0000 call 驾校无纸.10003460
100028C5 83C4 04 add esp,4
100028C8 C705 BC840010 0>mov dword ptr ds:[100084BC],0
100028D2 C706 00000000 mov dword ptr ds:[esi],0
100028D8 5F pop edi
100028D9 5E pop esi
100028DA 5D pop ebp
100028DB 5B pop ebx
100028DC 59 pop ecx
100028DD C3 retn
100028DE 90 nop
100028DF 90 nop
100028E0 83EC 08 sub esp,8
100028E3 56 push esi
100028E4 57 push edi
100028E5 68 04010000 push 104
100028EA 68 60870010 push 驾校无纸.10008760
100028EF 6A 00 push 0
100028F1 FF15 48500010 call dword ptr ds:[<&KERNEL32.GetModuleFileNameA>] ; kernel32.GetModuleFileNameA
100028F7 8B3D B4890010 mov edi,dword ptr ds:[100089B4]
100028FD C705 44870010 6>mov dword ptr ds:[10008744],驾校无纸.10008760
10002907 803F 00 cmp byte ptr ds:[edi],0
1000290A 75 05 jnz short 驾校无纸.10002911
1000290C BF 60870010 mov edi,驾校无纸.10008760
10002911 8D4424 0C lea eax,dword ptr ss:[esp+C]
10002915 8D4C24 08 lea ecx,dword ptr ss:[esp+8]
10002919 50 push eax
1000291A 51 push ecx
1000291B 6A 00 push 0
1000291D 6A 00 push 0
1000291F 57 push edi
10002920 E8 5B000000 call 驾校无纸.10002980
10002925 8B5424 20 mov edx,dword ptr ss:[esp+20]
10002929 8B4424 1C mov eax,dword ptr ss:[esp+1C]
1000292D 83C4 14 add esp,14
10002930 8D0C82 lea ecx,dword ptr ds:[edx+eax*4]
10002933 51 push ecx
10002934 E8 770C0000 call 驾校无纸.100035B0
10002939 8BF0 mov esi,eax
1000293B 83C4 04 add esp,4
1000293E 85F6 test esi,esi
10002940 75 0A jnz short 驾校无纸.1000294C
10002942 6A 08 push 8
10002944 E8 87F3FFFF call 驾校无纸.10001CD0
10002949 83C4 04 add esp,4
1000294C 8B4C24 08 mov ecx,dword ptr ss:[esp+8]
10002950 8D5424 0C lea edx,dword ptr ss:[esp+C]
10002954 52 push edx
10002955 8D4424 0C lea eax,dword ptr ss:[esp+C]
10002959 8D148E lea edx,dword ptr ds:[esi+ecx*4]
1000295C 50 push eax
1000295D 52 push edx
1000295E 56 push esi
1000295F 57 push edi
10002960 E8 1B000000 call 驾校无纸.10002980
10002965 8B4424 1C mov eax,dword ptr ss:[esp+1C]
10002969 83C4 14 add esp,14
1000296C 48 dec eax
1000296D 8935 2C870010 mov dword ptr ds:[1000872C],esi
10002973 5F pop edi
10002974 A3 28870010 mov dword ptr ds:[10008728],eax
10002979 5E pop esi
1000297A 83C4 08 add esp,8
1000297D C3 retn
1000297E 90 nop
1000297F 90 nop
10002980 8B4424 10 mov eax,dword ptr ss:[esp+10]
10002984 53 push ebx
10002985 55 push ebp
10002986 8B6C24 10 mov ebp,dword ptr ss:[esp+10]
1000298A 56 push esi
1000298B 8B7424 18 mov esi,dword ptr ss:[esp+18]
1000298F 57 push edi
10002990 8B7C24 24 mov edi,dword ptr ss:[esp+24]
10002994 85ED test ebp,ebp
10002996 C707 00000000 mov dword ptr ds:[edi],0
1000299C C700 01000000 mov dword ptr ds:[eax],1
100029A2 8B4424 14 mov eax,dword ptr ss:[esp+14]
100029A6 BB 04000000 mov ebx,4
100029AB 74 09 je short 驾校无纸.100029B6
100029AD 8975 00 mov dword ptr ss:[ebp],esi
100029B0 03EB add ebp,ebx
100029B2 896C24 18 mov dword ptr ss:[esp+18],ebp
100029B6 8038 22 cmp byte ptr ds:[eax],22
100029B9 75 56 jnz short 驾校无纸.10002A11
100029BB 8A48 01 mov cl,byte ptr ds:[eax+1]
100029BE 40 inc eax
100029BF 80F9 22 cmp cl,22
100029C2 74 38 je short 驾校无纸.100029FC
100029C4 84C9 test cl,cl
100029C6 74 34 je short 驾校无纸.100029FC
100029C8 81E1 FF000000 and ecx,0FF
100029CE 8499 C9840010 test byte ptr ds:[ecx+100084C9],bl
100029D4 74 0F je short 驾校无纸.100029E5
100029D6 8B17 mov edx,dword ptr ds:[edi]
100029D8 42 inc edx
100029D9 85F6 test esi,esi
100029DB 8917 mov dword ptr ds:[edi],edx
100029DD 74 06 je short 驾校无纸.100029E5
100029DF 8A08 mov cl,byte ptr ds:[eax]
100029E1 880E mov byte ptr ds:[esi],cl
100029E3 46 inc esi
100029E4 40 inc eax
100029E5 8B17 mov edx,dword ptr ds:[edi]
100029E7 42 inc edx
100029E8 85F6 test esi,esi
100029EA 8917 mov dword ptr ds:[edi],edx
100029EC 74 05 je short 驾校无纸.100029F3
100029EE 8A10 mov dl,byte ptr ds:[eax]
100029F0 8816 mov byte ptr ds:[esi],dl
100029F2 46 inc esi
100029F3 8A48 01 mov cl,byte ptr ds:[eax+1]
100029F6 40 inc eax
100029F7 80F9 22 cmp cl,22
100029FA ^ 75 C8 jnz short 驾校无纸.100029C4
100029FC 8B17 mov edx,dword ptr ds:[edi]
100029FE 42 inc edx
100029FF 85F6 test esi,esi
10002A01 8917 mov dword ptr ds:[edi],edx
10002A03 74 04 je short 驾校无纸.10002A09
10002A05 C606 00 mov byte ptr ds:[esi],0
10002A08 46 inc esi
10002A09 8038 22 cmp byte ptr ds:[eax],22
10002A0C 75 56 jnz short 驾校无纸.10002A64
10002A0E 40 inc eax
10002A0F EB 53 jmp short 驾校无纸.10002A64
10002A11 8B17 mov edx,dword ptr ds:[edi]
10002A13 42 inc edx
10002A14 85F6 test esi,esi
10002A16 8917 mov dword ptr ds:[edi],edx
10002A18 74 05 je short 驾校无纸.10002A1F
10002A1A 8A08 mov cl,byte ptr ds:[eax]
10002A1C 880E mov byte ptr ds:[esi],cl
10002A1E 46 inc esi
10002A1F 8A08 mov cl,byte ptr ds:[eax]
10002A21 40 inc eax
10002A22 884C24 24 mov byte ptr ss:[esp+24],cl
10002A26 8B5424 24 mov edx,dword ptr ss:[esp+24]
10002A2A 81E2 FF000000 and edx,0FF
10002A30 849A C9840010 test byte ptr ds:[edx+100084C9],bl
10002A36 74 0F je short 驾校无纸.10002A47
10002A38 8B17 mov edx,dword ptr ds:[edi]
10002A3A 42 inc edx
10002A3B 85F6 test esi,esi
10002A3D 8917 mov dword ptr ds:[edi],edx
10002A3F 74 05 je short 驾校无纸.10002A46
10002A41 8A10 mov dl,byte ptr ds:[eax]
10002A43 8816 mov byte ptr ds:[esi],dl
10002A45 46 inc esi
10002A46 40 inc eax
10002A47 80F9 20 cmp cl,20
10002A4A 74 09 je short 驾校无纸.10002A55
10002A4C 84C9 test cl,cl
10002A4E 74 09 je short 驾校无纸.10002A59
10002A50 80F9 09 cmp cl,9
10002A53 ^ 75 BC jnz short 驾校无纸.10002A11
10002A55 84C9 test cl,cl
10002A57 75 03 jnz short 驾校无纸.10002A5C
10002A59 48 dec eax
10002A5A EB 08 jmp short 驾校无纸.10002A64
10002A5C 85F6 test esi,esi
10002A5E 74 04 je short 驾校无纸.10002A64
10002A60 C646 FF 00 mov byte ptr ds:[esi-1],0
10002A64 33D2 xor edx,edx
10002A66 895424 24 mov dword ptr ss:[esp+24],edx
10002A6A 8038 00 cmp byte ptr ds:[eax],0
10002A6D 0F84 03010000 je 驾校无纸.10002B76
10002A73 8A08 mov cl,byte ptr ds:[eax]
10002A75 80F9 20 cmp cl,20
10002A78 74 05 je short 驾校无纸.10002A7F
10002A7A 80F9 09 cmp cl,9
10002A7D 75 03 jnz short 驾校无纸.10002A82
10002A7F 40 inc eax
10002A80 ^ EB F1 jmp short 驾校无纸.10002A73
10002A82 8038 00 cmp byte ptr ds:[eax],0
10002A85 0F84 EB000000 je 驾校无纸.10002B76
10002A8B 85ED test ebp,ebp
10002A8D 74 09 je short 驾校无纸.10002A98
10002A8F 8975 00 mov dword ptr ss:[ebp],esi
10002A92 03EB add ebp,ebx
10002A94 896C24 18 mov dword ptr ss:[esp+18],ebp
10002A98 8B4C24 20 mov ecx,dword ptr ss:[esp+20]
10002A9C FF01 inc dword ptr ds:[ecx]
10002A9E 8A18 mov bl,byte ptr ds:[eax]
10002AA0 33C9 xor ecx,ecx
10002AA2 80FB 5C cmp bl,5C
10002AA5 BD 01000000 mov ebp,1
10002AAA 75 0A jnz short 驾校无纸.10002AB6
10002AAC 8A58 01 mov bl,byte ptr ds:[eax+1]
10002AAF 40 inc eax
10002AB0 41 inc ecx
10002AB1 80FB 5C cmp bl,5C
10002AB4 ^ 74 F6 je short 驾校无纸.10002AAC
10002AB6 8038 22 cmp byte ptr ds:[eax],22
10002AB9 75 25 jnz short 驾校无纸.10002AE0
10002ABB F6C1 01 test cl,1
10002ABE 75 1E jnz short 驾校无纸.10002ADE
10002AC0 85D2 test edx,edx
10002AC2 74 09 je short 驾校无纸.10002ACD
10002AC4 8078 01 22 cmp byte ptr ds:[eax+1],22
10002AC8 75 03 jnz short 驾校无纸.10002ACD
10002ACA 40 inc eax
10002ACB EB 02 jmp short 驾校无纸.10002ACF
10002ACD 33ED xor ebp,ebp
10002ACF 8B5C24 24 mov ebx,dword ptr ss:[esp+24]
10002AD3 33D2 xor edx,edx
10002AD5 85DB test ebx,ebx
10002AD7 0F94C2 sete dl
10002ADA 895424 24 mov dword ptr ss:[esp+24],edx
10002ADE D1E9 shr ecx,1
10002AE0 8BD9 mov ebx,ecx
10002AE2 49 dec ecx
10002AE3 85DB test ebx,ebx
10002AE5 74 11 je short 驾校无纸.10002AF8
10002AE7 41 inc ecx
10002AE8 85F6 test esi,esi
10002AEA 74 04 je short 驾校无纸.10002AF0
10002AEC C606 5C mov byte ptr ds:[esi],5C
10002AEF 46 inc esi
10002AF0 8B1F mov ebx,dword ptr ds:[edi]
10002AF2 43 inc ebx
10002AF3 49 dec ecx
10002AF4 891F mov dword ptr ds:[edi],ebx
10002AF6 ^ 75 F0 jnz short 驾校无纸.10002AE8
10002AF8 8A08 mov cl,byte ptr ds:[eax]
10002AFA 84C9 test cl,cl
10002AFC 74 5D je short 驾校无纸.10002B5B
10002AFE 85D2 test edx,edx
10002B00 75 0A jnz short 驾校无纸.10002B0C
10002B02 80F9 20 cmp cl,20
10002B05 74 54 je short 驾校无纸.10002B5B
10002B07 80F9 09 cmp cl,9
10002B0A 74 4F je short 驾校无纸.10002B5B
10002B0C 85ED test ebp,ebp
10002B0E 74 45 je short 驾校无纸.10002B55
10002B10 85F6 test esi,esi
10002B12 74 2A je short 驾校无纸.10002B3E
10002B14 8BD9 mov ebx,ecx
10002B16 81E3 FF000000 and ebx,0FF
10002B1C F683 C9840010 0>test byte ptr ds:[ebx+100084C9],4
10002B23 74 09 je short 驾校无纸.10002B2E
10002B25 880E mov byte ptr ds:[esi],cl
10002B27 8B0F mov ecx,dword ptr ds:[edi]
10002B29 46 inc esi
10002B2A 40 inc eax
10002B2B 41 inc ecx
10002B2C 890F mov dword ptr ds:[edi],ecx
10002B2E 8A08 mov cl,byte ptr ds:[eax]
10002B30 880E mov byte ptr ds:[esi],cl
10002B32 8B0F mov ecx,dword ptr ds:[edi]
10002B34 46 inc esi
10002B35 41 inc ecx
10002B36 890F mov dword ptr ds:[edi],ecx
10002B38 40 inc eax
10002B39 ^ E9 60FFFFFF jmp 驾校无纸.10002A9E
10002B3E 81E1 FF000000 and ecx,0FF
10002B44 F681 C9840010 0>test byte ptr ds:[ecx+100084C9],4
10002B4B 74 06 je short 驾校无纸.10002B53
10002B4D 8B0F mov ecx,dword ptr ds:[edi]
10002B4F 40 inc eax
10002B50 41 inc ecx
10002B51 890F mov dword ptr ds:[edi],ecx
10002B53 FF07 inc dword ptr ds:[edi]
10002B55 40 inc eax
10002B56 ^ E9 43FFFFFF jmp 驾校无纸.10002A9E
10002B5B 85F6 test esi,esi
10002B5D 74 04 je short 驾校无纸.10002B63
10002B5F C606 00 mov byte ptr ds:[esi],0
10002B62 46 inc esi
10002B63 8B0F mov ecx,dword ptr ds:[edi]
10002B65 8B6C24 18 mov ebp,dword ptr ss:[esp+18]
10002B69 41 inc ecx
10002B6A BB 04000000 mov ebx,4
10002B6F 890F mov dword ptr ds:[edi],ecx
10002B71 ^ E9 F4FEFFFF jmp 驾校无纸.10002A6A
10002B76 85ED test ebp,ebp
10002B78 74 07 je short 驾校无纸.10002B81
10002B7A C745 00 0000000>mov dword ptr ss:[ebp],0
10002B81 8B4424 20 mov eax,dword ptr ss:[esp+20]
10002B85 5F pop edi
10002B86 5E pop esi
10002B87 5D pop ebp
10002B88 8B08 mov ecx,dword ptr ds:[eax]
10002B8A 5B pop ebx
10002B8B 41 inc ecx
10002B8C 8908 mov dword ptr ds:[eax],ecx
10002B8E C3 retn
10002B8F 90 nop
10002B90 A1 68880010 mov eax,dword ptr ds:[10008868]
10002B95 53 push ebx
10002B96 55 push ebp
10002B97 8B2D 54500010 mov ebp,dword ptr ds:[<&KERNEL32.GetEnvironmentStrin>; kernel32.GetEnvironmentStringsA
10002B9D 56 push esi
10002B9E 33F6 xor esi,esi
10002BA0 33DB xor ebx,ebx
10002BA2 57 push edi
10002BA3 8B3D 58500010 mov edi,dword ptr ds:[<&KERNEL32.GetEnvironmentStrin>; kernel32.GetEnvironmentStringsW
10002BA9 85C0 test eax,eax
10002BAB 75 25 jnz short 驾校无纸.10002BD2
10002BAD FFD7 call edi
10002BAF 8BF0 mov esi,eax
10002BB1 85F6 test esi,esi
10002BB3 74 07 je short 驾校无纸.10002BBC
10002BB5 B8 01000000 mov eax,1
10002BBA EB 11 jmp short 驾校无纸.10002BCD
10002BBC FFD5 call ebp
10002BBE 8BD8 mov ebx,eax
10002BC0 85DB test ebx,ebx
10002BC2 0F84 17010000 je 驾校无纸.10002CDF
10002BC8 B8 02000000 mov eax,2
10002BCD A3 68880010 mov dword ptr ds:[10008868],eax
10002BD2 83F8 01 cmp eax,1
10002BD5 0F85 97000000 jnz 驾校无纸.10002C72
10002BDB 85F6 test esi,esi
10002BDD 75 0C jnz short 驾校无纸.10002BEB
10002BDF FFD7 call edi
10002BE1 8BF0 mov esi,eax
10002BE3 85F6 test esi,esi
10002BE5 0F84 F4000000 je 驾校无纸.10002CDF
10002BEB 66:833E 00 cmp word ptr ds:[esi],0
10002BEF 8BC6 mov eax,esi
10002BF1 74 12 je short 驾校无纸.10002C05
10002BF3 83C0 02 add eax,2
10002BF6 66:8338 00 cmp word ptr ds:[eax],0
10002BFA ^ 75 F7 jnz short 驾校无纸.10002BF3
10002BFC 83C0 02 add eax,2
10002BFF 66:8338 00 cmp word ptr ds:[eax],0
10002C03 ^ 75 EE jnz short 驾校无纸.10002BF3
10002C05 2BC6 sub eax,esi
10002C07 6A 00 push 0
10002C09 D1F8 sar eax,1
10002C0B 40 inc eax
10002C0C 6A 00 push 0
10002C0E 8BE8 mov ebp,eax
10002C10 6A 00 push 0
10002C12 6A 00 push 0
10002C14 55 push ebp
10002C15 56 push esi
10002C16 6A 00 push 0
10002C18 6A 00 push 0
10002C1A FF15 30500010 call dword ptr ds:[<&KERNEL32.WideCharToMultiByte>] ; kernel32.WideCharToMultiByte
10002C20 8BF8 mov edi,eax
10002C22 85FF test edi,edi
10002C24 74 3E je short 驾校无纸.10002C64
10002C26 57 push edi
10002C27 E8 84090000 call 驾校无纸.100035B0
10002C2C 8BD8 mov ebx,eax
10002C2E 83C4 04 add esp,4
10002C31 85DB test ebx,ebx
10002C33 74 2F je short 驾校无纸.10002C64
10002C35 6A 00 push 0
10002C37 6A 00 push 0
10002C39 57 push edi
10002C3A 53 push ebx
10002C3B 55 push ebp
10002C3C 56 push esi
10002C3D 6A 00 push 0
10002C3F 6A 00 push 0
10002C41 FF15 30500010 call dword ptr ds:[<&KERNEL32.WideCharToMultiByte>] ; kernel32.WideCharToMultiByte
10002C47 85C0 test eax,eax
10002C49 75 0B jnz short 驾校无纸.10002C56
10002C4B 53 push ebx
10002C4C E8 0F080000 call 驾校无纸.10003460
10002C51 83C4 04 add esp,4
10002C54 33DB xor ebx,ebx
10002C56 56 push esi
10002C57 FF15 04500010 call dword ptr ds:[<&KERNEL32.FreeEnvironmentStrings>; kernel32.FreeEnvironmentStringsW
10002C5D 8BC3 mov eax,ebx
10002C5F 5F pop edi
10002C60 5E pop esi
10002C61 5D pop ebp
10002C62 5B pop ebx
10002C63 C3 retn
10002C64 56 push esi
10002C65 FF15 04500010 call dword ptr ds:[<&KERNEL32.FreeEnvironmentStrings>; kernel32.FreeEnvironmentStringsW
10002C6B 33C0 xor eax,eax
10002C6D 5F pop edi
10002C6E 5E pop esi
10002C6F 5D pop ebp
10002C70 5B pop ebx
10002C71 C3 retn
10002C72 83F8 02 cmp eax,2
10002C75 75 68 jnz short 驾校无纸.10002CDF
10002C77 85DB test ebx,ebx
10002C79 75 08 jnz short 驾校无纸.10002C83
10002C7B FFD5 call ebp
10002C7D 8BD8 mov ebx,eax
10002C7F 85DB test ebx,ebx
10002C81 74 5C je short 驾校无纸.10002CDF
10002C83 8A0B mov cl,byte ptr ds:[ebx]
10002C85 8BC3 mov eax,ebx
10002C87 84C9 test cl,cl
10002C89 74 10 je short 驾校无纸.10002C9B
10002C8B 8A48 01 mov cl,byte ptr ds:[eax+1]
10002C8E 40 inc eax
10002C8F 84C9 test cl,cl
10002C91 ^ 75 F8 jnz short 驾校无纸.10002C8B
10002C93 8A48 01 mov cl,byte ptr ds:[eax+1]
10002C96 40 inc eax
10002C97 84C9 test cl,cl
10002C99 ^ 75 F0 jnz short 驾校无纸.10002C8B
10002C9B 2BC3 sub eax,ebx
10002C9D 40 inc eax
10002C9E 8BF0 mov esi,eax
10002CA0 56 push esi
10002CA1 E8 0A090000 call 驾校无纸.100035B0
10002CA6 8BE8 mov ebp,eax
10002CA8 83C4 04 add esp,4
10002CAB 85ED test ebp,ebp
10002CAD 75 0E jnz short 驾校无纸.10002CBD
10002CAF 53 push ebx
10002CB0 FF15 00500010 call dword ptr ds:[<&KERNEL32.FreeEnvironmentStrings>; kernel32.FreeEnvironmentStringsA
10002CB6 33C0 xor eax,eax
10002CB8 5F pop edi
10002CB9 5E pop esi
10002CBA 5D pop ebp
10002CBB 5B pop ebx
10002CBC C3 retn
10002CBD 8BCE mov ecx,esi
10002CBF 8BF3 mov esi,ebx
10002CC1 8BC1 mov eax,ecx
10002CC3 8BFD mov edi,ebp
10002CC5 C1E9 02 shr ecx,2
10002CC8 F3:A5 rep movs dword ptr es:[edi],dword ptr ds:[esi]
10002CCA 8BC8 mov ecx,eax
10002CCC 53 push ebx
10002CCD 83E1 03 and ecx,3
10002CD0 F3:A4 rep movs byte ptr es:[edi],byte ptr ds:[esi]
10002CD2 FF15 00500010 call dword ptr ds:[<&KERNEL32.FreeEnvironmentStrings>; kernel32.FreeEnvironmentStringsA
10002CD8 8BC5 mov eax,ebp
10002CDA 5F pop edi
10002CDB 5E pop esi
10002CDC 5D pop ebp
10002CDD 5B pop ebx
10002CDE C3 retn
10002CDF 5F pop edi
10002CE0 5E pop esi
10002CE1 5D pop ebp
10002CE2 33C0 xor eax,eax
10002CE4 5B pop ebx
10002CE5 C3 retn
10002CE6 90 nop
10002CE7 90 nop
10002CE8 90 nop
10002CE9 90 nop
10002CEA 90 nop
10002CEB 90 nop
10002CEC 90 nop
10002CED 90 nop
10002CEE 90 nop
10002CEF 90 nop
10002CF0 83EC 48 sub esp,48
10002CF3 53 push ebx
10002CF4 55 push ebp
10002CF5 56 push esi
10002CF6 57 push edi
10002CF7 68 00010000 push 100
10002CFC E8 AF080000 call 驾校无纸.100035B0
10002D01 8BF0 mov esi,eax
10002D03 83C4 04 add esp,4
10002D06 85F6 test esi,esi
10002D08 75 0A jnz short 驾校无纸.10002D14
10002D0A 6A 1B push 1B
10002D0C E8 BFEFFFFF call 驾校无纸.10001CD0
10002D11 83C4 04 add esp,4
10002D14 8D86 00010000 lea eax,dword ptr ds:[esi+100]
10002D1A 8935 A0880010 mov dword ptr ds:[100088A0],esi
10002D20 3BF0 cmp esi,eax
10002D22 C705 A0890010 2>mov dword ptr ds:[100089A0],20
10002D2C B3 0A mov bl,0A
10002D2E 73 20 jnb short 驾校无纸.10002D50
10002D30 C646 04 00 mov byte ptr ds:[esi+4],0
10002D34 C706 FFFFFFFF mov dword ptr ds:[esi],-1
10002D3A 885E 05 mov byte ptr ds:[esi+5],bl
10002D3D 8B0D A0880010 mov ecx,dword ptr ds:[100088A0]
10002D43 83C6 08 add esi,8
10002D46 81C1 00010000 add ecx,100
10002D4C 3BF1 cmp esi,ecx
10002D4E ^ 72 E0 jb short 驾校无纸.10002D30
10002D50 8D5424 14 lea edx,dword ptr ss:[esp+14]
10002D54 52 push edx
10002D55 FF15 18500010 call dword ptr ds:[<&KERNEL32.GetStartupInfoA>] ; kernel32.GetStartupInfoA
10002D5B 66:837C24 46 00 cmp word ptr ss:[esp+46],0
10002D61 0F84 F2000000 je 驾校无纸.10002E59
10002D67 8B4424 48 mov eax,dword ptr ss:[esp+48]
10002D6B 85C0 test eax,eax
10002D6D 0F84 E6000000 je 驾校无纸.10002E59
10002D73 8B08 mov ecx,dword ptr ds:[eax]
10002D75 8D78 04 lea edi,dword ptr ds:[eax+4]
10002D78 81F9 00080000 cmp ecx,800
10002D7E 894C24 10 mov dword ptr ss:[esp+10],ecx
10002D82 8D2C0F lea ebp,dword ptr ds:[edi+ecx]
10002D85 7C 08 jl short 驾校无纸.10002D8F
10002D87 C74424 10 00080>mov dword ptr ss:[esp+10],800
10002D8F 8B4424 10 mov eax,dword ptr ss:[esp+10]
10002D93 8B0D A0890010 mov ecx,dword ptr ds:[100089A0]
10002D99 3BC8 cmp ecx,eax
10002D9B 7D 69 jge short 驾校无纸.10002E06
10002D9D BE A4880010 mov esi,驾校无纸.100088A4
10002DA2 68 00010000 push 100
10002DA7 E8 04080000 call 驾校无纸.100035B0
10002DAC 83C4 04 add esp,4
10002DAF 85C0 test eax,eax
10002DB1 74 49 je short 驾校无纸.10002DFC
10002DB3 8B0D A0890010 mov ecx,dword ptr ds:[100089A0]
10002DB9 8906 mov dword ptr ds:[esi],eax
10002DBB 83C1 20 add ecx,20
10002DBE 890D A0890010 mov dword ptr ds:[100089A0],ecx
10002DC4 8D88 00010000 lea ecx,dword ptr ds:[eax+100]
10002DCA 3BC1 cmp eax,ecx
10002DCC 73 1C jnb short 驾校无纸.10002DEA
10002DCE C640 04 00 mov byte ptr ds:[eax+4],0
10002DD2 C700 FFFFFFFF mov dword ptr ds:[eax],-1
10002DD8 8858 05 mov byte ptr ds:[eax+5],bl
10002DDB 8B16 mov edx,dword ptr ds:[esi]
10002DDD 83C0 08 add eax,8
10002DE0 81C2 00010000 add edx,100
10002DE6 3BC2 cmp eax,edx
10002DE8 ^ 72 E4 jb short 驾校无纸.10002DCE
10002DEA A1 A0890010 mov eax,dword ptr ds:[100089A0]
10002DEF 8B4C24 10 mov ecx,dword ptr ss:[esp+10]
10002DF3 83C6 04 add esi,4
10002DF6 3BC1 cmp eax,ecx
10002DF8 ^ 7C A8 jl short 驾校无纸.10002DA2
10002DFA EB 0A jmp short 驾校无纸.10002E06
10002DFC 8B0D A0890010 mov ecx,dword ptr ds:[100089A0]
10002E02 894C24 10 mov dword ptr ss:[esp+10],ecx
10002E06 8B4424 10 mov eax,dword ptr ss:[esp+10]
10002E0A 33F6 xor esi,esi
10002E0C 85C0 test eax,eax
10002E0E 7E 49 jle short 驾校无纸.10002E59
10002E10 8B4D 00 mov ecx,dword ptr ss:[ebp]
10002E13 83F9 FF cmp ecx,-1
10002E16 74 34 je short 驾校无纸.10002E4C
10002E18 8A07 mov al,byte ptr ds:[edi]
10002E1A A8 01 test al,1
10002E1C 74 2E je short 驾校无纸.10002E4C
10002E1E A8 08 test al,8
10002E20 75 0B jnz short 驾校无纸.10002E2D
10002E22 51 push ecx
10002E23 FF15 64500010 call dword ptr ds:[<&KERNEL32.GetFileType>] ; kernel32.GetFileType
10002E29 85C0 test eax,eax
10002E2B 74 1F je short 驾校无纸.10002E4C
10002E2D 8BD6 mov edx,esi
10002E2F 8BC6 mov eax,esi
10002E31 C1FA 05 sar edx,5
10002E34 83E0 1F and eax,1F
10002E37 8B0C95 A0880010 mov ecx,dword ptr ds:[edx*4+100088A0]
10002E3E 8B55 00 mov edx,dword ptr ss:[ebp]
10002E41 8914C1 mov dword ptr ds:[ecx+eax*8],edx
10002E44 8D04C1 lea eax,dword ptr ds:[ecx+eax*8]
10002E47 8A0F mov cl,byte ptr ds:[edi]
10002E49 8848 04 mov byte ptr ds:[eax+4],cl
10002E4C 8B4424 10 mov eax,dword ptr ss:[esp+10]
10002E50 46 inc esi
10002E51 47 inc edi
10002E52 83C5 04 add ebp,4
10002E55 3BF0 cmp esi,eax
10002E57 ^ 7C B7 jl short 驾校无纸.10002E10
10002E59 8B2D 60500010 mov ebp,dword ptr ds:[<&KERNEL32.GetStdHandle>] ; kernel32.GetStdHandle
10002E5F 33DB xor ebx,ebx
10002E61 8B15 A0880010 mov edx,dword ptr ds:[100088A0]
10002E67 8B04DA mov eax,dword ptr ds:[edx+ebx*8]
10002E6A 8D34DA lea esi,dword ptr ds:[edx+ebx*8]
10002E6D 83F8 FF cmp eax,-1
10002E70 75 54 jnz short 驾校无纸.10002EC6
10002E72 85DB test ebx,ebx
10002E74 C646 04 81 mov byte ptr ds:[esi+4],81
10002E78 75 07 jnz short 驾校无纸.10002E81
10002E7A B8 F6FFFFFF mov eax,-0A
10002E7F EB 0A jmp short 驾校无纸.10002E8B
10002E81 8BC3 mov eax,ebx
10002E83 48 dec eax
10002E84 F7D8 neg eax
10002E86 1BC0 sbb eax,eax
10002E88 83C0 F5 add eax,-0B
10002E8B 50 push eax
10002E8C FFD5 call ebp
10002E8E 8BF8 mov edi,eax
10002E90 83FF FF cmp edi,-1
10002E93 74 2A je short 驾校无纸.10002EBF
10002E95 57 push edi
10002E96 FF15 64500010 call dword ptr ds:[<&KERNEL32.GetFileType>] ; kernel32.GetFileType
10002E9C 85C0 test eax,eax
10002E9E 74 1F je short 驾校无纸.10002EBF
10002EA0 25 FF000000 and eax,0FF
10002EA5 893E mov dword ptr ds:[esi],edi
10002EA7 83F8 02 cmp eax,2
10002EAA 75 07 jnz short 驾校无纸.10002EB3
10002EAC 8A46 04 mov al,byte ptr ds:[esi+4]
10002EAF 0C 40 or al,40
10002EB1 EB 18 jmp short 驾校无纸.10002ECB
10002EB3 83F8 03 cmp eax,3
10002EB6 75 16 jnz short 驾校无纸.10002ECE
10002EB8 8A46 04 mov al,byte ptr ds:[esi+4]
10002EBB 0C 08 or al,8
10002EBD EB 0C jmp short 驾校无纸.10002ECB
10002EBF 8A46 04 mov al,byte ptr ds:[esi+4]
10002EC2 0C 40 or al,40
10002EC4 EB 05 jmp short 驾校无纸.10002ECB
10002EC6 8A46 04 mov al,byte ptr ds:[esi+4]
10002EC9 0C 80 or al,80
10002ECB 8846 04 mov byte ptr ds:[esi+4],al
10002ECE 43 inc ebx
10002ECF 83FB 03 cmp ebx,3
10002ED2 ^ 7C 8D jl short 驾校无纸.10002E61
10002ED4 A1 A0890010 mov eax,dword ptr ds:[100089A0]
10002ED9 50 push eax
10002EDA FF15 5C500010 call dword ptr ds:[<&KERNEL32.SetHandleCount>] ; kernel32.SetHandleCount
10002EE0 5F pop edi
10002EE1 5E pop esi
10002EE2 5D pop ebp
10002EE3 5B pop ebx
10002EE4 83C4 48 add esp,48
10002EE7 C3 retn
10002EE8 90 nop
10002EE9 90 nop
10002EEA 90 nop
10002EEB 90 nop
10002EEC 90 nop
10002EED 90 nop
10002EEE 90 nop
10002EEF 90 nop
10002EF0 6A 00 push 0
10002EF2 68 00100000 push 1000
10002EF7 6A 01 push 1
10002EF9 FF15 6C500010 call dword ptr ds:[<&KERNEL32.HeapCreate>] ; kernel32.HeapCreate
10002EFF 85C0 test eax,eax
10002F01 A3 90880010 mov dword ptr ds:[10008890],eax
10002F06 75 01 jnz short 驾校无纸.10002F09
10002F08 C3 retn
10002F09 E8 52070000 call 驾校无纸.10003660
10002F0E 85C0 test eax,eax
10002F10 75 0F jnz short 驾校无纸.10002F21
10002F12 A1 90880010 mov eax,dword ptr ds:[10008890]
10002F17 50 push eax
10002F18 FF15 68500010 call dword ptr ds:[<&KERNEL32.HeapDestroy>] ; kernel32.HeapDestroy
10002F1E 33C0 xor eax,eax
10002F20 C3 retn
10002F21 B8 01000000 mov eax,1
10002F26 C3 retn
10002F27 90 nop
10002F28 90 nop
10002F29 90 nop
10002F2A 90 nop
10002F2B 90 nop
10002F2C 90 nop
10002F2D 90 nop
10002F2E 90 nop
10002F2F 90 nop
10002F30 55 push ebp
10002F31 8BEC mov ebp,esp
10002F33 53 push ebx
10002F34 56 push esi
10002F35 57 push edi
10002F36 55 push ebp
10002F37 6A 00 push 0
10002F39 6A 00 push 0
10002F3B 68 482F0010 push 驾校无纸.10002F48
10002F40 FF75 08 push dword ptr ss:[ebp+8]
10002F43 E8 C8120000 call <jmp.&KERNEL32.RtlUnwind>
10002F48 5D pop ebp
10002F49 5F pop edi
10002F4A 5E pop esi
10002F4B 5B pop ebx
10002F4C 8BE5 mov esp,ebp
10002F4E 5D pop ebp
10002F4F C3 retn
赞赏
看原图
赞赏
雪币:
留言: