UnPackEr:0040E5FF call sub_40CC30
UnPackEr:0040E604 cmp eax, 0FFFFFFFFh
UnPackEr:0040E607 jz short loc_40E686
UnPackEr:0040E609 mov eax, dword ptr [esp+1Ch+optval]
UnPackEr:0040E60D push eax ; optval
UnPackEr:0040E60E mov ecx, edi
UnPackEr:0040E610 call sub_40CD50 ; TAGS: ['net']
UnPackEr:0040E615 mov edx, [esi]
UnPackEr:0040E617 push edi
UnPackEr:0040E618 mov ecx, esi
UnPackEr:0040E61A call dword ptr [edx+0Ch] <----------可控制edx执行代码，但是DEP环境，栈不可执行
UnPackEr:0040E61D mov ecx, edi
UnPackEr:0040E61F call sub_40CD00
UnPackEr:0040E624 test al, al
UnPackEr:0040E626 jz short loc_40E669
UnPackEr:0040E628 push edi ; int
UnPackEr:0040E629 lea ecx, [esi+30h] ; lpCriticalSection
UnPackEr:0040E62C call sub_40DEF0
UnPackEr:0040E631 test al, al
