00402170 /$ 55 push ebp
00402171 |. 8BEC mov ebp, esp
00402173 |. 6A FF push -1
00402175 |. 68 704B4000 push 00404B70 ; SE 处理程序安装
0040217A |. 64:A1 0000000>mov eax, dword ptr fs:[0]
00402180 |. 50 push eax
00402181 |. 64:8925 00000>mov dword ptr fs:[0], esp
00402188 |. 81EC A8000000 sub esp, 0A8
0040218E |. 53 push ebx
0040218F |. 56 push esi
00402190 |. 57 push edi
00402191 |. 8BF1 mov esi, ecx
00402193 |. C745 FC 01000>mov dword ptr ss:[ebp-4], 1
0040219A |. 90 nop
0040219B |. 90 nop
0040219C |. 90 nop
0040219D |. 90 nop
0040219E |. 90 nop
0040219F |. 90 nop
004021A0 |. 90 nop
004021A1 |. 90 nop
004021A2 |. 90 nop
004021A3 |. 90 nop
004021A4 |. 90 nop
004021A5 |. 90 nop
004021A6 |. 90 nop
004021A7 |. 33DB xor ebx, ebx
004021A9 |. 8D4D 08 lea ecx, dword ptr ss:[ebp+8]
004021AC |. 53 push ebx
004021AD |. E8 D6250000 call <jmp.&mfc42.
004021B2 |. 8945 D0 mov dword ptr ss:[ebp-30], eax
004021B5 |. 90 nop
004021B6 |. 90 nop
004021B7 |. 90 nop
004021B8 |. 90 nop
004021B9 |. 90 nop
004021BA |. 90 nop
004021BB |. 90 nop
004021BC |. 90 nop
004021BD |. 90 nop
004021BE |. 90 nop
004021BF |. 90 nop
004021C0 |. 90 nop
004021C1 |. 90 nop
004021C2 |. 53 push ebx
004021C3 |. 8D4D 0C lea ecx, dword ptr ss:[ebp+C]
004021C6 |. E8 BD250000 call <jmp.&mfc42.
004021CB |. 8945 DC mov dword ptr ss:[ebp-24], eax
004021CE |. 90 nop
004021CF |. 90 nop
004021D0 |. 90 nop
004021D1 |. 90 nop
004021D2 |. 90 nop
004021D3 |. 90 nop
004021D4 |. 90 nop
004021D5 |. 90 nop
004021D6 |. 90 nop
004021D7 |. 90 nop
004021D8 |. 90 nop
004021D9 |. 90 nop
004021DA |. 90 nop
004021DB |. 895D D4 mov dword ptr ss:[ebp-2C], ebx
004021DE |. 90 nop
004021DF |. 90 nop
004021E0 |. 90 nop
004021E1 |. 90 nop
004021E2 |. 90 nop
004021E3 |. 90 nop
004021E4 |. 90 nop
004021E5 |. 90 nop
004021E6 |. 90 nop
004021E7 |. 90 nop
004021E8 |. 90 nop
004021E9 |. 90 nop
004021EA |. 90 nop
004021EB |. B9 1F000000 mov ecx, 1F
004021F0 |. 33C0 xor eax, eax
004021F2 |. 8DBD 50FFFFFF lea edi, dword ptr ss:[ebp-B0]
004021F8 |. 899D 4CFFFFFF mov dword ptr ss:[ebp-B4], ebx
004021FE |. F3:AB rep stos dword ptr es:[edi]
00402200 |. 90 nop
00402201 |. 90 nop
00402202 |. 90 nop
00402203 |. 90 nop
00402204 |. 90 nop
00402205 |. 90 nop
00402206 |. 90 nop
00402207 |. 90 nop
00402208 |. 90 nop
00402209 |. 90 nop
0040220A |. 90 nop
0040220B |. 90 nop
0040220C |. 90 nop
0040220D |. 8D85 4CFFFFFF lea eax, dword ptr ss:[ebp-B4]
00402213 |. 8BCE mov ecx, esi
00402215 |. 50 push eax ;
/Arg1
00402216 |. E8 95020000 call 004024B0 ; \dumped_.004024B0
0040221B |. 90 nop
0040221C |. 90 nop
0040221D |. 90 nop
0040221E |. 90 nop
0040221F |. 90 nop
00402220 |. 90 nop
00402221 |. 90 nop
00402222 |. 90 nop
00402223 |. 90 nop
00402224 |. 90 nop
00402225 |. 90 nop
00402226 |. 90 nop
00402227 |. 90 nop
00402228 |. 8BCE mov ecx, esi
0040222A |. E8 41FBFFFF call 00401D70
0040222F |. 90 nop
00402230 |. 90 nop
00402231 |. 90 nop
00402232 |. 90 nop
00402233 |. 90 nop
00402234 |. 90 nop
00402235 |. 90 nop
00402236 |. 90 nop
00402237 |. 90 nop
00402238 |. 90 nop
00402239 |. 90 nop
0040223A |. 90 nop
0040223B |. 90 nop
0040223C |. 8BCE mov ecx, esi
0040223E |. E8 9DFDFFFF call 00401FE0
00402243 |. 84C0
test
al, al
00402245 |. 0F84 1C020000 je 00402467
0040224B |. 8BCE mov ecx, esi
0040224D |. E8 3EFDFFFF call 00401F90
00402252 |. 84C0
test
al, al
00402254 |. 0F84 0D020000 je 00402467
0040225A |. 90 nop
0040225B |. 90 nop
0040225C |. 90 nop
0040225D |. 90 nop
0040225E |. 90 nop
0040225F |. 90 nop
00402260 |. 90 nop
00402261 |. 90 nop
00402262 |. 90 nop
00402263 |. 90 nop
00402264 |. 90 nop
00402265 |. 90 nop
00402266 |. 90 nop
00402267 |. 8B4D DC mov ecx, dword ptr ss:[ebp-24]
0040226A |. 33D2 xor edx, edx
0040226C |. 83C1 0F add ecx, 0F
0040226F |. C745 D8 09000>mov dword ptr ss:[ebp-28], 9
00402276 |. 8D75 8C lea esi, dword ptr ss:[ebp-74]
00402279 |. 894D DC mov dword ptr ss:[ebp-24], ecx
0040227C |> 8B45 08
/mov
eax, dword ptr ss:[ebp+8]
0040227F |. 8B40 F8 |mov eax, dword ptr ds:[eax-8]
00402282 |. 83F8 10 |
cmp
eax, 10
00402285 |. 7C 05 |jl short 0040228C
00402287 |. B8 10000000 |mov eax, 10
0040228C |> 3BD0 |
cmp
edx, eax
0040228E |. 0F8D C9000000 |jge 0040235D
00402294 |. 90 |nop
00402295 |. 90 |nop
00402296 |. 90 |nop
00402297 |. 90 |nop
00402298 |. 90 |nop
00402299 |. 90 |nop
0040229A |. 90 |nop
0040229B |. 90 |nop
0040229C |. 90 |nop
0040229D |. 90 |nop
0040229E |. 90 |nop
0040229F |. 90 |nop
004022A0 |. 90 |nop
004022A1 |. 8B4D D0 |mov ecx, dword ptr ss:[ebp-30]
004022A4 |. 0FBE040A |movsx eax, byte ptr ds:[edx+ecx]
004022A8 |. 0FAF46 C0 |imul eax, dword ptr ds:[esi-40]
004022AC |. 0FAFC2 |imul eax, edx
004022AF |. 90 |nop
004022B0 |. 90 |nop
004022B1 |. 90 |nop
004022B2 |. 90 |nop
004022B3 |. 90 |nop
004022B4 |. 90 |nop
004022B5 |. 90 |nop
004022B6 |. 90 |nop
004022B7 |. 90 |nop
004022B8 |. 90 |nop
004022B9 |. 90 |nop
004022BA |. 90 |nop
004022BB |. 90 |nop
004022BC |. 90 |nop
004022BD |. 90 |nop
004022BE |. 90 |nop
004022BF |. 90 |nop
004022C0 |. 90 |nop
004022C1 |. 90 |nop
004022C2 |. 90 |nop
004022C3 |. 90 |nop
004022C4 |. 90 |nop
004022C5 |. 90 |nop
004022C6 |. 90 |nop
004022C7 |. 90 |nop
004022C8 |. 90 |nop
004022C9 |. 90 |nop
004022CA |. 90 |nop
004022CB |. 90 |nop
004022CC |. 90 |nop
004022CD |. 90 |nop
004022CE |. 90 |nop
004022CF |. 90 |nop
004022D0 |. 90 |nop
004022D1 |. 90 |nop
004022D2 |. 90 |nop
004022D3 |. 90 |nop
004022D4 |. 90 |nop
004022D5 |. 90 |nop
004022D6 |. 90 |nop
004022D7 |. 90 |nop
004022D8 |. 90 |nop
004022D9 |. 90 |nop
004022DA |. 90 |nop
004022DB |. 90 |nop
004022DC |. 90 |nop
004022DD |. 90 |nop
004022DE |. 90 |nop
004022DF |. 90 |nop
004022E0 |. 90 |nop
004022E1 |. 90 |nop
004022E2 |. 90 |nop
004022E3 |. 8B4D DC |mov ecx, dword ptr ss:[ebp-24]
004022E6 |. 0FBE09 |movsx ecx, byte ptr ds:[ecx]
004022E9 |. 0FAF0E |imul ecx, dword ptr ds:[esi]
004022EC |. 0FAF4D D8 |imul ecx, dword ptr ss:[ebp-28]
004022F0 |. 90 |nop
004022F1 |. 90 |nop
004022F2 |. 90 |nop
004022F3 |. 90 |nop
004022F4 |. 90 |nop
004022F5 |. 90 |nop
004022F6 |. 90 |nop
004022F7 |. 90 |nop
004022F8 |. 90 |nop
004022F9 |. 90 |nop
004022FA |. 90 |nop
004022FB |. 90 |nop
004022FC |. 90 |nop
004022FD |. 90 |nop
004022FE |. 90 |nop
004022FF |. 90 |nop
00402300 |. 90 |nop
00402301 |. 90 |nop
00402302 |. 90 |nop
00402303 |. 90 |nop
00402304 |. 90 |nop
00402305 |. 90 |nop
00402306 |. 90 |nop
00402307 |. 90 |nop
00402308 |. 90 |nop
00402309 |. 90 |nop
0040230A |. 90 |nop
0040230B |. 90 |nop
0040230C |. 90 |nop
0040230D |. 90 |nop
0040230E |. 90 |nop
0040230F |. 90 |nop
00402310 |. 90 |nop
00402311 |. 90 |nop
00402312 |. 90 |nop
00402313 |. 90 |nop
00402314 |. 90 |nop
00402315 |. 90 |nop
00402316 |. 90 |nop
00402317 |. 8D1CC5 000000>|lea ebx, dword ptr ds:[eax*8]
0040231E |. 8D3C8D 000000>|lea edi, dword ptr ds:[ecx*4]
00402325 |. 2BD8 |sub ebx, eax
00402327 |. 03C0 |add eax, eax
00402329 |. 2BDF |sub ebx, edi
0040232B |. 2BD8 |sub ebx, eax
0040232D |. 03D9 |add ebx, ecx
0040232F |. 8BCB |mov ecx, ebx
00402331 |. 8B5D D4 |mov ebx, dword ptr ss:[ebp-2C]
00402334 |. 03D9 |add ebx, ecx
00402336 |. 895D D4 |mov dword ptr ss:[ebp-2C], ebx
00402339 |. 90 |nop
0040233A |. 90 |nop
0040233B |. 90 |nop
0040233C |. 90 |nop
0040233D |. 90 |nop
0040233E |. 90 |nop
0040233F |. 90 |nop
00402340 |. 90 |nop
00402341 |. 90 |nop
00402342 |. 90 |nop
00402343 |. 90 |nop
00402344 |. 90 |nop
00402345 |. 90 |nop
00402346 |. 8B4D DC |mov ecx, dword ptr ss:[ebp-24]
00402349 |. 8B45 D8 |mov eax, dword ptr ss:[ebp-28]
0040234C |. 42 |inc edx
0040234D |. 83C6 04 |add esi, 4
00402350 |. 49 |dec ecx
00402351 |. 48 |dec eax
00402352 |. 894D DC |mov dword ptr ss:[ebp-24], ecx
00402355 |. 8945 D8 |mov dword ptr ss:[ebp-28], eax
00402358 |.^ E9 1FFFFFFF \jmp 0040227C
0040235D |> 90 nop
0040235E |. 90 nop
0040235F |. 90 nop
00402360 |. 90 nop
00402361 |. 90 nop
00402362 |. 90 nop
00402363 |. 90 nop
00402364 |. 90 nop
00402365 |. 90 nop
00402366 |. 90 nop
00402367 |. 90 nop
00402368 |. 90 nop
00402369 |. 90 nop
0040236A |. 33D2 xor edx, edx
0040236C |. C645 E0 00 mov byte ptr ss:[ebp-20], 0
00402370 |. 8955 E1 mov dword ptr ss:[ebp-1F], edx
00402373 |. 8955 E5 mov dword ptr ss:[ebp-1B], edx
00402376 |. 8955 E9 mov dword ptr ss:[ebp-17], edx
00402379 |. 8955 ED mov dword ptr ss:[ebp-13], edx
0040237C |. 66:8955 F1 mov word ptr ss:[ebp-F], dx
00402380 |. 8855 F3 mov byte ptr ss:[ebp-D], dl
00402383 |. 90 nop
00402384 |. 90 nop
00402385 |. 90 nop
00402386 |. 90 nop
00402387 |. 90 nop
00402388 |. 90 nop
00402389 |. 90 nop
0040238A |. 90 nop
0040238B |. 90 nop
0040238C |. 90 nop
0040238D |. 90 nop
0040238E |. 90 nop
0040238F |. 90 nop
00402390 |. 8BC3 mov eax, ebx
00402392 |. 99 cdq
00402393 |. 33C2 xor eax, edx
00402395 |. 2BC2 sub eax, edx
00402397 |. 50 push eax ; /<%d>
00402398 |. 8D45 E0 lea eax, dword ptr ss:[ebp-20] ; |
0040239B |. 68 087B4000 push 00407B08 ; |%d
004023A0 |. 50 push eax ; |s
004023A1 |. FF15 60524000 call dword ptr ds:[<&msvcrt.sprintf>] ; \sprintf
004023A7 |. 83C4 0C add esp, 0C
004023AA |. 90 nop
004023AB |. 90 nop
004023AC |. 90 nop
004023AD |. 90 nop
004023AE |. 90 nop
004023AF |. 90 nop
004023B0 |. 90 nop
004023B1 |. 90 nop
004023B2 |. 90 nop
004023B3 |. 90 nop
004023B4 |. 90 nop
004023B5 |. 90 nop
004023B6 |. 90 nop
004023B7 |. 8D7D E0 lea edi, dword ptr ss:[ebp-20]
004023BA |. 83C9 FF or ecx, FFFFFFFF
004023BD |. 33C0 xor eax, eax
004023BF |. 33F6 xor esi, esi
004023C1 |. F2:AE repne scas byte ptr es:[edi]
004023C3 |. F7D1 not ecx
004023C5 |. 49 dec ecx
004023C6 |. 85C9
test
ecx, ecx
004023C8 |. 7E 3F jle short 00402409
004023CA |> 90
/nop
004023CB |. 90 |nop
004023CC |. 90 |nop
004023CD |. 90 |nop
004023CE |. 90 |nop
004023CF |. 90 |nop
004023D0 |. 90 |nop
004023D1 |. 90 |nop
004023D2 |. 90 |nop
004023D3 |. 90 |nop
004023D4 |. 90 |nop
004023D5 |. 90 |nop
004023D6 |. 90 |nop
004023D7 |. 0FBE4C35 E0 |movsx ecx, byte ptr ss:[ebp+esi-20]
004023DC |. 03D9 |add ebx, ecx
004023DE |. 90 |nop
004023DF |. 90 |nop
004023E0 |. 90 |nop
004023E1 |. 90 |nop
004023E2 |. 90 |nop
004023E3 |. 90 |nop
004023E4 |. 90 |nop
004023E5 |. 90 |nop
004023E6 |. 90 |nop
004023E7 |. 90 |nop
004023E8 |. 90 |nop
004023E9 |. 90 |nop
004023EA |. 90 |nop
004023EB |. 8BC3 |mov eax, ebx
004023ED |. B9 12000000 |mov ecx, 12
004023F2 |. 99 |cdq
004023F3 |. F7F9 |idiv ecx
004023F5 |. 8D7D E0 |lea edi, dword ptr ss:[ebp-20]
004023F8 |. 83C9 FF |or ecx, FFFFFFFF
004023FB |. 33C0 |xor eax, eax
004023FD |. 46 |inc esi
004023FE |. F2:AE |repne scas byte ptr es:[edi]
00402400 |. F7D1 |not ecx
00402402 |. 49 |dec ecx
00402403 |. 3BF1 |
cmp
esi, ecx
00402405 |. 8BDA |mov ebx, edx
00402407 |.^ 7C C1 \jl short 004023CA
00402409 |> 90 nop
0040240A |. 90 nop
0040240B |. 90 nop
0040240C |. 90 nop
0040240D |. 90 nop
0040240E |. 90 nop
0040240F |. 90 nop
00402410 |. 90 nop
00402411 |. 90 nop
00402412 |. 90 nop
00402413 |. 90 nop
00402414 |. 90 nop
00402415 |. 90 nop
00402416 |. 83FB 11
cmp
ebx, 11
00402419 |. 75 3D jnz short 00402458
0040241B |. 90 nop
0040241C |. 90 nop
0040241D |. 90 nop
0040241E |. 90 nop
0040241F |. 90 nop
00402420 |. 90 nop
00402421 |. 90 nop
00402422 |. 90 nop
00402423 |. 90 nop
00402424 |. 90 nop
00402425 |. 90 nop
00402426 |. 90 nop
00402427 |. 90 nop
00402428 |. 8D4D 08 lea ecx, dword ptr ss:[ebp+8]
0040242B |. C645 FC 00 mov byte ptr ss:[ebp-4], 0
0040242F |. E8 F8210000 call <jmp.&mfc42.
00402434 |. 8D4D 0C lea ecx, dword ptr ss:[ebp+C]
00402437 |. C745 FC FFFFF>mov dword ptr ss:[ebp-4], -1
0040243E |. E8 E9210000 call <jmp.&mfc42.
00402443 |. 5F pop edi
00402444 |. 5E pop esi
00402445 |. B0 01 mov al, 1
00402447 |. 5B pop ebx
00402448 |. 8B4D F4 mov ecx, dword ptr ss:[ebp-C]
0040244B |. 64:890D 00000>mov dword ptr fs:[0], ecx
00402452 |. 8BE5 mov esp, ebp
00402454 |. 5D pop ebp
00402455 |. C2 0800 retn 8
00402458 |> 90 nop
00402459 |. 90 nop
0040245A |. 90 nop
0040245B |. 90 nop
0040245C |. 90 nop
0040245D |. 90 nop
0040245E |. 90 nop
0040245F |. 90 nop
00402460 |. 90 nop
00402461 |. 90 nop
00402462 |. 90 nop
00402463 |. 90 nop
00402464 |. 90 nop
00402465 |. EB 0D jmp short 00402474
00402467 |> 90 nop
00402468 |. 90 nop
00402469 |. 90 nop
0040246A |. 90 nop
0040246B |. 90 nop
0040246C |. 90 nop
0040246D |. 90 nop
0040246E |. 90 nop
0040246F |. 90 nop
00402470 |. 90 nop
00402471 |. 90 nop
00402472 |. 90 nop
00402473 |. 90 nop
00402474 |> 8D4D 08 lea ecx, dword ptr ss:[ebp+8]
00402477 |. C645 FC 00 mov byte ptr ss:[ebp-4], 0
0040247B |. E8 AC210000 call <jmp.&mfc42.
00402480 |. 8D4D 0C lea ecx, dword ptr ss:[ebp+C]
00402483 |. C745 FC FFFFF>mov dword ptr ss:[ebp-4], -1
0040248A |. E8 9D210000 call <jmp.&mfc42.
0040248F |. 8B4D F4 mov ecx, dword ptr ss:[ebp-C]
00402492 |. 5F pop edi
00402493 |. 5E pop esi
00402494 |. 32C0 xor al, al
00402496 |. 5B pop ebx
00402497 |. 64:890D 00000>mov dword ptr fs:[0], ecx
0040249E |. 8BE5 mov esp, ebp
004024A0 |. 5D pop ebp
004024A1 \. C2 0800 retn 8