rendered paste body00401000 /. 55 PUSH EBP
00401001 |. 89E5 MOV EBP,ESP
00401003 |. 83EC 18 SUB ESP,18
00401006 |. 895D F8 MOV DWORD PTR SS:[EBP-8],EBX
00401009 |. 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8]
0040100C |. 31DB XOR EBX,EBX
0040100E |. 8975 FC MOV DWORD PTR SS:[EBP-4],ESI
00401011 |. 8B02 MOV EAX,DWORD PTR DS:[EDX]
00401013 |. 31F6 XOR ESI,ESI
00401015 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
00401017 |. 3D 910000C0 CMP EAX,C0000091
0040101C |. 77 43 JA SHORT sandbox.00401061
0040101E |. 3D 8D0000C0 CMP EAX,C000008D
00401023 |. 72 5B JB SHORT sandbox.00401080
00401025 |> BE 01000000 MOV ESI,1
0040102A |> C70424 0800000>MOV DWORD PTR SS:[ESP],8 ; |
00401031 |. 31C0 XOR EAX,EAX ; |
00401033 |. 894424 04 MOV DWORD PTR SS:[ESP+4],EAX ; |
00401037 |. E8 84070000 CALL <JMP.&msvcrt.signal> ; \signal
0040103C |. 83F8 01 CMP EAX,1
0040103F |. 74 6C JE SHORT sandbox.004010AD
00401041 |. 85C0 TEST EAX,EAX
00401043 |. 74 2A JE SHORT sandbox.0040106F
00401045 |. C70424 0800000>MOV DWORD PTR SS:[ESP],8
0040104C |. FFD0 CALL EAX
0040104E |> BB FFFFFFFF MOV EBX,-1
00401053 |> 89D8 MOV EAX,EBX
00401055 |. 8B75 FC MOV ESI,DWORD PTR SS:[EBP-4]
00401058 |. 8B5D F8 MOV EBX,DWORD PTR SS:[EBP-8]
0040105B |. 89EC MOV ESP,EBP
0040105D |. 5D POP EBP
0040105E |. C2 0400 RETN 4
00401061 |> 3D 930000C0 CMP EAX,C0000093
00401066 |.^74 BD JE SHORT sandbox.00401025
00401068 |. 3D 940000C0 CMP EAX,C0000094
0040106D |.^74 BB JE SHORT sandbox.0040102A
0040106F |> 89D8 MOV EAX,EBX
00401071 |. 8B75 FC MOV ESI,DWORD PTR SS:[EBP-4]
00401074 |. 8B5D F8 MOV EBX,DWORD PTR SS:[EBP-8]
00401077 |. 89EC MOV ESP,EBP
00401079 |. 5D POP EBP
0040107A |. C2 0400 RETN 4
0040107D | 8D76 00 LEA ESI,DWORD PTR DS:[ESI]
00401080 |> 3D 050000C0 CMP EAX,C0000005 ; |
00401085 |.^75 E8 JNZ SHORT sandbox.0040106F ; |
00401087 |. C70424 0B00000>MOV DWORD PTR SS:[ESP],0B ; |
0040108E |. 31F6 XOR ESI,ESI ; |
00401090 |. 897424 04 MOV DWORD PTR SS:[ESP+4],ESI ; |
00401094 |. E8 27070000 CALL <JMP.&msvcrt.signal> ; \signal
00401099 |. 83F8 01 CMP EAX,1
0040109C |. 74 34 JE SHORT sandbox.004010D2
0040109E |. 85C0 TEST EAX,EAX
004010A0 |.^74 CD JE SHORT sandbox.0040106F
004010A2 |. C70424 0B00000>MOV DWORD PTR SS:[ESP],0B
004010A9 |. FFD0 CALL EAX
004010AB |.^EB A1 JMP SHORT sandbox.0040104E
004010AD |> C70424 0800000>MOV DWORD PTR SS:[ESP],8 ; |
004010B4 |. BB 01000000 MOV EBX,1 ; |
004010B9 |. 895C24 04 MOV DWORD PTR SS:[ESP+4],EBX ; |
004010BD |. E8 FE060000 CALL <JMP.&msvcrt.signal> ; \signal
004010C2 |. 85F6 TEST ESI,ESI
004010C4 |.^74 88 JE SHORT sandbox.0040104E
004010C6 |. E8 35020000 CALL sandbox.00401300
004010CB |. BB FFFFFFFF MOV EBX,-1
004010D0 |.^EB 81 JMP SHORT sandbox.00401053
004010D2 |> C70424 0B00000>MOV DWORD PTR SS:[ESP],0B ; |
004010D9 |. B9 01000000 MOV ECX,1 ; |
004010DE |. BB FFFFFFFF MOV EBX,-1 ; |
004010E3 |. 894C24 04 MOV DWORD PTR SS:[ESP+4],ECX ; |
004010E7 |. E8 D4060000 CALL <JMP.&msvcrt.signal> ; \signal
004010EC \.^E9 62FFFFFF JMP sandbox.00401053
004010F1 . EB 0D JMP SHORT sandbox.00401100
004010F3 90 NOP
004010F4 90 NOP
004010F5 90 NOP
004010F6 90 NOP
004010F7 90 NOP
004010F8 90 NOP
004010F9 90 NOP
004010FA 90 NOP
004010FB 90 NOP
004010FC 90 NOP
004010FD 90 NOP
004010FE 90 NOP
004010FF 90 NOP
00401100 /$ 55 PUSH EBP
00401101 |. 89E5 MOV EBP,ESP
00401103 |. 53 PUSH EBX
00401104 |. 83EC 24 SUB ESP,24
00401107 |. 8D5D F8 LEA EBX,DWORD PTR SS:[EBP-8] ; |
0040110A |. C70424 0010400>MOV DWORD PTR SS:[ESP],sandbox.00401000 ; |
00401111 |. E8 3A070000 CALL <JMP.&KERNEL32.SetUnhandledExceptio>; \SetUnhandledExceptionFilter
00401116 |. 83EC 04 SUB ESP,4
00401119 |. E8 E2010000 CALL sandbox.00401300
0040111E |. C745 F8 000000>MOV DWORD PTR SS:[EBP-8],0
00401125 |. B8 00404000 MOV EAX,sandbox.00404000
0040112A |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C]
0040112D |. 895C24 10 MOV DWORD PTR SS:[ESP+10],EBX
00401131 |. 8B0D 00204000 MOV ECX,DWORD PTR DS:[402000]
00401137 |. 894424 04 MOV DWORD PTR SS:[ESP+4],EAX
0040113B |. 895424 08 MOV DWORD PTR SS:[ESP+8],EDX
0040113F |. 894C24 0C MOV DWORD PTR SS:[ESP+C],ECX
00401143 |. C70424 0440400>MOV DWORD PTR SS:[ESP],sandbox.00404004
0040114A |. E8 A1060000 CALL <JMP.&msvcrt.__getmainargs>
0040114F |. A1 10404000 MOV EAX,DWORD PTR DS:[404010]
00401154 |. 85C0 TEST EAX,EAX
00401156 |. 74 58 JE SHORT sandbox.004011B0
00401158 |. A3 10204000 MOV DWORD PTR DS:[402010],EAX
0040115D |. 8B15 D0504000 MOV EDX,DWORD PTR DS:[<&msvcrt._iob>] ; msvcrt._iob
00401163 |. 85D2 TEST EDX,EDX
00401165 |. 0F85 8B000000 JNZ sandbox.004011F6
0040116B |> 83FA E0 CMP EDX,-20 ; |
0040116E |. 74 20 JE SHORT sandbox.00401190 ; |
00401170 |. A1 10404000 MOV EAX,DWORD PTR DS:[404010] ; |
00401175 |. 894424 04 MOV DWORD PTR SS:[ESP+4],EAX ; |
00401179 |. 8B1D D0504000 MOV EBX,DWORD PTR DS:[<&msvcrt._iob>] ; |msvcrt._iob
0040117F |. 8B4B 30 MOV ECX,DWORD PTR DS:[EBX+30] ; |
00401182 |. 890C24 MOV DWORD PTR SS:[ESP],ECX ; |
00401185 |. E8 56060000 CALL <JMP.&msvcrt._setmode> ; \_setmode
0040118A |. 8B15 D0504000 MOV EDX,DWORD PTR DS:[<&msvcrt._iob>] ; msvcrt._iob
00401190 |> 83FA C0 CMP EDX,-40 ; |
00401193 |. 74 1B JE SHORT sandbox.004011B0 ; |
00401195 |. 8B1D 10404000 MOV EBX,DWORD PTR DS:[404010] ; |
0040119B |. 895C24 04 MOV DWORD PTR SS:[ESP+4],EBX ; |
0040119F |. 8B0D D0504000 MOV ECX,DWORD PTR DS:[<&msvcrt._iob>] ; |msvcrt._iob
004011A5 |. 8B51 50 MOV EDX,DWORD PTR DS:[ECX+50] ; |
004011A8 |. 891424 MOV DWORD PTR SS:[ESP],EDX ; |
004011AB |. E8 30060000 CALL <JMP.&msvcrt._setmode> ; \_setmode
004011B0 |> E8 1B060000 CALL <JMP.&msvcrt.__p__fmode>
004011B5 |. 8B1D 10204000 MOV EBX,DWORD PTR DS:[402010]
004011BB |. 8918 MOV DWORD PTR DS:[EAX],EBX
004011BD |. E8 0E010000 CALL sandbox.004012D0
004011C2 |. 83E4 F0 AND ESP,FFFFFFF0
004011C5 |. E8 E6050000 CALL <JMP.&msvcrt.__p__environ>
004011CA |. 8B08 MOV ECX,DWORD PTR DS:[EAX]
004011CC |. 894C24 08 MOV DWORD PTR SS:[ESP+8],ECX
004011D0 |. 8B15 00404000 MOV EDX,DWORD PTR DS:[404000]
004011D6 |. 895424 04 MOV DWORD PTR SS:[ESP+4],EDX
004011DA |. A1 04404000 MOV EAX,DWORD PTR DS:[404004]
004011DF |. 890424 MOV DWORD PTR SS:[ESP],EAX
004011E2 |. E8 A9000000 CALL sandbox.00401290
004011E7 |. 89C3 MOV EBX,EAX ; |
004011E9 |. E8 B2050000 CALL <JMP.&msvcrt._cexit> ; |[msvcrt._cexit
004011EE |. 891C24 MOV DWORD PTR SS:[ESP],EBX ; |
004011F1 |. E8 6A060000 CALL <JMP.&KERNEL32.ExitProcess> ; \ExitProcess
004011F6 |> 894424 04 MOV DWORD PTR SS:[ESP+4],EAX ; |
004011FA |. 8B15 D0504000 MOV EDX,DWORD PTR DS:[<&msvcrt._iob>] ; |msvcrt._iob
00401200 |. 8B42 10 MOV EAX,DWORD PTR DS:[EDX+10] ; |
00401203 |. 890424 MOV DWORD PTR SS:[ESP],EAX ; |
00401206 |. E8 D5050000 CALL <JMP.&msvcrt._setmode> ; \_setmode
0040120B |. 8B15 D0504000 MOV EDX,DWORD PTR DS:[<&msvcrt._iob>] ; msvcrt._iob
00401211 \.^E9 55FFFFFF JMP sandbox.0040116B
00401216 8D76 00 LEA ESI,DWORD PTR DS:[ESI]
00401219 . 8D BC 27 00 ASCII "¼'",0
0040121D 00 DB 00
0040121E 00 DB 00
0040121F 00 DB 00
00401220 > $ 55 PUSH EBP
00401221 . 89E5 MOV EBP,ESP
00401223 . 83EC 08 SUB ESP,8
00401226 . C70424 0100000>MOV DWORD PTR SS:[ESP],1
0040122D . FF15 C8504000 CALL DWORD PTR DS:[<&msvcrt.__set_app_ty>; msvcrt.__set_app_type