00401000 /. 55 PUSH EBP 00401001 |. 89E5 MOV EBP,ESP 00401003 |. 83EC 18 SUB ESP,18 00401006 |. 895D F8 MOV DWORD PTR SS:[EBP-8],EBX 00401009 |. 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8] 0040100C |. 31DB XOR EBX,EBX 0040100E |. 8975 FC MOV DWORD PTR SS:[EBP-4],ESI 00401011 |. 8B02 MOV EAX,DWORD PTR DS:[EDX] 00401013 |. 31F6 XOR ESI,ESI 00401015 |. 8B00 MOV EAX,DWORD PTR DS:[EAX] 00401017 |. 3D 910000C0 CMP EAX,C0000091 0040101C |. 77 43 JA SHORT sandbox.00401061 0040101E |. 3D 8D0000C0 CMP EAX,C000008D 00401023 |. 72 5B JB SHORT sandbox.00401080 00401025 |> BE 01000000 MOV ESI,1 0040102A |> C70424 0800000>MOV DWORD PTR SS:[ESP],8 ; | 00401031 |. 31C0 XOR EAX,EAX ; | 00401033 |. 894424 04 MOV DWORD PTR SS:[ESP+4],EAX ; | 00401037 |. E8 84070000 CALL ; \signal 0040103C |. 83F8 01 CMP EAX,1 0040103F |. 74 6C JE SHORT sandbox.004010AD 00401041 |. 85C0 TEST EAX,EAX 00401043 |. 74 2A JE SHORT sandbox.0040106F 00401045 |. C70424 0800000>MOV DWORD PTR SS:[ESP],8 0040104C |. FFD0 CALL EAX 0040104E |> BB FFFFFFFF MOV EBX,-1 00401053 |> 89D8 MOV EAX,EBX 00401055 |. 8B75 FC MOV ESI,DWORD PTR SS:[EBP-4] 00401058 |. 8B5D F8 MOV EBX,DWORD PTR SS:[EBP-8] 0040105B |. 89EC MOV ESP,EBP 0040105D |. 5D POP EBP 0040105E |. C2 0400 RETN 4 00401061 |> 3D 930000C0 CMP EAX,C0000093 00401066 |.^74 BD JE SHORT sandbox.00401025 00401068 |. 3D 940000C0 CMP EAX,C0000094 0040106D |.^74 BB JE SHORT sandbox.0040102A 0040106F |> 89D8 MOV EAX,EBX 00401071 |. 8B75 FC MOV ESI,DWORD PTR SS:[EBP-4] 00401074 |. 8B5D F8 MOV EBX,DWORD PTR SS:[EBP-8] 00401077 |. 89EC MOV ESP,EBP 00401079 |. 5D POP EBP 0040107A |. C2 0400 RETN 4 0040107D | 8D76 00 LEA ESI,DWORD PTR DS:[ESI] 00401080 |> 3D 050000C0 CMP EAX,C0000005 ; | 00401085 |.^75 E8 JNZ SHORT sandbox.0040106F ; | 00401087 |. C70424 0B00000>MOV DWORD PTR SS:[ESP],0B ; | 0040108E |. 31F6 XOR ESI,ESI ; | 00401090 |. 897424 04 MOV DWORD PTR SS:[ESP+4],ESI ; | 00401094 |. E8 27070000 CALL ; \signal 00401099 |. 83F8 01 CMP EAX,1 0040109C |. 74 34 JE SHORT sandbox.004010D2 0040109E |. 85C0 TEST EAX,EAX 004010A0 |.^74 CD JE SHORT sandbox.0040106F 004010A2 |. C70424 0B00000>MOV DWORD PTR SS:[ESP],0B 004010A9 |. FFD0 CALL EAX 004010AB |.^EB A1 JMP SHORT sandbox.0040104E 004010AD |> C70424 0800000>MOV DWORD PTR SS:[ESP],8 ; | 004010B4 |. BB 01000000 MOV EBX,1 ; | 004010B9 |. 895C24 04 MOV DWORD PTR SS:[ESP+4],EBX ; | 004010BD |. E8 FE060000 CALL ; \signal 004010C2 |. 85F6 TEST ESI,ESI 004010C4 |.^74 88 JE SHORT sandbox.0040104E 004010C6 |. E8 35020000 CALL sandbox.00401300 004010CB |. BB FFFFFFFF MOV EBX,-1 004010D0 |.^EB 81 JMP SHORT sandbox.00401053 004010D2 |> C70424 0B00000>MOV DWORD PTR SS:[ESP],0B ; | 004010D9 |. B9 01000000 MOV ECX,1 ; | 004010DE |. BB FFFFFFFF MOV EBX,-1 ; | 004010E3 |. 894C24 04 MOV DWORD PTR SS:[ESP+4],ECX ; | 004010E7 |. E8 D4060000 CALL ; \signal 004010EC \.^E9 62FFFFFF JMP sandbox.00401053 004010F1 . EB 0D JMP SHORT sandbox.00401100 004010F3 90 NOP 004010F4 90 NOP 004010F5 90 NOP 004010F6 90 NOP 004010F7 90 NOP 004010F8 90 NOP 004010F9 90 NOP 004010FA 90 NOP 004010FB 90 NOP 004010FC 90 NOP 004010FD 90 NOP 004010FE 90 NOP 004010FF 90 NOP 00401100 /$ 55 PUSH EBP 00401101 |. 89E5 MOV EBP,ESP 00401103 |. 53 PUSH EBX 00401104 |. 83EC 24 SUB ESP,24 00401107 |. 8D5D F8 LEA EBX,DWORD PTR SS:[EBP-8] ; | 0040110A |. C70424 0010400>MOV DWORD PTR SS:[ESP],sandbox.00401000 ; | 00401111 |. E8 3A070000 CALL ; \SetUnhandledExceptionFilter 00401116 |. 83EC 04 SUB ESP,4 00401119 |. E8 E2010000 CALL sandbox.00401300 0040111E |. C745 F8 000000>MOV DWORD PTR SS:[EBP-8],0 00401125 |. B8 00404000 MOV EAX,sandbox.00404000 0040112A |. 8D55 F4 LEA EDX,DWORD PTR SS:[EBP-C] 0040112D |. 895C24 10 MOV DWORD PTR SS:[ESP+10],EBX 00401131 |. 8B0D 00204000 MOV ECX,DWORD PTR DS:[402000] 00401137 |. 894424 04 MOV DWORD PTR SS:[ESP+4],EAX 0040113B |. 895424 08 MOV DWORD PTR SS:[ESP+8],EDX 0040113F |. 894C24 0C MOV DWORD PTR SS:[ESP+C],ECX 00401143 |. C70424 0440400>MOV DWORD PTR SS:[ESP],sandbox.00404004 0040114A |. E8 A1060000 CALL 0040114F |. A1 10404000 MOV EAX,DWORD PTR DS:[404010] 00401154 |. 85C0 TEST EAX,EAX 00401156 |. 74 58 JE SHORT sandbox.004011B0 00401158 |. A3 10204000 MOV DWORD PTR DS:[402010],EAX 0040115D |. 8B15 D0504000 MOV EDX,DWORD PTR DS:[<&msvcrt._iob>] ; msvcrt._iob 00401163 |. 85D2 TEST EDX,EDX 00401165 |. 0F85 8B000000 JNZ sandbox.004011F6 0040116B |> 83FA E0 CMP EDX,-20 ; | 0040116E |. 74 20 JE SHORT sandbox.00401190 ; | 00401170 |. A1 10404000 MOV EAX,DWORD PTR DS:[404010] ; | 00401175 |. 894424 04 MOV DWORD PTR SS:[ESP+4],EAX ; | 00401179 |. 8B1D D0504000 MOV EBX,DWORD PTR DS:[<&msvcrt._iob>] ; |msvcrt._iob 0040117F |. 8B4B 30 MOV ECX,DWORD PTR DS:[EBX+30] ; | 00401182 |. 890C24 MOV DWORD PTR SS:[ESP],ECX ; | 00401185 |. E8 56060000 CALL ; \_setmode 0040118A |. 8B15 D0504000 MOV EDX,DWORD PTR DS:[<&msvcrt._iob>] ; msvcrt._iob 00401190 |> 83FA C0 CMP EDX,-40 ; | 00401193 |. 74 1B JE SHORT sandbox.004011B0 ; | 00401195 |. 8B1D 10404000 MOV EBX,DWORD PTR DS:[404010] ; | 0040119B |. 895C24 04 MOV DWORD PTR SS:[ESP+4],EBX ; | 0040119F |. 8B0D D0504000 MOV ECX,DWORD PTR DS:[<&msvcrt._iob>] ; |msvcrt._iob 004011A5 |. 8B51 50 MOV EDX,DWORD PTR DS:[ECX+50] ; | 004011A8 |. 891424 MOV DWORD PTR SS:[ESP],EDX ; | 004011AB |. E8 30060000 CALL ; \_setmode 004011B0 |> E8 1B060000 CALL 004011B5 |. 8B1D 10204000 MOV EBX,DWORD PTR DS:[402010] 004011BB |. 8918 MOV DWORD PTR DS:[EAX],EBX 004011BD |. E8 0E010000 CALL sandbox.004012D0 004011C2 |. 83E4 F0 AND ESP,FFFFFFF0 004011C5 |. E8 E6050000 CALL 004011CA |. 8B08 MOV ECX,DWORD PTR DS:[EAX] 004011CC |. 894C24 08 MOV DWORD PTR SS:[ESP+8],ECX 004011D0 |. 8B15 00404000 MOV EDX,DWORD PTR DS:[404000] 004011D6 |. 895424 04 MOV DWORD PTR SS:[ESP+4],EDX 004011DA |. A1 04404000 MOV EAX,DWORD PTR DS:[404004] 004011DF |. 890424 MOV DWORD PTR SS:[ESP],EAX 004011E2 |. E8 A9000000 CALL sandbox.00401290 004011E7 |. 89C3 MOV EBX,EAX ; | 004011E9 |. E8 B2050000 CALL ; |[msvcrt._cexit 004011EE |. 891C24 MOV DWORD PTR SS:[ESP],EBX ; | 004011F1 |. E8 6A060000 CALL ; \ExitProcess 004011F6 |> 894424 04 MOV DWORD PTR SS:[ESP+4],EAX ; | 004011FA |. 8B15 D0504000 MOV EDX,DWORD PTR DS:[<&msvcrt._iob>] ; |msvcrt._iob 00401200 |. 8B42 10 MOV EAX,DWORD PTR DS:[EDX+10] ; | 00401203 |. 890424 MOV DWORD PTR SS:[ESP],EAX ; | 00401206 |. E8 D5050000 CALL ; \_setmode 0040120B |. 8B15 D0504000 MOV EDX,DWORD PTR DS:[<&msvcrt._iob>] ; msvcrt._iob 00401211 \.^E9 55FFFFFF JMP sandbox.0040116B 00401216 8D76 00 LEA ESI,DWORD PTR DS:[ESI] 00401219 . 8D BC 27 00 ASCII "¼'",0 0040121D 00 DB 00 0040121E 00 DB 00 0040121F 00 DB 00 00401220 > $ 55 PUSH EBP 00401221 . 89E5 MOV EBP,ESP 00401223 . 83EC 08 SUB ESP,8 00401226 . C70424 0100000>MOV DWORD PTR SS:[ESP],1 0040122D . FF15 C8504000 CALL DWORD PTR DS:[<&msvcrt.__set_app_ty>; msvcrt.__set_app_type