:00401250 55 push ebp
:00401251 89E5 mov ebp, esp
:00401253 81ECAC030000 sub esp, 000003AC
:00401259 56 push esi
:0040125A 57 push edi
:0040125B 31F6 xor esi, esi
:0040125D 6A00 push 00000000
:0040125F 8D45F8 lea eax, dword ptr [ebp-08]
:00401262 50 push eax
:00401263 6A00 push 00000000
:00401265 683F000F00 push 000F003F
:0040126A 6A00 push 00000000
:0040126C 6A00 push 00000000
:0040126E 6A00 push 00000000
* Possible StringData Ref from Data Obj ->"SOFTWARE\Microsoft\
Windows\CurrentVersion\Run" //写入自启动项
关键词：冲击波(MSBlast)蠕虫区分报告