具体分析如下：
00403926 |.6A 00 push 0
00403928 |.8B8B D2000000 mov ecx,dword ptr ds:
0040392E |.51 push ecx
0040392F |.E8 58881900 call <jmp.&PBVM80.#2384> ;计算机器码
00403934 |.89C7 mov edi,eax
00403936 |.85C0 test eax,eax
00403938 |.7D 2D jge short app.00403967
0040393A |.8B43 0C mov eax,dword ptr ds:
0040393D |.8378 04 00 cmp dword ptr ds:,0
00403FBE |.56 push esi
00403FBF |.53 push ebx
00403FC0 |.E8 1B821900 call <jmp.&PBVM80.#2050> ;解密注册码
00403FC5 |.89C7 mov edi,eax
00403FC7 |.8B83 64010000 mov eax,dword ptr ds:
00408190 |.50 push eax
00408191 |.53 push ebx
00408192 |.E8 49401900 call <jmp.&PBVM80.#2050> ;真注册码
00408197 |.89C5 mov ebp,eax
00408199 |.8B93 64010000 mov edx,dword ptr ds:
0040819F |.66:8B52 04 mov dx,word ptr ds:
---------------
这段计算注册码
00407A87 |> /57 /push edi
00407A88 |. |53 |push ebx
00407A89 |. |E8 40471900 |call <jmp.&PBVM80.#2426>
00407A8E |. |8B8B 60010000 |mov ecx,dword ptr ds:
00407A94 |. |51 |push ecx
00407A95 |. |53 |push ebx
00407A96 |. |E8 45471900 |call <jmp.&PBVM80.#2050>
00407A9B |. |89C7 |mov edi,eax
00407A9D |. |8B83 60010000 |mov eax,dword ptr ds:
00407AA3 |. |66:8B40 04 |mov ax,word ptr ds:
00407AA7 |. |89C6 |mov esi,eax
00407AA9 |. |83E6 01 |and esi,1
00407AAC |. |31C0 |xor eax,eax
00407AAE |. |66:898424 C600000>|mov word ptr ss:,ax
00407AB6 |. |8D8424 88000000 |lea eax,dword ptr ss:
00407ABD |. |50 |push eax
00407ABE |. |53 |push ebx
00407ABF |. |E8 04471900 |call <jmp.&PBVM80.#2295>
00407AC4 |. |8B8424 8C000000 |mov eax,dword ptr ss:
00407ACB |. |24 FE |and al,0FE
00407ACD |. |09C6 |or esi,eax
00407ACF |. |66:89B424 8C00000>|mov word ptr ss:,si
00407AD7 |. |89F0 |mov eax,esi
00407AD9 |. |80E4 E3 |and ah,0E3
00407ADC |. |80CC 0C |or ah,0C
00407ADF |. |66:898424 8C00000>|mov word ptr ss:,ax
00407AE7 |. |89BC24 88000000 |mov dword ptr ss:,edi
00407AEE |. |8B9424 A4000000 |mov edx,dword ptr ss:
00407AF5 |. |30F6 |xor dh,dh
00407AF7 |. |80E2 01 |and dl,1
00407AFA |. |8B8424 A4000000 |mov eax,dword ptr ss:
00407B01 |. |24 FE |and al,0FE
00407B03 |. |09C2 |or edx,eax
00407B05 |. |66:899424 A400000>|mov word ptr ss:,dx
00407B0D |. |66:FF8424 A000000>|inc word ptr ss:
00407B15 |> |8B8424 9C000000 mov eax,dword ptr ss:
00407B1C |. |30E4 |xor ah,ah
00407B1E |. |24 01 |and al,1
00407B20 |. |31D2 |xor edx,edx
00407B22 |. |66:89C2 |mov dx,ax
00407B25 |. |31C9 |xor ecx,ecx
00407B27 |. |66:898C24 BE00000>|mov word ptr ss:,cx
00407B2F |. |8B8424 A4000000 |mov eax,dword ptr ss:
00407B36 |. |30E4 |xor ah,ah
00407B38 |. |24 01 |and al,1
00407B3A |. |31FF |xor edi,edi
00407B3C |. |66:89C7 |mov di,ax
00407B3F |. |66:898C24 C600000>|mov word ptr ss:,cx
00407B47 |. |8B8424 98000000 |mov eax,dword ptr ss:
00407B4E |. |66:3B8424 A000000>|cmp ax,word ptr ss:
00407B56 |. |7C 07 |jl short app.00407B5F
00407B58 |. |BE 01000000 |mov esi,1
00407B5D |. |EB 02 |jmp short app.00407B61
00407B5F |> |31F6 |xor esi,esi
00407B61 |> |85D2 |test edx,edx
00407B63 |. |75 04 |jnz short app.00407B69
00407B65 |. |85FF |test edi,edi
00407B67 |. |74 07 |je short app.00407B70
00407B69 |> |B8 01000000 |mov eax,1
00407B6E |. |EB 02 |jmp short app.00407B72
00407B70 |> |31C0 |xor eax,eax
00407B72 |> |31FF |xor edi,edi
00407B74 |. |66:89BC24 BE00000>|mov word ptr ss:,di
00407B7C |. |85C0 |test eax,eax
00407B7E |. |0F85 0E050000 |jnz app.00408092
00407B84 |. |66:85F6 |test si,si
00407B87 |. |0F84 05050000 |je app.00408092
00407B8D |. |8DAC24 A8000000 |lea ebp,dword ptr ss:
00407B94 |. |8D4424 10 |lea eax,dword ptr ss:
00407B98 |. |50 |push eax
00407B99 |. |53 |push ebx
00407B9A |. |E8 41461900 |call <jmp.&PBVM80.#2050>
00407B9F |. |898424 C0000000 |mov dword ptr ss:,eax
00407BA6 |. |66:C78424 C600000>|mov word ptr ss:,6
00407BB0 |. |66:C78424 C400000>|mov word ptr ss:,0C00
00407BBA |. |8B4424 14 |mov eax,dword ptr ss:
00407BBE |. |30E4 |xor ah,ah
00407BC0 |. |24 01 |and al,1
00407BC2 |. |80CC 0C |or ah,0C
00407BC5 |. |66:898424 C400000>|mov word ptr ss:,ax
00407BCD |. |8B8424 9C000000 |mov eax,dword ptr ss:
00407BD4 |. |30E4 |xor ah,ah
00407BD6 |. |24 01 |and al,1
00407BD8 |. |31F6 |xor esi,esi
00407BDA |. |66:89C6 |mov si,ax
00407BDD |. |66:89BC24 CE00000>|mov word ptr ss:,di
00407BE5 |. |8B8424 A4000000 |mov eax,dword ptr ss:
00407BEC |. |30E4 |xor ah,ah
00407BEE |. |24 01 |and al,1
00407BF0 |. |31FF |xor edi,edi
00407BF2 |. |66:89C7 |mov di,ax
00407BF5 |. |8B9424 9E000000 |mov edx,dword ptr ss:
00407BFC |. |C1FA 10 |sar edx,10
00407BFF |. |30C0 |xor al,al
00407C01 |. |66:898424 D600000>|mov word ptr ss:,ax
00407C09 |. |8B8424 96000000 |mov eax,dword ptr ss:
00407C10 |. |C1F8 10 |sar eax,10
00407C13 |. |29D0 |sub eax,edx
00407C15 |. |85F6 |test esi,esi
00407C17 |. |75 04 |jnz short app.00407C1D
00407C19 |. |85FF |test edi,edi
00407C1B |. |74 07 |je short app.00407C24
00407C1D |> |BA 01000000 |mov edx,1
00407C22 |. |EB 02 |jmp short app.00407C26
00407C24 |> |31D2 |xor edx,edx
00407C26 |> |40 |inc eax
00407C27 |. |898424 C8000000 |mov dword ptr ss:,eax
00407C2E |. |66:C78424 CE00000>|mov word ptr ss:,2
00407C38 |. |BF 001C0000 |mov edi,1C00
00407C3D |. |66:89BC24 CC00000>|mov word ptr ss:,di
00407C45 |. |89FE |mov esi,edi
00407C47 |. |85D2 |test edx,edx
00407C49 |. |74 07 |je short app.00407C52
00407C4B |. |B8 01000000 |mov eax,1
00407C50 |. |EB 02 |jmp short app.00407C54
00407C52 |> |31C0 |xor eax,eax
00407C54 |> |09F0 |or eax,esi
00407C56 |. |66:898424 CC00000>|mov word ptr ss:,ax
00407C5E |. |53 |push ebx
00407C5F |. |E8 58451900 |call <jmp.&PBVM80.#2479>
00407C64 |. |89C6 |mov esi,eax
00407C66 |. |31C0 |xor eax,eax
00407C68 |. |66:898424 D600000>|mov word ptr ss:,ax
00407C70 |. |C783 04020000 1A0>|mov dword ptr ds:,1A
00407C7A |. |C783 5C010000 000>|mov dword ptr ds:,0
00407C84 |. |C783 58010000 000>|mov dword ptr ds:,0
00407C8E |. |8D8424 C0000000 |lea eax,dword ptr ss:
00407C95 |. |8983 54010000 |mov dword ptr ds:,eax
00407C9B |. |6A 00 |push 0
00407C9D |. |53 |push ebx
00407C9E |. |E8 49451900 |call <jmp.&PBVM80.#2638>
00407CA3 |. |8B46 08 |mov eax,dword ptr ds:
00407CA6 |. |6A 02 |push 2
00407CA8 |. |53 |push ebx
00407CA9 |. |FF90 0C040000 |call dword ptr ds:
00407CAF |. |89C6 |mov esi,eax
00407CB1 |. |53 |push ebx
00407CB2 |. |E8 2F451900 |call <jmp.&PBVM80.#2639>
00407CB7 |. |85F6 |test esi,esi
00407CB9 |. |74 06 |je short app.00407CC1
00407CBB |. |837B 6E 00 |cmp dword ptr ds:,0
00407CBF |. |74 0E |je short app.00407CCF
00407CC1 |> |31C9 |xor ecx,ecx
00407CC3 |. |898C24 1C010000 |mov dword ptr ss:,ecx
00407CCA |. |E9 0D160000 |jmp app.004092DC
00407CCF |> |8B93 64010000 |mov edx,dword ptr ds:
00407CD5 |. |52 |push edx
00407CD6 |. |53 |push ebx
00407CD7 |. |E8 04451900 |call <jmp.&PBVM80.#2050>
00407CDC |. |8B93 64010000 |mov edx,dword ptr ds:
00407CE2 |. |66:8B52 04 |mov dx,word ptr ds:
00407CE6 |. |30F6 |xor dh,dh
00407CE8 |. |80E2 01 |and dl,1
00407CEB |. |31F6 |xor esi,esi
00407CED |. |66:89D6 |mov si,dx
00407CF0 |. |30D2 |xor dl,dl
00407CF2 |. |66:899424 C600000>|mov word ptr ss:,dx
00407CFA |. |85F6 |test esi,esi
00407CFC |. |75 19 |jnz short app.00407D17
00407CFE |. |66:0FB630 |movzx si,byte ptr ds:
00407D02 |. |31FF |xor edi,edi
00407D04 |. |31C9 |xor ecx,ecx
00407D06 |. |66:898C24 C600000>|mov word ptr ss:,cx
00407D0E |. |50 |push eax
00407D0F |. |53 |push ebx
00407D10 |. |E8 B9441900 |call <jmp.&PBVM80.#2426>
00407D15 |. |EB 14 |jmp short app.00407D2B
00407D17 |> |BE FFFFFFFF |mov esi,-1
00407D1C |. |BF 01000000 |mov edi,1
00407D21 |. |31C0 |xor eax,eax
00407D23 |. |66:898424 C600000>|mov word ptr ss:,ax
00407D2B |> |66:8B45 04 |mov ax,word ptr ss:
00407D2F |. |24 FE |and al,0FE
00407D31 |. |09C7 |or edi,eax
00407D33 |. |66:897D 04 |mov word ptr ss:,di
00407D37 |. |66:8975 00 |mov word ptr ss:,si
00407D3B |. |8D8424 88000000 |lea eax,dword ptr ss:
00407D42 |. |50 |push eax
00407D43 |. |53 |push ebx
00407D44 |. |E8 97441900 |call <jmp.&PBVM80.#2050>
00407D49 |. |89C5 |mov ebp,eax
00407D4B |. |8B8424 8C000000 |mov eax,dword ptr ss:
00407D52 |. |30E4 |xor ah,ah
00407D54 |. |24 01 |and al,1
00407D56 |. |31F6 |xor esi,esi
00407D58 |. |66:89C6 |mov si,ax
00407D5B |. |31D2 |xor edx,edx
00407D5D |. |66:899424 C600000>|mov word ptr ss:,dx
00407D65 |. |8B9424 AC000000 |mov edx,dword ptr ss:
00407D6C |. |30F6 |xor dh,dh
00407D6E |. |80E2 01 |and dl,1
00407D71 |. |8B8424 A6000000 |mov eax,dword ptr ss:
00407D78 |. |C1F8 10 |sar eax,10
00407D7B |. |898424 C8000000 |mov dword ptr ss:,eax
00407D82 |. |66:C78424 CE00000>|mov word ptr ss:,2
00407D8C |. |80CE 1C |or dh,1C
00407D8F |. |66:899424 CC00000>|mov word ptr ss:,dx
00407D97 |. |68 42E15900 |push app.0059E142 ;ASCII "<C"
00407D9C |. |53 |push ebx
00407D9D |. |E8 38441900 |call <jmp.&PBVM80.#2448>
00407DA2 |. |898424 D0000000 |mov dword ptr ss:,eax
00407DA9 |. |66:C78424 D600000>|mov word ptr ss:,6
00407DB3 |. |66:C78424 D400000>|mov word ptr ss:,0C00
00407DBD |. |6A 21 |push 21
00407DBF |. |68 02800000 |push 8002
00407DC4 |. |8B8C24 28010000 |mov ecx,dword ptr ss:
00407DCB |. |51 |push ecx
00407DCC |. |53 |push ebx
00407DCD |. |E8 20441900 |call <jmp.&PBVM80.#2480>
00407DD2 |. |89C7 |mov edi,eax
00407DD4 |. |31D2 |xor edx,edx
00407DD6 |. |66:899424 DE00000>|mov word ptr ss:,dx
00407DDE |. |C783 04020000 1B0>|mov dword ptr ds:,1B
00407DE8 |. |C783 5C010000 000>|mov dword ptr ds:,0
00407DF2 |. |C783 58010000 000>|mov dword ptr ds:,0
00407DFC |. |8D8424 D0000000 |lea eax,dword ptr ss:
00407E03 |. |8983 54010000 |mov dword ptr ds:,eax
00407E09 |. |6A 00 |push 0
00407E0B |. |53 |push ebx
00407E0C |. |E8 DB431900 |call <jmp.&PBVM80.#2638>
00407E11 |. |8B47 08 |mov eax,dword ptr ds:
00407E14 |. |6A 01 |push 1
00407E16 |. |53 |push ebx
00407E17 |. |FF50 4C |call dword ptr ds:
00407E1A |. |89C7 |mov edi,eax
00407E1C |. |53 |push ebx
00407E1D |. |E8 C4431900 |call <jmp.&PBVM80.#2639>
00407E22 |. |85FF |test edi,edi
00407E24 |. |74 06 |je short app.00407E2C
00407E26 |. |837B 6E 00 |cmp dword ptr ds:,0
00407E2A |. |74 0E |je short app.00407E3A
00407E2C |> |31D2 |xor edx,edx
00407E2E |. |899424 1C010000 |mov dword ptr ss:,edx
00407E35 |. |E9 A2140000 |jmp app.004092DC
00407E3A |> |8B83 64010000 |mov eax,dword ptr ds:
00407E40 |. |50 |push eax
00407E41 |. |53 |push ebx
00407E42 |. |E8 99431900 |call <jmp.&PBVM80.#2050>
00407E47 |. |898424 D0000000 |mov dword ptr ss:,eax
00407E4E |. |66:C78424 D600000>|mov word ptr ss:,6
00407E58 |. |66:C78424 D400000>|mov word ptr ss:,0C00
00407E62 |. |8B83 64010000 |mov eax,dword ptr ds:
00407E68 |. |66:8B40 04 |mov ax,word ptr ds:
00407E6C |. |30E4 |xor ah,ah
00407E6E |. |24 01 |and al,1
00407E70 |. |80CC 0C |or ah,0C
00407E73 |. |66:898424 D400000>|mov word ptr ss:,ax
00407E7B |. |53 |push ebx
00407E7C |. |E8 3B431900 |call <jmp.&PBVM80.#2479>
00407E81 |. |89C7 |mov edi,eax
00407E83 |. |31C0 |xor eax,eax
00407E85 |. |66:898424 DE00000>|mov word ptr ss:,ax
00407E8D |. |C783 04020000 1B0>|mov dword ptr ds:,1B
00407E97 |. |C783 5C010000 000>|mov dword ptr ds:,0
00407EA1 |. |C783 58010000 000>|mov dword ptr ds:,0
00407EAB |. |8D8424 D0000000 |lea eax,dword ptr ss:
00407EB2 |. |8983 54010000 |mov dword ptr ds:,eax
00407EB8 |. |6A 00 |push 0
00407EBA |. |53 |push ebx
00407EBB |. |E8 2C431900 |call <jmp.&PBVM80.#2638>
00407EC0 |. |8B47 08 |mov eax,dword ptr ds:
00407EC3 |. |6A 01 |push 1
00407EC5 |. |53 |push ebx
00407EC6 |. |FF90 94010000 |call dword ptr ds:
00407ECC |. |89C7 |mov edi,eax
00407ECE |. |53 |push ebx
00407ECF |. |E8 12431900 |call <jmp.&PBVM80.#2639>
00407ED4 |. |85FF |test edi,edi
00407ED6 |. |74 06 |je short app.00407EDE
00407ED8 |. |837B 6E 00 |cmp dword ptr ds:,0
00407EDC |. |74 0E |je short app.00407EEC
00407EDE |> |31C0 |xor eax,eax
00407EE0 |. |898424 1C010000 |mov dword ptr ss:,eax
00407EE7 |. |E9 F0130000 |jmp app.004092DC
00407EEC |> |8B93 64010000 |mov edx,dword ptr ds:
00407EF2 |. |66:8B02 |mov ax,word ptr ds:
00407EF5 |. |66:8B52 04 |mov dx,word ptr ds:
00407EF9 |. |89D7 |mov edi,edx
00407EFB |. |83E7 01 |and edi,1
00407EFE |. |98 |cwde
00407EFF |. |898424 D0000000 |mov dword ptr ss:,eax
00407F06 |. |66:C78424 D600000>|mov word ptr ss:,2
00407F10 |. |81CF 001C0000 |or edi,1C00
00407F16 |. |66:89BC24 D400000>|mov word ptr ss:,di
00407F1E |. |6A 22 |push 22
00407F20 |. |68 02800000 |push 8002
00407F25 |. |8B8C24 28010000 |mov ecx,dword ptr ss:
00407F2C |. |51 |push ecx
00407F2D |. |53 |push ebx
00407F2E |. |E8 BF421900 |call <jmp.&PBVM80.#2480>
00407F33 |. |89C7 |mov edi,eax
00407F35 |. |31C9 |xor ecx,ecx
00407F37 |. |66:898C24 DE00000>|mov word ptr ss:,cx
00407F3F |. |C783 04020000 1B0>|mov dword ptr ds:,1B
00407F49 |. |C783 5C010000 000>|mov dword ptr ds:,0
00407F53 |. |C783 58010000 000>|mov dword ptr ds:,0
00407F5D |. |8D8424 C8000000 |lea eax,dword ptr ss:
00407F64 |. |8983 54010000 |mov dword ptr ds:,eax
00407F6A |. |6A 00 |push 0
00407F6C |. |53 |push ebx
00407F6D |. |E8 7A421900 |call <jmp.&PBVM80.#2638>
00407F72 |. |8B47 08 |mov eax,dword ptr ds:
00407F75 |. |6A 02 |push 2
00407F77 |. |53 |push ebx
00407F78 |. |FF50 4C |call dword ptr ds:
00407F7B |. |89C7 |mov edi,eax
00407F7D |. |53 |push ebx
00407F7E |. |E8 63421900 |call <jmp.&PBVM80.#2639>
00407F83 |. |85FF |test edi,edi
00407F85 |. |74 06 |je short app.00407F8D
00407F87 |. |837B 6E 00 |cmp dword ptr ds:,0
00407F8B |. |74 0E |je short app.00407F9B
00407F8D |> |31ED |xor ebp,ebp
00407F8F |. |89AC24 1C010000 |mov dword ptr ss:,ebp
00407F96 |. |E9 41130000 |jmp app.004092DC
00407F9B |> |8B83 64010000 |mov eax,dword ptr ds:
00407FA1 |. |8B00 |mov eax,dword ptr ds:
00407FA3 |. |898424 C8000000 |mov dword ptr ss:,eax
00407FAA |. |66:C78424 CE00000>|mov word ptr ss:,2
00407FB4 |. |66:C78424 CC00000>|mov word ptr ss:,1C00
00407FBE |. |8B83 64010000 |mov eax,dword ptr ds:
00407FC4 |. |66:8B40 04 |mov ax,word ptr ds:
00407FC8 |. |30E4 |xor ah,ah
00407FCA |. |24 01 |and al,1
00407FCC |. |80CC 1C |or ah,1C
00407FCF |. |66:898424 CC00000>|mov word ptr ss:,ax
00407FD7 |. |53 |push ebx
00407FD8 |. |E8 DF411900 |call <jmp.&PBVM80.#2479>
00407FDD |. |89C7 |mov edi,eax
00407FDF |. |31D2 |xor edx,edx
00407FE1 |. |66:899424 D600000>|mov word ptr ss:,dx
00407FE9 |. |C783 04020000 1A0>|mov dword ptr ds:,1A
00407FF3 |. |C783 5C010000 000>|mov dword ptr ds:,0
00407FFD |. |C783 58010000 000>|mov dword ptr ds:,0
00408007 |. |8D8424 C8000000 |lea eax,dword ptr ss:
0040800E |. |8983 54010000 |mov dword ptr ds:,eax
00408014 |. |6A 00 |push 0
00408016 |. |53 |push ebx
00408017 |. |E8 D0411900 |call <jmp.&PBVM80.#2638>
0040801C |. |8B47 08 |mov eax,dword ptr ds:
0040801F |. |6A 01 |push 1
00408021 |. |53 |push ebx
00408022 |. |FF90 A0040000 |call dword ptr ds:
00408028 |. |89C7 |mov edi,eax
0040802A |. |53 |push ebx
0040802B |. |E8 B6411900 |call <jmp.&PBVM80.#2639>
00408030 |. |85FF |test edi,edi
00408032 |. |74 06 |je short app.0040803A
00408034 |. |837B 6E 00 |cmp dword ptr ds:,0
00408038 |. |74 0E |je short app.00408048
0040803A |> |31FF |xor edi,edi
0040803C |. |89BC24 1C010000 |mov dword ptr ss:,edi
00408043 |. |E9 94120000 |jmp app.004092DC
00408048 |> |8B93 64010000 |mov edx,dword ptr ds:
0040804E |. |52 |push edx
0040804F |. |53 |push ebx
00408050 |. |E8 8B411900 |call <jmp.&PBVM80.#2050>
00408055 |. |89C7 |mov edi,eax
00408057 |. |8B83 64010000 |mov eax,dword ptr ds:
0040805D |. |66:8B40 04 |mov ax,word ptr ds:
00408061 |. |30E4 |xor ah,ah
00408063 |. |24 01 |and al,1
00408065 |. |25 FFFF0000 |and eax,0FFFF
0040806A |. |31C9 |xor ecx,ecx
0040806C |. |66:898C24 CE00000>|mov word ptr ss:,cx
00408074 |. |50 |push eax
00408075 |. |57 |push edi
00408076 |. |56 |push esi
00408077 |. |55 |push ebp
00408078 |. |53 |push ebx
00408079 |. |E8 44411900 |call <jmp.&PBVM80.#2632>
0040807E |. |85C0 |test eax,eax
00408080 |.^\0F85 01FAFFFF \jnz app.00407A87 10C26FC2 3BC6 cmp eax,esi
10C26FC4 0F84 82000000 je pbvm80.10C2704C
10C26FCA FFD3 call ebx
10C26FCC 85C0 test eax,eax
10C26FCE 75 7C jnz short pbvm80.10C2704C
0041AF53|.53 push ebx
0041AF54|.E8 8D121800 call <jmp.&PBVM80.#2639>
0041AF59|.85F6 test esi,esi
0041AF5B|.74 0A je short app.0041AF67
0041AF5D|.837B 6E 00 cmp dword ptr ds:,0
0012F2A0 014363A8ASCII "uEwiCI04o6a4TCIIjTijprhMIgiNOKOmwtnCM8yTW0Q="
0012F2A0 014362E8ASCII "0NvB/yYTWo7Q28H/JhNajjHv5tXgVEtQ"
跳转来自 _fn_8_32818_34+0B11, _fn_8_32818_34+0D13, _fn_8_32818_34+0DB5, _fn_8_32818_34+0E58
app._fn_8_32818_34+0E61
跳转来自 _fn_8_32818_34+1BD, _fn_8_32818_34+1F0, _fn_8_32818_34+214, _fn_8_32818_34+28C, _fn_8_32818_34+460,
_fn_8_32818_34+593, _fn_8_32818_34+67D, _fn_8_32818_34+7A9, _fn_8_32818_34+8CE, _fn_8_32818_34+900,
_fn_8_32818_34+933, _fn_8_32818_34+958,M)
app._fn_8_32818_34+0FD4
0041B15B|.85F6 test esi,esi
0041B15D|.74 0A je short app.0041B169
0041B15F|.837B 6E 00 cmp dword ptr ds:,0
0012F52C 01436328ASCII "3847399147934592444689404440894246384791444290949294414143919146"
eax=01436328, (ASCII "3847399147934592444689404440894246384791444290949294414143919146")
堆栈 ss:=00000000
77D18816 8945 E4 mov dword ptr ss:,eax
77D18819 834D FC FF or dword ptr ss:,FFFFFFFF
77D1881D E8 1F000000 call user32.77D18841
edi=01436328, (ASCII "3847399147934592444689404440894246384791444290949294414143919146")
eax=01436328, (ASCII "3847399147934592444689404440894246384791444290949294414143919146")
页:
[1]