能力值:
( LV2,RANK:10 )
|
-
-
12 楼
呵呵。。。。。。总算在PBVM80。DLL里找到了这个函数。fnmessagebox
10C235C0 > 83EC 48 SUB ESP,48
10C235C3 8B4424 4C MOV EAX,DWORD PTR SS:[ESP+4C]
10C235C7 53 PUSH EBX
10C235C8 55 PUSH EBP
10C235C9 56 PUSH ESI
10C235CA 8B68 04 MOV EBP,DWORD PTR DS:[EAX+4]
10C235CD 8D4C24 30 LEA ECX,DWORD PTR SS:[ESP+30]
10C235D1 57 PUSH EDI
10C235D2 33F6 XOR ESI,ESI
10C235D4 51 PUSH ECX
10C235D5 55 PUSH EBP
10C235D6 897424 50 MOV DWORD PTR SS:[ESP+50],ESI
10C235DA 897424 4C MOV DWORD PTR SS:[ESP+4C],ESI
10C235DE 896C24 18 MOV DWORD PTR SS:[ESP+18],EBP
10C235E2 E8 C9110B00 CALL PBVM80.ot_get_valptr_arg
10C235E7 55 PUSH EBP
10C235E8 894424 30 MOV DWORD PTR SS:[ESP+30],EAX
10C235EC E8 EF0C0B00 CALL PBVM80.ot_get_next_evaled_arg
10C235F1 8BF8 MOV EDI,EAX
10C235F3 8B5C24 60 MOV EBX,DWORD PTR SS:[ESP+60]
10C235F7 897424 14 MOV DWORD PTR SS:[ESP+14],ESI
10C235FB 8A57 04 MOV DL,BYTE PTR DS:[EDI+4]
10C235FE 83E2 01 AND EDX,1
10C23601 83FB 02 CMP EBX,2
10C23604 895424 38 MOV DWORD PTR SS:[ESP+38],EDX
10C23608 76 11 JBE SHORT PBVM80.10C2361B
10C2360A 8D4424 1C LEA EAX,DWORD PTR SS:[ESP+1C]
10C2360E 50 PUSH EAX
10C2360F 55 PUSH EBP
10C23610 E8 EB0D0B00 CALL PBVM80.ot_get_simple_intarg
10C23615 894424 28 MOV DWORD PTR SS:[ESP+28],EAX
10C23619 EB 0A JMP SHORT PBVM80.10C23625
10C2361B 33C0 XOR EAX,EAX
10C2361D 894424 28 MOV DWORD PTR SS:[ESP+28],EAX
10C23621 894424 1C MOV DWORD PTR SS:[ESP+1C],EAX
10C23625 83FB 03 CMP EBX,3
10C23628 76 11 JBE SHORT PBVM80.10C2363B
10C2362A 8D4C24 20 LEA ECX,DWORD PTR SS:[ESP+20]
10C2362E 51 PUSH ECX
10C2362F 55 PUSH EBP
10C23630 E8 CB0D0B00 CALL PBVM80.ot_get_simple_intarg
10C23635 894424 60 MOV DWORD PTR SS:[ESP+60],EAX
10C23639 EB 0A JMP SHORT PBVM80.10C23645
10C2363B 33C0 XOR EAX,EAX
10C2363D 894424 60 MOV DWORD PTR SS:[ESP+60],EAX
10C23641 894424 20 MOV DWORD PTR SS:[ESP+20],EAX
10C23645 83FB 04 CMP EBX,4
10C23648 76 0F JBE SHORT PBVM80.10C23659
10C2364A 8D5424 24 LEA EDX,DWORD PTR SS:[ESP+24]
10C2364E 52 PUSH EDX
10C2364F 55 PUSH EBP
10C23650 E8 2B0E0B00 CALL PBVM80.ot_get_intarg
10C23655 8BD8 MOV EBX,EAX
10C23657 EB 0D JMP SHORT PBVM80.10C23666
10C23659 BB 01000000 MOV EBX,1
10C2365E C74424 24 000000>MOV DWORD PTR SS:[ESP+24],0
10C23666 8B4424 34 MOV EAX,DWORD PTR SS:[ESP+34]
10C2366A 85C0 TEST EAX,EAX
10C2366C 0F85 19020000 JNZ PBVM80.10C2388B
10C23672 8B4424 38 MOV EAX,DWORD PTR SS:[ESP+38]
10C23676 85C0 TEST EAX,EAX
10C23678 0F85 0D020000 JNZ PBVM80.10C2388B
10C2367E 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C]
10C23682 85C0 TEST EAX,EAX
10C23684 0F85 01020000 JNZ PBVM80.10C2388B
10C2368A 8B4424 20 MOV EAX,DWORD PTR SS:[ESP+20]
10C2368E 85C0 TEST EAX,EAX
10C23690 0F85 F5010000 JNZ PBVM80.10C2388B
10C23696 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24]
10C2369A 85C0 TEST EAX,EAX
10C2369C 0F85 E9010000 JNZ PBVM80.10C2388B
10C236A2 8B7424 5C MOV ESI,DWORD PTR SS:[ESP+5C]
10C236A6 66:837F 06 06 CMP WORD PTR DS:[EDI+6],6
10C236AB 8B46 52 MOV EAX,DWORD PTR DS:[ESI+52]
10C236AE 894424 18 MOV DWORD PTR SS:[ESP+18],EAX
10C236B2 74 23 JE SHORT PBVM80.10C236D7
10C236B4 8B4E 10 MOV ECX,DWORD PTR DS:[ESI+10]
10C236B7 6A 00 PUSH 0
10C236B9 68 FF000000 PUSH 0FF
10C236BE 51 PUSH ECX
10C236BF E8 8C6AF9FF CALL PBVM80.pbstg_alc
10C236C4 68 FF000000 PUSH 0FF
10C236C9 50 PUSH EAX
10C236CA 57 PUSH EDI
10C236CB 56 PUSH ESI
10C236CC 894424 24 MOV DWORD PTR SS:[ESP+24],EAX
10C236D0 E8 9B56FDFF CALL PBVM80.FN_FormatData
10C236D5 EB 0B JMP SHORT PBVM80.10C236E2
10C236D7 57 PUSH EDI
10C236D8 55 PUSH EBP
10C236D9 E8 221F0A00 CALL PBVM80.ot_get_valptr
10C236DE 894424 14 MOV DWORD PTR SS:[ESP+14],EAX
10C236E2 8B5424 28 MOV EDX,DWORD PTR SS:[ESP+28]
10C236E6 BF 00200000 MOV EDI,2000
10C236EB 8D42 FF LEA EAX,DWORD PTR DS:[EDX-1]
10C236EE 83F8 03 CMP EAX,3
10C236F1 77 1C JA SHORT PBVM80.10C2370F
10C236F3 FF2485 1439C210 JMP DWORD PTR DS:[EAX*4+10C23914]
10C236FA BF 10200000 MOV EDI,2010
10C236FF EB 13 JMP SHORT PBVM80.10C23714
10C23701 BF 30200000 MOV EDI,2030
10C23706 EB 0C JMP SHORT PBVM80.10C23714
10C23708 BF 20200000 MOV EDI,2020
10C2370D EB 05 JMP SHORT PBVM80.10C23714
10C2370F BF 40200000 MOV EDI,2040
10C23714 8B4424 60 MOV EAX,DWORD PTR SS:[ESP+60]
10C23718 48 DEC EAX
10C23719 83F8 04 CMP EAX,4
10C2371C 77 1E JA SHORT PBVM80.10C2373C
10C2371E FF2485 2439C210 JMP DWORD PTR DS:[EAX*4+10C23924]
10C23725 83CF 01 OR EDI,1
10C23728 EB 12 JMP SHORT PBVM80.10C2373C
10C2372A 83CF 05 OR EDI,5
10C2372D EB 0D JMP SHORT PBVM80.10C2373C
10C2372F 83CF 02 OR EDI,2
10C23732 EB 08 JMP SHORT PBVM80.10C2373C
10C23734 83CF 04 OR EDI,4
10C23737 EB 03 JMP SHORT PBVM80.10C2373C
10C23739 83CF 03 OR EDI,3
10C2373C 8BC3 MOV EAX,EBX
10C2373E 83E8 02 SUB EAX,2
10C23741 74 0B JE SHORT PBVM80.10C2374E
10C23743 48 DEC EAX
10C23744 75 0E JNZ SHORT PBVM80.10C23754
10C23746 81CF 00020000 OR EDI,200
10C2374C EB 06 JMP SHORT PBVM80.10C23754
10C2374E 81CF 00010000 OR EDI,100
10C23754 8B4C24 18 MOV ECX,DWORD PTR SS:[ESP+18]
10C23758 8B81 E0000000 MOV EAX,DWORD PTR DS:[ECX+E0]
10C2375E 85C0 TEST EAX,EAX
10C23760 74 13 JE SHORT PBVM80.10C23775
10C23762 6A 0B PUSH 0B
10C23764 50 PUSH EAX
10C23765 55 PUSH EBP
10C23766 E8 B5870300 CALL PBVM80.ob_get_int_field
10C2376B 85C0 TEST EAX,EAX
10C2376D 74 06 JE SHORT PBVM80.10C23775
10C2376F 81CF 00001800 OR EDI,180000
10C23775 FF15 F898D910 CALL DWORD PTR DS:[<&USER32.GetFocus>] ; USER32.GetFocus
10C2377B 8B35 9C99D910 MOV ESI,DWORD PTR DS:[<&USER32.SendMessa>; USER32.SendMessageA
10C23781 85C0 TEST EAX,EAX
10C23783 74 09 JE SHORT PBVM80.10C2378E
|