Private Sub Command1_Click() '402068
  'Data Table: 4013E8
  loc_401F84: OnErrorGoto loc_40203C
  loc_401F87: ImpAdCallI2 Proc_1_0_4021E4()
  loc_401F8C: CVarStr var_94
  loc_401F8F: FLdRfVar var_A4
  loc_401F92: ImpAdCallFPR4 arg_1 = Trim(arg_2)
  loc_401F97: ImpAdCallI2 Proc_1_1_401F1C()
  loc_401F9C: CVarStr var_D4
  loc_401F9F: FLdRfVar var_E4
  loc_401FA2: ImpAdCallFPR4 arg_1 = Trim(arg_2)
  loc_401FA7: LitI4 0
  loc_401FAC: LitI4 -1
  loc_401FB1: LitI4 1
  loc_401FB6: LitStr vbNullString
  loc_401FB9: LitStr "-"
  loc_401FBC: FLdRfVar var_E4
  loc_401FBF: CStrVarVal var_E8
  loc_401FC3: ImpAdCallI2 Replace(arg_1, arg_2, arg_3, arg_4, arg_5, arg_6)
  loc_401FC8: FStStr var_128
  loc_401FCB: LitI4 &H409
  loc_401FD0: LitI4 0
  loc_401FD5: LitI4 -1
  loc_401FDA: FLdRfVar var_114
  loc_401FDD: Redim
  loc_401FE7: FLdRfVar var_114
  loc_401FEA: LitI4 1
  loc_401FEF: LitVarStr var_B4, "JJSoft"
  loc_401FF4: FLdRfVar var_A4
  loc_401FF7: ConcatVar var_C4
  loc_401FFB: FLdZeroAd var_128
  loc_401FFE: CVarStr var_F8
  loc_402001: ConcatVar var_108
  loc_402005: CStrVarVal var_110
  loc_402009: ILdRf Me
  loc_40200C: FStAdNoPop
  loc_402010: FLdRfVar var_124
  loc_402013: ImpAdCallFPR4 CallByName
  loc_402018: FLdRfVar var_114
  loc_40201B: Erase
  loc_40201C: FFreeStr var_E8 = "": var_110 = "" = ""
  loc_402025: FFree1Ad var_10C
  loc_402028: FFreeVar var_94 = "": var_A4 = "": var_D4 = "": var_E4 = "": var_C4 = "": var_F8 = "": var_108 = "" = ""
  loc_40203B: ExitProcHresult
  loc_40203C: ' Referenced from: 401F84
  loc_40203C: LitVar_Missing var_D4
  loc_40203F: LitVar_Missing var_C4
  loc_402042: LitVar_Missing var_A4
  loc_402045: LitI4 0
  loc_40204A: LitVarStr var_B4, "注册码验证错???屎??鞃损湫葸?豬???"
  loc_40204F: FStVarCopyObj var_94
  loc_402052: FLdRfVar var_94
  loc_402055: ImpAdCallFPR4 MsgBox(arg_1, arg_2, arg_3, arg_4, arg_5)
  loc_40205A: FFreeVar var_94 = "": var_A4 = "": var_C4 = "" = ""
  loc_402065: ExitProcHresult
End Sub

Private sub Proc_1_0_4021E4
  'Data Table: 4012F0
  loc_4020D4: LitVarI2 var_1C8, 0
  loc_4020D9: LitI4 &HFF
  loc_4020DE: FLdRfVar var_1D8
  loc_4020E1: ImpAdCallFPR4 arg_1 = String(arg_2)
  loc_4020E6: FLdRfVar var_1D8
  loc_4020E9: CStrVarTmp
  loc_4020EA: FStStr var_94
  loc_4020ED: FFreeVar var_1C8 = "" = ""
  loc_4020F4: LitI4 &H100
  loc_4020F9: FStR4 var_8C
  loc_4020FC: FLdRfVar var_8C
  loc_4020FF: ILdRf var_94
  loc_402102: FLdRfVar var_1DC
  loc_402105: CStr2Ansi
  loc_402106: ILdRf var_1DC
  loc_402109: ImpAdCallI2 GetComputerName(%x1, %x2)
  loc_40210E: FStR4 var_1E0
  loc_402111: SetLastSystemError
  loc_402112: ILdRf var_1DC
  loc_402115: FLdRfVar var_94
  loc_402118: CStr2Uni
  loc_40211A: ILdRf var_1E0
  loc_40211D: FStR4 var_90
  loc_402120: FFree1Str var_1DC
  loc_402123: LitI4 1
  loc_402128: ILdRf var_94
  loc_40212B: CVarStr var_1B8
  loc_40212E: LitI4 0
  loc_402133: FLdRfVar var_1C8
  loc_402136: ImpAdCallFPR4 arg_1 = arg_3 & Chr(arg_2)
  loc_40213B: FLdRfVar var_1C8
  loc_40213E: LitI4 0
  loc_402143: FnInStr4Var
  loc_402147: LitVarI2 var_1F0, 1
  loc_40214C: SubVar var_200
  loc_402150: CI4Var
  loc_402152: FLdRfVar var_94
  loc_402155: CVarRef
  loc_40215A: FLdRfVar var_220
  loc_40215D: ImpAdCallFPR4 Left(arg_1, arg_2)
  loc_402162: FLdRfVar var_220
  loc_402165: CStrVarTmp
  loc_402166: FStStr var_94
  loc_402169: FFreeVar var_1C8 = "": var_1D8 = "" = ""
  loc_402172: ILdRf var_94
  loc_402175: CVarStr var_1B8
  loc_402178: FStVarCopy
  loc_40217C: LitVarStr var_240, "select   *   from   Win32_Processor"
  loc_402181: PopAdLdVar
  loc_402182: LitVar_Missing var_200
  loc_402185: LitVarStr var_1B8, "winmgmts:{impersonationLevel=impersonate}!\\"
  loc_40218A: FLdRfVar var_230
  loc_40218D: ConcatVar var_1C8
  loc_402191: LitVarStr var_1F0, "\root\cimv2"
  loc_402196: ConcatVar var_1D8
  loc_40219A: FLdRfVar var_220
  loc_40219D: ImpAdCallFPR4 GetObject
  loc_4021A2: FLdRfVar var_220
  loc_4021A5: VarLateMemCallLdVar
  loc_4021AD: FLdRfVar var_260
  loc_4021B0: SetVarVarFunc
  loc_4021B2: FFreeVar var_1C8 = "": var_1D8 = "": var_200 = "" = ""
  loc_4021BD: FLdRfVar var_260
  loc_4021C0: FLdRfVar var_280
  loc_4021C3: ForEachVar var_290
  loc_4021C9: FLdRfVar var_280
  loc_4021CC: VarLateMemLdVar
  loc_4021D2: CStrVarTmp
  loc_4021D3: FStStr var_88
  loc_4021D6: FFree1Var var_1C8 = ""
  loc_4021D9: FLdRfVar var_280
  loc_4021DC: NextEachVar
  loc_4021E2: ExitProc
End Sub

Private sub Proc_1_1_401F1C
  'Data Table: 4012F0
  loc_401E4C: LitVarStr var_B8, "."
  loc_401E51: FStVarCopy
  loc_401E55: LitVarStr var_B8, vbNullString
  loc_401E5A: FStVarCopy
  loc_401E5E: LitVar_Missing var_108
  loc_401E61: LitStr "winmgmts:"
  loc_401E64: LitStr "{impersonationLevel=impersonate}!//"
  loc_401E67: ConcatStr
  loc_401E68: CVarStr var_C8
  loc_401E6B: FLdRfVar var_A8
  loc_401E6E: ConcatVar var_D8
  loc_401E72: LitVarStr var_B8, "/root/cimv2"
  loc_401E77: ConcatVar var_E8
  loc_401E7B: FLdRfVar var_118
  loc_401E7E: ImpAdCallFPR4 GetObject
  loc_401E83: FLdRfVar var_118
  loc_401E86: FLdRfVar var_128
  loc_401E89: SetVarVarFunc
  loc_401E8B: FFreeVar var_C8 = "": var_D8 = "": var_E8 = "" = ""
  loc_401E96: LitVarStr var_B8, "Select * from Win32_NetworkAdapterConfiguration Where IPEnabled=TRUE"
  loc_401E9B: PopAdLdVar
  loc_401E9C: FLdRfVar var_128
  loc_401E9F: VarLateMemCallLdVar
  loc_401EA7: FLdRfVar var_138
  loc_401EAA: SetVarVarFunc
  loc_401EAC: FLdRfVar var_138
  loc_401EAF: FLdRfVar var_148
  loc_401EB2: ForEachVar var_158
  loc_401EB8: FLdRfVar var_98
  loc_401EBB: LitVarStr var_B8, " "
  loc_401EC0: AddVar var_C8
  loc_401EC4: FLdRfVar var_148
  loc_401EC7: VarLateMemLdVar
  loc_401ECD: AddVar var_E8
  loc_401ED1: FStVar
  loc_401ED5: FFreeVar var_C8 = "" = ""
  loc_401EDC: FLdRfVar var_148
  loc_401EDF: NextEachVar
  loc_401EE5: FLdRfVar var_98
  loc_401EE8: FLdRfVar var_C8
  loc_401EEB: ImpAdCallFPR4 arg_1 = Trim(arg_2)
  loc_401EF0: LitI4 0
  loc_401EF5: LitI4 -1
  loc_401EFA: LitI4 1
  loc_401EFF: LitStr "-"
  loc_401F02: LitStr ":"
  loc_401F05: FLdRfVar var_C8
  loc_401F08: CStrVarVal var_15C
  loc_401F0C: ImpAdCallI2 Replace(arg_1, arg_2, arg_3, arg_4, arg_5, arg_6)
  loc_401F11: FStStr var_88
  loc_401F14: FFree1Str var_15C
  loc_401F17: FFree1Var var_C8 = ""
  loc_401F1A: ExitProc
End Sub