谢谢楼主的邀请码。
00401080 |> \397C24 24 cmp dword ptr [esp+0x24], edi
00401084 75 5B jnz short 邀请码.004010E1 //直接JMP
00401080 |> \397C24 24 cmp dword ptr [esp+0x24], edi
00401084 EB 5B jmp short 邀请码.004010E1
00401086 |. 57 push edi
00401087 |. 68 58304000 push 邀请码.00403058 ; welcome to kanxue!
0040108C |. 68 18214000 push 邀请码.00402118 ; 是否需要邀请码?
00401091 |. 6A 00 push 0x0
00401093 |. FFD6 call esi
00401095 |. 3BC7 cmp eax, edi
00401097 |. 75 3B jnz short 邀请码.004010D4
00401099 |. 0FBE0D 2C3040>movsx ecx, byte ptr [0x40302C]
004010A0 |. 8B35 A8204000 mov esi, dword ptr [<&MSVCR90.printf>; msvcr90.printf
004010A6 |. 013D C8334000 add dword ptr [0x4033C8], edi
004010AC |. B8 F712DA4B mov eax, 0x4BDA12F7
004010B1 |. F7E9 imul ecx
004010B3 |. C1FA 03 sar edx, 0x3
004010B6 |. 8BCA mov ecx, edx
004010B8 |. C1E9 1F shr ecx, 0x1F
004010BB |. 03CA add ecx, edx
004010BD |. 0FBED1 movsx edx, cl
004010C0 |. 52 push edx ; /<%c>
004010C1 |. 68 2C214000 push 邀请码.0040212C ; |%c\n
004010C6 |. FFD6 call esi ; \printf
004010C8 |. 68 30214000 push 邀请码.00402130 ; 加油!\n
004010CD |. FFD6 call esi
004010CF |. 83C4 0C add esp, 0xC
004010D2 |. EB 2E jmp short 邀请码.00401102
004010D4 |> 83F8 02 cmp eax, 0x2
004010D7 |. 75 29 jnz short 邀请码.00401102
004010D9 |. 013D C8334000 add dword ptr [0x4033C8], edi
004010DF |. EB 21 jmp short 邀请码.00401102
004010E1 |> 6A 00 push 0x0 ; /pThreadId = NULL
004010E3 |. 6A 00 push 0x0 ; |CreationFlags = 0
004010E5 |. 68 2C304000 push 邀请码.0040302C ; |mjiwqzu3njk5oem4qzk5rkm4nzg0qtcwntu3qtld
004010EA |. 68 20114000 push 邀请码.00401120 ; |ThreadFunction = 邀请码.00401120
004010EF |. 6A 00 push 0x0 ; |StackSize = 0x0
004010F1 |. 6A 00 push 0x0 ; |pSecurity = NULL
004010F3 |. FF15 00204000 call dword ptr [<&KERNEL32.CreateThre>; \CreateThread
004010F9 |. 6A FF push -0x1 ; /Timeout = INFINITE
004010FB |. 50 push eax ; |hObject
004010FC |. FF15 04204000 call dword ptr [<&KERNEL32.WaitForSin>; \WaitForSingleObject
00401102 |> FF15 A4204000 call dword ptr [<&MSVCR90.getchar>] ; [getchar
00401108 |. 8B4C24 1C mov ecx, dword ptr [esp+0x1C]
0040110C |. 5F pop edi
0040110D |. 5E pop esi
0040110E |. 33CC xor ecx, esp
00401110 |. 33C0 xor eax, eax
00401112 |. E8 96000000 call 邀请码.004011AD
00401117 |. 83C4 18 add esp, 0x18
0040111A \. C3 retn
BASE64解密后已经得到邀请码了。。