[求助]请教软件重启验证-付费问答-看雪-安全社区|安全招聘|kanxue.com

[旧帖] [求助]请教软件重启验证 0.00雪花

发表于: 2008-1-19 22:25 3303

[旧帖] [求助]请教软件重启验证 0.00雪花

jamiezheng 活跃值

2008-1-19 22:25

3303

各位大哥帮帮忙好不好。。。我刚开始学。下个个软件试试。能把注册绕过了。但是程序却是重启验证的。写入注册表。可是我下断总是找不到关键跳。那位大哥帮我看一下，指导一下。感激不言谢!

0046EE80  /$  55          PUSH EBP
0046EE81  |.  8BEC       MOV EBP,ESP
0046EE83  |.  83C4 F8    ADD ESP,-8
0046EE86  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046EE89  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046EE8C  |.  E8 8B58F9FF CALL 查看1.0040471C
0046EE91  |.  33C0       XOR EAX,EAX
0046EE93  |.  55          PUSH EBP
0046EE94  |.  68 28EF4600 PUSH 查看1.0046EF28
0046EE99  |.  64:FF30    PUSH DWORD PTR FS:[EAX]
0046EE9C  |.  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046EE9F  |.  B2 01       MOV DL,1
0046EEA1  |.  A1 28C14500 MOV EAX,DWORD PTR DS:[45C128]
0046EEA6  |.  E8 7DD3FEFF CALL 查看1.0045C228
0046EEAB  |.  8945 F8    MOV DWORD PTR SS:[EBP-8],EAX
0046EEAE  |.  33C0       XOR EAX,EAX
0046EEB0  |.  55          PUSH EBP
0046EEB1  |.  68 0BEF4600 PUSH 查看1.0046EF0B
0046EEB6  |.  64:FF30    PUSH DWORD PTR FS:[EAX]
0046EEB9  |.  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046EEBC  |.  BA 02000080 MOV EDX,80000002
0046EEC1  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046EEC4  |.  E8 FFD3FEFF CALL 查看1.0045C2C8
0046EEC9  |.  BA 3CEF4600 MOV EDX,查看1.0046EF3C                   ;  ASCII "software\ngnsss"
0046EECE  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046EED1  |.  E8 56D4FEFF CALL 查看1.0045C32C
0046EED6  |.  B1 01       MOV CL,1
0046EED8  |.  BA 3CEF4600 MOV EDX,查看1.0046EF3C                   ;  ASCII "software\ngnsss"
0046EEDD  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046EEE0  |.  E8 23D5FEFF CALL 查看1.0045C408
0046EEE5  |.  8B4D FC    MOV ECX,DWORD PTR SS:[EBP-4]
0046EEE8  |.  BA 54EF4600 MOV EDX,查看1.0046EF54                   ;  ASCII "qqloader"
0046EEED  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046EEF0  |.  E8 AFD6FEFF CALL 查看1.0045C5A4
0046EEF5  |.  33C0       XOR EAX,EAX
0046EEF7  |.  5A          POP EDX
0046EEF8  |.  59          POP ECX
0046EEF9  |.  59          POP ECX
0046EEFA  |.  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046EEFD  |.  68 12EF4600 PUSH 查看1.0046EF12
0046EF02  |>  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046EF05  |.  E8 0646F9FF CALL 查看1.00403510
0046EF0A  \.  C3          RETN
0046EF0B .^ E9 944DF9FF JMP 查看1.00403CA4
0046EF10 .^ EB F0       JMP SHORT 查看1.0046EF02
0046EF12 .  33C0       XOR EAX,EAX
0046EF14 .  5A          POP EDX
0046EF15 .  59          POP ECX
0046EF16 .  59          POP ECX
0046EF17 .  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046EF1A .  68 2FEF4600 PUSH 查看1.0046EF2F
0046EF1F >  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]
0046EF22 .  E8 5553F9FF CALL 查看1.0040427C
0046EF27 .  C3          RETN
0046EF28 .^ E9 774DF9FF JMP 查看1.00403CA4
0046EF2D .^ EB F0       JMP SHORT 查看1.0046EF1F
0046EF2F .  59          POP ECX
0046EF30 .  59          POP ECX
0046EF31 .  5D          POP EBP
0046EF32 .  C3          RETN
0046EF33    00          DB 00
0046EF34 .  FFFFFFFF    DD FFFFFFFF
0046EF38 .  0F000000    DD 0000000F
0046EF3C .  73 6F 66 74 7>ASCII "software\ngnsss",0
0046EF4C .  FFFFFFFF    DD FFFFFFFF
0046EF50 .  08000000    DD 00000008
0046EF54 .  71 71 6C 6F 6>ASCII "qqloader",0
0046EF5D    00          DB 00
0046EF5E    00          DB 00
0046EF5F    00          DB 00
0046EF60  /.  55          PUSH EBP
0046EF61  |.  8BEC       MOV EBP,ESP
0046EF63  |.  83C4 F4    ADD ESP,-0C
0046EF66  |.  33C9       XOR ECX,ECX
0046EF68  |.  894D F4    MOV DWORD PTR SS:[EBP-C],ECX
0046EF6B  |.  8955 F8    MOV DWORD PTR SS:[EBP-8],EDX
0046EF6E  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046EF71  |.  33C0       XOR EAX,EAX
0046EF73  |.  55          PUSH EBP
0046EF74  |.  68 1FF04600 PUSH 查看1.0046F01F
0046EF79  |.  64:FF30    PUSH DWORD PTR FS:[EAX]
0046EF7C  |.  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046EF7F  |.  8D55 F4    LEA EDX,DWORD PTR SS:[EBP-C]
0046EF82  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046EF85  |.  8B80 F0020000 MOV EAX,DWORD PTR DS:[EAX+2F0]
0046EF8B  |.  E8 C495FCFF CALL 查看1.00438554
0046EF90  |.  8B55 F4    MOV EDX,DWORD PTR SS:[EBP-C]
0046EF93  |.  B8 E89C4800 MOV EAX,查看1.00489CE8
0046EF98  |.  E8 3353F9FF CALL 查看1.004042D0
0046EF9D  |.  A1 E89C4800 MOV EAX,DWORD PTR DS:[489CE8]
0046EFA2  |.  E8 BDFCFFFF CALL 查看1.0046EC64
0046EFA7  |.  A3 EC9C4800 MOV DWORD PTR DS:[489CEC],EAX
0046EFAC  |.  833D EC9C4800>CMP DWORD PTR DS:[489CEC],0
0046EFB3    75 34       JNZ SHORT 查看1.0046EFE9
0046EFB5  |.  6A 00       PUSH 0
0046EFB7  |.  A1 E89C4800 MOV EAX,DWORD PTR DS:[489CE8]
0046EFBC  |.  E8 6B57F9FF CALL 查看1.0040472C
0046EFC1  |.  50          PUSH EAX
0046EFC2  |.  68 2CF04600 PUSH 查看1.0046F02C
0046EFC7  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046EFCA  |.  E8 05FCFCFF CALL 查看1.0043EBD4
0046EFCF  |.  50          PUSH EAX                               ; |hOwner
0046EFD0  |.  E8 D37FF9FF CALL <JMP.&user32.MessageBoxA>          ; \MessageBoxA
0046EFD5  |.  A1 E89C4800 MOV EAX,DWORD PTR DS:[489CE8]
0046EFDA  |.  E8 A1FEFFFF CALL 查看1.0046EE80
0046EFDF  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046EFE2  |.  E8 055DFEFF CALL 查看1.00454CEC
0046EFE7    EB 20       JMP SHORT 查看1.0046F009
0046EFE9  |>  6A 00       PUSH 0
0046EFEB  |.  A1 E89C4800 MOV EAX,DWORD PTR DS:[489CE8]
0046EFF0  |.  E8 3757F9FF CALL 查看1.0040472C
0046EFF5  |.  50          PUSH EAX
0046EFF6  |.  68 38F04600 PUSH 查看1.0046F038
0046EFFB  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046EFFE  |.  E8 D1FBFCFF CALL 查看1.0043EBD4
0046F003  |.  50          PUSH EAX                               ; |hOwner
0046F004  |.  E8 9F7FF9FF CALL <JMP.&user32.MessageBoxA>          ; \MessageBoxA
0046F009  |>  33C0       XOR EAX,EAX
0046F00B  |.  5A          POP EDX
0046F00C  |.  59          POP ECX
0046F00D  |.  59          POP ECX
0046F00E  |.  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046F011  |.  68 26F04600 PUSH 查看1.0046F026
0046F016  |>  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0046F019  |.  E8 5E52F9FF CALL 查看1.0040427C
0046F01E  \.  C3          RETN
0046F01F .^ E9 804CF9FF JMP 查看1.00403CA4
0046F024 .^ EB F0       JMP SHORT 查看1.0046F016
0046F026 .  8BE5       MOV ESP,EBP
0046F028 .  5D          POP EBP
0046F029 .  C3          RETN
0046F02A    00          DB 00
0046F02B    00          DB 00
0046F02C    D7          DB D7
0046F02D    A2          DB A2
0046F02E    B2          DB B2
0046F02F    E1          DB E1
0046F030    B3          DB B3
0046F031    C9          DB C9
0046F032    B9          DB B9
0046F033    A6          DB A6
0046F034    00          DB 00
0046F035    00          DB 00
0046F036    00          DB 00
0046F037    00          DB 00
0046F038    D7          DB D7
0046F039    A2          DB A2
0046F03A    B2          DB B2
0046F03B    E1          DB E1
0046F03C    BA          DB BA
0046F03D    C5          DB C5
0046F03E    CE          DB CE
0046F03F    DE          DB DE
0046F040    D0          DB D0
0046F041    A7          DB A7
0046F042    00          DB 00
0046F043    00          DB 00
0046F044  /.  55          PUSH EBP
0046F045  |.  8BEC       MOV EBP,ESP
0046F047  |.  83C4 F8    ADD ESP,-8
0046F04A  |.  8955 F8    MOV DWORD PTR SS:[EBP-8],EDX
0046F04D  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046F050  |.  6A 01       PUSH 1                                  ; /IsShown = 1
0046F052  |.  6A 00       PUSH 0                                  ; |DefDir = NULL
0046F054  |.  68 70F04600 PUSH 查看1.0046F070                      ; |Parameters = "http://shareware.skycn.com/orderform.php?purtype=unreg&soft_id=5783"
0046F059  |.  68 B4F04600 PUSH 查看1.0046F0B4                      ; |FileName = "iexplore.exe"
0046F05E  |.  68 C4F04600 PUSH 查看1.0046F0C4                      ; |Operation = "open"
0046F063  |.  6A 00       PUSH 0                                  ; |hWnd = NULL
0046F065  |.  E8 A603FCFF CALL <JMP.&shell32.ShellExecuteA>       ; \ShellExecuteA
0046F06A  |.  59          POP ECX
0046F06B  |.  59          POP ECX
0046F06C  |.  5D          POP EBP
0046F06D  \.  C3          RETN
0046F06E    00          DB 00
0046F06F    00          DB 00
0046F070 .  68 74 74 70 3>ASCII "http://shareware"
0046F080 .  2E 73 6B 79 6>ASCII ".skycn.com/order"
0046F090 .  66 6F 72 6D 2>ASCII "form.php?purtype"
0046F0A0 .  3D 75 6E 72 6>ASCII "=unreg&soft_id=5"
0046F0B0 .  37 38 33 00 ASCII "783",0
0046F0B4 .  69 65 78 70 6>ASCII "iexplore.exe",0
0046F0C1    00          DB 00
0046F0C2    00          DB 00
0046F0C3    00          DB 00
0046F0C4 .  6F 70 65 6E 0>ASCII "open",0
0046F0C9    00          DB 00
0046F0CA    00          DB 00
0046F0CB    00          DB 00
0046F0CC  /.  55          PUSH EBP
0046F0CD  |.  8BEC       MOV EBP,ESP
0046F0CF  |.  83C4 F8    ADD ESP,-8
0046F0D2  |.  8955 F8    MOV DWORD PTR SS:[EBP-8],EDX
0046F0D5  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046F0D8  |.  BA 10F14600 MOV EDX,查看1.0046F110                   ;  ASCII "http://shareware.skycn.com/orderform.php?purtype=unreg&soft_id=5783"
0046F0DD  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F0E0  |.  8B80 FC020000 MOV EAX,DWORD PTR DS:[EAX+2FC]
0046F0E6  |.  E8 9994FCFF CALL 查看1.00438584
0046F0EB  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F0EE  |.  8B80 FC020000 MOV EAX,DWORD PTR DS:[EAX+2FC]
0046F0F4  |.  8B40 68    MOV EAX,DWORD PTR DS:[EAX+68]
0046F0F7  |.  BA 00800000 MOV EDX,8000
0046F0FC  |.  E8 2308FBFF CALL 查看1.0041F924
0046F101  |.  59          POP ECX
0046F102  |.  59          POP ECX
0046F103  |.  5D          POP EBP
0046F104  \.  C3          RETN
0046F105    00          DB 00
0046F106    00          DB 00
0046F107    00          DB 00
0046F108 .  FFFFFFFF    DD FFFFFFFF
0046F10C .  43000000    DD 00000043
0046F110 .  68 74 74 70 3>ASCII "http://shareware"
0046F120 .  2E 73 6B 79 6>ASCII ".skycn.com/order"
0046F130 .  66 6F 72 6D 2>ASCII "form.php?purtype"
0046F140 .  3D 75 6E 72 6>ASCII "=unreg&soft_id=5"
0046F150 .  37 38 33 00 ASCII "783",0
0046F154  /.  55          PUSH EBP
0046F155  |.  8BEC       MOV EBP,ESP
0046F157  |.  83C4 F8    ADD ESP,-8
0046F15A  |.  8955 F8    MOV DWORD PTR SS:[EBP-8],EDX
0046F15D  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046F160  |.  BA 98F14600 MOV EDX,查看1.0046F198                   ;  ASCII "http://shareware.skycn.com/orderform.php?purtype=unreg&soft_id=5783"
0046F165  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F168  |.  8B80 FC020000 MOV EAX,DWORD PTR DS:[EAX+2FC]
0046F16E  |.  E8 1194FCFF CALL 查看1.00438584
0046F173  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F176  |.  8B80 FC020000 MOV EAX,DWORD PTR DS:[EAX+2FC]
0046F17C  |.  8B40 68    MOV EAX,DWORD PTR DS:[EAX+68]
0046F17F  |.  BA 08000080 MOV EDX,80000008
0046F184  |.  E8 9B07FBFF CALL 查看1.0041F924
0046F189  |.  59          POP ECX
0046F18A  |.  59          POP ECX
0046F18B  |.  5D          POP EBP
0046F18C  \.  C3          RETN
0046F18D    00          DB 00
0046F18E    00          DB 00
0046F18F    00          DB 00
0046F190 .  FFFFFFFF    DD FFFFFFFF
0046F194 .  43000000    DD 00000043
0046F198 .  68 74 74 70 3>ASCII "http://shareware"
0046F1A8 .  2E 73 6B 79 6>ASCII ".skycn.com/order"
0046F1B8 .  66 6F 72 6D 2>ASCII "form.php?purtype"
0046F1C8 .  3D 75 6E 72 6>ASCII "=unreg&soft_id=5"
0046F1D8 .  37 38 33 00 ASCII "783",0
0046F1DC $  55          PUSH EBP
0046F1DD .  8BEC       MOV EBP,ESP
0046F1DF .  83C4 F4    ADD ESP,-0C
0046F1E2 .  53          PUSH EBX
0046F1E3 .  56          PUSH ESI
0046F1E4 .  57          PUSH EDI
0046F1E5 .  B2 01       MOV DL,1
0046F1E7 .  A1 28C14500 MOV EAX,DWORD PTR DS:[45C128]
0046F1EC .  E8 37D0FEFF CALL 查看1.0045C228
0046F1F1 .  8945 F8    MOV DWORD PTR SS:[EBP-8],EAX
0046F1F4 .  33C0       XOR EAX,EAX
0046F1F6 .  8945 F4    MOV DWORD PTR SS:[EBP-C],EAX
0046F1F9 .  33C0       XOR EAX,EAX
0046F1FB .  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046F1FE .  33C0       XOR EAX,EAX
0046F200 .  55          PUSH EBP
0046F201 .  68 76F24600 PUSH 查看1.0046F276
0046F206 .  64:FF30    PUSH DWORD PTR FS:[EAX]
0046F209 .  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046F20C .  BA 02000080 MOV EDX,80000002
0046F211 .  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F214 .  E8 AFD0FEFF CALL 查看1.0045C2C8
0046F219 .  BA C4F24600 MOV EDX,查看1.0046F2C4                   ;  ASCII "software\limitcount"
0046F21E .  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F221 .  E8 06D1FEFF CALL 查看1.0045C32C
0046F226 .  B1 01       MOV CL,1
0046F228 .  BA C4F24600 MOV EDX,查看1.0046F2C4                   ;  ASCII "software\limitcount"
0046F22D .  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F230 .  E8 D3D1FEFF CALL 查看1.0045C408
0046F235 .  BA E0F24600 MOV EDX,查看1.0046F2E0                   ;  ASCII "qqloader50"
0046F23A .  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F23D .  E8 1AD4FEFF CALL 查看1.0045C65C
0046F242 .  8945 F4    MOV DWORD PTR SS:[EBP-C],EAX
0046F245 .  837D F4 04 CMP DWORD PTR SS:[EBP-C],4
0046F249 .  7D 09       JGE SHORT 查看1.0046F254
0046F24B .  C745 FC FFFFF>MOV DWORD PTR SS:[EBP-4],-1
0046F252 .  EB 05       JMP SHORT 查看1.0046F259
0046F254 >  33C0       XOR EAX,EAX
0046F256 .  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046F259 >  FF45 F4    INC DWORD PTR SS:[EBP-C]
0046F25C .  8B4D F4    MOV ECX,DWORD PTR SS:[EBP-C]
0046F25F .  BA E0F24600 MOV EDX,查看1.0046F2E0                   ;  ASCII "qqloader50"
0046F264 .  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F267 .  E8 DCD3FEFF CALL 查看1.0045C648
0046F26C .  33C0       XOR EAX,EAX
0046F26E .  5A          POP EDX
0046F26F .  59          POP ECX
0046F270 .  59          POP ECX
0046F271 .  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046F274 .  EB 39       JMP SHORT 查看1.0046F2AF
0046F276 .^ E9 7547F9FF JMP 查看1.004039F0
0046F27B .  837D F4 04 CMP DWORD PTR SS:[EBP-C],4
0046F27F .  7D 09       JGE SHORT 查看1.0046F28A
0046F281 .  C745 FC FFFFF>MOV DWORD PTR SS:[EBP-4],-1
0046F288 .  EB 05       JMP SHORT 查看1.0046F28F
0046F28A >  33C0       XOR EAX,EAX
0046F28C .  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046F28F >  FF45 F4    INC DWORD PTR SS:[EBP-C]
0046F292 .  8B4D F4    MOV ECX,DWORD PTR SS:[EBP-C]
0046F295 .  BA E0F24600 MOV EDX,查看1.0046F2E0                   ;  ASCII "qqloader50"
0046F29A .  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F29D .  E8 A6D3FEFF CALL 查看1.0045C648
0046F2A2 .  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F2A5 .  E8 6642F9FF CALL 查看1.00403510
0046F2AA .  E8 A94AF9FF CALL 查看1.00403D58
0046F2AF >  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F2B2 .  5F          POP EDI
0046F2B3 .  5E          POP ESI
0046F2B4 .  5B          POP EBX
0046F2B5 .  8BE5       MOV ESP,EBP
0046F2B7 .  5D          POP EBP
0046F2B8 .  C3          RETN
0046F2B9    00          DB 00
0046F2BA    00          DB 00
0046F2BB    00          DB 00
0046F2BC .  FFFFFFFF    DD FFFFFFFF
0046F2C0 .  13000000    DD 00000013
0046F2C4 .  73 6F 66 74 7>ASCII "software\limitco"
0046F2D4 .  75 6E 74 00 ASCII "unt",0
0046F2D8 .  FFFFFFFF    DD FFFFFFFF
0046F2DC .  0A000000    DD 0000000A
0046F2E0 .  71 71 6C 6F 6>ASCII "qqloader50",0
0046F2EB    00          DB 00
0046F2EC  /.  55          PUSH EBP
0046F2ED  |.  8BEC       MOV EBP,ESP
0046F2EF  |.  83C4 F8    ADD ESP,-8
0046F2F2  |.  8955 F8    MOV DWORD PTR SS:[EBP-8],EDX
0046F2F5  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046F2F8  |.  33C0       XOR EAX,EAX
0046F2FA  |.  A3 EC9C4800 MOV DWORD PTR DS:[489CEC],EAX
0046F2FF  |.  E8 D8FEFFFF CALL 查看1.0046F1DC
0046F304  |.  A3 EC9C4800 MOV DWORD PTR DS:[489CEC],EAX
0046F309  |.  833D EC9C4800>CMP DWORD PTR DS:[489CEC],0
0046F310  |.  74 24       JE SHORT 查看1.0046F336
0046F312  |.  6A 00       PUSH 0
0046F314  |.  68 54F34600 PUSH 查看1.0046F354
0046F319  |.  68 64F34600 PUSH 查看1.0046F364
0046F31E  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F321  |.  E8 AEF8FCFF CALL 查看1.0043EBD4
0046F326  |.  50          PUSH EAX                               ; |hOwner
0046F327  |.  E8 7C7CF9FF CALL <JMP.&user32.MessageBoxA>          ; \MessageBoxA
0046F32C  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F32F  |.  E8 B859FEFF CALL 查看1.00454CEC
0046F334  |.  EB 1A       JMP SHORT 查看1.0046F350
0046F336  |>  6A 00       PUSH 0
0046F338  |.  68 7CF34600 PUSH 查看1.0046F37C
0046F33D  |.  68 94F34600 PUSH 查看1.0046F394
0046F342  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F345  |.  E8 8AF8FCFF CALL 查看1.0043EBD4
0046F34A  |.  50          PUSH EAX                               ; |hOwner
0046F34B  |.  E8 587CF9FF CALL <JMP.&user32.MessageBoxA>          ; \MessageBoxA
0046F350  |>  59          POP ECX
0046F351  |.  59          POP ECX
0046F352  |.  5D          POP EBP
0046F353  \.  C3          RETN
0046F354    C4          DB C4
0046F355    FA          DB FA
0046F356    BB          DB BB
0046F357    B9          DB B9
0046F358 .  C3          RETN
0046F359    BB          DB BB
0046F35A    D3          DB D3
0046F35B    D0          DB D0
0046F35C    D7          DB D7
0046F35D    A2          DB A2
0046F35E    B2          DB B2
0046F35F    E1          DB E1
0046F360    00          DB 00
0046F361    00          DB 00
0046F362    00          DB 00
0046F363    00          DB 00
0046F364    CE          DB CE
0046F365    B4          DB B4
0046F366    D7          DB D7
0046F367    A2          DB A2
0046F368    B2          DB B2
0046F369    E1          DB E1
0046F36A    B0          DB B0
0046F36B    E6          DB E6
0046F36C    B1          DB B1
0046F36D    BE          DB BE
0046F36E    D6          DB D6
0046F36F    BB          DB BB
0046F370    C4          DB C4
0046F371    DC          DB DC
0046F372    CA          DB CA
0046F373    B9          DB B9
0046F374    D3          DB D3
0046F375 .  C3          RETN
0046F376    32          DB 32                                  ;  CHAR '2'
0046F377    B4          DB B4
0046F378    CE          DB CE
0046F379    00          DB 00
0046F37A    00          DB 00
0046F37B    00          DB 00
0046F37C    C4          DB C4
0046F37D    FA          DB FA
0046F37E    D7          DB D7
0046F37F    A2          DB A2
0046F380    B2          DB B2
0046F381    E1          DB E1
0046F382    BA          DB BA
0046F383    F3          DB F3
0046F384    B2          DB B2
0046F385    C5          DB C5
0046F386    C4          DB C4
0046F387    DC          DB DC
0046F388    BC          DB BC
0046F389    CC          INT3
0046F38A    D0          DB D0
0046F38B    F8          DB F8
0046F38C    CA          DB CA
0046F38D    B9          DB B9
0046F38E    D3          DB D3
0046F38F .  C3          RETN
0046F390    00          DB 00
0046F391    00          DB 00
0046F392    00          DB 00
0046F393    00          DB 00
0046F394    C4          DB C4
0046F395    FA          DB FA
0046F396    CA          DB CA
0046F397    B9          DB B9
0046F398    D3          DB D3
0046F399 .  C3          RETN
0046F39A    B5          DB B5
0046F39B    C4          DB C4
0046F39C    B4          DB B4
0046F39D    CE          DB CE
0046F39E    CA          DB CA
0046F39F    FD          DB FD
0046F3A0    D2          DB D2
0046F3A1    D1          DB D1
0046F3A2    BE          DB BE
0046F3A3    AD          DB AD
0046F3A4    B3          DB B3
0046F3A5    AC          DB AC
0046F3A6    B9          DB B9
0046F3A7    FD          DB FD
0046F3A8    32          DB 32                                  ;  CHAR '2'
0046F3A9    B4          DB B4
0046F3AA    CE          DB CE
0046F3AB    00          DB 00
0046F3AC .  55          PUSH EBP
0046F3AD .  8BEC       MOV EBP,ESP
0046F3AF .  33C0       XOR EAX,EAX
0046F3B1 .  55          PUSH EBP
0046F3B2 .  68 DDF34600 PUSH 查看1.0046F3DD
0046F3B7 .  64:FF30    PUSH DWORD PTR FS:[EAX]
0046F3BA .  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046F3BD .  FF05 F09C4800 INC DWORD PTR DS:[489CF0]
0046F3C3 .  75 0A       JNZ SHORT 查看1.0046F3CF
0046F3C5 .  B8 E89C4800 MOV EAX,查看1.00489CE8
0046F3CA .  E8 AD4EF9FF CALL 查看1.0040427C
0046F3CF >  33C0       XOR EAX,EAX
0046F3D1 .  5A          POP EDX
0046F3D2 .  59          POP ECX
0046F3D3 .  59          POP ECX
0046F3D4 .  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046F3D7 .  68 E4F34600 PUSH 查看1.0046F3E4
0046F3DC >  C3          RETN                                  ;  RET 用作跳转到 0046F3E4
0046F3DD .^ E9 C248F9FF JMP 查看1.00403CA4
0046F3E2 .^ EB F8       JMP SHORT 查看1.0046F3DC
0046F3E4 >  5D          POP EBP
0046F3E5 .  C3          RETN
0046F3E6    8BC0       MOV EAX,EAX
0046F3E8 .  832D F09C4800>SUB DWORD PTR DS:[489CF0],1
0046F3EF .  C3          RETN
0046F3F0 .  3CF44600    DD 查看1.0046F43C
0046F3F4    00          DB 00
0046F3F5    00          DB 00
0046F3F6    00          DB 00
0046F3F7    00          DB 00
0046F3F8    00          DB 00
0046F3F9    00          DB 00
0046F3FA    00          DB 00
0046F3FB    00          DB 00
0046F3FC    00          DB 00
0046F3FD    00          DB 00
0046F3FE    00          DB 00
0046F3FF    00          DB 00
0046F400 .  F8F54600    DD 查看1.0046F5F8
0046F404 .  2CF54600    DD 查看1.0046F52C
0046F408 .  87F54600    DD 查看1.0046F587
0046F40C    00          DB 00
0046F40D    00          DB 00
0046F40E    00          DB 00
0046F40F    00          DB 00
0046F410 .  D3F54600    DD 查看1.0046F5D3                         ;  ASCII 0C,"TFindQQ_Path"
0046F414    08          DB 08
0046F415    03          DB 03
0046F416    00          DB 00
0046F417    00          DB 00
0046F418 .  18E14400    DD 查看1.0044E118
0046F41C .  34CE4100    DD 查看1.0041CE34
0046F420 .  E40D4500    DD 查看1.00450DE4
0046F424 .  8C0F4500    DD 查看1.00450F8C
0046F428 .  6C374000    DD 查看1.0040376C
0046F42C .  28334500    DD 查看1.00453328
0046F430 .  A8344000    DD 查看1.004034A8                         ;  入口地址
0046F434 .  C4344000    DD 查看1.004034C4                         ;  入口地址
0046F438 .  F40F4500    DD 查看1.00450FF4
0046F43C .  A8F64300    DD 查看1.0043F6A8
0046F440 .  64154500    DD 查看1.00451564
0046F444 .  7C4F4100    DD 查看1.00414F7C                         ;  入口地址
0046F448 .  B4114500    DD 查看1.004511B4                         ;  入口地址
0046F44C .  F0114500    DD 查看1.004511F0
0046F450 .  FC124500    DD 查看1.004512FC
0046F454 .  3C834300    DD 查看1.0043833C
0046F458 .  4CCE4100    DD 查看1.0041CE4C
0046F45C .  741B4500    DD 查看1.00451B74
0046F460 .  2CCB4100    DD 查看1.0041CB2C
0046F464 .  CC554500    DD 查看1.004555CC
0046F468 .  580C4500    DD 查看1.00450C58                         ;  入口地址
0046F46C .  BCF14300    DD 查看1.0043F1BC
0046F470 .  D8F64300    DD 查看1.0043F6D8                         ;  入口地址
0046F474 .  24F64300    DD 查看1.0043F624
0046F478 .  98784300    DD 查看1.00437898
0046F47C .  7CEC4300    DD 查看1.0043EC7C
0046F480 .  54184500    DD 查看1.00451854
0046F484 .  F4E94300    DD 查看1.0043E9F4
0046F488 .  E0774300    DD 查看1.004377E0
0046F48C .  E4774300    DD 查看1.004377E4
0046F490 .  48194500    DD 查看1.00451948
0046F494 .  10A84300    DD 查看1.0043A810
0046F498 .  24834300    DD 查看1.00438324
0046F49C .  5C794300    DD 查看1.0043795C                         ;  入口地址
0046F4A0 .  B0844300    DD 查看1.004384B0
0046F4A4 .  3C1B4500    DD 查看1.00451B3C
0046F4A8 .  081A4500    DD 查看1.00451A08
0046F4AC .  E8854300    DD 查看1.004385E8
0046F4B0 .  B41B4500    DD 查看1.00451BB4
0046F4B4 .  94A84300    DD 查看1.0043A894
0046F4B8 .  48EA4300    DD 查看1.0043EA48
0046F4BC .  C4EA4300    DD 查看1.0043EAC4
0046F4C0 .  00E64300    DD 查看1.0043E600
0046F4C4 .  A8EA4300    DD 查看1.0043EAA8
0046F4C8 .  540A4500    DD 查看1.00450A54
0046F4CC .  BC214500    DD 查看1.004521BC
0046F4D0 .  98C14300    DD 查看1.0043C198
0046F4D4 .  502E4500    DD 查看1.00452E50
0046F4D8 .  AC314500    DD 查看1.004531AC
0046F4DC .  6C304500    DD 查看1.0045306C
0046F4E0 .  30C24300    DD 查看1.0043C230
0046F4E4 .  34C24300    DD 查看1.0043C234
0046F4E8 .  E4324500    DD 查看1.004532E4
0046F4EC .  94C04300    DD 查看1.0043C094                         ;  入口地址
0046F4F0 .  E8EB4300    DD 查看1.0043EBE8
0046F4F4 .  D8394500    DD 查看1.004539D8
0046F4F8 .  A4E84300    DD 查看1.0043E8A4
0046F4FC .  AC4E4500    DD 查看1.00454EAC
0046F500 .  48044500    DD 查看1.00450448
0046F504 .  F8064500    DD 查看1.004506F8
0046F508 .  CC3F4500    DD 查看1.00453FCC
0046F50C .  D8104500    DD 查看1.004510D8
0046F510 .  54114500    DD 查看1.00451154
0046F514 .  54524500    DD 查看1.00455254
0046F518 .  1C0E4500    DD 查看1.00450E1C
0046F51C .  904D4500    DD 查看1.00454D90
0046F520 .  B0344500    DD 查看1.004534B0
0046F524 .  444F4500    DD 查看1.00454F44
0046F528 .  381B4500    DD 查看1.00451B38
0046F52C    06          DB 06
0046F52D    00          DB 00
0046F52E .  E0F54600    DD 查看1.0046F5E0
0046F532    F0          DB F0
0046F533    02          DB 02
0046F534    00          DB 00
0046F535    00          DB 00
0046F536    00          DB 00
0046F537    00          DB 00
0046F538 .  07          DB 07
0046F539 .  74 78 74 50 6>ASCII "txtPath"
0046F540    F4          DB F4
0046F541    02          DB 02
0046F542    00          DB 00
0046F543    00          DB 00
0046F544    01          DB 01
0046F545    00          DB 00
0046F546 .  07          DB 07
0046F547 .  42 75 74 74 6>ASCII "Button1"
0046F54E    F8          DB F8
0046F54F    02          DB 02
0046F550    00          DB 00
0046F551    00          DB 00
0046F552    02          DB 02
0046F553    00          DB 00
0046F554 .  05          DB 05
0046F555 .  51 51 4E 75 6>ASCII "QQNum"
0046F55A    FC          DB FC
0046F55B    02          DB 02
0046F55C    00          DB 00
0046F55D    00          DB 00
0046F55E    03          DB 03
0046F55F    00          DB 00
0046F560 .  0A          DB 0A
0046F561 .  49 6D 61 67 6>ASCII "ImageList1"
0046F56B    00          DB 00
0046F56C    03          DB 03
0046F56D    00          DB 00
0046F56E    00          DB 00
0046F56F    01          DB 01
0046F570    00          DB 00
0046F571 .  07          DB 07
0046F572 .  42 75 74 74 6>ASCII "Button2"
0046F579    04          DB 04
0046F57A    03          DB 03
0046F57B    00          DB 00
0046F57C    00          DB 00
0046F57D    01          DB 01
0046F57E    00          DB 00
0046F57F .  07          DB 07
0046F580 .  42 75 74 74 6>ASCII "Button3"
0046F587    04          DB 04
0046F588    00          DB 00
0046F589    11          DB 11
0046F58A    00          DB 00
0046F58B .  84F94600    DD 查看1.0046F984
0046F58F .  0A          DB 0A
0046F590 .  46 6F 72 6D 4>ASCII "FormCreate"
0046F59A    13          DB 13
0046F59B    00          DB 00
0046F59C .  5CFA4600    DD 查看1.0046FA5C
0046F5A0 .  0C          DB 0C
0046F5A1 .  42 75 74 74 6>ASCII "Button1Click"
0046F5AD    13          DB 13
0046F5AE    00          DB 00
0046F5AF .  FCFA4600    DD 查看1.0046FAFC
0046F5B3 .  0C          DB 0C
0046F5B4 .  42 75 74 74 6>ASCII "Button3Click"
0046F5C0    13          DB 13
0046F5C1    00          DB 00
0046F5C2 .  1CFB4600    DD 查看1.0046FB1C
0046F5C6 .  0C          DB 0C
0046F5C7 .  42 75 74 74 6>ASCII "Button2Click"
0046F5D3 .  0C          DB 0C
0046F5D4 .  54 46 69 6E 6>ASCII "TFindQQ_Path"
0046F5E0    04          DB 04
0046F5E1    00          DB 00
0046F5E2 .  009C4200    DD 查看1.00429C00
0046F5E6 .  44B54200    DD 查看1.0042B544
0046F5EA .  B0224600    DD 查看1.004622B0
0046F5EE .  1C4C4300    DD 查看1.00434C1C
0046F5F2    8BC0       MOV EAX,EAX
0046F5F4 .  F8F54600    DD 查看1.0046F5F8
0046F5F8    07          DB 07
0046F5F9 .  0C          DB 0C
0046F5FA .  54 46 69 6E 6>ASCII "TFindQQ_Path"
0046F606 .  3CF44600    DD 查看1.0046F43C
0046F60A .  5CE24400    DD 查看1.0044E25C
0046F60E    5C          DB 5C                                  ;  CHAR '\'
0046F60F    00          DB 00
0046F610 .  0A          DB 0A
0046F611 .  46 69 6E 64 5>ASCII "FindQQPath"
0046F61B    00          DB 00
0046F61C    00          DB 00
0046F61D    8D40 00    LEA EAX,DWORD PTR DS:[EAX]
0046F620  /$  55          PUSH EBP
0046F621  |.  8BEC       MOV EBP,ESP
0046F623  |.  83C4 F8    ADD ESP,-8
0046F626  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046F629  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F62C  |.  E8 4B4CF9FF CALL 查看1.0040427C
0046F631  |.  B2 01       MOV DL,1
0046F633  |.  A1 28C14500 MOV EAX,DWORD PTR DS:[45C128]
0046F638  |.  E8 EBCBFEFF CALL 查看1.0045C228
0046F63D  |.  8945 F8    MOV DWORD PTR SS:[EBP-8],EAX
0046F640  |.  33C0       XOR EAX,EAX
0046F642  |.  55          PUSH EBP
0046F643  |.  68 90F64600 PUSH 查看1.0046F690
0046F648  |.  64:FF30    PUSH DWORD PTR FS:[EAX]
0046F64B  |.  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046F64E  |.  BA 02000080 MOV EDX,80000002
0046F653  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F656  |.  E8 6DCCFEFF CALL 查看1.0045C2C8
0046F65B  |.  33C9       XOR ECX,ECX
0046F65D  |.  BA A4F64600 MOV EDX,查看1.0046F6A4                   ;  ASCII "\SOFTWARE\TENCENT\PLATFORM_TYPE_LIST\1"
0046F662  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F665  |.  E8 9ECDFEFF CALL 查看1.0045C408
0046F66A  |.  8B4D FC    MOV ECX,DWORD PTR SS:[EBP-4]
0046F66D  |.  BA D4F64600 MOV EDX,查看1.0046F6D4                   ;  ASCII "TypePath"
0046F672  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F675  |.  E8 56CFFEFF CALL 查看1.0045C5D0
0046F67A  |.  33C0       XOR EAX,EAX
0046F67C  |.  5A          POP EDX
0046F67D  |.  59          POP ECX
0046F67E  |.  59          POP ECX
0046F67F  |.  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046F682  |.  68 97F64600 PUSH 查看1.0046F697
0046F687  |>  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F68A  |.  E8 813EF9FF CALL 查看1.00403510
0046F68F  \.  C3          RETN
0046F690 .^ E9 0F46F9FF JMP 查看1.00403CA4
0046F695 .^ EB F0       JMP SHORT 查看1.0046F687
0046F697 .  59          POP ECX
0046F698 .  59          POP ECX
0046F699 .  5D          POP EBP
0046F69A .  C3          RETN
0046F69B    00          DB 00
0046F69C .  FFFFFFFF    DD FFFFFFFF
0046F6A0 .  26000000    DD 00000026
0046F6A4 .  5C 53 4F 46 5>ASCII "\SOFTWARE\TENCEN"
0046F6B4 .  54 5C 50 4C 4>ASCII "T\PLATFORM_TYPE_"
0046F6C4 .  4C 49 53 54 5>ASCII "LIST\1",0
0046F6CB    00          DB 00
0046F6CC .  FFFFFFFF    DD FFFFFFFF
0046F6D0 .  08000000    DD 00000008
0046F6D4 .  54 79 70 65 5>ASCII "TypePath",0
0046F6DD    00          DB 00
0046F6DE    00          DB 00
0046F6DF    00          DB 00
0046F6E0  /$  55          PUSH EBP
0046F6E1  |.  8BEC       MOV EBP,ESP
0046F6E3  |.  83C4 F8    ADD ESP,-8
0046F6E6  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046F6E9  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F6EC  |.  E8 8B4BF9FF CALL 查看1.0040427C
0046F6F1  |.  B2 01       MOV DL,1
0046F6F3  |.  A1 28C14500 MOV EAX,DWORD PTR DS:[45C128]
0046F6F8  |.  E8 2BCBFEFF CALL 查看1.0045C228
0046F6FD  |.  8945 F8    MOV DWORD PTR SS:[EBP-8],EAX
0046F700  |.  33C0       XOR EAX,EAX
0046F702  |.  55          PUSH EBP
0046F703  |.  68 50F74600 PUSH 查看1.0046F750
0046F708  |.  64:FF30    PUSH DWORD PTR FS:[EAX]
0046F70B  |.  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046F70E  |.  BA 02000080 MOV EDX,80000002
0046F713  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F716  |.  E8 ADCBFEFF CALL 查看1.0045C2C8
0046F71B  |.  33C9       XOR ECX,ECX
0046F71D  |.  BA 64F74600 MOV EDX,查看1.0046F764                   ;  ASCII "software\ngnsss"
0046F722  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F725  |.  E8 DECCFEFF CALL 查看1.0045C408
0046F72A  |.  8B4D FC    MOV ECX,DWORD PTR SS:[EBP-4]
0046F72D  |.  BA 7CF74600 MOV EDX,查看1.0046F77C                   ;  ASCII "qqloader"
0046F732  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F735  |.  E8 96CEFEFF CALL 查看1.0045C5D0
0046F73A  |.  33C0       XOR EAX,EAX
0046F73C  |.  5A          POP EDX
0046F73D  |.  59          POP ECX
0046F73E  |.  59          POP ECX
0046F73F  |.  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046F742  |.  68 57F74600 PUSH 查看1.0046F757
0046F747  |>  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046F74A  |.  E8 C13DF9FF CALL 查看1.00403510
0046F74F  \.  C3          RETN
0046F750 .^ E9 4F45F9FF JMP 查看1.00403CA4
0046F755 .^ EB F0       JMP SHORT 查看1.0046F747
0046F757 .  59          POP ECX
0046F758 .  59          POP ECX
0046F759 .  5D          POP EBP
0046F75A .  C3          RETN
0046F75B    00          DB 00
0046F75C .  FFFFFFFF    DD FFFFFFFF
0046F760 .  0F000000    DD 0000000F
0046F764 .  73 6F 66 74 7>ASCII "software\ngnsss",0
0046F774 .  FFFFFFFF    DD FFFFFFFF
0046F778 .  08000000    DD 00000008
0046F77C .  71 71 6C 6F 6>ASCII "qqloader",0
0046F785    00          DB 00
0046F786    00          DB 00
0046F787    00          DB 00
0046F788  /$  55          PUSH EBP
0046F789  |.  8BEC       MOV EBP,ESP
0046F78B  |.  81C4 98FEFFFF ADD ESP,-168
0046F791  |.  33D2       XOR EDX,EDX
0046F793  |.  8995 98FEFFFF MOV DWORD PTR SS:[EBP-168],EDX
0046F799  |.  8995 9CFEFFFF MOV DWORD PTR SS:[EBP-164],EDX
0046F79F  |.  8955 F8    MOV DWORD PTR SS:[EBP-8],EDX
0046F7A2  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046F7A5  |.  8D85 A0FEFFFF LEA EAX,DWORD PTR SS:[EBP-160]
0046F7AB  |.  8B15 6C764000 MOV EDX,DWORD PTR DS:[40766C]          ;  查看1.00407670
0046F7B1  |.  E8 A254F9FF CALL 查看1.00404C58
0046F7B6  |.  33C0       XOR EAX,EAX
0046F7B8  |.  55          PUSH EBP
0046F7B9  |.  68 3EF94600 PUSH 查看1.0046F93E
0046F7BE  |.  64:FF30    PUSH DWORD PTR FS:[EAX]
0046F7C1  |.  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046F7C4  |.  A1 AC8A4800 MOV EAX,DWORD PTR DS:[488AAC]
0046F7C9  |.  8B00       MOV EAX,DWORD PTR DS:[EAX]
0046F7CB  |.  E8 5C4FF9FF CALL 查看1.0040472C
0046F7D0  |.  50          PUSH EAX                               ; /Path
0046F7D1  |.  E8 FE9EFEFF CALL <JMP.&Shlwapi.PathIsDirectoryA>    ; \PathIsDirectoryA
0046F7D6  |.  85C0       TEST EAX,EAX
0046F7D8  |.  0F84 29010000 JE 查看1.0046F907
0046F7DE  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F7E1  |.  8B80 F8020000 MOV EAX,DWORD PTR DS:[EAX+2F8]
0046F7E7  |.  8B10       MOV EDX,DWORD PTR DS:[EAX]
0046F7E9  |.  FF92 D4000000 CALL DWORD PTR DS:[EDX+D4]
0046F7EF  |.  8B15 AC8A4800 MOV EDX,DWORD PTR DS:[488AAC]          ;  查看1.00489C24
0046F7F5  |.  8B12       MOV EDX,DWORD PTR DS:[EDX]
0046F7F7  |.  8D85 9CFEFFFF LEA EAX,DWORD PTR SS:[EBP-164]
0046F7FD  |.  B9 54F94600 MOV ECX,查看1.0046F954                   ;  ASCII "*.*"
0046F802  |.  E8 794DF9FF CALL 查看1.00404580
0046F807  |.  8B85 9CFEFFFF MOV EAX,DWORD PTR SS:[EBP-164]
0046F80D  |.  8D8D A0FEFFFF LEA ECX,DWORD PTR SS:[EBP-160]
0046F813  |.  BA 10000000 MOV EDX,10
0046F818  |.  E8 DF91F9FF CALL 查看1.004089FC
0046F81D  |.  85C0       TEST EAX,EAX
0046F81F  |.  0F85 B7000000 JNZ 查看1.0046F8DC
0046F825  |>  8B85 A8FEFFFF /MOV EAX,DWORD PTR SS:[EBP-158]
0046F82B  |.  83E0 10    |AND EAX,10
0046F82E  |.  3B85 A8FEFFFF |CMP EAX,DWORD PTR SS:[EBP-158]
0046F834  |.  0F85 84000000 |JNZ 查看1.0046F8BE
0046F83A  |.  8D45 F8    |LEA EAX,DWORD PTR SS:[EBP-8]
0046F83D  |.  8B95 ACFEFFFF |MOV EDX,DWORD PTR SS:[EBP-154]
0046F843  |.  E8 CC4AF9FF |CALL 查看1.00404314
0046F848  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
0046F84B  |.  BA 60F94600 |MOV EDX,查看1.0046F960
0046F850  |.  E8 234EF9FF |CALL 查看1.00404678
0046F855  |.  74 67       |JE SHORT 查看1.0046F8BE
0046F857  |.  8B45 F8    |MOV EAX,DWORD PTR SS:[EBP-8]
0046F85A  |.  BA 6CF94600 |MOV EDX,查看1.0046F96C                   ;  ASCII ".."
0046F85F  |.  E8 144EF9FF |CALL 查看1.00404678
0046F864  |.  74 58       |JE SHORT 查看1.0046F8BE
0046F866  |.  A1 AC8A4800 |MOV EAX,DWORD PTR DS:[488AAC]
0046F86B  |.  FF30       |PUSH DWORD PTR DS:[EAX]
0046F86D  |.  FF75 F8    |PUSH DWORD PTR SS:[EBP-8]
0046F870  |.  68 78F94600 |PUSH 查看1.0046F978                      ;  ASCII "\MsgEx.db"
0046F875  |.  8D85 98FEFFFF |LEA EAX,DWORD PTR SS:[EBP-168]
0046F87B  |.  BA 03000000 |MOV EDX,3
0046F880  |.  E8 6F4DF9FF |CALL 查看1.004045F4
0046F885  |.  8B85 98FEFFFF |MOV EAX,DWORD PTR SS:[EBP-168]
0046F88B  |.  E8 9C4EF9FF |CALL 查看1.0040472C
0046F890  |.  50          |PUSH EAX                               ; /Path
0046F891  |.  E8 369EFEFF |CALL <JMP.&Shlwapi.PathFileExistsA>    ; \PathFileExistsA
0046F896  |.  85C0       |TEST EAX,EAX
0046F898  |.  74 24       |JE SHORT 查看1.0046F8BE
0046F89A  |.  6A 00       |PUSH 0                               ; /Arg4 = 00000000
0046F89C  |.  6A 00       |PUSH 0                               ; |Arg3 = 00000000
0046F89E  |.  6A 00       |PUSH 0                               ; |Arg2 = 00000000
0046F8A0  |.  6A 00       |PUSH 0                               ; |Arg1 = 00000000
0046F8A2  |.  8B45 FC    |MOV EAX,DWORD PTR SS:[EBP-4]          ; |
0046F8A5  |.  8B80 F8020000 |MOV EAX,DWORD PTR DS:[EAX+2F8]       ; |
0046F8AB  |.  8B80 84020000 |MOV EAX,DWORD PTR DS:[EAX+284]       ; |
0046F8B1  |.  33C9       |XOR ECX,ECX                            ; |
0046F8B3  |.  8B95 ACFEFFFF |MOV EDX,DWORD PTR SS:[EBP-154]       ; |
0046F8B9  |.  E8 4EDEFFFF |CALL 查看1.0046D70C                      ; \查看1.0046D70C
0046F8BE  |>  8D85 A0FEFFFF |LEA EAX,DWORD PTR SS:[EBP-160]
0046F8C4  |.  E8 8391F9FF |CALL 查看1.00408A4C
0046F8C9  |.  85C0       |TEST EAX,EAX
0046F8CB  |.^ 0F84 54FFFFFF \JE 查看1.0046F825
0046F8D1  |.  8D85 A0FEFFFF LEA EAX,DWORD PTR SS:[EBP-160]
0046F8D7  |.  E8 9491F9FF CALL 查看1.00408A70
0046F8DC  |>  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F8DF  |.  8B80 F8020000 MOV EAX,DWORD PTR DS:[EAX+2F8]
0046F8E5  |.  8B80 84020000 MOV EAX,DWORD PTR DS:[EAX+284]
0046F8EB  |.  E8 BC5DFAFF CALL 查看1.004156AC
0046F8F0  |.  85C0       TEST EAX,EAX
0046F8F2  |.  7E 13       JLE SHORT 查看1.0046F907
0046F8F4  |.  33D2       XOR EDX,EDX
0046F8F6  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F8F9  |.  8B80 F8020000 MOV EAX,DWORD PTR DS:[EAX+2F8]
0046F8FF  |.  8B08       MOV ECX,DWORD PTR DS:[EAX]
0046F901  |.  FF91 CC000000 CALL DWORD PTR DS:[ECX+CC]
0046F907  |>  33C0       XOR EAX,EAX
0046F909  |.  5A          POP EDX
0046F90A  |.  59          POP ECX
0046F90B  |.  59          POP ECX
0046F90C  |.  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046F90F  |.  68 45F94600 PUSH 查看1.0046F945
0046F914  |>  8D85 98FEFFFF LEA EAX,DWORD PTR SS:[EBP-168]
0046F91A  |.  BA 02000000 MOV EDX,2
0046F91F  |.  E8 7C49F9FF CALL 查看1.004042A0
0046F924  |.  8D85 A0FEFFFF LEA EAX,DWORD PTR SS:[EBP-160]
0046F92A  |.  8B15 6C764000 MOV EDX,DWORD PTR DS:[40766C]          ;  查看1.00407670
0046F930  |.  E8 F353F9FF CALL 查看1.00404D28
0046F935  |.  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0046F938  |.  E8 3F49F9FF CALL 查看1.0040427C
0046F93D  \.  C3          RETN
0046F93E .^ E9 6143F9FF JMP 查看1.00403CA4
0046F943 .^ EB CF       JMP SHORT 查看1.0046F914
0046F945 .  8BE5       MOV ESP,EBP
0046F947 .  5D          POP EBP
0046F948 .  C3          RETN
0046F949    00          DB 00
0046F94A    00          DB 00
0046F94B    00          DB 00
0046F94C .  FFFFFFFF    DD FFFFFFFF
0046F950 .  03000000    DD 00000003
0046F954 .  2A 2E 2A 00 ASCII "*.*",0
0046F958 .  FFFFFFFF    DD FFFFFFFF
0046F95C .  01000000    DD 00000001
0046F960 .  2E 00       ASCII ".",0
0046F962    00          DB 00
0046F963    00          DB 00
0046F964 .  FFFFFFFF    DD FFFFFFFF
0046F968 .  02000000    DD 00000002
0046F96C .  2E 2E 00    ASCII "..",0
0046F96F    00          DB 00
0046F970 .  FFFFFFFF    DD FFFFFFFF
0046F974 .  09000000    DD 00000009
0046F978 .  5C 4D 73 67 4>ASCII "\MsgEx.db",0
0046F982    00          DB 00
0046F983    00          DB 00
0046F984  /.  55          PUSH EBP
0046F985  |.  8BEC       MOV EBP,ESP
0046F987  |.  83C4 F0    ADD ESP,-10
0046F98A  |.  33C9       XOR ECX,ECX
0046F98C  |.  894D F0    MOV DWORD PTR SS:[EBP-10],ECX
0046F98F  |.  894D F4    MOV DWORD PTR SS:[EBP-C],ECX
0046F992  |.  8955 F8    MOV DWORD PTR SS:[EBP-8],EDX
0046F995  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046F998  |.  33C0       XOR EAX,EAX
0046F99A  |.  55          PUSH EBP
0046F99B  |.  68 51FA4600 PUSH 查看1.0046FA51
0046F9A0  |.  64:FF30    PUSH DWORD PTR FS:[EAX]
0046F9A3  |.  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046F9A6  |.  33C0       XOR EAX,EAX
0046F9A8  |.  A3 F89C4800 MOV DWORD PTR DS:[489CF8],EAX
0046F9AD  |.  A1 AC8A4800 MOV EAX,DWORD PTR DS:[488AAC]
0046F9B2  |.  8338 00    CMP DWORD PTR DS:[EAX],0
0046F9B5  |.  75 31       JNZ SHORT 查看1.0046F9E8
0046F9B7  |.  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0046F9BA  |.  E8 61FCFFFF CALL 查看1.0046F620
0046F9BF  |.  8B55 F4    MOV EDX,DWORD PTR SS:[EBP-C]
0046F9C2  |.  A1 AC8A4800 MOV EAX,DWORD PTR DS:[488AAC]
0046F9C7  |.  E8 0449F9FF CALL 查看1.004042D0
0046F9CC  |.  8D55 F0    LEA EDX,DWORD PTR SS:[EBP-10]
0046F9CF  |.  A1 AC8A4800 MOV EAX,DWORD PTR DS:[488AAC]
0046F9D4  |.  8B00       MOV EAX,DWORD PTR DS:[EAX]
0046F9D6  |.  E8 3191F9FF CALL 查看1.00408B0C
0046F9DB  |.  8B55 F0    MOV EDX,DWORD PTR SS:[EBP-10]
0046F9DE  |.  A1 AC8A4800 MOV EAX,DWORD PTR DS:[488AAC]
0046F9E3  |.  E8 E848F9FF CALL 查看1.004042D0
0046F9E8  |>  33D2       XOR EDX,EDX
0046F9EA  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046F9ED  |.  8B80 F0020000 MOV EAX,DWORD PTR DS:[EAX+2F0]
0046F9F3  |.  E8 8C8BFCFF CALL 查看1.00438584
0046F9F8  |.  A1 AC8A4800 MOV EAX,DWORD PTR DS:[488AAC]
0046F9FD  |.  8338 00    CMP DWORD PTR DS:[EAX],0
0046FA00  |.  74 16       JE SHORT 查看1.0046FA18
0046FA02  |.  A1 AC8A4800 MOV EAX,DWORD PTR DS:[488AAC]
0046FA07  |.  8B00       MOV EAX,DWORD PTR DS:[EAX]
0046FA09  |.  E8 1E4DF9FF CALL 查看1.0040472C
0046FA0E  |.  50          PUSH EAX                               ; /Path
0046FA0F  |.  E8 C09CFEFF CALL <JMP.&Shlwapi.PathIsDirectoryA>    ; \PathIsDirectoryA
0046FA14  |.  85C0       TEST EAX,EAX
0046FA16  |.  74 1E       JE SHORT 查看1.0046FA36
0046FA18  |>  8B15 AC8A4800 MOV EDX,DWORD PTR DS:[488AAC]          ;  查看1.00489C24
0046FA1E  |.  8B12       MOV EDX,DWORD PTR DS:[EDX]
0046FA20  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046FA23  |.  8B80 F0020000 MOV EAX,DWORD PTR DS:[EAX+2F0]
0046FA29  |.  E8 568BFCFF CALL 查看1.00438584
0046FA2E  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046FA31  |.  E8 52FDFFFF CALL 查看1.0046F788
0046FA36  |>  33C0       XOR EAX,EAX
0046FA38  |.  5A          POP EDX
0046FA39  |.  59          POP ECX
0046FA3A  |.  59          POP ECX
0046FA3B  |.  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046FA3E  |.  68 58FA4600 PUSH 查看1.0046FA58
0046FA43  |>  8D45 F0    LEA EAX,DWORD PTR SS:[EBP-10]
0046FA46  |.  BA 02000000 MOV EDX,2
0046FA4B  |.  E8 5048F9FF CALL 查看1.004042A0
0046FA50  \.  C3          RETN
0046FA51 .^ E9 4E42F9FF JMP 查看1.00403CA4
0046FA56 .^ EB EB       JMP SHORT 查看1.0046FA43
0046FA58 .  8BE5       MOV ESP,EBP
0046FA5A .  5D          POP EBP
0046FA5B .  C3          RETN
0046FA5C  /.  55          PUSH EBP
0046FA5D  |.  8BEC       MOV EBP,ESP
0046FA5F  |.  83C4 F4    ADD ESP,-0C
0046FA62  |.  33C9       XOR ECX,ECX
0046FA64  |.  894D F8    MOV DWORD PTR SS:[EBP-8],ECX
0046FA67  |.  8955 F4    MOV DWORD PTR SS:[EBP-C],EDX
0046FA6A  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046FA6D  |.  33C0       XOR EAX,EAX
0046FA6F  |.  55          PUSH EBP
0046FA70  |.  68 CFFA4600 PUSH 查看1.0046FACF
0046FA75  |.  64:FF30    PUSH DWORD PTR FS:[EAX]
0046FA78  |.  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046FA7B  |.  8D4D F8    LEA ECX,DWORD PTR SS:[EBP-8]
0046FA7E  |.  33D2       XOR EDX,EDX
0046FA80  |.  B8 E4FA4600 MOV EAX,查看1.0046FAE4
0046FA85  |.  E8 4AEDFFFF CALL 查看1.0046E7D4
0046FA8A  |.  84C0       TEST AL,AL
0046FA8C  |.  74 2B       JE SHORT 查看1.0046FAB9
0046FA8E  |.  8B55 F8    MOV EDX,DWORD PTR SS:[EBP-8]
0046FA91  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046FA94  |.  8B80 F0020000 MOV EAX,DWORD PTR DS:[EAX+2F0]
0046FA9A  |.  E8 E58AFCFF CALL 查看1.00438584
0046FA9F  |.  A1 AC8A4800 MOV EAX,DWORD PTR DS:[488AAC]
0046FAA4  |.  B9 F8FA4600 MOV ECX,查看1.0046FAF8
0046FAA9  |.  8B55 F8    MOV EDX,DWORD PTR SS:[EBP-8]
0046FAAC  |.  E8 CF4AF9FF CALL 查看1.00404580
0046FAB1  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046FAB4  |.  E8 CFFCFFFF CALL 查看1.0046F788
0046FAB9  |>  33C0       XOR EAX,EAX
0046FABB  |.  5A          POP EDX
0046FABC  |.  59          POP ECX
0046FABD  |.  59          POP ECX
0046FABE  |.  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046FAC1  |.  68 D6FA4600 PUSH 查看1.0046FAD6
0046FAC6  |>  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0046FAC9  |.  E8 AE47F9FF CALL 查看1.0040427C
0046FACE  \.  C3          RETN
0046FACF .^ E9 D041F9FF JMP 查看1.00403CA4
0046FAD4 .^ EB F0       JMP SHORT 查看1.0046FAC6
0046FAD6 .  8BE5       MOV ESP,EBP
0046FAD8 .  5D          POP EBP
0046FAD9 .  C3          RETN
0046FADA    00          DB 00
0046FADB    00          DB 00
0046FADC    FF          DB FF
0046FADD    FF          DB FF
0046FADE    FF          DB FF
0046FADF    FF          DB FF
0046FAE0    0A          DB 0A
0046FAE1    00          DB 00
0046FAE2    00          DB 00
0046FAE3    00          DB 00
0046FAE4    D1          DB D1
0046FAE5    A1          DB A1
0046FAE6    D4          DB D4
0046FAE7    F1          DB F1
0046FAE8    51          DB 51                                  ;  CHAR 'Q'
0046FAE9    51          DB 51                                  ;  CHAR 'Q'
0046FAEA    C4          DB C4
0046FAEB    BF          DB BF
0046FAEC .  C2 BC00    RETN 0BC
0046FAEF    00          DB 00
0046FAF0 .  FFFFFFFF    DD FFFFFFFF
0046FAF4 .  01000000    DD 00000001
0046FAF8 .  5C 00       ASCII "\",0
0046FAFA    00          DB 00
0046FAFB    00          DB 00
0046FAFC  /.  55          PUSH EBP
0046FAFD  |.  8BEC       MOV EBP,ESP
0046FAFF  |.  83C4 F8    ADD ESP,-8
0046FB02  |.  8955 F8    MOV DWORD PTR SS:[EBP-8],EDX
0046FB05  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046FB08  |.  33C0       XOR EAX,EAX
0046FB0A  |.  A3 F89C4800 MOV DWORD PTR DS:[489CF8],EAX
0046FB0F  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046FB12  |.  E8 D551FEFF CALL 查看1.00454CEC
0046FB17  |.  59          POP ECX
0046FB18  |.  59          POP ECX
0046FB19  |.  5D          POP EBP
0046FB1A  \.  C3          RETN
0046FB1B    90          NOP
0046FB1C  /.  55          PUSH EBP
0046FB1D  |.  8BEC       MOV EBP,ESP
0046FB1F  |.  83C4 F0    ADD ESP,-10
0046FB22  |.  53          PUSH EBX
0046FB23  |.  33C9       XOR ECX,ECX
0046FB25  |.  894D F0    MOV DWORD PTR SS:[EBP-10],ECX
0046FB28  |.  894D F8    MOV DWORD PTR SS:[EBP-8],ECX
0046FB2B  |.  8955 F4    MOV DWORD PTR SS:[EBP-C],EDX
0046FB2E  |.  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0046FB31  |.  33C0       XOR EAX,EAX
0046FB33  |.  55          PUSH EBP
0046FB34  |.  68 07FC4600 PUSH 查看1.0046FC07
0046FB39  |.  64:FF30    PUSH DWORD PTR FS:[EAX]
0046FB3C  |.  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046FB3F  |.  E8 98F6FFFF CALL 查看1.0046F1DC
0046FB44  |.  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0046FB47  |.  E8 94FBFFFF CALL 查看1.0046F6E0
0046FB4C  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046FB4F  |.  E8 10F1FFFF CALL 查看1.0046EC64
0046FB54  |.  8B15 D0884800 MOV EDX,DWORD PTR DS:[4888D0]          ;  查看1.00489CEC
0046FB5A  |.  8902       MOV DWORD PTR DS:[EDX],EAX
0046FB5C  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046FB5F  |.  8B80 F8020000 MOV EAX,DWORD PTR DS:[EAX+2F8]
0046FB65  |.  8B10       MOV EDX,DWORD PTR DS:[EAX]
0046FB67  |.  FF92 C8000000 CALL DWORD PTR DS:[EDX+C8]
0046FB6D  |.  40          INC EAX
0046FB6E  |.  74 18       JE SHORT 查看1.0046FB88
0046FB70  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046FB73  |.  8B80 F8020000 MOV EAX,DWORD PTR DS:[EAX+2F8]
0046FB79  |.  8B80 3C020000 MOV EAX,DWORD PTR DS:[EAX+23C]
0046FB7F  |.  8B10       MOV EDX,DWORD PTR DS:[EAX]
0046FB81  |.  FF52 14    CALL DWORD PTR DS:[EDX+14]
0046FB84  |.  85C0       TEST EAX,EAX
0046FB86  |.  75 18       JNZ SHORT 查看1.0046FBA0
0046FB88  |>  6A 40       PUSH 40
0046FB8A  |.  B9 14FC4600 MOV ECX,查看1.0046FC14
0046FB8F  |.  BA 1CFC4600 MOV EDX,查看1.0046FC1C
0046FB94  |.  A1 F88A4800 MOV EAX,DWORD PTR DS:[488AF8]
0046FB99  |.  8B00       MOV EAX,DWORD PTR DS:[EAX]
0046FB9B  |.  E8 6888FEFF CALL 查看1.00458408
0046FBA0  |>  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046FBA3  |.  8B80 F8020000 MOV EAX,DWORD PTR DS:[EAX+2F8]
0046FBA9  |.  8B10       MOV EDX,DWORD PTR DS:[EAX]
0046FBAB  |.  FF92 C8000000 CALL DWORD PTR DS:[EDX+C8]
0046FBB1  |.  8BD0       MOV EDX,EAX
0046FBB3  |.  8D4D F0    LEA ECX,DWORD PTR SS:[EBP-10]
0046FBB6  |.  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046FBB9  |.  8B80 F8020000 MOV EAX,DWORD PTR DS:[EAX+2F8]
0046FBBF  |.  8B80 3C020000 MOV EAX,DWORD PTR DS:[EAX+23C]
0046FBC5  |.  8B18       MOV EBX,DWORD PTR DS:[EAX]
0046FBC7  |.  FF53 0C    CALL DWORD PTR DS:[EBX+C]
0046FBCA  |.  8B55 F0    MOV EDX,DWORD PTR SS:[EBP-10]
0046FBCD  |.  A1 F48B4800 MOV EAX,DWORD PTR DS:[488BF4]
0046FBD2  |.  E8 F946F9FF CALL 查看1.004042D0
0046FBD7  |.  C705 F89C4800>MOV DWORD PTR DS:[489CF8],-1
0046FBE1  |>  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0046FBE4  |.  E8 0351FEFF CALL 查看1.00454CEC
0046FBE9  |.  33C0       XOR EAX,EAX
0046FBEB  |.  5A          POP EDX
0046FBEC  |.  59          POP ECX
0046FBED  |.  59          POP ECX
0046FBEE  |.  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046FBF1  |.  68 0EFC4600 PUSH 查看1.0046FC0E
0046FBF6  |>  8D45 F0    LEA EAX,DWORD PTR SS:[EBP-10]
0046FBF9  |.  E8 7E46F9FF CALL 查看1.0040427C
0046FBFE  |.  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0046FC01  |.  E8 7646F9FF CALL 查看1.0040427C
0046FC06  \.  C3          RETN
0046FC07 .^ E9 9840F9FF JMP 查看1.00403CA4
0046FC0C .^ EB E8       JMP SHORT 查看1.0046FBF6
0046FC0E .  5B          POP EBX
0046FC0F .  8BE5       MOV ESP,EBP
0046FC11 .  5D          POP EBP
0046FC12 .  C3          RETN
0046FC13 .  00CC       ADD AH,CL
0046FC15 .^ E1 CA       LOOPDE SHORT 查看1.0046FBE1
0046FC17 .  BE 00000000 MOV ESI,0
0046FC1C .  C3          RETN
0046FC1D    BB          DB BB
0046FC1E    D3          DB D3
0046FC1F    D0          DB D0
0046FC20    51          DB 51                                  ;  CHAR 'Q'
0046FC21    51          DB 51                                  ;  CHAR 'Q'
0046FC22    BA          DB BA
0046FC23    C5          DB C5
0046FC24 .  C2 EBA3    RETN 0A3EB
0046FC27    A1          DB A1
0046FC28    00          DB 00
0046FC29    00          DB 00
0046FC2A    00          DB 00
0046FC2B    00          DB 00
0046FC2C .  55          PUSH EBP
0046FC2D .  8BEC       MOV EBP,ESP
0046FC2F .  33C0       XOR EAX,EAX
0046FC31 .  55          PUSH EBP
0046FC32 .  68 51FC4600 PUSH 查看1.0046FC51
0046FC37 .  64:FF30    PUSH DWORD PTR FS:[EAX]
0046FC3A .  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046FC3D .  FF05 FC9C4800 INC DWORD PTR DS:[489CFC]
0046FC43 .  33C0       XOR EAX,EAX
0046FC45 .  5A          POP EDX
0046FC46 .  59          POP ECX
0046FC47 .  59          POP ECX
0046FC48 .  64:8910    MOV DWORD PTR FS:[EAX],EDX
0046FC4B .  68 58FC4600 PUSH 查看1.0046FC58
0046FC50 >  C3          RETN                                  ;  RET 用作跳转到 0046FC58
0046FC51 .^ E9 4E40F9FF JMP 查看1.00403CA4
0046FC56 .^ EB F8       JMP SHORT 查看1.0046FC50
0046FC58 >  5D          POP EBP
0046FC59 .  C3          RETN
0046FC5A    8BC0       MOV EAX,EAX
0046FC5C .  832D FC9C4800>SUB DWORD PTR DS:[489CFC],1
0046FC63 .  C3          RETN
0046FC64  /$  55          PUSH EBP
0046FC65  |.  8BEC       MOV EBP,ESP
0046FC67  |.  83C4 F8    ADD ESP,-8
0046FC6A  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; /Arg2
0046FC6D  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg1
0046FC70  |.  8D4D FA    LEA ECX,DWORD PTR SS:[EBP-6]          ; |
0046FC73  |.  8D55 FC    LEA EDX,DWORD PTR SS:[EBP-4]          ; |
0046FC76  |.  8D45 FE    LEA EAX,DWORD PTR SS:[EBP-2]          ; |
0046FC79  |.  E8 D6A0F9FF CALL 查看1.00409D54                      ; \查看1.00409D54
0046FC7E  |.  66:8B45 FE MOV AX,WORD PTR SS:[EBP-2]
0046FC82  |.  59          POP ECX
0046FC83  |.  59          POP ECX
0046FC84  |.  5D          POP EBP
0046FC85  \.  C2 0800    RETN 8
0046FC88  /$  55          PUSH EBP
0046FC89  |.  8BEC       MOV EBP,ESP
0046FC8B  |.  83C4 F8    ADD ESP,-8
0046FC8E  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; /Arg2
0046FC91  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg1
0046FC94  |.  8D4D FA    LEA ECX,DWORD PTR SS:[EBP-6]          ; |
0046FC97  |.  8D55 FE    LEA EDX,DWORD PTR SS:[EBP-2]          ; |
0046FC9A  |.  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]          ; |
0046FC9D  |.  E8 B2A0F9FF CALL 查看1.00409D54                      ; \查看1.00409D54
0046FCA2  |.  66:8B45 FE MOV AX,WORD PTR SS:[EBP-2]
0046FCA6  |.  59          POP ECX
0046FCA7  |.  59          POP ECX
0046FCA8  |.  5D          POP EBP
0046FCA9  \.  C2 0800    RETN 8
0046FCAC  /$  55          PUSH EBP
0046FCAD  |.  8BEC       MOV EBP,ESP
0046FCAF  |.  83C4 F8    ADD ESP,-8
0046FCB2  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; /Arg2
0046FCB5  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg1
0046FCB8  |.  8D4D FE    LEA ECX,DWORD PTR SS:[EBP-2]          ; |
0046FCBB  |.  8D55 FA    LEA EDX,DWORD PTR SS:[EBP-6]          ; |
0046FCBE  |.  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]          ; |
0046FCC1  |.  E8 8EA0F9FF CALL 查看1.00409D54                      ; \查看1.00409D54
0046FCC6  |.  66:8B45 FE MOV AX,WORD PTR SS:[EBP-2]
0046FCCA  |.  59          POP ECX
0046FCCB  |.  59          POP ECX
0046FCCC  |.  5D          POP EBP
0046FCCD  \.  C2 0800    RETN 8
0046FCD0  /$  55          PUSH EBP
0046FCD1  |.  8BEC       MOV EBP,ESP
0046FCD3  |.  83C4 F8    ADD ESP,-8
0046FCD6  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; /Arg3
0046FCD9  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg2
0046FCDC  |.  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]          ; |
0046FCDF  |.  50          PUSH EAX                               ; |Arg1
0046FCE0  |.  8D4D FA    LEA ECX,DWORD PTR SS:[EBP-6]          ; |
0046FCE3  |.  8D55 FC    LEA EDX,DWORD PTR SS:[EBP-4]          ; |
0046FCE6  |.  8D45 FE    LEA EAX,DWORD PTR SS:[EBP-2]          ; |
0046FCE9  |.  E8 8A9DF9FF CALL 查看1.00409A78                      ; \查看1.00409A78
0046FCEE  |.  66:8B45 FE MOV AX,WORD PTR SS:[EBP-2]
0046FCF2  |.  59          POP ECX
0046FCF3  |.  59          POP ECX
0046FCF4  |.  5D          POP EBP
0046FCF5  \.  C2 0800    RETN 8
0046FCF8  /$  55          PUSH EBP
0046FCF9  |.  8BEC       MOV EBP,ESP
0046FCFB  |.  83C4 F8    ADD ESP,-8
0046FCFE  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; /Arg3
0046FD01  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg2
0046FD04  |.  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]          ; |
0046FD07  |.  50          PUSH EAX                               ; |Arg1
0046FD08  |.  8D4D FA    LEA ECX,DWORD PTR SS:[EBP-6]          ; |
0046FD0B  |.  8D55 FE    LEA EDX,DWORD PTR SS:[EBP-2]          ; |
0046FD0E  |.  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]          ; |
0046FD11  |.  E8 629DF9FF CALL 查看1.00409A78                      ; \查看1.00409A78
0046FD16  |.  66:8B45 FE MOV AX,WORD PTR SS:[EBP-2]
0046FD1A  |.  59          POP ECX
0046FD1B  |.  59          POP ECX
0046FD1C  |.  5D          POP EBP
0046FD1D  \.  C2 0800    RETN 8
0046FD20  /$  55          PUSH EBP
0046FD21  |.  8BEC       MOV EBP,ESP
0046FD23  |.  83C4 F8    ADD ESP,-8
0046FD26  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; /Arg3
0046FD29  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg2
0046FD2C  |.  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]          ; |
0046FD2F  |.  50          PUSH EAX                               ; |Arg1
0046FD30  |.  8D4D FE    LEA ECX,DWORD PTR SS:[EBP-2]          ; |
0046FD33  |.  8D55 FA    LEA EDX,DWORD PTR SS:[EBP-6]          ; |
0046FD36  |.  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]          ; |
0046FD39  |.  E8 3A9DF9FF CALL 查看1.00409A78                      ; \查看1.00409A78
0046FD3E  |.  66:8B45 FE MOV AX,WORD PTR SS:[EBP-2]
0046FD42  |.  59          POP ECX
0046FD43  |.  59          POP ECX
0046FD44  |.  5D          POP EBP
0046FD45  \.  C2 0800    RETN 8
0046FD48  /$  55          PUSH EBP
0046FD49  |.  8BEC       MOV EBP,ESP
0046FD4B  |.  83C4 F8    ADD ESP,-8
0046FD4E  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; /Arg3
0046FD51  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg2
0046FD54  |.  8D45 FE    LEA EAX,DWORD PTR SS:[EBP-2]          ; |
0046FD57  |.  50          PUSH EAX                               ; |Arg1
0046FD58  |.  8D4D F8    LEA ECX,DWORD PTR SS:[EBP-8]          ; |
0046FD5B  |.  8D55 FA    LEA EDX,DWORD PTR SS:[EBP-6]          ; |
0046FD5E  |.  8D45 FC    LEA EAX,DWORD PTR SS:[EBP-4]          ; |
0046FD61  |.  E8 129DF9FF CALL 查看1.00409A78                      ; \查看1.00409A78
0046FD66  |.  66:8B45 FE MOV AX,WORD PTR SS:[EBP-2]
0046FD6A  |.  59          POP ECX
0046FD6B  |.  59          POP ECX
0046FD6C  |.  5D          POP EBP
0046FD6D  \.  C2 0800    RETN 8
0046FD70  /$  55          PUSH EBP
0046FD71  |.  8BEC       MOV EBP,ESP
0046FD73  |.  83C4 F8    ADD ESP,-8
0046FD76  |.  FF75 14    PUSH DWORD PTR SS:[EBP+14]             ; /Arg4
0046FD79  |.  FF75 10    PUSH DWORD PTR SS:[EBP+10]             ; |Arg3
0046FD7C  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; |Arg2
0046FD7F  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg1
0046FD82  |.  E8 49000000 CALL 查看1.0046FDD0                      ; \查看1.0046FDD0
0046FD87  |.  E8 D42BF9FF CALL 查看1.00402960
0046FD8C  |.  8945 F8    MOV DWORD PTR SS:[EBP-8],EAX
0046FD8F  |.  8955 FC    MOV DWORD PTR SS:[EBP-4],EDX
0046FD92  |.  8B45 F8    MOV EAX,DWORD PTR SS:[EBP-8]
0046FD95  |.  8B55 FC    MOV EDX,DWORD PTR SS:[EBP-4]
0046FD98  |.  59          POP ECX
0046FD99  |.  59          POP ECX
0046FD9A  |.  5D          POP EBP
0046FD9B  \.  C2 1000    RETN 10
0046FD9E    8BC0       MOV EAX,EAX
0046FDA0  /$  55          PUSH EBP
0046FDA1  |.  8BEC       MOV EBP,ESP
0046FDA3  |.  83C4 F8    ADD ESP,-8
0046FDA6  |.  DD45 10    FLD QWORD PTR SS:[EBP+10]
0046FDA9  |.  DC5D 08    FCOMP QWORD PTR SS:[EBP+8]
0046FDAC  |.  DFE0       FSTSW AX
0046FDAE  |.  9E          SAHF
0046FDAF  |.  73 0C       JNB SHORT 查看1.0046FDBD
0046FDB1  |.  DD45 08    FLD QWORD PTR SS:[EBP+8]
0046FDB4  |.  DC65 10    FSUB QWORD PTR SS:[EBP+10]
0046FDB7  |.  DD5D F8    FSTP QWORD PTR SS:[EBP-8]
0046FDBA  |.  9B          WAIT
0046FDBB  |.  EB 0A       JMP SHORT 查看1.0046FDC7
0046FDBD  |>  DD45 10    FLD QWORD PTR SS:[EBP+10]
0046FDC0  |.  DC65 08    FSUB QWORD PTR SS:[EBP+8]
0046FDC3  |.  DD5D F8    FSTP QWORD PTR SS:[EBP-8]
0046FDC6  |.  9B          WAIT
0046FDC7  |>  DD45 F8    FLD QWORD PTR SS:[EBP-8]
0046FDCA  |.  59          POP ECX
0046FDCB  |.  59          POP ECX
0046FDCC  |.  5D          POP EBP
0046FDCD  \.  C2 1000    RETN 10
0046FDD0  /$  55          PUSH EBP
0046FDD1  |.  8BEC       MOV EBP,ESP
0046FDD3  |.  83C4 F8    ADD ESP,-8
0046FDD6  |.  FF75 14    PUSH DWORD PTR SS:[EBP+14]             ; /Arg4
0046FDD9  |.  FF75 10    PUSH DWORD PTR SS:[EBP+10]             ; |Arg3
0046FDDC  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; |Arg2
0046FDDF  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg1
0046FDE2  |.  E8 B9FFFFFF CALL 查看1.0046FDA0                      ; \查看1.0046FDA0
0046FDE7  |.  D80D FCFD4600 FMUL DWORD PTR DS:[46FDFC]
0046FDED  |.  DD5D F8    FSTP QWORD PTR SS:[EBP-8]
0046FDF0  |.  9B          WAIT
0046FDF1  |.  DD45 F8    FLD QWORD PTR SS:[EBP-8]
0046FDF4  |.  59          POP ECX
0046FDF5  |.  59          POP ECX
0046FDF6  |.  5D          POP EBP
0046FDF7  \.  C2 1000    RETN 10
0046FDFA    00          DB 00
0046FDFB    00          DB 00
0046FDFC .  00C0A847    DD FLOAT 86400.00
0046FE00  /$  55          PUSH EBP
0046FE01  |.  8BEC       MOV EBP,ESP
0046FE03  |.  83C4 F8    ADD ESP,-8
0046FE06  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; /Arg2
0046FE09  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; |Arg1
0046FE0C  |.  C1E0 02    SHL EAX,2                               ; |
0046FE0F  |.  8D0440       LEA EAX,DWORD PTR DS:[EAX+EAX*2]       ; |
0046FE12  |.  E8 5D9FF9FF CALL 查看1.00409D74                      ; \查看1.00409D74
0046FE17  |.  DD5D F8    FSTP QWORD PTR SS:[EBP-8]
0046FE1A  |.  9B          WAIT
0046FE1B  |.  DD45 F8    FLD QWORD PTR SS:[EBP-8]
0046FE1E  |.  59          POP ECX
0046FE1F  |.  59          POP ECX
0046FE20  |.  5D          POP EBP
0046FE21  \.  C2 0800    RETN 8
0046FE24  /$  55          PUSH EBP
0046FE25  |.  8BEC       MOV EBP,ESP
0046FE27  |.  83C4 F4    ADD ESP,-0C
0046FE2A  |.  8945 F4    MOV DWORD PTR SS:[EBP-C],EAX
0046FE2D  |.  DB45 F4    FILD DWORD PTR SS:[EBP-C]
0046FE30  |.  DC45 08    FADD QWORD PTR SS:[EBP+8]
0046FE33  |.  DD5D F8    FSTP QWORD PTR SS:[EBP-8]
0046FE36  |.  9B          WAIT
0046FE37  |.  DD45 F8    FLD QWORD PTR SS:[EBP-8]
0046FE3A  |.  8BE5       MOV ESP,EBP
0046FE3C  |.  5D          POP EBP
0046FE3D  \.  C2 0800    RETN 8
0046FE40  /$  55          PUSH EBP
0046FE41  |.  8BEC       MOV EBP,ESP
0046FE43  |.  83C4 F8    ADD ESP,-8
0046FE46  |.  DD45 10    FLD QWORD PTR SS:[EBP+10]
0046FE49  |.  D80D 68FE4600 FMUL DWORD PTR DS:[46FE68]
0046FE4F  |.  DF6D 08    FILD QWORD PTR SS:[EBP+8]
0046FE52  |.  DEC1       FADDP ST(1),ST
0046FE54  |.  D835 68FE4600 FDIV DWORD PTR DS:[46FE68]
0046FE5A  |.  DD5D F8    FSTP QWORD PTR SS:[EBP-8]
0046FE5D  |.  9B          WAIT
0046FE5E  |.  DD45 F8    FLD QWORD PTR SS:[EBP-8]
0046FE61  |.  59          POP ECX
0046FE62  |.  59          POP ECX
0046FE63  |.  5D          POP EBP
0046FE64  \.  C2 1000    RETN 10
0046FE67    00          DB 00
0046FE68 .  0000C041    DD FLOAT 24.00000
0046FE6C  /$  55          PUSH EBP
0046FE6D  |.  8BEC       MOV EBP,ESP
0046FE6F  |.  83C4 F8    ADD ESP,-8
0046FE72  |.  DD45 10    FLD QWORD PTR SS:[EBP+10]
0046FE75  |.  D80D 94FE4600 FMUL DWORD PTR DS:[46FE94]
0046FE7B  |.  DF6D 08    FILD QWORD PTR SS:[EBP+8]
0046FE7E  |.  DEC1       FADDP ST(1),ST
0046FE80  |.  D835 94FE4600 FDIV DWORD PTR DS:[46FE94]
0046FE86  |.  DD5D F8    FSTP QWORD PTR SS:[EBP-8]
0046FE89  |.  9B          WAIT
0046FE8A  |.  DD45 F8    FLD QWORD PTR SS:[EBP-8]
0046FE8D  |.  59          POP ECX
0046FE8E  |.  59          POP ECX
0046FE8F  |.  5D          POP EBP
0046FE90  \.  C2 1000    RETN 10
0046FE93    00          DB 00
0046FE94 .  0000B444    DD FLOAT 1440.000
0046FE98  /$  55          PUSH EBP
0046FE99  |.  8BEC       MOV EBP,ESP
0046FE9B  |.  83C4 F8    ADD ESP,-8
0046FE9E  |.  DD45 10    FLD QWORD PTR SS:[EBP+10]
0046FEA1  |.  D80D C0FE4600 FMUL DWORD PTR DS:[46FEC0]
0046FEA7  |.  DF6D 08    FILD QWORD PTR SS:[EBP+8]
0046FEAA  |.  DEC1       FADDP ST(1),ST
0046FEAC  |.  D835 C0FE4600 FDIV DWORD PTR DS:[46FEC0]
0046FEB2  |.  DD5D F8    FSTP QWORD PTR SS:[EBP-8]
0046FEB5  |.  9B          WAIT
0046FEB6  |.  DD45 F8    FLD QWORD PTR SS:[EBP-8]
0046FEB9  |.  59          POP ECX
0046FEBA  |.  59          POP ECX
0046FEBB  |.  5D          POP EBP
0046FEBC  \.  C2 1000    RETN 10
0046FEBF    00          DB 00
0046FEC0 .  00C0A847    DD FLOAT 86400.00
0046FEC4  /$  55          PUSH EBP
0046FEC5  |.  8BEC       MOV EBP,ESP
0046FEC7  |.  83C4 F8    ADD ESP,-8
0046FECA  |.  53          PUSH EBX
0046FECB  |.  56          PUSH ESI
0046FECC  |.  57          PUSH EDI
0046FECD  |.  8BF9       MOV EDI,ECX
0046FECF  |.  8BF2       MOV ESI,EDX
0046FED1  |.  8BD8       MOV EBX,EAX
0046FED3  |.  66:8B45 14 MOV AX,WORD PTR SS:[EBP+14]
0046FED7  |.  50          PUSH EAX                               ; /Arg5
0046FED8  |.  66:8B45 10 MOV AX,WORD PTR SS:[EBP+10]             ; |
0046FEDC  |.  50          PUSH EAX                               ; |Arg4
0046FEDD  |.  66:8B45 0C MOV AX,WORD PTR SS:[EBP+C]             ; |
0046FEE1  |.  50          PUSH EAX                               ; |Arg3
0046FEE2  |.  66:8B45 08 MOV AX,WORD PTR SS:[EBP+8]             ; |
0046FEE6  |.  50          PUSH EAX                               ; |Arg2
0046FEE7  |.  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]          ; |
0046FEEA  |.  50          PUSH EAX                               ; |Arg1
0046FEEB  |.  8BCF       MOV ECX,EDI                            ; |
0046FEED  |.  8BD6       MOV EDX,ESI                            ; |
0046FEEF  |.  8BC3       MOV EAX,EBX                            ; |
0046FEF1  |.  E8 36000000 CALL 查看1.0046FF2C                      ; \查看1.0046FF2C
0046FEF6  |.  84C0       TEST AL,AL
0046FEF8  |.  75 23       JNZ SHORT 查看1.0046FF1D
0046FEFA  |.  66:8B45 14 MOV AX,WORD PTR SS:[EBP+14]
0046FEFE  |.  50          PUSH EAX
0046FEFF  |.  66:8B45 10 MOV AX,WORD PTR SS:[EBP+10]
0046FF03  |.  50          PUSH EAX
0046FF04  |.  66:8B45 0C MOV AX,WORD PTR SS:[EBP+C]
0046FF08  |.  50          PUSH EAX
0046FF09  |.  66:8B45 08 MOV AX,WORD PTR SS:[EBP+8]
0046FF0D  |.  50          PUSH EAX
0046FF0E  |.  6A 00       PUSH 0
0046FF10  |.  6A 00       PUSH 0
0046FF12  |.  8BCF       MOV ECX,EDI
0046FF14  |.  8BD6       MOV EDX,ESI
0046FF16  |.  8BC3       MOV EAX,EBX
0046FF18  |.  E8 AF000000 CALL 查看1.0046FFCC
0046FF1D  |>  DD45 F8    FLD QWORD PTR SS:[EBP-8]
0046FF20  |.  5F          POP EDI
0046FF21  |.  5E          POP ESI
0046FF22  |.  5B          POP EBX
0046FF23  |.  59          POP ECX
0046FF24  |.  59          POP ECX
0046FF25  |.  5D          POP EBP
0046FF26  \.  C2 1000    RETN 10
0046FF29    8D40 00    LEA EAX,DWORD PTR DS:[EAX]
0046FF2C  /$  55          PUSH EBP
0046FF2D  |.  8BEC       MOV EBP,ESP
0046FF2F  |.  83C4 F0    ADD ESP,-10
0046FF32  |.  53          PUSH EBX
0046FF33  |.  66:894D FE MOV WORD PTR SS:[EBP-2],CX
0046FF37  |.  8B5D 08    MOV EBX,DWORD PTR SS:[EBP+8]
0046FF3A  |.  53          PUSH EBX                               ; /Arg1
0046FF3B  |.  66:8B4D FE MOV CX,WORD PTR SS:[EBP-2]             ; |
0046FF3F  |.  E8 CC9BF9FF CALL 查看1.00409B10                      ; \查看1.00409B10
0046FF44  |.  84C0       TEST AL,AL
0046FF46  |.  74 26       JE SHORT 查看1.0046FF6E
0046FF48  |.  66:8B45 0C MOV AX,WORD PTR SS:[EBP+C]
0046FF4C  |.  50          PUSH EAX                               ; /Arg2
0046FF4D  |.  8D45 F0    LEA EAX,DWORD PTR SS:[EBP-10]          ; |
0046FF50  |.  50          PUSH EAX                               ; |Arg1
0046FF51  |.  66:8B4D 10 MOV CX,WORD PTR SS:[EBP+10]             ; |
0046FF55  |.  66:8B55 14 MOV DX,WORD PTR SS:[EBP+14]             ; |
0046FF59  |.  66:8B45 18 MOV AX,WORD PTR SS:[EBP+18]             ; |
0046FF5D  |.  E8 A69AF9FF CALL 查看1.00409A08                      ; \查看1.00409A08
0046FF62  |.  84C0       TEST AL,AL
0046FF64  |.  74 08       JE SHORT 查看1.0046FF6E
0046FF66  |.  DD03       FLD QWORD PTR DS:[EBX]
0046FF68  |.  DC45 F0    FADD QWORD PTR SS:[EBP-10]
0046FF6B  |.  DD1B       FSTP QWORD PTR DS:[EBX]
0046FF6D  |.  9B          WAIT
0046FF6E  |>  5B          POP EBX
0046FF6F  |.  8BE5       MOV ESP,EBP
0046FF71  |.  5D          POP EBP
0046FF72  \.  C2 1400    RETN 14
0046FF75    8D40 00    LEA EAX,DWORD PTR DS:[EAX]
0046FF78  /$  55          PUSH EBP
0046FF79  |.  8BEC       MOV EBP,ESP
0046FF7B  |.  53          PUSH EBX
0046FF7C  |.  56          PUSH ESI
0046FF7D  |.  57          PUSH EDI
0046FF7E  |.  8BF1       MOV ESI,ECX
0046FF80  |.  8BDA       MOV EBX,EDX
0046FF82  |.  8BF8       MOV EDI,EAX
0046FF84  |.  66:81FB FFFF  CMP BX,0FFFF
0046FF89  |.  75 2B       JNZ SHORT 查看1.0046FFB6
0046FF8B  |.  8B45 08    MOV EAX,DWORD PTR SS:[EBP+8]
0046FF8E  |.  DD40 08    FLD QWORD PTR DS:[EAX+8]
0046FF91  |.  D81D C8FF4600 FCOMP DWORD PTR DS:[46FFC8]
0046FF97  |.  DFE0       FSTSW AX
0046FF99  |.  9E          SAHF
0046FF9A  |.  75 0E       JNZ SHORT 查看1.0046FFAA
0046FF9C  |.  8BD6       MOV EDX,ESI
0046FF9E  |.  A1 20894800 MOV EAX,DWORD PTR DS:[488920]
0046FFA3  |.  E8 1465F9FF CALL 查看1.004064BC
0046FFA8  |.  EB 16       JMP SHORT 查看1.0046FFC0
0046FFAA  |>  8BD6       MOV EDX,ESI
0046FFAC  |.  0FB7C7       MOVZX EAX,DI
0046FFAF  |.  E8 8C87F9FF CALL 查看1.00408740
0046FFB4  |.  EB 0A       JMP SHORT 查看1.0046FFC0
0046FFB6  |>  8BD6       MOV EDX,ESI
0046FFB8  |.  0FB7C3       MOVZX EAX,BX
0046FFBB  |.  E8 8087F9FF CALL 查看1.00408740
0046FFC0  |>  5F          POP EDI
0046FFC1  |.  5E          POP ESI
0046FFC2  |.  5B          POP EBX
0046FFC3  |.  5D          POP EBP
0046FFC4  \.  C3          RETN
0046FFC5    00          DB 00
0046FFC6    00          DB 00
0046FFC7    00          DB 00
0046FFC8 .  00000000    DD FLOAT 0.0
0046FFCC  /$  55          PUSH EBP
0046FFCD  |.  8BEC       MOV EBP,ESP
0046FFCF  |.  51          PUSH ECX
0046FFD0  |.  B9 07000000 MOV ECX,7
0046FFD5  |>  6A 00       /PUSH 0
0046FFD7  |.  6A 00       |PUSH 0
0046FFD9  |.  49          |DEC ECX
0046FFDA  |.^ 75 F9       \JNZ SHORT 查看1.0046FFD5
0046FFDC  |.  51          PUSH ECX
0046FFDD  |.  874D FC    XCHG DWORD PTR SS:[EBP-4],ECX
0046FFE0  |.  53          PUSH EBX
0046FFE1  |.  56          PUSH ESI
0046FFE2  |.  57          PUSH EDI
0046FFE3  |.  8BF9       MOV EDI,ECX
0046FFE5  |.  8BF2       MOV ESI,EDX
0046FFE7  |.  8BD8       MOV EBX,EAX
0046FFE9  |.  33C0       XOR EAX,EAX
0046FFEB  |.  55          PUSH EBP
0046FFEC  |.  68 72014700 PUSH 查看1.00470172
0046FFF1  |.  64:FF30    PUSH DWORD PTR FS:[EAX]
0046FFF4  |.  64:8920    MOV DWORD PTR FS:[EAX],ESP
0046FFF7  |.  55          PUSH EBP                               ; /Arg1
0046FFF8  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; |/Arg2
0046FFFB  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; ||Arg1
0046FFFE  |.  E8 61FCFFFF CALL 查看1.0046FC64                      ; |\查看1.0046FC64
00470003  |.  8D4D F0    LEA ECX,DWORD PTR SS:[EBP-10]          ; |
00470006  |.  8BD3       MOV EDX,EBX                            ; |
00470008  |.  E8 6BFFFFFF CALL 查看1.0046FF78                      ; \查看1.0046FF78
0047000D  |.  59          POP ECX
0047000E  |.  FF75 F0    PUSH DWORD PTR SS:[EBP-10]
00470011  |.  8D45 EC    LEA EAX,DWORD PTR SS:[EBP-14]
00470014  |.  8B15 2C894800 MOV EDX,DWORD PTR DS:[48892C]          ;  查看1.00489739
0047001A  |.  8A12       MOV DL,BYTE PTR DS:[EDX]
0047001C  |.  E8 3B44F9FF CALL 查看1.0040445C
00470021  |.  FF75 EC    PUSH DWORD PTR SS:[EBP-14]
00470024  |.  55          PUSH EBP                               ; /Arg1
00470025  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; |/Arg2
00470028  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; ||Arg1
0047002B  |.  E8 58FCFFFF CALL 查看1.0046FC88                      ; |\查看1.0046FC88
00470030  |.  8D4D E8    LEA ECX,DWORD PTR SS:[EBP-18]          ; |
00470033  |.  8BD6       MOV EDX,ESI                            ; |
00470035  |.  E8 3EFFFFFF CALL 查看1.0046FF78                      ; \查看1.0046FF78
0047003A  |.  59          POP ECX
0047003B  |.  FF75 E8    PUSH DWORD PTR SS:[EBP-18]
0047003E  |.  8D45 E4    LEA EAX,DWORD PTR SS:[EBP-1C]
00470041  |.  8B15 2C894800 MOV EDX,DWORD PTR DS:[48892C]          ;  查看1.00489739
00470047  |.  8A12       MOV DL,BYTE PTR DS:[EDX]
00470049  |.  E8 0E44F9FF CALL 查看1.0040445C
0047004E  |.  FF75 E4    PUSH DWORD PTR SS:[EBP-1C]
00470051  |.  55          PUSH EBP                               ; /Arg1
00470052  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; |/Arg2
00470055  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; ||Arg1
00470058  |.  E8 4FFCFFFF CALL 查看1.0046FCAC                      ; |\查看1.0046FCAC
0047005D  |.  8D4D E0    LEA ECX,DWORD PTR SS:[EBP-20]          ; |
00470060  |.  8BD7       MOV EDX,EDI                            ; |
00470062  |.  E8 11FFFFFF CALL 查看1.0046FF78                      ; \查看1.0046FF78
00470067  |.  59          POP ECX
00470068  |.  FF75 E0    PUSH DWORD PTR SS:[EBP-20]
0047006B  |.  68 8C014700 PUSH 查看1.0047018C
00470070  |.  55          PUSH EBP                               ; /Arg1
00470071  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; |/Arg2
00470074  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; ||Arg1
00470077  |.  E8 54FCFFFF CALL 查看1.0046FCD0                      ; |\查看1.0046FCD0
0047007C  |.  8D4D DC    LEA ECX,DWORD PTR SS:[EBP-24]          ; |
0047007F  |.  66:8B55 1C MOV DX,WORD PTR SS:[EBP+1C]             ; |
00470083  |.  E8 F0FEFFFF CALL 查看1.0046FF78                      ; \查看1.0046FF78
00470088  |.  59          POP ECX
00470089  |.  FF75 DC    PUSH DWORD PTR SS:[EBP-24]
0047008C  |.  8D45 D8    LEA EAX,DWORD PTR SS:[EBP-28]
0047008F  |.  8B15 70884800 MOV EDX,DWORD PTR DS:[488870]          ;  查看1.00489744
00470095  |.  8A12       MOV DL,BYTE PTR DS:[EDX]
00470097  |.  E8 C043F9FF CALL 查看1.0040445C
0047009C  |.  FF75 D8    PUSH DWORD PTR SS:[EBP-28]
0047009F  |.  55          PUSH EBP                               ; /Arg1
004700A0  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; |/Arg2
004700A3  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; ||Arg1
004700A6  |.  E8 4DFCFFFF CALL 查看1.0046FCF8                      ; |\查看1.0046FCF8
004700AB  |.  8D4D D4    LEA ECX,DWORD PTR SS:[EBP-2C]          ; |
004700AE  |.  66:8B55 18 MOV DX,WORD PTR SS:[EBP+18]             ; |
004700B2  |.  E8 C1FEFFFF CALL 查看1.0046FF78                      ; \查看1.0046FF78
004700B7  |.  59          POP ECX
004700B8  |.  FF75 D4    PUSH DWORD PTR SS:[EBP-2C]
004700BB  |.  8D45 D0    LEA EAX,DWORD PTR SS:[EBP-30]
004700BE  |.  8B15 70884800 MOV EDX,DWORD PTR DS:[488870]          ;  查看1.00489744
004700C4  |.  8A12       MOV DL,BYTE PTR DS:[EDX]
004700C6  |.  E8 9143F9FF CALL 查看1.0040445C
004700CB  |.  FF75 D0    PUSH DWORD PTR SS:[EBP-30]
004700CE  |.  55          PUSH EBP                               ; /Arg1
004700CF  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; |/Arg2
004700D2  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; ||Arg1
004700D5  |.  E8 46FCFFFF CALL 查看1.0046FD20                      ; |\查看1.0046FD20
004700DA  |.  8D4D CC    LEA ECX,DWORD PTR SS:[EBP-34]          ; |
004700DD  |.  66:8B55 14 MOV DX,WORD PTR SS:[EBP+14]             ; |
004700E1  |.  E8 92FEFFFF CALL 查看1.0046FF78                      ; \查看1.0046FF78
004700E6  |.  59          POP ECX
004700E7  |.  FF75 CC    PUSH DWORD PTR SS:[EBP-34]
004700EA  |.  8D45 C8    LEA EAX,DWORD PTR SS:[EBP-38]
004700ED  |.  8B15 348C4800 MOV EDX,DWORD PTR DS:[488C34]          ;  查看1.00489737
004700F3  |.  8A12       MOV DL,BYTE PTR DS:[EDX]
004700F5  |.  E8 6243F9FF CALL 查看1.0040445C
004700FA  |.  FF75 C8    PUSH DWORD PTR SS:[EBP-38]
004700FD  |.  55          PUSH EBP                               ; /Arg1
004700FE  |.  FF75 0C    PUSH DWORD PTR SS:[EBP+C]             ; |/Arg2
00470101  |.  FF75 08    PUSH DWORD PTR SS:[EBP+8]             ; ||Arg1
00470104  |.  E8 3FFCFFFF CALL 查看1.0046FD48                      ; |\查看1.0046FD48
00470109  |.  8D4D C4    LEA ECX,DWORD PTR SS:[EBP-3C]          ; |
0047010C  |.  66:8B55 10 MOV DX,WORD PTR SS:[EBP+10]             ; |
00470110  |.  E8 63FEFFFF CALL 查看1.0046FF78                      ; \查看1.0046FF78
00470115  |.  59          POP ECX
00470116  |.  FF75 C4    PUSH DWORD PTR SS:[EBP-3C]
00470119  |.  8D45 F4    LEA EAX,DWORD PTR SS:[EBP-C]
0047011C  |.  BA 0D000000 MOV EDX,0D
00470121  |.  E8 CE44F9FF CALL 查看1.004045F4
00470126  |.  8B45 F4    MOV EAX,DWORD PTR SS:[EBP-C]
00470129  |.  8945 F8    MOV DWORD PTR SS:[EBP-8],EAX
0047012C  |.  C645 FC 0B MOV BYTE PTR SS:[EBP-4],0B
00470130  |.  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
00470133  |.  50          PUSH EAX
00470134  |.  6A 00       PUSH 0
00470136  |.  8D55 C0    LEA EDX,DWORD PTR SS:[EBP-40]
00470139  |.  A1 A8884800 MOV EAX,DWORD PTR DS:[4888A8]
0047013E  |.  E8 7963F9FF CALL 查看1.004064BC
00470143  |.  8B4D C0    MOV ECX,DWORD PTR SS:[EBP-40]
00470146  |.  B2 01       MOV DL,1
00470148  |.  A1 E47C4000 MOV EAX,DWORD PTR DS:[407CE4]
0047014D  |.  E8 8EA5F9FF CALL 查看1.0040A6E0
00470152  |.  E8 853BF9FF CALL 查看1.00403CDC
00470157  |.  33C0       XOR EAX,EAX
00470159  |.  5A          POP EDX
0047015A  |.  59          POP ECX
0047015B  |.  59          POP ECX
0047015C  |.  64:8910    MOV DWORD PTR FS:[EAX],EDX
0047015F  |.  68 79014700 PUSH 查看1.00470179
00470164  |>  8D45 C0    LEA EAX,DWORD PTR SS:[EBP-40]
00470167  |.  BA 0E000000 MOV EDX,0E
0047016C  |.  E8 2F41F9FF CALL 查看1.004042A0
00470171  \.  C3          RETN
00470172 .^ E9 2D3BF9FF JMP 查看1.00403CA4
00470177 .^ EB EB       JMP SHORT 查看1.00470164
00470179 .  5F          POP EDI
0047017A .  5E          POP ESI
0047017B .  5B          POP EBX
0047017C .  8BE5       MOV ESP,EBP
0047017E .  5D          POP EBP
0047017F .  C2 1800    RETN 18
00470182    00          DB 00
00470183    00          DB 00
00470184 .  FFFFFFFF    DD FFFFFFFF
00470188 .  01000000    DD 00000001
0047018C .  20 00       ASCII " ",0
0047018E    00          DB 00
0047018F    00          DB 00
00470190 .  55          PUSH EBP
00470191 .  8BEC       MOV EBP,ESP
00470193 .  33C0       XOR EAX,EAX
00470195 .  55          PUSH EBP
00470196 .  68 B5014700 PUSH 查看1.004701B5
0047019B .  64:FF30    PUSH DWORD PTR FS:[EAX]
0047019E .  64:8920    MOV DWORD PTR FS:[EAX],ESP
004701A1 .  FF05 009D4800 INC DWORD PTR DS:[489D00]
004701A7 .  33C0       XOR EAX,EAX
004701A9 .  5A          POP EDX
004701AA .  59          POP ECX
004701AB .  59          POP ECX
004701AC .  64:8910    MOV DWORD PTR FS:[EAX],EDX
004701AF .  68 BC014700 PUSH 查看1.004701BC
004701B4 >  C3          RETN                                  ;  RET 用作跳转到 004701BC
004701B5 .^ E9 EA3AF9FF JMP 查看1.00403CA4
004701BA .^ EB F8       JMP SHORT 查看1.004701B4
004701BC >  5D          POP EBP
004701BD .  C3          RETN

[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)

收藏・0

免费・0

支持

最新回复 (1)
恋辞雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 18 回帖 59 粉丝 0 关注私信	恋辞 2 楼 004863AB JMP 就OK了 2008-1-19 23:14 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

jamiezheng

发帖

回帖

RANK

关注

私信

他的文章

关于我们

联系我们

企业服务

看雪公众号