【破文标题】File Monster 2.9.3算法分析
【破文作者】tianxj
【作者邮箱】tianxj_2007@126.com
【作者主页】WwW.ChiNaPYG.CoM
【破解工具】PEiD,OD
【破解平台】Windows XP
【软件名称】File Monster 2.9.3
【软件大小】1517KB
【软件类别】国外软件/卸载工具
【软件授权】共享版
【软件语言】英文
【运行环境】Win9x/Me/NT/2000/XP/2003
【更新时间】2008-11-14
【原版下载】自己找一下
【保护方式】注册码
【软件简介】File Monster 是一款简单易用的文件清除工具，可以彻底地清理和删除系统中的文件，而且文件中的数据会被覆盖，不能被其他文件恢复工具所恢复!
【破解声明】我是一只小菜鸟，偶得一点心得，愿与大家分享：）
--------------------------------------------------------------
【破解内容】
--------------------------------------------------------------
**************************************************************
一、运行程序，进行注册，输入错误的注册信息进行检测，有提示信息
"Unlock Code and/or Licensee Name invalid."
**************************************************************
二、用PEiD对monster.exe查壳，为 UPX 0.89.6 - 1.02 / 1.05 - 1.24 -> Markus & Laszlo
用PEiD插件脱壳后，为 Microsoft Visual Basic 5.0 / 6.0
**************************************************************
三、运行OD，打开脱壳文件，用F12暂停法
==============================================================
代码:
调用堆栈 , 项目 12 地址=0012D8B8 堆栈=0045ADF2 程序过程 / 参数=MSVBVM50.rtcMsgBox 调用来自=monster_.0045ADEC 结构=0012D8B4
代码:
0045A3D0 . 55 PUSH EBP 0045A3D1 . 8BEC MOV EBP,ESP 0045A3D3 . 83EC 18 SUB ESP,18 0045A3D6 . 68 86334000 PUSH <JMP.&MSVBVM50.__vbaExceptHandler> ; SE 处理程序安装 0045A3DB . 64:A1 0000000>MOV EAX,DWORD PTR FS:[0] 0045A3E1 . 50 PUSH EAX 0045A3E2 . 64:8925 00000>MOV DWORD PTR FS:[0],ESP 0045A3E9 . B8 10010000 MOV EAX,110 0045A3EE . E8 8D8FFAFF CALL <JMP.&MSVBVM50.__vbaChkstk> 0045A3F3 . 53 PUSH EBX 0045A3F4 . 56 PUSH ESI 0045A3F5 . 57 PUSH EDI 0045A3F6 . 8965 E8 MOV DWORD PTR SS:[EBP-18],ESP 0045A3F9 . C745 EC B02D4>MOV DWORD PTR SS:[EBP-14],monster_.00402> 0045A400 . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 0045A403 . 83E0 01 AND EAX,1 0045A406 . 8945 F0 MOV DWORD PTR SS:[EBP-10],EAX 0045A409 . 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] 0045A40C . 83E1 FE AND ECX,FFFFFFFE 0045A40F . 894D 08 MOV DWORD PTR SS:[EBP+8],ECX 0045A412 . C745 F4 00000>MOV DWORD PTR SS:[EBP-C],0 0045A419 . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8] 0045A41C . 8B02 MOV EAX,DWORD PTR DS:[EDX] 0045A41E . 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] 0045A421 . 51 PUSH ECX 0045A422 . FF50 04 CALL DWORD PTR DS:[EAX+4] 0045A425 . C745 FC 01000>MOV DWORD PTR SS:[EBP-4],1 0045A42C . C745 FC 02000>MOV DWORD PTR SS:[EBP-4],2 0045A433 . 6A FF PUSH -1 0045A435 . FF15 6C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaOnErr>; MSVBVM50.__vbaOnError 0045A43B . C745 FC 03000>MOV DWORD PTR SS:[EBP-4],3 0045A442 . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8] 0045A445 . 8B02 MOV EAX,DWORD PTR DS:[EDX] 0045A447 . 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] 0045A44A . 51 PUSH ECX 0045A44B . FF90 04030000 CALL DWORD PTR DS:[EAX+304] 0045A451 . 50 PUSH EAX 0045A452 . 8D55 AC LEA EDX,DWORD PTR SS:[EBP-54] 0045A455 . 52 PUSH EDX 0045A456 . FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>; MSVBVM50.__vbaObjSet 0045A45C . 8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX 0045A462 . 8D45 BC LEA EAX,DWORD PTR SS:[EBP-44] 0045A465 . 50 PUSH EAX 0045A466 . 8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8] 0045A46C . 8B11 MOV EDX,DWORD PTR DS:[ECX] 0045A46E . 8B85 18FFFFFF MOV EAX,DWORD PTR SS:[EBP-E8] 0045A474 . 50 PUSH EAX 0045A475 . FF92 A0000000 CALL DWORD PTR DS:[EDX+A0] 0045A47B . 8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX 0045A481 . 83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0 0045A488 . 7D 26 JGE SHORT monster_.0045A4B0 0045A48A . 68 A0000000 PUSH 0A0 0045A48F . 68 44CF4000 PUSH monster_.0040CF44 0045A494 . 8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8] 0045A49A . 51 PUSH ECX 0045A49B . 8B95 14FFFFFF MOV EDX,DWORD PTR SS:[EBP-EC] 0045A4A1 . 52 PUSH EDX 0045A4A2 . FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>; MSVBVM50.__vbaHresultCheckObj 0045A4A8 . 8985 F8FEFFFF MOV DWORD PTR SS:[EBP-108],EAX 0045A4AE . EB 0A JMP SHORT monster_.0045A4BA 0045A4B0 > C785 F8FEFFFF>MOV DWORD PTR SS:[EBP-108],0 0045A4BA > 8B45 BC MOV EAX,DWORD PTR SS:[EBP-44] ; //用户名 0045A4BD . 50 PUSH EAX 0045A4BE . FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>; MSVBVM50.rtcTrimBstr 0045A4C4 . 8BD0 MOV EDX,EAX 0045A4C6 . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38] 0045A4C9 . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045A4CF . 8D4D BC LEA ECX,DWORD PTR SS:[EBP-44] 0045A4D2 . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 0045A4D8 . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045A4DB . FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>; MSVBVM50.__vbaFreeObj 0045A4E1 . C745 FC 04000>MOV DWORD PTR SS:[EBP-4],4 0045A4E8 . 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] 0045A4EB . 8B11 MOV EDX,DWORD PTR DS:[ECX] 0045A4ED . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 0045A4F0 . 50 PUSH EAX 0045A4F1 . FF92 08030000 CALL DWORD PTR DS:[EDX+308] 0045A4F7 . 50 PUSH EAX 0045A4F8 . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045A4FB . 51 PUSH ECX 0045A4FC . FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>; MSVBVM50.__vbaObjSet 0045A502 . 8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX 0045A508 . 8D55 BC LEA EDX,DWORD PTR SS:[EBP-44] 0045A50B . 52 PUSH EDX 0045A50C . 8B85 18FFFFFF MOV EAX,DWORD PTR SS:[EBP-E8] 0045A512 . 8B08 MOV ECX,DWORD PTR DS:[EAX] 0045A514 . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045A51A . 52 PUSH EDX 0045A51B . FF91 A0000000 CALL DWORD PTR DS:[ECX+A0] 0045A521 . 8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX 0045A527 . 83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0 0045A52E . 7D 26 JGE SHORT monster_.0045A556 0045A530 . 68 A0000000 PUSH 0A0 0045A535 . 68 44CF4000 PUSH monster_.0040CF44 0045A53A . 8B85 18FFFFFF MOV EAX,DWORD PTR SS:[EBP-E8] 0045A540 . 50 PUSH EAX 0045A541 . 8B8D 14FFFFFF MOV ECX,DWORD PTR SS:[EBP-EC] 0045A547 . 51 PUSH ECX 0045A548 . FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>; MSVBVM50.__vbaHresultCheckObj 0045A54E . 8985 F4FEFFFF MOV DWORD PTR SS:[EBP-10C],EAX 0045A554 . EB 0A JMP SHORT monster_.0045A560 0045A556 > C785 F4FEFFFF>MOV DWORD PTR SS:[EBP-10C],0 0045A560 > 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38] ; //用户名 0045A563 . 52 PUSH EDX 0045A564 . 68 38814000 PUSH monster_.00408138 0045A569 . FF15 D8434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCm>; MSVBVM50.__vbaStrCmp 0045A56F . 8BF0 MOV ESI,EAX 0045A571 . F7DE NEG ESI 0045A573 . 1BF6 SBB ESI,ESI 0045A575 . 46 INC ESI 0045A576 . F7DE NEG ESI 0045A578 . 8B45 BC MOV EAX,DWORD PTR SS:[EBP-44] ; //试炼码 0045A57B . 50 PUSH EAX 0045A57C . FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>; MSVBVM50.rtcTrimBstr 0045A582 . 8BD0 MOV EDX,EAX 0045A584 . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48] 0045A587 . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045A58D . 50 PUSH EAX 0045A58E . 68 38814000 PUSH monster_.00408138 0045A593 . FF15 D8434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCm>; MSVBVM50.__vbaStrCmp 0045A599 . F7D8 NEG EAX 0045A59B . 1BC0 SBB EAX,EAX 0045A59D . 40 INC EAX 0045A59E . F7D8 NEG EAX 0045A5A0 . 66:0BF0 OR SI,AX 0045A5A3 . 66:89B5 10FFF>MOV WORD PTR SS:[EBP-F0],SI 0045A5AA . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48] 0045A5AD . 51 PUSH ECX 0045A5AE . 8D55 BC LEA EDX,DWORD PTR SS:[EBP-44] 0045A5B1 . 52 PUSH EDX 0045A5B2 . 6A 02 PUSH 2 0045A5B4 . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 0045A5BA . 83C4 0C ADD ESP,0C 0045A5BD . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045A5C0 . FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>; MSVBVM50.__vbaFreeObj 0045A5C6 . 0FBF85 10FFFF>MOVSX EAX,WORD PTR SS:[EBP-F0] 0045A5CD . 85C0 TEST EAX,EAX 0045A5CF . 0F84 3A010000 JE monster_.0045A70F 0045A5D5 . C745 FC 05000>MOV DWORD PTR SS:[EBP-4],5 0045A5DC . C785 74FFFFFF>MOV DWORD PTR SS:[EBP-8C],80020004 0045A5E6 . C785 6CFFFFFF>MOV DWORD PTR SS:[EBP-94],0A 0045A5F0 . C745 84 04000>MOV DWORD PTR SS:[EBP-7C],80020004 0045A5F7 . C785 7CFFFFFF>MOV DWORD PTR SS:[EBP-84],0A 0045A601 . C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],monster_.0040D>; UNICODE "Error" 0045A60B . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],8 0045A615 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4] 0045A61B . 8D4D 8C LEA ECX,DWORD PTR SS:[EBP-74] 0045A61E . FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>; MSVBVM50.__vbaVarDup 0045A624 . C785 64FFFFFF>MOV DWORD PTR SS:[EBP-9C],monster_.0040C>; UNICODE "Please enter the person or business name this program is licensed to and the unlock code provided to" 0045A62E . C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],8 0045A638 . 8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4] 0045A63E . 8D4D 9C LEA ECX,DWORD PTR SS:[EBP-64] 0045A641 . FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>; MSVBVM50.__vbaVarDup 0045A647 . 8D8D 6CFFFFFF LEA ECX,DWORD PTR SS:[EBP-94] 0045A64D . 51 PUSH ECX 0045A64E . 8D95 7CFFFFFF LEA EDX,DWORD PTR SS:[EBP-84] 0045A654 . 52 PUSH EDX 0045A655 . 8D45 8C LEA EAX,DWORD PTR SS:[EBP-74] 0045A658 . 50 PUSH EAX 0045A659 . 6A 10 PUSH 10 0045A65B . 8D4D 9C LEA ECX,DWORD PTR SS:[EBP-64] 0045A65E . 51 PUSH ECX 0045A65F . FF15 74434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMsgBox>>; MSVBVM50.rtcMsgBox 0045A665 . 8D95 6CFFFFFF LEA EDX,DWORD PTR SS:[EBP-94] 0045A66B . 52 PUSH EDX 0045A66C . 8D85 7CFFFFFF LEA EAX,DWORD PTR SS:[EBP-84] 0045A672 . 50 PUSH EAX 0045A673 . 8D4D 8C LEA ECX,DWORD PTR SS:[EBP-74] 0045A676 . 51 PUSH ECX 0045A677 . 8D55 9C LEA EDX,DWORD PTR SS:[EBP-64] 0045A67A . 52 PUSH EDX 0045A67B . 6A 04 PUSH 4 0045A67D . FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVarList 0045A683 . 83C4 14 ADD ESP,14 0045A686 . C745 FC 06000>MOV DWORD PTR SS:[EBP-4],6 0045A68D . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 0045A690 . 8B08 MOV ECX,DWORD PTR DS:[EAX] 0045A692 . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8] 0045A695 . 52 PUSH EDX 0045A696 . FF91 04030000 CALL DWORD PTR DS:[ECX+304] 0045A69C . 50 PUSH EAX 0045A69D . 8D45 AC LEA EAX,DWORD PTR SS:[EBP-54] 0045A6A0 . 50 PUSH EAX 0045A6A1 . FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>; MSVBVM50.__vbaObjSet 0045A6A7 . 8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX 0045A6AD . 8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8] 0045A6B3 . 8B11 MOV EDX,DWORD PTR DS:[ECX] 0045A6B5 . 8B85 18FFFFFF MOV EAX,DWORD PTR SS:[EBP-E8] 0045A6BB . 50 PUSH EAX 0045A6BC . FF92 04020000 CALL DWORD PTR DS:[EDX+204] 0045A6C2 . 8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX 0045A6C8 . 83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0 0045A6CF . 7D 26 JGE SHORT monster_.0045A6F7 0045A6D1 . 68 04020000 PUSH 204 0045A6D6 . 68 44CF4000 PUSH monster_.0040CF44 0045A6DB . 8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8] 0045A6E1 . 51 PUSH ECX 0045A6E2 . 8B95 14FFFFFF MOV EDX,DWORD PTR SS:[EBP-EC] 0045A6E8 . 52 PUSH EDX 0045A6E9 . FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>; MSVBVM50.__vbaHresultCheckObj 0045A6EF . 8985 F0FEFFFF MOV DWORD PTR SS:[EBP-110],EAX 0045A6F5 . EB 0A JMP SHORT monster_.0045A701 0045A6F7 > C785 F0FEFFFF>MOV DWORD PTR SS:[EBP-110],0 0045A701 > 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045A704 . FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>; MSVBVM50.__vbaFreeObj 0045A70A . E9 CC080000 JMP monster_.0045AFDB 0045A70F > C745 FC 09000>MOV DWORD PTR SS:[EBP-4],9 0045A716 . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 0045A719 . 8B08 MOV ECX,DWORD PTR DS:[EAX] 0045A71B . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8] 0045A71E . 52 PUSH EDX 0045A71F . FF91 08030000 CALL DWORD PTR DS:[ECX+308] 0045A725 . 50 PUSH EAX 0045A726 . 8D45 AC LEA EAX,DWORD PTR SS:[EBP-54] 0045A729 . 50 PUSH EAX 0045A72A . FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>; MSVBVM50.__vbaObjSet 0045A730 . 8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX 0045A736 . 8D4D BC LEA ECX,DWORD PTR SS:[EBP-44] 0045A739 . 51 PUSH ECX 0045A73A . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045A740 . 8B02 MOV EAX,DWORD PTR DS:[EDX] 0045A742 . 8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8] 0045A748 . 51 PUSH ECX 0045A749 . FF90 A0000000 CALL DWORD PTR DS:[EAX+A0] 0045A74F . 8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX 0045A755 . 83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0 0045A75C . 7D 26 JGE SHORT monster_.0045A784 0045A75E . 68 A0000000 PUSH 0A0 0045A763 . 68 44CF4000 PUSH monster_.0040CF44 0045A768 . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045A76E . 52 PUSH EDX 0045A76F . 8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC] 0045A775 . 50 PUSH EAX 0045A776 . FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>; MSVBVM50.__vbaHresultCheckObj 0045A77C . 8985 ECFEFFFF MOV DWORD PTR SS:[EBP-114],EAX 0045A782 . EB 0A JMP SHORT monster_.0045A78E 0045A784 > C785 ECFEFFFF>MOV DWORD PTR SS:[EBP-114],0 0045A78E > 8B4D BC MOV ECX,DWORD PTR SS:[EBP-44] ; //试炼码 0045A791 . 51 PUSH ECX 0045A792 . FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>; MSVBVM50.rtcTrimBstr 0045A798 . 8BD0 MOV EDX,EAX 0045A79A . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48] 0045A79D . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045A7A3 . 50 PUSH EAX 0045A7A4 . FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>; MSVBVM50.rtcUpperCaseBstr 0045A7AA . 8BD0 MOV EDX,EAX ; //试炼码 0045A7AC . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 0045A7AF . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045A7B5 . 50 PUSH EAX ; //试炼码 0045A7B6 . 68 C0764000 PUSH monster_.004076C0 ; UNICODE "2552" 0045A7BB . FF15 D8434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCm>; MSVBVM50.__vbaStrCmp 0045A7C1 . F7D8 NEG EAX 0045A7C3 . 1BC0 SBB EAX,EAX 0045A7C5 . 40 INC EAX 0045A7C6 . F7D8 NEG EAX 0045A7C8 . 33D2 XOR EDX,EDX 0045A7CA . 66:833D 64014>CMP WORD PTR DS:[460164],0FFFF 0045A7D2 . 0F94C2 SETE DL 0045A7D5 . F7DA NEG EDX 0045A7D7 . 66:23C2 AND AX,DX 0045A7DA . 66:8985 10FFF>MOV WORD PTR SS:[EBP-F0],AX 0045A7E1 . 8D45 B4 LEA EAX,DWORD PTR SS:[EBP-4C] 0045A7E4 . 50 PUSH EAX 0045A7E5 . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48] 0045A7E8 . 51 PUSH ECX 0045A7E9 . 8D55 BC LEA EDX,DWORD PTR SS:[EBP-44] 0045A7EC . 52 PUSH EDX 0045A7ED . 6A 03 PUSH 3 0045A7EF . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 0045A7F5 . 83C4 10 ADD ESP,10 0045A7F8 . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045A7FB . FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>; MSVBVM50.__vbaFreeObj 0045A801 . 0FBF85 10FFFF>MOVSX EAX,WORD PTR SS:[EBP-F0] 0045A808 . 85C0 TEST EAX,EAX 0045A80A . 0F84 BA000000 JE monster_.0045A8CA 0045A810 . C745 FC 0A000>MOV DWORD PTR SS:[EBP-4],0A 0045A817 . BA CCD04000 MOV EDX,monster_.0040D0CC ; UNICODE "The temporary (30-day) registration code for this license has already been entered." 0045A81C . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24] 0045A81F . FF15 98444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCo>; MSVBVM50.__vbaStrCopy 0045A825 . C745 FC 0B000>MOV DWORD PTR SS:[EBP-4],0B 0045A82C . C745 84 04000>MOV DWORD PTR SS:[EBP-7C],80020004 0045A833 . C785 7CFFFFFF>MOV DWORD PTR SS:[EBP-84],0A 0045A83D . C745 94 04000>MOV DWORD PTR SS:[EBP-6C],80020004 0045A844 . C745 8C 0A000>MOV DWORD PTR SS:[EBP-74],0A 0045A84B . C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],monster_.0040D>; UNICODE "Code Invalid" 0045A855 . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],8 0045A85F . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4] 0045A865 . 8D4D 9C LEA ECX,DWORD PTR SS:[EBP-64] 0045A868 . FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>; MSVBVM50.__vbaVarDup 0045A86E . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24] 0045A871 . 898D 64FFFFFF MOV DWORD PTR SS:[EBP-9C],ECX 0045A877 . C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],4008 0045A881 . 8D95 7CFFFFFF LEA EDX,DWORD PTR SS:[EBP-84] 0045A887 . 52 PUSH EDX 0045A888 . 8D45 8C LEA EAX,DWORD PTR SS:[EBP-74] 0045A88B . 50 PUSH EAX 0045A88C . 8D4D 9C LEA ECX,DWORD PTR SS:[EBP-64] 0045A88F . 51 PUSH ECX 0045A890 . 6A 10 PUSH 10 0045A892 . 8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4] 0045A898 . 52 PUSH EDX 0045A899 . FF15 74434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMsgBox>>; MSVBVM50.rtcMsgBox 0045A89F . 8D85 7CFFFFFF LEA EAX,DWORD PTR SS:[EBP-84] 0045A8A5 . 50 PUSH EAX 0045A8A6 . 8D4D 8C LEA ECX,DWORD PTR SS:[EBP-74] 0045A8A9 . 51 PUSH ECX 0045A8AA . 8D55 9C LEA EDX,DWORD PTR SS:[EBP-64] 0045A8AD . 52 PUSH EDX 0045A8AE . 6A 03 PUSH 3 0045A8B0 . FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVarList 0045A8B6 . 83C4 10 ADD ESP,10 0045A8B9 . C745 FC 0C000>MOV DWORD PTR SS:[EBP-4],0C 0045A8C0 . E8 7B88FFFF CALL monster_.00453140 0045A8C5 . E9 67060000 JMP monster_.0045AF31 0045A8CA > C745 FC 0D000>MOV DWORD PTR SS:[EBP-4],0D 0045A8D1 . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 0045A8D4 . 8B08 MOV ECX,DWORD PTR DS:[EAX] 0045A8D6 . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8] 0045A8D9 . 52 PUSH EDX 0045A8DA . FF91 08030000 CALL DWORD PTR DS:[ECX+308] 0045A8E0 . 50 PUSH EAX 0045A8E1 . 8D45 AC LEA EAX,DWORD PTR SS:[EBP-54] 0045A8E4 . 50 PUSH EAX 0045A8E5 . FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>; MSVBVM50.__vbaObjSet 0045A8EB . 8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX 0045A8F1 . 8D4D BC LEA ECX,DWORD PTR SS:[EBP-44] 0045A8F4 . 51 PUSH ECX 0045A8F5 . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045A8FB . 8B02 MOV EAX,DWORD PTR DS:[EDX] 0045A8FD . 8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8] 0045A903 . 51 PUSH ECX 0045A904 . FF90 A0000000 CALL DWORD PTR DS:[EAX+A0] 0045A90A . 8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX 0045A910 . 83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0 0045A917 . 7D 26 JGE SHORT monster_.0045A93F 0045A919 . 68 A0000000 PUSH 0A0 0045A91E . 68 44CF4000 PUSH monster_.0040CF44 0045A923 . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045A929 . 52 PUSH EDX 0045A92A . 8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC] 0045A930 . 50 PUSH EAX 0045A931 . FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>; MSVBVM50.__vbaHresultCheckObj 0045A937 . 8985 E8FEFFFF MOV DWORD PTR SS:[EBP-118],EAX 0045A93D . EB 0A JMP SHORT monster_.0045A949 0045A93F > C785 E8FEFFFF>MOV DWORD PTR SS:[EBP-118],0 0045A949 > 8B4D BC MOV ECX,DWORD PTR SS:[EBP-44] ; //试炼码 0045A94C . 51 PUSH ECX 0045A94D . FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>; MSVBVM50.rtcTrimBstr 0045A953 . 8BD0 MOV EDX,EAX 0045A955 . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48] 0045A958 . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045A95E . 50 PUSH EAX 0045A95F . FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>; MSVBVM50.rtcUpperCaseBstr 0045A965 . 8BD0 MOV EDX,EAX 0045A967 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 0045A96A . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045A970 . 50 PUSH EAX ; //试炼码 0045A971 . 68 C0764000 PUSH monster_.004076C0 ; UNICODE "2552" 0045A976 . FF15 D8434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCm>; MSVBVM50.__vbaStrCmp 0045A97C . F7D8 NEG EAX 0045A97E . 1BC0 SBB EAX,EAX 0045A980 . 40 INC EAX 0045A981 . F7D8 NEG EAX 0045A983 . 66:8985 10FFF>MOV WORD PTR SS:[EBP-F0],AX 0045A98A . 8D55 B4 LEA EDX,DWORD PTR SS:[EBP-4C] 0045A98D . 52 PUSH EDX 0045A98E . 8D45 B8 LEA EAX,DWORD PTR SS:[EBP-48] 0045A991 . 50 PUSH EAX 0045A992 . 8D4D BC LEA ECX,DWORD PTR SS:[EBP-44] 0045A995 . 51 PUSH ECX 0045A996 . 6A 03 PUSH 3 0045A998 . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 0045A99E . 83C4 10 ADD ESP,10 0045A9A1 . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045A9A4 . FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>; MSVBVM50.__vbaFreeObj 0045A9AA . 0FBF95 10FFFF>MOVSX EDX,WORD PTR SS:[EBP-F0] 0045A9B1 . 85D2 TEST EDX,EDX 0045A9B3 . 0F84 EA010000 JE monster_.0045ABA3 0045A9B9 . C745 FC 0E000>MOV DWORD PTR SS:[EBP-4],0E 0045A9C0 . 68 98D14000 PUSH monster_.0040D198 ; UNICODE "License this copy to: " 0045A9C5 . 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38] 0045A9C8 . 50 PUSH EAX 0045A9C9 . FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>; MSVBVM50.__vbaStrCat 0045A9CF . 8BD0 MOV EDX,EAX 0045A9D1 . 8D4D BC LEA ECX,DWORD PTR SS:[EBP-44] 0045A9D4 . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045A9DA . 50 PUSH EAX 0045A9DB . 68 CCD14000 PUSH monster_.0040D1CC ; UNICODE "? " 0045A9E0 . FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>; MSVBVM50.__vbaStrCat 0045A9E6 . 8BD0 MOV EDX,EAX 0045A9E8 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24] 0045A9EB . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045A9F1 . 8D4D BC LEA ECX,DWORD PTR SS:[EBP-44] 0045A9F4 . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 0045A9FA . C745 FC 0F000>MOV DWORD PTR SS:[EBP-4],0F 0045AA01 . 8B4D DC MOV ECX,DWORD PTR SS:[EBP-24] 0045AA04 . 51 PUSH ECX 0045AA05 . 68 D8D14000 PUSH monster_.0040D1D8 ; UNICODE "(Select NO to make corrections.)" 0045AA0A . FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>; MSVBVM50.__vbaStrCat 0045AA10 . 8BD0 MOV EDX,EAX 0045AA12 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24] 0045AA15 . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045AA1B . C745 FC 10000>MOV DWORD PTR SS:[EBP-4],10 0045AA22 . C745 84 04000>MOV DWORD PTR SS:[EBP-7C],80020004 0045AA29 . C785 7CFFFFFF>MOV DWORD PTR SS:[EBP-84],0A 0045AA33 . C745 94 04000>MOV DWORD PTR SS:[EBP-6C],80020004 0045AA3A . C745 8C 0A000>MOV DWORD PTR SS:[EBP-74],0A 0045AA41 . C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],monster_.0040D>; UNICODE "REGISTER TO..." 0045AA4B . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],8 0045AA55 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4] 0045AA5B . 8D4D 9C LEA ECX,DWORD PTR SS:[EBP-64] 0045AA5E . FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>; MSVBVM50.__vbaVarDup 0045AA64 . 8D55 DC LEA EDX,DWORD PTR SS:[EBP-24] 0045AA67 . 8995 64FFFFFF MOV DWORD PTR SS:[EBP-9C],EDX 0045AA6D . C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],4008 0045AA77 . 8D85 7CFFFFFF LEA EAX,DWORD PTR SS:[EBP-84] 0045AA7D . 50 PUSH EAX 0045AA7E . 8D4D 8C LEA ECX,DWORD PTR SS:[EBP-74] 0045AA81 . 51 PUSH ECX 0045AA82 . 8D55 9C LEA EDX,DWORD PTR SS:[EBP-64] 0045AA85 . 52 PUSH EDX 0045AA86 . 6A 24 PUSH 24 0045AA88 . 8D85 5CFFFFFF LEA EAX,DWORD PTR SS:[EBP-A4] 0045AA8E . 50 PUSH EAX 0045AA8F . FF15 74434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMsgBox>>; MSVBVM50.rtcMsgBox 0045AA95 . 8985 24FFFFFF MOV DWORD PTR SS:[EBP-DC],EAX 0045AA9B . C785 1CFFFFFF>MOV DWORD PTR SS:[EBP-E4],3 0045AAA5 . 8D95 1CFFFFFF LEA EDX,DWORD PTR SS:[EBP-E4] 0045AAAB . 8D4D CC LEA ECX,DWORD PTR SS:[EBP-34] 0045AAAE . FF15 D8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarMo>; MSVBVM50.__vbaVarMove 0045AAB4 . 8D8D 7CFFFFFF LEA ECX,DWORD PTR SS:[EBP-84] 0045AABA . 51 PUSH ECX 0045AABB . 8D55 8C LEA EDX,DWORD PTR SS:[EBP-74] 0045AABE . 52 PUSH EDX 0045AABF . 8D45 9C LEA EAX,DWORD PTR SS:[EBP-64] 0045AAC2 . 50 PUSH EAX 0045AAC3 . 6A 03 PUSH 3 0045AAC5 . FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVarList 0045AACB . 83C4 10 ADD ESP,10 0045AACE . C745 FC 11000>MOV DWORD PTR SS:[EBP-4],11 0045AAD5 . C785 64FFFFFF>MOV DWORD PTR SS:[EBP-9C],7 0045AADF . C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],8002 0045AAE9 . 8D4D CC LEA ECX,DWORD PTR SS:[EBP-34] 0045AAEC . 51 PUSH ECX 0045AAED . 8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4] 0045AAF3 . 52 PUSH EDX 0045AAF4 . FF15 E0434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarTs>; MSVBVM50.__vbaVarTstEq 0045AAFA . 0FBFC0 MOVSX EAX,AX 0045AAFD . 85C0 TEST EAX,EAX 0045AAFF . 0F84 89000000 JE monster_.0045AB8E 0045AB05 . C745 FC 12000>MOV DWORD PTR SS:[EBP-4],12 0045AB0C . 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] 0045AB0F . 8B11 MOV EDX,DWORD PTR DS:[ECX] 0045AB11 . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 0045AB14 . 50 PUSH EAX 0045AB15 . FF92 04030000 CALL DWORD PTR DS:[EDX+304] 0045AB1B . 50 PUSH EAX 0045AB1C . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045AB1F . 51 PUSH ECX 0045AB20 . FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>; MSVBVM50.__vbaObjSet 0045AB26 . 8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX 0045AB2C . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045AB32 . 8B02 MOV EAX,DWORD PTR DS:[EDX] 0045AB34 . 8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8] 0045AB3A . 51 PUSH ECX 0045AB3B . FF90 04020000 CALL DWORD PTR DS:[EAX+204] 0045AB41 . 8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX 0045AB47 . 83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0 0045AB4E . 7D 26 JGE SHORT monster_.0045AB76 0045AB50 . 68 04020000 PUSH 204 0045AB55 . 68 44CF4000 PUSH monster_.0040CF44 0045AB5A . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045AB60 . 52 PUSH EDX 0045AB61 . 8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC] 0045AB67 . 50 PUSH EAX 0045AB68 . FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>; MSVBVM50.__vbaHresultCheckObj 0045AB6E . 8985 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EAX 0045AB74 . EB 0A JMP SHORT monster_.0045AB80 0045AB76 > C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],0 0045AB80 > 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045AB83 . FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>; MSVBVM50.__vbaFreeObj 0045AB89 . E9 4D040000 JMP monster_.0045AFDB 0045AB8E > C745 FC 15000>MOV DWORD PTR SS:[EBP-4],15 0045AB95 . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38] 0045AB98 . 51 PUSH ECX 0045AB99 . E8 6247FFFF CALL monster_.0044F300 0045AB9E . E9 8E030000 JMP monster_.0045AF31 0045ABA3 > C745 FC 17000>MOV DWORD PTR SS:[EBP-4],17 0045ABAA . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38] ; //用户名 0045ABAD . 8D4D C0 LEA ECX,DWORD PTR SS:[EBP-40] 0045ABB0 . FF15 98444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCo>; MSVBVM50.__vbaStrCopy 0045ABB6 . C745 FC 18000>MOV DWORD PTR SS:[EBP-4],18 0045ABBD . 8D55 C0 LEA EDX,DWORD PTR SS:[EBP-40] 0045ABC0 . 52 PUSH EDX 0045ABC1 . E8 FA9FFFFF CALL monster_.00454BC0 ; //算法CALL 0045ABC6 . 8BD0 MOV EDX,EAX ; //真码 0045ABC8 . 8D4D C4 LEA ECX,DWORD PTR SS:[EBP-3C] 0045ABCB . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045ABD1 . C745 FC 19000>MOV DWORD PTR SS:[EBP-4],19 0045ABD8 . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 0045ABDB . 8B08 MOV ECX,DWORD PTR DS:[EAX] 0045ABDD . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8] 0045ABE0 . 52 PUSH EDX 0045ABE1 . FF91 08030000 CALL DWORD PTR DS:[ECX+308] 0045ABE7 . 50 PUSH EAX 0045ABE8 . 8D45 AC LEA EAX,DWORD PTR SS:[EBP-54] 0045ABEB . 50 PUSH EAX 0045ABEC . FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>; MSVBVM50.__vbaObjSet 0045ABF2 . 8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX 0045ABF8 . 8D4D BC LEA ECX,DWORD PTR SS:[EBP-44] 0045ABFB . 51 PUSH ECX 0045ABFC . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045AC02 . 8B02 MOV EAX,DWORD PTR DS:[EDX] 0045AC04 . 8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8] 0045AC0A . 51 PUSH ECX 0045AC0B . FF90 A0000000 CALL DWORD PTR DS:[EAX+A0] 0045AC11 . 8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX 0045AC17 . 83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0 0045AC1E . 7D 26 JGE SHORT monster_.0045AC46 0045AC20 . 68 A0000000 PUSH 0A0 0045AC25 . 68 44CF4000 PUSH monster_.0040CF44 0045AC2A . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045AC30 . 52 PUSH EDX 0045AC31 . 8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC] 0045AC37 . 50 PUSH EAX 0045AC38 . FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>; MSVBVM50.__vbaHresultCheckObj 0045AC3E . 8985 E0FEFFFF MOV DWORD PTR SS:[EBP-120],EAX 0045AC44 . EB 0A JMP SHORT monster_.0045AC50 0045AC46 > C785 E0FEFFFF>MOV DWORD PTR SS:[EBP-120],0 0045AC50 > 8B4D BC MOV ECX,DWORD PTR SS:[EBP-44] ; //试炼码 0045AC53 . 51 PUSH ECX 0045AC54 . FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>; MSVBVM50.rtcTrimBstr 0045AC5A . 8BD0 MOV EDX,EAX 0045AC5C . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48] 0045AC5F . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045AC65 . 50 PUSH EAX 0045AC66 . FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>; MSVBVM50.rtcUpperCaseBstr 0045AC6C . 8BD0 MOV EDX,EAX 0045AC6E . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 0045AC71 . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045AC77 . 50 PUSH EAX 0045AC78 . 8B55 C4 MOV EDX,DWORD PTR SS:[EBP-3C] ; //真码 0045AC7B . 52 PUSH EDX 0045AC7C . FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>; MSVBVM50.rtcUpperCaseBstr 0045AC82 . 8BD0 MOV EDX,EAX 0045AC84 . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 0045AC87 . FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>; MSVBVM50.__vbaStrMove 0045AC8D . 50 PUSH EAX 0045AC8E . FF15 D8434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCm>; MSVBVM50.__vbaStrCmp //关键比较 0045AC94 . F7D8 NEG EAX 0045AC96 . 1BC0 SBB EAX,EAX 0045AC98 . 40 INC EAX 0045AC99 . F7D8 NEG EAX 0045AC9B . 66:8985 10FFF>MOV WORD PTR SS:[EBP-F0],AX 0045ACA2 . 8D45 B0 LEA EAX,DWORD PTR SS:[EBP-50] 0045ACA5 . 50 PUSH EAX 0045ACA6 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 0045ACA9 . 51 PUSH ECX 0045ACAA . 8D55 B8 LEA EDX,DWORD PTR SS:[EBP-48] 0045ACAD . 52 PUSH EDX 0045ACAE . 8D45 BC LEA EAX,DWORD PTR SS:[EBP-44] 0045ACB1 . 50 PUSH EAX 0045ACB2 . 6A 04 PUSH 4 0045ACB4 . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 0045ACBA . 83C4 14 ADD ESP,14 0045ACBD . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045ACC0 . FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>; MSVBVM50.__vbaFreeObj 0045ACC6 . 0FBF8D 10FFFF>MOVSX ECX,WORD PTR SS:[EBP-F0] 0045ACCD . 85C9 TEST ECX,ECX 0045ACCF . 74 15 JE SHORT monster_.0045ACE6 ; //关键跳转 0045ACD1 . C745 FC 1A000>MOV DWORD PTR SS:[EBP-4],1A 0045ACD8 . 8D55 C8 LEA EDX,DWORD PTR SS:[EBP-38] 0045ACDB . 52 PUSH EDX 0045ACDC . E8 9F4DFFFF CALL monster_.0044FA80 0045ACE1 . E9 4B020000 JMP monster_.0045AF31 0045ACE6 > C745 FC 1C000>MOV DWORD PTR SS:[EBP-4],1C 0045ACED . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 0045ACF0 . 8B08 MOV ECX,DWORD PTR DS:[EAX] 0045ACF2 . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8] 0045ACF5 . 52 PUSH EDX 0045ACF6 . FF91 08030000 CALL DWORD PTR DS:[ECX+308] 0045ACFC . 8945 A4 MOV DWORD PTR SS:[EBP-5C],EAX 0045ACFF . C745 9C 09000>MOV DWORD PTR SS:[EBP-64],9 0045AD06 . 8D45 9C LEA EAX,DWORD PTR SS:[EBP-64] 0045AD09 . 50 PUSH EAX 0045AD0A . 8D4D 8C LEA ECX,DWORD PTR SS:[EBP-74] 0045AD0D . 51 PUSH ECX 0045AD0E . FF15 90434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimVar>; MSVBVM50.rtcTrimVar 0045AD14 . C785 64FFFFFF>MOV DWORD PTR SS:[EBP-9C],monster_.00408> 0045AD1E . C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],8008 0045AD28 . 8D55 8C LEA EDX,DWORD PTR SS:[EBP-74] 0045AD2B . 52 PUSH EDX 0045AD2C . 8D85 5CFFFFFF LEA EAX,DWORD PTR SS:[EBP-A4] 0045AD32 . 50 PUSH EAX 0045AD33 . FF15 C0444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarTs>; MSVBVM50.__vbaVarTstNe 0045AD39 . 66:8985 18FFF>MOV WORD PTR SS:[EBP-E8],AX 0045AD40 . 8D4D 8C LEA ECX,DWORD PTR SS:[EBP-74] 0045AD43 . 51 PUSH ECX 0045AD44 . 8D55 9C LEA EDX,DWORD PTR SS:[EBP-64] 0045AD47 . 52 PUSH EDX 0045AD48 . 6A 02 PUSH 2 0045AD4A . FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVarList 0045AD50 . 83C4 0C ADD ESP,0C 0045AD53 . 0FBF85 18FFFF>MOVSX EAX,WORD PTR SS:[EBP-E8] 0045AD5A . 85C0 TEST EAX,EAX 0045AD5C . 0F84 B1000000 JE monster_.0045AE13 0045AD62 . C745 FC 1D000>MOV DWORD PTR SS:[EBP-4],1D 0045AD69 . C785 74FFFFFF>MOV DWORD PTR SS:[EBP-8C],80020004 0045AD73 . C785 6CFFFFFF>MOV DWORD PTR SS:[EBP-94],0A 0045AD7D . C745 84 04000>MOV DWORD PTR SS:[EBP-7C],80020004 0045AD84 . C785 7CFFFFFF>MOV DWORD PTR SS:[EBP-84],0A 0045AD8E . C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],monster_.0040D>; UNICODE "INVALID CODE" 0045AD98 . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],8 0045ADA2 . 8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4] 0045ADA8 . 8D4D 8C LEA ECX,DWORD PTR SS:[EBP-74] 0045ADAB . FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>; MSVBVM50.__vbaVarDup 0045ADB1 . C785 64FFFFFF>MOV DWORD PTR SS:[EBP-9C],monster_.0040D>; UNICODE "Unlock Code and/or Licensee Name invalid." 0045ADBB . C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],8 0045ADC5 . 8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4] 0045ADCB . 8D4D 9C LEA ECX,DWORD PTR SS:[EBP-64] 0045ADCE . FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>; MSVBVM50.__vbaVarDup 0045ADD4 . 8D8D 6CFFFFFF LEA ECX,DWORD PTR SS:[EBP-94] 0045ADDA . 51 PUSH ECX 0045ADDB . 8D95 7CFFFFFF LEA EDX,DWORD PTR SS:[EBP-84] 0045ADE1 . 52 PUSH EDX 0045ADE2 . 8D45 8C LEA EAX,DWORD PTR SS:[EBP-74] 0045ADE5 . 50 PUSH EAX 0045ADE6 . 6A 30 PUSH 30 0045ADE8 . 8D4D 9C LEA ECX,DWORD PTR SS:[EBP-64] 0045ADEB . 51 PUSH ECX 0045ADEC . FF15 74434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMsgBox>>; MSVBVM50.rtcMsgBox //错误提示 0045ADF2 . 8D95 6CFFFFFF LEA EDX,DWORD PTR SS:[EBP-94] 0045ADF8 . 52 PUSH EDX 0045ADF9 . 8D85 7CFFFFFF LEA EAX,DWORD PTR SS:[EBP-84] 0045ADFF . 50 PUSH EAX 0045AE00 . 8D4D 8C LEA ECX,DWORD PTR SS:[EBP-74] 0045AE03 . 51 PUSH ECX 0045AE04 . 8D55 9C LEA EDX,DWORD PTR SS:[EBP-64] 0045AE07 . 52 PUSH EDX 0045AE08 . 6A 04 PUSH 4 0045AE0A . FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVarList 0045AE10 . 83C4 14 ADD ESP,14 0045AE13 > C745 FC 1F000>MOV DWORD PTR SS:[EBP-4],1F 0045AE1A . 833D 88014600>CMP DWORD PTR DS:[460188],0 0045AE21 . 75 1C JNZ SHORT monster_.0045AE3F 0045AE23 . 68 88014600 PUSH monster_.00460188 0045AE28 . 68 CC4E4000 PUSH monster_.00404ECC 0045AE2D . FF15 78444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaNew2>>; MSVBVM50.__vbaNew2 0045AE33 . C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],monster_.0046> 0045AE3D . EB 0A JMP SHORT monster_.0045AE49 0045AE3F > C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],monster_.0046> 0045AE49 > 8B85 DCFEFFFF MOV EAX,DWORD PTR SS:[EBP-124] 0045AE4F . 8B08 MOV ECX,DWORD PTR DS:[EAX] 0045AE51 . 898D 18FFFFFF MOV DWORD PTR SS:[EBP-E8],ECX 0045AE57 . C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],80020004 0045AE61 . C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],0A 0045AE6B . C785 64FFFFFF>MOV DWORD PTR SS:[EBP-9C],1 0045AE75 . C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],2 0045AE7F . B8 10000000 MOV EAX,10 0045AE84 . E8 F784FAFF CALL <JMP.&MSVBVM50.__vbaChkstk> 0045AE89 . 8BD4 MOV EDX,ESP 0045AE8B . 8B85 4CFFFFFF MOV EAX,DWORD PTR SS:[EBP-B4] 0045AE91 . 8902 MOV DWORD PTR DS:[EDX],EAX 0045AE93 . 8B8D 50FFFFFF MOV ECX,DWORD PTR SS:[EBP-B0] 0045AE99 . 894A 04 MOV DWORD PTR DS:[EDX+4],ECX 0045AE9C . 8B85 54FFFFFF MOV EAX,DWORD PTR SS:[EBP-AC] 0045AEA2 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX 0045AEA5 . 8B8D 58FFFFFF MOV ECX,DWORD PTR SS:[EBP-A8] 0045AEAB . 894A 0C MOV DWORD PTR DS:[EDX+C],ECX 0045AEAE . B8 10000000 MOV EAX,10 0045AEB3 . E8 C884FAFF CALL <JMP.&MSVBVM50.__vbaChkstk> 0045AEB8 . 8BD4 MOV EDX,ESP 0045AEBA . 8B85 5CFFFFFF MOV EAX,DWORD PTR SS:[EBP-A4] 0045AEC0 . 8902 MOV DWORD PTR DS:[EDX],EAX 0045AEC2 . 8B8D 60FFFFFF MOV ECX,DWORD PTR SS:[EBP-A0] 0045AEC8 . 894A 04 MOV DWORD PTR DS:[EDX+4],ECX 0045AECB . 8B85 64FFFFFF MOV EAX,DWORD PTR SS:[EBP-9C] 0045AED1 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX 0045AED4 . 8B8D 68FFFFFF MOV ECX,DWORD PTR SS:[EBP-98] 0045AEDA . 894A 0C MOV DWORD PTR DS:[EDX+C],ECX 0045AEDD . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045AEE3 . 8B02 MOV EAX,DWORD PTR DS:[EDX] 0045AEE5 . 8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8] 0045AEEB . 51 PUSH ECX 0045AEEC . FF90 B0020000 CALL DWORD PTR DS:[EAX+2B0] 0045AEF2 . 8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX 0045AEF8 . 83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0 0045AEFF . 7D 26 JGE SHORT monster_.0045AF27 0045AF01 . 68 B0020000 PUSH 2B0 0045AF06 . 68 64924000 PUSH monster_.00409264 0045AF0B . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045AF11 . 52 PUSH EDX 0045AF12 . 8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC] 0045AF18 . 50 PUSH EAX 0045AF19 . FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>; MSVBVM50.__vbaHresultCheckObj 0045AF1F . 8985 D8FEFFFF MOV DWORD PTR SS:[EBP-128],EAX 0045AF25 . EB 0A JMP SHORT monster_.0045AF31 0045AF27 > C785 D8FEFFFF>MOV DWORD PTR SS:[EBP-128],0 0045AF31 > C745 FC 22000>MOV DWORD PTR SS:[EBP-4],22 0045AF38 . 833D 440A4600>CMP DWORD PTR DS:[460A44],0 0045AF3F . 75 1C JNZ SHORT monster_.0045AF5D 0045AF41 . 68 440A4600 PUSH monster_.00460A44 0045AF46 . 68 D0864000 PUSH monster_.004086D0 0045AF4B . FF15 78444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaNew2>>; MSVBVM50.__vbaNew2 0045AF51 . C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],monster_.0046> 0045AF5B . EB 0A JMP SHORT monster_.0045AF67 0045AF5D > C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],monster_.0046> 0045AF67 > 8B8D D4FEFFFF MOV ECX,DWORD PTR SS:[EBP-12C] 0045AF6D . 8B11 MOV EDX,DWORD PTR DS:[ECX] 0045AF6F . 8995 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EDX 0045AF75 . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 0045AF78 . 50 PUSH EAX 0045AF79 . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045AF7C . 51 PUSH ECX 0045AF7D . FF15 80434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>; MSVBVM50.__vbaObjSetAddref 0045AF83 . 50 PUSH EAX 0045AF84 . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045AF8A . 8B02 MOV EAX,DWORD PTR DS:[EDX] 0045AF8C . 8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8] 0045AF92 . 51 PUSH ECX 0045AF93 . FF50 10 CALL DWORD PTR DS:[EAX+10] 0045AF96 . 8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX 0045AF9C . 83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0 0045AFA3 . 7D 23 JGE SHORT monster_.0045AFC8 0045AFA5 . 6A 10 PUSH 10 0045AFA7 . 68 C0864000 PUSH monster_.004086C0 0045AFAC . 8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8] 0045AFB2 . 52 PUSH EDX 0045AFB3 . 8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC] 0045AFB9 . 50 PUSH EAX 0045AFBA . FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>; MSVBVM50.__vbaHresultCheckObj 0045AFC0 . 8985 D0FEFFFF MOV DWORD PTR SS:[EBP-130],EAX 0045AFC6 . EB 0A JMP SHORT monster_.0045AFD2 0045AFC8 > C785 D0FEFFFF>MOV DWORD PTR SS:[EBP-130],0 0045AFD2 > 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045AFD5 . FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>; MSVBVM50.__vbaFreeObj 0045AFDB > C745 F0 00000>MOV DWORD PTR SS:[EBP-10],0 0045AFE2 . 68 5DB04500 PUSH monster_.0045B05D 0045AFE7 . EB 46 JMP SHORT monster_.0045B02F 0045AFE9 . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 0045AFEC . 51 PUSH ECX 0045AFED . 8D55 B4 LEA EDX,DWORD PTR SS:[EBP-4C] 0045AFF0 . 52 PUSH EDX 0045AFF1 . 8D45 B8 LEA EAX,DWORD PTR SS:[EBP-48] 0045AFF4 . 50 PUSH EAX 0045AFF5 . 8D4D BC LEA ECX,DWORD PTR SS:[EBP-44] 0045AFF8 . 51 PUSH ECX 0045AFF9 . 6A 04 PUSH 4 0045AFFB . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 0045B001 . 83C4 14 ADD ESP,14 0045B004 . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045B007 . FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>; MSVBVM50.__vbaFreeObj 0045B00D . 8D95 6CFFFFFF LEA EDX,DWORD PTR SS:[EBP-94] 0045B013 . 52 PUSH EDX 0045B014 . 8D85 7CFFFFFF LEA EAX,DWORD PTR SS:[EBP-84] 0045B01A . 50 PUSH EAX 0045B01B . 8D4D 8C LEA ECX,DWORD PTR SS:[EBP-74] 0045B01E . 51 PUSH ECX 0045B01F . 8D55 9C LEA EDX,DWORD PTR SS:[EBP-64] 0045B022 . 52 PUSH EDX 0045B023 . 6A 04 PUSH 4 0045B025 . FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVarList 0045B02B . 83C4 14 ADD ESP,14 0045B02E . C3 RETN 0045B02F > 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24] 0045B032 . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 0045B038 . 8D4D CC LEA ECX,DWORD PTR SS:[EBP-34] 0045B03B . FF15 E0424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVar 0045B041 . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38] 0045B044 . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 0045B04A . 8D4D C4 LEA ECX,DWORD PTR SS:[EBP-3C] 0045B04D . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 0045B053 . 8D4D C0 LEA ECX,DWORD PTR SS:[EBP-40] 0045B056 . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 0045B05C . C3 RETN 0045B05D . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 0045B060 . 8B08 MOV ECX,DWORD PTR DS:[EAX] 0045B062 . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8] 0045B065 . 52 PUSH EDX 0045B066 . FF51 08 CALL DWORD PTR DS:[ECX+8] 0045B069 . 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10] 0045B06C . 8B4D E0 MOV ECX,DWORD PTR SS:[EBP-20] 0045B06F . 64:890D 00000>MOV DWORD PTR FS:[0],ECX 0045B076 . 5F POP EDI 0045B077 . 5E POP ESI 0045B078 . 5B POP EBX 0045B079 . 8BE5 MOV ESP,EBP 0045B07B . 5D POP EBP 0045B07C . C2 0400 RETN 4
算法部分
代码:
00454BC0 $ 55 PUSH EBP 00454BC1 . 8BEC MOV EBP,ESP 00454BC3 . 83EC 0C SUB ESP,0C 00454BC6 . 68 86334000 PUSH <JMP.&MSVBVM50.__vbaExceptHandler> ; SE 处理程序安装 00454BCB . 64:A1 0000000>MOV EAX,DWORD PTR FS:[0] 00454BD1 . 50 PUSH EAX 00454BD2 . 64:8925 00000>MOV DWORD PTR FS:[0],ESP 00454BD9 . 81EC C0000000 SUB ESP,0C0 00454BDF . 53 PUSH EBX 00454BE0 . 56 PUSH ESI 00454BE1 . 57 PUSH EDI 00454BE2 . 8965 F4 MOV DWORD PTR SS:[EBP-C],ESP 00454BE5 . 33C0 XOR EAX,EAX 00454BE7 . 8B75 08 MOV ESI,DWORD PTR SS:[EBP+8] 00454BEA . 8945 E8 MOV DWORD PTR SS:[EBP-18],EAX 00454BED . 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX 00454BF0 . 8945 E0 MOV DWORD PTR SS:[EBP-20],EAX 00454BF3 . 8945 DC MOV DWORD PTR SS:[EBP-24],EAX 00454BF6 . 8945 D8 MOV DWORD PTR SS:[EBP-28],EAX 00454BF9 . 8945 D4 MOV DWORD PTR SS:[EBP-2C],EAX 00454BFC . 8945 D0 MOV DWORD PTR SS:[EBP-30],EAX 00454BFF . 8945 CC MOV DWORD PTR SS:[EBP-34],EAX 00454C02 . 8945 C8 MOV DWORD PTR SS:[EBP-38],EAX 00454C05 . 8945 C4 MOV DWORD PTR SS:[EBP-3C],EAX 00454C08 . 8945 C0 MOV DWORD PTR SS:[EBP-40],EAX 00454C0B . 8945 BC MOV DWORD PTR SS:[EBP-44],EAX 00454C0E . 8945 B8 MOV DWORD PTR SS:[EBP-48],EAX 00454C11 . 8945 B4 MOV DWORD PTR SS:[EBP-4C],EAX 00454C14 . 8945 B0 MOV DWORD PTR SS:[EBP-50],EAX 00454C17 . 8945 AC MOV DWORD PTR SS:[EBP-54],EAX 00454C1A . 8945 A8 MOV DWORD PTR SS:[EBP-58],EAX 00454C1D . 8945 98 MOV DWORD PTR SS:[EBP-68],EAX 00454C20 . 8945 88 MOV DWORD PTR SS:[EBP-78],EAX 00454C23 . 8985 78FFFFFF MOV DWORD PTR SS:[EBP-88],EAX 00454C29 . 8985 44FFFFFF MOV DWORD PTR SS:[EBP-BC],EAX 00454C2F . 8985 40FFFFFF MOV DWORD PTR SS:[EBP-C0],EAX 00454C35 . 8985 3CFFFFFF MOV DWORD PTR SS:[EBP-C4],EAX 00454C3B . 8985 38FFFFFF MOV DWORD PTR SS:[EBP-C8],EAX 00454C41 . 8985 34FFFFFF MOV DWORD PTR SS:[EBP-CC],EAX 00454C47 . 8B06 MOV EAX,DWORD PTR DS:[ESI] ; //用户名 00454C49 . 50 PUSH EAX 00454C4A . C745 F8 60294>MOV DWORD PTR SS:[EBP-8],monster_.004029> 00454C51 . FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>; MSVBVM50.rtcTrimBstr 00454C57 . 8B1D 08454600 MOV EBX,DWORD PTR DS:[<&MSVBVM50.__vbaSt>; MSVBVM50.__vbaStrMove 00454C5D . 8BD0 MOV EDX,EAX 00454C5F . 8BCE MOV ECX,ESI 00454C61 . FFD3 CALL EBX ; <&MSVBVM50.__vbaStrMove> 00454C63 . 8B0E MOV ECX,DWORD PTR DS:[ESI] 00454C65 . 51 PUSH ECX 00454C66 . FF15 EC424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaLenBs>; MSVBVM50.__vbaLenBstr 00454C6C . 83F8 04 CMP EAX,4 00454C6F . 7D 2C JGE SHORT monster_.00454C9D ; //用户名长度大于等于4则跳,否则用用户名连上"1-73.B.C,A-R"再连上用户名 00454C71 . 8B16 MOV EDX,DWORD PTR DS:[ESI] 00454C73 . 8B3D 2C434600 MOV EDI,DWORD PTR DS:[<&MSVBVM50.__vbaSt>; MSVBVM50.__vbaStrCat 00454C79 . 52 PUSH EDX 00454C7A . 68 F0C74000 PUSH monster_.0040C7F0 ; UNICODE "1-73.B.C,A-R" 00454C7F . FFD7 CALL EDI ; <&MSVBVM50.__vbaStrCat> 00454C81 . 8BD0 MOV EDX,EAX 00454C83 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 00454C86 . FFD3 CALL EBX 00454C88 . 50 PUSH EAX 00454C89 . 8B06 MOV EAX,DWORD PTR DS:[ESI] 00454C8B . 50 PUSH EAX 00454C8C . FFD7 CALL EDI 00454C8E . 8BD0 MOV EDX,EAX 00454C90 . 8BCE MOV ECX,ESI 00454C92 . FFD3 CALL EBX 00454C94 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 00454C97 . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 00454C9D > 8B0E MOV ECX,DWORD PTR DS:[ESI] ; //用户名 00454C9F . 6A 01 PUSH 1 00454CA1 . 51 PUSH ECX 00454CA2 . FF15 E8444600 CALL DWORD PTR DS:[<&MSVBVM50.rtcLeftCha>; MSVBVM50.rtcLeftCharBstr 00454CA8 . 8BD0 MOV EDX,EAX 00454CAA . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 00454CAD . FFD3 CALL EBX 00454CAF . 50 PUSH EAX 00454CB0 . FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>; MSVBVM50.rtcUpperCaseBstr 00454CB6 . 8BD0 MOV EDX,EAX 00454CB8 . 8D8D 44FFFFFF LEA ECX,DWORD PTR SS:[EBP-BC] 00454CBE . FFD3 CALL EBX 00454CC0 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 00454CC3 . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 00454CC9 . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] ; //用户名第1位大写的ASCII码地址 00454CCF . 8B3D D8434600 MOV EDI,DWORD PTR DS:[<&MSVBVM50.__vbaSt>; MSVBVM50.__vbaStrCmp 00454CD5 . 52 PUSH EDX 00454CD6 . 68 10C84000 PUSH monster_.0040C810 00454CDB . FFD7 CALL EDI ; <&MSVBVM50.__vbaStrCmp> 00454CDD . 85C0 TEST EAX,EAX 00454CDF . 0F84 9D030000 JE monster_.00455082 ; //若是"A"则跳 00454CE5 . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454CEB . 50 PUSH EAX 00454CEC . 68 18C84000 PUSH monster_.0040C818 00454CF1 . FFD7 CALL EDI 00454CF3 . 85C0 TEST EAX,EAX 00454CF5 . 0F84 87030000 JE monster_.00455082 ; //若是"N"则跳 00454CFB . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454D01 . 51 PUSH ECX 00454D02 . 68 20C84000 PUSH monster_.0040C820 00454D07 . FFD7 CALL EDI 00454D09 . 85C0 TEST EAX,EAX 00454D0B . 0F84 71030000 JE monster_.00455082 ; //若是"Y"则跳 00454D11 . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454D17 . 52 PUSH EDX 00454D18 . 68 28C84000 PUSH monster_.0040C828 00454D1D . FFD7 CALL EDI 00454D1F . 85C0 TEST EAX,EAX 00454D21 . 0F84 54030000 JE monster_.0045507B ; //若是"S"则跳 00454D27 . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454D2D . 50 PUSH EAX 00454D2E . 68 9CB74000 PUSH monster_.0040B79C 00454D33 . FFD7 CALL EDI 00454D35 . 85C0 TEST EAX,EAX 00454D37 . 0F84 3E030000 JE monster_.0045507B ; //若是"E"则跳 00454D3D . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454D43 . 51 PUSH ECX 00454D44 . 68 30C84000 PUSH monster_.0040C830 00454D49 . FFD7 CALL EDI 00454D4B . 85C0 TEST EAX,EAX 00454D4D . 0F84 28030000 JE monster_.0045507B ; //若是"J"则跳 00454D53 . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454D59 . 52 PUSH EDX 00454D5A . 68 40C84000 PUSH monster_.0040C840 00454D5F . FFD7 CALL EDI 00454D61 . 85C0 TEST EAX,EAX 00454D63 . 0F84 0B030000 JE monster_.00455074 ; //若是"G"则跳 00454D69 . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454D6F . 50 PUSH EAX 00454D70 . 68 0C854000 PUSH monster_.0040850C 00454D75 . FFD7 CALL EDI 00454D77 . 85C0 TEST EAX,EAX 00454D79 . 0F84 F5020000 JE monster_.00455074 ; //若是"K"则跳 00454D7F . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454D85 . 51 PUSH ECX 00454D86 . 68 48C84000 PUSH monster_.0040C848 00454D8B . FFD7 CALL EDI 00454D8D . 85C0 TEST EAX,EAX 00454D8F . 0F84 DF020000 JE monster_.00455074 ; //若是"I"则跳 00454D95 . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454D9B . 52 PUSH EDX 00454D9C . 68 50C84000 PUSH monster_.0040C850 00454DA1 . FFD7 CALL EDI 00454DA3 . 85C0 TEST EAX,EAX 00454DA5 . 0F84 C2020000 JE monster_.0045506D ; //若是"F"则跳 00454DAB . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454DB1 . 50 PUSH EAX 00454DB2 . 68 38C84000 PUSH monster_.0040C838 00454DB7 . FFD7 CALL EDI 00454DB9 . 85C0 TEST EAX,EAX 00454DBB . 0F84 AC020000 JE monster_.0045506D ; //若是"H"则跳 00454DC1 . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454DC7 . 51 PUSH ECX 00454DC8 . 68 58C84000 PUSH monster_.0040C858 00454DCD . FFD7 CALL EDI 00454DCF . 85C0 TEST EAX,EAX 00454DD1 . 0F84 96020000 JE monster_.0045506D ; //若是"L"则跳 00454DD7 . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454DDD . 52 PUSH EDX 00454DDE . 68 6CC84000 PUSH monster_.0040C86C 00454DE3 . FFD7 CALL EDI 00454DE5 . 85C0 TEST EAX,EAX 00454DE7 . 0F84 79020000 JE monster_.00455066 ; //若是"M"则跳 00454DED . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454DF3 . 50 PUSH EAX 00454DF4 . 68 74C84000 PUSH monster_.0040C874 00454DF9 . FFD7 CALL EDI 00454DFB . 85C0 TEST EAX,EAX 00454DFD . 0F84 63020000 JE monster_.00455066 ; //若是"B"则跳 00454E03 . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454E09 . 51 PUSH ECX 00454E0A . 68 7CC84000 PUSH monster_.0040C87C 00454E0F . FFD7 CALL EDI 00454E11 . 85C0 TEST EAX,EAX 00454E13 . 0F84 4D020000 JE monster_.00455066 ; //若是"O"则跳 00454E19 . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454E1F . 52 PUSH EDX 00454E20 . 68 84C84000 PUSH monster_.0040C884 00454E25 . FFD7 CALL EDI 00454E27 . 85C0 TEST EAX,EAX 00454E29 . 0F84 30020000 JE monster_.0045505F ; //若是"P"则跳 00454E2F . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454E35 . 50 PUSH EAX 00454E36 . 68 8CC84000 PUSH monster_.0040C88C 00454E3B . FFD7 CALL EDI 00454E3D . 85C0 TEST EAX,EAX 00454E3F . 0F84 1A020000 JE monster_.0045505F ; //若是"Q"则跳 00454E45 . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454E4B . 51 PUSH ECX 00454E4C . 68 94C84000 PUSH monster_.0040C894 00454E51 . FFD7 CALL EDI 00454E53 . 85C0 TEST EAX,EAX 00454E55 . 0F84 04020000 JE monster_.0045505F ; //若是"R"则跳 00454E5B . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454E61 . 52 PUSH EDX 00454E62 . 68 C0BB4000 PUSH monster_.0040BBC0 00454E67 . FFD7 CALL EDI 00454E69 . 85C0 TEST EAX,EAX 00454E6B . 0F84 E7010000 JE monster_.00455058 ; //若是"D"则跳 00454E71 . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454E77 . 50 PUSH EAX 00454E78 . 68 A4C84000 PUSH monster_.0040C8A4 00454E7D . FFD7 CALL EDI 00454E7F . 85C0 TEST EAX,EAX 00454E81 . 0F84 D1010000 JE monster_.00455058 ; //若是"T"则跳 00454E87 . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454E8D . 51 PUSH ECX 00454E8E . 68 ACC84000 PUSH monster_.0040C8AC 00454E93 . FFD7 CALL EDI 00454E95 . 85C0 TEST EAX,EAX 00454E97 . 0F84 BB010000 JE monster_.00455058 ; //若是"U"则跳 00454E9D . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454EA3 . 52 PUSH EDX 00454EA4 . 68 C0C84000 PUSH monster_.0040C8C0 00454EA9 . FFD7 CALL EDI 00454EAB . 85C0 TEST EAX,EAX 00454EAD . 0F84 9E010000 JE monster_.00455051 ; //若是"V"则跳 00454EB3 . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454EB9 . 50 PUSH EAX 00454EBA . 68 C8C84000 PUSH monster_.0040C8C8 00454EBF . FFD7 CALL EDI 00454EC1 . 85C0 TEST EAX,EAX 00454EC3 . 0F84 88010000 JE monster_.00455051 ; //若是"Z"则跳 00454EC9 . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454ECF . 51 PUSH ECX 00454ED0 . 68 D0C84000 PUSH monster_.0040C8D0 00454ED5 . FFD7 CALL EDI 00454ED7 . 85C0 TEST EAX,EAX 00454ED9 . 0F84 72010000 JE monster_.00455051 ; //若是"X"则跳 00454EDF . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454EE5 . 52 PUSH EDX 00454EE6 . 68 D8C84000 PUSH monster_.0040C8D8 00454EEB . FFD7 CALL EDI 00454EED . 85C0 TEST EAX,EAX 00454EEF . 0F84 55010000 JE monster_.0045504A ; //若是"C"则跳 00454EF5 . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454EFB . 50 PUSH EAX 00454EFC . 68 E0C84000 PUSH monster_.0040C8E0 00454F01 . FFD7 CALL EDI 00454F03 . 85C0 TEST EAX,EAX 00454F05 . 0F84 3F010000 JE monster_.0045504A ; //若是"W"则跳 00454F0B . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454F11 . 51 PUSH ECX 00454F12 . 68 A4B74000 PUSH monster_.0040B7A4 00454F17 . FFD7 CALL EDI 00454F19 . 85C0 TEST EAX,EAX 00454F1B . 0F84 22010000 JE monster_.00455043 ; //若是"1"则跳 00454F21 . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454F27 . 52 PUSH EDX 00454F28 . 68 F4C84000 PUSH monster_.0040C8F4 00454F2D . FFD7 CALL EDI 00454F2F . 85C0 TEST EAX,EAX 00454F31 . 0F84 0C010000 JE monster_.00455043 ; //若是"7"则跳 00454F37 . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454F3D . 50 PUSH EAX 00454F3E . 68 FCC84000 PUSH monster_.0040C8FC 00454F43 . FFD7 CALL EDI 00454F45 . 85C0 TEST EAX,EAX 00454F47 . 0F84 F6000000 JE monster_.00455043 ; //若是"5"则跳 00454F4D . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454F53 . 51 PUSH ECX 00454F54 . 68 DCB74000 PUSH monster_.0040B7DC 00454F59 . FFD7 CALL EDI 00454F5B . 85C0 TEST EAX,EAX 00454F5D . 0F84 E0000000 JE monster_.00455043 ; //若是"4"则跳 00454F63 . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454F69 . 52 PUSH EDX 00454F6A . 68 B4B74000 PUSH monster_.0040B7B4 00454F6F . FFD7 CALL EDI 00454F71 . 85C0 TEST EAX,EAX 00454F73 . 0F84 CA000000 JE monster_.00455043 ; //若是"3"则跳 00454F79 . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454F7F . 50 PUSH EAX 00454F80 . 68 9CC84000 PUSH monster_.0040C89C 00454F85 . FFD7 CALL EDI 00454F87 . 85C0 TEST EAX,EAX 00454F89 . 0F84 B4000000 JE monster_.00455043 ; //若是"6"则跳 00454F8F . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454F95 . 51 PUSH ECX 00454F96 . 68 ACB74000 PUSH monster_.0040B7AC 00454F9B . FFD7 CALL EDI 00454F9D . 85C0 TEST EAX,EAX 00454F9F . 0F84 9E000000 JE monster_.00455043 ; //若是"2"则跳 00454FA5 . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454FAB . 52 PUSH EDX 00454FAC . 68 04C94000 PUSH monster_.0040C904 00454FB1 . FFD7 CALL EDI 00454FB3 . 85C0 TEST EAX,EAX 00454FB5 . 0F84 88000000 JE monster_.00455043 ; //若是"8"则跳 00454FBB . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454FC1 . 50 PUSH EAX 00454FC2 . 68 BCC04000 PUSH monster_.0040C0BC 00454FC7 . FFD7 CALL EDI 00454FC9 . 85C0 TEST EAX,EAX 00454FCB . 74 6F JE SHORT monster_.0045503C ; //若是"9"则跳 00454FCD . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00454FD3 . 51 PUSH ECX 00454FD4 . 68 08C64000 PUSH monster_.0040C608 00454FD9 . FFD7 CALL EDI 00454FDB . 85C0 TEST EAX,EAX 00454FDD . 74 5D JE SHORT monster_.0045503C ; //若是"0"则跳 00454FDF . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 00454FE5 . 52 PUSH EDX 00454FE6 . 68 688E4000 PUSH monster_.00408E68 00454FEB . FFD7 CALL EDI 00454FED . 85C0 TEST EAX,EAX 00454FEF . 74 44 JE SHORT monster_.00455035 ; //若是"."则跳 00454FF1 . 8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC] 00454FF7 . 50 PUSH EAX 00454FF8 . 68 70C44000 PUSH monster_.0040C470 00454FFD . FFD7 CALL EDI 00454FFF . 85C0 TEST EAX,EAX 00455001 . 74 32 JE SHORT monster_.00455035 ; //若是","则跳 00455003 . 8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC] 00455009 . 51 PUSH ECX 0045500A . 68 78C44000 PUSH monster_.0040C478 0045500F . FFD7 CALL EDI 00455011 . 85C0 TEST EAX,EAX 00455013 . 74 20 JE SHORT monster_.00455035 ; //若是"-"则跳 00455015 . 8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC] 0045501B . 52 PUSH EDX 0045501C . 68 88C24000 PUSH monster_.0040C288 00455021 . FFD7 CALL EDI 00455023 . 85C0 TEST EAX,EAX 00455025 . 75 07 JNZ SHORT monster_.0045502E ; //若不是" "则跳 00455027 . BA 30A64000 MOV EDX,monster_.0040A630 ; UNICODE "34GHJKL" 0045502C . EB 59 JMP SHORT monster_.00455087 0045502E > BA BCAC4000 MOV EDX,monster_.0040ACBC ; UNICODE "T1" 00455033 . EB 52 JMP SHORT monster_.00455087 00455035 > BA 98C24000 MOV EDX,monster_.0040C298 ; UNICODE "KB" 0045503A . EB 4B JMP SHORT monster_.00455087 0045503C > BA 74C84000 MOV EDX,monster_.0040C874 ; //"B" 00455041 . EB 44 JMP SHORT monster_.00455087 00455043 > BA C0BB4000 MOV EDX,monster_.0040BBC0 ; //"D" 00455048 . EB 3D JMP SHORT monster_.00455087 0045504A > BA E8C84000 MOV EDX,monster_.0040C8E8 ; UNICODE "RR" 0045504F . EB 36 JMP SHORT monster_.00455087 00455051 > BA 40C84000 MOV EDX,monster_.0040C840 ; //"G" 00455056 . EB 2F JMP SHORT monster_.00455087 00455058 > BA B4C84000 MOV EDX,monster_.0040C8B4 ; UNICODE "84" 0045505D . EB 28 JMP SHORT monster_.00455087 0045505F > BA 9CC84000 MOV EDX,monster_.0040C89C ; //"6" 00455064 . EB 21 JMP SHORT monster_.00455087 00455066 > BA ACB74000 MOV EDX,monster_.0040B7AC ; //"2" 0045506B . EB 1A JMP SHORT monster_.00455087 0045506D > BA 60C84000 MOV EDX,monster_.0040C860 ; UNICODE "Q7" 00455072 . EB 13 JMP SHORT monster_.00455087 00455074 > BA 28C84000 MOV EDX,monster_.0040C828 ; //"S" 00455079 . EB 0C JMP SHORT monster_.00455087 0045507B > BA 38C84000 MOV EDX,monster_.0040C838 ; //"H" 00455080 . EB 05 JMP SHORT monster_.00455087 00455082 > BA DCB74000 MOV EDX,monster_.0040B7DC ; //"4" 00455087 > 8B35 98444600 MOV ESI,DWORD PTR DS:[<&MSVBVM50.__vbaSt>; MSVBVM50.__vbaStrCopy 0045508D . 8D4D E4 LEA ECX,DWORD PTR SS:[EBP-1C] 00455090 . FFD6 CALL ESI ; <&MSVBVM50.__vbaStrCopy> 00455092 . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 00455095 . 8B08 MOV ECX,DWORD PTR DS:[EAX] ; //用户名 00455097 . 6A 01 PUSH 1 00455099 . 51 PUSH ECX 0045509A . FF15 0C454600 CALL DWORD PTR DS:[<&MSVBVM50.rtcRightCh>; MSVBVM50.rtcRightCharBstr 004550A0 . 8BD0 MOV EDX,EAX 004550A2 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 004550A5 . FFD3 CALL EBX 004550A7 . 50 PUSH EAX 004550A8 . FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>; MSVBVM50.rtcUpperCaseBstr 004550AE . 8BD0 MOV EDX,EAX 004550B0 . 8D8D 40FFFFFF LEA ECX,DWORD PTR SS:[EBP-C0] 004550B6 . FFD3 CALL EBX 004550B8 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 004550BB . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 004550C1 . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] ; //用户名右边第1位大写的ASCII码地址 004550C7 . 52 PUSH EDX 004550C8 . 68 10C84000 PUSH monster_.0040C810 004550CD . FFD7 CALL EDI 004550CF . 85C0 TEST EAX,EAX 004550D1 . 0F84 A4030000 JE monster_.0045547B ; //若是"A"则跳 004550D7 . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 004550DD . 50 PUSH EAX 004550DE . 68 18C84000 PUSH monster_.0040C818 004550E3 . FFD7 CALL EDI 004550E5 . 85C0 TEST EAX,EAX 004550E7 . 0F84 8E030000 JE monster_.0045547B ; //若是"N"则跳 004550ED . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 004550F3 . 51 PUSH ECX 004550F4 . 68 20C84000 PUSH monster_.0040C820 004550F9 . FFD7 CALL EDI 004550FB . 85C0 TEST EAX,EAX 004550FD . 0F84 78030000 JE monster_.0045547B ; //若是"Y"则跳 00455103 . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 00455109 . 52 PUSH EDX 0045510A . 68 28C84000 PUSH monster_.0040C828 0045510F . FFD7 CALL EDI 00455111 . 85C0 TEST EAX,EAX 00455113 . 0F84 5B030000 JE monster_.00455474 ; //若是"S"则跳 00455119 . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 0045511F . 50 PUSH EAX 00455120 . 68 9CB74000 PUSH monster_.0040B79C 00455125 . FFD7 CALL EDI 00455127 . 85C0 TEST EAX,EAX 00455129 . 0F84 45030000 JE monster_.00455474 ; //若是"E"则跳 0045512F . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 00455135 . 51 PUSH ECX 00455136 . 68 30C84000 PUSH monster_.0040C830 0045513B . FFD7 CALL EDI 0045513D . 85C0 TEST EAX,EAX 0045513F . 0F84 2F030000 JE monster_.00455474 ; //若是"J"则跳 00455145 . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 0045514B . 52 PUSH EDX 0045514C . 68 40C84000 PUSH monster_.0040C840 00455151 . FFD7 CALL EDI 00455153 . 85C0 TEST EAX,EAX 00455155 . 0F84 12030000 JE monster_.0045546D ; //若是"G"则跳 0045515B . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 00455161 . 50 PUSH EAX 00455162 . 68 0C854000 PUSH monster_.0040850C 00455167 . FFD7 CALL EDI 00455169 . 85C0 TEST EAX,EAX 0045516B . 0F84 FC020000 JE monster_.0045546D ; //若是"K"则跳 00455171 . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 00455177 . 51 PUSH ECX 00455178 . 68 48C84000 PUSH monster_.0040C848 0045517D . FFD7 CALL EDI 0045517F . 85C0 TEST EAX,EAX 00455181 . 0F84 E6020000 JE monster_.0045546D ; //若是"I"则跳 00455187 . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 0045518D . 52 PUSH EDX 0045518E . 68 50C84000 PUSH monster_.0040C850 00455193 . FFD7 CALL EDI 00455195 . 85C0 TEST EAX,EAX 00455197 . 0F84 C9020000 JE monster_.00455466 ; //若是"F"则跳 0045519D . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 004551A3 . 50 PUSH EAX 004551A4 . 68 38C84000 PUSH monster_.0040C838 004551A9 . FFD7 CALL EDI 004551AB . 85C0 TEST EAX,EAX 004551AD . 0F84 B3020000 JE monster_.00455466 ; //若是"H"则跳 004551B3 . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 004551B9 . 51 PUSH ECX 004551BA . 68 58C84000 PUSH monster_.0040C858 004551BF . FFD7 CALL EDI 004551C1 . 85C0 TEST EAX,EAX 004551C3 . 0F84 9D020000 JE monster_.00455466 ; //若是"L"则跳 004551C9 . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 004551CF . 52 PUSH EDX 004551D0 . 68 6CC84000 PUSH monster_.0040C86C 004551D5 . FFD7 CALL EDI 004551D7 . 85C0 TEST EAX,EAX 004551D9 . 0F84 80020000 JE monster_.0045545F ; //若是"M"则跳 004551DF . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 004551E5 . 50 PUSH EAX 004551E6 . 68 74C84000 PUSH monster_.0040C874 004551EB . FFD7 CALL EDI 004551ED . 85C0 TEST EAX,EAX 004551EF . 0F84 6A020000 JE monster_.0045545F ; //若是"B"则跳 004551F5 . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 004551FB . 51 PUSH ECX 004551FC . 68 7CC84000 PUSH monster_.0040C87C 00455201 . FFD7 CALL EDI 00455203 . 85C0 TEST EAX,EAX 00455205 . 0F84 54020000 JE monster_.0045545F ; //若是"O"则跳 0045520B . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 00455211 . 52 PUSH EDX 00455212 . 68 84C84000 PUSH monster_.0040C884 00455217 . FFD7 CALL EDI 00455219 . 85C0 TEST EAX,EAX 0045521B . 0F84 37020000 JE monster_.00455458 ; //若是"P"则跳 00455221 . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 00455227 . 50 PUSH EAX 00455228 . 68 8CC84000 PUSH monster_.0040C88C 0045522D . FFD7 CALL EDI 0045522F . 85C0 TEST EAX,EAX 00455231 . 0F84 21020000 JE monster_.00455458 ; //若是"Q"则跳 00455237 . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 0045523D . 51 PUSH ECX 0045523E . 68 94C84000 PUSH monster_.0040C894 00455243 . FFD7 CALL EDI 00455245 . 85C0 TEST EAX,EAX 00455247 . 0F84 0B020000 JE monster_.00455458 ; //若是"R"则跳 0045524D . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 00455253 . 52 PUSH EDX 00455254 . 68 C0BB4000 PUSH monster_.0040BBC0 00455259 . FFD7 CALL EDI 0045525B . 85C0 TEST EAX,EAX 0045525D . 0F84 EE010000 JE monster_.00455451 ; //若是"D"则跳 00455263 . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 00455269 . 50 PUSH EAX 0045526A . 68 A4C84000 PUSH monster_.0040C8A4 0045526F . FFD7 CALL EDI 00455271 . 85C0 TEST EAX,EAX 00455273 . 0F84 D8010000 JE monster_.00455451 ; //若是"T"则跳 00455279 . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 0045527F . 51 PUSH ECX 00455280 . 68 ACC84000 PUSH monster_.0040C8AC 00455285 . FFD7 CALL EDI 00455287 . 85C0 TEST EAX,EAX 00455289 . 0F84 C2010000 JE monster_.00455451 ; //若是"U"则跳 0045528F . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 00455295 . 52 PUSH EDX 00455296 . 68 C0C84000 PUSH monster_.0040C8C0 0045529B . FFD7 CALL EDI 0045529D . 85C0 TEST EAX,EAX 0045529F . 0F84 A5010000 JE monster_.0045544A ; //若是"V"则跳 004552A5 . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 004552AB . 50 PUSH EAX 004552AC . 68 C8C84000 PUSH monster_.0040C8C8 004552B1 . FFD7 CALL EDI 004552B3 . 85C0 TEST EAX,EAX 004552B5 . 0F84 8F010000 JE monster_.0045544A ; //若是"Z"则跳 004552BB . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 004552C1 . 51 PUSH ECX 004552C2 . 68 D0C84000 PUSH monster_.0040C8D0 004552C7 . FFD7 CALL EDI 004552C9 . 85C0 TEST EAX,EAX 004552CB . 0F84 79010000 JE monster_.0045544A ; //若是"X"则跳 004552D1 . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 004552D7 . 52 PUSH EDX 004552D8 . 68 D8C84000 PUSH monster_.0040C8D8 004552DD . FFD7 CALL EDI 004552DF . 85C0 TEST EAX,EAX 004552E1 . 0F84 5C010000 JE monster_.00455443 ; //若是"C"则跳 004552E7 . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 004552ED . 50 PUSH EAX 004552EE . 68 E0C84000 PUSH monster_.0040C8E0 004552F3 . FFD7 CALL EDI 004552F5 . 85C0 TEST EAX,EAX 004552F7 . 0F84 46010000 JE monster_.00455443 ; //若是"W"则跳 004552FD . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 00455303 . 51 PUSH ECX 00455304 . 68 A4B74000 PUSH monster_.0040B7A4 00455309 . FFD7 CALL EDI 0045530B . 85C0 TEST EAX,EAX 0045530D . 0F84 29010000 JE monster_.0045543C ; //若是"1"则跳 00455313 . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 00455319 . 52 PUSH EDX 0045531A . 68 F4C84000 PUSH monster_.0040C8F4 0045531F . FFD7 CALL EDI 00455321 . 85C0 TEST EAX,EAX 00455323 . 0F84 13010000 JE monster_.0045543C ; //若是"7"则跳 00455329 . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 0045532F . 50 PUSH EAX 00455330 . 68 FCC84000 PUSH monster_.0040C8FC 00455335 . FFD7 CALL EDI 00455337 . 85C0 TEST EAX,EAX 00455339 . 0F84 FD000000 JE monster_.0045543C ; //若是"5"则跳 0045533F . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 00455345 . 51 PUSH ECX 00455346 . 68 DCB74000 PUSH monster_.0040B7DC 0045534B . FFD7 CALL EDI 0045534D . 85C0 TEST EAX,EAX 0045534F . 0F84 E7000000 JE monster_.0045543C ; //若是"4"则跳 00455355 . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 0045535B . 52 PUSH EDX 0045535C . 68 B4B74000 PUSH monster_.0040B7B4 00455361 . FFD7 CALL EDI 00455363 . 85C0 TEST EAX,EAX 00455365 . 0F84 CA000000 JE monster_.00455435 ; //若是"3"则跳 0045536B . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 00455371 . 50 PUSH EAX 00455372 . 68 9CC84000 PUSH monster_.0040C89C 00455377 . FFD7 CALL EDI 00455379 . 85C0 TEST EAX,EAX 0045537B . 0F84 B4000000 JE monster_.00455435 ; //若是"6"则跳 00455381 . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 00455387 . 51 PUSH ECX 00455388 . 68 ACB74000 PUSH monster_.0040B7AC 0045538D . FFD7 CALL EDI 0045538F . 85C0 TEST EAX,EAX 00455391 . 0F84 9E000000 JE monster_.00455435 ; //若是"2"则跳 00455397 . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 0045539D . 52 PUSH EDX 0045539E . 68 04C94000 PUSH monster_.0040C904 004553A3 . FFD7 CALL EDI 004553A5 . 85C0 TEST EAX,EAX 004553A7 . 0F84 88000000 JE monster_.00455435 ; //若是"8"则跳 004553AD . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 004553B3 . 50 PUSH EAX 004553B4 . 68 BCC04000 PUSH monster_.0040C0BC 004553B9 . FFD7 CALL EDI 004553BB . 85C0 TEST EAX,EAX 004553BD . 74 6F JE SHORT monster_.0045542E ; //若是"9"则跳 004553BF . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 004553C5 . 51 PUSH ECX 004553C6 . 68 08C64000 PUSH monster_.0040C608 004553CB . FFD7 CALL EDI 004553CD . 85C0 TEST EAX,EAX 004553CF . 74 5D JE SHORT monster_.0045542E ; //若是"0"则跳 004553D1 . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 004553D7 . 52 PUSH EDX 004553D8 . 68 688E4000 PUSH monster_.00408E68 004553DD . FFD7 CALL EDI 004553DF . 85C0 TEST EAX,EAX 004553E1 . 74 44 JE SHORT monster_.00455427 ; //若是"."则跳 004553E3 . 8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0] 004553E9 . 50 PUSH EAX 004553EA . 68 70C44000 PUSH monster_.0040C470 004553EF . FFD7 CALL EDI 004553F1 . 85C0 TEST EAX,EAX 004553F3 . 74 32 JE SHORT monster_.00455427 ; //若是","则跳 004553F5 . 8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0] 004553FB . 51 PUSH ECX 004553FC . 68 78C44000 PUSH monster_.0040C478 00455401 . FFD7 CALL EDI 00455403 . 85C0 TEST EAX,EAX 00455405 . 74 20 JE SHORT monster_.00455427 ; //若是"-"则跳 00455407 . 8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0] 0045540D . 52 PUSH EDX 0045540E . 68 88C24000 PUSH monster_.0040C288 00455413 . FFD7 CALL EDI 00455415 . 85C0 TEST EAX,EAX 00455417 . 75 07 JNZ SHORT monster_.00455420 ; //若不是" "则跳 00455419 . BA 0CC94000 MOV EDX,monster_.0040C90C ; UNICODE "HJKLOPB" 0045541E . EB 60 JMP SHORT monster_.00455480 00455420 > BA 20C94000 MOV EDX,monster_.0040C920 ; UNICODE "1T" 00455425 . EB 59 JMP SHORT monster_.00455480 00455427 > BA 2CA04000 MOV EDX,monster_.0040A02C ; UNICODE "BK" 0045542C . EB 52 JMP SHORT monster_.00455480 0045542E > BA A4C84000 MOV EDX,monster_.0040C8A4 ; //"T" 00455433 . EB 4B JMP SHORT monster_.00455480 00455435 > BA 08C64000 MOV EDX,monster_.0040C608 ; //"0" 0045543A . EB 44 JMP SHORT monster_.00455480 0045543C > BA BCC04000 MOV EDX,monster_.0040C0BC ; //"9" 00455441 . EB 3D JMP SHORT monster_.00455480 00455443 > BA E8C84000 MOV EDX,monster_.0040C8E8 ; UNICODE "RR" 00455448 . EB 36 JMP SHORT monster_.00455480 0045544A > BA 04C94000 MOV EDX,monster_.0040C904 ; //"8" 0045544F . EB 2F JMP SHORT monster_.00455480 00455451 > BA 4C9E4000 MOV EDX,monster_.00409E4C ; UNICODE "67" 00455456 . EB 28 JMP SHORT monster_.00455480 00455458 > BA FCC84000 MOV EDX,monster_.0040C8FC ; //"5" 0045545D . EB 21 JMP SHORT monster_.00455480 0045545F > BA DCB74000 MOV EDX,monster_.0040B7DC ; //"4" 00455464 . EB 1A JMP SHORT monster_.00455480 00455466 > BA 60C84000 MOV EDX,monster_.0040C860 ; UNICODE "Q7" 0045546B . EB 13 JMP SHORT monster_.00455480 0045546D > BA B4B74000 MOV EDX,monster_.0040B7B4 ; //"3" 00455472 . EB 0C JMP SHORT monster_.00455480 00455474 > BA ACB74000 MOV EDX,monster_.0040B7AC ; //"2" 00455479 . EB 05 JMP SHORT monster_.00455480 0045547B > BA A4B74000 MOV EDX,monster_.0040B7A4 ; //"1" 00455480 > 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28] 00455483 . FFD6 CALL ESI 00455485 . 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] 00455488 . 8B11 MOV EDX,DWORD PTR DS:[ECX] ; //用户名 0045548A . 8D45 98 LEA EAX,DWORD PTR SS:[EBP-68] 0045548D . 50 PUSH EAX 0045548E . 6A 02 PUSH 2 00455490 . 52 PUSH EDX 00455491 . C745 A0 01000>MOV DWORD PTR SS:[EBP-60],1 00455498 . C745 98 02000>MOV DWORD PTR SS:[EBP-68],2 0045549F . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 004554A5 . 8BD0 MOV EDX,EAX 004554A7 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 004554AA . FFD3 CALL EBX 004554AC . 50 PUSH EAX 004554AD . FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>; MSVBVM50.rtcUpperCaseBstr 004554B3 . 8BD0 MOV EDX,EAX 004554B5 . 8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4] 004554BB . FFD3 CALL EBX 004554BD . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 004554C0 . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 004554C6 . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68] 004554C9 . FF15 E0424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVar 004554CF . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] ; //用户名第2位大写的ASCII码地址 004554D5 . 50 PUSH EAX 004554D6 . 68 28C84000 PUSH monster_.0040C828 004554DB . FFD7 CALL EDI 004554DD . 85C0 TEST EAX,EAX 004554DF . 0F84 A4030000 JE monster_.00455889 ; //若是"S"则跳 004554E5 . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 004554EB . 51 PUSH ECX 004554EC . 68 18C84000 PUSH monster_.0040C818 004554F1 . FFD7 CALL EDI 004554F3 . 85C0 TEST EAX,EAX 004554F5 . 0F84 8E030000 JE monster_.00455889 ; //若是"N"则跳 004554FB . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 00455501 . 52 PUSH EDX 00455502 . 68 20C84000 PUSH monster_.0040C820 00455507 . FFD7 CALL EDI 00455509 . 85C0 TEST EAX,EAX 0045550B . 0F84 78030000 JE monster_.00455889 ; //若是"Y"则跳 00455511 . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 00455517 . 50 PUSH EAX 00455518 . 68 10C84000 PUSH monster_.0040C810 0045551D . FFD7 CALL EDI 0045551F . 85C0 TEST EAX,EAX 00455521 . 0F84 5B030000 JE monster_.00455882 ; //若是"A"则跳 00455527 . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 0045552D . 51 PUSH ECX 0045552E . 68 9CB74000 PUSH monster_.0040B79C 00455533 . FFD7 CALL EDI 00455535 . 85C0 TEST EAX,EAX 00455537 . 0F84 45030000 JE monster_.00455882 ; //若是"E"则跳 0045553D . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 00455543 . 52 PUSH EDX 00455544 . 68 30C84000 PUSH monster_.0040C830 00455549 . FFD7 CALL EDI 0045554B . 85C0 TEST EAX,EAX 0045554D . 0F84 2F030000 JE monster_.00455882 ; //若是"J"则跳 00455553 . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 00455559 . 50 PUSH EAX 0045555A . 68 50C84000 PUSH monster_.0040C850 0045555F . FFD7 CALL EDI 00455561 . 85C0 TEST EAX,EAX 00455563 . 0F84 12030000 JE monster_.0045587B ; //若是"F"则跳 00455569 . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 0045556F . 51 PUSH ECX 00455570 . 68 0C854000 PUSH monster_.0040850C 00455575 . FFD7 CALL EDI 00455577 . 85C0 TEST EAX,EAX 00455579 . 0F84 FC020000 JE monster_.0045587B ; //若是"K"则跳 0045557F . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 00455585 . 52 PUSH EDX 00455586 . 68 48C84000 PUSH monster_.0040C848 0045558B . FFD7 CALL EDI 0045558D . 85C0 TEST EAX,EAX 0045558F . 0F84 E6020000 JE monster_.0045587B ; //若是"I"则跳 00455595 . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 0045559B . 50 PUSH EAX 0045559C . 68 50C84000 PUSH monster_.0040C850 004555A1 . FFD7 CALL EDI 004555A3 . 85C0 TEST EAX,EAX 004555A5 . 0F84 C9020000 JE monster_.00455874 ; //若是"F"则跳 004555AB . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 004555B1 . 51 PUSH ECX 004555B2 . 68 08C64000 PUSH monster_.0040C608 004555B7 . FFD7 CALL EDI 004555B9 . 85C0 TEST EAX,EAX 004555BB . 0F84 B3020000 JE monster_.00455874 ; //若是"0"则跳 004555C1 . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 004555C7 . 52 PUSH EDX 004555C8 . 68 58C84000 PUSH monster_.0040C858 004555CD . FFD7 CALL EDI 004555CF . 85C0 TEST EAX,EAX 004555D1 . 0F84 9D020000 JE monster_.00455874 ; //若是"L"则跳 004555D7 . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 004555DD . 50 PUSH EAX 004555DE . 68 6CC84000 PUSH monster_.0040C86C 004555E3 . FFD7 CALL EDI 004555E5 . 85C0 TEST EAX,EAX 004555E7 . 0F84 80020000 JE monster_.0045586D ; //若是"M"则跳 004555ED . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 004555F3 . 51 PUSH ECX 004555F4 . 68 74C84000 PUSH monster_.0040C874 004555F9 . FFD7 CALL EDI 004555FB . 85C0 TEST EAX,EAX 004555FD . 0F84 6A020000 JE monster_.0045586D ; //若是"B"则跳 00455603 . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 00455609 . 52 PUSH EDX 0045560A . 68 38C84000 PUSH monster_.0040C838 0045560F . FFD7 CALL EDI 00455611 . 85C0 TEST EAX,EAX 00455613 . 0F84 54020000 JE monster_.0045586D ; //若是"H"则跳 00455619 . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 0045561F . 50 PUSH EAX 00455620 . 68 84C84000 PUSH monster_.0040C884 00455625 . FFD7 CALL EDI 00455627 . 85C0 TEST EAX,EAX 00455629 . 0F84 37020000 JE monster_.00455866 ; //若是"P"则跳 0045562F . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 00455635 . 51 PUSH ECX 00455636 . 68 8CC84000 PUSH monster_.0040C88C 0045563B . FFD7 CALL EDI 0045563D . 85C0 TEST EAX,EAX 0045563F . 0F84 21020000 JE monster_.00455866 ; //若是"Q"则跳 00455645 . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 0045564B . 52 PUSH EDX 0045564C . 68 94C84000 PUSH monster_.0040C894 00455651 . FFD7 CALL EDI 00455653 . 85C0 TEST EAX,EAX 00455655 . 0F84 0B020000 JE monster_.00455866 ; //若是"R"则跳 0045565B . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 00455661 . 50 PUSH EAX 00455662 . 68 C0BB4000 PUSH monster_.0040BBC0 00455667 . FFD7 CALL EDI 00455669 . 85C0 TEST EAX,EAX 0045566B . 0F84 EE010000 JE monster_.0045585F ; //若是"D"则跳 00455671 . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 00455677 . 51 PUSH ECX 00455678 . 68 A4C84000 PUSH monster_.0040C8A4 0045567D . FFD7 CALL EDI 0045567F . 85C0 TEST EAX,EAX 00455681 . 0F84 D8010000 JE monster_.0045585F ; //若是"T"则跳 00455687 . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 0045568D . 52 PUSH EDX 0045568E . 68 ACC84000 PUSH monster_.0040C8AC 00455693 . FFD7 CALL EDI 00455695 . 85C0 TEST EAX,EAX 00455697 . 0F84 C2010000 JE monster_.0045585F ; //若是"U"则跳 0045569D . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 004556A3 . 50 PUSH EAX 004556A4 . 68 C0C84000 PUSH monster_.0040C8C0 004556A9 . FFD7 CALL EDI 004556AB . 85C0 TEST EAX,EAX 004556AD . 0F84 A5010000 JE monster_.00455858 ; //若是"V"则跳 004556B3 . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 004556B9 . 51 PUSH ECX 004556BA . 68 C8C84000 PUSH monster_.0040C8C8 004556BF . FFD7 CALL EDI 004556C1 . 85C0 TEST EAX,EAX 004556C3 . 0F84 8F010000 JE monster_.00455858 ; //若是"Z"则跳 004556C9 . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 004556CF . 52 PUSH EDX 004556D0 . 68 D0C84000 PUSH monster_.0040C8D0 004556D5 . FFD7 CALL EDI 004556D7 . 85C0 TEST EAX,EAX 004556D9 . 0F84 79010000 JE monster_.00455858 ; //若是"X"则跳 004556DF . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 004556E5 . 50 PUSH EAX 004556E6 . 68 D8C84000 PUSH monster_.0040C8D8 004556EB . FFD7 CALL EDI 004556ED . 85C0 TEST EAX,EAX 004556EF . 0F84 5C010000 JE monster_.00455851 ; //若是"C"则跳 004556F5 . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 004556FB . 51 PUSH ECX 004556FC . 68 E0C84000 PUSH monster_.0040C8E0 00455701 . FFD7 CALL EDI 00455703 . 85C0 TEST EAX,EAX 00455705 . 0F84 46010000 JE monster_.00455851 ; //若是"W"则跳 0045570B . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 00455711 . 52 PUSH EDX 00455712 . 68 A4B74000 PUSH monster_.0040B7A4 00455717 . FFD7 CALL EDI 00455719 . 85C0 TEST EAX,EAX 0045571B . 0F84 29010000 JE monster_.0045584A ; //若是"1"则跳 00455721 . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 00455727 . 50 PUSH EAX 00455728 . 68 F4C84000 PUSH monster_.0040C8F4 0045572D . FFD7 CALL EDI 0045572F . 85C0 TEST EAX,EAX 00455731 . 0F84 13010000 JE monster_.0045584A ; //若是"7"则跳 00455737 . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 0045573D . 51 PUSH ECX 0045573E . 68 FCC84000 PUSH monster_.0040C8FC 00455743 . FFD7 CALL EDI 00455745 . 85C0 TEST EAX,EAX 00455747 . 0F84 FD000000 JE monster_.0045584A ; //若是"5"则跳 0045574D . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 00455753 . 52 PUSH EDX 00455754 . 68 DCB74000 PUSH monster_.0040B7DC 00455759 . FFD7 CALL EDI 0045575B . 85C0 TEST EAX,EAX 0045575D . 0F84 E7000000 JE monster_.0045584A ; /若是"4"则跳 00455763 . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 00455769 . 50 PUSH EAX 0045576A . 68 B4B74000 PUSH monster_.0040B7B4 0045576F . FFD7 CALL EDI 00455771 . 85C0 TEST EAX,EAX 00455773 . 0F84 CA000000 JE monster_.00455843 ; //若是"3"则跳 00455779 . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 0045577F . 51 PUSH ECX 00455780 . 68 9CC84000 PUSH monster_.0040C89C 00455785 . FFD7 CALL EDI 00455787 . 85C0 TEST EAX,EAX 00455789 . 0F84 B4000000 JE monster_.00455843 ; //若是"6"则跳 0045578F . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 00455795 . 52 PUSH EDX 00455796 . 68 ACB74000 PUSH monster_.0040B7AC 0045579B . FFD7 CALL EDI 0045579D . 85C0 TEST EAX,EAX 0045579F . 0F84 9E000000 JE monster_.00455843 ; //若是"2"则跳 004557A5 . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 004557AB . 50 PUSH EAX 004557AC . 68 04C94000 PUSH monster_.0040C904 004557B1 . FFD7 CALL EDI 004557B3 . 85C0 TEST EAX,EAX 004557B5 . 0F84 88000000 JE monster_.00455843 ; //若是"8"则跳 004557BB . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 004557C1 . 51 PUSH ECX 004557C2 . 68 BCC04000 PUSH monster_.0040C0BC 004557C7 . FFD7 CALL EDI 004557C9 . 85C0 TEST EAX,EAX 004557CB . 74 6F JE SHORT monster_.0045583C ; //若是"9"则跳 004557CD . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 004557D3 . 52 PUSH EDX 004557D4 . 68 7CC84000 PUSH monster_.0040C87C 004557D9 . FFD7 CALL EDI 004557DB . 85C0 TEST EAX,EAX 004557DD . 74 5D JE SHORT monster_.0045583C ; //若是"O"则跳 004557DF . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 004557E5 . 50 PUSH EAX 004557E6 . 68 688E4000 PUSH monster_.00408E68 004557EB . FFD7 CALL EDI 004557ED . 85C0 TEST EAX,EAX 004557EF . 74 44 JE SHORT monster_.00455835 ; //若是"."则跳 004557F1 . 8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4] 004557F7 . 51 PUSH ECX 004557F8 . 68 70C44000 PUSH monster_.0040C470 004557FD . FFD7 CALL EDI 004557FF . 85C0 TEST EAX,EAX 00455801 . 74 32 JE SHORT monster_.00455835 ; //若是","则跳 00455803 . 8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4] 00455809 . 52 PUSH EDX 0045580A . 68 78C44000 PUSH monster_.0040C478 0045580F . FFD7 CALL EDI 00455811 . 85C0 TEST EAX,EAX 00455813 . 74 20 JE SHORT monster_.00455835 ; //若是"-"则跳 00455815 . 8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4] 0045581B . 50 PUSH EAX 0045581C . 68 88C24000 PUSH monster_.0040C288 00455821 . FFD7 CALL EDI 00455823 . 85C0 TEST EAX,EAX 00455825 . 75 07 JNZ SHORT monster_.0045582E ; //若不是" "则跳 00455827 . BA C0C94000 MOV EDX,monster_.0040C9C0 ; UNICODE "7V9R21G" 0045582C . EB 60 JMP SHORT monster_.0045588E 0045582E > BA D4C94000 MOV EDX,monster_.0040C9D4 ; UNICODE "1231T" 00455833 . EB 59 JMP SHORT monster_.0045588E 00455835 > BA B0C94000 MOV EDX,monster_.0040C9B0 ; UNICODE "B134K" 0045583A . EB 52 JMP SHORT monster_.0045588E 0045583C > BA A4C94000 MOV EDX,monster_.0040C9A4 ; UNICODE "T2C" 00455841 . EB 4B JMP SHORT monster_.0045588E 00455843 > BA 98C94000 MOV EDX,monster_.0040C998 ; UNICODE "22B" 00455848 . EB 44 JMP SHORT monster_.0045588E 0045584A > BA BCC04000 MOV EDX,monster_.0040C0BC ; //"9" 0045584F . EB 3D JMP SHORT monster_.0045588E 00455851 > BA 8CC94000 MOV EDX,monster_.0040C98C ; UNICODE "RN1" 00455856 . EB 36 JMP SHORT monster_.0045588E 00455858 > BA 80C94000 MOV EDX,monster_.0040C980 ; UNICODE "890" 0045585D . EB 2F JMP SHORT monster_.0045588E 0045585F > BA 74C94000 MOV EDX,monster_.0040C974 ; UNICODE "69T" 00455864 . EB 28 JMP SHORT monster_.0045588E 00455866 > BA 68C94000 MOV EDX,monster_.0040C968 ; UNICODE "52" 0045586B . EB 21 JMP SHORT monster_.0045588E 0045586D > BA 5CC94000 MOV EDX,monster_.0040C95C ; UNICODE "7B" 00455872 . EB 1A JMP SHORT monster_.0045588E 00455874 > BA 50C94000 MOV EDX,monster_.0040C950 ; UNICODE "QR" 00455879 . EB 13 JMP SHORT monster_.0045588E 0045587B > BA 44C94000 MOV EDX,monster_.0040C944 ; UNICODE "T3R" 00455880 . EB 0C JMP SHORT monster_.0045588E 00455882 > BA 38C94000 MOV EDX,monster_.0040C938 ; UNICODE "515" 00455887 . EB 05 JMP SHORT monster_.0045588E 00455889 > BA 2CC94000 MOV EDX,monster_.0040C92C ; UNICODE "314" 0045588E > 8D4D D0 LEA ECX,DWORD PTR SS:[EBP-30] 00455891 . FFD6 CALL ESI 00455893 . 8B55 08 MOV EDX,DWORD PTR SS:[EBP+8] 00455896 . 8B02 MOV EAX,DWORD PTR DS:[EDX] ; //用户名 00455898 . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68] 0045589B . 51 PUSH ECX 0045589C . 6A 04 PUSH 4 0045589E . 50 PUSH EAX 0045589F . C745 A0 01000>MOV DWORD PTR SS:[EBP-60],1 004558A6 . C745 98 02000>MOV DWORD PTR SS:[EBP-68],2 004558AD . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 004558B3 . 8BD0 MOV EDX,EAX 004558B5 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 004558B8 . FFD3 CALL EBX 004558BA . 50 PUSH EAX 004558BB . FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>; MSVBVM50.rtcUpperCaseBstr 004558C1 . 8BD0 MOV EDX,EAX 004558C3 . 8D8D 38FFFFFF LEA ECX,DWORD PTR SS:[EBP-C8] 004558C9 . FFD3 CALL EBX 004558CB . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 004558CE . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 004558D4 . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68] 004558D7 . FF15 E0424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVar 004558DD . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] ; //用户名第4位大写的ASCII码地址 004558E3 . 51 PUSH ECX 004558E4 . 68 28C84000 PUSH monster_.0040C828 ; //"S" 004558E9 . FFD7 CALL EDI 004558EB . 85C0 TEST EAX,EAX 004558ED . 0F84 A7030000 JE monster_.00455C9A ; //若是"S"则跳 004558F3 . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 004558F9 . 52 PUSH EDX 004558FA . 68 18C84000 PUSH monster_.0040C818 004558FF . FFD7 CALL EDI 00455901 . 85C0 TEST EAX,EAX 00455903 . 0F84 91030000 JE monster_.00455C9A ; //若是"N"则跳 00455909 . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 0045590F . 50 PUSH EAX 00455910 . 68 20C84000 PUSH monster_.0040C820 00455915 . FFD7 CALL EDI 00455917 . 85C0 TEST EAX,EAX 00455919 . 0F84 7B030000 JE monster_.00455C9A ; //若是"Y"则跳 0045591F . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 00455925 . 51 PUSH ECX 00455926 . 68 10C84000 PUSH monster_.0040C810 0045592B . FFD7 CALL EDI 0045592D . 85C0 TEST EAX,EAX 0045592F . 0F84 5E030000 JE monster_.00455C93 ; //若是"A"则跳 00455935 . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 0045593B . 52 PUSH EDX 0045593C . 68 9CB74000 PUSH monster_.0040B79C 00455941 . FFD7 CALL EDI 00455943 . 85C0 TEST EAX,EAX 00455945 . 0F84 48030000 JE monster_.00455C93 ; //若是"E"则跳 0045594B . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 00455951 . 50 PUSH EAX 00455952 . 68 30C84000 PUSH monster_.0040C830 00455957 . FFD7 CALL EDI 00455959 . 85C0 TEST EAX,EAX 0045595B . 0F84 32030000 JE monster_.00455C93 ; //若是"J"则跳 00455961 . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 00455967 . 51 PUSH ECX 00455968 . 68 50C84000 PUSH monster_.0040C850 0045596D . FFD7 CALL EDI 0045596F . 85C0 TEST EAX,EAX 00455971 . 0F84 15030000 JE monster_.00455C8C ; //若是"F"则跳 00455977 . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 0045597D . 52 PUSH EDX 0045597E . 68 0C854000 PUSH monster_.0040850C 00455983 . FFD7 CALL EDI 00455985 . 85C0 TEST EAX,EAX 00455987 . 0F84 FF020000 JE monster_.00455C8C ; //若是"K"则跳 0045598D . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 00455993 . 50 PUSH EAX 00455994 . 68 48C84000 PUSH monster_.0040C848 00455999 . FFD7 CALL EDI 0045599B . 85C0 TEST EAX,EAX 0045599D . 0F84 E9020000 JE monster_.00455C8C ; //若是"I"则跳 004559A3 . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 004559A9 . 51 PUSH ECX 004559AA . 68 50C84000 PUSH monster_.0040C850 004559AF . FFD7 CALL EDI 004559B1 . 85C0 TEST EAX,EAX 004559B3 . 0F84 CC020000 JE monster_.00455C85 ; //若是"F"则跳 004559B9 . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 004559BF . 52 PUSH EDX 004559C0 . 68 08C64000 PUSH monster_.0040C608 004559C5 . FFD7 CALL EDI 004559C7 . 85C0 TEST EAX,EAX 004559C9 . 0F84 B6020000 JE monster_.00455C85 ; //若是"0"则跳 004559CF . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 004559D5 . 50 PUSH EAX 004559D6 . 68 58C84000 PUSH monster_.0040C858 004559DB . FFD7 CALL EDI 004559DD . 85C0 TEST EAX,EAX 004559DF . 0F84 A0020000 JE monster_.00455C85 ; //若是"L"则跳 004559E5 . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 004559EB . 51 PUSH ECX 004559EC . 68 6CC84000 PUSH monster_.0040C86C 004559F1 . FFD7 CALL EDI 004559F3 . 85C0 TEST EAX,EAX 004559F5 . 0F84 83020000 JE monster_.00455C7E ; //若是"M"则跳 004559FB . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 00455A01 . 52 PUSH EDX 00455A02 . 68 74C84000 PUSH monster_.0040C874 00455A07 . FFD7 CALL EDI 00455A09 . 85C0 TEST EAX,EAX 00455A0B . 0F84 6D020000 JE monster_.00455C7E ; //若是"B"则跳 00455A11 . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 00455A17 . 50 PUSH EAX 00455A18 . 68 38C84000 PUSH monster_.0040C838 00455A1D . FFD7 CALL EDI 00455A1F . 85C0 TEST EAX,EAX 00455A21 . 0F84 57020000 JE monster_.00455C7E ; //若是"H"则跳 00455A27 . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 00455A2D . 51 PUSH ECX 00455A2E . 68 84C84000 PUSH monster_.0040C884 00455A33 . FFD7 CALL EDI 00455A35 . 85C0 TEST EAX,EAX 00455A37 . 0F84 3A020000 JE monster_.00455C77 ; //若是"P"则跳 00455A3D . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 00455A43 . 52 PUSH EDX 00455A44 . 68 8CC84000 PUSH monster_.0040C88C 00455A49 . FFD7 CALL EDI 00455A4B . 85C0 TEST EAX,EAX 00455A4D . 0F84 24020000 JE monster_.00455C77 ; //若是"Q"则跳 00455A53 . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 00455A59 . 50 PUSH EAX 00455A5A . 68 94C84000 PUSH monster_.0040C894 00455A5F . FFD7 CALL EDI 00455A61 . 85C0 TEST EAX,EAX 00455A63 . 0F84 0E020000 JE monster_.00455C77 ; //若是"R"则跳 00455A69 . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 00455A6F . 51 PUSH ECX 00455A70 . 68 C0BB4000 PUSH monster_.0040BBC0 00455A75 . FFD7 CALL EDI 00455A77 . 85C0 TEST EAX,EAX 00455A79 . 0F84 F1010000 JE monster_.00455C70 ; //若是"D"则跳 00455A7F . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 00455A85 . 52 PUSH EDX 00455A86 . 68 A4C84000 PUSH monster_.0040C8A4 00455A8B . FFD7 CALL EDI 00455A8D . 85C0 TEST EAX,EAX 00455A8F . 0F84 DB010000 JE monster_.00455C70 ; //若是"T"则跳 00455A95 . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 00455A9B . 50 PUSH EAX 00455A9C . 68 ACC84000 PUSH monster_.0040C8AC 00455AA1 . FFD7 CALL EDI 00455AA3 . 85C0 TEST EAX,EAX 00455AA5 . 0F84 C5010000 JE monster_.00455C70 ; //若是"U"则跳 00455AAB . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 00455AB1 . 51 PUSH ECX 00455AB2 . 68 C0C84000 PUSH monster_.0040C8C0 00455AB7 . FFD7 CALL EDI 00455AB9 . 85C0 TEST EAX,EAX 00455ABB . 0F84 A8010000 JE monster_.00455C69 ; //若是"V"则跳 00455AC1 . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 00455AC7 . 52 PUSH EDX 00455AC8 . 68 C8C84000 PUSH monster_.0040C8C8 00455ACD . FFD7 CALL EDI 00455ACF . 85C0 TEST EAX,EAX 00455AD1 . 0F84 92010000 JE monster_.00455C69 ; //若是"Z"则跳 00455AD7 . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 00455ADD . 50 PUSH EAX 00455ADE . 68 D0C84000 PUSH monster_.0040C8D0 00455AE3 . FFD7 CALL EDI 00455AE5 . 85C0 TEST EAX,EAX 00455AE7 . 0F84 7C010000 JE monster_.00455C69 ; //若是"X"则跳 00455AED . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 00455AF3 . 51 PUSH ECX 00455AF4 . 68 D8C84000 PUSH monster_.0040C8D8 00455AF9 . FFD7 CALL EDI 00455AFB . 85C0 TEST EAX,EAX 00455AFD . 0F84 5F010000 JE monster_.00455C62 ; //若是"C"则跳 00455B03 . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 00455B09 . 52 PUSH EDX 00455B0A . 68 E0C84000 PUSH monster_.0040C8E0 00455B0F . FFD7 CALL EDI 00455B11 . 85C0 TEST EAX,EAX 00455B13 . 0F84 49010000 JE monster_.00455C62 ; //若是"W"则跳 00455B19 . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 00455B1F . 50 PUSH EAX 00455B20 . 68 A4B74000 PUSH monster_.0040B7A4 00455B25 . FFD7 CALL EDI 00455B27 . 85C0 TEST EAX,EAX 00455B29 . 0F84 2C010000 JE monster_.00455C5B ; //若是"1"则跳 00455B2F . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 00455B35 . 51 PUSH ECX 00455B36 . 68 F4C84000 PUSH monster_.0040C8F4 00455B3B . FFD7 CALL EDI 00455B3D . 85C0 TEST EAX,EAX 00455B3F . 0F84 16010000 JE monster_.00455C5B ; //若是"7"则跳 00455B45 . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 00455B4B . 52 PUSH EDX 00455B4C . 68 FCC84000 PUSH monster_.0040C8FC 00455B51 . FFD7 CALL EDI 00455B53 . 85C0 TEST EAX,EAX 00455B55 . 0F84 00010000 JE monster_.00455C5B ; //若是"5"则跳 00455B5B . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 00455B61 . 50 PUSH EAX 00455B62 . 68 DCB74000 PUSH monster_.0040B7DC 00455B67 . FFD7 CALL EDI 00455B69 . 85C0 TEST EAX,EAX 00455B6B . 0F84 EA000000 JE monster_.00455C5B ; //若是"4"则跳 00455B71 . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 00455B77 . 51 PUSH ECX 00455B78 . 68 B4B74000 PUSH monster_.0040B7B4 00455B7D . FFD7 CALL EDI 00455B7F . 85C0 TEST EAX,EAX 00455B81 . 0F84 CD000000 JE monster_.00455C54 ; //若是"3"则跳 00455B87 . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 00455B8D . 52 PUSH EDX 00455B8E . 68 9CC84000 PUSH monster_.0040C89C 00455B93 . FFD7 CALL EDI 00455B95 . 85C0 TEST EAX,EAX 00455B97 . 0F84 B7000000 JE monster_.00455C54 ; //若是"6"则跳 00455B9D . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 00455BA3 . 50 PUSH EAX 00455BA4 . 68 ACB74000 PUSH monster_.0040B7AC 00455BA9 . FFD7 CALL EDI 00455BAB . 85C0 TEST EAX,EAX 00455BAD . 0F84 A1000000 JE monster_.00455C54 ; //若是"2"则跳 00455BB3 . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 00455BB9 . 51 PUSH ECX 00455BBA . 68 04C94000 PUSH monster_.0040C904 00455BBF . FFD7 CALL EDI 00455BC1 . 85C0 TEST EAX,EAX 00455BC3 . 0F84 8B000000 JE monster_.00455C54 ; //若是"8"则跳 00455BC9 . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 00455BCF . 52 PUSH EDX 00455BD0 . 68 BCC04000 PUSH monster_.0040C0BC 00455BD5 . FFD7 CALL EDI 00455BD7 . 85C0 TEST EAX,EAX 00455BD9 . 74 72 JE SHORT monster_.00455C4D ; //若是"9"则跳 00455BDB . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 00455BE1 . 50 PUSH EAX 00455BE2 . 68 7CC84000 PUSH monster_.0040C87C 00455BE7 . FFD7 CALL EDI 00455BE9 . 85C0 TEST EAX,EAX 00455BEB . 74 60 JE SHORT monster_.00455C4D ; //若是"O"则跳 00455BED . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 00455BF3 . 51 PUSH ECX 00455BF4 . 68 688E4000 PUSH monster_.00408E68 00455BF9 . FFD7 CALL EDI 00455BFB . 85C0 TEST EAX,EAX 00455BFD . 74 47 JE SHORT monster_.00455C46 ; //若是"."则跳 00455BFF . 8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8] 00455C05 . 52 PUSH EDX 00455C06 . 68 70C44000 PUSH monster_.0040C470 00455C0B . FFD7 CALL EDI 00455C0D . 85C0 TEST EAX,EAX 00455C0F . 74 35 JE SHORT monster_.00455C46 ; //若是","则跳 00455C11 . 8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8] 00455C17 . 50 PUSH EAX 00455C18 . 68 78C44000 PUSH monster_.0040C478 00455C1D . FFD7 CALL EDI 00455C1F . 85C0 TEST EAX,EAX 00455C21 . 74 23 JE SHORT monster_.00455C46 ; //若是"-"则跳 00455C23 . 8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8] 00455C29 . 51 PUSH ECX 00455C2A . 68 88C24000 PUSH monster_.0040C288 00455C2F . FFD7 CALL EDI 00455C31 . 85C0 TEST EAX,EAX 00455C33 . 75 0A JNZ SHORT monster_.00455C3F ; //若不是" "则跳 00455C35 . BA 5CCA4000 MOV EDX,monster_.0040CA5C ; UNICODE "BGHJK" 00455C3A . 8D4D E4 LEA ECX,DWORD PTR SS:[EBP-1C] 00455C3D . EB 63 JMP SHORT monster_.00455CA2 00455C3F > BA 6CCA4000 MOV EDX,monster_.0040CA6C ; UNICODE "12T" 00455C44 . EB 59 JMP SHORT monster_.00455C9F 00455C46 > BA 50CA4000 MOV EDX,monster_.0040CA50 ; UNICODE "B1K" 00455C4B . EB 52 JMP SHORT monster_.00455C9F 00455C4D > BA 44CA4000 MOV EDX,monster_.0040CA44 ; UNICODE "TC" 00455C52 . EB 4B JMP SHORT monster_.00455C9F 00455C54 > BA 74C84000 MOV EDX,monster_.0040C874 ; //"B" 00455C59 . EB 44 JMP SHORT monster_.00455C9F 00455C5B > BA BCC04000 MOV EDX,monster_.0040C0BC ; //"9" 00455C60 . EB 3D JMP SHORT monster_.00455C9F 00455C62 > BA 38CA4000 MOV EDX,monster_.0040CA38 ; UNICODE "RR1" 00455C67 . EB 36 JMP SHORT monster_.00455C9F 00455C69 > BA 2CCA4000 MOV EDX,monster_.0040CA2C ; UNICODE "898" 00455C6E . EB 2F JMP SHORT monster_.00455C9F 00455C70 > BA 20CA4000 MOV EDX,monster_.0040CA20 ; UNICODE "697" 00455C75 . EB 28 JMP SHORT monster_.00455C9F 00455C77 > BA 14CA4000 MOV EDX,monster_.0040CA14 ; UNICODE "58" 00455C7C . EB 21 JMP SHORT monster_.00455C9F 00455C7E > BA 08CA4000 MOV EDX,monster_.0040CA08 ; UNICODE "74" 00455C83 . EB 1A JMP SHORT monster_.00455C9F 00455C85 > BA 60C84000 MOV EDX,monster_.0040C860 ; UNICODE "Q7" 00455C8A . EB 13 JMP SHORT monster_.00455C9F 00455C8C > BA FCC94000 MOV EDX,monster_.0040C9FC ; UNICODE "R3R" 00455C91 . EB 0C JMP SHORT monster_.00455C9F 00455C93 > BA F0C94000 MOV EDX,monster_.0040C9F0 ; UNICODE "525" 00455C98 . EB 05 JMP SHORT monster_.00455C9F 00455C9A > BA E4C94000 MOV EDX,monster_.0040C9E4 ; UNICODE "414" 00455C9F > 8D4D CC LEA ECX,DWORD PTR SS:[EBP-34] 00455CA2 > FFD6 CALL ESI 00455CA4 . 8B55 E4 MOV EDX,DWORD PTR SS:[EBP-1C] ; //第1组查表数据 00455CA7 . 8B45 D8 MOV EAX,DWORD PTR SS:[EBP-28] ; //第2组查表数据 00455CAA . 52 PUSH EDX 00455CAB . 50 PUSH EAX 00455CAC . FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>; MSVBVM50.__vbaStrCat 00455CB2 . 8BD0 MOV EDX,EAX 00455CB4 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 00455CB7 . FFD3 CALL EBX 00455CB9 . 8B4D D0 MOV ECX,DWORD PTR SS:[EBP-30] ; //第3组查表数据 00455CBC . 50 PUSH EAX 00455CBD . 51 PUSH ECX 00455CBE . FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>; MSVBVM50.__vbaStrCat 00455CC4 . 8BD0 MOV EDX,EAX 00455CC6 . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 00455CC9 . FFD3 CALL EBX 00455CCB . 8B55 CC MOV EDX,DWORD PTR SS:[EBP-34] ; //第4组查表数据 00455CCE . 50 PUSH EAX 00455CCF . 52 PUSH EDX 00455CD0 . FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>; MSVBVM50.__vbaStrCat 00455CD6 . 8BD0 MOV EDX,EAX ; //将上面所取的4组字符串相连 00455CD8 . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38] 00455CDB . FFD3 CALL EBX 00455CDD . 8D45 B0 LEA EAX,DWORD PTR SS:[EBP-50] 00455CE0 . 50 PUSH EAX 00455CE1 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 00455CE4 . 51 PUSH ECX 00455CE5 . 6A 02 PUSH 2 00455CE7 . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 00455CED . 8B45 C8 MOV EAX,DWORD PTR SS:[EBP-38] 00455CF0 . 83C4 0C ADD ESP,0C 00455CF3 . 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68] 00455CF6 . 52 PUSH EDX 00455CF7 . 6A 03 PUSH 3 00455CF9 . 50 PUSH EAX 00455CFA . C745 A0 01000>MOV DWORD PTR SS:[EBP-60],1 00455D01 . C745 98 02000>MOV DWORD PTR SS:[EBP-68],2 00455D08 . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 00455D0E . 8BD0 MOV EDX,EAX 00455D10 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 00455D13 . FFD3 CALL EBX 00455D15 . 50 PUSH EAX 00455D16 . FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>; MSVBVM50.rtcUpperCaseBstr 00455D1C . 8BD0 MOV EDX,EAX 00455D1E . 8D8D 34FFFFFF LEA ECX,DWORD PTR SS:[EBP-CC] 00455D24 . FFD3 CALL EBX 00455D26 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 00455D29 . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 00455D2F . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68] 00455D32 . FF15 E0424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVar 00455D38 . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] ; //相连字符串I第3位大写的ASCII码地址 00455D3E . 51 PUSH ECX 00455D3F . 68 28C84000 PUSH monster_.0040C828 00455D44 . FFD7 CALL EDI 00455D46 . 85C0 TEST EAX,EAX 00455D48 . 0F84 87030000 JE monster_.004560D5 ; //若是"S"则跳 00455D4E . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00455D54 . 52 PUSH EDX 00455D55 . 68 18C84000 PUSH monster_.0040C818 00455D5A . FFD7 CALL EDI 00455D5C . 85C0 TEST EAX,EAX 00455D5E . 0F84 71030000 JE monster_.004560D5 ; //若是"N"则跳 00455D64 . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00455D6A . 50 PUSH EAX 00455D6B . 68 20C84000 PUSH monster_.0040C820 00455D70 . FFD7 CALL EDI 00455D72 . 85C0 TEST EAX,EAX 00455D74 . 0F84 5B030000 JE monster_.004560D5 ; //若是"Y"则跳 00455D7A . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 00455D80 . 51 PUSH ECX 00455D81 . 68 10C84000 PUSH monster_.0040C810 00455D86 . FFD7 CALL EDI 00455D88 . 85C0 TEST EAX,EAX 00455D8A . 0F84 3E030000 JE monster_.004560CE ; //若是"A"则跳 00455D90 . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00455D96 . 52 PUSH EDX 00455D97 . 68 9CB74000 PUSH monster_.0040B79C 00455D9C . FFD7 CALL EDI 00455D9E . 85C0 TEST EAX,EAX 00455DA0 . 0F84 28030000 JE monster_.004560CE ; //若是"E"则跳 00455DA6 . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00455DAC . 50 PUSH EAX 00455DAD . 68 30C84000 PUSH monster_.0040C830 00455DB2 . FFD7 CALL EDI 00455DB4 . 85C0 TEST EAX,EAX 00455DB6 . 0F84 12030000 JE monster_.004560CE ; //若是"J"则跳 00455DBC . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 00455DC2 . 51 PUSH ECX 00455DC3 . 68 50C84000 PUSH monster_.0040C850 00455DC8 . FFD7 CALL EDI 00455DCA . 85C0 TEST EAX,EAX 00455DCC . 0F84 F5020000 JE monster_.004560C7 ; //若是"F"则跳 00455DD2 . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00455DD8 . 52 PUSH EDX 00455DD9 . 68 0C854000 PUSH monster_.0040850C 00455DDE . FFD7 CALL EDI 00455DE0 . 85C0 TEST EAX,EAX 00455DE2 . 0F84 DF020000 JE monster_.004560C7 ; //若是"K"则跳 00455DE8 . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00455DEE . 50 PUSH EAX 00455DEF . 68 48C84000 PUSH monster_.0040C848 00455DF4 . FFD7 CALL EDI 00455DF6 . 85C0 TEST EAX,EAX 00455DF8 . 0F84 C9020000 JE monster_.004560C7 ; //若是"I"则跳 00455DFE . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 00455E04 . 51 PUSH ECX 00455E05 . 68 50C84000 PUSH monster_.0040C850 00455E0A . FFD7 CALL EDI 00455E0C . 85C0 TEST EAX,EAX 00455E0E . 0F84 AC020000 JE monster_.004560C0 ; //若是"F"则跳 00455E14 . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00455E1A . 52 PUSH EDX 00455E1B . 68 08C64000 PUSH monster_.0040C608 00455E20 . FFD7 CALL EDI 00455E22 . 85C0 TEST EAX,EAX 00455E24 . 0F84 96020000 JE monster_.004560C0 ; //若是"0"则跳 00455E2A . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00455E30 . 50 PUSH EAX 00455E31 . 68 58C84000 PUSH monster_.0040C858 00455E36 . FFD7 CALL EDI 00455E38 . 85C0 TEST EAX,EAX 00455E3A . 0F84 80020000 JE monster_.004560C0 ; //若是"L"则跳 00455E40 . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 00455E46 . 51 PUSH ECX 00455E47 . 68 6CC84000 PUSH monster_.0040C86C 00455E4C . FFD7 CALL EDI 00455E4E . 85C0 TEST EAX,EAX 00455E50 . 0F84 63020000 JE monster_.004560B9 ; //若是"M"则跳 00455E56 . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00455E5C . 52 PUSH EDX 00455E5D . 68 74C84000 PUSH monster_.0040C874 00455E62 . FFD7 CALL EDI 00455E64 . 85C0 TEST EAX,EAX 00455E66 . 0F84 4D020000 JE monster_.004560B9 ; //若是"B"则跳 00455E6C . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00455E72 . 50 PUSH EAX 00455E73 . 68 38C84000 PUSH monster_.0040C838 00455E78 . FFD7 CALL EDI 00455E7A . 85C0 TEST EAX,EAX 00455E7C . 0F84 37020000 JE monster_.004560B9 ; //若是"H"则跳 00455E82 . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 00455E88 . 51 PUSH ECX 00455E89 . 68 84C84000 PUSH monster_.0040C884 00455E8E . FFD7 CALL EDI 00455E90 . 85C0 TEST EAX,EAX 00455E92 . 0F84 1A020000 JE monster_.004560B2 ; //若是"P"则跳 00455E98 . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00455E9E . 52 PUSH EDX 00455E9F . 68 8CC84000 PUSH monster_.0040C88C 00455EA4 . FFD7 CALL EDI 00455EA6 . 85C0 TEST EAX,EAX 00455EA8 . 0F84 04020000 JE monster_.004560B2 ; //若是"Q"则跳 00455EAE . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00455EB4 . 50 PUSH EAX 00455EB5 . 68 94C84000 PUSH monster_.0040C894 00455EBA . FFD7 CALL EDI 00455EBC . 85C0 TEST EAX,EAX 00455EBE . 0F84 EE010000 JE monster_.004560B2 ; //若是"R"则跳 00455EC4 . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 00455ECA . 51 PUSH ECX 00455ECB . 68 C0BB4000 PUSH monster_.0040BBC0 00455ED0 . FFD7 CALL EDI 00455ED2 . 85C0 TEST EAX,EAX 00455ED4 . 0F84 D1010000 JE monster_.004560AB ; //若是"D"则跳 00455EDA . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00455EE0 . 52 PUSH EDX 00455EE1 . 68 A4C84000 PUSH monster_.0040C8A4 00455EE6 . FFD7 CALL EDI 00455EE8 . 85C0 TEST EAX,EAX 00455EEA . 0F84 BB010000 JE monster_.004560AB ; //若是"T"则跳 00455EF0 . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00455EF6 . 50 PUSH EAX 00455EF7 . 68 ACC84000 PUSH monster_.0040C8AC 00455EFC . FFD7 CALL EDI 00455EFE . 85C0 TEST EAX,EAX 00455F00 . 0F84 A5010000 JE monster_.004560AB ; //若是"U"则跳 00455F06 . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 00455F0C . 51 PUSH ECX 00455F0D . 68 C0C84000 PUSH monster_.0040C8C0 00455F12 . FFD7 CALL EDI 00455F14 . 85C0 TEST EAX,EAX 00455F16 . 0F84 88010000 JE monster_.004560A4 ; //若是"V"则跳 00455F1C . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00455F22 . 52 PUSH EDX 00455F23 . 68 C8C84000 PUSH monster_.0040C8C8 00455F28 . FFD7 CALL EDI 00455F2A . 85C0 TEST EAX,EAX 00455F2C . 0F84 72010000 JE monster_.004560A4 ; //若是"Z"则跳 00455F32 . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00455F38 . 50 PUSH EAX 00455F39 . 68 D0C84000 PUSH monster_.0040C8D0 00455F3E . FFD7 CALL EDI 00455F40 . 85C0 TEST EAX,EAX 00455F42 . 0F84 5C010000 JE monster_.004560A4 ; //若是"X"则跳 00455F48 . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 00455F4E . 51 PUSH ECX 00455F4F . 68 D8C84000 PUSH monster_.0040C8D8 00455F54 . FFD7 CALL EDI 00455F56 . 85C0 TEST EAX,EAX 00455F58 . 0F84 3F010000 JE monster_.0045609D ; //若是"C"则跳 00455F5E . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00455F64 . 52 PUSH EDX 00455F65 . 68 E0C84000 PUSH monster_.0040C8E0 00455F6A . FFD7 CALL EDI 00455F6C . 85C0 TEST EAX,EAX 00455F6E . 0F84 29010000 JE monster_.0045609D ; //若是"W"则跳 00455F74 . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00455F7A . 50 PUSH EAX 00455F7B . 68 A4B74000 PUSH monster_.0040B7A4 00455F80 . FFD7 CALL EDI 00455F82 . 85C0 TEST EAX,EAX 00455F84 . 0F84 0C010000 JE monster_.00456096 ; //若是"1"则跳 00455F8A . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 00455F90 . 51 PUSH ECX 00455F91 . 68 F4C84000 PUSH monster_.0040C8F4 00455F96 . FFD7 CALL EDI 00455F98 . 85C0 TEST EAX,EAX 00455F9A . 0F84 F6000000 JE monster_.00456096 ; //若是"7"则跳 00455FA0 . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00455FA6 . 52 PUSH EDX 00455FA7 . 68 FCC84000 PUSH monster_.0040C8FC 00455FAC . FFD7 CALL EDI 00455FAE . 85C0 TEST EAX,EAX 00455FB0 . 0F84 E0000000 JE monster_.00456096 ; //若是"5"则跳 00455FB6 . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00455FBC . 50 PUSH EAX 00455FBD . 68 DCB74000 PUSH monster_.0040B7DC 00455FC2 . FFD7 CALL EDI 00455FC4 . 85C0 TEST EAX,EAX 00455FC6 . 0F84 CA000000 JE monster_.00456096 ; //若是"4"则跳 00455FCC . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 00455FD2 . 51 PUSH ECX 00455FD3 . 68 B4B74000 PUSH monster_.0040B7B4 00455FD8 . FFD7 CALL EDI 00455FDA . 85C0 TEST EAX,EAX 00455FDC . 0F84 AD000000 JE monster_.0045608F ; //若是"3"则跳 00455FE2 . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00455FE8 . 52 PUSH EDX 00455FE9 . 68 9CC84000 PUSH monster_.0040C89C 00455FEE . FFD7 CALL EDI 00455FF0 . 85C0 TEST EAX,EAX 00455FF2 . 0F84 97000000 JE monster_.0045608F ; //若是"6"则跳 00455FF8 . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00455FFE . 50 PUSH EAX 00455FFF . 68 ACB74000 PUSH monster_.0040B7AC 00456004 . FFD7 CALL EDI 00456006 . 85C0 TEST EAX,EAX 00456008 . 0F84 81000000 JE monster_.0045608F ; //若是"2"则跳 0045600E . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 00456014 . 51 PUSH ECX 00456015 . 68 04C94000 PUSH monster_.0040C904 0045601A . FFD7 CALL EDI 0045601C . 85C0 TEST EAX,EAX 0045601E . 74 6F JE SHORT monster_.0045608F ; //若是"8"则跳 00456020 . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 00456026 . 52 PUSH EDX 00456027 . 68 BCC04000 PUSH monster_.0040C0BC 0045602C . FFD7 CALL EDI 0045602E . 85C0 TEST EAX,EAX 00456030 . 74 56 JE SHORT monster_.00456088 ; //若是"9"则跳 00456032 . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 00456038 . 50 PUSH EAX 00456039 . 68 7CC84000 PUSH monster_.0040C87C 0045603E . FFD7 CALL EDI 00456040 . 85C0 TEST EAX,EAX 00456042 . 74 44 JE SHORT monster_.00456088 ; //若是"O"则跳 00456044 . 8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC] 0045604A . 51 PUSH ECX 0045604B . 68 688E4000 PUSH monster_.00408E68 00456050 . FFD7 CALL EDI 00456052 . 85C0 TEST EAX,EAX 00456054 . 74 2B JE SHORT monster_.00456081 ; //若是"."则跳 00456056 . 8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC] 0045605C . 52 PUSH EDX 0045605D . 68 70C44000 PUSH monster_.0040C470 00456062 . FFD7 CALL EDI 00456064 . 85C0 TEST EAX,EAX 00456066 . 74 19 JE SHORT monster_.00456081 ; //若是","则跳 00456068 . 8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC] 0045606E . 50 PUSH EAX 0045606F . 68 78C44000 PUSH monster_.0040C478 00456074 . FFD7 CALL EDI 00456076 . 85C0 TEST EAX,EAX 00456078 . 74 07 JE SHORT monster_.00456081 ; //若是"-"则跳 0045607A . BA FCCA4000 MOV EDX,monster_.0040CAFC ; UNICODE "1S2TSDS" 0045607F . EB 59 JMP SHORT monster_.004560DA 00456081 > BA E0CA4000 MOV EDX,monster_.0040CAE0 ; UNICODE "BASDFGSG1K" 00456086 . EB 52 JMP SHORT monster_.004560DA 00456088 > BA D0CA4000 MOV EDX,monster_.0040CAD0 ; UNICODE "T158C" 0045608D . EB 4B JMP SHORT monster_.004560DA 0045608F > BA B8CA4000 MOV EDX,monster_.0040CAB8 ; UNICODE "4TGFDERN" 00456094 . EB 44 JMP SHORT monster_.004560DA 00456096 > BA BCC04000 MOV EDX,monster_.0040C0BC ; //"9" 0045609B . EB 3D JMP SHORT monster_.004560DA 0045609D > BA ACCA4000 MOV EDX,monster_.0040CAAC ; UNICODE "BGH" 004560A2 . EB 36 JMP SHORT monster_.004560DA 004560A4 > BA A0CA4000 MOV EDX,monster_.0040CAA0 ; UNICODE "YUI" 004560A9 . EB 2F JMP SHORT monster_.004560DA 004560AB > BA 94CA4000 MOV EDX,monster_.0040CA94 ; UNICODE "6K7" 004560B0 . EB 28 JMP SHORT monster_.004560DA 004560B2 > BA 887A4000 MOV EDX,monster_.00407A88 ; UNICODE "5M" 004560B7 . EB 21 JMP SHORT monster_.004560DA 004560B9 > BA E4864000 MOV EDX,monster_.004086E4 ; UNICODE "U4" 004560BE . EB 1A JMP SHORT monster_.004560DA 004560C0 > BA A0884000 MOV EDX,monster_.004088A0 ; UNICODE "R7" 004560C5 . EB 13 JMP SHORT monster_.004560DA 004560C7 > BA FCC94000 MOV EDX,monster_.0040C9FC ; UNICODE "R3R" 004560CC . EB 0C JMP SHORT monster_.004560DA 004560CE > BA 84CA4000 MOV EDX,monster_.0040CA84 ; UNICODE "TYU" 004560D3 . EB 05 JMP SHORT monster_.004560DA 004560D5 > BA 78CA4000 MOV EDX,monster_.0040CA78 ; UNICODE "4G4" 004560DA > 8D4D C4 LEA ECX,DWORD PTR SS:[EBP-3C] 004560DD . FFD6 CALL ESI 004560DF . 8B4D C8 MOV ECX,DWORD PTR SS:[EBP-38] ; //相连字符串I 004560E2 . 8B55 E4 MOV EDX,DWORD PTR SS:[EBP-1C] ; //第1组查表数据 004560E5 . 8B3D 2C434600 MOV EDI,DWORD PTR DS:[<&MSVBVM50.__vbaSt>; MSVBVM50.__vbaStrCat 004560EB . 51 PUSH ECX 004560EC . 52 PUSH EDX 004560ED . FFD7 CALL EDI ; <&MSVBVM50.__vbaStrCat> 004560EF . 8BD0 MOV EDX,EAX 004560F1 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 004560F4 . FFD3 CALL EBX 004560F6 . 50 PUSH EAX 004560F7 . 8B45 CC MOV EAX,DWORD PTR SS:[EBP-34] ; //第4组查表数据 004560FA . 50 PUSH EAX 004560FB . FFD7 CALL EDI 004560FD . 8BD0 MOV EDX,EAX 004560FF . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 00456102 . FFD3 CALL EBX 00456104 . 8B4D D8 MOV ECX,DWORD PTR SS:[EBP-28] ; //第2组查表数据 00456107 . 50 PUSH EAX 00456108 . 51 PUSH ECX 00456109 . FFD7 CALL EDI 0045610B . 8BD0 MOV EDX,EAX 0045610D . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 00456110 . FFD3 CALL EBX 00456112 . 8B55 CC MOV EDX,DWORD PTR SS:[EBP-34] ; //第4组查表数据 00456115 . 50 PUSH EAX 00456116 . 52 PUSH EDX 00456117 . FFD7 CALL EDI 00456119 . 8BD0 MOV EDX,EAX ; //将以上数据相连,形成相连字符串II 0045611B . 8D4D C0 LEA ECX,DWORD PTR SS:[EBP-40] 0045611E . FFD3 CALL EBX 00456120 . 8D45 AC LEA EAX,DWORD PTR SS:[EBP-54] 00456123 . 50 PUSH EAX 00456124 . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 00456127 . 51 PUSH ECX 00456128 . 8D55 B4 LEA EDX,DWORD PTR SS:[EBP-4C] 0045612B . 52 PUSH EDX 0045612C . 6A 03 PUSH 3 0045612E . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 00456134 . B8 01000000 MOV EAX,1 00456139 . 83C4 10 ADD ESP,10 0045613C . 8945 A0 MOV DWORD PTR SS:[EBP-60],EAX 0045613F . B9 02000000 MOV ECX,2 00456144 . 8945 90 MOV DWORD PTR SS:[EBP-70],EAX 00456147 . 8945 80 MOV DWORD PTR SS:[EBP-80],EAX 0045614A . 8D45 98 LEA EAX,DWORD PTR SS:[EBP-68] 0045614D . 50 PUSH EAX 0045614E . 894D 98 MOV DWORD PTR SS:[EBP-68],ECX 00456151 . 894D 88 MOV DWORD PTR SS:[EBP-78],ECX 00456154 . 898D 78FFFFFF MOV DWORD PTR SS:[EBP-88],ECX 0045615A . 8B4D C0 MOV ECX,DWORD PTR SS:[EBP-40] ; //相连字符串II 0045615D . 6A 04 PUSH 4 0045615F . 51 PUSH ECX 00456160 . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 00456166 . 8BD0 MOV EDX,EAX ; //取相连字符串II第4位 00456168 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 0045616B . FFD3 CALL EBX 0045616D . 50 PUSH EAX 0045616E . 8B45 C0 MOV EAX,DWORD PTR SS:[EBP-40] ; //相连字符串II 00456171 . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78] 00456174 . 52 PUSH EDX 00456175 . 6A 02 PUSH 2 00456177 . 50 PUSH EAX 00456178 . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 0045617E . 8BD0 MOV EDX,EAX ; //取相连字符串II第2位 00456180 . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 00456183 . FFD3 CALL EBX 00456185 . 50 PUSH EAX 00456186 . FFD7 CALL EDI 00456188 . 8BD0 MOV EDX,EAX 0045618A . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045618D . FFD3 CALL EBX 0045618F . 8B55 C0 MOV EDX,DWORD PTR SS:[EBP-40] ; //相连字符串II 00456192 . 50 PUSH EAX 00456193 . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88] 00456199 . 51 PUSH ECX 0045619A . 6A 07 PUSH 7 0045619C . 52 PUSH EDX 0045619D . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 004561A3 . 8BD0 MOV EDX,EAX ; //取相连字符串II第7位 004561A5 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58] 004561A8 . FFD3 CALL EBX 004561AA . 50 PUSH EAX 004561AB . FFD7 CALL EDI ; //相连A 004561AD . 8BD0 MOV EDX,EAX 004561AF . 8D4D BC LEA ECX,DWORD PTR SS:[EBP-44] 004561B2 . FFD3 CALL EBX 004561B4 . 8D45 A8 LEA EAX,DWORD PTR SS:[EBP-58] 004561B7 . 50 PUSH EAX 004561B8 . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 004561BB . 51 PUSH ECX 004561BC . 8D55 B0 LEA EDX,DWORD PTR SS:[EBP-50] 004561BF . 52 PUSH EDX 004561C0 . 8D45 B4 LEA EAX,DWORD PTR SS:[EBP-4C] 004561C3 . 50 PUSH EAX 004561C4 . 6A 04 PUSH 4 004561C6 . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 004561CC . 83C4 14 ADD ESP,14 004561CF . 8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88] 004561D5 . 51 PUSH ECX 004561D6 . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78] 004561D9 . 52 PUSH EDX 004561DA . 8D45 98 LEA EAX,DWORD PTR SS:[EBP-68] 004561DD . 50 PUSH EAX 004561DE . 6A 03 PUSH 3 004561E0 . FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVarList 004561E6 . 8B55 C8 MOV EDX,DWORD PTR SS:[EBP-38] ; //相连字符串I 004561E9 . B9 02000000 MOV ECX,2 004561EE . 83C4 10 ADD ESP,10 004561F1 . 894D 98 MOV DWORD PTR SS:[EBP-68],ECX 004561F4 . 894D 88 MOV DWORD PTR SS:[EBP-78],ECX 004561F7 . 898D 78FFFFFF MOV DWORD PTR SS:[EBP-88],ECX 004561FD . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68] 00456200 . 51 PUSH ECX 00456201 . B8 01000000 MOV EAX,1 00456206 . 6A 04 PUSH 4 00456208 . 52 PUSH EDX 00456209 . 8945 A0 MOV DWORD PTR SS:[EBP-60],EAX 0045620C . 8945 90 MOV DWORD PTR SS:[EBP-70],EAX 0045620F . 8945 80 MOV DWORD PTR SS:[EBP-80],EAX 00456212 . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 00456218 . 8BD0 MOV EDX,EAX ; //取相连字符串I第4位 0045621A . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 0045621D . FFD3 CALL EBX 0045621F . 8B4D C4 MOV ECX,DWORD PTR SS:[EBP-3C] ; //第5组查表数据 00456222 . 50 PUSH EAX 00456223 . 8D45 88 LEA EAX,DWORD PTR SS:[EBP-78] 00456226 . 50 PUSH EAX 00456227 . 6A 02 PUSH 2 00456229 . 51 PUSH ECX 0045622A . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 00456230 . 8BD0 MOV EDX,EAX ; //第5组查表数据第2位 00456232 . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 00456235 . FFD3 CALL EBX 00456237 . 50 PUSH EAX 00456238 . FFD7 CALL EDI 0045623A . 8BD0 MOV EDX,EAX 0045623C . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045623F . FFD3 CALL EBX 00456241 . 50 PUSH EAX 00456242 . 8B45 C0 MOV EAX,DWORD PTR SS:[EBP-40] ; //相连字符串II 00456245 . 8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88] 0045624B . 52 PUSH EDX 0045624C . 6A 07 PUSH 7 0045624E . 50 PUSH EAX 0045624F . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 00456255 . 8BD0 MOV EDX,EAX ; //取相连字符串II第7位 00456257 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58] 0045625A . FFD3 CALL EBX 0045625C . 50 PUSH EAX 0045625D . FFD7 CALL EDI ; //相连B 0045625F . 8BD0 MOV EDX,EAX 00456261 . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48] 00456264 . FFD3 CALL EBX 00456266 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58] 00456269 . 51 PUSH ECX 0045626A . 8D55 AC LEA EDX,DWORD PTR SS:[EBP-54] 0045626D . 52 PUSH EDX 0045626E . 8D45 B0 LEA EAX,DWORD PTR SS:[EBP-50] 00456271 . 50 PUSH EAX 00456272 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 00456275 . 51 PUSH ECX 00456276 . 6A 04 PUSH 4 00456278 . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 0045627E . 83C4 14 ADD ESP,14 00456281 . 8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88] 00456287 . 52 PUSH EDX 00456288 . 8D45 88 LEA EAX,DWORD PTR SS:[EBP-78] 0045628B . 50 PUSH EAX 0045628C . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68] 0045628F . 51 PUSH ECX 00456290 . 6A 03 PUSH 3 00456292 . FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVarList 00456298 . 83C4 10 ADD ESP,10 0045629B . B8 02000000 MOV EAX,2 004562A0 . 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68] 004562A3 . 52 PUSH EDX 004562A4 . 8945 98 MOV DWORD PTR SS:[EBP-68],EAX 004562A7 . 8945 90 MOV DWORD PTR SS:[EBP-70],EAX 004562AA . 8945 88 MOV DWORD PTR SS:[EBP-78],EAX 004562AD . 8985 78FFFFFF MOV DWORD PTR SS:[EBP-88],EAX 004562B3 . 8B45 BC MOV EAX,DWORD PTR SS:[EBP-44] ; //相连A 004562B6 . 6A 01 PUSH 1 004562B8 . 50 PUSH EAX 004562B9 . C745 A0 01000>MOV DWORD PTR SS:[EBP-60],1 004562C0 . C745 80 04000>MOV DWORD PTR SS:[EBP-80],4 004562C7 . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 004562CD . 8BD0 MOV EDX,EAX ; //取相连A第1位 004562CF . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 004562D2 . FFD3 CALL EBX 004562D4 . 8B55 B8 MOV EDX,DWORD PTR SS:[EBP-48] ; //相连B 004562D7 . 50 PUSH EAX 004562D8 . 8D4D 88 LEA ECX,DWORD PTR SS:[EBP-78] 004562DB . 51 PUSH ECX 004562DC . 6A 02 PUSH 2 004562DE . 52 PUSH EDX 004562DF . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 004562E5 . 8BD0 MOV EDX,EAX ; //取相连B第2-3位 004562E7 . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 004562EA . FFD3 CALL EBX 004562EC . 50 PUSH EAX 004562ED . FFD7 CALL EDI ; //相连C 004562EF . 8BD0 MOV EDX,EAX 004562F1 . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 004562F4 . FFD3 CALL EBX 004562F6 . 8B4D C0 MOV ECX,DWORD PTR SS:[EBP-40] ; //相连字符串II 004562F9 . 50 PUSH EAX 004562FA . 8D85 78FFFFFF LEA EAX,DWORD PTR SS:[EBP-88] 00456300 . 50 PUSH EAX 00456301 . 6A 07 PUSH 7 00456303 . 51 PUSH ECX 00456304 . FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>; MSVBVM50.rtcMidCharBstr 0045630A . 8BD0 MOV EDX,EAX ; //取相连字符串II第7-10位 0045630C . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58] 0045630F . FFD3 CALL EBX 00456311 . 50 PUSH EAX 00456312 . FFD7 CALL EDI ; //相连D 00456314 . 8BD0 MOV EDX,EAX 00456316 . 8D4D E8 LEA ECX,DWORD PTR SS:[EBP-18] 00456319 . FFD3 CALL EBX 0045631B . 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58] 0045631E . 52 PUSH EDX 0045631F . 8D45 AC LEA EAX,DWORD PTR SS:[EBP-54] 00456322 . 50 PUSH EAX 00456323 . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 00456326 . 51 PUSH ECX 00456327 . 8D55 B4 LEA EDX,DWORD PTR SS:[EBP-4C] 0045632A . 52 PUSH EDX 0045632B . 6A 04 PUSH 4 0045632D . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 00456333 . 83C4 14 ADD ESP,14 00456336 . 8D85 78FFFFFF LEA EAX,DWORD PTR SS:[EBP-88] 0045633C . 50 PUSH EAX 0045633D . 8D4D 88 LEA ECX,DWORD PTR SS:[EBP-78] 00456340 . 51 PUSH ECX 00456341 . 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68] 00456344 . 52 PUSH EDX 00456345 . 6A 03 PUSH 3 00456347 . FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVarList 0045634D . 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18] ; //相连D 00456350 . 83C4 10 ADD ESP,10 00456353 . 6A 04 PUSH 4 00456355 . 50 PUSH EAX 00456356 . FF15 E8444600 CALL DWORD PTR DS:[<&MSVBVM50.rtcLeftCha>; MSVBVM50.rtcLeftCharBstr 0045635C . 8BD0 MOV EDX,EAX ; //取相连D第1-4位 0045635E . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 00456361 . FFD3 CALL EBX 00456363 . 8B4D C0 MOV ECX,DWORD PTR SS:[EBP-40] ; //相连字符串II 00456366 . 50 PUSH EAX 00456367 . 6A 03 PUSH 3 00456369 . 51 PUSH ECX 0045636A . FF15 E8444600 CALL DWORD PTR DS:[<&MSVBVM50.rtcLeftCha>; MSVBVM50.rtcLeftCharBstr 00456370 . 8BD0 MOV EDX,EAX ; //取相连字符串II第1-3位 00456372 . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 00456375 . FFD3 CALL EBX 00456377 . 50 PUSH EAX 00456378 . FFD7 CALL EDI ; //相连E 0045637A . 8BD0 MOV EDX,EAX 0045637C . 8D4D AC LEA ECX,DWORD PTR SS:[EBP-54] 0045637F . FFD3 CALL EBX 00456381 . 50 PUSH EAX 00456382 . FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>; MSVBVM50.rtcTrimBstr 00456388 . 8BD0 MOV EDX,EAX 0045638A . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24] 0045638D . FFD3 CALL EBX 0045638F . 8D55 AC LEA EDX,DWORD PTR SS:[EBP-54] 00456392 . 52 PUSH EDX 00456393 . 8D45 B0 LEA EAX,DWORD PTR SS:[EBP-50] 00456396 . 50 PUSH EAX 00456397 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 0045639A . 51 PUSH ECX 0045639B . 6A 03 PUSH 3 0045639D . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 004563A3 . 83C4 10 ADD ESP,10 004563A6 . BA 38814000 MOV EDX,monster_.00408138 004563AB . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 004563AE . FFD6 CALL ESI 004563B0 . BA 88C24000 MOV EDX,monster_.0040C288 004563B5 . 8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C] 004563B8 . FFD6 CALL ESI 004563BA . 8D55 B0 LEA EDX,DWORD PTR SS:[EBP-50] 004563BD . 52 PUSH EDX 004563BE . 8D45 B4 LEA EAX,DWORD PTR SS:[EBP-4C] 004563C1 . 50 PUSH EAX 004563C2 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24] 004563C5 . 51 PUSH ECX 004563C6 . E8 658DFFFF CALL monster_.0044F130 004563CB . 8BD0 MOV EDX,EAX 004563CD . 8D4D D4 LEA ECX,DWORD PTR SS:[EBP-2C] 004563D0 . FFD3 CALL EBX 004563D2 . 8D55 B0 LEA EDX,DWORD PTR SS:[EBP-50] 004563D5 . 52 PUSH EDX 004563D6 . 8D45 B4 LEA EAX,DWORD PTR SS:[EBP-4C] 004563D9 . 50 PUSH EAX 004563DA . 6A 02 PUSH 2 004563DC . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 004563E2 . 8B4D D4 MOV ECX,DWORD PTR SS:[EBP-2C] 004563E5 . 83C4 0C ADD ESP,0C 004563E8 . 68 6CC84000 PUSH monster_.0040C86C ; //"M" 004563ED . 51 PUSH ECX 004563EE . FFD7 CALL EDI ; //相连F 004563F0 . 8BD0 MOV EDX,EAX 004563F2 . 8D4D E0 LEA ECX,DWORD PTR SS:[EBP-20] 004563F5 . FFD3 CALL EBX 004563F7 . 68 B4644500 PUSH monster_.004564B4 004563FC . EB 45 JMP SHORT monster_.00456443 004563FE . F645 FC 04 TEST BYTE PTR SS:[EBP-4],4 00456402 . 74 09 JE SHORT monster_.0045640D 00456404 . 8D4D E0 LEA ECX,DWORD PTR SS:[EBP-20] 00456407 . FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStr 0045640D > 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58] 00456410 . 52 PUSH EDX 00456411 . 8D45 AC LEA EAX,DWORD PTR SS:[EBP-54] 00456414 . 50 PUSH EAX 00456415 . 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50] 00456418 . 51 PUSH ECX 00456419 . 8D55 B4 LEA EDX,DWORD PTR SS:[EBP-4C] 0045641C . 52 PUSH EDX 0045641D . 6A 04 PUSH 4 0045641F . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 00456425 . 83C4 14 ADD ESP,14 00456428 . 8D85 78FFFFFF LEA EAX,DWORD PTR SS:[EBP-88] 0045642E . 50 PUSH EAX 0045642F . 8D4D 88 LEA ECX,DWORD PTR SS:[EBP-78] 00456432 . 51 PUSH ECX 00456433 . 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68] 00456436 . 52 PUSH EDX 00456437 . 6A 03 PUSH 3 00456439 . FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>; MSVBVM50.__vbaFreeVarList 0045643F . 83C4 10 ADD ESP,10 00456442 . C3 RETN 00456443 > 8D85 34FFFFFF LEA EAX,DWORD PTR SS:[EBP-CC] 00456449 . 50 PUSH EAX 0045644A . 8D8D 38FFFFFF LEA ECX,DWORD PTR SS:[EBP-C8] 00456450 . 51 PUSH ECX 00456451 . 8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4] 00456457 . 52 PUSH EDX 00456458 . 8D85 40FFFFFF LEA EAX,DWORD PTR SS:[EBP-C0] 0045645E . 50 PUSH EAX 0045645F . 8D8D 44FFFFFF LEA ECX,DWORD PTR SS:[EBP-BC] 00456465 . 51 PUSH ECX 00456466 . 6A 05 PUSH 5 00456468 . FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>; MSVBVM50.__vbaFreeStrList 0045646E . 8B35 48454600 MOV ESI,DWORD PTR DS:[<&MSVBVM50.__vbaFr>; MSVBVM50.__vbaFreeStr 00456474 . 83C4 18 ADD ESP,18 00456477 . 8D4D E8 LEA ECX,DWORD PTR SS:[EBP-18] 0045647A . FFD6 CALL ESI ; <&MSVBVM50.__vbaFreeStr> 0045647C . 8D4D E4 LEA ECX,DWORD PTR SS:[EBP-1C] 0045647F . FFD6 CALL ESI 00456481 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24] 00456484 . FFD6 CALL ESI 00456486 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28] 00456489 . FFD6 CALL ESI 0045648B . 8D4D D4 LEA ECX,DWORD PTR SS:[EBP-2C] 0045648E . FFD6 CALL ESI 00456490 . 8D4D D0 LEA ECX,DWORD PTR SS:[EBP-30] 00456493 . FFD6 CALL ESI 00456495 . 8D4D CC LEA ECX,DWORD PTR SS:[EBP-34] 00456498 . FFD6 CALL ESI 0045649A . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38] 0045649D . FFD6 CALL ESI 0045649F . 8D4D C4 LEA ECX,DWORD PTR SS:[EBP-3C] 004564A2 . FFD6 CALL ESI 004564A4 . 8D4D C0 LEA ECX,DWORD PTR SS:[EBP-40] 004564A7 . FFD6 CALL ESI 004564A9 . 8D4D BC LEA ECX,DWORD PTR SS:[EBP-44] 004564AC . FFD6 CALL ESI 004564AE . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48] 004564B1 .- FFE6 JMP ESI ; MSVBVM50.__vbaFreeStr 004564B3 . C3 RETN 004564B4 . 8B4D EC MOV ECX,DWORD PTR SS:[EBP-14] 004564B7 . 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20] 004564BA . 5F POP EDI 004564BB . 5E POP ESI 004564BC . 64:890D 00000>MOV DWORD PTR FS:[0],ECX 004564C3 . 5B POP EBX 004564C4 . 8BE5 MOV ESP,EBP 004564C6 . 5D POP EBP 004564C7 . C2 0400 RETN 4
【破解总结】
--------------------------------------------------------------
【算法总结】
注册算法主要采用置换的方法
..........................
用户名以tianxj为例
第1步，取用户名第1位"t",转成大写"T",对应第1个置换表的"84"
第2步，取用户名右边第1位"j",转成大写"J",对应第2个置换表的"2"
第3步，取用户名第2位"i",转成大写"I",对应第3个置换表的"T3R"
第4步，取用户名第4位"n",转成大写"N",对应第4个置换表的"414"
第5步，将上面所得到的4个字符串相连为"842T3R414"
第6步，根据相连字符串"842T3R414"的第3个字符"2",对应第5个置换表的"4TGFDERN"
第7步，将相连字符串"842T3R414"再与"84"、"414"、"2"、"414"相连，得到字符串"842T3R414844142414"
第8步，取"842T3R414844142414"的第4、2、7位相连得"T44"
第9步，取"842T3R414"的第4位"T"，"4TGFDERN"的第2位"T"，"842T3R414844142414"的第7位"4"相连得"TT4"
第10步，取"T44"的第1位"T"，"TT4"的第2-3位"T4"，"842T3R414844142414"的第7-10位"4"相连得"4148"相连得"TT44148"
第11步，取"TT44148"的第1-4位"TT44","842T3R414844142414"的第1-3位"842"相连得"TT44842"
第12步，在"TT44842"之前加上固定字母"M",即得到注册码"MTT44842"
--------------------------------------------------------------
【算法注册机】
略
--------------------------------------------------------------
【内存注册机】
中断地址 0045AC8E
中断次数 1
第一字节 FF
指令长度 6
内存方式-寄存器-EDX
宽字符串
--------------------------------------------------------------
【注册信息】
用户名：tianxj
注册码：MTT44842
--------------------------------------------------------------
感谢飘云老大、猫老大、Nisy老大以及很多前辈们的学习教程以及徐超等所有帮助过我的论坛兄弟姐妹们！谢谢
--------------------------------------------------------------
【版权声明】破文是学习的手记，兴趣是成功的源泉；本破文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢!
_/_/_/ _/ _/ _/_/_/
_/ _/ _/ _/ _/
_/_/_/ _/_/ _/_/_/_/
_/ _/ _/ _/
_/ _/ _/_/_/ _/ tianxj