File Monster 2.9.3算法分析

tianxj · 发表于 2008-11-17 11:22

【破文标题】File Monster 2.9.3算法分析
【破文作者】tianxj
【作者邮箱】tianxj_2007@126.com
【作者主页】WwW.ChiNaPYG.CoM
【破解工具】PEiD,OD
【破解平台】Windows XP
【软件名称】File Monster 2.9.3
【软件大小】1517KB
【软件类别】国外软件/卸载工具
【软件授权】共享版
【软件语言】英文
【运行环境】Win9x/Me/NT/2000/XP/2003
【更新时间】2008-11-14
【原版下载】自己找一下
【保护方式】注册码
【软件简介】File Monster 是一款简单易用的文件清除工具，可以彻底地清理和删除系统中的文件，而且文件中的数据会被覆盖，不能被其他文件恢复工具所恢复!
【破解声明】我是一只小菜鸟，偶得一点心得，愿与大家分享：）
--------------------------------------------------------------

tianxj · 发表于 2008-11-17 11:23

【破解内容】
--------------------------------------------------------------
**************************************************************
一、运行程序，进行注册，输入错误的注册信息进行检测，有提示信息
"Unlock Code and/or Licensee Name invalid."
**************************************************************
二、用PEiD对monster.exe查壳，为 UPX 0.89.6 - 1.02 / 1.05 - 1.24 -> Markus & Laszlo
用PEiD插件脱壳后，为 Microsoft Visual Basic 5.0 / 6.0
**************************************************************
三、运行OD，打开脱壳文件，用F12暂停法
==============================================================

调用堆栈 , 项目 12
 地址=0012D8B8
 堆栈=0045ADF2
 程序过程 / 参数=MSVBVM50.rtcMsgBox
 调用来自=monster_.0045ADEC
 结构=0012D8B4

tianxj · 发表于 2008-11-17 11:24

==============================================================

0045A3D0   .  55            PUSH EBP
0045A3D1   .  8BEC          MOV EBP,ESP
0045A3D3   .  83EC 18       SUB ESP,18
0045A3D6   .  68 86334000   PUSH <JMP.&MSVBVM50.__vbaExceptHandler>  ;  SE 处理程序安装
0045A3DB   .  64:A1 0000000>MOV EAX,DWORD PTR FS:[0]
0045A3E1   .  50            PUSH EAX
0045A3E2   .  64:8925 00000>MOV DWORD PTR FS:[0],ESP
0045A3E9   .  B8 10010000   MOV EAX,110
0045A3EE   .  E8 8D8FFAFF   CALL <JMP.&MSVBVM50.__vbaChkstk>
0045A3F3   .  53            PUSH EBX
0045A3F4   .  56            PUSH ESI
0045A3F5   .  57            PUSH EDI
0045A3F6   .  8965 E8       MOV DWORD PTR SS:[EBP-18],ESP
0045A3F9   .  C745 EC B02D4>MOV DWORD PTR SS:[EBP-14],monster_.00402>
0045A400   .  8B45 08       MOV EAX,DWORD PTR SS:[EBP+8]
0045A403   .  83E0 01       AND EAX,1
0045A406   .  8945 F0       MOV DWORD PTR SS:[EBP-10],EAX
0045A409   .  8B4D 08       MOV ECX,DWORD PTR SS:[EBP+8]
0045A40C   .  83E1 FE       AND ECX,FFFFFFFE
0045A40F   .  894D 08       MOV DWORD PTR SS:[EBP+8],ECX
0045A412   .  C745 F4 00000>MOV DWORD PTR SS:[EBP-C],0
0045A419   .  8B55 08       MOV EDX,DWORD PTR SS:[EBP+8]
0045A41C   .  8B02          MOV EAX,DWORD PTR DS:[EDX]
0045A41E   .  8B4D 08       MOV ECX,DWORD PTR SS:[EBP+8]
0045A421   .  51            PUSH ECX
0045A422   .  FF50 04       CALL DWORD PTR DS:[EAX+4]
0045A425   .  C745 FC 01000>MOV DWORD PTR SS:[EBP-4],1
0045A42C   .  C745 FC 02000>MOV DWORD PTR SS:[EBP-4],2
0045A433   .  6A FF         PUSH -1
0045A435   .  FF15 6C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaOnErr>;  MSVBVM50.__vbaOnError
0045A43B   .  C745 FC 03000>MOV DWORD PTR SS:[EBP-4],3
0045A442   .  8B55 08       MOV EDX,DWORD PTR SS:[EBP+8]
0045A445   .  8B02          MOV EAX,DWORD PTR DS:[EDX]
0045A447   .  8B4D 08       MOV ECX,DWORD PTR SS:[EBP+8]
0045A44A   .  51            PUSH ECX
0045A44B   .  FF90 04030000 CALL DWORD PTR DS:[EAX+304]
0045A451   .  50            PUSH EAX
0045A452   .  8D55 AC       LEA EDX,DWORD PTR SS:[EBP-54]
0045A455   .  52            PUSH EDX
0045A456   .  FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>;  MSVBVM50.__vbaObjSet
0045A45C   .  8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX
0045A462   .  8D45 BC       LEA EAX,DWORD PTR SS:[EBP-44]
0045A465   .  50            PUSH EAX
0045A466   .  8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8]
0045A46C   .  8B11          MOV EDX,DWORD PTR DS:[ECX]
0045A46E   .  8B85 18FFFFFF MOV EAX,DWORD PTR SS:[EBP-E8]
0045A474   .  50            PUSH EAX
0045A475   .  FF92 A0000000 CALL DWORD PTR DS:[EDX+A0]
0045A47B   .  8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX
0045A481   .  83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0
0045A488   .  7D 26         JGE SHORT monster_.0045A4B0
0045A48A   .  68 A0000000   PUSH 0A0
0045A48F   .  68 44CF4000   PUSH monster_.0040CF44
0045A494   .  8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8]
0045A49A   .  51            PUSH ECX
0045A49B   .  8B95 14FFFFFF MOV EDX,DWORD PTR SS:[EBP-EC]
0045A4A1   .  52            PUSH EDX
0045A4A2   .  FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>;  MSVBVM50.__vbaHresultCheckObj
0045A4A8   .  8985 F8FEFFFF MOV DWORD PTR SS:[EBP-108],EAX
0045A4AE   .  EB 0A         JMP SHORT monster_.0045A4BA
0045A4B0   >  C785 F8FEFFFF>MOV DWORD PTR SS:[EBP-108],0
0045A4BA   >  8B45 BC       MOV EAX,DWORD PTR SS:[EBP-44]            ;  //用户名
0045A4BD   .  50            PUSH EAX
0045A4BE   .  FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>;  MSVBVM50.rtcTrimBstr
0045A4C4   .  8BD0          MOV EDX,EAX
0045A4C6   .  8D4D C8       LEA ECX,DWORD PTR SS:[EBP-38]
0045A4C9   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045A4CF   .  8D4D BC       LEA ECX,DWORD PTR SS:[EBP-44]
0045A4D2   .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
0045A4D8   .  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045A4DB   .  FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>;  MSVBVM50.__vbaFreeObj
0045A4E1   .  C745 FC 04000>MOV DWORD PTR SS:[EBP-4],4
0045A4E8   .  8B4D 08       MOV ECX,DWORD PTR SS:[EBP+8]
0045A4EB   .  8B11          MOV EDX,DWORD PTR DS:[ECX]
0045A4ED   .  8B45 08       MOV EAX,DWORD PTR SS:[EBP+8]
0045A4F0   .  50            PUSH EAX
0045A4F1   .  FF92 08030000 CALL DWORD PTR DS:[EDX+308]
0045A4F7   .  50            PUSH EAX
0045A4F8   .  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045A4FB   .  51            PUSH ECX
0045A4FC   .  FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>;  MSVBVM50.__vbaObjSet
0045A502   .  8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX
0045A508   .  8D55 BC       LEA EDX,DWORD PTR SS:[EBP-44]
0045A50B   .  52            PUSH EDX
0045A50C   .  8B85 18FFFFFF MOV EAX,DWORD PTR SS:[EBP-E8]
0045A512   .  8B08          MOV ECX,DWORD PTR DS:[EAX]
0045A514   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045A51A   .  52            PUSH EDX
0045A51B   .  FF91 A0000000 CALL DWORD PTR DS:[ECX+A0]
0045A521   .  8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX
0045A527   .  83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0
0045A52E   .  7D 26         JGE SHORT monster_.0045A556
0045A530   .  68 A0000000   PUSH 0A0
0045A535   .  68 44CF4000   PUSH monster_.0040CF44
0045A53A   .  8B85 18FFFFFF MOV EAX,DWORD PTR SS:[EBP-E8]
0045A540   .  50            PUSH EAX
0045A541   .  8B8D 14FFFFFF MOV ECX,DWORD PTR SS:[EBP-EC]
0045A547   .  51            PUSH ECX
0045A548   .  FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>;  MSVBVM50.__vbaHresultCheckObj
0045A54E   .  8985 F4FEFFFF MOV DWORD PTR SS:[EBP-10C],EAX
0045A554   .  EB 0A         JMP SHORT monster_.0045A560
0045A556   >  C785 F4FEFFFF>MOV DWORD PTR SS:[EBP-10C],0
0045A560   >  8B55 C8       MOV EDX,DWORD PTR SS:[EBP-38]            ;  //用户名
0045A563   .  52            PUSH EDX
0045A564   .  68 38814000   PUSH monster_.00408138
0045A569   .  FF15 D8434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCm>;  MSVBVM50.__vbaStrCmp
0045A56F   .  8BF0          MOV ESI,EAX
0045A571   .  F7DE          NEG ESI
0045A573   .  1BF6          SBB ESI,ESI
0045A575   .  46            INC ESI
0045A576   .  F7DE          NEG ESI
0045A578   .  8B45 BC       MOV EAX,DWORD PTR SS:[EBP-44]            ;  //试炼码
0045A57B   .  50            PUSH EAX
0045A57C   .  FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>;  MSVBVM50.rtcTrimBstr
0045A582   .  8BD0          MOV EDX,EAX
0045A584   .  8D4D B8       LEA ECX,DWORD PTR SS:[EBP-48]
0045A587   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045A58D   .  50            PUSH EAX
0045A58E   .  68 38814000   PUSH monster_.00408138
0045A593   .  FF15 D8434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCm>;  MSVBVM50.__vbaStrCmp
0045A599   .  F7D8          NEG EAX
0045A59B   .  1BC0          SBB EAX,EAX
0045A59D   .  40            INC EAX
0045A59E   .  F7D8          NEG EAX
0045A5A0   .  66:0BF0       OR SI,AX
0045A5A3   .  66:89B5 10FFF>MOV WORD PTR SS:[EBP-F0],SI
0045A5AA   .  8D4D B8       LEA ECX,DWORD PTR SS:[EBP-48]
0045A5AD   .  51            PUSH ECX
0045A5AE   .  8D55 BC       LEA EDX,DWORD PTR SS:[EBP-44]
0045A5B1   .  52            PUSH EDX
0045A5B2   .  6A 02         PUSH 2
0045A5B4   .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
0045A5BA   .  83C4 0C       ADD ESP,0C
0045A5BD   .  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045A5C0   .  FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>;  MSVBVM50.__vbaFreeObj
0045A5C6   .  0FBF85 10FFFF>MOVSX EAX,WORD PTR SS:[EBP-F0]
0045A5CD   .  85C0          TEST EAX,EAX
0045A5CF   .  0F84 3A010000 JE monster_.0045A70F
0045A5D5   .  C745 FC 05000>MOV DWORD PTR SS:[EBP-4],5
0045A5DC   .  C785 74FFFFFF>MOV DWORD PTR SS:[EBP-8C],80020004
0045A5E6   .  C785 6CFFFFFF>MOV DWORD PTR SS:[EBP-94],0A
0045A5F0   .  C745 84 04000>MOV DWORD PTR SS:[EBP-7C],80020004
0045A5F7   .  C785 7CFFFFFF>MOV DWORD PTR SS:[EBP-84],0A
0045A601   .  C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],monster_.0040D>;  UNICODE "Error"
0045A60B   .  C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],8
0045A615   .  8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
0045A61B   .  8D4D 8C       LEA ECX,DWORD PTR SS:[EBP-74]
0045A61E   .  FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>;  MSVBVM50.__vbaVarDup
0045A624   .  C785 64FFFFFF>MOV DWORD PTR SS:[EBP-9C],monster_.0040C>;  UNICODE "Please enter the person or business name this program is licensed to and the unlock code provided to"
0045A62E   .  C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],8
0045A638   .  8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4]
0045A63E   .  8D4D 9C       LEA ECX,DWORD PTR SS:[EBP-64]
0045A641   .  FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>;  MSVBVM50.__vbaVarDup
0045A647   .  8D8D 6CFFFFFF LEA ECX,DWORD PTR SS:[EBP-94]
0045A64D   .  51            PUSH ECX
0045A64E   .  8D95 7CFFFFFF LEA EDX,DWORD PTR SS:[EBP-84]
0045A654   .  52            PUSH EDX
0045A655   .  8D45 8C       LEA EAX,DWORD PTR SS:[EBP-74]
0045A658   .  50            PUSH EAX
0045A659   .  6A 10         PUSH 10
0045A65B   .  8D4D 9C       LEA ECX,DWORD PTR SS:[EBP-64]
0045A65E   .  51            PUSH ECX
0045A65F   .  FF15 74434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMsgBox>>;  MSVBVM50.rtcMsgBox
0045A665   .  8D95 6CFFFFFF LEA EDX,DWORD PTR SS:[EBP-94]
0045A66B   .  52            PUSH EDX
0045A66C   .  8D85 7CFFFFFF LEA EAX,DWORD PTR SS:[EBP-84]
0045A672   .  50            PUSH EAX
0045A673   .  8D4D 8C       LEA ECX,DWORD PTR SS:[EBP-74]
0045A676   .  51            PUSH ECX
0045A677   .  8D55 9C       LEA EDX,DWORD PTR SS:[EBP-64]
0045A67A   .  52            PUSH EDX
0045A67B   .  6A 04         PUSH 4
0045A67D   .  FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVarList
0045A683   .  83C4 14       ADD ESP,14
0045A686   .  C745 FC 06000>MOV DWORD PTR SS:[EBP-4],6
0045A68D   .  8B45 08       MOV EAX,DWORD PTR SS:[EBP+8]
0045A690   .  8B08          MOV ECX,DWORD PTR DS:[EAX]
0045A692   .  8B55 08       MOV EDX,DWORD PTR SS:[EBP+8]
0045A695   .  52            PUSH EDX
0045A696   .  FF91 04030000 CALL DWORD PTR DS:[ECX+304]
0045A69C   .  50            PUSH EAX
0045A69D   .  8D45 AC       LEA EAX,DWORD PTR SS:[EBP-54]
0045A6A0   .  50            PUSH EAX
0045A6A1   .  FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>;  MSVBVM50.__vbaObjSet
0045A6A7   .  8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX
0045A6AD   .  8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8]
0045A6B3   .  8B11          MOV EDX,DWORD PTR DS:[ECX]
0045A6B5   .  8B85 18FFFFFF MOV EAX,DWORD PTR SS:[EBP-E8]
0045A6BB   .  50            PUSH EAX
0045A6BC   .  FF92 04020000 CALL DWORD PTR DS:[EDX+204]
0045A6C2   .  8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX
0045A6C8   .  83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0
0045A6CF   .  7D 26         JGE SHORT monster_.0045A6F7
0045A6D1   .  68 04020000   PUSH 204
0045A6D6   .  68 44CF4000   PUSH monster_.0040CF44
0045A6DB   .  8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8]
0045A6E1   .  51            PUSH ECX
0045A6E2   .  8B95 14FFFFFF MOV EDX,DWORD PTR SS:[EBP-EC]
0045A6E8   .  52            PUSH EDX
0045A6E9   .  FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>;  MSVBVM50.__vbaHresultCheckObj
0045A6EF   .  8985 F0FEFFFF MOV DWORD PTR SS:[EBP-110],EAX
0045A6F5   .  EB 0A         JMP SHORT monster_.0045A701
0045A6F7   >  C785 F0FEFFFF>MOV DWORD PTR SS:[EBP-110],0
0045A701   >  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045A704   .  FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>;  MSVBVM50.__vbaFreeObj
0045A70A   .  E9 CC080000   JMP monster_.0045AFDB
0045A70F   >  C745 FC 09000>MOV DWORD PTR SS:[EBP-4],9
0045A716   .  8B45 08       MOV EAX,DWORD PTR SS:[EBP+8]
0045A719   .  8B08          MOV ECX,DWORD PTR DS:[EAX]
0045A71B   .  8B55 08       MOV EDX,DWORD PTR SS:[EBP+8]
0045A71E   .  52            PUSH EDX
0045A71F   .  FF91 08030000 CALL DWORD PTR DS:[ECX+308]
0045A725   .  50            PUSH EAX
0045A726   .  8D45 AC       LEA EAX,DWORD PTR SS:[EBP-54]
0045A729   .  50            PUSH EAX
0045A72A   .  FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>;  MSVBVM50.__vbaObjSet
0045A730   .  8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX
0045A736   .  8D4D BC       LEA ECX,DWORD PTR SS:[EBP-44]
0045A739   .  51            PUSH ECX
0045A73A   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045A740   .  8B02          MOV EAX,DWORD PTR DS:[EDX]
0045A742   .  8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8]
0045A748   .  51            PUSH ECX
0045A749   .  FF90 A0000000 CALL DWORD PTR DS:[EAX+A0]
0045A74F   .  8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX
0045A755   .  83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0
0045A75C   .  7D 26         JGE SHORT monster_.0045A784
0045A75E   .  68 A0000000   PUSH 0A0
0045A763   .  68 44CF4000   PUSH monster_.0040CF44
0045A768   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045A76E   .  52            PUSH EDX
0045A76F   .  8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC]
0045A775   .  50            PUSH EAX
0045A776   .  FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>;  MSVBVM50.__vbaHresultCheckObj
0045A77C   .  8985 ECFEFFFF MOV DWORD PTR SS:[EBP-114],EAX
0045A782   .  EB 0A         JMP SHORT monster_.0045A78E
0045A784   >  C785 ECFEFFFF>MOV DWORD PTR SS:[EBP-114],0
0045A78E   >  8B4D BC       MOV ECX,DWORD PTR SS:[EBP-44]            ;  //试炼码
0045A791   .  51            PUSH ECX
0045A792   .  FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>;  MSVBVM50.rtcTrimBstr
0045A798   .  8BD0          MOV EDX,EAX
0045A79A   .  8D4D B8       LEA ECX,DWORD PTR SS:[EBP-48]
0045A79D   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045A7A3   .  50            PUSH EAX
0045A7A4   .  FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>;  MSVBVM50.rtcUpperCaseBstr
0045A7AA   .  8BD0          MOV EDX,EAX                              ;  //试炼码
0045A7AC   .  8D4D B4       LEA ECX,DWORD PTR SS:[EBP-4C]
0045A7AF   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045A7B5   .  50            PUSH EAX                                 ;  //试炼码
0045A7B6   .  68 C0764000   PUSH monster_.004076C0                   ;  UNICODE "2552"
0045A7BB   .  FF15 D8434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCm>;  MSVBVM50.__vbaStrCmp
0045A7C1   .  F7D8          NEG EAX
0045A7C3   .  1BC0          SBB EAX,EAX
0045A7C5   .  40            INC EAX
0045A7C6   .  F7D8          NEG EAX
0045A7C8   .  33D2          XOR EDX,EDX
0045A7CA   .  66:833D 64014>CMP WORD PTR DS:[460164],0FFFF
0045A7D2   .  0F94C2        SETE DL
0045A7D5   .  F7DA          NEG EDX
0045A7D7   .  66:23C2       AND AX,DX
0045A7DA   .  66:8985 10FFF>MOV WORD PTR SS:[EBP-F0],AX
0045A7E1   .  8D45 B4       LEA EAX,DWORD PTR SS:[EBP-4C]
0045A7E4   .  50            PUSH EAX
0045A7E5   .  8D4D B8       LEA ECX,DWORD PTR SS:[EBP-48]
0045A7E8   .  51            PUSH ECX
0045A7E9   .  8D55 BC       LEA EDX,DWORD PTR SS:[EBP-44]
0045A7EC   .  52            PUSH EDX
0045A7ED   .  6A 03         PUSH 3
0045A7EF   .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
0045A7F5   .  83C4 10       ADD ESP,10
0045A7F8   .  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045A7FB   .  FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>;  MSVBVM50.__vbaFreeObj
0045A801   .  0FBF85 10FFFF>MOVSX EAX,WORD PTR SS:[EBP-F0]
0045A808   .  85C0          TEST EAX,EAX
0045A80A   .  0F84 BA000000 JE monster_.0045A8CA
0045A810   .  C745 FC 0A000>MOV DWORD PTR SS:[EBP-4],0A
0045A817   .  BA CCD04000   MOV EDX,monster_.0040D0CC                ;  UNICODE "The temporary (30-day) registration code for this license has already been entered."
0045A81C   .  8D4D DC       LEA ECX,DWORD PTR SS:[EBP-24]
0045A81F   .  FF15 98444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCo>;  MSVBVM50.__vbaStrCopy
0045A825   .  C745 FC 0B000>MOV DWORD PTR SS:[EBP-4],0B
0045A82C   .  C745 84 04000>MOV DWORD PTR SS:[EBP-7C],80020004
0045A833   .  C785 7CFFFFFF>MOV DWORD PTR SS:[EBP-84],0A
0045A83D   .  C745 94 04000>MOV DWORD PTR SS:[EBP-6C],80020004
0045A844   .  C745 8C 0A000>MOV DWORD PTR SS:[EBP-74],0A
0045A84B   .  C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],monster_.0040D>;  UNICODE "Code Invalid"
0045A855   .  C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],8
0045A85F   .  8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
0045A865   .  8D4D 9C       LEA ECX,DWORD PTR SS:[EBP-64]
0045A868   .  FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>;  MSVBVM50.__vbaVarDup
0045A86E   .  8D4D DC       LEA ECX,DWORD PTR SS:[EBP-24]
0045A871   .  898D 64FFFFFF MOV DWORD PTR SS:[EBP-9C],ECX
0045A877   .  C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],4008
0045A881   .  8D95 7CFFFFFF LEA EDX,DWORD PTR SS:[EBP-84]
0045A887   .  52            PUSH EDX
0045A888   .  8D45 8C       LEA EAX,DWORD PTR SS:[EBP-74]
0045A88B   .  50            PUSH EAX
0045A88C   .  8D4D 9C       LEA ECX,DWORD PTR SS:[EBP-64]
0045A88F   .  51            PUSH ECX
0045A890   .  6A 10         PUSH 10
0045A892   .  8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4]
0045A898   .  52            PUSH EDX
0045A899   .  FF15 74434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMsgBox>>;  MSVBVM50.rtcMsgBox
0045A89F   .  8D85 7CFFFFFF LEA EAX,DWORD PTR SS:[EBP-84]
0045A8A5   .  50            PUSH EAX
0045A8A6   .  8D4D 8C       LEA ECX,DWORD PTR SS:[EBP-74]
0045A8A9   .  51            PUSH ECX
0045A8AA   .  8D55 9C       LEA EDX,DWORD PTR SS:[EBP-64]
0045A8AD   .  52            PUSH EDX
0045A8AE   .  6A 03         PUSH 3
0045A8B0   .  FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVarList
0045A8B6   .  83C4 10       ADD ESP,10
0045A8B9   .  C745 FC 0C000>MOV DWORD PTR SS:[EBP-4],0C
0045A8C0   .  E8 7B88FFFF   CALL monster_.00453140
0045A8C5   .  E9 67060000   JMP monster_.0045AF31
0045A8CA   >  C745 FC 0D000>MOV DWORD PTR SS:[EBP-4],0D
0045A8D1   .  8B45 08       MOV EAX,DWORD PTR SS:[EBP+8]
0045A8D4   .  8B08          MOV ECX,DWORD PTR DS:[EAX]
0045A8D6   .  8B55 08       MOV EDX,DWORD PTR SS:[EBP+8]
0045A8D9   .  52            PUSH EDX
0045A8DA   .  FF91 08030000 CALL DWORD PTR DS:[ECX+308]
0045A8E0   .  50            PUSH EAX
0045A8E1   .  8D45 AC       LEA EAX,DWORD PTR SS:[EBP-54]
0045A8E4   .  50            PUSH EAX
0045A8E5   .  FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>;  MSVBVM50.__vbaObjSet
0045A8EB   .  8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX
0045A8F1   .  8D4D BC       LEA ECX,DWORD PTR SS:[EBP-44]
0045A8F4   .  51            PUSH ECX
0045A8F5   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045A8FB   .  8B02          MOV EAX,DWORD PTR DS:[EDX]
0045A8FD   .  8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8]
0045A903   .  51            PUSH ECX
0045A904   .  FF90 A0000000 CALL DWORD PTR DS:[EAX+A0]
0045A90A   .  8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX
0045A910   .  83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0
0045A917   .  7D 26         JGE SHORT monster_.0045A93F
0045A919   .  68 A0000000   PUSH 0A0
0045A91E   .  68 44CF4000   PUSH monster_.0040CF44
0045A923   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045A929   .  52            PUSH EDX
0045A92A   .  8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC]
0045A930   .  50            PUSH EAX
0045A931   .  FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>;  MSVBVM50.__vbaHresultCheckObj
0045A937   .  8985 E8FEFFFF MOV DWORD PTR SS:[EBP-118],EAX
0045A93D   .  EB 0A         JMP SHORT monster_.0045A949
0045A93F   >  C785 E8FEFFFF>MOV DWORD PTR SS:[EBP-118],0
0045A949   >  8B4D BC       MOV ECX,DWORD PTR SS:[EBP-44]            ;  //试炼码
0045A94C   .  51            PUSH ECX
0045A94D   .  FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>;  MSVBVM50.rtcTrimBstr
0045A953   .  8BD0          MOV EDX,EAX
0045A955   .  8D4D B8       LEA ECX,DWORD PTR SS:[EBP-48]
0045A958   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045A95E   .  50            PUSH EAX
0045A95F   .  FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>;  MSVBVM50.rtcUpperCaseBstr
0045A965   .  8BD0          MOV EDX,EAX
0045A967   .  8D4D B4       LEA ECX,DWORD PTR SS:[EBP-4C]
0045A96A   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045A970   .  50            PUSH EAX                                 ;  //试炼码
0045A971   .  68 C0764000   PUSH monster_.004076C0                   ;  UNICODE "2552"
0045A976   .  FF15 D8434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCm>;  MSVBVM50.__vbaStrCmp
0045A97C   .  F7D8          NEG EAX
0045A97E   .  1BC0          SBB EAX,EAX
0045A980   .  40            INC EAX
0045A981   .  F7D8          NEG EAX
0045A983   .  66:8985 10FFF>MOV WORD PTR SS:[EBP-F0],AX
0045A98A   .  8D55 B4       LEA EDX,DWORD PTR SS:[EBP-4C]
0045A98D   .  52            PUSH EDX
0045A98E   .  8D45 B8       LEA EAX,DWORD PTR SS:[EBP-48]
0045A991   .  50            PUSH EAX
0045A992   .  8D4D BC       LEA ECX,DWORD PTR SS:[EBP-44]
0045A995   .  51            PUSH ECX
0045A996   .  6A 03         PUSH 3
0045A998   .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
0045A99E   .  83C4 10       ADD ESP,10
0045A9A1   .  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045A9A4   .  FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>;  MSVBVM50.__vbaFreeObj
0045A9AA   .  0FBF95 10FFFF>MOVSX EDX,WORD PTR SS:[EBP-F0]
0045A9B1   .  85D2          TEST EDX,EDX
0045A9B3   .  0F84 EA010000 JE monster_.0045ABA3
0045A9B9   .  C745 FC 0E000>MOV DWORD PTR SS:[EBP-4],0E
0045A9C0   .  68 98D14000   PUSH monster_.0040D198                   ;  UNICODE "License this copy to: "
0045A9C5   .  8B45 C8       MOV EAX,DWORD PTR SS:[EBP-38]
0045A9C8   .  50            PUSH EAX
0045A9C9   .  FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>;  MSVBVM50.__vbaStrCat
0045A9CF   .  8BD0          MOV EDX,EAX
0045A9D1   .  8D4D BC       LEA ECX,DWORD PTR SS:[EBP-44]
0045A9D4   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045A9DA   .  50            PUSH EAX
0045A9DB   .  68 CCD14000   PUSH monster_.0040D1CC                   ;  UNICODE "?  "
0045A9E0   .  FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>;  MSVBVM50.__vbaStrCat
0045A9E6   .  8BD0          MOV EDX,EAX
0045A9E8   .  8D4D DC       LEA ECX,DWORD PTR SS:[EBP-24]
0045A9EB   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045A9F1   .  8D4D BC       LEA ECX,DWORD PTR SS:[EBP-44]
0045A9F4   .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
0045A9FA   .  C745 FC 0F000>MOV DWORD PTR SS:[EBP-4],0F
0045AA01   .  8B4D DC       MOV ECX,DWORD PTR SS:[EBP-24]
0045AA04   .  51            PUSH ECX
0045AA05   .  68 D8D14000   PUSH monster_.0040D1D8                   ;  UNICODE "(Select NO to make corrections.)"
0045AA0A   .  FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>;  MSVBVM50.__vbaStrCat
0045AA10   .  8BD0          MOV EDX,EAX
0045AA12   .  8D4D DC       LEA ECX,DWORD PTR SS:[EBP-24]
0045AA15   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045AA1B   .  C745 FC 10000>MOV DWORD PTR SS:[EBP-4],10
0045AA22   .  C745 84 04000>MOV DWORD PTR SS:[EBP-7C],80020004
0045AA29   .  C785 7CFFFFFF>MOV DWORD PTR SS:[EBP-84],0A
0045AA33   .  C745 94 04000>MOV DWORD PTR SS:[EBP-6C],80020004
0045AA3A   .  C745 8C 0A000>MOV DWORD PTR SS:[EBP-74],0A
0045AA41   .  C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],monster_.0040D>;  UNICODE "REGISTER TO..."
0045AA4B   .  C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],8
0045AA55   .  8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
0045AA5B   .  8D4D 9C       LEA ECX,DWORD PTR SS:[EBP-64]
0045AA5E   .  FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>;  MSVBVM50.__vbaVarDup
0045AA64   .  8D55 DC       LEA EDX,DWORD PTR SS:[EBP-24]
0045AA67   .  8995 64FFFFFF MOV DWORD PTR SS:[EBP-9C],EDX
0045AA6D   .  C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],4008
0045AA77   .  8D85 7CFFFFFF LEA EAX,DWORD PTR SS:[EBP-84]
0045AA7D   .  50            PUSH EAX
0045AA7E   .  8D4D 8C       LEA ECX,DWORD PTR SS:[EBP-74]
0045AA81   .  51            PUSH ECX
0045AA82   .  8D55 9C       LEA EDX,DWORD PTR SS:[EBP-64]
0045AA85   .  52            PUSH EDX
0045AA86   .  6A 24         PUSH 24
0045AA88   .  8D85 5CFFFFFF LEA EAX,DWORD PTR SS:[EBP-A4]
0045AA8E   .  50            PUSH EAX
0045AA8F   .  FF15 74434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMsgBox>>;  MSVBVM50.rtcMsgBox
0045AA95   .  8985 24FFFFFF MOV DWORD PTR SS:[EBP-DC],EAX
0045AA9B   .  C785 1CFFFFFF>MOV DWORD PTR SS:[EBP-E4],3
0045AAA5   .  8D95 1CFFFFFF LEA EDX,DWORD PTR SS:[EBP-E4]
0045AAAB   .  8D4D CC       LEA ECX,DWORD PTR SS:[EBP-34]
0045AAAE   .  FF15 D8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarMo>;  MSVBVM50.__vbaVarMove
0045AAB4   .  8D8D 7CFFFFFF LEA ECX,DWORD PTR SS:[EBP-84]
0045AABA   .  51            PUSH ECX
0045AABB   .  8D55 8C       LEA EDX,DWORD PTR SS:[EBP-74]
0045AABE   .  52            PUSH EDX
0045AABF   .  8D45 9C       LEA EAX,DWORD PTR SS:[EBP-64]
0045AAC2   .  50            PUSH EAX
0045AAC3   .  6A 03         PUSH 3
0045AAC5   .  FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVarList
0045AACB   .  83C4 10       ADD ESP,10
0045AACE   .  C745 FC 11000>MOV DWORD PTR SS:[EBP-4],11
0045AAD5   .  C785 64FFFFFF>MOV DWORD PTR SS:[EBP-9C],7
0045AADF   .  C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],8002
0045AAE9   .  8D4D CC       LEA ECX,DWORD PTR SS:[EBP-34]
0045AAEC   .  51            PUSH ECX
0045AAED   .  8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4]
0045AAF3   .  52            PUSH EDX
0045AAF4   .  FF15 E0434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarTs>;  MSVBVM50.__vbaVarTstEq
0045AAFA   .  0FBFC0        MOVSX EAX,AX
0045AAFD   .  85C0          TEST EAX,EAX
0045AAFF   .  0F84 89000000 JE monster_.0045AB8E
0045AB05   .  C745 FC 12000>MOV DWORD PTR SS:[EBP-4],12
0045AB0C   .  8B4D 08       MOV ECX,DWORD PTR SS:[EBP+8]
0045AB0F   .  8B11          MOV EDX,DWORD PTR DS:[ECX]
0045AB11   .  8B45 08       MOV EAX,DWORD PTR SS:[EBP+8]
0045AB14   .  50            PUSH EAX
0045AB15   .  FF92 04030000 CALL DWORD PTR DS:[EDX+304]
0045AB1B   .  50            PUSH EAX
0045AB1C   .  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045AB1F   .  51            PUSH ECX
0045AB20   .  FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>;  MSVBVM50.__vbaObjSet
0045AB26   .  8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX
0045AB2C   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045AB32   .  8B02          MOV EAX,DWORD PTR DS:[EDX]
0045AB34   .  8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8]
0045AB3A   .  51            PUSH ECX
0045AB3B   .  FF90 04020000 CALL DWORD PTR DS:[EAX+204]
0045AB41   .  8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX
0045AB47   .  83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0
0045AB4E   .  7D 26         JGE SHORT monster_.0045AB76
0045AB50   .  68 04020000   PUSH 204
0045AB55   .  68 44CF4000   PUSH monster_.0040CF44
0045AB5A   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045AB60   .  52            PUSH EDX
0045AB61   .  8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC]
0045AB67   .  50            PUSH EAX
0045AB68   .  FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>;  MSVBVM50.__vbaHresultCheckObj
0045AB6E   .  8985 E4FEFFFF MOV DWORD PTR SS:[EBP-11C],EAX
0045AB74   .  EB 0A         JMP SHORT monster_.0045AB80
0045AB76   >  C785 E4FEFFFF>MOV DWORD PTR SS:[EBP-11C],0
0045AB80   >  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045AB83   .  FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>;  MSVBVM50.__vbaFreeObj
0045AB89   .  E9 4D040000   JMP monster_.0045AFDB
0045AB8E   >  C745 FC 15000>MOV DWORD PTR SS:[EBP-4],15
0045AB95   .  8D4D C8       LEA ECX,DWORD PTR SS:[EBP-38]
0045AB98   .  51            PUSH ECX
0045AB99   .  E8 6247FFFF   CALL monster_.0044F300
0045AB9E   .  E9 8E030000   JMP monster_.0045AF31
0045ABA3   >  C745 FC 17000>MOV DWORD PTR SS:[EBP-4],17
0045ABAA   .  8B55 C8       MOV EDX,DWORD PTR SS:[EBP-38]            ;  //用户名
0045ABAD   .  8D4D C0       LEA ECX,DWORD PTR SS:[EBP-40]
0045ABB0   .  FF15 98444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCo>;  MSVBVM50.__vbaStrCopy
0045ABB6   .  C745 FC 18000>MOV DWORD PTR SS:[EBP-4],18
0045ABBD   .  8D55 C0       LEA EDX,DWORD PTR SS:[EBP-40]
0045ABC0   .  52            PUSH EDX
0045ABC1   .  E8 FA9FFFFF   CALL monster_.00454BC0                   ;  //算法CALL
0045ABC6   .  8BD0          MOV EDX,EAX                              ;  //真码
0045ABC8   .  8D4D C4       LEA ECX,DWORD PTR SS:[EBP-3C]
0045ABCB   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045ABD1   .  C745 FC 19000>MOV DWORD PTR SS:[EBP-4],19
0045ABD8   .  8B45 08       MOV EAX,DWORD PTR SS:[EBP+8]
0045ABDB   .  8B08          MOV ECX,DWORD PTR DS:[EAX]
0045ABDD   .  8B55 08       MOV EDX,DWORD PTR SS:[EBP+8]
0045ABE0   .  52            PUSH EDX
0045ABE1   .  FF91 08030000 CALL DWORD PTR DS:[ECX+308]
0045ABE7   .  50            PUSH EAX
0045ABE8   .  8D45 AC       LEA EAX,DWORD PTR SS:[EBP-54]
0045ABEB   .  50            PUSH EAX
0045ABEC   .  FF15 70434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>;  MSVBVM50.__vbaObjSet
0045ABF2   .  8985 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EAX
0045ABF8   .  8D4D BC       LEA ECX,DWORD PTR SS:[EBP-44]
0045ABFB   .  51            PUSH ECX
0045ABFC   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045AC02   .  8B02          MOV EAX,DWORD PTR DS:[EDX]
0045AC04   .  8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8]
0045AC0A   .  51            PUSH ECX
0045AC0B   .  FF90 A0000000 CALL DWORD PTR DS:[EAX+A0]
0045AC11   .  8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX
0045AC17   .  83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0
0045AC1E   .  7D 26         JGE SHORT monster_.0045AC46
0045AC20   .  68 A0000000   PUSH 0A0
0045AC25   .  68 44CF4000   PUSH monster_.0040CF44
0045AC2A   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045AC30   .  52            PUSH EDX
0045AC31   .  8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC]
0045AC37   .  50            PUSH EAX
0045AC38   .  FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>;  MSVBVM50.__vbaHresultCheckObj
0045AC3E   .  8985 E0FEFFFF MOV DWORD PTR SS:[EBP-120],EAX
0045AC44   .  EB 0A         JMP SHORT monster_.0045AC50
0045AC46   >  C785 E0FEFFFF>MOV DWORD PTR SS:[EBP-120],0
0045AC50   >  8B4D BC       MOV ECX,DWORD PTR SS:[EBP-44]            ;  //试炼码
0045AC53   .  51            PUSH ECX
0045AC54   .  FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>;  MSVBVM50.rtcTrimBstr
0045AC5A   .  8BD0          MOV EDX,EAX
0045AC5C   .  8D4D B8       LEA ECX,DWORD PTR SS:[EBP-48]
0045AC5F   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045AC65   .  50            PUSH EAX
0045AC66   .  FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>;  MSVBVM50.rtcUpperCaseBstr
0045AC6C   .  8BD0          MOV EDX,EAX
0045AC6E   .  8D4D B4       LEA ECX,DWORD PTR SS:[EBP-4C]
0045AC71   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045AC77   .  50            PUSH EAX
0045AC78   .  8B55 C4       MOV EDX,DWORD PTR SS:[EBP-3C]            ;  //真码
0045AC7B   .  52            PUSH EDX
0045AC7C   .  FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>;  MSVBVM50.rtcUpperCaseBstr
0045AC82   .  8BD0          MOV EDX,EAX
0045AC84   .  8D4D B0       LEA ECX,DWORD PTR SS:[EBP-50]
0045AC87   .  FF15 08454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrMo>;  MSVBVM50.__vbaStrMove
0045AC8D   .  50            PUSH EAX
0045AC8E   .  FF15 D8434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCm>;  MSVBVM50.__vbaStrCmp  //关键比较
0045AC94   .  F7D8          NEG EAX
0045AC96   .  1BC0          SBB EAX,EAX
0045AC98   .  40            INC EAX
0045AC99   .  F7D8          NEG EAX
0045AC9B   .  66:8985 10FFF>MOV WORD PTR SS:[EBP-F0],AX
0045ACA2   .  8D45 B0       LEA EAX,DWORD PTR SS:[EBP-50]
0045ACA5   .  50            PUSH EAX
0045ACA6   .  8D4D B4       LEA ECX,DWORD PTR SS:[EBP-4C]
0045ACA9   .  51            PUSH ECX
0045ACAA   .  8D55 B8       LEA EDX,DWORD PTR SS:[EBP-48]
0045ACAD   .  52            PUSH EDX
0045ACAE   .  8D45 BC       LEA EAX,DWORD PTR SS:[EBP-44]
0045ACB1   .  50            PUSH EAX
0045ACB2   .  6A 04         PUSH 4
0045ACB4   .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
0045ACBA   .  83C4 14       ADD ESP,14
0045ACBD   .  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045ACC0   .  FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>;  MSVBVM50.__vbaFreeObj
0045ACC6   .  0FBF8D 10FFFF>MOVSX ECX,WORD PTR SS:[EBP-F0]
0045ACCD   .  85C9          TEST ECX,ECX
0045ACCF   .  74 15         JE SHORT monster_.0045ACE6               ;  //关键跳转
0045ACD1   .  C745 FC 1A000>MOV DWORD PTR SS:[EBP-4],1A
0045ACD8   .  8D55 C8       LEA EDX,DWORD PTR SS:[EBP-38]
0045ACDB   .  52            PUSH EDX
0045ACDC   .  E8 9F4DFFFF   CALL monster_.0044FA80
0045ACE1   .  E9 4B020000   JMP monster_.0045AF31
0045ACE6   >  C745 FC 1C000>MOV DWORD PTR SS:[EBP-4],1C
0045ACED   .  8B45 08       MOV EAX,DWORD PTR SS:[EBP+8]
0045ACF0   .  8B08          MOV ECX,DWORD PTR DS:[EAX]
0045ACF2   .  8B55 08       MOV EDX,DWORD PTR SS:[EBP+8]
0045ACF5   .  52            PUSH EDX
0045ACF6   .  FF91 08030000 CALL DWORD PTR DS:[ECX+308]
0045ACFC   .  8945 A4       MOV DWORD PTR SS:[EBP-5C],EAX
0045ACFF   .  C745 9C 09000>MOV DWORD PTR SS:[EBP-64],9
0045AD06   .  8D45 9C       LEA EAX,DWORD PTR SS:[EBP-64]
0045AD09   .  50            PUSH EAX
0045AD0A   .  8D4D 8C       LEA ECX,DWORD PTR SS:[EBP-74]
0045AD0D   .  51            PUSH ECX
0045AD0E   .  FF15 90434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimVar>;  MSVBVM50.rtcTrimVar
0045AD14   .  C785 64FFFFFF>MOV DWORD PTR SS:[EBP-9C],monster_.00408>
0045AD1E   .  C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],8008
0045AD28   .  8D55 8C       LEA EDX,DWORD PTR SS:[EBP-74]
0045AD2B   .  52            PUSH EDX
0045AD2C   .  8D85 5CFFFFFF LEA EAX,DWORD PTR SS:[EBP-A4]
0045AD32   .  50            PUSH EAX
0045AD33   .  FF15 C0444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarTs>;  MSVBVM50.__vbaVarTstNe
0045AD39   .  66:8985 18FFF>MOV WORD PTR SS:[EBP-E8],AX
0045AD40   .  8D4D 8C       LEA ECX,DWORD PTR SS:[EBP-74]
0045AD43   .  51            PUSH ECX
0045AD44   .  8D55 9C       LEA EDX,DWORD PTR SS:[EBP-64]
0045AD47   .  52            PUSH EDX
0045AD48   .  6A 02         PUSH 2
0045AD4A   .  FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVarList
0045AD50   .  83C4 0C       ADD ESP,0C
0045AD53   .  0FBF85 18FFFF>MOVSX EAX,WORD PTR SS:[EBP-E8]
0045AD5A   .  85C0          TEST EAX,EAX
0045AD5C   .  0F84 B1000000 JE monster_.0045AE13
0045AD62   .  C745 FC 1D000>MOV DWORD PTR SS:[EBP-4],1D
0045AD69   .  C785 74FFFFFF>MOV DWORD PTR SS:[EBP-8C],80020004
0045AD73   .  C785 6CFFFFFF>MOV DWORD PTR SS:[EBP-94],0A
0045AD7D   .  C745 84 04000>MOV DWORD PTR SS:[EBP-7C],80020004
0045AD84   .  C785 7CFFFFFF>MOV DWORD PTR SS:[EBP-84],0A
0045AD8E   .  C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],monster_.0040D>;  UNICODE "INVALID CODE"
0045AD98   .  C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],8
0045ADA2   .  8D95 4CFFFFFF LEA EDX,DWORD PTR SS:[EBP-B4]
0045ADA8   .  8D4D 8C       LEA ECX,DWORD PTR SS:[EBP-74]
0045ADAB   .  FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>;  MSVBVM50.__vbaVarDup
0045ADB1   .  C785 64FFFFFF>MOV DWORD PTR SS:[EBP-9C],monster_.0040D>;  UNICODE "Unlock Code and/or Licensee Name invalid."
0045ADBB   .  C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],8
0045ADC5   .  8D95 5CFFFFFF LEA EDX,DWORD PTR SS:[EBP-A4]
0045ADCB   .  8D4D 9C       LEA ECX,DWORD PTR SS:[EBP-64]
0045ADCE   .  FF15 DC444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaVarDu>;  MSVBVM50.__vbaVarDup
0045ADD4   .  8D8D 6CFFFFFF LEA ECX,DWORD PTR SS:[EBP-94]
0045ADDA   .  51            PUSH ECX
0045ADDB   .  8D95 7CFFFFFF LEA EDX,DWORD PTR SS:[EBP-84]
0045ADE1   .  52            PUSH EDX
0045ADE2   .  8D45 8C       LEA EAX,DWORD PTR SS:[EBP-74]
0045ADE5   .  50            PUSH EAX
0045ADE6   .  6A 30         PUSH 30
0045ADE8   .  8D4D 9C       LEA ECX,DWORD PTR SS:[EBP-64]
0045ADEB   .  51            PUSH ECX
0045ADEC   .  FF15 74434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMsgBox>>;  MSVBVM50.rtcMsgBox  //错误提示
0045ADF2   .  8D95 6CFFFFFF LEA EDX,DWORD PTR SS:[EBP-94]
0045ADF8   .  52            PUSH EDX
0045ADF9   .  8D85 7CFFFFFF LEA EAX,DWORD PTR SS:[EBP-84]
0045ADFF   .  50            PUSH EAX
0045AE00   .  8D4D 8C       LEA ECX,DWORD PTR SS:[EBP-74]
0045AE03   .  51            PUSH ECX
0045AE04   .  8D55 9C       LEA EDX,DWORD PTR SS:[EBP-64]
0045AE07   .  52            PUSH EDX
0045AE08   .  6A 04         PUSH 4
0045AE0A   .  FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVarList
0045AE10   .  83C4 14       ADD ESP,14
0045AE13   >  C745 FC 1F000>MOV DWORD PTR SS:[EBP-4],1F
0045AE1A   .  833D 88014600>CMP DWORD PTR DS:[460188],0
0045AE21   .  75 1C         JNZ SHORT monster_.0045AE3F
0045AE23   .  68 88014600   PUSH monster_.00460188
0045AE28   .  68 CC4E4000   PUSH monster_.00404ECC
0045AE2D   .  FF15 78444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaNew2>>;  MSVBVM50.__vbaNew2
0045AE33   .  C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],monster_.0046>
0045AE3D   .  EB 0A         JMP SHORT monster_.0045AE49
0045AE3F   >  C785 DCFEFFFF>MOV DWORD PTR SS:[EBP-124],monster_.0046>
0045AE49   >  8B85 DCFEFFFF MOV EAX,DWORD PTR SS:[EBP-124]
0045AE4F   .  8B08          MOV ECX,DWORD PTR DS:[EAX]
0045AE51   .  898D 18FFFFFF MOV DWORD PTR SS:[EBP-E8],ECX
0045AE57   .  C785 54FFFFFF>MOV DWORD PTR SS:[EBP-AC],80020004
0045AE61   .  C785 4CFFFFFF>MOV DWORD PTR SS:[EBP-B4],0A
0045AE6B   .  C785 64FFFFFF>MOV DWORD PTR SS:[EBP-9C],1
0045AE75   .  C785 5CFFFFFF>MOV DWORD PTR SS:[EBP-A4],2
0045AE7F   .  B8 10000000   MOV EAX,10
0045AE84   .  E8 F784FAFF   CALL <JMP.&MSVBVM50.__vbaChkstk>
0045AE89   .  8BD4          MOV EDX,ESP
0045AE8B   .  8B85 4CFFFFFF MOV EAX,DWORD PTR SS:[EBP-B4]
0045AE91   .  8902          MOV DWORD PTR DS:[EDX],EAX
0045AE93   .  8B8D 50FFFFFF MOV ECX,DWORD PTR SS:[EBP-B0]
0045AE99   .  894A 04       MOV DWORD PTR DS:[EDX+4],ECX
0045AE9C   .  8B85 54FFFFFF MOV EAX,DWORD PTR SS:[EBP-AC]
0045AEA2   .  8942 08       MOV DWORD PTR DS:[EDX+8],EAX
0045AEA5   .  8B8D 58FFFFFF MOV ECX,DWORD PTR SS:[EBP-A8]
0045AEAB   .  894A 0C       MOV DWORD PTR DS:[EDX+C],ECX
0045AEAE   .  B8 10000000   MOV EAX,10
0045AEB3   .  E8 C884FAFF   CALL <JMP.&MSVBVM50.__vbaChkstk>
0045AEB8   .  8BD4          MOV EDX,ESP
0045AEBA   .  8B85 5CFFFFFF MOV EAX,DWORD PTR SS:[EBP-A4]
0045AEC0   .  8902          MOV DWORD PTR DS:[EDX],EAX
0045AEC2   .  8B8D 60FFFFFF MOV ECX,DWORD PTR SS:[EBP-A0]
0045AEC8   .  894A 04       MOV DWORD PTR DS:[EDX+4],ECX
0045AECB   .  8B85 64FFFFFF MOV EAX,DWORD PTR SS:[EBP-9C]
0045AED1   .  8942 08       MOV DWORD PTR DS:[EDX+8],EAX
0045AED4   .  8B8D 68FFFFFF MOV ECX,DWORD PTR SS:[EBP-98]
0045AEDA   .  894A 0C       MOV DWORD PTR DS:[EDX+C],ECX
0045AEDD   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045AEE3   .  8B02          MOV EAX,DWORD PTR DS:[EDX]
0045AEE5   .  8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8]
0045AEEB   .  51            PUSH ECX
0045AEEC   .  FF90 B0020000 CALL DWORD PTR DS:[EAX+2B0]
0045AEF2   .  8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX
0045AEF8   .  83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0
0045AEFF   .  7D 26         JGE SHORT monster_.0045AF27
0045AF01   .  68 B0020000   PUSH 2B0
0045AF06   .  68 64924000   PUSH monster_.00409264
0045AF0B   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045AF11   .  52            PUSH EDX
0045AF12   .  8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC]
0045AF18   .  50            PUSH EAX
0045AF19   .  FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>;  MSVBVM50.__vbaHresultCheckObj
0045AF1F   .  8985 D8FEFFFF MOV DWORD PTR SS:[EBP-128],EAX
0045AF25   .  EB 0A         JMP SHORT monster_.0045AF31
0045AF27   >  C785 D8FEFFFF>MOV DWORD PTR SS:[EBP-128],0
0045AF31   >  C745 FC 22000>MOV DWORD PTR SS:[EBP-4],22
0045AF38   .  833D 440A4600>CMP DWORD PTR DS:[460A44],0
0045AF3F   .  75 1C         JNZ SHORT monster_.0045AF5D
0045AF41   .  68 440A4600   PUSH monster_.00460A44
0045AF46   .  68 D0864000   PUSH monster_.004086D0
0045AF4B   .  FF15 78444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaNew2>>;  MSVBVM50.__vbaNew2
0045AF51   .  C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],monster_.0046>
0045AF5B   .  EB 0A         JMP SHORT monster_.0045AF67
0045AF5D   >  C785 D4FEFFFF>MOV DWORD PTR SS:[EBP-12C],monster_.0046>
0045AF67   >  8B8D D4FEFFFF MOV ECX,DWORD PTR SS:[EBP-12C]
0045AF6D   .  8B11          MOV EDX,DWORD PTR DS:[ECX]
0045AF6F   .  8995 18FFFFFF MOV DWORD PTR SS:[EBP-E8],EDX
0045AF75   .  8B45 08       MOV EAX,DWORD PTR SS:[EBP+8]
0045AF78   .  50            PUSH EAX
0045AF79   .  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045AF7C   .  51            PUSH ECX
0045AF7D   .  FF15 80434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaObjSe>;  MSVBVM50.__vbaObjSetAddref
0045AF83   .  50            PUSH EAX
0045AF84   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045AF8A   .  8B02          MOV EAX,DWORD PTR DS:[EDX]
0045AF8C   .  8B8D 18FFFFFF MOV ECX,DWORD PTR SS:[EBP-E8]
0045AF92   .  51            PUSH ECX
0045AF93   .  FF50 10       CALL DWORD PTR DS:[EAX+10]
0045AF96   .  8985 14FFFFFF MOV DWORD PTR SS:[EBP-EC],EAX
0045AF9C   .  83BD 14FFFFFF>CMP DWORD PTR SS:[EBP-EC],0
0045AFA3   .  7D 23         JGE SHORT monster_.0045AFC8
0045AFA5   .  6A 10         PUSH 10
0045AFA7   .  68 C0864000   PUSH monster_.004086C0
0045AFAC   .  8B95 18FFFFFF MOV EDX,DWORD PTR SS:[EBP-E8]
0045AFB2   .  52            PUSH EDX
0045AFB3   .  8B85 14FFFFFF MOV EAX,DWORD PTR SS:[EBP-EC]
0045AFB9   .  50            PUSH EAX
0045AFBA   .  FF15 40434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaHresu>;  MSVBVM50.__vbaHresultCheckObj
0045AFC0   .  8985 D0FEFFFF MOV DWORD PTR SS:[EBP-130],EAX
0045AFC6   .  EB 0A         JMP SHORT monster_.0045AFD2
0045AFC8   >  C785 D0FEFFFF>MOV DWORD PTR SS:[EBP-130],0
0045AFD2   >  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045AFD5   .  FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>;  MSVBVM50.__vbaFreeObj
0045AFDB   >  C745 F0 00000>MOV DWORD PTR SS:[EBP-10],0
0045AFE2   .  68 5DB04500   PUSH monster_.0045B05D
0045AFE7   .  EB 46         JMP SHORT monster_.0045B02F
0045AFE9   .  8D4D B0       LEA ECX,DWORD PTR SS:[EBP-50]
0045AFEC   .  51            PUSH ECX
0045AFED   .  8D55 B4       LEA EDX,DWORD PTR SS:[EBP-4C]
0045AFF0   .  52            PUSH EDX
0045AFF1   .  8D45 B8       LEA EAX,DWORD PTR SS:[EBP-48]
0045AFF4   .  50            PUSH EAX
0045AFF5   .  8D4D BC       LEA ECX,DWORD PTR SS:[EBP-44]
0045AFF8   .  51            PUSH ECX
0045AFF9   .  6A 04         PUSH 4
0045AFFB   .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
0045B001   .  83C4 14       ADD ESP,14
0045B004   .  8D4D AC       LEA ECX,DWORD PTR SS:[EBP-54]
0045B007   .  FF15 44454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeO>;  MSVBVM50.__vbaFreeObj
0045B00D   .  8D95 6CFFFFFF LEA EDX,DWORD PTR SS:[EBP-94]
0045B013   .  52            PUSH EDX
0045B014   .  8D85 7CFFFFFF LEA EAX,DWORD PTR SS:[EBP-84]
0045B01A   .  50            PUSH EAX
0045B01B   .  8D4D 8C       LEA ECX,DWORD PTR SS:[EBP-74]
0045B01E   .  51            PUSH ECX
0045B01F   .  8D55 9C       LEA EDX,DWORD PTR SS:[EBP-64]
0045B022   .  52            PUSH EDX
0045B023   .  6A 04         PUSH 4
0045B025   .  FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVarList
0045B02B   .  83C4 14       ADD ESP,14
0045B02E   .  C3            RETN
0045B02F   >  8D4D DC       LEA ECX,DWORD PTR SS:[EBP-24]
0045B032   .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
0045B038   .  8D4D CC       LEA ECX,DWORD PTR SS:[EBP-34]
0045B03B   .  FF15 E0424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVar
0045B041   .  8D4D C8       LEA ECX,DWORD PTR SS:[EBP-38]
0045B044   .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
0045B04A   .  8D4D C4       LEA ECX,DWORD PTR SS:[EBP-3C]
0045B04D   .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
0045B053   .  8D4D C0       LEA ECX,DWORD PTR SS:[EBP-40]
0045B056   .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
0045B05C   .  C3            RETN
0045B05D   .  8B45 08       MOV EAX,DWORD PTR SS:[EBP+8]
0045B060   .  8B08          MOV ECX,DWORD PTR DS:[EAX]
0045B062   .  8B55 08       MOV EDX,DWORD PTR SS:[EBP+8]
0045B065   .  52            PUSH EDX
0045B066   .  FF51 08       CALL DWORD PTR DS:[ECX+8]
0045B069   .  8B45 F0       MOV EAX,DWORD PTR SS:[EBP-10]
0045B06C   .  8B4D E0       MOV ECX,DWORD PTR SS:[EBP-20]
0045B06F   .  64:890D 00000>MOV DWORD PTR FS:[0],ECX
0045B076   .  5F            POP EDI
0045B077   .  5E            POP ESI
0045B078   .  5B            POP EBX
0045B079   .  8BE5          MOV ESP,EBP
0045B07B   .  5D            POP EBP
0045B07C   .  C2 0400       RETN 4

tianxj · 发表于 2008-11-17 11:26

==============================================================
算法部分[code]
00454BC0 $  55          PUSH EBP
00454BC1 .  8BEC       MOV EBP,ESP
00454BC3 .  83EC 0C    SUB ESP,0C
00454BC6 .  68 86334000 PUSH <JMP.&MSVBVM50.__vbaExceptHandler>  ;  SE 处理程序安装
00454BCB .  64:A1 0000000>MOV EAX,DWORD PTR FS:[0]
00454BD1 .  50          PUSH EAX
00454BD2 .  64:8925 00000>MOV DWORD PTR FS:[0],ESP
00454BD9 .  81EC C0000000 SUB ESP,0C0
00454BDF .  53          PUSH EBX
00454BE0 .  56          PUSH ESI
00454BE1 .  57          PUSH EDI
00454BE2 .  8965 F4    MOV DWORD PTR SS:[EBP-C],ESP
00454BE5 .  33C0       XOR EAX,EAX
00454BE7 .  8B75 08    MOV ESI,DWORD PTR SS:[EBP+8]
00454BEA .  8945 E8    MOV DWORD PTR SS:[EBP-18],EAX
00454BED .  8945 E4    MOV DWORD PTR SS:[EBP-1C],EAX
00454BF0 .  8945 E0    MOV DWORD PTR SS:[EBP-20],EAX
00454BF3 .  8945 DC    MOV DWORD PTR SS:[EBP-24],EAX
00454BF6 .  8945 D8    MOV DWORD PTR SS:[EBP-28],EAX
00454BF9 .  8945 D4    MOV DWORD PTR SS:[EBP-2C],EAX
00454BFC .  8945 D0    MOV DWORD PTR SS:[EBP-30],EAX
00454BFF .  8945 CC    MOV DWORD PTR SS:[EBP-34],EAX
00454C02 .  8945 C8    MOV DWORD PTR SS:[EBP-38],EAX
00454C05 .  8945 C4    MOV DWORD PTR SS:[EBP-3C],EAX
00454C08 .  8945 C0    MOV DWORD PTR SS:[EBP-40],EAX
00454C0B .  8945 BC    MOV DWORD PTR SS:[EBP-44],EAX
00454C0E .  8945 B8    MOV DWORD PTR SS:[EBP-48],EAX
00454C11 .  8945 B4    MOV DWORD PTR SS:[EBP-4C],EAX
00454C14 .  8945 B0    MOV DWORD PTR SS:[EBP-50],EAX
00454C17 .  8945 AC    MOV DWORD PTR SS:[EBP-54],EAX
00454C1A .  8945 A8    MOV DWORD PTR SS:[EBP-58],EAX
00454C1D .  8945 98    MOV DWORD PTR SS:[EBP-68],EAX
00454C20 .  8945 88    MOV DWORD PTR SS:[EBP-78],EAX
00454C23 .  8985 78FFFFFF MOV DWORD PTR SS:[EBP-88],EAX
00454C29 .  8985 44FFFFFF MOV DWORD PTR SS:[EBP-BC],EAX
00454C2F .  8985 40FFFFFF MOV DWORD PTR SS:[EBP-C0],EAX
00454C35 .  8985 3CFFFFFF MOV DWORD PTR SS:[EBP-C4],EAX
00454C3B .  8985 38FFFFFF MOV DWORD PTR SS:[EBP-C8],EAX
00454C41 .  8985 34FFFFFF MOV DWORD PTR SS:[EBP-CC],EAX
00454C47 .  8B06       MOV EAX,DWORD PTR DS:[ESI]             ;  //用户名
00454C49 .  50          PUSH EAX
00454C4A .  C745 F8 60294>MOV DWORD PTR SS:[EBP-8],monster_.004029>
00454C51 .  FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>;  MSVBVM50.rtcTrimBstr
00454C57 .  8B1D 08454600 MOV EBX,DWORD PTR DS:[<&MSVBVM50.__vbaSt>;  MSVBVM50.__vbaStrMove
00454C5D .  8BD0       MOV EDX,EAX
00454C5F .  8BCE       MOV ECX,ESI
00454C61 .  FFD3       CALL EBX                               ;  <&MSVBVM50.__vbaStrMove>
00454C63 .  8B0E       MOV ECX,DWORD PTR DS:[ESI]
00454C65 .  51          PUSH ECX
00454C66 .  FF15 EC424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaLenBs>;  MSVBVM50.__vbaLenBstr
00454C6C .  83F8 04    CMP EAX,4
00454C6F .  7D 2C       JGE SHORT monster_.00454C9D             ;  //用户名长度大于等于4则跳,否则用用户名连上"1-73.B.C,A-R"再连上用户名
00454C71 .  8B16       MOV EDX,DWORD PTR DS:[ESI]
00454C73 .  8B3D 2C434600 MOV EDI,DWORD PTR DS:[<&MSVBVM50.__vbaSt>;  MSVBVM50.__vbaStrCat
00454C79 .  52          PUSH EDX
00454C7A .  68 F0C74000 PUSH monster_.0040C7F0                ;  UNICODE "1-73.B.C,A-R"
00454C7F .  FFD7       CALL EDI                               ;  <&MSVBVM50.__vbaStrCat>
00454C81 .  8BD0       MOV EDX,EAX
00454C83 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
00454C86 .  FFD3       CALL EBX
00454C88 .  50          PUSH EAX
00454C89 .  8B06       MOV EAX,DWORD PTR DS:[ESI]
00454C8B .  50          PUSH EAX
00454C8C .  FFD7       CALL EDI
00454C8E .  8BD0       MOV EDX,EAX
00454C90 .  8BCE       MOV ECX,ESI
00454C92 .  FFD3       CALL EBX
00454C94 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
00454C97 .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
00454C9D >  8B0E       MOV ECX,DWORD PTR DS:[ESI]             ;  //用户名
00454C9F .  6A 01       PUSH 1
00454CA1 .  51          PUSH ECX
00454CA2 .  FF15 E8444600 CALL DWORD PTR DS:[<&MSVBVM50.rtcLeftCha>;  MSVBVM50.rtcLeftCharBstr
00454CA8 .  8BD0       MOV EDX,EAX
00454CAA .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
00454CAD .  FFD3       CALL EBX
00454CAF .  50          PUSH EAX
00454CB0 .  FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>;  MSVBVM50.rtcUpperCaseBstr
00454CB6 .  8BD0       MOV EDX,EAX
00454CB8 .  8D8D 44FFFFFF LEA ECX,DWORD PTR SS:[EBP-BC]
00454CBE .  FFD3       CALL EBX
00454CC0 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
00454CC3 .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
00454CC9 .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]          ;  //用户名第1位大写的ASCII码地址
00454CCF .  8B3D D8434600 MOV EDI,DWORD PTR DS:[<&MSVBVM50.__vbaSt>;  MSVBVM50.__vbaStrCmp
00454CD5 .  52          PUSH EDX
00454CD6 .  68 10C84000 PUSH monster_.0040C810
00454CDB .  FFD7       CALL EDI                               ;  <&MSVBVM50.__vbaStrCmp>
00454CDD .  85C0       TEST EAX,EAX
00454CDF .  0F84 9D030000 JE monster_.00455082                   ;  //若是"A"则跳
00454CE5 .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454CEB .  50          PUSH EAX
00454CEC .  68 18C84000 PUSH monster_.0040C818
00454CF1 .  FFD7       CALL EDI
00454CF3 .  85C0       TEST EAX,EAX
00454CF5 .  0F84 87030000 JE monster_.00455082                   ;  //若是"N"则跳
00454CFB .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454D01 .  51          PUSH ECX
00454D02 .  68 20C84000 PUSH monster_.0040C820
00454D07 .  FFD7       CALL EDI
00454D09 .  85C0       TEST EAX,EAX
00454D0B .  0F84 71030000 JE monster_.00455082                   ;  //若是"Y"则跳
00454D11 .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454D17 .  52          PUSH EDX
00454D18 .  68 28C84000 PUSH monster_.0040C828
00454D1D .  FFD7       CALL EDI
00454D1F .  85C0       TEST EAX,EAX
00454D21 .  0F84 54030000 JE monster_.0045507B                   ;  //若是"S"则跳
00454D27 .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454D2D .  50          PUSH EAX
00454D2E .  68 9CB74000 PUSH monster_.0040B79C
00454D33 .  FFD7       CALL EDI
00454D35 .  85C0       TEST EAX,EAX
00454D37 .  0F84 3E030000 JE monster_.0045507B                   ;  //若是"E"则跳
00454D3D .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454D43 .  51          PUSH ECX
00454D44 .  68 30C84000 PUSH monster_.0040C830
00454D49 .  FFD7       CALL EDI
00454D4B .  85C0       TEST EAX,EAX
00454D4D .  0F84 28030000 JE monster_.0045507B                   ;  //若是"J"则跳
00454D53 .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454D59 .  52          PUSH EDX
00454D5A .  68 40C84000 PUSH monster_.0040C840
00454D5F .  FFD7       CALL EDI
00454D61 .  85C0       TEST EAX,EAX
00454D63 .  0F84 0B030000 JE monster_.00455074                   ;  //若是"G"则跳
00454D69 .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454D6F .  50          PUSH EAX
00454D70 .  68 0C854000 PUSH monster_.0040850C
00454D75 .  FFD7       CALL EDI
00454D77 .  85C0       TEST EAX,EAX
00454D79 .  0F84 F5020000 JE monster_.00455074                   ;  //若是"K"则跳
00454D7F .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454D85 .  51          PUSH ECX
00454D86 .  68 48C84000 PUSH monster_.0040C848
00454D8B .  FFD7       CALL EDI
00454D8D .  85C0       TEST EAX,EAX
00454D8F .  0F84 DF020000 JE monster_.00455074                   ;  //若是"I"则跳
00454D95 .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454D9B .  52          PUSH EDX
00454D9C .  68 50C84000 PUSH monster_.0040C850
00454DA1 .  FFD7       CALL EDI
00454DA3 .  85C0       TEST EAX,EAX
00454DA5 .  0F84 C2020000 JE monster_.0045506D                   ;  //若是"F"则跳
00454DAB .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454DB1 .  50          PUSH EAX
00454DB2 .  68 38C84000 PUSH monster_.0040C838
00454DB7 .  FFD7       CALL EDI
00454DB9 .  85C0       TEST EAX,EAX
00454DBB .  0F84 AC020000 JE monster_.0045506D                   ;  //若是"H"则跳
00454DC1 .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454DC7 .  51          PUSH ECX
00454DC8 .  68 58C84000 PUSH monster_.0040C858
00454DCD .  FFD7       CALL EDI
00454DCF .  85C0       TEST EAX,EAX
00454DD1 .  0F84 96020000 JE monster_.0045506D                   ;  //若是"L"则跳
00454DD7 .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454DDD .  52          PUSH EDX
00454DDE .  68 6CC84000 PUSH monster_.0040C86C
00454DE3 .  FFD7       CALL EDI
00454DE5 .  85C0       TEST EAX,EAX
00454DE7 .  0F84 79020000 JE monster_.00455066                   ;  //若是"M"则跳
00454DED .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454DF3 .  50          PUSH EAX
00454DF4 .  68 74C84000 PUSH monster_.0040C874
00454DF9 .  FFD7       CALL EDI
00454DFB .  85C0       TEST EAX,EAX
00454DFD .  0F84 63020000 JE monster_.00455066                   ;  //若是"B"则跳
00454E03 .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454E09 .  51          PUSH ECX
00454E0A .  68 7CC84000 PUSH monster_.0040C87C
00454E0F .  FFD7       CALL EDI
00454E11 .  85C0       TEST EAX,EAX
00454E13 .  0F84 4D020000 JE monster_.00455066                   ;  //若是"O"则跳
00454E19 .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454E1F .  52          PUSH EDX
00454E20 .  68 84C84000 PUSH monster_.0040C884
00454E25 .  FFD7       CALL EDI
00454E27 .  85C0       TEST EAX,EAX
00454E29 .  0F84 30020000 JE monster_.0045505F                   ;  //若是"P"则跳
00454E2F .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454E35 .  50          PUSH EAX
00454E36 .  68 8CC84000 PUSH monster_.0040C88C
00454E3B .  FFD7       CALL EDI
00454E3D .  85C0       TEST EAX,EAX
00454E3F .  0F84 1A020000 JE monster_.0045505F                   ;  //若是"Q"则跳
00454E45 .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454E4B .  51          PUSH ECX
00454E4C .  68 94C84000 PUSH monster_.0040C894
00454E51 .  FFD7       CALL EDI
00454E53 .  85C0       TEST EAX,EAX
00454E55 .  0F84 04020000 JE monster_.0045505F                   ;  //若是"R"则跳
00454E5B .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454E61 .  52          PUSH EDX
00454E62 .  68 C0BB4000 PUSH monster_.0040BBC0
00454E67 .  FFD7       CALL EDI
00454E69 .  85C0       TEST EAX,EAX
00454E6B .  0F84 E7010000 JE monster_.00455058                   ;  //若是"D"则跳
00454E71 .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454E77 .  50          PUSH EAX
00454E78 .  68 A4C84000 PUSH monster_.0040C8A4
00454E7D .  FFD7       CALL EDI
00454E7F .  85C0       TEST EAX,EAX
00454E81 .  0F84 D1010000 JE monster_.00455058                   ;  //若是"T"则跳
00454E87 .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454E8D .  51          PUSH ECX
00454E8E .  68 ACC84000 PUSH monster_.0040C8AC
00454E93 .  FFD7       CALL EDI
00454E95 .  85C0       TEST EAX,EAX
00454E97 .  0F84 BB010000 JE monster_.00455058                   ;  //若是"U"则跳
00454E9D .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454EA3 .  52          PUSH EDX
00454EA4 .  68 C0C84000 PUSH monster_.0040C8C0
00454EA9 .  FFD7       CALL EDI
00454EAB .  85C0       TEST EAX,EAX
00454EAD .  0F84 9E010000 JE monster_.00455051                   ;  //若是"V"则跳
00454EB3 .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454EB9 .  50          PUSH EAX
00454EBA .  68 C8C84000 PUSH monster_.0040C8C8
00454EBF .  FFD7       CALL EDI
00454EC1 .  85C0       TEST EAX,EAX
00454EC3 .  0F84 88010000 JE monster_.00455051                   ;  //若是"Z"则跳
00454EC9 .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454ECF .  51          PUSH ECX
00454ED0 .  68 D0C84000 PUSH monster_.0040C8D0
00454ED5 .  FFD7       CALL EDI
00454ED7 .  85C0       TEST EAX,EAX
00454ED9 .  0F84 72010000 JE monster_.00455051                   ;  //若是"X"则跳
00454EDF .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454EE5 .  52          PUSH EDX
00454EE6 .  68 D8C84000 PUSH monster_.0040C8D8
00454EEB .  FFD7       CALL EDI
00454EED .  85C0       TEST EAX,EAX
00454EEF .  0F84 55010000 JE monster_.0045504A                   ;  //若是"C"则跳
00454EF5 .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454EFB .  50          PUSH EAX
00454EFC .  68 E0C84000 PUSH monster_.0040C8E0
00454F01 .  FFD7       CALL EDI
00454F03 .  85C0       TEST EAX,EAX
00454F05 .  0F84 3F010000 JE monster_.0045504A                   ;  //若是"W"则跳
00454F0B .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454F11 .  51          PUSH ECX
00454F12 .  68 A4B74000 PUSH monster_.0040B7A4
00454F17 .  FFD7       CALL EDI
00454F19 .  85C0       TEST EAX,EAX
00454F1B .  0F84 22010000 JE monster_.00455043                   ;  //若是"1"则跳
00454F21 .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454F27 .  52          PUSH EDX
00454F28 .  68 F4C84000 PUSH monster_.0040C8F4
00454F2D .  FFD7       CALL EDI
00454F2F .  85C0       TEST EAX,EAX
00454F31 .  0F84 0C010000 JE monster_.00455043                   ;  //若是"7"则跳
00454F37 .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454F3D .  50          PUSH EAX
00454F3E .  68 FCC84000 PUSH monster_.0040C8FC
00454F43 .  FFD7       CALL EDI
00454F45 .  85C0       TEST EAX,EAX
00454F47 .  0F84 F6000000 JE monster_.00455043                   ;  //若是"5"则跳
00454F4D .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454F53 .  51          PUSH ECX
00454F54 .  68 DCB74000 PUSH monster_.0040B7DC
00454F59 .  FFD7       CALL EDI
00454F5B .  85C0       TEST EAX,EAX
00454F5D .  0F84 E0000000 JE monster_.00455043                   ;  //若是"4"则跳
00454F63 .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454F69 .  52          PUSH EDX
00454F6A .  68 B4B74000 PUSH monster_.0040B7B4
00454F6F .  FFD7       CALL EDI
00454F71 .  85C0       TEST EAX,EAX
00454F73 .  0F84 CA000000 JE monster_.00455043                   ;  //若是"3"则跳
00454F79 .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454F7F .  50          PUSH EAX
00454F80 .  68 9CC84000 PUSH monster_.0040C89C
00454F85 .  FFD7       CALL EDI
00454F87 .  85C0       TEST EAX,EAX
00454F89 .  0F84 B4000000 JE monster_.00455043                   ;  //若是"6"则跳
00454F8F .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454F95 .  51          PUSH ECX
00454F96 .  68 ACB74000 PUSH monster_.0040B7AC
00454F9B .  FFD7       CALL EDI
00454F9D .  85C0       TEST EAX,EAX
00454F9F .  0F84 9E000000 JE monster_.00455043                   ;  //若是"2"则跳
00454FA5 .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454FAB .  52          PUSH EDX
00454FAC .  68 04C94000 PUSH monster_.0040C904
00454FB1 .  FFD7       CALL EDI
00454FB3 .  85C0       TEST EAX,EAX
00454FB5 .  0F84 88000000 JE monster_.00455043                   ;  //若是"8"则跳
00454FBB .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454FC1 .  50          PUSH EAX
00454FC2 .  68 BCC04000 PUSH monster_.0040C0BC
00454FC7 .  FFD7       CALL EDI
00454FC9 .  85C0       TEST EAX,EAX
00454FCB .  74 6F       JE SHORT monster_.0045503C             ;  //若是"9"则跳
00454FCD .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00454FD3 .  51          PUSH ECX
00454FD4 .  68 08C64000 PUSH monster_.0040C608
00454FD9 .  FFD7       CALL EDI
00454FDB .  85C0       TEST EAX,EAX
00454FDD .  74 5D       JE SHORT monster_.0045503C             ;  //若是"0"则跳
00454FDF .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
00454FE5 .  52          PUSH EDX
00454FE6 .  68 688E4000 PUSH monster_.00408E68
00454FEB .  FFD7       CALL EDI
00454FED .  85C0       TEST EAX,EAX
00454FEF .  74 44       JE SHORT monster_.00455035             ;  //若是"."则跳
00454FF1 .  8B85 44FFFFFF MOV EAX,DWORD PTR SS:[EBP-BC]
00454FF7 .  50          PUSH EAX
00454FF8 .  68 70C44000 PUSH monster_.0040C470
00454FFD .  FFD7       CALL EDI
00454FFF .  85C0       TEST EAX,EAX
00455001 .  74 32       JE SHORT monster_.00455035             ;  //若是","则跳
00455003 .  8B8D 44FFFFFF MOV ECX,DWORD PTR SS:[EBP-BC]
00455009 .  51          PUSH ECX
0045500A .  68 78C44000 PUSH monster_.0040C478
0045500F .  FFD7       CALL EDI
00455011 .  85C0       TEST EAX,EAX
00455013 .  74 20       JE SHORT monster_.00455035             ;  //若是"-"则跳
00455015 .  8B95 44FFFFFF MOV EDX,DWORD PTR SS:[EBP-BC]
0045501B .  52          PUSH EDX
0045501C .  68 88C24000 PUSH monster_.0040C288
00455021 .  FFD7       CALL EDI
00455023 .  85C0       TEST EAX,EAX
00455025 .  75 07       JNZ SHORT monster_.0045502E             ;  //若不是" "则跳
00455027 .  BA 30A64000 MOV EDX,monster_.0040A630             ;  UNICODE "34GHJKL"
0045502C .  EB 59       JMP SHORT monster_.00455087
0045502E >  BA BCAC4000 MOV EDX,monster_.0040ACBC             ;  UNICODE "T1"
00455033 .  EB 52       JMP SHORT monster_.00455087
00455035 >  BA 98C24000 MOV EDX,monster_.0040C298             ;  UNICODE "KB"
0045503A .  EB 4B       JMP SHORT monster_.00455087
0045503C >  BA 74C84000 MOV EDX,monster_.0040C874             ;  //"B"
00455041 .  EB 44       JMP SHORT monster_.00455087
00455043 >  BA C0BB4000 MOV EDX,monster_.0040BBC0             ;  //"D"
00455048 .  EB 3D       JMP SHORT monster_.00455087
0045504A >  BA E8C84000 MOV EDX,monster_.0040C8E8             ;  UNICODE "RR"
0045504F .  EB 36       JMP SHORT monster_.00455087
00455051 >  BA 40C84000 MOV EDX,monster_.0040C840             ;  //"G"
00455056 .  EB 2F       JMP SHORT monster_.00455087
00455058 >  BA B4C84000 MOV EDX,monster_.0040C8B4             ;  UNICODE "84"
0045505D .  EB 28       JMP SHORT monster_.00455087
0045505F >  BA 9CC84000 MOV EDX,monster_.0040C89C             ;  //"6"
00455064 .  EB 21       JMP SHORT monster_.00455087
00455066 >  BA ACB74000 MOV EDX,monster_.0040B7AC             ;  //"2"
0045506B .  EB 1A       JMP SHORT monster_.00455087
0045506D >  BA 60C84000 MOV EDX,monster_.0040C860             ;  UNICODE "Q7"
00455072 .  EB 13       JMP SHORT monster_.00455087
00455074 >  BA 28C84000 MOV EDX,monster_.0040C828             ;  //"S"
00455079 .  EB 0C       JMP SHORT monster_.00455087
0045507B >  BA 38C84000 MOV EDX,monster_.0040C838             ;  //"H"
00455080 .  EB 05       JMP SHORT monster_.00455087
00455082 >  BA DCB74000 MOV EDX,monster_.0040B7DC             ;  //"4"
00455087 >  8B35 98444600 MOV ESI,DWORD PTR DS:[<&MSVBVM50.__vbaSt>;  MSVBVM50.__vbaStrCopy
0045508D .  8D4D E4    LEA ECX,DWORD PTR SS:[EBP-1C]
00455090 .  FFD6       CALL ESI                               ;  <&MSVBVM50.__vbaStrCopy>
00455092 .  8B45 08    MOV EAX,DWORD PTR SS:[EBP+8]
00455095 .  8B08       MOV ECX,DWORD PTR DS:[EAX]             ;  //用户名
00455097 .  6A 01       PUSH 1
00455099 .  51          PUSH ECX
0045509A .  FF15 0C454600 CALL DWORD PTR DS:[<&MSVBVM50.rtcRightCh>;  MSVBVM50.rtcRightCharBstr
004550A0 .  8BD0       MOV EDX,EAX
004550A2 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
004550A5 .  FFD3       CALL EBX
004550A7 .  50          PUSH EAX
004550A8 .  FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>;  MSVBVM50.rtcUpperCaseBstr
004550AE .  8BD0       MOV EDX,EAX
004550B0 .  8D8D 40FFFFFF LEA ECX,DWORD PTR SS:[EBP-C0]
004550B6 .  FFD3       CALL EBX
004550B8 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
004550BB .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
004550C1 .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]          ;  //用户名右边第1位大写的ASCII码地址
004550C7 .  52          PUSH EDX
004550C8 .  68 10C84000 PUSH monster_.0040C810
004550CD .  FFD7       CALL EDI
004550CF .  85C0       TEST EAX,EAX
004550D1 .  0F84 A4030000 JE monster_.0045547B                   ;  //若是"A"则跳
004550D7 .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
004550DD .  50          PUSH EAX
004550DE .  68 18C84000 PUSH monster_.0040C818
004550E3 .  FFD7       CALL EDI
004550E5 .  85C0       TEST EAX,EAX
004550E7 .  0F84 8E030000 JE monster_.0045547B                   ;  //若是"N"则跳
004550ED .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
004550F3 .  51          PUSH ECX
004550F4 .  68 20C84000 PUSH monster_.0040C820
004550F9 .  FFD7       CALL EDI
004550FB .  85C0       TEST EAX,EAX
004550FD .  0F84 78030000 JE monster_.0045547B                   ;  //若是"Y"则跳
00455103 .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
00455109 .  52          PUSH EDX
0045510A .  68 28C84000 PUSH monster_.0040C828
0045510F .  FFD7       CALL EDI
00455111 .  85C0       TEST EAX,EAX
00455113 .  0F84 5B030000 JE monster_.00455474                   ;  //若是"S"则跳
00455119 .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
0045511F .  50          PUSH EAX
00455120 .  68 9CB74000 PUSH monster_.0040B79C
00455125 .  FFD7       CALL EDI
00455127 .  85C0       TEST EAX,EAX
00455129 .  0F84 45030000 JE monster_.00455474                   ;  //若是"E"则跳
0045512F .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
00455135 .  51          PUSH ECX
00455136 .  68 30C84000 PUSH monster_.0040C830
0045513B .  FFD7       CALL EDI
0045513D .  85C0       TEST EAX,EAX
0045513F .  0F84 2F030000 JE monster_.00455474                   ;  //若是"J"则跳
00455145 .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
0045514B .  52          PUSH EDX
0045514C .  68 40C84000 PUSH monster_.0040C840
00455151 .  FFD7       CALL EDI
00455153 .  85C0       TEST EAX,EAX
00455155 .  0F84 12030000 JE monster_.0045546D                   ;  //若是"G"则跳
0045515B .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
00455161 .  50          PUSH EAX
00455162 .  68 0C854000 PUSH monster_.0040850C
00455167 .  FFD7       CALL EDI
00455169 .  85C0       TEST EAX,EAX
0045516B .  0F84 FC020000 JE monster_.0045546D                   ;  //若是"K"则跳
00455171 .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
00455177 .  51          PUSH ECX
00455178 .  68 48C84000 PUSH monster_.0040C848
0045517D .  FFD7       CALL EDI
0045517F .  85C0       TEST EAX,EAX
00455181 .  0F84 E6020000 JE monster_.0045546D                   ;  //若是"I"则跳
00455187 .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
0045518D .  52          PUSH EDX
0045518E .  68 50C84000 PUSH monster_.0040C850
00455193 .  FFD7       CALL EDI
00455195 .  85C0       TEST EAX,EAX
00455197 .  0F84 C9020000 JE monster_.00455466                   ;  //若是"F"则跳
0045519D .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
004551A3 .  50          PUSH EAX
004551A4 .  68 38C84000 PUSH monster_.0040C838
004551A9 .  FFD7       CALL EDI
004551AB .  85C0       TEST EAX,EAX
004551AD .  0F84 B3020000 JE monster_.00455466                   ;  //若是"H"则跳
004551B3 .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
004551B9 .  51          PUSH ECX
004551BA .  68 58C84000 PUSH monster_.0040C858
004551BF .  FFD7       CALL EDI
004551C1 .  85C0       TEST EAX,EAX
004551C3 .  0F84 9D020000 JE monster_.00455466                   ;  //若是"L"则跳
004551C9 .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
004551CF .  52          PUSH EDX
004551D0 .  68 6CC84000 PUSH monster_.0040C86C
004551D5 .  FFD7       CALL EDI
004551D7 .  85C0       TEST EAX,EAX
004551D9 .  0F84 80020000 JE monster_.0045545F                   ;  //若是"M"则跳
004551DF .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
004551E5 .  50          PUSH EAX
004551E6 .  68 74C84000 PUSH monster_.0040C874
004551EB .  FFD7       CALL EDI
004551ED .  85C0       TEST EAX,EAX
004551EF .  0F84 6A020000 JE monster_.0045545F                   ;  //若是"B"则跳
004551F5 .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
004551FB .  51          PUSH ECX
004551FC .  68 7CC84000 PUSH monster_.0040C87C
00455201 .  FFD7       CALL EDI
00455203 .  85C0       TEST EAX,EAX
00455205 .  0F84 54020000 JE monster_.0045545F                   ;  //若是"O"则跳
0045520B .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
00455211 .  52          PUSH EDX
00455212 .  68 84C84000 PUSH monster_.0040C884

[ 本帖最后由 tianxj 于 2008-11-17 11:28 编辑 ]

tianxj · 发表于 2008-11-17 11:28

00455217 .  FFD7       CALL EDI
00455219 .  85C0       TEST EAX,EAX
0045521B .  0F84 37020000 JE monster_.00455458                   ;  //若是"P"则跳
00455221 .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
00455227 .  50          PUSH EAX
00455228 .  68 8CC84000 PUSH monster_.0040C88C
0045522D .  FFD7       CALL EDI
0045522F .  85C0       TEST EAX,EAX
00455231 .  0F84 21020000 JE monster_.00455458                   ;  //若是"Q"则跳
00455237 .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
0045523D .  51          PUSH ECX
0045523E .  68 94C84000 PUSH monster_.0040C894
00455243 .  FFD7       CALL EDI
00455245 .  85C0       TEST EAX,EAX
00455247 .  0F84 0B020000 JE monster_.00455458                   ;  //若是"R"则跳
0045524D .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
00455253 .  52          PUSH EDX
00455254 .  68 C0BB4000 PUSH monster_.0040BBC0
00455259 .  FFD7       CALL EDI
0045525B .  85C0       TEST EAX,EAX
0045525D .  0F84 EE010000 JE monster_.00455451                   ;  //若是"D"则跳
00455263 .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
00455269 .  50          PUSH EAX
0045526A .  68 A4C84000 PUSH monster_.0040C8A4
0045526F .  FFD7       CALL EDI
00455271 .  85C0       TEST EAX,EAX
00455273 .  0F84 D8010000 JE monster_.00455451                   ;  //若是"T"则跳
00455279 .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
0045527F .  51          PUSH ECX
00455280 .  68 ACC84000 PUSH monster_.0040C8AC
00455285 .  FFD7       CALL EDI
00455287 .  85C0       TEST EAX,EAX
00455289 .  0F84 C2010000 JE monster_.00455451                   ;  //若是"U"则跳
0045528F .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
00455295 .  52          PUSH EDX
00455296 .  68 C0C84000 PUSH monster_.0040C8C0
0045529B .  FFD7       CALL EDI
0045529D .  85C0       TEST EAX,EAX
0045529F .  0F84 A5010000 JE monster_.0045544A                   ;  //若是"V"则跳
004552A5 .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
004552AB .  50          PUSH EAX
004552AC .  68 C8C84000 PUSH monster_.0040C8C8
004552B1 .  FFD7       CALL EDI
004552B3 .  85C0       TEST EAX,EAX
004552B5 .  0F84 8F010000 JE monster_.0045544A                   ;  //若是"Z"则跳
004552BB .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
004552C1 .  51          PUSH ECX
004552C2 .  68 D0C84000 PUSH monster_.0040C8D0
004552C7 .  FFD7       CALL EDI
004552C9 .  85C0       TEST EAX,EAX
004552CB .  0F84 79010000 JE monster_.0045544A                   ;  //若是"X"则跳
004552D1 .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
004552D7 .  52          PUSH EDX
004552D8 .  68 D8C84000 PUSH monster_.0040C8D8
004552DD .  FFD7       CALL EDI
004552DF .  85C0       TEST EAX,EAX
004552E1 .  0F84 5C010000 JE monster_.00455443                   ;  //若是"C"则跳
004552E7 .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
004552ED .  50          PUSH EAX
004552EE .  68 E0C84000 PUSH monster_.0040C8E0
004552F3 .  FFD7       CALL EDI
004552F5 .  85C0       TEST EAX,EAX
004552F7 .  0F84 46010000 JE monster_.00455443                   ;  //若是"W"则跳
004552FD .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
00455303 .  51          PUSH ECX
00455304 .  68 A4B74000 PUSH monster_.0040B7A4
00455309 .  FFD7       CALL EDI
0045530B .  85C0       TEST EAX,EAX
0045530D .  0F84 29010000 JE monster_.0045543C                   ;  //若是"1"则跳
00455313 .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
00455319 .  52          PUSH EDX
0045531A .  68 F4C84000 PUSH monster_.0040C8F4
0045531F .  FFD7       CALL EDI
00455321 .  85C0       TEST EAX,EAX
00455323 .  0F84 13010000 JE monster_.0045543C                   ;  //若是"7"则跳
00455329 .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
0045532F .  50          PUSH EAX
00455330 .  68 FCC84000 PUSH monster_.0040C8FC
00455335 .  FFD7       CALL EDI
00455337 .  85C0       TEST EAX,EAX
00455339 .  0F84 FD000000 JE monster_.0045543C                   ;  //若是"5"则跳
0045533F .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
00455345 .  51          PUSH ECX
00455346 .  68 DCB74000 PUSH monster_.0040B7DC
0045534B .  FFD7       CALL EDI
0045534D .  85C0       TEST EAX,EAX
0045534F .  0F84 E7000000 JE monster_.0045543C                   ;  //若是"4"则跳
00455355 .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
0045535B .  52          PUSH EDX
0045535C .  68 B4B74000 PUSH monster_.0040B7B4
00455361 .  FFD7       CALL EDI
00455363 .  85C0       TEST EAX,EAX
00455365 .  0F84 CA000000 JE monster_.00455435                   ;  //若是"3"则跳
0045536B .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
00455371 .  50          PUSH EAX
00455372 .  68 9CC84000 PUSH monster_.0040C89C
00455377 .  FFD7       CALL EDI
00455379 .  85C0       TEST EAX,EAX
0045537B .  0F84 B4000000 JE monster_.00455435                   ;  //若是"6"则跳
00455381 .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
00455387 .  51          PUSH ECX
00455388 .  68 ACB74000 PUSH monster_.0040B7AC
0045538D .  FFD7       CALL EDI
0045538F .  85C0       TEST EAX,EAX
00455391 .  0F84 9E000000 JE monster_.00455435                   ;  //若是"2"则跳
00455397 .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
0045539D .  52          PUSH EDX
0045539E .  68 04C94000 PUSH monster_.0040C904
004553A3 .  FFD7       CALL EDI
004553A5 .  85C0       TEST EAX,EAX
004553A7 .  0F84 88000000 JE monster_.00455435                   ;  //若是"8"则跳
004553AD .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
004553B3 .  50          PUSH EAX
004553B4 .  68 BCC04000 PUSH monster_.0040C0BC
004553B9 .  FFD7       CALL EDI
004553BB .  85C0       TEST EAX,EAX
004553BD .  74 6F       JE SHORT monster_.0045542E             ;  //若是"9"则跳
004553BF .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
004553C5 .  51          PUSH ECX
004553C6 .  68 08C64000 PUSH monster_.0040C608
004553CB .  FFD7       CALL EDI
004553CD .  85C0       TEST EAX,EAX
004553CF .  74 5D       JE SHORT monster_.0045542E             ;  //若是"0"则跳
004553D1 .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
004553D7 .  52          PUSH EDX
004553D8 .  68 688E4000 PUSH monster_.00408E68
004553DD .  FFD7       CALL EDI
004553DF .  85C0       TEST EAX,EAX
004553E1 .  74 44       JE SHORT monster_.00455427             ;  //若是"."则跳
004553E3 .  8B85 40FFFFFF MOV EAX,DWORD PTR SS:[EBP-C0]
004553E9 .  50          PUSH EAX
004553EA .  68 70C44000 PUSH monster_.0040C470
004553EF .  FFD7       CALL EDI
004553F1 .  85C0       TEST EAX,EAX
004553F3 .  74 32       JE SHORT monster_.00455427             ;  //若是","则跳
004553F5 .  8B8D 40FFFFFF MOV ECX,DWORD PTR SS:[EBP-C0]
004553FB .  51          PUSH ECX
004553FC .  68 78C44000 PUSH monster_.0040C478
00455401 .  FFD7       CALL EDI
00455403 .  85C0       TEST EAX,EAX
00455405 .  74 20       JE SHORT monster_.00455427             ;  //若是"-"则跳
00455407 .  8B95 40FFFFFF MOV EDX,DWORD PTR SS:[EBP-C0]
0045540D .  52          PUSH EDX
0045540E .  68 88C24000 PUSH monster_.0040C288
00455413 .  FFD7       CALL EDI
00455415 .  85C0       TEST EAX,EAX
00455417 .  75 07       JNZ SHORT monster_.00455420             ;  //若不是" "则跳
00455419 .  BA 0CC94000 MOV EDX,monster_.0040C90C             ;  UNICODE "HJKLOPB"
0045541E .  EB 60       JMP SHORT monster_.00455480
00455420 >  BA 20C94000 MOV EDX,monster_.0040C920             ;  UNICODE "1T"
00455425 .  EB 59       JMP SHORT monster_.00455480
00455427 >  BA 2CA04000 MOV EDX,monster_.0040A02C             ;  UNICODE "BK"
0045542C .  EB 52       JMP SHORT monster_.00455480
0045542E >  BA A4C84000 MOV EDX,monster_.0040C8A4             ;  //"T"
00455433 .  EB 4B       JMP SHORT monster_.00455480
00455435 >  BA 08C64000 MOV EDX,monster_.0040C608             ;  //"0"
0045543A .  EB 44       JMP SHORT monster_.00455480
0045543C >  BA BCC04000 MOV EDX,monster_.0040C0BC             ;  //"9"
00455441 .  EB 3D       JMP SHORT monster_.00455480
00455443 >  BA E8C84000 MOV EDX,monster_.0040C8E8             ;  UNICODE "RR"
00455448 .  EB 36       JMP SHORT monster_.00455480
0045544A >  BA 04C94000 MOV EDX,monster_.0040C904             ;  //"8"
0045544F .  EB 2F       JMP SHORT monster_.00455480
00455451 >  BA 4C9E4000 MOV EDX,monster_.00409E4C             ;  UNICODE "67"
00455456 .  EB 28       JMP SHORT monster_.00455480
00455458 >  BA FCC84000 MOV EDX,monster_.0040C8FC             ;  //"5"
0045545D .  EB 21       JMP SHORT monster_.00455480
0045545F >  BA DCB74000 MOV EDX,monster_.0040B7DC             ;  //"4"
00455464 .  EB 1A       JMP SHORT monster_.00455480
00455466 >  BA 60C84000 MOV EDX,monster_.0040C860             ;  UNICODE "Q7"
0045546B .  EB 13       JMP SHORT monster_.00455480
0045546D >  BA B4B74000 MOV EDX,monster_.0040B7B4             ;  //"3"
00455472 .  EB 0C       JMP SHORT monster_.00455480
00455474 >  BA ACB74000 MOV EDX,monster_.0040B7AC             ;  //"2"
00455479 .  EB 05       JMP SHORT monster_.00455480
0045547B >  BA A4B74000 MOV EDX,monster_.0040B7A4             ;  //"1"
00455480 >  8D4D D8    LEA ECX,DWORD PTR SS:[EBP-28]
00455483 .  FFD6       CALL ESI
00455485 .  8B4D 08    MOV ECX,DWORD PTR SS:[EBP+8]
00455488 .  8B11       MOV EDX,DWORD PTR DS:[ECX]             ;  //用户名
0045548A .  8D45 98    LEA EAX,DWORD PTR SS:[EBP-68]
0045548D .  50          PUSH EAX
0045548E .  6A 02       PUSH 2
00455490 .  52          PUSH EDX
00455491 .  C745 A0 01000>MOV DWORD PTR SS:[EBP-60],1
00455498 .  C745 98 02000>MOV DWORD PTR SS:[EBP-68],2
0045549F .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
004554A5 .  8BD0       MOV EDX,EAX
004554A7 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
004554AA .  FFD3       CALL EBX
004554AC .  50          PUSH EAX
004554AD .  FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>;  MSVBVM50.rtcUpperCaseBstr
004554B3 .  8BD0       MOV EDX,EAX
004554B5 .  8D8D 3CFFFFFF LEA ECX,DWORD PTR SS:[EBP-C4]
004554BB .  FFD3       CALL EBX
004554BD .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
004554C0 .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
004554C6 .  8D4D 98    LEA ECX,DWORD PTR SS:[EBP-68]
004554C9 .  FF15 E0424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVar
004554CF .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]          ;  //用户名第2位大写的ASCII码地址
004554D5 .  50          PUSH EAX
004554D6 .  68 28C84000 PUSH monster_.0040C828
004554DB .  FFD7       CALL EDI
004554DD .  85C0       TEST EAX,EAX
004554DF .  0F84 A4030000 JE monster_.00455889                   ;  //若是"S"则跳
004554E5 .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
004554EB .  51          PUSH ECX
004554EC .  68 18C84000 PUSH monster_.0040C818
004554F1 .  FFD7       CALL EDI
004554F3 .  85C0       TEST EAX,EAX
004554F5 .  0F84 8E030000 JE monster_.00455889                   ;  //若是"N"则跳
004554FB .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
00455501 .  52          PUSH EDX
00455502 .  68 20C84000 PUSH monster_.0040C820
00455507 .  FFD7       CALL EDI
00455509 .  85C0       TEST EAX,EAX
0045550B .  0F84 78030000 JE monster_.00455889                   ;  //若是"Y"则跳
00455511 .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
00455517 .  50          PUSH EAX
00455518 .  68 10C84000 PUSH monster_.0040C810
0045551D .  FFD7       CALL EDI
0045551F .  85C0       TEST EAX,EAX
00455521 .  0F84 5B030000 JE monster_.00455882                   ;  //若是"A"则跳
00455527 .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
0045552D .  51          PUSH ECX
0045552E .  68 9CB74000 PUSH monster_.0040B79C
00455533 .  FFD7       CALL EDI
00455535 .  85C0       TEST EAX,EAX
00455537 .  0F84 45030000 JE monster_.00455882                   ;  //若是"E"则跳
0045553D .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
00455543 .  52          PUSH EDX
00455544 .  68 30C84000 PUSH monster_.0040C830
00455549 .  FFD7       CALL EDI
0045554B .  85C0       TEST EAX,EAX
0045554D .  0F84 2F030000 JE monster_.00455882                   ;  //若是"J"则跳
00455553 .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
00455559 .  50          PUSH EAX
0045555A .  68 50C84000 PUSH monster_.0040C850
0045555F .  FFD7       CALL EDI
00455561 .  85C0       TEST EAX,EAX
00455563 .  0F84 12030000 JE monster_.0045587B                   ;  //若是"F"则跳
00455569 .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
0045556F .  51          PUSH ECX
00455570 .  68 0C854000 PUSH monster_.0040850C
00455575 .  FFD7       CALL EDI
00455577 .  85C0       TEST EAX,EAX
00455579 .  0F84 FC020000 JE monster_.0045587B                   ;  //若是"K"则跳
0045557F .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
00455585 .  52          PUSH EDX
00455586 .  68 48C84000 PUSH monster_.0040C848
0045558B .  FFD7       CALL EDI
0045558D .  85C0       TEST EAX,EAX
0045558F .  0F84 E6020000 JE monster_.0045587B                   ;  //若是"I"则跳
00455595 .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
0045559B .  50          PUSH EAX
0045559C .  68 50C84000 PUSH monster_.0040C850
004555A1 .  FFD7       CALL EDI
004555A3 .  85C0       TEST EAX,EAX
004555A5 .  0F84 C9020000 JE monster_.00455874                   ;  //若是"F"则跳
004555AB .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
004555B1 .  51          PUSH ECX
004555B2 .  68 08C64000 PUSH monster_.0040C608
004555B7 .  FFD7       CALL EDI
004555B9 .  85C0       TEST EAX,EAX
004555BB .  0F84 B3020000 JE monster_.00455874                   ;  //若是"0"则跳
004555C1 .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
004555C7 .  52          PUSH EDX
004555C8 .  68 58C84000 PUSH monster_.0040C858
004555CD .  FFD7       CALL EDI
004555CF .  85C0       TEST EAX,EAX
004555D1 .  0F84 9D020000 JE monster_.00455874                   ;  //若是"L"则跳
004555D7 .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
004555DD .  50          PUSH EAX
004555DE .  68 6CC84000 PUSH monster_.0040C86C
004555E3 .  FFD7       CALL EDI
004555E5 .  85C0       TEST EAX,EAX
004555E7 .  0F84 80020000 JE monster_.0045586D                   ;  //若是"M"则跳
004555ED .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
004555F3 .  51          PUSH ECX
004555F4 .  68 74C84000 PUSH monster_.0040C874
004555F9 .  FFD7       CALL EDI
004555FB .  85C0       TEST EAX,EAX
004555FD .  0F84 6A020000 JE monster_.0045586D                   ;  //若是"B"则跳
00455603 .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
00455609 .  52          PUSH EDX
0045560A .  68 38C84000 PUSH monster_.0040C838
0045560F .  FFD7       CALL EDI
00455611 .  85C0       TEST EAX,EAX
00455613 .  0F84 54020000 JE monster_.0045586D                   ;  //若是"H"则跳
00455619 .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
0045561F .  50          PUSH EAX
00455620 .  68 84C84000 PUSH monster_.0040C884
00455625 .  FFD7       CALL EDI
00455627 .  85C0       TEST EAX,EAX
00455629 .  0F84 37020000 JE monster_.00455866                   ;  //若是"P"则跳
0045562F .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
00455635 .  51          PUSH ECX
00455636 .  68 8CC84000 PUSH monster_.0040C88C
0045563B .  FFD7       CALL EDI
0045563D .  85C0       TEST EAX,EAX
0045563F .  0F84 21020000 JE monster_.00455866                   ;  //若是"Q"则跳
00455645 .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
0045564B .  52          PUSH EDX
0045564C .  68 94C84000 PUSH monster_.0040C894
00455651 .  FFD7       CALL EDI
00455653 .  85C0       TEST EAX,EAX
00455655 .  0F84 0B020000 JE monster_.00455866                   ;  //若是"R"则跳
0045565B .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
00455661 .  50          PUSH EAX
00455662 .  68 C0BB4000 PUSH monster_.0040BBC0
00455667 .  FFD7       CALL EDI
00455669 .  85C0       TEST EAX,EAX
0045566B .  0F84 EE010000 JE monster_.0045585F                   ;  //若是"D"则跳
00455671 .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
00455677 .  51          PUSH ECX
00455678 .  68 A4C84000 PUSH monster_.0040C8A4
0045567D .  FFD7       CALL EDI
0045567F .  85C0       TEST EAX,EAX
00455681 .  0F84 D8010000 JE monster_.0045585F                   ;  //若是"T"则跳
00455687 .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
0045568D .  52          PUSH EDX
0045568E .  68 ACC84000 PUSH monster_.0040C8AC
00455693 .  FFD7       CALL EDI
00455695 .  85C0       TEST EAX,EAX
00455697 .  0F84 C2010000 JE monster_.0045585F                   ;  //若是"U"则跳
0045569D .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
004556A3 .  50          PUSH EAX
004556A4 .  68 C0C84000 PUSH monster_.0040C8C0
004556A9 .  FFD7       CALL EDI
004556AB .  85C0       TEST EAX,EAX
004556AD .  0F84 A5010000 JE monster_.00455858                   ;  //若是"V"则跳
004556B3 .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
004556B9 .  51          PUSH ECX
004556BA .  68 C8C84000 PUSH monster_.0040C8C8
004556BF .  FFD7       CALL EDI
004556C1 .  85C0       TEST EAX,EAX
004556C3 .  0F84 8F010000 JE monster_.00455858                   ;  //若是"Z"则跳
004556C9 .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
004556CF .  52          PUSH EDX
004556D0 .  68 D0C84000 PUSH monster_.0040C8D0
004556D5 .  FFD7       CALL EDI
004556D7 .  85C0       TEST EAX,EAX
004556D9 .  0F84 79010000 JE monster_.00455858                   ;  //若是"X"则跳
004556DF .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
004556E5 .  50          PUSH EAX
004556E6 .  68 D8C84000 PUSH monster_.0040C8D8
004556EB .  FFD7       CALL EDI
004556ED .  85C0       TEST EAX,EAX
004556EF .  0F84 5C010000 JE monster_.00455851                   ;  //若是"C"则跳
004556F5 .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
004556FB .  51          PUSH ECX
004556FC .  68 E0C84000 PUSH monster_.0040C8E0
00455701 .  FFD7       CALL EDI
00455703 .  85C0       TEST EAX,EAX
00455705 .  0F84 46010000 JE monster_.00455851                   ;  //若是"W"则跳
0045570B .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
00455711 .  52          PUSH EDX
00455712 .  68 A4B74000 PUSH monster_.0040B7A4
00455717 .  FFD7       CALL EDI
00455719 .  85C0       TEST EAX,EAX
0045571B .  0F84 29010000 JE monster_.0045584A                   ;  //若是"1"则跳
00455721 .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
00455727 .  50          PUSH EAX
00455728 .  68 F4C84000 PUSH monster_.0040C8F4
0045572D .  FFD7       CALL EDI
0045572F .  85C0       TEST EAX,EAX
00455731 .  0F84 13010000 JE monster_.0045584A                   ;  //若是"7"则跳
00455737 .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
0045573D .  51          PUSH ECX
0045573E .  68 FCC84000 PUSH monster_.0040C8FC
00455743 .  FFD7       CALL EDI
00455745 .  85C0       TEST EAX,EAX
00455747 .  0F84 FD000000 JE monster_.0045584A                   ;  //若是"5"则跳
0045574D .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
00455753 .  52          PUSH EDX
00455754 .  68 DCB74000 PUSH monster_.0040B7DC
00455759 .  FFD7       CALL EDI
0045575B .  85C0       TEST EAX,EAX
0045575D .  0F84 E7000000 JE monster_.0045584A                   ;  /若是"4"则跳
00455763 .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
00455769 .  50          PUSH EAX
0045576A .  68 B4B74000 PUSH monster_.0040B7B4
0045576F .  FFD7       CALL EDI
00455771 .  85C0       TEST EAX,EAX
00455773 .  0F84 CA000000 JE monster_.00455843                   ;  //若是"3"则跳
00455779 .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
0045577F .  51          PUSH ECX
00455780 .  68 9CC84000 PUSH monster_.0040C89C
00455785 .  FFD7       CALL EDI
00455787 .  85C0       TEST EAX,EAX
00455789 .  0F84 B4000000 JE monster_.00455843                   ;  //若是"6"则跳
0045578F .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
00455795 .  52          PUSH EDX
00455796 .  68 ACB74000 PUSH monster_.0040B7AC
0045579B .  FFD7       CALL EDI
0045579D .  85C0       TEST EAX,EAX
0045579F .  0F84 9E000000 JE monster_.00455843                   ;  //若是"2"则跳
004557A5 .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
004557AB .  50          PUSH EAX
004557AC .  68 04C94000 PUSH monster_.0040C904
004557B1 .  FFD7       CALL EDI
004557B3 .  85C0       TEST EAX,EAX
004557B5 .  0F84 88000000 JE monster_.00455843                   ;  //若是"8"则跳
004557BB .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
004557C1 .  51          PUSH ECX
004557C2 .  68 BCC04000 PUSH monster_.0040C0BC
004557C7 .  FFD7       CALL EDI
004557C9 .  85C0       TEST EAX,EAX
004557CB .  74 6F       JE SHORT monster_.0045583C             ;  //若是"9"则跳
004557CD .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
004557D3 .  52          PUSH EDX
004557D4 .  68 7CC84000 PUSH monster_.0040C87C
004557D9 .  FFD7       CALL EDI
004557DB .  85C0       TEST EAX,EAX
004557DD .  74 5D       JE SHORT monster_.0045583C             ;  //若是"O"则跳
004557DF .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
004557E5 .  50          PUSH EAX
004557E6 .  68 688E4000 PUSH monster_.00408E68
004557EB .  FFD7       CALL EDI
004557ED .  85C0       TEST EAX,EAX
004557EF .  74 44       JE SHORT monster_.00455835             ;  //若是"."则跳
004557F1 .  8B8D 3CFFFFFF MOV ECX,DWORD PTR SS:[EBP-C4]
004557F7 .  51          PUSH ECX
004557F8 .  68 70C44000 PUSH monster_.0040C470
004557FD .  FFD7       CALL EDI
004557FF .  85C0       TEST EAX,EAX
00455801 .  74 32       JE SHORT monster_.00455835             ;  //若是","则跳
00455803 .  8B95 3CFFFFFF MOV EDX,DWORD PTR SS:[EBP-C4]
00455809 .  52          PUSH EDX
0045580A .  68 78C44000 PUSH monster_.0040C478
0045580F .  FFD7       CALL EDI
00455811 .  85C0       TEST EAX,EAX
00455813 .  74 20       JE SHORT monster_.00455835             ;  //若是"-"则跳
00455815 .  8B85 3CFFFFFF MOV EAX,DWORD PTR SS:[EBP-C4]
0045581B .  50          PUSH EAX
0045581C .  68 88C24000 PUSH monster_.0040C288
00455821 .  FFD7       CALL EDI
00455823 .  85C0       TEST EAX,EAX
00455825 .  75 07       JNZ SHORT monster_.0045582E             ;  //若不是" "则跳
00455827 .  BA C0C94000 MOV EDX,monster_.0040C9C0             ;  UNICODE "7V9R21G"
0045582C .  EB 60       JMP SHORT monster_.0045588E
0045582E >  BA D4C94000 MOV EDX,monster_.0040C9D4             ;  UNICODE "1231T"
00455833 .  EB 59       JMP SHORT monster_.0045588E
00455835 >  BA B0C94000 MOV EDX,monster_.0040C9B0             ;  UNICODE "B134K"
0045583A .  EB 52       JMP SHORT monster_.0045588E
0045583C >  BA A4C94000 MOV EDX,monster_.0040C9A4             ;  UNICODE "T2C"
00455841 .  EB 4B       JMP SHORT monster_.0045588E
00455843 >  BA 98C94000 MOV EDX,monster_.0040C998             ;  UNICODE "22B"
00455848 .  EB 44       JMP SHORT monster_.0045588E
0045584A >  BA BCC04000 MOV EDX,monster_.0040C0BC             ;  //"9"
0045584F .  EB 3D       JMP SHORT monster_.0045588E
00455851 >  BA 8CC94000 MOV EDX,monster_.0040C98C             ;  UNICODE "RN1"
00455856 .  EB 36       JMP SHORT monster_.0045588E
00455858 >  BA 80C94000 MOV EDX,monster_.0040C980             ;  UNICODE "890"
0045585D .  EB 2F       JMP SHORT monster_.0045588E
0045585F >  BA 74C94000 MOV EDX,monster_.0040C974             ;  UNICODE "69T"
00455864 .  EB 28       JMP SHORT monster_.0045588E
00455866 >  BA 68C94000 MOV EDX,monster_.0040C968             ;  UNICODE "52"
0045586B .  EB 21       JMP SHORT monster_.0045588E
0045586D >  BA 5CC94000 MOV EDX,monster_.0040C95C             ;  UNICODE "7B"
00455872 .  EB 1A       JMP SHORT monster_.0045588E
00455874 >  BA 50C94000 MOV EDX,monster_.0040C950             ;  UNICODE "QR"
00455879 .  EB 13       JMP SHORT monster_.0045588E
0045587B >  BA 44C94000 MOV EDX,monster_.0040C944             ;  UNICODE "T3R"
00455880 .  EB 0C       JMP SHORT monster_.0045588E
00455882 >  BA 38C94000 MOV EDX,monster_.0040C938             ;  UNICODE "515"
00455887 .  EB 05       JMP SHORT monster_.0045588E
00455889 >  BA 2CC94000 MOV EDX,monster_.0040C92C             ;  UNICODE "314"
0045588E >  8D4D D0    LEA ECX,DWORD PTR SS:[EBP-30]
00455891 .  FFD6       CALL ESI
00455893 .  8B55 08    MOV EDX,DWORD PTR SS:[EBP+8]
00455896 .  8B02       MOV EAX,DWORD PTR DS:[EDX]             ;  //用户名
00455898 .  8D4D 98    LEA ECX,DWORD PTR SS:[EBP-68]
0045589B .  51          PUSH ECX
0045589C .  6A 04       PUSH 4
0045589E .  50          PUSH EAX
0045589F .  C745 A0 01000>MOV DWORD PTR SS:[EBP-60],1
004558A6 .  C745 98 02000>MOV DWORD PTR SS:[EBP-68],2
004558AD .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
004558B3 .  8BD0       MOV EDX,EAX
004558B5 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
004558B8 .  FFD3       CALL EBX
004558BA .  50          PUSH EAX
004558BB .  FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>;  MSVBVM50.rtcUpperCaseBstr
004558C1 .  8BD0       MOV EDX,EAX
004558C3 .  8D8D 38FFFFFF LEA ECX,DWORD PTR SS:[EBP-C8]
004558C9 .  FFD3       CALL EBX
004558CB .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
004558CE .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
004558D4 .  8D4D 98    LEA ECX,DWORD PTR SS:[EBP-68]
004558D7 .  FF15 E0424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVar
004558DD .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]          ;  //用户名第4位大写的ASCII码地址
004558E3 .  51          PUSH ECX
004558E4 .  68 28C84000 PUSH monster_.0040C828                ;  //"S"
004558E9 .  FFD7       CALL EDI
004558EB .  85C0       TEST EAX,EAX
004558ED .  0F84 A7030000 JE monster_.00455C9A                   ;  //若是"S"则跳
004558F3 .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
004558F9 .  52          PUSH EDX
004558FA .  68 18C84000 PUSH monster_.0040C818
004558FF .  FFD7       CALL EDI
00455901 .  85C0       TEST EAX,EAX
00455903 .  0F84 91030000 JE monster_.00455C9A                   ;  //若是"N"则跳
00455909 .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
0045590F .  50          PUSH EAX
00455910 .  68 20C84000 PUSH monster_.0040C820
00455915 .  FFD7       CALL EDI
00455917 .  85C0       TEST EAX,EAX
00455919 .  0F84 7B030000 JE monster_.00455C9A                   ;  //若是"Y"则跳
0045591F .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
00455925 .  51          PUSH ECX
00455926 .  68 10C84000 PUSH monster_.0040C810
0045592B .  FFD7       CALL EDI
0045592D .  85C0       TEST EAX,EAX
0045592F .  0F84 5E030000 JE monster_.00455C93                   ;  //若是"A"则跳
00455935 .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
0045593B .  52          PUSH EDX
0045593C .  68 9CB74000 PUSH monster_.0040B79C
00455941 .  FFD7       CALL EDI
00455943 .  85C0       TEST EAX,EAX
00455945 .  0F84 48030000 JE monster_.00455C93                   ;  //若是"E"则跳
0045594B .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
00455951 .  50          PUSH EAX
00455952 .  68 30C84000 PUSH monster_.0040C830
00455957 .  FFD7       CALL EDI
00455959 .  85C0       TEST EAX,EAX
0045595B .  0F84 32030000 JE monster_.00455C93                   ;  //若是"J"则跳
00455961 .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
00455967 .  51          PUSH ECX
00455968 .  68 50C84000 PUSH monster_.0040C850
0045596D .  FFD7       CALL EDI
0045596F .  85C0       TEST EAX,EAX
00455971 .  0F84 15030000 JE monster_.00455C8C                   ;  //若是"F"则跳
00455977 .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
0045597D .  52          PUSH EDX
0045597E .  68 0C854000 PUSH monster_.0040850C
00455983 .  FFD7       CALL EDI
00455985 .  85C0       TEST EAX,EAX
00455987 .  0F84 FF020000 JE monster_.00455C8C                   ;  //若是"K"则跳
0045598D .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
00455993 .  50          PUSH EAX
00455994 .  68 48C84000 PUSH monster_.0040C848
00455999 .  FFD7       CALL EDI
0045599B .  85C0       TEST EAX,EAX
0045599D .  0F84 E9020000 JE monster_.00455C8C                   ;  //若是"I"则跳
004559A3 .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
004559A9 .  51          PUSH ECX
004559AA .  68 50C84000 PUSH monster_.0040C850
004559AF .  FFD7       CALL EDI
004559B1 .  85C0       TEST EAX,EAX
004559B3 .  0F84 CC020000 JE monster_.00455C85                   ;  //若是"F"则跳
004559B9 .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
004559BF .  52          PUSH EDX
004559C0 .  68 08C64000 PUSH monster_.0040C608
004559C5 .  FFD7       CALL EDI
004559C7 .  85C0       TEST EAX,EAX
004559C9 .  0F84 B6020000 JE monster_.00455C85                   ;  //若是"0"则跳
004559CF .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
004559D5 .  50          PUSH EAX
004559D6 .  68 58C84000 PUSH monster_.0040C858
004559DB .  FFD7       CALL EDI
004559DD .  85C0       TEST EAX,EAX
004559DF .  0F84 A0020000 JE monster_.00455C85                   ;  //若是"L"则跳
004559E5 .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
004559EB .  51          PUSH ECX
004559EC .  68 6CC84000 PUSH monster_.0040C86C
004559F1 .  FFD7       CALL EDI
004559F3 .  85C0       TEST EAX,EAX
004559F5 .  0F84 83020000 JE monster_.00455C7E                   ;  //若是"M"则跳
004559FB .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
00455A01 .  52          PUSH EDX
00455A02 .  68 74C84000 PUSH monster_.0040C874
00455A07 .  FFD7       CALL EDI
00455A09 .  85C0       TEST EAX,EAX
00455A0B .  0F84 6D020000 JE monster_.00455C7E                   ;  //若是"B"则跳
00455A11 .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
00455A17 .  50          PUSH EAX
00455A18 .  68 38C84000 PUSH monster_.0040C838
00455A1D .  FFD7       CALL EDI
00455A1F .  85C0       TEST EAX,EAX
00455A21 .  0F84 57020000 JE monster_.00455C7E                   ;  //若是"H"则跳
00455A27 .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
00455A2D .  51          PUSH ECX
00455A2E .  68 84C84000 PUSH monster_.0040C884
00455A33 .  FFD7       CALL EDI
00455A35 .  85C0       TEST EAX,EAX
00455A37 .  0F84 3A020000 JE monster_.00455C77                   ;  //若是"P"则跳
00455A3D .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
00455A43 .  52          PUSH EDX
00455A44 .  68 8CC84000 PUSH monster_.0040C88C
00455A49 .  FFD7       CALL EDI
00455A4B .  85C0       TEST EAX,EAX
00455A4D .  0F84 24020000 JE monster_.00455C77                   ;  //若是"Q"则跳
00455A53 .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
00455A59 .  50          PUSH EAX
00455A5A .  68 94C84000 PUSH monster_.0040C894
00455A5F .  FFD7       CALL EDI
00455A61 .  85C0       TEST EAX,EAX
00455A63 .  0F84 0E020000 JE monster_.00455C77                   ;  //若是"R"则跳
00455A69 .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
00455A6F .  51          PUSH ECX
00455A70 .  68 C0BB4000 PUSH monster_.0040BBC0
00455A75 .  FFD7       CALL EDI
00455A77 .  85C0       TEST EAX,EAX
00455A79 .  0F84 F1010000 JE monster_.00455C70                   ;  //若是"D"则跳
00455A7F .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
00455A85 .  52          PUSH EDX
00455A86 .  68 A4C84000 PUSH monster_.0040C8A4
00455A8B .  FFD7       CALL EDI
00455A8D .  85C0       TEST EAX,EAX
00455A8F .  0F84 DB010000 JE monster_.00455C70                   ;  //若是"T"则跳
00455A95 .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
00455A9B .  50          PUSH EAX
00455A9C .  68 ACC84000 PUSH monster_.0040C8AC
00455AA1 .  FFD7       CALL EDI
00455AA3 .  85C0       TEST EAX,EAX
00455AA5 .  0F84 C5010000 JE monster_.00455C70                   ;  //若是"U"则跳
00455AAB .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
00455AB1 .  51          PUSH ECX
00455AB2 .  68 C0C84000 PUSH monster_.0040C8C0
00455AB7 .  FFD7       CALL EDI
00455AB9 .  85C0       TEST EAX,EAX
00455ABB .  0F84 A8010000 JE monster_.00455C69                   ;  //若是"V"则跳
00455AC1 .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
00455AC7 .  52          PUSH EDX
00455AC8 .  68 C8C84000 PUSH monster_.0040C8C8
00455ACD .  FFD7       CALL EDI
00455ACF .  85C0       TEST EAX,EAX
00455AD1 .  0F84 92010000 JE monster_.00455C69                   ;  //若是"Z"则跳
00455AD7 .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
00455ADD .  50          PUSH EAX
00455ADE .  68 D0C84000 PUSH monster_.0040C8D0
00455AE3 .  FFD7       CALL EDI
00455AE5 .  85C0       TEST EAX,EAX
00455AE7 .  0F84 7C010000 JE monster_.00455C69                   ;  //若是"X"则跳
00455AED .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
00455AF3 .  51          PUSH ECX
00455AF4 .  68 D8C84000 PUSH monster_.0040C8D8
00455AF9 .  FFD7       CALL EDI
00455AFB .  85C0       TEST EAX,EAX
00455AFD .  0F84 5F010000 JE monster_.00455C62                   ;  //若是"C"则跳
00455B03 .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
00455B09 .  52          PUSH EDX
00455B0A .  68 E0C84000 PUSH monster_.0040C8E0
00455B0F .  FFD7       CALL EDI
00455B11 .  85C0       TEST EAX,EAX
00455B13 .  0F84 49010000 JE monster_.00455C62                   ;  //若是"W"则跳
00455B19 .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
00455B1F .  50          PUSH EAX
00455B20 .  68 A4B74000 PUSH monster_.0040B7A4
00455B25 .  FFD7       CALL EDI

tianxj · 发表于 2008-11-17 11:30

00455B27 .  85C0       TEST EAX,EAX
00455B29 .  0F84 2C010000 JE monster_.00455C5B                   ;  //若是"1"则跳
00455B2F .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
00455B35 .  51          PUSH ECX
00455B36 .  68 F4C84000 PUSH monster_.0040C8F4
00455B3B .  FFD7       CALL EDI
00455B3D .  85C0       TEST EAX,EAX
00455B3F .  0F84 16010000 JE monster_.00455C5B                   ;  //若是"7"则跳
00455B45 .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
00455B4B .  52          PUSH EDX
00455B4C .  68 FCC84000 PUSH monster_.0040C8FC
00455B51 .  FFD7       CALL EDI
00455B53 .  85C0       TEST EAX,EAX
00455B55 .  0F84 00010000 JE monster_.00455C5B                   ;  //若是"5"则跳
00455B5B .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
00455B61 .  50          PUSH EAX
00455B62 .  68 DCB74000 PUSH monster_.0040B7DC
00455B67 .  FFD7       CALL EDI
00455B69 .  85C0       TEST EAX,EAX
00455B6B .  0F84 EA000000 JE monster_.00455C5B                   ;  //若是"4"则跳
00455B71 .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
00455B77 .  51          PUSH ECX
00455B78 .  68 B4B74000 PUSH monster_.0040B7B4
00455B7D .  FFD7       CALL EDI
00455B7F .  85C0       TEST EAX,EAX
00455B81 .  0F84 CD000000 JE monster_.00455C54                   ;  //若是"3"则跳
00455B87 .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
00455B8D .  52          PUSH EDX
00455B8E .  68 9CC84000 PUSH monster_.0040C89C
00455B93 .  FFD7       CALL EDI
00455B95 .  85C0       TEST EAX,EAX
00455B97 .  0F84 B7000000 JE monster_.00455C54                   ;  //若是"6"则跳
00455B9D .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
00455BA3 .  50          PUSH EAX
00455BA4 .  68 ACB74000 PUSH monster_.0040B7AC
00455BA9 .  FFD7       CALL EDI
00455BAB .  85C0       TEST EAX,EAX
00455BAD .  0F84 A1000000 JE monster_.00455C54                   ;  //若是"2"则跳
00455BB3 .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
00455BB9 .  51          PUSH ECX
00455BBA .  68 04C94000 PUSH monster_.0040C904
00455BBF .  FFD7       CALL EDI
00455BC1 .  85C0       TEST EAX,EAX
00455BC3 .  0F84 8B000000 JE monster_.00455C54                   ;  //若是"8"则跳
00455BC9 .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
00455BCF .  52          PUSH EDX
00455BD0 .  68 BCC04000 PUSH monster_.0040C0BC
00455BD5 .  FFD7       CALL EDI
00455BD7 .  85C0       TEST EAX,EAX
00455BD9 .  74 72       JE SHORT monster_.00455C4D             ;  //若是"9"则跳
00455BDB .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
00455BE1 .  50          PUSH EAX
00455BE2 .  68 7CC84000 PUSH monster_.0040C87C
00455BE7 .  FFD7       CALL EDI
00455BE9 .  85C0       TEST EAX,EAX
00455BEB .  74 60       JE SHORT monster_.00455C4D             ;  //若是"O"则跳
00455BED .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
00455BF3 .  51          PUSH ECX
00455BF4 .  68 688E4000 PUSH monster_.00408E68
00455BF9 .  FFD7       CALL EDI
00455BFB .  85C0       TEST EAX,EAX
00455BFD .  74 47       JE SHORT monster_.00455C46             ;  //若是"."则跳
00455BFF .  8B95 38FFFFFF MOV EDX,DWORD PTR SS:[EBP-C8]
00455C05 .  52          PUSH EDX
00455C06 .  68 70C44000 PUSH monster_.0040C470
00455C0B .  FFD7       CALL EDI
00455C0D .  85C0       TEST EAX,EAX
00455C0F .  74 35       JE SHORT monster_.00455C46             ;  //若是","则跳
00455C11 .  8B85 38FFFFFF MOV EAX,DWORD PTR SS:[EBP-C8]
00455C17 .  50          PUSH EAX
00455C18 .  68 78C44000 PUSH monster_.0040C478
00455C1D .  FFD7       CALL EDI
00455C1F .  85C0       TEST EAX,EAX
00455C21 .  74 23       JE SHORT monster_.00455C46             ;  //若是"-"则跳
00455C23 .  8B8D 38FFFFFF MOV ECX,DWORD PTR SS:[EBP-C8]
00455C29 .  51          PUSH ECX
00455C2A .  68 88C24000 PUSH monster_.0040C288
00455C2F .  FFD7       CALL EDI
00455C31 .  85C0       TEST EAX,EAX
00455C33 .  75 0A       JNZ SHORT monster_.00455C3F             ;  //若不是" "则跳
00455C35 .  BA 5CCA4000 MOV EDX,monster_.0040CA5C             ;  UNICODE "BGHJK"
00455C3A .  8D4D E4    LEA ECX,DWORD PTR SS:[EBP-1C]
00455C3D .  EB 63       JMP SHORT monster_.00455CA2
00455C3F >  BA 6CCA4000 MOV EDX,monster_.0040CA6C             ;  UNICODE "12T"
00455C44 .  EB 59       JMP SHORT monster_.00455C9F
00455C46 >  BA 50CA4000 MOV EDX,monster_.0040CA50             ;  UNICODE "B1K"
00455C4B .  EB 52       JMP SHORT monster_.00455C9F
00455C4D >  BA 44CA4000 MOV EDX,monster_.0040CA44             ;  UNICODE "TC"
00455C52 .  EB 4B       JMP SHORT monster_.00455C9F
00455C54 >  BA 74C84000 MOV EDX,monster_.0040C874             ;  //"B"
00455C59 .  EB 44       JMP SHORT monster_.00455C9F
00455C5B >  BA BCC04000 MOV EDX,monster_.0040C0BC             ;  //"9"
00455C60 .  EB 3D       JMP SHORT monster_.00455C9F
00455C62 >  BA 38CA4000 MOV EDX,monster_.0040CA38             ;  UNICODE "RR1"
00455C67 .  EB 36       JMP SHORT monster_.00455C9F
00455C69 >  BA 2CCA4000 MOV EDX,monster_.0040CA2C             ;  UNICODE "898"
00455C6E .  EB 2F       JMP SHORT monster_.00455C9F
00455C70 >  BA 20CA4000 MOV EDX,monster_.0040CA20             ;  UNICODE "697"
00455C75 .  EB 28       JMP SHORT monster_.00455C9F
00455C77 >  BA 14CA4000 MOV EDX,monster_.0040CA14             ;  UNICODE "58"
00455C7C .  EB 21       JMP SHORT monster_.00455C9F
00455C7E >  BA 08CA4000 MOV EDX,monster_.0040CA08             ;  UNICODE "74"
00455C83 .  EB 1A       JMP SHORT monster_.00455C9F
00455C85 >  BA 60C84000 MOV EDX,monster_.0040C860             ;  UNICODE "Q7"
00455C8A .  EB 13       JMP SHORT monster_.00455C9F
00455C8C >  BA FCC94000 MOV EDX,monster_.0040C9FC             ;  UNICODE "R3R"
00455C91 .  EB 0C       JMP SHORT monster_.00455C9F
00455C93 >  BA F0C94000 MOV EDX,monster_.0040C9F0             ;  UNICODE "525"
00455C98 .  EB 05       JMP SHORT monster_.00455C9F
00455C9A >  BA E4C94000 MOV EDX,monster_.0040C9E4             ;  UNICODE "414"
00455C9F >  8D4D CC    LEA ECX,DWORD PTR SS:[EBP-34]
00455CA2 >  FFD6       CALL ESI
00455CA4 .  8B55 E4    MOV EDX,DWORD PTR SS:[EBP-1C]          ;  //第1组查表数据
00455CA7 .  8B45 D8    MOV EAX,DWORD PTR SS:[EBP-28]          ;  //第2组查表数据
00455CAA .  52          PUSH EDX
00455CAB .  50          PUSH EAX
00455CAC .  FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>;  MSVBVM50.__vbaStrCat
00455CB2 .  8BD0       MOV EDX,EAX
00455CB4 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
00455CB7 .  FFD3       CALL EBX
00455CB9 .  8B4D D0    MOV ECX,DWORD PTR SS:[EBP-30]          ;  //第3组查表数据
00455CBC .  50          PUSH EAX
00455CBD .  51          PUSH ECX
00455CBE .  FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>;  MSVBVM50.__vbaStrCat
00455CC4 .  8BD0       MOV EDX,EAX
00455CC6 .  8D4D B0    LEA ECX,DWORD PTR SS:[EBP-50]
00455CC9 .  FFD3       CALL EBX
00455CCB .  8B55 CC    MOV EDX,DWORD PTR SS:[EBP-34]          ;  //第4组查表数据
00455CCE .  50          PUSH EAX
00455CCF .  52          PUSH EDX
00455CD0 .  FF15 2C434600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaStrCa>;  MSVBVM50.__vbaStrCat
00455CD6 .  8BD0       MOV EDX,EAX                            ;  //将上面所取的4组字符串相连
00455CD8 .  8D4D C8    LEA ECX,DWORD PTR SS:[EBP-38]
00455CDB .  FFD3       CALL EBX
00455CDD .  8D45 B0    LEA EAX,DWORD PTR SS:[EBP-50]
00455CE0 .  50          PUSH EAX
00455CE1 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
00455CE4 .  51          PUSH ECX
00455CE5 .  6A 02       PUSH 2
00455CE7 .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
00455CED .  8B45 C8    MOV EAX,DWORD PTR SS:[EBP-38]
00455CF0 .  83C4 0C    ADD ESP,0C
00455CF3 .  8D55 98    LEA EDX,DWORD PTR SS:[EBP-68]
00455CF6 .  52          PUSH EDX
00455CF7 .  6A 03       PUSH 3
00455CF9 .  50          PUSH EAX
00455CFA .  C745 A0 01000>MOV DWORD PTR SS:[EBP-60],1
00455D01 .  C745 98 02000>MOV DWORD PTR SS:[EBP-68],2
00455D08 .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
00455D0E .  8BD0       MOV EDX,EAX
00455D10 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
00455D13 .  FFD3       CALL EBX
00455D15 .  50          PUSH EAX
00455D16 .  FF15 D0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcUpperCa>;  MSVBVM50.rtcUpperCaseBstr
00455D1C .  8BD0       MOV EDX,EAX
00455D1E .  8D8D 34FFFFFF LEA ECX,DWORD PTR SS:[EBP-CC]
00455D24 .  FFD3       CALL EBX
00455D26 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
00455D29 .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
00455D2F .  8D4D 98    LEA ECX,DWORD PTR SS:[EBP-68]
00455D32 .  FF15 E0424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVar
00455D38 .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]          ;  //相连字符串I第3位大写的ASCII码地址
00455D3E .  51          PUSH ECX
00455D3F .  68 28C84000 PUSH monster_.0040C828
00455D44 .  FFD7       CALL EDI
00455D46 .  85C0       TEST EAX,EAX
00455D48 .  0F84 87030000 JE monster_.004560D5                   ;  //若是"S"则跳
00455D4E .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00455D54 .  52          PUSH EDX
00455D55 .  68 18C84000 PUSH monster_.0040C818
00455D5A .  FFD7       CALL EDI
00455D5C .  85C0       TEST EAX,EAX
00455D5E .  0F84 71030000 JE monster_.004560D5                   ;  //若是"N"则跳
00455D64 .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00455D6A .  50          PUSH EAX
00455D6B .  68 20C84000 PUSH monster_.0040C820
00455D70 .  FFD7       CALL EDI
00455D72 .  85C0       TEST EAX,EAX
00455D74 .  0F84 5B030000 JE monster_.004560D5                   ;  //若是"Y"则跳
00455D7A .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00455D80 .  51          PUSH ECX
00455D81 .  68 10C84000 PUSH monster_.0040C810
00455D86 .  FFD7       CALL EDI
00455D88 .  85C0       TEST EAX,EAX
00455D8A .  0F84 3E030000 JE monster_.004560CE                   ;  //若是"A"则跳
00455D90 .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00455D96 .  52          PUSH EDX
00455D97 .  68 9CB74000 PUSH monster_.0040B79C
00455D9C .  FFD7       CALL EDI
00455D9E .  85C0       TEST EAX,EAX
00455DA0 .  0F84 28030000 JE monster_.004560CE                   ;  //若是"E"则跳
00455DA6 .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00455DAC .  50          PUSH EAX
00455DAD .  68 30C84000 PUSH monster_.0040C830
00455DB2 .  FFD7       CALL EDI
00455DB4 .  85C0       TEST EAX,EAX
00455DB6 .  0F84 12030000 JE monster_.004560CE                   ;  //若是"J"则跳
00455DBC .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00455DC2 .  51          PUSH ECX
00455DC3 .  68 50C84000 PUSH monster_.0040C850
00455DC8 .  FFD7       CALL EDI
00455DCA .  85C0       TEST EAX,EAX
00455DCC .  0F84 F5020000 JE monster_.004560C7                   ;  //若是"F"则跳
00455DD2 .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00455DD8 .  52          PUSH EDX
00455DD9 .  68 0C854000 PUSH monster_.0040850C
00455DDE .  FFD7       CALL EDI
00455DE0 .  85C0       TEST EAX,EAX
00455DE2 .  0F84 DF020000 JE monster_.004560C7                   ;  //若是"K"则跳
00455DE8 .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00455DEE .  50          PUSH EAX
00455DEF .  68 48C84000 PUSH monster_.0040C848
00455DF4 .  FFD7       CALL EDI
00455DF6 .  85C0       TEST EAX,EAX
00455DF8 .  0F84 C9020000 JE monster_.004560C7                   ;  //若是"I"则跳
00455DFE .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00455E04 .  51          PUSH ECX
00455E05 .  68 50C84000 PUSH monster_.0040C850
00455E0A .  FFD7       CALL EDI
00455E0C .  85C0       TEST EAX,EAX
00455E0E .  0F84 AC020000 JE monster_.004560C0                   ;  //若是"F"则跳
00455E14 .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00455E1A .  52          PUSH EDX
00455E1B .  68 08C64000 PUSH monster_.0040C608
00455E20 .  FFD7       CALL EDI
00455E22 .  85C0       TEST EAX,EAX
00455E24 .  0F84 96020000 JE monster_.004560C0                   ;  //若是"0"则跳
00455E2A .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00455E30 .  50          PUSH EAX
00455E31 .  68 58C84000 PUSH monster_.0040C858
00455E36 .  FFD7       CALL EDI
00455E38 .  85C0       TEST EAX,EAX
00455E3A .  0F84 80020000 JE monster_.004560C0                   ;  //若是"L"则跳
00455E40 .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00455E46 .  51          PUSH ECX
00455E47 .  68 6CC84000 PUSH monster_.0040C86C
00455E4C .  FFD7       CALL EDI
00455E4E .  85C0       TEST EAX,EAX
00455E50 .  0F84 63020000 JE monster_.004560B9                   ;  //若是"M"则跳
00455E56 .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00455E5C .  52          PUSH EDX
00455E5D .  68 74C84000 PUSH monster_.0040C874
00455E62 .  FFD7       CALL EDI
00455E64 .  85C0       TEST EAX,EAX
00455E66 .  0F84 4D020000 JE monster_.004560B9                   ;  //若是"B"则跳
00455E6C .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00455E72 .  50          PUSH EAX
00455E73 .  68 38C84000 PUSH monster_.0040C838
00455E78 .  FFD7       CALL EDI
00455E7A .  85C0       TEST EAX,EAX
00455E7C .  0F84 37020000 JE monster_.004560B9                   ;  //若是"H"则跳
00455E82 .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00455E88 .  51          PUSH ECX
00455E89 .  68 84C84000 PUSH monster_.0040C884
00455E8E .  FFD7       CALL EDI
00455E90 .  85C0       TEST EAX,EAX
00455E92 .  0F84 1A020000 JE monster_.004560B2                   ;  //若是"P"则跳
00455E98 .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00455E9E .  52          PUSH EDX
00455E9F .  68 8CC84000 PUSH monster_.0040C88C
00455EA4 .  FFD7       CALL EDI
00455EA6 .  85C0       TEST EAX,EAX
00455EA8 .  0F84 04020000 JE monster_.004560B2                   ;  //若是"Q"则跳
00455EAE .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00455EB4 .  50          PUSH EAX
00455EB5 .  68 94C84000 PUSH monster_.0040C894
00455EBA .  FFD7       CALL EDI
00455EBC .  85C0       TEST EAX,EAX
00455EBE .  0F84 EE010000 JE monster_.004560B2                   ;  //若是"R"则跳
00455EC4 .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00455ECA .  51          PUSH ECX
00455ECB .  68 C0BB4000 PUSH monster_.0040BBC0
00455ED0 .  FFD7       CALL EDI
00455ED2 .  85C0       TEST EAX,EAX
00455ED4 .  0F84 D1010000 JE monster_.004560AB                   ;  //若是"D"则跳
00455EDA .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00455EE0 .  52          PUSH EDX
00455EE1 .  68 A4C84000 PUSH monster_.0040C8A4
00455EE6 .  FFD7       CALL EDI
00455EE8 .  85C0       TEST EAX,EAX
00455EEA .  0F84 BB010000 JE monster_.004560AB                   ;  //若是"T"则跳
00455EF0 .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00455EF6 .  50          PUSH EAX
00455EF7 .  68 ACC84000 PUSH monster_.0040C8AC
00455EFC .  FFD7       CALL EDI
00455EFE .  85C0       TEST EAX,EAX
00455F00 .  0F84 A5010000 JE monster_.004560AB                   ;  //若是"U"则跳
00455F06 .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00455F0C .  51          PUSH ECX
00455F0D .  68 C0C84000 PUSH monster_.0040C8C0
00455F12 .  FFD7       CALL EDI
00455F14 .  85C0       TEST EAX,EAX
00455F16 .  0F84 88010000 JE monster_.004560A4                   ;  //若是"V"则跳
00455F1C .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00455F22 .  52          PUSH EDX
00455F23 .  68 C8C84000 PUSH monster_.0040C8C8
00455F28 .  FFD7       CALL EDI
00455F2A .  85C0       TEST EAX,EAX
00455F2C .  0F84 72010000 JE monster_.004560A4                   ;  //若是"Z"则跳
00455F32 .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00455F38 .  50          PUSH EAX
00455F39 .  68 D0C84000 PUSH monster_.0040C8D0
00455F3E .  FFD7       CALL EDI
00455F40 .  85C0       TEST EAX,EAX
00455F42 .  0F84 5C010000 JE monster_.004560A4                   ;  //若是"X"则跳
00455F48 .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00455F4E .  51          PUSH ECX
00455F4F .  68 D8C84000 PUSH monster_.0040C8D8
00455F54 .  FFD7       CALL EDI
00455F56 .  85C0       TEST EAX,EAX
00455F58 .  0F84 3F010000 JE monster_.0045609D                   ;  //若是"C"则跳
00455F5E .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00455F64 .  52          PUSH EDX
00455F65 .  68 E0C84000 PUSH monster_.0040C8E0
00455F6A .  FFD7       CALL EDI
00455F6C .  85C0       TEST EAX,EAX
00455F6E .  0F84 29010000 JE monster_.0045609D                   ;  //若是"W"则跳
00455F74 .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00455F7A .  50          PUSH EAX
00455F7B .  68 A4B74000 PUSH monster_.0040B7A4
00455F80 .  FFD7       CALL EDI
00455F82 .  85C0       TEST EAX,EAX
00455F84 .  0F84 0C010000 JE monster_.00456096                   ;  //若是"1"则跳
00455F8A .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00455F90 .  51          PUSH ECX
00455F91 .  68 F4C84000 PUSH monster_.0040C8F4
00455F96 .  FFD7       CALL EDI
00455F98 .  85C0       TEST EAX,EAX
00455F9A .  0F84 F6000000 JE monster_.00456096                   ;  //若是"7"则跳
00455FA0 .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00455FA6 .  52          PUSH EDX
00455FA7 .  68 FCC84000 PUSH monster_.0040C8FC
00455FAC .  FFD7       CALL EDI
00455FAE .  85C0       TEST EAX,EAX
00455FB0 .  0F84 E0000000 JE monster_.00456096                   ;  //若是"5"则跳
00455FB6 .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00455FBC .  50          PUSH EAX
00455FBD .  68 DCB74000 PUSH monster_.0040B7DC
00455FC2 .  FFD7       CALL EDI
00455FC4 .  85C0       TEST EAX,EAX
00455FC6 .  0F84 CA000000 JE monster_.00456096                   ;  //若是"4"则跳
00455FCC .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00455FD2 .  51          PUSH ECX
00455FD3 .  68 B4B74000 PUSH monster_.0040B7B4
00455FD8 .  FFD7       CALL EDI
00455FDA .  85C0       TEST EAX,EAX
00455FDC .  0F84 AD000000 JE monster_.0045608F                   ;  //若是"3"则跳
00455FE2 .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00455FE8 .  52          PUSH EDX
00455FE9 .  68 9CC84000 PUSH monster_.0040C89C
00455FEE .  FFD7       CALL EDI
00455FF0 .  85C0       TEST EAX,EAX
00455FF2 .  0F84 97000000 JE monster_.0045608F                   ;  //若是"6"则跳
00455FF8 .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00455FFE .  50          PUSH EAX
00455FFF .  68 ACB74000 PUSH monster_.0040B7AC
00456004 .  FFD7       CALL EDI
00456006 .  85C0       TEST EAX,EAX
00456008 .  0F84 81000000 JE monster_.0045608F                   ;  //若是"2"则跳
0045600E .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
00456014 .  51          PUSH ECX
00456015 .  68 04C94000 PUSH monster_.0040C904
0045601A .  FFD7       CALL EDI
0045601C .  85C0       TEST EAX,EAX
0045601E .  74 6F       JE SHORT monster_.0045608F             ;  //若是"8"则跳
00456020 .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
00456026 .  52          PUSH EDX
00456027 .  68 BCC04000 PUSH monster_.0040C0BC
0045602C .  FFD7       CALL EDI
0045602E .  85C0       TEST EAX,EAX
00456030 .  74 56       JE SHORT monster_.00456088             ;  //若是"9"则跳
00456032 .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
00456038 .  50          PUSH EAX
00456039 .  68 7CC84000 PUSH monster_.0040C87C
0045603E .  FFD7       CALL EDI
00456040 .  85C0       TEST EAX,EAX
00456042 .  74 44       JE SHORT monster_.00456088             ;  //若是"O"则跳
00456044 .  8B8D 34FFFFFF MOV ECX,DWORD PTR SS:[EBP-CC]
0045604A .  51          PUSH ECX
0045604B .  68 688E4000 PUSH monster_.00408E68
00456050 .  FFD7       CALL EDI
00456052 .  85C0       TEST EAX,EAX
00456054 .  74 2B       JE SHORT monster_.00456081             ;  //若是"."则跳
00456056 .  8B95 34FFFFFF MOV EDX,DWORD PTR SS:[EBP-CC]
0045605C .  52          PUSH EDX
0045605D .  68 70C44000 PUSH monster_.0040C470
00456062 .  FFD7       CALL EDI
00456064 .  85C0       TEST EAX,EAX
00456066 .  74 19       JE SHORT monster_.00456081             ;  //若是","则跳
00456068 .  8B85 34FFFFFF MOV EAX,DWORD PTR SS:[EBP-CC]
0045606E .  50          PUSH EAX
0045606F .  68 78C44000 PUSH monster_.0040C478
00456074 .  FFD7       CALL EDI
00456076 .  85C0       TEST EAX,EAX
00456078 .  74 07       JE SHORT monster_.00456081             ;  //若是"-"则跳
0045607A .  BA FCCA4000 MOV EDX,monster_.0040CAFC             ;  UNICODE "1S2TSDS"
0045607F .  EB 59       JMP SHORT monster_.004560DA
00456081 >  BA E0CA4000 MOV EDX,monster_.0040CAE0             ;  UNICODE "BASDFGSG1K"
00456086 .  EB 52       JMP SHORT monster_.004560DA
00456088 >  BA D0CA4000 MOV EDX,monster_.0040CAD0             ;  UNICODE "T158C"
0045608D .  EB 4B       JMP SHORT monster_.004560DA
0045608F >  BA B8CA4000 MOV EDX,monster_.0040CAB8             ;  UNICODE "4TGFDERN"
00456094 .  EB 44       JMP SHORT monster_.004560DA
00456096 >  BA BCC04000 MOV EDX,monster_.0040C0BC             ;  //"9"
0045609B .  EB 3D       JMP SHORT monster_.004560DA
0045609D >  BA ACCA4000 MOV EDX,monster_.0040CAAC             ;  UNICODE "BGH"
004560A2 .  EB 36       JMP SHORT monster_.004560DA
004560A4 >  BA A0CA4000 MOV EDX,monster_.0040CAA0             ;  UNICODE "YUI"
004560A9 .  EB 2F       JMP SHORT monster_.004560DA
004560AB >  BA 94CA4000 MOV EDX,monster_.0040CA94             ;  UNICODE "6K7"
004560B0 .  EB 28       JMP SHORT monster_.004560DA
004560B2 >  BA 887A4000 MOV EDX,monster_.00407A88             ;  UNICODE "5M"
004560B7 .  EB 21       JMP SHORT monster_.004560DA
004560B9 >  BA E4864000 MOV EDX,monster_.004086E4             ;  UNICODE "U4"
004560BE .  EB 1A       JMP SHORT monster_.004560DA
004560C0 >  BA A0884000 MOV EDX,monster_.004088A0             ;  UNICODE "R7"
004560C5 .  EB 13       JMP SHORT monster_.004560DA
004560C7 >  BA FCC94000 MOV EDX,monster_.0040C9FC             ;  UNICODE "R3R"
004560CC .  EB 0C       JMP SHORT monster_.004560DA
004560CE >  BA 84CA4000 MOV EDX,monster_.0040CA84             ;  UNICODE "TYU"
004560D3 .  EB 05       JMP SHORT monster_.004560DA
004560D5 >  BA 78CA4000 MOV EDX,monster_.0040CA78             ;  UNICODE "4G4"
004560DA >  8D4D C4    LEA ECX,DWORD PTR SS:[EBP-3C]
004560DD .  FFD6       CALL ESI
004560DF .  8B4D C8    MOV ECX,DWORD PTR SS:[EBP-38]          ;  //相连字符串I
004560E2 .  8B55 E4    MOV EDX,DWORD PTR SS:[EBP-1C]          ;  //第1组查表数据
004560E5 .  8B3D 2C434600 MOV EDI,DWORD PTR DS:[<&MSVBVM50.__vbaSt>;  MSVBVM50.__vbaStrCat
004560EB .  51          PUSH ECX
004560EC .  52          PUSH EDX
004560ED .  FFD7       CALL EDI                               ;  <&MSVBVM50.__vbaStrCat>
004560EF .  8BD0       MOV EDX,EAX
004560F1 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
004560F4 .  FFD3       CALL EBX
004560F6 .  50          PUSH EAX
004560F7 .  8B45 CC    MOV EAX,DWORD PTR SS:[EBP-34]          ;  //第4组查表数据
004560FA .  50          PUSH EAX
004560FB .  FFD7       CALL EDI
004560FD .  8BD0       MOV EDX,EAX
004560FF .  8D4D B0    LEA ECX,DWORD PTR SS:[EBP-50]
00456102 .  FFD3       CALL EBX
00456104 .  8B4D D8    MOV ECX,DWORD PTR SS:[EBP-28]          ;  //第2组查表数据
00456107 .  50          PUSH EAX
00456108 .  51          PUSH ECX
00456109 .  FFD7       CALL EDI
0045610B .  8BD0       MOV EDX,EAX
0045610D .  8D4D AC    LEA ECX,DWORD PTR SS:[EBP-54]
00456110 .  FFD3       CALL EBX
00456112 .  8B55 CC    MOV EDX,DWORD PTR SS:[EBP-34]          ;  //第4组查表数据
00456115 .  50          PUSH EAX
00456116 .  52          PUSH EDX
00456117 .  FFD7       CALL EDI
00456119 .  8BD0       MOV EDX,EAX                            ;  //将以上数据相连,形成相连字符串II
0045611B .  8D4D C0    LEA ECX,DWORD PTR SS:[EBP-40]
0045611E .  FFD3       CALL EBX
00456120 .  8D45 AC    LEA EAX,DWORD PTR SS:[EBP-54]
00456123 .  50          PUSH EAX
00456124 .  8D4D B0    LEA ECX,DWORD PTR SS:[EBP-50]
00456127 .  51          PUSH ECX
00456128 .  8D55 B4    LEA EDX,DWORD PTR SS:[EBP-4C]
0045612B .  52          PUSH EDX
0045612C .  6A 03       PUSH 3
0045612E .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
00456134 .  B8 01000000 MOV EAX,1
00456139 .  83C4 10    ADD ESP,10
0045613C .  8945 A0    MOV DWORD PTR SS:[EBP-60],EAX
0045613F .  B9 02000000 MOV ECX,2
00456144 .  8945 90    MOV DWORD PTR SS:[EBP-70],EAX
00456147 .  8945 80    MOV DWORD PTR SS:[EBP-80],EAX
0045614A .  8D45 98    LEA EAX,DWORD PTR SS:[EBP-68]
0045614D .  50          PUSH EAX
0045614E .  894D 98    MOV DWORD PTR SS:[EBP-68],ECX
00456151 .  894D 88    MOV DWORD PTR SS:[EBP-78],ECX
00456154 .  898D 78FFFFFF MOV DWORD PTR SS:[EBP-88],ECX
0045615A .  8B4D C0    MOV ECX,DWORD PTR SS:[EBP-40]          ;  //相连字符串II
0045615D .  6A 04       PUSH 4
0045615F .  51          PUSH ECX
00456160 .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
00456166 .  8BD0       MOV EDX,EAX                            ;  //取相连字符串II第4位
00456168 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
0045616B .  FFD3       CALL EBX
0045616D .  50          PUSH EAX
0045616E .  8B45 C0    MOV EAX,DWORD PTR SS:[EBP-40]          ;  //相连字符串II
00456171 .  8D55 88    LEA EDX,DWORD PTR SS:[EBP-78]
00456174 .  52          PUSH EDX
00456175 .  6A 02       PUSH 2
00456177 .  50          PUSH EAX
00456178 .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
0045617E .  8BD0       MOV EDX,EAX                            ;  //取相连字符串II第2位
00456180 .  8D4D B0    LEA ECX,DWORD PTR SS:[EBP-50]
00456183 .  FFD3       CALL EBX
00456185 .  50          PUSH EAX
00456186 .  FFD7       CALL EDI
00456188 .  8BD0       MOV EDX,EAX
0045618A .  8D4D AC    LEA ECX,DWORD PTR SS:[EBP-54]
0045618D .  FFD3       CALL EBX
0045618F .  8B55 C0    MOV EDX,DWORD PTR SS:[EBP-40]          ;  //相连字符串II
00456192 .  50          PUSH EAX
00456193 .  8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
00456199 .  51          PUSH ECX
0045619A .  6A 07       PUSH 7
0045619C .  52          PUSH EDX
0045619D .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
004561A3 .  8BD0       MOV EDX,EAX                            ;  //取相连字符串II第7位
004561A5 .  8D4D A8    LEA ECX,DWORD PTR SS:[EBP-58]
004561A8 .  FFD3       CALL EBX
004561AA .  50          PUSH EAX
004561AB .  FFD7       CALL EDI                               ;  //相连A
004561AD .  8BD0       MOV EDX,EAX
004561AF .  8D4D BC    LEA ECX,DWORD PTR SS:[EBP-44]
004561B2 .  FFD3       CALL EBX
004561B4 .  8D45 A8    LEA EAX,DWORD PTR SS:[EBP-58]
004561B7 .  50          PUSH EAX
004561B8 .  8D4D AC    LEA ECX,DWORD PTR SS:[EBP-54]
004561BB .  51          PUSH ECX
004561BC .  8D55 B0    LEA EDX,DWORD PTR SS:[EBP-50]
004561BF .  52          PUSH EDX
004561C0 .  8D45 B4    LEA EAX,DWORD PTR SS:[EBP-4C]
004561C3 .  50          PUSH EAX
004561C4 .  6A 04       PUSH 4
004561C6 .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
004561CC .  83C4 14    ADD ESP,14
004561CF .  8D8D 78FFFFFF LEA ECX,DWORD PTR SS:[EBP-88]
004561D5 .  51          PUSH ECX
004561D6 .  8D55 88    LEA EDX,DWORD PTR SS:[EBP-78]
004561D9 .  52          PUSH EDX
004561DA .  8D45 98    LEA EAX,DWORD PTR SS:[EBP-68]
004561DD .  50          PUSH EAX
004561DE .  6A 03       PUSH 3
004561E0 .  FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVarList
004561E6 .  8B55 C8    MOV EDX,DWORD PTR SS:[EBP-38]          ;  //相连字符串I
004561E9 .  B9 02000000 MOV ECX,2
004561EE .  83C4 10    ADD ESP,10
004561F1 .  894D 98    MOV DWORD PTR SS:[EBP-68],ECX
004561F4 .  894D 88    MOV DWORD PTR SS:[EBP-78],ECX
004561F7 .  898D 78FFFFFF MOV DWORD PTR SS:[EBP-88],ECX
004561FD .  8D4D 98    LEA ECX,DWORD PTR SS:[EBP-68]
00456200 .  51          PUSH ECX
00456201 .  B8 01000000 MOV EAX,1
00456206 .  6A 04       PUSH 4
00456208 .  52          PUSH EDX
00456209 .  8945 A0    MOV DWORD PTR SS:[EBP-60],EAX
0045620C .  8945 90    MOV DWORD PTR SS:[EBP-70],EAX
0045620F .  8945 80    MOV DWORD PTR SS:[EBP-80],EAX
00456212 .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
00456218 .  8BD0       MOV EDX,EAX                            ;  //取相连字符串I第4位
0045621A .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
0045621D .  FFD3       CALL EBX
0045621F .  8B4D C4    MOV ECX,DWORD PTR SS:[EBP-3C]          ;  //第5组查表数据
00456222 .  50          PUSH EAX
00456223 .  8D45 88    LEA EAX,DWORD PTR SS:[EBP-78]
00456226 .  50          PUSH EAX
00456227 .  6A 02       PUSH 2
00456229 .  51          PUSH ECX
0045622A .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
00456230 .  8BD0       MOV EDX,EAX                            ;  //第5组查表数据第2位
00456232 .  8D4D B0    LEA ECX,DWORD PTR SS:[EBP-50]
00456235 .  FFD3       CALL EBX
00456237 .  50          PUSH EAX
00456238 .  FFD7       CALL EDI
0045623A .  8BD0       MOV EDX,EAX
0045623C .  8D4D AC    LEA ECX,DWORD PTR SS:[EBP-54]
0045623F .  FFD3       CALL EBX
00456241 .  50          PUSH EAX
00456242 .  8B45 C0    MOV EAX,DWORD PTR SS:[EBP-40]          ;  //相连字符串II
00456245 .  8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88]
0045624B .  52          PUSH EDX
0045624C .  6A 07       PUSH 7
0045624E .  50          PUSH EAX
0045624F .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
00456255 .  8BD0       MOV EDX,EAX                            ;  //取相连字符串II第7位
00456257 .  8D4D A8    LEA ECX,DWORD PTR SS:[EBP-58]
0045625A .  FFD3       CALL EBX
0045625C .  50          PUSH EAX
0045625D .  FFD7       CALL EDI                               ;  //相连B
0045625F .  8BD0       MOV EDX,EAX
00456261 .  8D4D B8    LEA ECX,DWORD PTR SS:[EBP-48]
00456264 .  FFD3       CALL EBX
00456266 .  8D4D A8    LEA ECX,DWORD PTR SS:[EBP-58]
00456269 .  51          PUSH ECX
0045626A .  8D55 AC    LEA EDX,DWORD PTR SS:[EBP-54]
0045626D .  52          PUSH EDX
0045626E .  8D45 B0    LEA EAX,DWORD PTR SS:[EBP-50]
00456271 .  50          PUSH EAX
00456272 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
00456275 .  51          PUSH ECX
00456276 .  6A 04       PUSH 4
00456278 .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
0045627E .  83C4 14    ADD ESP,14
00456281 .  8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88]
00456287 .  52          PUSH EDX
00456288 .  8D45 88    LEA EAX,DWORD PTR SS:[EBP-78]
0045628B .  50          PUSH EAX
0045628C .  8D4D 98    LEA ECX,DWORD PTR SS:[EBP-68]
0045628F .  51          PUSH ECX
00456290 .  6A 03       PUSH 3
00456292 .  FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVarList
00456298 .  83C4 10    ADD ESP,10
0045629B .  B8 02000000 MOV EAX,2
004562A0 .  8D55 98    LEA EDX,DWORD PTR SS:[EBP-68]
004562A3 .  52          PUSH EDX
004562A4 .  8945 98    MOV DWORD PTR SS:[EBP-68],EAX
004562A7 .  8945 90    MOV DWORD PTR SS:[EBP-70],EAX
004562AA .  8945 88    MOV DWORD PTR SS:[EBP-78],EAX
004562AD .  8985 78FFFFFF MOV DWORD PTR SS:[EBP-88],EAX
004562B3 .  8B45 BC    MOV EAX,DWORD PTR SS:[EBP-44]          ;  //相连A
004562B6 .  6A 01       PUSH 1
004562B8 .  50          PUSH EAX
004562B9 .  C745 A0 01000>MOV DWORD PTR SS:[EBP-60],1
004562C0 .  C745 80 04000>MOV DWORD PTR SS:[EBP-80],4
004562C7 .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
004562CD .  8BD0       MOV EDX,EAX                            ;  //取相连A第1位
004562CF .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
004562D2 .  FFD3       CALL EBX
004562D4 .  8B55 B8    MOV EDX,DWORD PTR SS:[EBP-48]          ;  //相连B
004562D7 .  50          PUSH EAX
004562D8 .  8D4D 88    LEA ECX,DWORD PTR SS:[EBP-78]
004562DB .  51          PUSH ECX
004562DC .  6A 02       PUSH 2
004562DE .  52          PUSH EDX
004562DF .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
004562E5 .  8BD0       MOV EDX,EAX                            ;  //取相连B第2-3位
004562E7 .  8D4D B0    LEA ECX,DWORD PTR SS:[EBP-50]
004562EA .  FFD3       CALL EBX
004562EC .  50          PUSH EAX
004562ED .  FFD7       CALL EDI                               ;  //相连C
004562EF .  8BD0       MOV EDX,EAX
004562F1 .  8D4D AC    LEA ECX,DWORD PTR SS:[EBP-54]
004562F4 .  FFD3       CALL EBX
004562F6 .  8B4D C0    MOV ECX,DWORD PTR SS:[EBP-40]          ;  //相连字符串II
004562F9 .  50          PUSH EAX
004562FA .  8D85 78FFFFFF LEA EAX,DWORD PTR SS:[EBP-88]
00456300 .  50          PUSH EAX
00456301 .  6A 07       PUSH 7
00456303 .  51          PUSH ECX
00456304 .  FF15 B0434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcMidChar>;  MSVBVM50.rtcMidCharBstr
0045630A .  8BD0       MOV EDX,EAX                            ;  //取相连字符串II第7-10位
0045630C .  8D4D A8    LEA ECX,DWORD PTR SS:[EBP-58]
0045630F .  FFD3       CALL EBX
00456311 .  50          PUSH EAX
00456312 .  FFD7       CALL EDI                               ;  //相连D
00456314 .  8BD0       MOV EDX,EAX
00456316 .  8D4D E8    LEA ECX,DWORD PTR SS:[EBP-18]
00456319 .  FFD3       CALL EBX
0045631B .  8D55 A8    LEA EDX,DWORD PTR SS:[EBP-58]
0045631E .  52          PUSH EDX
0045631F .  8D45 AC    LEA EAX,DWORD PTR SS:[EBP-54]
00456322 .  50          PUSH EAX
00456323 .  8D4D B0    LEA ECX,DWORD PTR SS:[EBP-50]
00456326 .  51          PUSH ECX
00456327 .  8D55 B4    LEA EDX,DWORD PTR SS:[EBP-4C]
0045632A .  52          PUSH EDX
0045632B .  6A 04       PUSH 4
0045632D .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
00456333 .  83C4 14    ADD ESP,14
00456336 .  8D85 78FFFFFF LEA EAX,DWORD PTR SS:[EBP-88]
0045633C .  50          PUSH EAX
0045633D .  8D4D 88    LEA ECX,DWORD PTR SS:[EBP-78]
00456340 .  51          PUSH ECX
00456341 .  8D55 98    LEA EDX,DWORD PTR SS:[EBP-68]
00456344 .  52          PUSH EDX
00456345 .  6A 03       PUSH 3
00456347 .  FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVarList
0045634D .  8B45 E8    MOV EAX,DWORD PTR SS:[EBP-18]          ;  //相连D
00456350 .  83C4 10    ADD ESP,10
00456353 .  6A 04       PUSH 4
00456355 .  50          PUSH EAX
00456356 .  FF15 E8444600 CALL DWORD PTR DS:[<&MSVBVM50.rtcLeftCha>;  MSVBVM50.rtcLeftCharBstr
0045635C .  8BD0       MOV EDX,EAX                            ;  //取相连D第1-4位
0045635E .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
00456361 .  FFD3       CALL EBX
00456363 .  8B4D C0    MOV ECX,DWORD PTR SS:[EBP-40]          ;  //相连字符串II
00456366 .  50          PUSH EAX
00456367 .  6A 03       PUSH 3
00456369 .  51          PUSH ECX
0045636A .  FF15 E8444600 CALL DWORD PTR DS:[<&MSVBVM50.rtcLeftCha>;  MSVBVM50.rtcLeftCharBstr
00456370 .  8BD0       MOV EDX,EAX                            ;  //取相连字符串II第1-3位
00456372 .  8D4D B0    LEA ECX,DWORD PTR SS:[EBP-50]
00456375 .  FFD3       CALL EBX
00456377 .  50          PUSH EAX
00456378 .  FFD7       CALL EDI                               ;  //相连E
0045637A .  8BD0       MOV EDX,EAX
0045637C .  8D4D AC    LEA ECX,DWORD PTR SS:[EBP-54]
0045637F .  FFD3       CALL EBX
00456381 .  50          PUSH EAX
00456382 .  FF15 24434600 CALL DWORD PTR DS:[<&MSVBVM50.rtcTrimBst>;  MSVBVM50.rtcTrimBstr
00456388 .  8BD0       MOV EDX,EAX
0045638A .  8D4D DC    LEA ECX,DWORD PTR SS:[EBP-24]
0045638D .  FFD3       CALL EBX
0045638F .  8D55 AC    LEA EDX,DWORD PTR SS:[EBP-54]
00456392 .  52          PUSH EDX
00456393 .  8D45 B0    LEA EAX,DWORD PTR SS:[EBP-50]
00456396 .  50          PUSH EAX
00456397 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
0045639A .  51          PUSH ECX
0045639B .  6A 03       PUSH 3
0045639D .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
004563A3 .  83C4 10    ADD ESP,10
004563A6 .  BA 38814000 MOV EDX,monster_.00408138
004563AB .  8D4D B0    LEA ECX,DWORD PTR SS:[EBP-50]
004563AE .  FFD6       CALL ESI
004563B0 .  BA 88C24000 MOV EDX,monster_.0040C288
004563B5 .  8D4D B4    LEA ECX,DWORD PTR SS:[EBP-4C]
004563B8 .  FFD6       CALL ESI
004563BA .  8D55 B0    LEA EDX,DWORD PTR SS:[EBP-50]
004563BD .  52          PUSH EDX
004563BE .  8D45 B4    LEA EAX,DWORD PTR SS:[EBP-4C]
004563C1 .  50          PUSH EAX
004563C2 .  8D4D DC    LEA ECX,DWORD PTR SS:[EBP-24]
004563C5 .  51          PUSH ECX
004563C6 .  E8 658DFFFF CALL monster_.0044F130
004563CB .  8BD0       MOV EDX,EAX
004563CD .  8D4D D4    LEA ECX,DWORD PTR SS:[EBP-2C]
004563D0 .  FFD3       CALL EBX
004563D2 .  8D55 B0    LEA EDX,DWORD PTR SS:[EBP-50]
004563D5 .  52          PUSH EDX
004563D6 .  8D45 B4    LEA EAX,DWORD PTR SS:[EBP-4C]
004563D9 .  50          PUSH EAX
004563DA .  6A 02       PUSH 2
004563DC .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
004563E2 .  8B4D D4    MOV ECX,DWORD PTR SS:[EBP-2C]
004563E5 .  83C4 0C    ADD ESP,0C
004563E8 .  68 6CC84000 PUSH monster_.0040C86C                ;  //"M"
004563ED .  51          PUSH ECX
004563EE .  FFD7       CALL EDI                               ;  //相连F
004563F0 .  8BD0       MOV EDX,EAX
004563F2 .  8D4D E0    LEA ECX,DWORD PTR SS:[EBP-20]
004563F5 .  FFD3       CALL EBX
004563F7 .  68 B4644500 PUSH monster_.004564B4
004563FC .  EB 45       JMP SHORT monster_.00456443
004563FE .  F645 FC 04 TEST BYTE PTR SS:[EBP-4],4
00456402 .  74 09       JE SHORT monster_.0045640D
00456404 .  8D4D E0    LEA ECX,DWORD PTR SS:[EBP-20]
00456407 .  FF15 48454600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStr
0045640D >  8D55 A8    LEA EDX,DWORD PTR SS:[EBP-58]
00456410 .  52          PUSH EDX
00456411 .  8D45 AC    LEA EAX,DWORD PTR SS:[EBP-54]
00456414 .  50          PUSH EAX
00456415 .  8D4D B0    LEA ECX,DWORD PTR SS:[EBP-50]
00456418 .  51          PUSH ECX
00456419 .  8D55 B4    LEA EDX,DWORD PTR SS:[EBP-4C]
0045641C .  52          PUSH EDX
0045641D .  6A 04       PUSH 4
0045641F .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
00456425 .  83C4 14    ADD ESP,14
00456428 .  8D85 78FFFFFF LEA EAX,DWORD PTR SS:[EBP-88]
0045642E .  50          PUSH EAX
0045642F .  8D4D 88    LEA ECX,DWORD PTR SS:[EBP-78]
00456432 .  51          PUSH ECX
00456433 .  8D55 98    LEA EDX,DWORD PTR SS:[EBP-68]
00456436 .  52          PUSH EDX
00456437 .  6A 03       PUSH 3
00456439 .  FF15 F8424600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeV>;  MSVBVM50.__vbaFreeVarList
0045643F .  83C4 10    ADD ESP,10
00456442 .  C3          RETN
00456443 >  8D85 34FFFFFF LEA EAX,DWORD PTR SS:[EBP-CC]
00456449 .  50          PUSH EAX
0045644A .  8D8D 38FFFFFF LEA ECX,DWORD PTR SS:[EBP-C8]
00456450 .  51          PUSH ECX
00456451 .  8D95 3CFFFFFF LEA EDX,DWORD PTR SS:[EBP-C4]
00456457 .  52          PUSH EDX
00456458 .  8D85 40FFFFFF LEA EAX,DWORD PTR SS:[EBP-C0]
0045645E .  50          PUSH EAX
0045645F .  8D8D 44FFFFFF LEA ECX,DWORD PTR SS:[EBP-BC]
00456465 .  51          PUSH ECX
00456466 .  6A 05       PUSH 5
00456468 .  FF15 9C444600 CALL DWORD PTR DS:[<&MSVBVM50.__vbaFreeS>;  MSVBVM50.__vbaFreeStrList
0045646E .  8B35 48454600 MOV ESI,DWORD PTR DS:[<&MSVBVM50.__vbaFr>;  MSVBVM50.__vbaFreeStr
00456474 .  83C4 18    ADD ESP,18
00456477 .  8D4D E8    LEA ECX,DWORD PTR SS:[EBP-18]
0045647A .  FFD6       CALL ESI                               ;  <&MSVBVM50.__vbaFreeStr>
0045647C .  8D4D E4    LEA ECX,DWORD PTR SS:[EBP-1C]
0045647F .  FFD6       CALL ESI
00456481 .  8D4D DC    LEA ECX,DWORD PTR SS:[EBP-24]
00456484 .  FFD6       CALL ESI
00456486 .  8D4D D8    LEA ECX,DWORD PTR SS:[EBP-28]
00456489 .  FFD6       CALL ESI
0045648B .  8D4D D4    LEA ECX,DWORD PTR SS:[EBP-2C]
0045648E .  FFD6       CALL ESI
00456490 .  8D4D D0    LEA ECX,DWORD PTR SS:[EBP-30]
00456493 .  FFD6       CALL ESI
00456495 .  8D4D CC    LEA ECX,DWORD PTR SS:[EBP-34]
00456498 .  FFD6       CALL ESI
0045649A .  8D4D C8    LEA ECX,DWORD PTR SS:[EBP-38]
0045649D .  FFD6       CALL ESI
0045649F .  8D4D C4    LEA ECX,DWORD PTR SS:[EBP-3C]
004564A2 .  FFD6       CALL ESI
004564A4 .  8D4D C0    LEA ECX,DWORD PTR SS:[EBP-40]
004564A7 .  FFD6       CALL ESI
004564A9 .  8D4D BC    LEA ECX,DWORD PTR SS:[EBP-44]
004564AC .  FFD6       CALL ESI
004564AE .  8D4D B8    LEA ECX,DWORD PTR SS:[EBP-48]
004564B1 .- FFE6       JMP ESI                               ;  MSVBVM50.__vbaFreeStr
004564B3 .  C3          RETN
004564B4 .  8B4D EC    MOV ECX,DWORD PTR SS:[EBP-14]
004564B7 .  8B45 E0    MOV EAX,DWORD PTR SS:[EBP-20]
004564BA .  5F          POP EDI
004564BB .  5E          POP ESI
004564BC .  64:890D 00000>MOV DWORD PTR FS:[0],ECX
004564C3 .  5B          POP EBX
004564C4 .  8BE5       MOV ESP,EBP
004564C6 .  5D          POP EBP
004564C7 .  C2 0400    RETN 4
[/code]

tianxj · 发表于 2008-11-17 11:32

**************************************************************
【破解总结】
--------------------------------------------------------------
【算法总结】
注册算法主要采用置换的方法
..........................
用户名以tianxj为例
第1步，取用户名第1位"t",转成大写"T",对应第1个置换表的"84"
第2步，取用户名右边第1位"j",转成大写"J",对应第2个置换表的"2"
第3步，取用户名第2位"i",转成大写"I",对应第3个置换表的"T3R"
第4步，取用户名第4位"n",转成大写"N",对应第4个置换表的"414"
第5步，将上面所得到的4个字符串相连为"842T3R414"
第6步，根据相连字符串"842T3R414"的第3个字符"2",对应第5个置换表的"4TGFDERN"
第7步，将相连字符串"842T3R414"再与"84"、"414"、"2"、"414"相连，得到字符串"842T3R414844142414"
第8步，取"842T3R414844142414"的第4、2、7位相连得"T44"
第9步，取"842T3R414"的第4位"T"，"4TGFDERN"的第2位"T"，"842T3R414844142414"的第7位"4"相连得"TT4"
第10步，取"T44"的第1位"T"，"TT4"的第2-3位"T4"，"842T3R414844142414"的第7-10位"4"相连得"4148"相连得"TT44148"
第11步，取"TT44148"的第1-4位"TT44","842T3R414844142414"的第1-3位"842"相连得"TT44842"
第12步，在"TT44842"之前加上固定字母"M",即得到注册码"MTT44842"
--------------------------------------------------------------
【算法注册机】
略
--------------------------------------------------------------
【内存注册机】
中断地址 0045AC8E
中断次数 1
第一字节 FF
指令长度 6

内存方式-寄存器-EDX
            宽字符串
--------------------------------------------------------------
【注册信息】
用户名：tianxj
注册码：MTT44842
--------------------------------------------------------------
感谢飘云老大、猫老大、Nisy老大以及很多前辈们的学习教程以及徐超等所有帮助过我的论坛兄弟姐妹们！谢谢
--------------------------------------------------------------
【版权声明】破文是学习的手记，兴趣是成功的源泉；本破文纯属技术交流, 转载请注明作者并保持文章的完整, 谢谢!

   _/_/_/ _/ _/ _/_/_/
_/ _/  _/  _/ _/
_/_/_/ _/_/    _/_/_/_/
  _/       _/    _/ _/
_/       _/    _/_/_/ _/ tianxj

tianxj · 发表于 2008-11-17 11:34

:funk: :funk: 发贴有字数限制还有时间限制,以后象这样的长贴就不发了

lqiulu · 发表于 2008-11-17 12:54

终于等到贴子发完了，呵呵，看到T大发贴子发发完，一直等，怕中间给你打断了

，学习算法，辛苦了。

Hmily · 发表于 2008-11-20 13:28

原来水也可以罐出技术来，这么强大的贴怎么没有斑竹来加精华啊！

帐号		自动登录	找回密码
密码			注册[Register]

[原创] File Monster 2.9.3算法分析