分析

01091015  |.  FF15 A4200901 call dword ptr ds:[<&MSVCR90.printf>]    ; \printf
0109101B  |.  83C4 04       add esp,0x4
0109101E  |.  C745 CC FC200>mov dword ptr ss:[ebp-0x34],switchCa.010>;  ASCII "hello"
01091025  |.  C745 D0 04210>mov dword ptr ss:[ebp-0x30],switchCa.010>;  ASCII "word"
0109102C  |.  C745 D4 0C210>mov dword ptr ss:[ebp-0x2C],switchCa.010>;  ASCII "hi"
01091033  |.  8D45 CC       lea eax,dword ptr ss:[ebp-0x34]
01091036  |.  8945 D8       mov dword ptr ss:[ebp-0x28],eax
01091039  |.  8B4D D8       mov ecx,dword ptr ss:[ebp-0x28]          ;  msvcr90.51EA2775
0109103C  |.  8B11          mov edx,dword ptr ds:[ecx]
0109103E  |.  52            push edx                                 ; /<%s> = ""
0109103F  |.  68 10210901   push switchCa.01092110                   ; |format = "%s"
01091044  |.  FF15 A4200901 call dword ptr ds:[<&MSVCR90.printf>]    ; \printf
0109104A  |.  83C4 08       add esp,0x8
0109104D  |.  68 14210901   push switchCa.01092114                   ; /format = "zj"
01091052  |.  FF15 A4200901 call dword ptr ds:[<&MSVCR90.printf>]    ; \printf
01091058  |.  83C4 04       add esp,0x4
0109105B  |.  A1 18210901   mov eax,dword ptr ds:[0x1092118]
01091060  |.  8945 DC       mov dword ptr ss:[ebp-0x24],eax
01091063  |.  66:8B0D 1C210>mov cx,word ptr ds:[0x109211C]
0109106A  |.  66:894D E0    mov word ptr ss:[ebp-0x20],cx
0109106E  |.  33D2          xor edx,edx
01091070  |.  8955 E2       mov dword ptr ss:[ebp-0x1E],edx
01091073  |.  A1 20210901   mov eax,dword ptr ds:[0x1092120]
01091078  |.  8945 E6       mov dword ptr ss:[ebp-0x1A],eax
0109107B  |.  8A0D 24210901 mov cl,byte ptr ds:[0x1092124]
01091081  |.  884D EA       mov byte ptr ss:[ebp-0x16],cl
01091084  |.  33D2          xor edx,edx
01091086  |.  8955 EB       mov dword ptr ss:[ebp-0x15],edx
01091089  |.  8855 EF       mov byte ptr ss:[ebp-0x11],dl
0109108C  |.  66:A1 2821090>mov ax,word ptr ds:[0x1092128]
01091092  |.  66:8945 F0    mov word ptr ss:[ebp-0x10],ax
01091096  |.  8A0D 2A210901 mov cl,byte ptr ds:[0x109212A]
0109109C  |.  884D F2       mov byte ptr ss:[ebp-0xE],cl
0109109F  |.  33D2          xor edx,edx
010910A1  |.  8955 F3       mov dword ptr ss:[ebp-0xD],edx
010910A4  |.  66:8955 F7    mov word ptr ss:[ebp-0x9],dx
010910A8  |.  8855 F9       mov byte ptr ss:[ebp-0x7],dl
010910AB  |.  68 2C210901   push switchCa.0109212C                   ; /format = "end"
010910B0  |.  FF15 A4200901 call dword ptr ds:[<&MSVCR90.printf>]    ; \printf
010910B6  |.  83C4 04       add esp,0x4
010910B9  |.  68 30210901   push switchCa.01092130                   ; /command = "pause"
010910BE  |.  FF15 9C200901 call dword ptr ds:[<&MSVCR90.system>]    ; \system

QQ截图20191105131107.png