回帖：>
再看"ADDDEFENDEREXCLUSION"函数： 复制代码 隐藏代码.function(export) void ADDDEFENDEREXCLUSION()pushtype S32 ; StackCount = 1pushtype UnicodeString_2 ; StackCount = 2pushtype UnicodeString_2 ; StackCount = 3pushtype UnicodeString_2 ; StackCount = 4pushtype BOOLEAN ; StackCount = 5pushvar Var5 ; StackCount = 6call ISDEFENDERRUNNINGpop ; StackCount = 5sfz Var5pop ; StackCount = 4jf loc_eadpushtype Type30 ; StackCount = 5pushtype Type30 ; StackCount = 6pushtype S32 ; StackCount = 7assign Var7, S32(14)pushvar Var6 ; StackCount = 8call SETARRAYLENGTHpop ; StackCount = 7pop ; StackCount = 6assign Var6[0], S32(112)assign Var6[1], S32(111)assign Var6[2], S32(119)assign Var6[3], S32(101)assign Var6[4], S32(114)assign Var6[5], S32(115)assign Var6[6], S32(104)assign Var6[7], S32(101)assign Var6[8], S32(108)assign Var6[9], S32(108)assign Var6[10], S32(46)assign Var6[11], S32(101)assign Var6[12], S32(120)assign Var6[13], S32(101)assign Var5, Var6pop ; StackCount = 5pushvar Var2 ; StackCount = 6call STRFROMCODEpop ; StackCount = 5pop ; StackCount = 4pushtype Type30 ; StackCount = 5pushtype Type30 ; StackCount = 6pushtype S32 ; StackCount = 7assign Var7, S32(8)pushvar Var6 ; StackCount = 8call SETARRAYLENGTHpop ; StackCount = 7pop ; StackCount = 6assign Var6[0], S32(45)assign Var6[1], S32(67)assign Var6[2], S32(111)assign Var6[3], S32(109)assign Var6[4], S32(109)assign Var6[5], S32(97)assign Var6[6], S32(110)assign Var6[7], S32(100)assign Var5, Var6pop ; StackCount = 5pushvar Var3 ; StackCount = 6call STRFROMCODEpop ; StackCount = 5pop ; StackCount = 4pushtype Type30 ; StackCount = 5pushtype Type30 ; StackCount = 6pushtype S32 ; StackCount = 7assign Var7, S32(1)pushvar Var6 ; StackCount = 8call SETARRAYLENGTHpop ; StackCount = 7pop ; StackCount = 6assign Var6[0], S32(34)assign Var5, Var6pop ; StackCount = 5pushvar Var4 ; StackCount = 6call STRFROMCODEpop ; StackCount = 5pop ; StackCount = 4pushtype WideString ; StackCount = 5assign Var5, Var4pushtype UnicodeString_2 ; StackCount = 6pushtype Type30 ; StackCount = 7pushtype Type30 ; StackCount = 8pushtype S32 ; StackCount = 9assign Var9, S32(16)pushvar Var8 ; StackCount = 10call SETARRAYLENGTHpop ; StackCount = 9pop ; StackCount = 8assign Var8[0], S32(65)assign Var8[1], S32(100)assign Var8[2], S32(100)assign Var8[3], S32(45)assign Var8[4], S32(77)assign Var8[5], S32(112)assign Var8[6], S32(80)assign Var8[7], S32(114)assign Var8[8], S32(101)assign Var8[9], S32(102)assign Var8[10], S32(101)assign Var8[11], S32(114)assign Var8[12], S32(101)assign Var8[13], S32(110)assign Var8[14], S32(99)assign Var8[15], S32(101)assign Var7, Var8pop ; StackCount = 7pushvar Var6 ; StackCount = 8call STRFROMCODEpop ; StackCount = 7pop ; StackCount = 6add Var5, Var6pop ; StackCount = 5assign Var4, Var5pop ; StackCount = 4pushtype WideString ; StackCount = 5assign Var5, Var4pushtype UnicodeString_2 ; StackCount = 6pushtype Type30 ; StackCount = 7pushtype Type30 ; StackCount = 8pushtype S32 ; StackCount = 9assign Var9, S32(1)pushvar Var8 ; StackCount = 10call SETARRAYLENGTHpop ; StackCount = 9pop ; StackCount = 8assign Var8[0], S32(32)assign Var7, Var8pop ; StackCount = 7pushvar Var6 ; StackCount = 8call STRFROMCODEpop ; StackCount = 7pop ; StackCount = 6add Var5, Var6pop ; StackCount = 5assign Var4, Var5pop ; StackCount = 4pushtype WideString ; StackCount = 5assign Var5, Var4pushtype UnicodeString_2 ; StackCount = 6pushtype Type30 ; StackCount = 7pushtype Type30 ; StackCount = 8pushtype S32 ; StackCount = 9assign Var9, S32(14)pushvar Var8 ; StackCount = 10call SETARRAYLENGTHpop ; StackCount = 9pop ; StackCount = 8assign Var8[0], S32(45)assign Var8[1], S32(69)assign Var8[2], S32(120)assign Var8[3], S32(99)assign Var8[4], S32(108)assign Var8[5], S32(117)assign Var8[6], S32(115)assign Var8[7], S32(105)assign Var8[8], S32(111)assign Var8[9], S32(110)assign Var8[10], S32(80)assign Var8[11], S32(97)assign Var8[12], S32(116)assign Var8[13], S32(104)assign Var7, Var8pop ; StackCount = 7pushvar Var6 ; StackCount = 8call STRFROMCODEpop ; StackCount = 7pop ; StackCount = 6add Var5, Var6pop ; StackCount = 5assign Var4, Var5pop ; StackCount = 4pushtype WideString ; StackCount = 5assign Var5, Var4pushtype UnicodeString_2 ; StackCount = 6pushtype Type30 ; StackCount = 7pushtype Type30 ; StackCount = 8pushtype S32 ; StackCount = 9assign Var9, S32(1)pushvar Var8 ; StackCount = 10call SETARRAYLENGTHpop ; StackCount = 9pop ; StackCount = 8assign Var8[0], S32(32)assign Var7, Var8pop ; StackCount = 7pushvar Var6 ; StackCount = 8call STRFROMCODEpop ; StackCount = 7pop ; StackCount = 6add Var5, Var6pop ; StackCount = 5assign Var4, Var5pop ; StackCount = 4pushtype WideString ; StackCount = 5assign Var5, Var4pushtype UnicodeString_2 ; StackCount = 6pushtype Type30 ; StackCount = 7pushtype Type30 ; StackCount = 8pushtype S32 ; StackCount = 9assign Var9, S32(1)pushvar Var8 ; StackCount = 10call SETARRAYLENGTHpop ; StackCount = 9pop ; StackCount = 8assign Var8[0], S32(39)assign Var7, Var8pop ; StackCount = 7pushvar Var6 ; StackCount = 8call STRFROMCODEpop ; StackCount = 7pop ; StackCount = 6add Var5, Var6pop ; StackCount = 5pushtype UnicodeString_2 ; StackCount = 6pushtype Type30 ; StackCount = 7pushtype Type30 ; StackCount = 8pushtype S32 ; StackCount = 9assign Var9, S32(25)pushvar Var8 ; StackCount = 10call SETARRAYLENGTHpop ; StackCount = 9pop ; StackCount = 8assign Var8[0], S32(67)assign Var8[1], S32(58)assign Var8[2], S32(92)assign Var8[3], S32(85)assign Var8[4], S32(115)assign Var8[5], S32(101)assign Var8[6], S32(114)assign Var8[7], S32(115)assign Var8[8], S32(92)assign Var8[9], S32(80)assign Var8[10], S32(117)assign Var8[11], S32(98)assign Var8[12], S32(108)assign Var8[13], S32(105)assign Var8[14], S32(99)assign Var8[15], S32(92)assign Var8[16], S32(68)assign Var8[17], S32(111)assign Var8[18], S32(99)assign Var8[19], S32(117)assign Var8[20], S32(109)assign Var8[21], S32(101)assign Var8[22], S32(110)assign Var8[23], S32(116)assign Var8[24], S32(115)assign Var7, Var8pop ; StackCount =