ss:[ebp+C]
0043DF0E 8B6D FC mov ebp,dword ptr ss:[ebp-4]
0043DF11 8B63 FC mov esp,dword ptr ds:[ebx-4]
0043DF14 FFE0 jmp eax
0043DF16 5B pop ebx
0043DF17 C9 leave
0043DF18 C2 0800 retn 8
PB
00410D50: 55 PUSH EBP
00410D51: 8BEC MOV EBP, ESP
00410D53: 53 PUSH EBX
00410D54: 56 PUSH ESI
00410D55: 57 PUSH EDI
00410D56: BB00604100 MOV EBX, 00416000
00410D5B: 662EF705D2F85 TEST WORD PTR CS:[004113D2], 850F0004
00410D67: DB00 FILD DWORD PTR [EAX]
00410D69: 0000 ADD [EAX], AL
00410D6B: 6A00 PUSH 00000000
00410D6D: FF1554844100 CALL [00418454] ; CoInitialize
00410D73: E892020000 CALL 0041100A
00410D78: C7830801000001000000 MOV [EBX+00000108], 00000001
00410D82: 8D8390020000 LEA EAX, [EBX+00000290]
00410D88: 50 PUSH EAX
00410D89: FF15DC834100 CALL [004183DC] ; GetVersionExA
00410D8F: 83EC44 SUB ESP, 00000044
00410D92: C7042444000000 MOV [ESP], 00000044
00410D99: C744242C00000000 MOV [ESP+2C], 00000000
00410DA1: 54 PUSH ESP
00410DA2: FF15D4834100 CALL [004183D4] ; GetStartupInfoA
00410DA8: B80A000000 MOV EAX, 0000000A
00410DAD: F744242C01000000 TEST [ESP+2C], 00000001
00410DB5: 7405 JZ 410DBC
00410DB7: 0FB7442430 MOVZX EAX, WORD PTR [ESP+30]
00410DBC: 83C444 ADD ESP, 00000044
00410DBF: 8983FE000000 MOV [EBX+000000FE], EAX
00410DC5: FF15B0834100 CALL [004183B0] ; GetCommandLineA
Borland C++ 1999
004014D0
VB> /EB 10 jmp short VBto_UNP.004014E2
004014D2 |66:623A bound di,dword ptr ds:[edx]
004014D5 |43 inc ebx
004014D6 |2B2B sub ebp,dword ptr ds:[ebx]
004014D8 |48 dec eax
004014D9 |4F dec edi
004014DA
|4F dec edi
004014DB |4B dec ebx
004014DC |90 nop
004014DD -|E9 980057>jmp 0097157A
004014E2 \A1 8B0057>mov eax,dword ptr ds:[57008B]
004014E7 C1E0 02 shl eax,2
004014EA A3 8F0057>mov dword ptr ds:[57008F],eax
004014EF 52 push edx
004014F0 6A 00 push 0
004014F2 E8 C7D116>call