shell32.dll
7D693271 50 PUSH EAX
7D693272 56 PUSH ESI
7D693273 53 PUSH EBX
7D693274 6A 01 PUSH 1
7D693276 56 PUSH ESI
7D693277 FF15 1819597D CALL DWORD PTR DS:[<&SHLWAPI.AssocQueryK>; SHLWAPI.AssocQueryKeyW
7D69327D 85C0 TEST EAX,EAX
7D69327F 7C 3D JL SHORT SHELL32.7D6932BE
7D693281 FFB5 D0F9FFFF PUSH DWORD PTR SS:[EBP-630]
7D693287 FF15 0010597D CALL DWORD PTR DS:[<&ADVAPI32.RegCloseKe>; ADVAPI32.RegCloseKey
7D69328D 39B5 D8F9FFFF CMP DWORD PTR SS:[EBP-628],ESI
7D693293 74 29 JE SHORT SHELL32.7D6932BE ;这里修改为jmp即可
7D693295 6A 34 PUSH 34 ;弹出询问是否修改
7D693297 68 33100000 PUSH 1033
7D69329C 68 10100000 PUSH 1010
7D6932A1 FFB5 D4F9FFFF PUSH DWORD PTR SS:[EBP-62C]
7D6932A7 FF35 A4F5797D PUSH DWORD PTR DS:[7D79F5A4] ; SHELL32.7D590000
7D6932AD E8 D5980D00 CALL SHELL32.ShellMessageBoxW ; JMP to SHLWAPI.#388
7D6932B2 83C4 14 ADD ESP,14
7D6932B5 83F8 06 CMP EAX,6
7D6932B8 0F85 AA000000 JNZ SHELL32.7D693368
7D6932BE 8D85 DCF9FFFF LEA EAX,DWORD PTR SS:[EBP-624]