能力值:
( LV2,RANK:10 )
|
-
-
2 楼
关键代码:
0049D4D4 . 55 push ebp
0049D4D5 . 68 82EE4900 push 第25讲_?0049EE82
0049D4DA . 64:FF30 push dword ptr fs:[eax]
0049D4DD . 64:8920 mov dword ptr fs:[eax], esp
0049D4E0 . 8D45 DC lea eax, dword ptr ss:[ebp-24]
0049D4E3 . E8 FC7CF6FF call 第25讲_?004051E4
0049D4E8 . 8D95 FCFDFFFF lea edx, dword ptr ss:[ebp-204]
0049D4EE . 8B86 64030000 mov eax, dword ptr ds:[esi+364]
0049D4F4 . E8 53B5FAFF call 第25讲_?00448A4C
0049D4F9 . 8B85 FCFDFFFF mov eax, dword ptr ss:[ebp-204]
0049D4FF . 8D55 FC lea edx, dword ptr ss:[ebp-4]
0049D502 . E8 F1C3F6FF call 第25讲_?004098F8
0049D507 . 8D95 F8FDFFFF lea edx, dword ptr ss:[ebp-208]
0049D50D . 8B45 FC mov eax, dword ptr ss:[ebp-4]
0049D510 . E8 43C0F6FF call 第25讲_?00409558
0049D515 . 8B95 F8FDFFFF mov edx, dword ptr ss:[ebp-208] ; kernel32.7C810705
0049D51B . 8B45 FC mov eax, dword ptr ss:[ebp-4]
0049D51E . E8 E980F6FF call 第25讲_?0040560C
0049D523 . 0F84 AD000000 je 第25讲_?0049D5D6
0049D529 . 33C0 xor eax, eax
0049D52B . 55 push ebp
0049D52C . 68 B3D54900 push 第25讲_?0049D5B3
0049D531 . 64:FF30 push dword ptr fs:[eax]
0049D534 . 64:8920 mov dword ptr fs:[eax], esp
0049D537 . 8D95 F0FDFFFF lea edx, dword ptr ss:[ebp-210]
0049D53D . 8B45 FC mov eax, dword ptr ss:[ebp-4]
0049D540 . E8 13C0F6FF call 第25讲_?00409558
0049D545 . 8B85 F0FDFFFF mov eax, dword ptr ss:[ebp-210] ; 第25讲_?<ModuleEntryPoint>
0049D54B . 8D95 F4FDFFFF lea edx, dword ptr ss:[ebp-20C]
0049D551 . E8 92490000 call 第25讲_?004A1EE8
0049D556 . 8B95 F4FDFFFF mov edx, dword ptr ss:[ebp-20C]
0049D55C . 8BC3 mov eax, ebx
0049D55E . E8 D57CF6FF call 第25讲_?00405238
0049D563 . B2 01 mov dl, 1
0049D565 . A1 C87A4100 mov eax, dword ptr ds:[417AC8]
0049D56A . E8 456DF6FF call 第25讲_?004042B4
0049D56F . BA 9CEE4900 mov edx, 第25讲_?0049EE9C
0049D574 . 8B03 mov eax, dword ptr ds:[ebx]
0049D576 . E8 19520000 call 第25讲_?004A2794
0049D57B . 8945 CC mov dword ptr ss:[ebp-34], eax
0049D57E . 8D8D ECFDFFFF lea ecx, dword ptr ss:[ebp-214]
0049D584 . BA 01000000 mov edx, 1
0049D589 . 8B45 CC mov eax, dword ptr ss:[ebp-34]
0049D58C . 8B38 mov edi, dword ptr ds:[eax]
0049D58E . FF57 0C call near dword ptr ds:[edi+C]
0049D591 . 8B95 ECFDFFFF mov edx, dword ptr ss:[ebp-214] ; ntdll.7C9301DB
0049D597 . 8BC3 mov eax, ebx
0049D599 . E8 9A7CF6FF call 第25讲_?00405238
0049D59E . 8B45 CC mov eax, dword ptr ss:[ebp-34]
0049D5A1 . E8 3E6DF6FF call 第25讲_?004042E4
0049D5A6 . 33C0 xor eax, eax
0049D5A8 . 5A pop edx ; kernel32.7C817077
0049D5A9 . 59 pop ecx ; kernel32.7C817077
0049D5AA . 59 pop ecx ; kernel32.7C817077
0049D5AB . 64:8910 mov dword ptr fs:[eax], edx ; ntdll.KiFastSystemCallRet
0049D5AE . E9 83010000 jmp 第25讲_?0049D736
0049D5B3 .^ E9 0C72F6FF jmp 第25讲_?004047C4
0049D5B8 . B8 A8EE4900 mov eax, 第25讲_?0049EEA8
0049D5BD . E8 4ECEF9FF call 第25讲_?0043A410
0049D5C2 . E8 0D76F6FF call 第25讲_?00404BD4
0049D5C7 . E9 A3170000 jmp 第25讲_?0049ED6F
0049D5CC . E8 0376F6FF call 第25讲_?00404BD4
0049D5D1 . E9 60010000 jmp 第25讲_?0049D736
0049D5D6 > B2 01 mov dl, 1
0049D5D8 . A1 C87A4100 mov eax, dword ptr ds:[417AC8]
0049D5DD . E8 D26CF6FF call 第25讲_?004042B4
0049D5E2 . 8D95 E8FDFFFF lea edx, dword ptr ss:[ebp-218]
0049D5E8 . 8B45 FC mov eax, dword ptr ss:[ebp-4]
0049D5EB . E8 F8480000 call 第25讲_?004A1EE8
0049D5F0 . 8B85 E8FDFFFF mov eax, dword ptr ss:[ebp-218] ; ntdll.7C93019B
0049D5F6 . BA BCEE4900 mov edx, 第25讲_?0049EEBC
0049D5FB . E8 94510000 call 第25讲_?004A2794
0049D600 . 8945 CC mov dword ptr ss:[ebp-34], eax
0049D603 . 8B45 CC mov eax, dword ptr ss:[ebp-34]
0049D606 . 8B10 mov edx, dword ptr ds:[eax]
0049D608 . FF52 14 call near dword ptr ds:[edx+14]
0049D60B . 83F8 04 cmp eax, 4
0049D60E . 0F85 0B010000 jnz 第25讲_?0049D71F
0049D614 . 8D8D E4FDFFFF lea ecx, dword ptr ss:[ebp-21C]
0049D61A . 33D2 xor edx, edx ; ntdll.KiFastSystemCallRet
0049D61C . 8B45 CC mov eax, dword ptr ss:[ebp-34]
0049D61F . 8B38 mov edi, dword ptr ds:[eax]
0049D621 . FF57 0C call near dword ptr ds:[edi+C]
0049D624 . 8B95 E4FDFFFF mov edx, dword ptr ss:[ebp-21C]
0049D62A . 8BC3 mov eax, ebx
0049D62C . E8 077CF6FF call 第25讲_?00405238
0049D631 . 8D4D E8 lea ecx, dword ptr ss:[ebp-18]
0049D634 . BA 01000000 mov edx, 1
0049D639 . 8B45 CC mov eax, dword ptr ss:[ebp-34]
0049D63C . 8B38 mov edi, dword ptr ds:[eax]
0049D63E . FF57 0C call near dword ptr ds:[edi+C]
0049D641 . 8D4D E0 lea ecx, dword ptr ss:[ebp-20]
0049D644 . BA 02000000 mov edx, 2
0049D649 . 8B45 CC mov eax, dword ptr ss:[ebp-34]
0049D64C . 8B38 mov edi, dword ptr ds:[eax]
0049D64E . FF57 0C call near dword ptr ds:[edi+C]
0049D651 . 8D4D E4 lea ecx, dword ptr ss:[ebp-1C]
0049D654 . BA 03000000 mov edx, 3
0049D659 . 8B45 CC mov eax, dword ptr ss:[ebp-34]
0049D65C . 8B38 mov edi, dword ptr ds:[eax]
0049D65E . FF57 0C call near dword ptr ds:[edi+C]
0049D661 . 8D4D DC lea ecx, dword ptr ss:[ebp-24]
0049D664 . BA 04000000 mov edx, 4
0049D669 . 8B45 E4 mov eax, dword ptr ss:[ebp-1C]
0049D66C . E8 4773F9FF call 第25讲_?004349B8
0049D671 . 8B7D E4 mov edi, dword ptr ss:[ebp-1C]
0049D674 . 85FF test edi, edi ; ntdll.7C930228
0049D676 . 74 05 je short 第25讲_?0049D67D
0049D678 . 83EF 04 sub edi, 4
0049D67B . 8B3F mov edi, dword ptr ds:[edi]
0049D67D > 8D8D E0FDFFFF lea ecx, dword ptr ss:[ebp-220]
0049D683 . 8BD7 mov edx, edi ; ntdll.7C930228
0049D685 . 83EA 04 sub edx, 4
0049D688 . 8B45 E4 mov eax, dword ptr ss:[ebp-1C]
0049D68B . E8 0C73F9FF call 第25讲_?0043499C
0049D690 . 8B95 E0FDFFFF mov edx, dword ptr ss:[ebp-220]
0049D696 . 8D45 E4 lea eax, dword ptr ss:[ebp-1C]
0049D699 . E8 DE7BF6FF call 第25讲_?0040527C
0049D69E . FF33 push dword ptr ds:[ebx]
0049D6A0 . 68 BCEE4900 push 第25讲_?0049EEBC
0049D6A5 . FF75 E8 push dword ptr ss:[ebp-18]
0049D6A8 . 68 BCEE4900 push 第25讲_?0049EEBC
0049D6AD . FF75 E0 push dword ptr ss:[ebp-20]
0049D6B0 . 68 BCEE4900 push 第25讲_?0049EEBC
0049D6B5 . FF75 E4 push dword ptr ss:[ebp-1C]
0049D6B8 . 8D85 C4FDFFFF lea eax, dword ptr ss:[ebp-23C]
0049D6BE . BA 07000000 mov edx, 7
0049D6C3 . E8 B07EF6FF call 第25讲_?00405578
0049D6C8 . 8B85 C4FDFFFF mov eax, dword ptr ss:[ebp-23C]
0049D6CE . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049D6D4 . E8 EBF0FFFF call 第25讲_?0049C7C4
0049D6D9 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049D6DF . 8D95 D8FDFFFF lea edx, dword ptr ss:[ebp-228]
0049D6E5 . E8 52F1FFFF call 第25讲_?0049C83C
0049D6EA . 8B85 D8FDFFFF mov eax, dword ptr ss:[ebp-228]
0049D6F0 . 8D8D DCFDFFFF lea ecx, dword ptr ss:[ebp-224]
0049D6F6 . BA 04000000 mov edx, 4
0049D6FB . E8 9C72F9FF call 第25讲_?0043499C
0049D700 . 8B85 DCFDFFFF mov eax, dword ptr ss:[ebp-224] ; ntdll.7C930228
0049D706 . 8B55 DC mov edx, dword ptr ss:[ebp-24]
0049D709 . E8 FE7EF6FF call 第25讲_?0040560C
0049D70E . 74 1E je short 第25讲_?0049D72E
0049D710 . B8 C8EE4900 mov eax, 第25讲_?0049EEC8
0049D715 . E8 F6CCF9FF call 第25讲_?0043A410
0049D71A . E9 50160000 jmp 第25讲_?0049ED6F
0049D71F > B8 E0EE4900 mov eax, 第25讲_?0049EEE0
0049D724 . E8 E7CCF9FF call 第25讲_?0043A410
0049D729 . E9 41160000 jmp 第25讲_?0049ED6F
0049D72E > 8B45 CC mov eax, dword ptr ss:[ebp-34]
0049D731 . E8 AE6BF6FF call 第25讲_?004042E4
0049D736 > 8D95 B8FDFFFF lea edx, dword ptr ss:[ebp-248]
0049D73C . A1 B0055300 mov eax, dword ptr ds:[5305B0]
0049D741 . 8B00 mov eax, dword ptr ds:[eax]
0049D743 . E8 A0470000 call 第25讲_?004A1EE8
0049D748 . FFB5 B8FDFFFF push dword ptr ss:[ebp-248]
0049D74E . 8D95 B4FDFFFF lea edx, dword ptr ss:[ebp-24C]
0049D754 . 8B86 60030000 mov eax, dword ptr ds:[esi+360]
0049D75A . E8 EDB2FAFF call 第25讲_?00448A4C
0049D75F . FFB5 B4FDFFFF push dword ptr ss:[ebp-24C]
0049D765 . A1 0C065300 mov eax, dword ptr ds:[53060C]
0049D76A . FF30 push dword ptr ds:[eax]
0049D76C . A1 08055300 mov eax, dword ptr ds:[530508]
0049D771 . FF30 push dword ptr ds:[eax]
0049D773 . 8D85 BCFDFFFF lea eax, dword ptr ss:[ebp-244]
0049D779 . BA 04000000 mov edx, 4
0049D77E . E8 F57DF6FF call 第25讲_?00405578
0049D783 . 8B85 BCFDFFFF mov eax, dword ptr ss:[ebp-244]
0049D789 . 8D95 C0FDFFFF lea edx, dword ptr ss:[ebp-240]
0049D78F . E8 4CBEF6FF call 第25讲_?004095E0
0049D794 . 8B85 C0FDFFFF mov eax, dword ptr ss:[ebp-240]
0049D79A . 8D55 F8 lea edx, dword ptr ss:[ebp-8]
0049D79D . E8 8E460000 call 第25讲_?004A1E30
0049D7A2 . 8D95 A0FDFFFF lea edx, dword ptr ss:[ebp-260]
0049D7A8 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049D7AB . E8 38470000 call 第25讲_?004A1EE8
0049D7B0 . FFB5 A0FDFFFF push dword ptr ss:[ebp-260]
0049D7B6 . FF35 805E5300 push dword ptr ds:[535E80]
0049D7BC . 68 F8EE4900 push 第25讲_?0049EEF8 ; ASCII "yaoex1"
0049D7C1 . 8D85 A4FDFFFF lea eax, dword ptr ss:[ebp-25C]
0049D7C7 . BA 03000000 mov edx, 3
0049D7CC . E8 A77DF6FF call 第25讲_?00405578
0049D7D1 . 8B85 A4FDFFFF mov eax, dword ptr ss:[ebp-25C]
0049D7D7 . 8D95 A8FDFFFF lea edx, dword ptr ss:[ebp-258]
0049D7DD . E8 4E460000 call 第25讲_?004A1E30
0049D7E2 . 8B85 A8FDFFFF mov eax, dword ptr ss:[ebp-258]
0049D7E8 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049D7EE . E8 D1EFFFFF call 第25讲_?0049C7C4
0049D7F3 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049D7F9 . 8D95 ACFDFFFF lea edx, dword ptr ss:[ebp-254]
0049D7FF . E8 38F0FFFF call 第25讲_?0049C83C
0049D804 . 8B85 ACFDFFFF mov eax, dword ptr ss:[ebp-254]
0049D80A . 8D8D B0FDFFFF lea ecx, dword ptr ss:[ebp-250]
0049D810 . BA 02000000 mov edx, 2
0049D815 . E8 8271F9FF call 第25讲_?0043499C
0049D81A . 8B85 B0FDFFFF mov eax, dword ptr ss:[ebp-250]
0049D820 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049D826 . E8 99EFFFFF call 第25讲_?0049C7C4
0049D82B . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049D831 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049D834 . E8 03F0FFFF call 第25讲_?0049C83C
0049D839 . 8D8D 9CFDFFFF lea ecx, dword ptr ss:[ebp-264]
0049D83F . BA 02000000 mov edx, 2
0049D844 . 8B03 mov eax, dword ptr ds:[ebx]
0049D846 . E8 5171F9FF call 第25讲_?0043499C
0049D84B . 8B85 9CFDFFFF mov eax, dword ptr ss:[ebp-264]
0049D851 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049D857 . E8 68EFFFFF call 第25讲_?0049C7C4
0049D85C . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049D862 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049D865 . E8 D2EFFFFF call 第25讲_?0049C83C
0049D86A . 8B45 F0 mov eax, dword ptr ss:[ebp-10]
0049D86D . 8B55 EC mov edx, dword ptr ss:[ebp-14]
0049D870 . E8 977DF6FF call 第25讲_?0040560C
0049D875 . 8D95 88FDFFFF lea edx, dword ptr ss:[ebp-278]
0049D87B . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049D87E . E8 65460000 call 第25讲_?004A1EE8
0049D883 . FFB5 88FDFFFF push dword ptr ss:[ebp-278]
0049D889 . FF35 805E5300 push dword ptr ds:[535E80]
0049D88F . 68 08EF4900 push 第25讲_?0049EF08 ; ASCII "yasdsdoex1"
0049D894 . 8D85 8CFDFFFF lea eax, dword ptr ss:[ebp-274]
0049D89A . BA 03000000 mov edx, 3
0049D89F . E8 D47CF6FF call 第25讲_?00405578
0049D8A4 . 8B85 8CFDFFFF mov eax, dword ptr ss:[ebp-274]
0049D8AA . 8D95 90FDFFFF lea edx, dword ptr ss:[ebp-270]
0049D8B0 . E8 7B450000 call 第25讲_?004A1E30
0049D8B5 . 8B85 90FDFFFF mov eax, dword ptr ss:[ebp-270]
0049D8BB . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049D8C1 . E8 FEEEFFFF call 第25讲_?0049C7C4
0049D8C6 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049D8CC . 8D95 94FDFFFF lea edx, dword ptr ss:[ebp-26C]
0049D8D2 . E8 65EFFFFF call 第25讲_?0049C83C
0049D8D7 . 8B85 94FDFFFF mov eax, dword ptr ss:[ebp-26C]
0049D8DD . 8D8D 98FDFFFF lea ecx, dword ptr ss:[ebp-268]
0049D8E3 . BA 02000000 mov edx, 2
0049D8E8 . E8 AF70F9FF call 第25讲_?0043499C
0049D8ED . 8B85 98FDFFFF mov eax, dword ptr ss:[ebp-268]
0049D8F3 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049D8F9 . E8 C6EEFFFF call 第25讲_?0049C7C4
0049D8FE . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049D904 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049D907 . E8 30EFFFFF call 第25讲_?0049C83C
0049D90C . 8D8D 80FDFFFF lea ecx, dword ptr ss:[ebp-280]
0049D912 . BA 02000000 mov edx, 2
0049D917 . 8B03 mov eax, dword ptr ds:[ebx]
0049D919 . E8 7E70F9FF call 第25讲_?0043499C
0049D91E . 8B85 80FDFFFF mov eax, dword ptr ss:[ebp-280]
0049D924 . 8D95 84FDFFFF lea edx, dword ptr ss:[ebp-27C]
0049D92A . E8 01450000 call 第25讲_?004A1E30
0049D92F . 8B85 84FDFFFF mov eax, dword ptr ss:[ebp-27C]
0049D935 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049D938 . E8 F3440000 call 第25讲_?004A1E30
0049D93D . 8D95 6CFDFFFF lea edx, dword ptr ss:[ebp-294]
0049D943 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049D946 . E8 9D450000 call 第25讲_?004A1EE8
0049D94B . FFB5 6CFDFFFF push dword ptr ss:[ebp-294]
0049D951 . FF35 805E5300 push dword ptr ds:[535E80]
0049D957 . 68 1CEF4900 push 第25讲_?0049EF1C ; ASCII "yaosdsdex1"
0049D95C . 8D85 70FDFFFF lea eax, dword ptr ss:[ebp-290]
0049D962 . BA 03000000 mov edx, 3
0049D967 . E8 0C7CF6FF call 第25讲_?00405578
0049D96C . 8B85 70FDFFFF mov eax, dword ptr ss:[ebp-290]
0049D972 . 8D95 74FDFFFF lea edx, dword ptr ss:[ebp-28C]
0049D978 . E8 B3440000 call 第25讲_?004A1E30
0049D97D . 8B85 74FDFFFF mov eax, dword ptr ss:[ebp-28C]
0049D983 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049D989 . E8 36EEFFFF call 第25讲_?0049C7C4
0049D98E . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049D994 . 8D95 78FDFFFF lea edx, dword ptr ss:[ebp-288]
0049D99A . E8 9DEEFFFF call 第25讲_?0049C83C
0049D99F . 8B85 78FDFFFF mov eax, dword ptr ss:[ebp-288]
0049D9A5 . 8D8D 7CFDFFFF lea ecx, dword ptr ss:[ebp-284]
0049D9AB . BA 02000000 mov edx, 2
0049D9B0 . E8 E76FF9FF call 第25讲_?0043499C
0049D9B5 . 8B85 7CFDFFFF mov eax, dword ptr ss:[ebp-284]
0049D9BB . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049D9C1 . E8 FEEDFFFF call 第25讲_?0049C7C4
0049D9C6 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049D9CC . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049D9CF . E8 68EEFFFF call 第25讲_?0049C83C
0049D9D4 . 8D8D 64FDFFFF lea ecx, dword ptr ss:[ebp-29C]
0049D9DA . BA 06000000 mov edx, 6
0049D9DF . 8B03 mov eax, dword ptr ds:[ebx]
0049D9E1 . E8 B66FF9FF call 第25讲_?0043499C
0049D9E6 . 8B85 64FDFFFF mov eax, dword ptr ss:[ebp-29C]
0049D9EC . 8D8D 68FDFFFF lea ecx, dword ptr ss:[ebp-298]
0049D9F2 . BA 04000000 mov edx, 4
0049D9F7 . E8 BC6FF9FF call 第25讲_?004349B8
0049D9FC . 8B95 68FDFFFF mov edx, dword ptr ss:[ebp-298]
0049DA02 . B8 945E5300 mov eax, 第25讲_?00535E94
0049DA07 . E8 2C78F6FF call 第25讲_?00405238
0049DA0C . A1 34065300 mov eax, dword ptr ds:[530634]
0049DA11 . 8B00 mov eax, dword ptr ds:[eax]
0049DA13 . BA 30EF4900 mov edx, 第25讲_?0049EF30
0049DA18 . E8 EF7BF6FF call 第25讲_?0040560C
0049DA1D . 75 10 jnz short 第25讲_?0049DA2F
0049DA1F . 8D55 D8 lea edx, dword ptr ss:[ebp-28]
0049DA22 . 8B86 60030000 mov eax, dword ptr ds:[esi+360]
0049DA28 . E8 1FB0FAFF call 第25讲_?00448A4C
0049DA2D . EB 08 jmp short 第25讲_?0049DA37
0049DA2F > 8D45 D8 lea eax, dword ptr ss:[ebp-28]
0049DA32 . E8 591E0000 call 第25讲_?0049F890
0049DA37 > 8D4D D4 lea ecx, dword ptr ss:[ebp-2C]
0049DA3A . BA 01000000 mov edx, 1
0049DA3F . 8B45 D8 mov eax, dword ptr ss:[ebp-28] ; ntdll.7C930228
0049DA42 . E8 556FF9FF call 第25讲_?0043499C
0049DA47 . 8B7D D8 mov edi, dword ptr ss:[ebp-28] ; ntdll.7C930228
0049DA4A . 85FF test edi, edi ; ntdll.7C930228
0049DA4C . 74 05 je short 第25讲_?0049DA53
0049DA4E . 83EF 04 sub edi, 4
0049DA51 . 8B3F mov edi, dword ptr ds:[edi]
0049DA53 > 8D4D D0 lea ecx, dword ptr ss:[ebp-30]
0049DA56 . 8BD7 mov edx, edi ; ntdll.7C930228
0049DA58 . 4A dec edx ; ntdll.KiFastSystemCallRet
0049DA59 . 8B45 D8 mov eax, dword ptr ss:[ebp-28] ; ntdll.7C930228
0049DA5C . E8 576FF9FF call 第25讲_?004349B8
0049DA61 . 8D95 50FDFFFF lea edx, dword ptr ss:[ebp-2B0]
0049DA67 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049DA6A . E8 79440000 call 第25讲_?004A1EE8
0049DA6F . FFB5 50FDFFFF push dword ptr ss:[ebp-2B0]
0049DA75 . FF35 805E5300 push dword ptr ds:[535E80]
0049DA7B . 68 F8EE4900 push 第25讲_?0049EEF8 ; ASCII "yaoex1"
0049DA80 . 8D85 54FDFFFF lea eax, dword ptr ss:[ebp-2AC]
0049DA86 . BA 03000000 mov edx, 3
0049DA8B . E8 E87AF6FF call 第25讲_?00405578
0049DA90 . 8B85 54FDFFFF mov eax, dword ptr ss:[ebp-2AC]
0049DA96 . 8D95 58FDFFFF lea edx, dword ptr ss:[ebp-2A8]
0049DA9C . E8 8F430000 call 第25讲_?004A1E30
0049DAA1 . 8B85 58FDFFFF mov eax, dword ptr ss:[ebp-2A8]
0049DAA7 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DAAD . E8 12EDFFFF call 第25讲_?0049C7C4
0049DAB2 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DAB8 . 8D95 5CFDFFFF lea edx, dword ptr ss:[ebp-2A4]
0049DABE . E8 79EDFFFF call 第25讲_?0049C83C
0049DAC3 . 8B85 5CFDFFFF mov eax, dword ptr ss:[ebp-2A4]
0049DAC9 . 8D8D 60FDFFFF lea ecx, dword ptr ss:[ebp-2A0]
0049DACF . BA 02000000 mov edx, 2
0049DAD4 . E8 C36EF9FF call 第25讲_?0043499C
0049DAD9 . 8B85 60FDFFFF mov eax, dword ptr ss:[ebp-2A0]
0049DADF . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DAE5 . E8 DAECFFFF call 第25讲_?0049C7C4
0049DAEA . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DAF0 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049DAF3 . E8 44EDFFFF call 第25讲_?0049C83C
0049DAF8 . 8D8D 4CFDFFFF lea ecx, dword ptr ss:[ebp-2B4]
0049DAFE . BA 02000000 mov edx, 2
0049DB03 . 8B03 mov eax, dword ptr ds:[ebx]
0049DB05 . E8 926EF9FF call 第25讲_?0043499C
0049DB0A . 8B85 4CFDFFFF mov eax, dword ptr ss:[ebp-2B4]
0049DB10 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DB16 . E8 A9ECFFFF call 第25讲_?0049C7C4
0049DB1B . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DB21 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049DB24 . E8 13EDFFFF call 第25讲_?0049C83C
0049DB29 . 8B45 F0 mov eax, dword ptr ss:[ebp-10]
0049DB2C . 8B55 EC mov edx, dword ptr ss:[ebp-14]
0049DB2F . E8 D87AF6FF call 第25讲_?0040560C
0049DB34 . 8D95 38FDFFFF lea edx, dword ptr ss:[ebp-2C8]
0049DB3A . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049DB3D . E8 A6430000 call 第25讲_?004A1EE8
0049DB42 . FFB5 38FDFFFF push dword ptr ss:[ebp-2C8]
0049DB48 . FF35 805E5300 push dword ptr ds:[535E80]
0049DB4E . 68 08EF4900 push 第25讲_?0049EF08 ; ASCII "yasdsdoex1"
0049DB53 . 8D85 3CFDFFFF lea eax, dword ptr ss:[ebp-2C4]
0049DB59 . BA 03000000 mov edx, 3
0049DB5E . E8 157AF6FF call 第25讲_?00405578
0049DB63 . 8B85 3CFDFFFF mov eax, dword ptr ss:[ebp-2C4]
0049DB69 . 8D95 40FDFFFF lea edx, dword ptr ss:[ebp-2C0]
0049DB6F . E8 BC420000 call 第25讲_?004A1E30
0049DB74 . 8B85 40FDFFFF mov eax, dword ptr ss:[ebp-2C0]
0049DB7A . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DB80 . E8 3FECFFFF call 第25讲_?0049C7C4
0049DB85 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DB8B . 8D95 44FDFFFF lea edx, dword ptr ss:[ebp-2BC]
0049DB91 . E8 A6ECFFFF call 第25讲_?0049C83C
0049DB96 . 8B85 44FDFFFF mov eax, dword ptr ss:[ebp-2BC]
0049DB9C . 8D8D 48FDFFFF lea ecx, dword ptr ss:[ebp-2B8]
0049DBA2 . BA 02000000 mov edx, 2
0049DBA7 . E8 F06DF9FF call 第25讲_?0043499C
0049DBAC . 8B85 48FDFFFF mov eax, dword ptr ss:[ebp-2B8]
0049DBB2 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DBB8 . E8 07ECFFFF call 第25讲_?0049C7C4
0049DBBD . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DBC3 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049DBC6 . E8 71ECFFFF call 第25讲_?0049C83C
0049DBCB . 8D8D 30FDFFFF lea ecx, dword ptr ss:[ebp-2D0]
0049DBD1 . BA 02000000 mov edx, 2
0049DBD6 . 8B03 mov eax, dword ptr ds:[ebx]
0049DBD8 . E8 BF6DF9FF call 第25讲_?0043499C
0049DBDD . 8B85 30FDFFFF mov eax, dword ptr ss:[ebp-2D0] ; ntdll.7C92D06A
0049DBE3 . 8D95 34FDFFFF lea edx, dword ptr ss:[ebp-2CC]
0049DBE9 . E8 42420000 call 第25讲_?004A1E30
0049DBEE . 8B85 34FDFFFF mov eax, dword ptr ss:[ebp-2CC] ; ntdll.7C92E45F
0049DBF4 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049DBF7 . E8 34420000 call 第25讲_?004A1E30
0049DBFC . 8D95 1CFDFFFF lea edx, dword ptr ss:[ebp-2E4]
0049DC02 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049DC05 . E8 DE420000 call 第25讲_?004A1EE8
0049DC0A . FFB5 1CFDFFFF push dword ptr ss:[ebp-2E4]
0049DC10 . FF35 805E5300 push dword ptr ds:[535E80]
0049DC16 . 68 1CEF4900 push 第25讲_?0049EF1C ; ASCII "yaosdsdex1"
0049DC1B . 8D85 20FDFFFF lea eax, dword ptr ss:[ebp-2E0]
0049DC21 . BA 03000000 mov edx, 3
0049DC26 . E8 4D79F6FF call 第25讲_?00405578
0049DC2B . 8B85 20FDFFFF mov eax, dword ptr ss:[ebp-2E0] ; ntdll.7C92E920
0049DC31 . 8D95 24FDFFFF lea edx, dword ptr ss:[ebp-2DC]
0049DC37 . E8 F4410000 call 第25讲_?004A1E30
0049DC3C . 8B85 24FDFFFF mov eax, dword ptr ss:[ebp-2DC] ; ntdll.7C93B030
0049DC42 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DC48 . E8 77EBFFFF call 第25讲_?0049C7C4
0049DC4D . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DC53 . 8D95 28FDFFFF lea edx, dword ptr ss:[ebp-2D8]
0049DC59 . E8 DEEBFFFF call 第25讲_?0049C83C
0049DC5E . 8B85 28FDFFFF mov eax, dword ptr ss:[ebp-2D8]
0049DC64 . 8D8D 2CFDFFFF lea ecx, dword ptr ss:[ebp-2D4]
0049DC6A . BA 02000000 mov edx, 2
0049DC6F . E8 286DF9FF call 第25讲_?0043499C
0049DC74 . 8B85 2CFDFFFF mov eax, dword ptr ss:[ebp-2D4] ; ntdll.7C93B02A
0049DC7A . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DC80 . E8 3FEBFFFF call 第25讲_?0049C7C4
0049DC85 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DC8B . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049DC8E . E8 A9EBFFFF call 第25讲_?0049C83C
0049DC93 . 8D8D 18FDFFFF lea ecx, dword ptr ss:[ebp-2E8]
0049DC99 . BA 02000000 mov edx, 2
0049DC9E . 8B03 mov eax, dword ptr ds:[ebx]
0049DCA0 . E8 F76CF9FF call 第25讲_?0043499C
0049DCA5 . 8B85 18FDFFFF mov eax, dword ptr ss:[ebp-2E8] ; ntdll.7C94273E
0049DCAB . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DCB1 . E8 0EEBFFFF call 第25讲_?0049C7C4
0049DCB6 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DCBC . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049DCBF . E8 78EBFFFF call 第25讲_?0049C83C
0049DCC4 . 8D95 00FDFFFF lea edx, dword ptr ss:[ebp-300]
0049DCCA . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049DCCD . E8 16420000 call 第25讲_?004A1EE8
0049DCD2 . FFB5 00FDFFFF push dword ptr ss:[ebp-300] ; ntdll.7C92E900
0049DCD8 . 8D95 F8FCFFFF lea edx, dword ptr ss:[ebp-308]
0049DCDE . A1 685E5300 mov eax, dword ptr ds:[535E68]
0049DCE3 . E8 64ADFAFF call 第25讲_?00448A4C
0049DCE8 . 8B85 F8FCFFFF mov eax, dword ptr ss:[ebp-308]
0049DCEE . 8D95 FCFCFFFF lea edx, dword ptr ss:[ebp-304]
0049DCF4 . E8 37410000 call 第25讲_?004A1E30
0049DCF9 . FFB5 FCFCFFFF push dword ptr ss:[ebp-304]
0049DCFF . 68 3CEF4900 push 第25讲_?0049EF3C ; ASCII "yaoadsesdx2"
0049DD04 . 8D85 04FDFFFF lea eax, dword ptr ss:[ebp-2FC]
0049DD0A . BA 03000000 mov edx, 3
0049DD0F . E8 6478F6FF call 第25讲_?00405578
0049DD14 . 8B85 04FDFFFF mov eax, dword ptr ss:[ebp-2FC] ; ntdll.7C939A00
0049DD1A . 8D95 08FDFFFF lea edx, dword ptr ss:[ebp-2F8]
0049DD20 . E8 0B410000 call 第25讲_?004A1E30
0049DD25 . 8B85 08FDFFFF mov eax, dword ptr ss:[ebp-2F8]
0049DD2B . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DD31 . E8 8EEAFFFF call 第25讲_?0049C7C4
0049DD36 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DD3C . 8D95 0CFDFFFF lea edx, dword ptr ss:[ebp-2F4]
0049DD42 . E8 F5EAFFFF call 第25讲_?0049C83C
0049DD47 . 8B85 0CFDFFFF mov eax, dword ptr ss:[ebp-2F4]
0049DD4D . 8D8D 10FDFFFF lea ecx, dword ptr ss:[ebp-2F0]
0049DD53 . BA 0E000000 mov edx, 0E
0049DD58 . E8 3F6CF9FF call 第25讲_?0043499C
0049DD5D . 8B85 10FDFFFF mov eax, dword ptr ss:[ebp-2F0]
0049DD63 . 8D8D 14FDFFFF lea ecx, dword ptr ss:[ebp-2EC]
0049DD69 . BA 04000000 mov edx, 4
0049DD6E . E8 456CF9FF call 第25讲_?004349B8
0049DD73 . 8B85 14FDFFFF mov eax, dword ptr ss:[ebp-2EC]
0049DD79 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DD7F . E8 40EAFFFF call 第25讲_?0049C7C4
0049DD84 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DD8A . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049DD8D . E8 AAEAFFFF call 第25讲_?0049C83C
0049DD92 . B8 885E5300 mov eax, 第25讲_?00535E88
0049DD97 . BA 50EF4900 mov edx, 第25讲_?0049EF50
0049DD9C . E8 9774F6FF call 第25讲_?00405238
0049DDA1 . 8D8D F0FCFFFF lea ecx, dword ptr ss:[ebp-310]
0049DDA7 . BA 06000000 mov edx, 6
0049DDAC . 8B03 mov eax, dword ptr ds:[ebx]
0049DDAE . E8 E96BF9FF call 第25讲_?0043499C
0049DDB3 . 8B85 F0FCFFFF mov eax, dword ptr ss:[ebp-310]
0049DDB9 . 8D8D F4FCFFFF lea ecx, dword ptr ss:[ebp-30C]
0049DDBF . BA 04000000 mov edx, 4
0049DDC4 . E8 EF6BF9FF call 第25讲_?004349B8
0049DDC9 . 8B85 F4FCFFFF mov eax, dword ptr ss:[ebp-30C]
0049DDCF . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DDD5 . E8 EAE9FFFF call 第25讲_?0049C7C4
0049DDDA . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DDE0 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049DDE3 . E8 54EAFFFF call 第25讲_?0049C83C
0049DDE8 . 8D95 DCFCFFFF lea edx, dword ptr ss:[ebp-324]
0049DDEE . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049DDF1 . E8 F2400000 call 第25讲_?004A1EE8
0049DDF6 . FFB5 DCFCFFFF push dword ptr ss:[ebp-324]
0049DDFC . FF35 805E5300 push dword ptr ds:[535E80]
0049DE02 . 68 1CEF4900 push 第25讲_?0049EF1C ; ASCII "yaosdsdex1"
0049DE07 . 8D85 E0FCFFFF lea eax, dword ptr ss:[ebp-320]
0049DE0D . BA 03000000 mov edx, 3
0049DE12 . E8 6177F6FF call 第25讲_?00405578
0049DE17 . 8B85 E0FCFFFF mov eax, dword ptr ss:[ebp-320] ; ntdll.7C939A48
0049DE1D . 8D95 E4FCFFFF lea edx, dword ptr ss:[ebp-31C]
0049DE23 . E8 08400000 call 第25讲_?004A1E30
0049DE28 . 8B85 E4FCFFFF mov eax, dword ptr ss:[ebp-31C]
0049DE2E . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DE34 . E8 8BE9FFFF call 第25讲_?0049C7C4
0049DE39 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DE3F . 8D95 E8FCFFFF lea edx, dword ptr ss:[ebp-318]
0049DE45 . E8 F2E9FFFF call 第25讲_?0049C83C
0049DE4A . 8B85 E8FCFFFF mov eax, dword ptr ss:[ebp-318]
0049DE50 . 8D8D ECFCFFFF lea ecx, dword ptr ss:[ebp-314]
0049DE56 . BA 02000000 mov edx, 2
0049DE5B . E8 3C6BF9FF call 第25讲_?0043499C
0049DE60 . 8B85 ECFCFFFF mov eax, dword ptr ss:[ebp-314]
0049DE66 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DE6C . E8 53E9FFFF call 第25讲_?0049C7C4
0049DE71 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DE77 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049DE7A . E8 BDE9FFFF call 第25讲_?0049C83C
0049DE7F . 8D8D D4FCFFFF lea ecx, dword ptr ss:[ebp-32C]
0049DE85 . BA 02000000 mov edx, 2
0049DE8A . 8B03 mov eax, dword ptr ds:[ebx]
0049DE8C . E8 0B6BF9FF call 第25讲_?0043499C
0049DE91 . 8B85 D4FCFFFF mov eax, dword ptr ss:[ebp-32C]
0049DE97 . 8D95 D8FCFFFF lea edx, dword ptr ss:[ebp-328]
0049DE9D . E8 8E3F0000 call 第25讲_?004A1E30
0049DEA2 . 8B85 D8FCFFFF mov eax, dword ptr ss:[ebp-328]
0049DEA8 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049DEAB . E8 803F0000 call 第25讲_?004A1E30
0049DEB0 . 8D95 C0FCFFFF lea edx, dword ptr ss:[ebp-340]
0049DEB6 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049DEB9 . E8 2A400000 call 第25讲_?004A1EE8
0049DEBE . FFB5 C0FCFFFF push dword ptr ss:[ebp-340]
0049DEC4 . FF35 805E5300 push dword ptr ds:[535E80]
0049DECA . 68 5CEF4900 push 第25讲_?0049EF5C ; ASCII "yaosdsdw3ex1"
0049DECF . 8D85 C4FCFFFF lea eax, dword ptr ss:[ebp-33C]
0049DED5 . BA 03000000 mov edx, 3
0049DEDA . E8 9976F6FF call 第25讲_?00405578
0049DEDF . 8B85 C4FCFFFF mov eax, dword ptr ss:[ebp-33C]
0049DEE5 . 8D95 C8FCFFFF lea edx, dword ptr ss:[ebp-338]
0049DEEB . E8 403F0000 call 第25讲_?004A1E30
0049DEF0 . 8B85 C8FCFFFF mov eax, dword ptr ss:[ebp-338]
0049DEF6 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DEFC . E8 C3E8FFFF call 第25讲_?0049C7C4
0049DF01 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DF07 . 8D95 CCFCFFFF lea edx, dword ptr ss:[ebp-334]
0049DF0D . E8 2AE9FFFF call 第25讲_?0049C83C
0049DF12 . 8B85 CCFCFFFF mov eax, dword ptr ss:[ebp-334]
0049DF18 . 8D8D D0FCFFFF lea ecx, dword ptr ss:[ebp-330]
0049DF1E . BA 02000000 mov edx, 2
0049DF23 . E8 746AF9FF call 第25讲_?0043499C
0049DF28 . 8B85 D0FCFFFF mov eax, dword ptr ss:[ebp-330]
0049DF2E . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DF34 . E8 8BE8FFFF call 第25讲_?0049C7C4
0049DF39 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DF3F . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049DF42 . E8 F5E8FFFF call 第25讲_?0049C83C
0049DF47 . 8D8D BCFCFFFF lea ecx, dword ptr ss:[ebp-344]
0049DF4D . BA 02000000 mov edx, 2
0049DF52 . 8B03 mov eax, dword ptr ds:[ebx]
0049DF54 . E8 436AF9FF call 第25讲_?0043499C
0049DF59 . 8B85 BCFCFFFF mov eax, dword ptr ss:[ebp-344] ; ntdll.7C93B02A
0049DF5F . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DF65 . E8 5AE8FFFF call 第25讲_?0049C7C4
0049DF6A . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DF70 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049DF73 . E8 C4E8FFFF call 第25讲_?0049C83C
0049DF78 . 8D95 A4FCFFFF lea edx, dword ptr ss:[ebp-35C]
0049DF7E . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049DF81 . E8 623F0000 call 第25讲_?004A1EE8
0049DF86 . FFB5 A4FCFFFF push dword ptr ss:[ebp-35C]
0049DF8C . 8D95 9CFCFFFF lea edx, dword ptr ss:[ebp-364]
0049DF92 . A1 685E5300 mov eax, dword ptr ds:[535E68]
0049DF97 . E8 B0AAFAFF call 第25讲_?00448A4C
0049DF9C . 8B85 9CFCFFFF mov eax, dword ptr ss:[ebp-364]
0049DFA2 . 8D95 A0FCFFFF lea edx, dword ptr ss:[ebp-360]
0049DFA8 . E8 833E0000 call 第25讲_?004A1E30
0049DFAD . FFB5 A0FCFFFF push dword ptr ss:[ebp-360]
0049DFB3 . 68 74EF4900 push 第25讲_?0049EF74 ; ASCII "yaoex2"
0049DFB8 . 8D85 A8FCFFFF lea eax, dword ptr ss:[ebp-358]
0049DFBE . BA 03000000 mov edx, 3
0049DFC3 . E8 B075F6FF call 第25讲_?00405578
0049DFC8 . 8B85 A8FCFFFF mov eax, dword ptr ss:[ebp-358] ; ntdll.7C9410AF
0049DFCE . 8D95 ACFCFFFF lea edx, dword ptr ss:[ebp-354]
0049DFD4 . E8 573E0000 call 第25讲_?004A1E30
0049DFD9 . 8B85 ACFCFFFF mov eax, dword ptr ss:[ebp-354]
0049DFDF . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049DFE5 . E8 DAE7FFFF call 第25讲_?0049C7C4
0049DFEA . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049DFF0 . 8D95 B0FCFFFF lea edx, dword ptr ss:[ebp-350]
0049DFF6 . E8 41E8FFFF call 第25讲_?0049C83C
0049DFFB . 8B85 B0FCFFFF mov eax, dword ptr ss:[ebp-350] ; ntdll.7C920000
0049E001 . 8D8D B4FCFFFF lea ecx, dword ptr ss:[ebp-34C]
0049E007 . BA 0E000000 mov edx, 0E
0049E00C . E8 8B69F9FF call 第25讲_?0043499C
0049E011 . 8B85 B4FCFFFF mov eax, dword ptr ss:[ebp-34C] ; ntdll.7C93B0A4
0049E017 . 8D8D B8FCFFFF lea ecx, dword ptr ss:[ebp-348]
0049E01D . BA 04000000 mov edx, 4
0049E022 . E8 9169F9FF call 第25讲_?004349B8
0049E027 . 8B85 B8FCFFFF mov eax, dword ptr ss:[ebp-348] ; ntdll.7C92DE9A
0049E02D . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E033 . E8 8CE7FFFF call 第25讲_?0049C7C4
0049E038 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E03E . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049E041 . E8 F6E7FFFF call 第25讲_?0049C83C
0049E046 . 8D8D 94FCFFFF lea ecx, dword ptr ss:[ebp-36C]
0049E04C . BA 06000000 mov edx, 6
0049E051 . 8B03 mov eax, dword ptr ds:[ebx]
0049E053 . E8 4469F9FF call 第25讲_?0043499C
0049E058 . 8B85 94FCFFFF mov eax, dword ptr ss:[ebp-36C]
0049E05E . 8D8D 98FCFFFF lea ecx, dword ptr ss:[ebp-368]
0049E064 . BA 04000000 mov edx, 4
0049E069 . E8 4A69F9FF call 第25讲_?004349B8
0049E06E . 8B85 98FCFFFF mov eax, dword ptr ss:[ebp-368]
0049E074 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E07A . E8 45E7FFFF call 第25讲_?0049C7C4
0049E07F . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E085 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049E088 . E8 AFE7FFFF call 第25讲_?0049C83C
0049E08D . 8B45 F0 mov eax, dword ptr ss:[ebp-10]
0049E090 . 8B55 EC mov edx, dword ptr ss:[ebp-14]
0049E093 . E8 7475F6FF call 第25讲_?0040560C
0049E098 . 74 0F je short 第25讲_?0049E0A9
0049E09A . B8 885E5300 mov eax, 第25讲_?00535E88
0049E09F . BA 84EF4900 mov edx, 第25讲_?0049EF84
0049E0A4 . E8 8F71F6FF call 第25讲_?00405238
0049E0A9 > 8D95 80FCFFFF lea edx, dword ptr ss:[ebp-380]
0049E0AF . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049E0B2 . E8 313E0000 call 第25讲_?004A1EE8
0049E0B7 . FFB5 80FCFFFF push dword ptr ss:[ebp-380]
0049E0BD . FF35 805E5300 push dword ptr ds:[535E80]
0049E0C3 . 68 F8EE4900 push 第25讲_?0049EEF8 ; ASCII "yaoex1"
0049E0C8 . 8D85 84FCFFFF lea eax, dword ptr ss:[ebp-37C]
0049E0CE . BA 03000000 mov edx, 3
0049E0D3 . E8 A074F6FF call 第25讲_?00405578
0049E0D8 . 8B85 84FCFFFF mov eax, dword ptr ss:[ebp-37C]
0049E0DE . 8D95 88FCFFFF lea edx, dword ptr ss:[ebp-378]
0049E0E4 . E8 473D0000 call 第25讲_?004A1E30
0049E0E9 . 8B85 88FCFFFF mov eax, dword ptr ss:[ebp-378]
0049E0EF . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E0F5 . E8 CAE6FFFF call 第25讲_?0049C7C4
0049E0FA . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E100 . 8D95 8CFCFFFF lea edx, dword ptr ss:[ebp-374]
0049E106 . E8 31E7FFFF call 第25讲_?0049C83C
0049E10B . 8B85 8CFCFFFF mov eax, dword ptr ss:[ebp-374]
0049E111 . 8D8D 90FCFFFF lea ecx, dword ptr ss:[ebp-370]
0049E117 . BA 02000000 mov edx, 2
0049E11C . E8 7B68F9FF call 第25讲_?0043499C
0049E121 . 8B85 90FCFFFF mov eax, dword ptr ss:[ebp-370]
0049E127 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E12D . E8 92E6FFFF call 第25讲_?0049C7C4
0049E132 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E138 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049E13B . E8 FCE6FFFF call 第25讲_?0049C83C
0049E140 . 8D8D 7CFCFFFF lea ecx, dword ptr ss:[ebp-384]
0049E146 . BA 02000000 mov edx, 2
0049E14B . 8B03 mov eax, dword ptr ds:[ebx]
0049E14D . E8 4A68F9FF call 第25讲_?0043499C
0049E152 . 8B85 7CFCFFFF mov eax, dword ptr ss:[ebp-384]
0049E158 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E15E . E8 61E6FFFF call 第25讲_?0049C7C4
0049E163 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E169 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049E16C . E8 CBE6FFFF call 第25讲_?0049C83C
0049E171 . 8B45 F0 mov eax, dword ptr ss:[ebp-10]
0049E174 . 8B55 EC mov edx, dword ptr ss:[ebp-14]
0049E177 . E8 9074F6FF call 第25讲_?0040560C
0049E17C . 8D95 68FCFFFF lea edx, dword ptr ss:[ebp-398]
0049E182 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049E185 . E8 5E3D0000 call 第25讲_?004A1EE8
0049E18A . FFB5 68FCFFFF push dword ptr ss:[ebp-398]
0049E190 . FF35 805E5300 push dword ptr ds:[535E80]
0049E196 . 68 08EF4900 push 第25讲_?0049EF08 ; ASCII "yasdsdoex1"
0049E19B . 8D85 6CFCFFFF lea eax, dword ptr ss:[ebp-394]
0049E1A1 . BA 03000000 mov edx, 3
0049E1A6 . E8 CD73F6FF call 第25讲_?00405578
0049E1AB . 8B85 6CFCFFFF mov eax, dword ptr ss:[ebp-394]
0049E1B1 . 8D95 70FCFFFF lea edx, dword ptr ss:[ebp-390]
0049E1B7 . E8 743C0000 call 第25讲_?004A1E30
0049E1BC . 8B85 70FCFFFF mov eax, dword ptr ss:[ebp-390]
0049E1C2 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E1C8 . E8 F7E5FFFF call 第25讲_?0049C7C4
0049E1CD . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E1D3 . 8D95 74FCFFFF lea edx, dword ptr ss:[ebp-38C]
0049E1D9 . E8 5EE6FFFF call 第25讲_?0049C83C
0049E1DE . 8B85 74FCFFFF mov eax, dword ptr ss:[ebp-38C]
0049E1E4 . 8D8D 78FCFFFF lea ecx, dword ptr ss:[ebp-388]
0049E1EA . BA 02000000 mov edx, 2
0049E1EF . E8 A867F9FF call 第25讲_?0043499C
0049E1F4 . 8B85 78FCFFFF mov eax, dword ptr ss:[ebp-388]
0049E1FA . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E200 . E8 BFE5FFFF call 第25讲_?0049C7C4
0049E205 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E20B . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049E20E . E8 29E6FFFF call 第25讲_?0049C83C
0049E213 . 8D8D 60FCFFFF lea ecx, dword ptr ss:[ebp-3A0]
0049E219 . BA 02000000 mov edx, 2
0049E21E . 8B03 mov eax, dword ptr ds:[ebx]
0049E220 . E8 7767F9FF call 第25讲_?0043499C
0049E225 . 8B85 60FCFFFF mov eax, dword ptr ss:[ebp-3A0]
0049E22B . 8D95 64FCFFFF lea edx, dword ptr ss:[ebp-39C]
0049E231 . E8 FA3B0000 call 第25讲_?004A1E30
0049E236 . 8B85 64FCFFFF mov eax, dword ptr ss:[ebp-39C]
0049E23C . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049E23F . E8 EC3B0000 call 第25讲_?004A1E30
0049E244 . B8 845E5300 mov eax, 第25讲_?00535E84
0049E249 . BA 90EF4900 mov edx, 第25讲_?0049EF90
0049E24E . E8 E56FF6FF call 第25讲_?00405238
0049E253 . 8D95 4CFCFFFF lea edx, dword ptr ss:[ebp-3B4]
0049E259 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049E25C . E8 873C0000 call 第25讲_?004A1EE8
0049E261 . FFB5 4CFCFFFF push dword ptr ss:[ebp-3B4]
0049E267 . FF35 805E5300 push dword ptr ds:[535E80]
0049E26D . 68 1CEF4900 push 第25讲_?0049EF1C ; ASCII "yaosdsdex1"
0049E272 . 8D85 50FCFFFF lea eax, dword ptr ss:[ebp-3B0]
0049E278 . BA 03000000 mov edx, 3
0049E27D . E8 F672F6FF call 第25讲_?00405578
0049E282 . 8B85 50FCFFFF mov eax, dword ptr ss:[ebp-3B0]
0049E288 . 8D95 54FCFFFF lea edx, dword ptr ss:[ebp-3AC]
0049E28E . E8 9D3B0000 call 第25讲_?004A1E30
0049E293 . 8B85 54FCFFFF mov eax, dword ptr ss:[ebp-3AC]
0049E299 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E29F . E8 20E5FFFF call 第25讲_?0049C7C4
0049E2A4 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E2AA . 8D95 58FCFFFF lea edx, dword ptr ss:[ebp-3A8]
0049E2B0 . E8 87E5FFFF call 第25讲_?0049C83C
0049E2B5 . 8B85 58FCFFFF mov eax, dword ptr ss:[ebp-3A8]
0049E2BB . 8D8D 5CFCFFFF lea ecx, dword ptr ss:[ebp-3A4]
0049E2C1 . BA 02000000 mov edx, 2
0049E2C6 . E8 D166F9FF call 第25讲_?0043499C
0049E2CB . 8B85 5CFCFFFF mov eax, dword ptr ss:[ebp-3A4]
0049E2D1 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E2D7 . E8 E8E4FFFF call 第25讲_?0049C7C4
0049E2DC . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E2E2 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049E2E5 . E8 52E5FFFF call 第25讲_?0049C83C
0049E2EA . 8D8D 48FCFFFF lea ecx, dword ptr ss:[ebp-3B8]
0049E2F0 . BA 02000000 mov edx, 2
0049E2F5 . 8B03 mov eax, dword ptr ds:[ebx]
0049E2F7 . E8 A066F9FF call 第25讲_?0043499C
0049E2FC . 8B85 48FCFFFF mov eax, dword ptr ss:[ebp-3B8]
0049E302 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E308 . E8 B7E4FFFF call 第25讲_?0049C7C4
0049E30D . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E313 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049E316 . E8 21E5FFFF call 第25讲_?0049C83C
0049E31B . 8D95 34FCFFFF lea edx, dword ptr ss:[ebp-3CC]
0049E321 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049E324 . E8 BF3B0000 call 第25讲_?004A1EE8
0049E329 . FFB5 34FCFFFF push dword ptr ss:[ebp-3CC]
0049E32F . 68 9CEF4900 push 第25讲_?0049EF9C ; ASCII "ww"
0049E334 . FF35 905E5300 push dword ptr ds:[535E90]
0049E33A . 68 F8EE4900 push 第25讲_?0049EEF8 ; ASCII "yaoex1"
0049E33F . 8D85 38FCFFFF lea eax, dword ptr ss:[ebp-3C8]
0049E345 . BA 04000000 mov edx, 4
0049E34A . E8 2972F6FF call 第25讲_?00405578
0049E34F . 8B85 38FCFFFF mov eax, dword ptr ss:[ebp-3C8]
0049E355 . 8D95 3CFCFFFF lea edx, dword ptr ss:[ebp-3C4]
0049E35B . E8 D03A0000 call 第25讲_?004A1E30
0049E360 . 8B85 3CFCFFFF mov eax, dword ptr ss:[ebp-3C4]
0049E366 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E36C . E8 53E4FFFF call 第25讲_?0049C7C4
0049E371 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E377 . 8D95 40FCFFFF lea edx, dword ptr ss:[ebp-3C0]
0049E37D . E8 BAE4FFFF call 第25讲_?0049C83C
0049E382 . 8B85 40FCFFFF mov eax, dword ptr ss:[ebp-3C0]
0049E388 . 8D8D 44FCFFFF lea ecx, dword ptr ss:[ebp-3BC]
0049E38E . BA 02000000 mov edx, 2
0049E393 . E8 0466F9FF call 第25讲_?0043499C
0049E398 . 8B85 44FCFFFF mov eax, dword ptr ss:[ebp-3BC]
0049E39E . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E3A4 . E8 1BE4FFFF call 第25讲_?0049C7C4
0049E3A9 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E3AF . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049E3B2 . E8 85E4FFFF call 第25讲_?0049C83C
0049E3B7 . 8D8D 30FCFFFF lea ecx, dword ptr ss:[ebp-3D0]
0049E3BD . BA 02000000 mov edx, 2
0049E3C2 . 8B03 mov eax, dword ptr ds:[ebx]
0049E3C4 . E8 D365F9FF call 第25讲_?0043499C
0049E3C9 . 8B85 30FCFFFF mov eax, dword ptr ss:[ebp-3D0]
0049E3CF . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E3D5 . E8 EAE3FFFF call 第25讲_?0049C7C4
0049E3DA . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E3E0 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049E3E3 . E8 54E4FFFF call 第25讲_?0049C83C
0049E3E8 . 8B45 F0 mov eax, dword ptr ss:[ebp-10]
0049E3EB . 8B55 EC mov edx, dword ptr ss:[ebp-14]
0049E3EE . E8 1972F6FF call 第25讲_?0040560C
0049E3F3 . 74 0F je short 第25讲_?0049E404
0049E3F5 . B8 845E5300 mov eax, 第25讲_?00535E84
0049E3FA . BA 84EF4900 mov edx, 第25讲_?0049EF84
0049E3FF . E8 346EF6FF call 第25讲_?00405238
0049E404 > 8D95 10FCFFFF lea edx, dword ptr ss:[ebp-3F0]
0049E40A . A1 B0055300 mov eax, dword ptr ds:[5305B0]
0049E40F . 8B00 mov eax, dword ptr ds:[eax]
0049E411 . E8 D23A0000 call 第25讲_?004A1EE8
0049E416 . 8D85 10FCFFFF lea eax, dword ptr ss:[ebp-3F0]
0049E41C . 8B55 D8 mov edx, dword ptr ss:[ebp-28] ; ntdll.7C930228
0049E41F . E8 8C70F6FF call 第25讲_?004054B0
0049E424 . 8B85 10FCFFFF mov eax, dword ptr ss:[ebp-3F0]
0049E42A . 8D95 14FCFFFF lea edx, dword ptr ss:[ebp-3EC]
0049E430 . E8 ABB1F6FF call 第25讲_?004095E0
0049E435 . 8B85 14FCFFFF mov eax, dword ptr ss:[ebp-3EC]
0049E43B . 8D95 18FCFFFF lea edx, dword ptr ss:[ebp-3E8]
0049E441 . E8 EA390000 call 第25讲_?004A1E30
0049E446 . 8B85 18FCFFFF mov eax, dword ptr ss:[ebp-3E8]
0049E44C . 8D95 1CFCFFFF lea edx, dword ptr ss:[ebp-3E4]
0049E452 . E8 913A0000 call 第25讲_?004A1EE8
0049E457 . FFB5 1CFCFFFF push dword ptr ss:[ebp-3E4]
0049E45D . 68 9CEF4900 push 第25讲_?0049EF9C ; ASCII "ww"
0049E462 . FF35 905E5300 push dword ptr ds:[535E90]
0049E468 . 68 F8EE4900 push 第25讲_?0049EEF8 ; ASCII "yaoex1"
0049E46D . 8D85 20FCFFFF lea eax, dword ptr ss:[ebp-3E0]
0049E473 . BA 04000000 mov edx, 4
0049E478 . E8 FB70F6FF call 第25讲_?00405578
0049E47D . 8B85 20FCFFFF mov eax, dword ptr ss:[ebp-3E0]
0049E483 . 8D95 24FCFFFF lea edx, dword ptr ss:[ebp-3DC]
0049E489 . E8 A2390000 call 第25讲_?004A1E30
0049E48E . 8B85 24FCFFFF mov eax, dword ptr ss:[ebp-3DC]
0049E494 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E49A . E8 25E3FFFF call 第25讲_?0049C7C4
0049E49F . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E4A5 . 8D95 28FCFFFF lea edx, dword ptr ss:[ebp-3D8]
0049E4AB . E8 8CE3FFFF call 第25讲_?0049C83C
0049E4B0 . 8B85 28FCFFFF mov eax, dword ptr ss:[ebp-3D8]
0049E4B6 . 8D8D 2CFCFFFF lea ecx, dword ptr ss:[ebp-3D4]
0049E4BC . BA 02000000 mov edx, 2
0049E4C1 . E8 D664F9FF call 第25讲_?0043499C
0049E4C6 . 8B85 2CFCFFFF mov eax, dword ptr ss:[ebp-3D4] ; kernel32.BaseProcessInitPostImport
0049E4CC . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E4D2 . E8 EDE2FFFF call 第25讲_?0049C7C4
0049E4D7 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E4DD . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049E4E0 . E8 57E3FFFF call 第25讲_?0049C83C
0049E4E5 . 8D8D 0CFCFFFF lea ecx, dword ptr ss:[ebp-3F4]
0049E4EB . BA 02000000 mov edx, 2
0049E4F0 . 8B03 mov eax, dword ptr ds:[ebx]
0049E4F2 . E8 A564F9FF call 第25讲_?0043499C
0049E4F7 . 8B85 0CFCFFFF mov eax, dword ptr ss:[ebp-3F4]
0049E4FD . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E503 . E8 BCE2FFFF call 第25讲_?0049C7C4
0049E508 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E50E . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049E511 . E8 26E3FFFF call 第25讲_?0049C83C
0049E516 . 8B45 F0 mov eax, dword ptr ss:[ebp-10]
0049E519 . 8B55 EC mov edx, dword ptr ss:[ebp-14]
0049E51C . E8 EB70F6FF call 第25讲_?0040560C
0049E521 . 74 0F je short 第25讲_?0049E532
0049E523 . B8 845E5300 mov eax, 第25讲_?00535E84
0049E528 . BA 84EF4900 mov edx, 第25讲_?0049EF84
0049E52D . E8 066DF6FF call 第25讲_?00405238
0049E532 > A1 34065300 mov eax, dword ptr ds:[530634]
0049E537 . 8B00 mov eax, dword ptr ds:[eax]
0049E539 . BA 30EF4900 mov edx, 第25讲_?0049EF30
0049E53E . E8 C970F6FF call 第25讲_?0040560C
0049E543 . 74 58 je short 第25讲_?0049E59D
0049E545 . 8D95 08FCFFFF lea edx, dword ptr ss:[ebp-3F8]
0049E54B . 8B86 60030000 mov eax, dword ptr ds:[esi+360]
0049E551 . E8 F6A4FAFF call 第25讲_?00448A4C
0049E556 . 8B95 08FCFFFF mov edx, dword ptr ss:[ebp-3F8] ; 第25讲_?00400100
0049E55C . A1 88025300 mov eax, dword ptr ds:[530288]
0049E561 . 8B00 mov eax, dword ptr ds:[eax]
0049E563 . E8 5872F6FF call 第25讲_?004057C0
0049E568 . 85C0 test eax, eax
0049E56A . 0F8E FF070000 jle 第25讲_?0049ED6F
0049E570 . 8D85 04FCFFFF lea eax, dword ptr ss:[ebp-3FC]
0049E576 . E8 15130000 call 第25讲_?0049F890
0049E57B . 8B95 04FCFFFF mov edx, dword ptr ss:[ebp-3FC] ; ntdll.7C9A0028
0049E581 . A1 88025300 mov eax, dword ptr ds:[530288]
0049E586 . 8B00 mov eax, dword ptr ds:[eax]
0049E588 . E8 3372F6FF call 第25讲_?004057C0
0049E58D . 85C0 test eax, eax
0049E58F . 7F 0C jg short 第25讲_?0049E59D
0049E591 . A1 9C055300 mov eax, dword ptr ds:[53059C]
0049E596 . 8B00 mov eax, dword ptr ds:[eax]
0049E598 . E8 1743FCFF call 第25讲_?004628B4
0049E59D > 8D95 E0FBFFFF lea edx, dword ptr ss:[ebp-420]
0049E5A3 . A1 B0055300 mov eax, dword ptr ds:[5305B0]
0049E5A8 . 8B00 mov eax, dword ptr ds:[eax]
0049E5AA . E8 39390000 call 第25讲_?004A1EE8
0049E5AF . FFB5 E0FBFFFF push dword ptr ss:[ebp-420]
0049E5B5 . FF75 D4 push dword ptr ss:[ebp-2C] ; kernel32.7C817077
0049E5B8 . FF75 D0 push dword ptr ss:[ebp-30]
0049E5BB . 8D85 E4FBFFFF lea eax, dword ptr ss:[ebp-41C]
0049E5C1 . BA 03000000 mov edx, 3
0049E5C6 . E8 AD6FF6FF call 第25讲_?00405578
0049E5CB . 8B85 E4FBFFFF mov eax, dword ptr ss:[ebp-41C]
0049E5D1 . 8D95 E8FBFFFF lea edx, dword ptr ss:[ebp-418]
0049E5D7 . E8 04B0F6FF call 第25讲_?004095E0
0049E5DC . 8B85 E8FBFFFF mov eax, dword ptr ss:[ebp-418]
0049E5E2 . 8D95 ECFBFFFF lea edx, dword ptr ss:[ebp-414]
0049E5E8 . E8 43380000 call 第25讲_?004A1E30
0049E5ED . 8B85 ECFBFFFF mov eax, dword ptr ss:[ebp-414] ; ntdll.7C941EAC
0049E5F3 . 8D95 F0FBFFFF lea edx, dword ptr ss:[ebp-410]
0049E5F9 . E8 EA380000 call 第25讲_?004A1EE8
0049E5FE . FFB5 F0FBFFFF push dword ptr ss:[ebp-410]
0049E604 . 68 9CEF4900 push 第25讲_?0049EF9C ; ASCII "ww"
0049E609 . FF35 905E5300 push dword ptr ds:[535E90]
0049E60F . 68 F8EE4900 push 第25讲_?0049EEF8 ; ASCII "yaoex1"
0049E614 . 8D85 F4FBFFFF lea eax, dword ptr ss:[ebp-40C]
0049E61A . BA 04000000 mov edx, 4
0049E61F . E8 546FF6FF call 第25讲_?00405578
0049E624 . 8B85 F4FBFFFF mov eax, dword ptr ss:[ebp-40C]
0049E62A . 8D95 F8FBFFFF lea edx, dword ptr ss:[ebp-408]
0049E630 . E8 FB370000 call 第25讲_?004A1E30
0049E635 . 8B85 F8FBFFFF mov eax, dword ptr ss:[ebp-408] ; ntdll.7C934868
0049E63B . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E641 . E8 7EE1FFFF call 第25讲_?0049C7C4
0049E646 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E64C . 8D95 FCFBFFFF lea edx, dword ptr ss:[ebp-404]
0049E652 . E8 E5E1FFFF call 第25讲_?0049C83C
0049E657 . 8B85 FCFBFFFF mov eax, dword ptr ss:[ebp-404] ; ntdll.7C934679
0049E65D . 8D8D 00FCFFFF lea ecx, dword ptr ss:[ebp-400]
0049E663 . BA 02000000 mov edx, 2
0049E668 . E8 2F63F9FF call 第25讲_?0043499C
0049E66D . 8B85 00FCFFFF mov eax, dword ptr ss:[ebp-400]
0049E673 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E679 . E8 46E1FFFF call 第25讲_?0049C7C4
0049E67E . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E684 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049E687 . E8 B0E1FFFF call 第25讲_?0049C83C
0049E68C . 8D8D DCFBFFFF lea ecx, dword ptr ss:[ebp-424]
0049E692 . BA 02000000 mov edx, 2
0049E697 . 8B03 mov eax, dword ptr ds:[ebx]
0049E699 . E8 FE62F9FF call 第25讲_?0043499C
0049E69E . 8B85 DCFBFFFF mov eax, dword ptr ss:[ebp-424] ; ntdll.7C941E90
0049E6A4 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E6AA . E8 15E1FFFF call 第25讲_?0049C7C4
0049E6AF . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E6B5 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049E6B8 . E8 7FE1FFFF call 第25讲_?0049C83C
0049E6BD . 8B45 F0 mov eax, dword ptr ss:[ebp-10]
0049E6C0 . 8B55 EC mov edx, dword ptr ss:[ebp-14]
0049E6C3 . E8 446FF6FF call 第25讲_?0040560C
0049E6C8 . 74 0F je short 第25讲_?0049E6D9
0049E6CA . B8 845E5300 mov eax, 第25讲_?00535E84
0049E6CF . BA 84EF4900 mov edx, 第25讲_?0049EF84
0049E6D4 . E8 5F6BF6FF call 第25讲_?00405238
0049E6D9 > 8D95 BCFBFFFF lea edx, dword ptr ss:[ebp-444]
0049E6DF . A1 B0055300 mov eax, dword ptr ds:[5305B0]
0049E6E4 . 8B00 mov eax, dword ptr ds:[eax]
0049E6E6 . E8 FD370000 call 第25讲_?004A1EE8
0049E6EB . 8D85 BCFBFFFF lea eax, dword ptr ss:[ebp-444]
0049E6F1 . 50 push eax
0049E6F2 . 8D95 B8FBFFFF lea edx, dword ptr ss:[ebp-448]
0049E6F8 . 8B86 60030000 mov eax, dword ptr ds:[esi+360]
0049E6FE . E8 49A3FAFF call 第25讲_?00448A4C
0049E703 . 8B95 B8FBFFFF mov edx, dword ptr ss:[ebp-448]
0049E709 . 58 pop eax ; kernel32.7C817077
0049E70A . E8 A16DF6FF call 第25讲_?004054B0
0049E70F . 8B85 BCFBFFFF mov eax, dword ptr ss:[ebp-444]
0049E715 . 8D95 C0FBFFFF lea edx, dword ptr ss:[ebp-440]
0049E71B . E8 C0AEF6FF call 第25讲_?004095E0
0049E720 . 8B85 C0FBFFFF mov eax, dword ptr ss:[ebp-440]
0049E726 . 8D95 C4FBFFFF lea edx, dword ptr ss:[ebp-43C]
0049E72C . E8 FF360000 call 第25讲_?004A1E30
0049E731 . 8B85 C4FBFFFF mov eax, dword ptr ss:[ebp-43C]
0049E737 . 8D95 C8FBFFFF lea edx, dword ptr ss:[ebp-438]
0049E73D . E8 A6370000 call 第25讲_?004A1EE8
0049E742 . FFB5 C8FBFFFF push dword ptr ss:[ebp-438]
0049E748 . 68 9CEF4900 push 第25讲_?0049EF9C ; ASCII "ww"
0049E74D . FF35 905E5300 push dword ptr ds:[535E90]
0049E753 . 68 F8EE4900 push 第25讲_?0049EEF8 ; ASCII "yaoex1"
0049E758 . 8D85 CCFBFFFF lea eax, dword ptr ss:[ebp-434]
0049E75E . BA 04000000 mov edx, 4
0049E763 . E8 106EF6FF call 第25讲_?00405578
0049E768 . 8B85 CCFBFFFF mov eax, dword ptr ss:[ebp-434]
0049E76E . 8D95 D0FBFFFF lea edx, dword ptr ss:[ebp-430]
0049E774 . E8 B7360000 call 第25讲_?004A1E30
0049E779 . 8B85 D0FBFFFF mov eax, dword ptr ss:[ebp-430]
0049E77F . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E785 . E8 3AE0FFFF call 第25讲_?0049C7C4
0049E78A . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E790 . 8D95 D4FBFFFF lea edx, dword ptr ss:[ebp-42C]
0049E796 . E8 A1E0FFFF call 第25讲_?0049C83C
0049E79B . 8B85 D4FBFFFF mov eax, dword ptr ss:[ebp-42C] ; ntdll.7C941FE0
0049E7A1 . 8D8D D8FBFFFF lea ecx, dword ptr ss:[ebp-428]
0049E7A7 . BA 02000000 mov edx, 2
0049E7AC . E8 EB61F9FF call 第25讲_?0043499C
0049E7B1 . 8B85 D8FBFFFF mov eax, dword ptr ss:[ebp-428]
0049E7B7 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E7BD . E8 02E0FFFF call 第25讲_?0049C7C4
0049E7C2 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E7C8 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049E7CB . E8 6CE0FFFF call 第25讲_?0049C83C
0049E7D0 . 8D8D B4FBFFFF lea ecx, dword ptr ss:[ebp-44C]
0049E7D6 . BA 02000000 mov edx, 2
0049E7DB . 8B03 mov eax, dword ptr ds:[ebx]
0049E7DD . E8 BA61F9FF call 第25讲_?0043499C
0049E7E2 . 8B85 B4FBFFFF mov eax, dword ptr ss:[ebp-44C]
0049E7E8 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E7EE . E8 D1DFFFFF call 第25讲_?0049C7C4
0049E7F3 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E7F9 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049E7FC . E8 3BE0FFFF call 第25讲_?0049C83C
0049E801 . 8B45 F0 mov eax, dword ptr ss:[ebp-10]
0049E804 . 8B55 EC mov edx, dword ptr ss:[ebp-14]
0049E807 . E8 006EF6FF call 第25讲_?0040560C
0049E80C . 74 0F je short 第25讲_?0049E81D
0049E80E . B8 845E5300 mov eax, 第25讲_?00535E84
0049E813 . BA 84EF4900 mov edx, 第25讲_?0049EF84
0049E818 . E8 1B6AF6FF call 第25讲_?00405238
0049E81D > 8D95 9CFBFFFF lea edx, dword ptr ss:[ebp-464]
0049E823 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049E826 . E8 BD360000 call 第25讲_?004A1EE8
0049E82B . FFB5 9CFBFFFF push dword ptr ss:[ebp-464]
0049E831 . 8D95 94FBFFFF lea edx, dword ptr ss:[ebp-46C]
0049E837 . A1 685E5300 mov eax, dword ptr ds:[535E68]
0049E83C . E8 0BA2FAFF call 第25讲_?00448A4C
0049E841 . 8B85 94FBFFFF mov eax, dword ptr ss:[ebp-46C]
0049E847 . 8D95 98FBFFFF lea edx, dword ptr ss:[ebp-468]
0049E84D . E8 DE350000 call 第25讲_?004A1E30
0049E852 . FFB5 98FBFFFF push dword ptr ss:[ebp-468]
0049E858 . 68 3CEF4900 push 第25讲_?0049EF3C ; ASCII "yaoadsesdx2"
0049E85D . 8D85 A0FBFFFF lea eax, dword ptr ss:[ebp-460]
0049E863 . BA 03000000 mov edx, 3
0049E868 . E8 0B6DF6FF call 第25讲_?00405578
0049E86D . 8B85 A0FBFFFF mov eax, dword ptr ss:[ebp-460]
0049E873 . 8D95 A4FBFFFF lea edx, dword ptr ss:[ebp-45C]
0049E879 . E8 B2350000 call 第25讲_?004A1E30
0049E87E . 8B85 A4FBFFFF mov eax, dword ptr ss:[ebp-45C]
0049E884 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E88A . E8 35DFFFFF call 第25讲_?0049C7C4
0049E88F . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E895 . 8D95 A8FBFFFF lea edx, dword ptr ss:[ebp-458]
0049E89B . E8 9CDFFFFF call 第25讲_?0049C83C
0049E8A0 . 8B85 A8FBFFFF mov eax, dword ptr ss:[ebp-458] ; ntdll.7C94200C
0049E8A6 . 8D8D ACFBFFFF lea ecx, dword ptr ss:[ebp-454]
0049E8AC . BA 0E000000 mov edx, 0E
0049E8B1 . E8 E660F9FF call 第25讲_?0043499C
0049E8B6 . 8B85 ACFBFFFF mov eax, dword ptr ss:[ebp-454]
0049E8BC . 8D8D B0FBFFFF lea ecx, dword ptr ss:[ebp-450]
0049E8C2 . BA 04000000 mov edx, 4
0049E8C7 . E8 EC60F9FF call 第25讲_?004349B8
0049E8CC . 8B85 B0FBFFFF mov eax, dword ptr ss:[ebp-450]
0049E8D2 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E8D8 . E8 E7DEFFFF call 第25讲_?0049C7C4
0049E8DD . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E8E3 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049E8E6 . E8 51DFFFFF call 第25讲_?0049C83C
0049E8EB . 8D8D 8CFBFFFF lea ecx, dword ptr ss:[ebp-474]
0049E8F1 . BA 06000000 mov edx, 6
0049E8F6 . 8B03 mov eax, dword ptr ds:[ebx]
0049E8F8 . E8 9F60F9FF call 第25讲_?0043499C
0049E8FD . 8B85 8CFBFFFF mov eax, dword ptr ss:[ebp-474]
0049E903 . 8D8D 90FBFFFF lea ecx, dword ptr ss:[ebp-470]
0049E909 . BA 04000000 mov edx, 4
0049E90E . E8 A560F9FF call 第25讲_?004349B8
0049E913 . 8B85 90FBFFFF mov eax, dword ptr ss:[ebp-470]
0049E919 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E91F . E8 A0DEFFFF call 第25讲_?0049C7C4
0049E924 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E92A . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049E92D . E8 0ADFFFFF call 第25讲_?0049C83C
0049E932 . 8D95 78FBFFFF lea edx, dword ptr ss:[ebp-488]
0049E938 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049E93B . E8 A8350000 call 第25讲_?004A1EE8
0049E940 . FFB5 78FBFFFF push dword ptr ss:[ebp-488]
0049E946 . FF35 805E5300 push dword ptr ds:[535E80]
0049E94C . 68 1CEF4900 push 第25讲_?0049EF1C ; ASCII "yaosdsdex1"
0049E951 . 8D85 7CFBFFFF lea eax, dword ptr ss:[ebp-484]
0049E957 . BA 03000000 mov edx, 3
0049E95C . E8 176CF6FF call 第25讲_?00405578
0049E961 . 8B85 7CFBFFFF mov eax, dword ptr ss:[ebp-484]
0049E967 . 8D95 80FBFFFF lea edx, dword ptr ss:[ebp-480]
0049E96D . E8 BE340000 call 第25讲_?004A1E30
0049E972 . 8B85 80FBFFFF mov eax, dword ptr ss:[ebp-480]
0049E978 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E97E . E8 41DEFFFF call 第25讲_?0049C7C4
0049E983 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E989 . 8D95 84FBFFFF lea edx, dword ptr ss:[ebp-47C]
0049E98F . E8 A8DEFFFF call 第25讲_?0049C83C
0049E994 . 8B85 84FBFFFF mov eax, dword ptr ss:[ebp-47C]
0049E99A . 8D8D 88FBFFFF lea ecx, dword ptr ss:[ebp-478]
0049E9A0 . BA 02000000 mov edx, 2
0049E9A5 . E8 F25FF9FF call 第25讲_?0043499C
0049E9AA . 8B85 88FBFFFF mov eax, dword ptr ss:[ebp-478]
0049E9B0 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049E9B6 . E8 09DEFFFF call 第25讲_?0049C7C4
0049E9BB . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049E9C1 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049E9C4 . E8 73DEFFFF call 第25讲_?0049C83C
0049E9C9 . 8D8D 70FBFFFF lea ecx, dword ptr ss:[ebp-490]
0049E9CF . BA 02000000 mov edx, 2
0049E9D4 . 8B03 mov eax, dword ptr ds:[ebx]
0049E9D6 . E8 C15FF9FF call 第25讲_?0043499C
0049E9DB . 8B85 70FBFFFF mov eax, dword ptr ss:[ebp-490]
0049E9E1 . 8D95 74FBFFFF lea edx, dword ptr ss:[ebp-48C]
0049E9E7 . E8 44340000 call 第25讲_?004A1E30
0049E9EC . 8B85 74FBFFFF mov eax, dword ptr ss:[ebp-48C]
0049E9F2 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049E9F5 . E8 36340000 call 第25讲_?004A1E30
0049E9FA . 8D95 5CFBFFFF lea edx, dword ptr ss:[ebp-4A4]
0049EA00 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049EA03 . E8 E0340000 call 第25讲_?004A1EE8
0049EA08 . FFB5 5CFBFFFF push dword ptr ss:[ebp-4A4]
0049EA0E . FF35 805E5300 push dword ptr ds:[535E80]
0049EA14 . 68 5CEF4900 push 第25讲_?0049EF5C ; ASCII "yaosdsdw3ex1"
0049EA19 . 8D85 60FBFFFF lea eax, dword ptr ss:[ebp-4A0]
0049EA1F . BA 03000000 mov edx, 3
0049EA24 . E8 4F6BF6FF call 第25讲_?00405578
0049EA29 . 8B85 60FBFFFF mov eax, dword ptr ss:[ebp-4A0]
0049EA2F . 8D95 64FBFFFF lea edx, dword ptr ss:[ebp-49C]
0049EA35 . E8 F6330000 call 第25讲_?004A1E30
0049EA3A . 8B85 64FBFFFF mov eax, dword ptr ss:[ebp-49C]
0049EA40 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049EA46 . E8 79DDFFFF call 第25讲_?0049C7C4
0049EA4B . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049EA51 . 8D95 68FBFFFF lea edx, dword ptr ss:[ebp-498]
0049EA57 . E8 E0DDFFFF call 第25讲_?0049C83C
0049EA5C . 8B85 68FBFFFF mov eax, dword ptr ss:[ebp-498]
0049EA62 . 8D8D 6CFBFFFF lea ecx, dword ptr ss:[ebp-494]
0049EA68 . BA 02000000 mov edx, 2
0049EA6D . E8 2A5FF9FF call 第25讲_?0043499C
0049EA72 . 8B85 6CFBFFFF mov eax, dword ptr ss:[ebp-494]
0049EA78 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049EA7E . E8 41DDFFFF call 第25讲_?0049C7C4
0049EA83 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049EA89 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049EA8C . E8 ABDDFFFF call 第25讲_?0049C83C
0049EA91 . 8D8D 58FBFFFF lea ecx, dword ptr ss:[ebp-4A8]
0049EA97 . BA 02000000 mov edx, 2
0049EA9C . 8B03 mov eax, dword ptr ds:[ebx]
0049EA9E . E8 F95EF9FF call 第25讲_?0043499C
0049EAA3 . 8B85 58FBFFFF mov eax, dword ptr ss:[ebp-4A8]
0049EAA9 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049EAAF . E8 10DDFFFF call 第25讲_?0049C7C4
0049EAB4 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049EABA . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049EABD . E8 7ADDFFFF call 第25讲_?0049C83C
0049EAC2 . A1 845E5300 mov eax, dword ptr ds:[535E84]
0049EAC7 . BA 84EF4900 mov edx, 第25讲_?0049EF84
0049EACC . E8 3B6BF6FF call 第25讲_?0040560C
0049EAD1 . 75 20 jnz short 第25讲_?0049EAF3
0049EAD3 . 8D95 54FBFFFF lea edx, dword ptr ss:[ebp-4AC]
0049EAD9 . B8 A8EF4900 mov eax, 第25讲_?0049EFA8 ; ASCII "67B6738457BF40AA03B976A95CD4"
0049EADE . E8 05340000 call 第25讲_?004A1EE8
0049EAE3 . 8B85 54FBFFFF mov eax, dword ptr ss:[ebp-4AC]
0049EAE9 . E8 22B9F9FF call 第25讲_?0043A410
0049EAEE . E9 7C020000 jmp 第25讲_?0049ED6F
0049EAF3 > A1 845E5300 mov eax, dword ptr ds:[535E84]
0049EAF8 . BA 84EF4900 mov edx, 第25讲_?0049EF84
0049EAFD . E8 0A6BF6FF call 第25讲_?0040560C
0049EB02 . 0F84 67020000 je 第25讲_?0049ED6F
0049EB08 . 8B86 74030000 mov eax, dword ptr ds:[esi+374]
0049EB0E . 8B10 mov edx, dword ptr ds:[eax]
0049EB10 . FF92 D8000000 call near dword ptr ds:[edx+D8]
0049EB16 . 84C0 test al, al
0049EB18 . 0F84 E3000000 je 第25讲_?0049EC01
0049EB1E . 68 D0EF4900 push 第25讲_?0049EFD0 ; ASCII "c:\china-drm\"
0049EB23 . 8B0D B0055300 mov ecx, dword ptr ds:[5305B0] ; 第25讲_?00535EF0
0049EB29 . 8B09 mov ecx, dword ptr ds:[ecx] ; ntdll.7C92DCBA
0049EB2B . 8B15 88015300 mov edx, dword ptr ds:[530188] ; 第25讲_?00535EF4
0049EB31 . 8B12 mov edx, dword ptr ds:[edx]
0049EB33 . 8D85 4CFBFFFF lea eax, dword ptr ss:[ebp-4B4]
0049EB39 . E8 BE69F6FF call 第25讲_?004054FC
0049EB3E . 8B85 4CFBFFFF mov eax, dword ptr ss:[ebp-4B4]
0049EB44 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049EB4A . E8 75DCFFFF call 第25讲_?0049C7C4
0049EB4F . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049EB55 . 8D95 50FBFFFF lea edx, dword ptr ss:[ebp-4B0]
0049EB5B . E8 DCDCFFFF call 第25讲_?0049C83C
0049EB60 . FFB5 50FBFFFF push dword ptr ss:[ebp-4B0]
0049EB66 . 68 E8EF4900 push 第25讲_?0049EFE8 ; ASCII ".ini"
0049EB6B . 8D45 F4 lea eax, dword ptr ss:[ebp-C]
0049EB6E . BA 03000000 mov edx, 3
0049EB73 . E8 006AF6FF call 第25讲_?00405578
0049EB78 . 8B45 F4 mov eax, dword ptr ss:[ebp-C] ; kernel32.7C839AD8
0049EB7B . E8 28B5F6FF call 第25讲_?0040A0A8
0049EB80 . 84C0 test al, al
0049EB82 . 75 26 jnz short 第25讲_?0049EBAA
0049EB84 . 6A 00 push 0
0049EB86 . 68 80000000 push 80
0049EB8B . 6A 02 push 2
0049EB8D . 6A 00 push 0
0049EB8F . 6A 00 push 0
0049EB91 . 68 000000C0 push C0000000
0049EB96 . 8B45 F4 mov eax, dword ptr ss:[ebp-C] ; kernel32.7C839AD8
0049EB99 . E8 D66AF6FF call 第25讲_?00405674
0049EB9E . 50 push eax ; |FileName = NULL
0049EB9F . E8 008AF6FF call <jmp.&kernel32.CreateFileA> ; \CreateFileA
0049EBA4 . 50 push eax ; /hObject = NULL
0049EBA5 . E8 DA89F6FF call <jmp.&kernel32.CloseHandle> ; \CloseHandle
0049EBAA > 8B55 F4 mov edx, dword ptr ss:[ebp-C] ; kernel32.7C839AD8
0049EBAD . 8D85 00FEFFFF lea eax, dword ptr ss:[ebp-200]
0049EBB3 . E8 CC4AF6FF call 第25讲_?00403684
0049EBB8 . 8D85 00FEFFFF lea eax, dword ptr ss:[ebp-200]
0049EBBE . E8 5D48F6FF call 第25讲_?00403420
0049EBC3 . E8 9444F6FF call 第25讲_?0040305C
0049EBC8 . 8D95 48FBFFFF lea edx, dword ptr ss:[ebp-4B8]
0049EBCE . 8B45 FC mov eax, dword ptr ss:[ebp-4]
0049EBD1 . E8 5A320000 call 第25讲_?004A1E30
0049EBD6 . 8B95 48FBFFFF mov edx, dword ptr ss:[ebp-4B8]
0049EBDC . 8D85 00FEFFFF lea eax, dword ptr ss:[ebp-200]
0049EBE2 . E8 AD6DF6FF call 第25讲_?00405994
0049EBE7 . E8 5451F6FF call 第25讲_?00403D40
0049EBEC . E8 6B44F6FF call 第25讲_?0040305C
0049EBF1 . 8D85 00FEFFFF lea eax, dword ptr ss:[ebp-200]
0049EBF7 . E8 504BF6FF call 第25讲_?0040374C
0049EBFC . E8 5B44F6FF call 第25讲_?0040305C
0049EC01 > 837D DC 00 cmp dword ptr ss:[ebp-24], 0
0049EC05 . 74 0E je short 第25讲_?0049EC15
0049EC07 . 8B4D E0 mov ecx, dword ptr ss:[ebp-20]
0049EC0A . 8B55 E4 mov edx, dword ptr ss:[ebp-1C]
0049EC0D . 8B45 E8 mov eax, dword ptr ss:[ebp-18]
0049EC10 . E8 630E0000 call 第25讲_?0049FA78
0049EC15 > 8D95 44FBFFFF lea edx, dword ptr ss:[ebp-4BC]
0049EC1B . A1 685E5300 mov eax, dword ptr ds:[535E68]
0049EC20 . 8B80 60030000 mov eax, dword ptr ds:[eax+360]
0049EC26 . E8 219EFAFF call 第25讲_?00448A4C
0049EC2B . 8B95 44FBFFFF mov edx, dword ptr ss:[ebp-4BC]
0049EC31 . A1 7C5E5300 mov eax, dword ptr ds:[535E7C]
0049EC36 . E8 D169F6FF call 第25讲_?0040560C
0049EC3B . 74 1F je short 第25讲_?0049EC5C
0049EC3D . A1 34065300 mov eax, dword ptr ds:[530634]
0049EC42 . 8B00 mov eax, dword ptr ds:[eax]
0049EC44 . BA 30EF4900 mov edx, 第25讲_?0049EF30
0049EC49 . E8 BE69F6FF call 第25讲_?0040560C
0049EC4E . 74 0C je short 第25讲_?0049EC5C
0049EC50 . A1 4C045300 mov eax, dword ptr ds:[53044C]
0049EC55 . 8B00 mov eax, dword ptr ds:[eax]
0049EC57 . E8 447BFCFF call 第25讲_?004667A0
0049EC5C > 8D95 30FBFFFF lea edx, dword ptr ss:[ebp-4D0]
0049EC62 . 8B45 F8 mov eax, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049EC65 . E8 7E320000 call 第25讲_?004A1EE8
0049EC6A . FFB5 30FBFFFF push dword ptr ss:[ebp-4D0]
0049EC70 . 68 9CEF4900 push 第25讲_?0049EF9C ; ASCII "ww"
0049EC75 . FF35 905E5300 push dword ptr ds:[535E90]
0049EC7B . 68 F8EE4900 push 第25讲_?0049EEF8 ; ASCII "yaoex1"
0049EC80 . 8D85 34FBFFFF lea eax, dword ptr ss:[ebp-4CC]
0049EC86 . BA 04000000 mov edx, 4
0049EC8B . E8 E868F6FF call 第25讲_?00405578
0049EC90 . 8B85 34FBFFFF mov eax, dword ptr ss:[ebp-4CC]
0049EC96 . 8D95 38FBFFFF lea edx, dword ptr ss:[ebp-4C8]
0049EC9C . E8 8F310000 call 第25讲_?004A1E30
0049ECA1 . 8B85 38FBFFFF mov eax, dword ptr ss:[ebp-4C8]
0049ECA7 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049ECAD . E8 12DBFFFF call 第25讲_?0049C7C4
0049ECB2 . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049ECB8 . 8D95 3CFBFFFF lea edx, dword ptr ss:[ebp-4C4]
0049ECBE . E8 79DBFFFF call 第25讲_?0049C83C
0049ECC3 . 8B85 3CFBFFFF mov eax, dword ptr ss:[ebp-4C4] ; ntdll.7C9411FE
0049ECC9 . 8D8D 40FBFFFF lea ecx, dword ptr ss:[ebp-4C0]
0049ECCF . BA 02000000 mov edx, 2
0049ECD4 . E8 C35CF9FF call 第25讲_?0043499C
0049ECD9 . 8B85 40FBFFFF mov eax, dword ptr ss:[ebp-4C0]
0049ECDF . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049ECE5 . E8 DADAFFFF call 第25讲_?0049C7C4
0049ECEA . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049ECF0 . 8D55 F0 lea edx, dword ptr ss:[ebp-10]
0049ECF3 . E8 44DBFFFF call 第25讲_?0049C83C
0049ECF8 . 8D8D 2CFBFFFF lea ecx, dword ptr ss:[ebp-4D4]
0049ECFE . BA 02000000 mov edx, 2
0049ED03 . 8B03 mov eax, dword ptr ds:[ebx]
0049ED05 . E8 925CF9FF call 第25讲_?0043499C
0049ED0A . 8B85 2CFBFFFF mov eax, dword ptr ss:[ebp-4D4]
0049ED10 . 8D95 C8FDFFFF lea edx, dword ptr ss:[ebp-238]
0049ED16 . E8 A9DAFFFF call 第25讲_?0049C7C4
0049ED1B . 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049ED21 . 8D55 EC lea edx, dword ptr ss:[ebp-14]
0049ED24 . E8 13DBFFFF call 第25讲_?0049C83C
0049ED29 . 8B45 F0 mov eax, dword ptr ss:[ebp-10]
0049ED2C . 8B55 EC mov edx, dword ptr ss:[ebp-14]
0049ED2F . E8 D868F6FF call 第25讲_?0040560C
0049ED34 . 74 0F je short 第25讲_?0049ED45
0049ED36 . B8 845E5300 mov eax, 第25讲_?00535E84
0049ED3B . BA 84EF4900 mov edx, 第25讲_?0049EF84
0049ED40 . E8 F364F6FF call 第25讲_?00405238
0049ED45 > A1 845E5300 mov eax, dword ptr ds:[535E84]
0049ED4A . BA 84EF4900 mov edx, 第25讲_?0049EF84
0049ED4F . E8 B868F6FF call 第25讲_?0040560C
0049ED54 . 74 19 je short 第25讲_?0049ED6F
0049ED56 . A1 68015300 mov eax, dword ptr ds:[530168]
0049ED5B . BA F8EF4900 mov edx, 第25讲_?0049EFF8 ; ASCII "ok"
0049ED60 . E8 D364F6FF call 第25讲_?00405238
0049ED65 . A1 685E5300 mov eax, dword ptr ds:[535E68]
0049ED6A . E8 453BFCFF call 第25讲_?004628B4
0049ED6F > 33C0 xor eax, eax
0049ED71 . 5A pop edx ; kernel32.7C817077
0049ED72 . 59 pop ecx ; kernel32.7C817077
0049ED73 . 59 pop ecx ; kernel32.7C817077
0049ED74 . 64:8910 mov dword ptr fs:[eax], edx ; ntdll.KiFastSystemCallRet
0049ED77 . 68 8CEE4900 push 第25讲_?0049EE8C
0049ED7C > 8D85 2CFBFFFF lea eax, dword ptr ss:[ebp-4D4]
0049ED82 . BA 06000000 mov edx, 6
0049ED87 . E8 7C64F6FF call 第25讲_?00405208
0049ED8C . 8D85 44FBFFFF lea eax, dword ptr ss:[ebp-4BC]
0049ED92 . E8 4D64F6FF call 第25讲_?004051E4
0049ED97 . 8D85 48FBFFFF lea eax, dword ptr ss:[ebp-4B8]
0049ED9D . BA 13000000 mov edx, 13
0049EDA2 . E8 6164F6FF call 第25讲_?00405208
0049EDA7 . 8D85 94FBFFFF lea eax, dword ptr ss:[ebp-46C]
0049EDAD . E8 3264F6FF call 第25讲_?004051E4
0049EDB2 . 8D85 98FBFFFF lea eax, dword ptr ss:[ebp-468]
0049EDB8 . BA 08000000 mov edx, 8
0049EDBD . E8 4664F6FF call 第25讲_?00405208
0049EDC2 . 8D85 B8FBFFFF lea eax, dword ptr ss:[ebp-448]
0049EDC8 . E8 1764F6FF call 第25讲_?004051E4
0049EDCD . 8D85 BCFBFFFF lea eax, dword ptr ss:[ebp-444]
0049EDD3 . BA 13000000 mov edx, 13
0049EDD8 . E8 2B64F6FF call 第25讲_?00405208
0049EDDD . 8D85 08FCFFFF lea eax, dword ptr ss:[ebp-3F8]
0049EDE3 . E8 FC63F6FF call 第25讲_?004051E4
0049EDE8 . 8D85 0CFCFFFF lea eax, dword ptr ss:[ebp-3F4]
0049EDEE . BA 24000000 mov edx, 24
0049EDF3 . E8 1064F6FF call 第25讲_?00405208
0049EDF8 . 8D85 9CFCFFFF lea eax, dword ptr ss:[ebp-364]
0049EDFE . E8 E163F6FF call 第25讲_?004051E4
0049EE03 . 8D85 A0FCFFFF lea eax, dword ptr ss:[ebp-360]
0049EE09 . BA 07000000 mov edx, 7
0049EE0E . E8 F563F6FF call 第25讲_?00405208
0049EE13 . 8D85 BCFCFFFF lea eax, dword ptr ss:[ebp-344]
0049EE19 . BA 0F000000 mov edx, 0F
0049EE1E . E8 E563F6FF call 第25讲_?00405208
0049EE23 . 8D85 F8FCFFFF lea eax, dword ptr ss:[ebp-308]
0049EE29 . E8 B663F6FF call 第25讲_?004051E4
0049EE2E . 8D85 FCFCFFFF lea eax, dword ptr ss:[ebp-304]
0049EE34 . BA 2E000000 mov edx, 2E
0049EE39 . E8 CA63F6FF call 第25讲_?00405208
0049EE3E . 8D85 B4FDFFFF lea eax, dword ptr ss:[ebp-24C]
0049EE44 . E8 9B63F6FF call 第25讲_?004051E4
0049EE49 . 8D85 B8FDFFFF lea eax, dword ptr ss:[ebp-248]
0049EE4F . BA 04000000 mov edx, 4
0049EE54 . E8 AF63F6FF call 第25讲_?00405208
0049EE59 . 8D85 D8FDFFFF lea eax, dword ptr ss:[ebp-228]
0049EE5F > BA 09000000 mov edx, 9
0049EE64 . E8 9F63F6FF call 第25讲_?00405208
0049EE69 . 8D85 FCFDFFFF lea eax, dword ptr ss:[ebp-204]
0049EE6F . E8 7063F6FF call 第25讲_?004051E4
0049EE74 . 8D45 D0 lea eax, dword ptr ss:[ebp-30]
0049EE77 . BA 0C000000 mov edx, 0C
0049EE7C . E8 8763F6FF call 第25讲_?00405208
0049EE81 . C3 retn
0049EE82 .^ E9 F15BF6FF jmp 第25讲_?00404A78
0049EE87 .^ E9 F0FEFFFF jmp 第25讲_?0049ED7C
0049EE8C . 5F pop edi ; kernel32.7C817077
0049EE8D . 5E pop esi ; kernel32.7C817077
0049EE8E . 5B pop ebx ; kernel32.7C817077
0049EE8F . 8BE5 mov esp, ebp
0049EE91 . 5D pop ebp ; kernel32.7C817077
0049EE92 . C3 retn
0049EE93 00 db 00
0049EE94 . FFFFFFFF dd FFFFFFFF
0049EE98 . 01000000 dd 00000001
0049EE9C . 2C 00 ascii ",",0
0049EE9E 00 db 00
0049EE9F 00 db 00
0049EEA0 FF db FF
0049EEA1 FF db FF
0049EEA2 FF db FF
0049EEA3 FF db FF
0049EEA4 0A db 0A
0049EEA5 00 db 00
0049EEA6 00 db 00
0049EEA7 00 db 00
0049EEA8 . C3 retn
0049EEA9 . DCC2 fadd st(2), st
0049EEAB .^ EB B2 jmp short 第25讲_?0049EE5F
0049EEAD BB db BB
0049EEAE D5 db D5
0049EEAF FD db FD
0049EEB0 C8 db C8
0049EEB1 B7 db B7
0049EEB2 00 db 00
0049EEB3 00 db 00
0049EEB4 . FFFFFFFF dd FFFFFFFF
0049EEB8 . 01000000 dd 00000001
0049EEBC . 60 00 ascii "`",0
0049EEBE 00 db 00
0049EEBF 00 db 00
0049EEC0 FF db FF
0049EEC1 FF db FF
0049EEC2 FF db FF
0049EEC3 FF db FF
0049EEC4 0C db 0C
0049EEC5 00 db 00
0049EEC6 00 db 00
0049EEC7 00 db 00
0049EEC8 . CA DAC8 retf 0C8DA
0049EECB A8 db A8
0049EECC B2 db B2
0049EECD BB db BB
0049EECE BA db BA
0049EECF CF db CF
0049EED0 B7 db B7
0049EED1 A8 db A8
0049EED2 A3 db A3
0049EED3 A1 db A1
0049EED4 00 db 00
0049EED5 00 db 00
0049EED6 00 db 00
0049EED7 00 db 00
0049EED8 FF db FF
0049EED9 FF db FF
0049EEDA FF db FF
0049EEDB FF db FF
0049EEDC 0C db 0C
0049EEDD 00 db 00
0049EEDE 00 db 00
0049EEDF 00 db 00
0049EEE0 . CA DAC8 retf 0C8DA
0049EEE3 A8 db A8
0049EEE4 B2 db B2
0049EEE5 BB db BB
0049EEE6 D5 db D5
0049EEE7 FD db FD
0049EEE8 C8 db C8
0049EEE9 B7 db B7
0049EEEA A3 db A3
0049EEEB A1 db A1
0049EEEC 00 db 00
0049EEED 00 db 00
0049EEEE 00 db 00
0049EEEF 00 db 00
0049EEF0 . FFFFFFFF dd FFFFFFFF
0049EEF4 . 06000000 dd 00000006
0049EEF8 . 79 61 6F 65 78 31 00 ascii "yaoex1",0
0049EEFF 00 db 00
0049EF00 . FFFFFFFF dd FFFFFFFF
0049EF04 . 0A000000 dd 0000000A
0049EF08 . 79 61 73 64 73 64 6F >ascii "yasdsdoex1",0
0049EF13 00 db 00
0049EF14 . FFFFFFFF dd FFFFFFFF
0049EF18 . 0A000000 dd 0000000A
0049EF1C . 79 61 6F 73 64 73 64 >ascii "yaosdsdex1",0
0049EF27 00 db 00
0049EF28 . FFFFFFFF dd FFFFFFFF
0049EF2C . 01000000 dd 00000001
0049EF30 . 30 00 ascii "0",0
0049EF32 00 db 00
0049EF33 00 db 00
0049EF34 . FFFFFFFF dd FFFFFFFF
0049EF38 . 0B000000 dd 0000000B
0049EF3C . 79 61 6F 61 64 73 65 >ascii "yaoadsesdx2",0
0049EF48 . FFFFFFFF dd FFFFFFFF
0049EF4C . 01000000 dd 00000001
0049EF50 . 32 00 ascii "2",0
0049EF52 00 db 00
0049EF53 00 db 00
0049EF54 . FFFFFFFF dd FFFFFFFF
0049EF58 . 0C000000 dd 0000000C
0049EF5C . 79 61 6F 73 64 73 64 >ascii "yaosdsdw3ex1",0
0049EF69 00 db 00
0049EF6A 00 db 00
0049EF6B 00 db 00
0049EF6C . FFFFFFFF dd FFFFFFFF
0049EF70 . 06000000 dd 00000006
0049EF74 . 79 61 6F 65 78 32 00 ascii "yaoex2",0
0049EF7B 00 db 00
0049EF7C . FFFFFFFF dd FFFFFFFF
0049EF80 . 01000000 dd 00000001
0049EF84 . 31 00 ascii "1",0
0049EF86 00 db 00
0049EF87 00 db 00
0049EF88 . FFFFFFFF dd FFFFFFFF
0049EF8C . 01000000 dd 00000001
0049EF90 . 65 00 ascii "e",0
0049EF92 00 db 00
0049EF93 00 db 00
0049EF94 . FFFFFFFF dd FFFFFFFF
0049EF98 . 02000000 dd 00000002
0049EF9C . 77 77 00 ascii "ww",0
0049EF9F 00 db 00
0049EFA0 . FFFFFFFF dd FFFFFFFF
0049EFA4 . 1C000000 dd 0000001C
0049EFA8 . 36 37 42 36 37 33 38 >ascii "67B6738457BF40AA"
0049EFB8 . 30 33 42 39 37 36 41 >ascii "03B976A95CD4",0
0049EFC5 00 db 00
0049EFC6 00 db 00
0049EFC7 00 db 00
0049EFC8 . FFFFFFFF dd FFFFFFFF
0049EFCC . 0D000000 dd 0000000D
0049EFD0 . 63 3A 5C 63 68 69 6E >ascii "c:\china-drm\",0
0049EFDE 00 db 00
0049EFDF 00 db 00
0049EFE0 . FFFFFFFF dd FFFFFFFF
0049EFE4 . 04000000 dd 00000004
0049EFE8 . 2E 69 6E 69 00 ascii ".ini",0
0049EFED 00 db 00
0049EFEE 00 db 00
0049EFEF 00 db 00
0049EFF0 . FFFFFFFF dd FFFFFFFF
0049EFF4 . 02000000 dd 00000002
0049EFF8 . 6F 6B 00 ascii "ok",0
0049EFFB 00 db 00
0049EFFC /. 55 push ebp
0049EFFD |. 8BEC mov ebp, esp
0049EFFF |. 51 push ecx
0049F000 |. B9 46000000 mov ecx, 46
0049F005 |> 6A 00 /push 0
0049F007 |. 6A 00 |push 0
0049F009 |. 49 |dec ecx
0049F00A |.^ 75 F9 \jnz short 第25讲_?0049F005
0049F00C |. 51 push ecx
0049F00D |. 874D FC xchg dword ptr ss:[ebp-4], ecx
0049F010 |. 53 push ebx
0049F011 |. 8BD8 mov ebx, eax
0049F013 |. 33C0 xor eax, eax
0049F015 |. 55 push ebp
0049F016 |. 68 DEF34900 push 第25讲_?0049F3DE
0049F01B |. 64:FF30 push dword ptr fs:[eax]
0049F01E |. 64:8920 mov dword ptr fs:[eax], esp
0049F021 |. A1 68015300 mov eax, dword ptr ds:[530168]
0049F026 |. 8B00 mov eax, dword ptr ds:[eax]
0049F028 |. BA F4F34900 mov edx, 第25讲_?0049F3F4 ; ASCII "ok"
0049F02D |. E8 DA65F6FF call 第25讲_?0040560C
0049F032 |. 0F85 45030000 jnz 第25讲_?0049F37D
0049F038 |. 8D95 0CFEFFFF lea edx, dword ptr ss:[ebp-1F4]
0049F03E |. A1 B0055300 mov eax, dword ptr ds:[5305B0]
0049F043 |. 8B00 mov eax, dword ptr ds:[eax]
0049F045 |. E8 9E2E0000 call 第25讲_?004A1EE8
0049F04A |. 8D85 0CFEFFFF lea eax, dword ptr ss:[ebp-1F4]
0049F050 |. 50 push eax
0049F051 |. 8D95 08FEFFFF lea edx, dword ptr ss:[ebp-1F8]
0049F057 |. 8B83 60030000 mov eax, dword ptr ds:[ebx+360]
0049F05D |. E8 EA99FAFF call 第25讲_?00448A4C
0049F062 |. 8B95 08FEFFFF mov edx, dword ptr ss:[ebp-1F8]
0049F068 |. 58 pop eax ; kernel32.7C817077
0049F069 |. E8 4264F6FF call 第25讲_?004054B0
0049F06E |. 8B85 0CFEFFFF mov eax, dword ptr ss:[ebp-1F4]
0049F074 |. 8D95 10FEFFFF lea edx, dword ptr ss:[ebp-1F0]
0049F07A |. E8 61A5F6FF call 第25讲_?004095E0
0049F07F |. 8B85 10FEFFFF mov eax, dword ptr ss:[ebp-1F0]
0049F085 |. 8D55 F4 lea edx, dword ptr ss:[ebp-C]
0049F088 |. E8 A32D0000 call 第25讲_?004A1E30
0049F08D |. 8D95 E0FDFFFF lea edx, dword ptr ss:[ebp-220]
0049F093 |. 8B45 F4 mov eax, dword ptr ss:[ebp-C] ; kernel32.7C839AD8
0049F096 |. E8 4D2E0000 call 第25讲_?004A1EE8
0049F09B |. FFB5 E0FDFFFF push dword ptr ss:[ebp-220]
0049F0A1 |. 68 00F44900 push 第25讲_?0049F400 ; ASCII "ww"
0049F0A6 |. FF35 905E5300 push dword ptr ds:[535E90]
0049F0AC |. 68 0CF44900 push 第25讲_?0049F40C ; ASCII "yaoex3"
0049F0B1 |. 8D85 E4FDFFFF lea eax, dword ptr ss:[ebp-21C]
0049F0B7 |. BA 04000000 mov edx, 4
0049F0BC |. E8 B764F6FF call 第25讲_?00405578
0049F0C1 |. 8B85 E4FDFFFF mov eax, dword ptr ss:[ebp-21C]
0049F0C7 |. 8D95 E8FDFFFF lea edx, dword ptr ss:[ebp-218]
0049F0CD |. E8 5E2D0000 call 第25讲_?004A1E30
0049F0D2 |. 8B85 E8FDFFFF mov eax, dword ptr ss:[ebp-218] ; ntdll.7C93019B
0049F0D8 |. 8D95 F8FDFFFF lea edx, dword ptr ss:[ebp-208]
0049F0DE |. E8 E1D6FFFF call 第25讲_?0049C7C4
0049F0E3 |. 8D85 F8FDFFFF lea eax, dword ptr ss:[ebp-208]
0049F0E9 |. 8D95 ECFDFFFF lea edx, dword ptr ss:[ebp-214]
0049F0EF |. E8 48D7FFFF call 第25讲_?0049C83C
0049F0F4 |. 8B85 ECFDFFFF mov eax, dword ptr ss:[ebp-214] ; ntdll.7C9301DB
0049F0FA |. 8D8D F0FDFFFF lea ecx, dword ptr ss:[ebp-210]
0049F100 |. BA 18000000 mov edx, 18
0049F105 |. E8 9258F9FF call 第25讲_?0043499C
0049F10A |. 8B85 F0FDFFFF mov eax, dword ptr ss:[ebp-210] ; 第25讲_?<ModuleEntryPoint>
0049F110 |. 8D8D F4FDFFFF lea ecx, dword ptr ss:[ebp-20C]
0049F116 |. BA 02000000 mov edx, 2
0049F11B |. E8 9858F9FF call 第25讲_?004349B8
0049F120 |. 8B85 F4FDFFFF mov eax, dword ptr ss:[ebp-20C]
0049F126 |. 8D95 F8FDFFFF lea edx, dword ptr ss:[ebp-208]
0049F12C |. E8 93D6FFFF call 第25讲_?0049C7C4
0049F131 |. 8D85 F8FDFFFF lea eax, dword ptr ss:[ebp-208]
0049F137 |. 8D55 FC lea edx, dword ptr ss:[ebp-4]
0049F13A |. E8 FDD6FFFF call 第25讲_?0049C83C
0049F13F |. 8D8D DCFDFFFF lea ecx, dword ptr ss:[ebp-224]
0049F145 |. BA 02000000 mov edx, 2
0049F14A |. A1 785E5300 mov eax, dword ptr ds:[535E78]
0049F14F |. E8 6458F9FF call 第25讲_?004349B8
0049F154 |. 8B85 DCFDFFFF mov eax, dword ptr ss:[ebp-224] ; ntdll.7C930228
0049F15A |. 8D95 F8FDFFFF lea edx, dword ptr ss:[ebp-208]
0049F160 |. E8 5FD6FFFF call 第25讲_?0049C7C4
0049F165 |. 8D85 F8FDFFFF lea eax, dword ptr ss:[ebp-208]
0049F16B |. 8D55 F8 lea edx, dword ptr ss:[ebp-8]
0049F16E |. E8 C9D6FFFF call 第25讲_?0049C83C
0049F173 |. 8B45 FC mov eax, dword ptr ss:[ebp-4]
0049F176 |. 8B55 F8 mov edx, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049F179 |. E8 8E64F6FF call 第25讲_?0040560C
0049F17E |. 0F95C3 setne bl
0049F181 |. 84DB test bl, bl
0049F183 |. 74 0F je short 第25讲_?0049F194
0049F185 |. B8 8C5E5300 mov eax, 第25讲_?00535E8C
0049F18A |. BA 1CF44900 mov edx, 第25讲_?0049F41C
0049F18F |. E8 A460F6FF call 第25讲_?00405238
0049F194 |> 8B45 FC mov eax, dword ptr ss:[ebp-4]
0049F197 |. 8B55 F8 mov edx, dword ptr ss:[ebp-8] ; kernel32.7C817080
0049F19A |. E8 6D64F6FF call 第25讲_?0040560C
0049F19F |. 0F95C0 setne al
0049F1A2 |. 84DB test bl, bl
0049F1A4 |. 74 2A je short 第25讲_?0049F1D0
0049F1A6 |. B8 28F44900 mov eax, 第25讲_?0049F428
0049F1AB |. E8 60B2F9FF call 第25讲_?0043A410
0049F1B0 |. B8 8C5E5300 mov eax, 第25讲_?00535E8C
0049F1B5 |. BA 1CF44900 mov edx, 第25讲_?0049F41C
0049F1BA |. E8 7960F6FF call 第25讲_?00405238
0049F1BF |. A1 9C055300 mov eax, dword ptr ds:[53059C]
0049F1C4 |. 8B00 mov eax, dword ptr ds:[eax]
0049F1C6 |. E8 E936FCFF call 第25讲_?004628B4
0049F1CB |. E9 AD010000 jmp 第25讲_?0049F37D
0049F1D0 |> 8D95 D8FDFFFF lea edx, dword ptr ss:[ebp-228]
0049F1D6 |. A1 685E5300 mov eax, dword ptr ds:[535E68]
0049F1DB |. 8B80 60030000 mov eax, dword ptr ds:[eax+360]
0049F1E1 |. E8 6698FAFF call 第25讲_?00448A4C
0049F1E6 |. 8B95 D8FDFFFF mov edx, dword ptr ss:[ebp-228]
0049F1EC |. A1 7C5E5300 mov eax, dword ptr ds:[535E7C]
0049F1F1 |. E8 1664F6FF call 第25讲_?0040560C
0049F1F6 |. 74 1F je short 第25讲_?0049F217
0049F1F8 |. A1 34065300 mov eax, dword ptr ds:[530634]
0049F1FD |. 8B00 mov eax, dword ptr ds:[eax]
0049F1FF |. BA 3CF44900 mov edx, 第25讲_?0049F43C
0049F204 |. E8 0364F6FF call 第25讲_?0040560C
0049F209 |. 74 0C je short 第25讲_?0049F217
0049F20B |. A1 9C055300 mov eax, dword ptr ds:[53059C]
0049F210 |. 8B00 mov eax, dword ptr ds:[eax]
0049F212 |. E8 9D36FCFF call 第25讲_?004628B4
0049F217 |> A1 34065300 mov eax, dword ptr ds:[530634]
0049F21C |. 8B00 mov eax, dword ptr ds:[eax]
0049F21E |. BA 48F44900 mov edx, 第25讲_?0049F448
0049F223 |. E8 E463F6FF call 第25讲_?0040560C
0049F228 |. 0F85 28010000 jnz 第25讲_?0049F356
0049F22E |. 68 54F44900 push 第25讲_?0049F454 ; ASCII "c:\china-drm\"
0049F233 |. A1 88015300 mov eax, dword ptr ds:[530188]
0049F238 |. FF30 push dword ptr ds:[eax]
0049F23A |. A1 B0055300 mov eax, dword ptr ds:[5305B0]
0049F23F |. FF30 push dword ptr ds:[eax]
0049F241 |. A1 88025300 mov eax, dword ptr ds:[530288]
0049F246 |. FF30 push dword ptr ds:[eax]
0049F248 |. 68 6CF44900 push 第25讲_?0049F46C ; ASCII "exe"
0049F24D |. 8D85 D0FDFFFF lea eax, dword ptr ss:[ebp-230]
0049F253 |. BA 04000000 mov edx, 4
0049F258 |. E8 1B63F6FF call 第25讲_?00405578
0049F25D |. 8B85 D0FDFFFF mov eax, dword ptr ss:[ebp-230]
0049F263 |. 8D95 F8FDFFFF lea edx, dword ptr ss:[ebp-208]
0049F269 |. E8 56D5FFFF call 第25讲_?0049C7C4
0049F26E |. 8D85 F8FDFFFF lea eax, dword ptr ss:[ebp-208]
0049F274 |. 8D95 D4FDFFFF lea edx, dword ptr ss:[ebp-22C]
0049F27A |. E8 BDD5FFFF call 第25讲_?0049C83C
0049F27F |. FFB5 D4FDFFFF push dword ptr ss:[ebp-22C]
0049F285 |. 68 78F44900 push 第25讲_?0049F478 ; ASCII ".config"
0049F28A |. 8D45 F0 lea eax, dword ptr ss:[ebp-10]
0049F28D |. BA 03000000 mov edx, 3
0049F292 |. E8 E162F6FF call 第25讲_?00405578
0049F297 |. 8B45 F0 mov eax, dword ptr ss:[ebp-10]
0049F29A |. E8 09AEF6FF call 第25讲_?0040A0A8
0049F29F |. 84C0 test al, al
0049F2A1 |. 75 26 jnz short 第25讲_?0049F2C9
0049F2A3 |. 6A 00 push 0
0049F2A5 |. 68 80000000 push 80
0049F2AA |. 6A 02 push 2
0049F2AC |. 6A 00 push 0
0049F2AE |. 6A 00 push 0
0049F2B0 |. 68 000000C0 push C0000000
0049F2B5 |. 8B45 F0 mov eax, dword ptr ss:[ebp-10]
0049F2B8 |. E8 B763F6FF call 第25讲_?00405674
0049F2BD |. 50 push eax ; |FileName = NULL
0049F2BE |. E8 E182F6FF call <jmp.&kernel32.CreateFileA> ; \CreateFileA
0049F2C3 |. 50 push eax ; /hObject = NULL
0049F2C4 |. E8 BB82F6FF call <jmp.&kernel32.CloseHandle> ; \CloseHandle
0049F2C9 |> 8B55 F0 mov edx, dword ptr ss:[ebp-10]
0049F2CC |. 8D85 14FEFFFF lea eax, dword ptr ss:[ebp-1EC]
0049F2D2 |. E8 AD43F6FF call 第25讲_?00403684
0049F2D7 |. 8D85 14FEFFFF lea eax, dword ptr ss:[ebp-1EC]
0049F2DD |. E8 3E41F6FF call 第25讲_?00403420
0049F2E2 |. E8 753DF6FF call 第25讲_?0040305C
0049F2E7 |. E8 70C6F6FF call 第25讲_?0040B95C
0049F2EC |. DD5D E0 fstp qword ptr ss:[ebp-20]
0049F2EF |. 9B wait
0049F2F0 |. FF75 E4 push dword ptr ss:[ebp-1C] ; /Arg2 = 80545C7D
0049F2F3 |. FF75 E0 push dword ptr ss:[ebp-20] ; |Arg1 = 7FFD9000
0049F2F6 |. 8B15 B4025300 mov edx, dword ptr ds:[5302B4] ; |第25讲_?00533814
0049F2FC |. 8B12 mov edx, dword ptr ds:[edx] ; |
0049F2FE |. 8D45 EC lea eax, dword ptr ss:[ebp-14] ; |
0049F301 |. E8 82D2F6FF call 第25讲_?0040C588 ; \第25讲_?0040C588
0049F306 |. 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049F30C |. 8B4D EC mov ecx, dword ptr ss:[ebp-14]
0049F30F |. 8B15 945E5300 mov edx, dword ptr ds:[535E94]
0049F315 |. E8 E261F6FF call 第25讲_?004054FC
0049F31A |. 8B85 C8FDFFFF mov eax, dword ptr ss:[ebp-238]
0049F320 |. 8D95 CCFDFFFF lea edx, dword ptr ss:[ebp-234]
0049F326 |. E8 052B0000 call 第25讲_?004A1E30
0049F32B |. 8B95 CCFDFFFF mov edx, dword ptr ss:[ebp-234]
0049F331 |. 8D85 14FEFFFF lea eax, dword ptr ss:[ebp-1EC]
0049F337 |. E8 5866F6FF call 第25讲_?00405994
0049F33C |. E8 FF49F6FF call 第25讲_?00403D40
0049F341 |. E8 163DF6FF call 第25讲_?0040305C
0049F346 |. 8D85 14FEFFFF lea eax, dword ptr ss:[ebp-1EC]
0049F34C |. E8 FB43F6FF call 第25讲_?0040374C
0049F351 |. E8 063DF6FF call 第25讲_?0040305C
0049F356 |> A1 68015300 mov eax, dword ptr ds:[530168]
0049F35B |. 8B00 mov eax, dword ptr ds:[eax]
0049F35D |. BA F4F34900 mov edx, 第25讲_?0049F3F4 ; ASCII "ok"
0049F362 |. E8 A562F6FF call 第25讲_?0040560C
0049F367 |. 75 14 jnz short 第25讲_?0049F37D
0049F369 |. A1 9C055300 mov eax, dword ptr ds:[53059C]
0049F36E |. 8B00 mov eax, dword ptr ds:[eax]
0049F370 |. 8B80 68030000 mov eax, dword ptr ds:[eax+368]
0049F376 |. B2 01 mov dl, 1
0049F378 |. E8 8392F9FF call 第25讲_?00438600
0049F37D |> 33C0 xor eax, eax
0049F37F |. 5A pop edx ; kernel32.7C817077
0049F380 |. 59 pop ecx ; kernel32.7C817077
0049F381 |. 59 pop ecx ; kernel32.7C817077
0049F382 |. 64:8910 mov dword ptr fs:[eax], edx ; ntdll.KiFastSystemCallRet
0049F385 |. 68 E5F34900 push 第25讲_?0049F3E5
0049F38A |> 8D85 C8FDFFFF lea eax, dword ptr ss:[ebp-238]
0049F390 |. BA 04000000 mov edx, 4
0049F395 |. E8 6E5EF6FF call 第25讲_?00405208
0049F39A |. 8D85 D8FDFFFF lea eax, dword ptr ss:[ebp-228]
0049F3A0 |. E8 3F5EF6FF call 第25讲_?004051E4
0049F3A5 |. 8D85 DCFDFFFF lea eax, dword ptr ss:[ebp-224]
0049F3AB |. BA 07000000 mov edx, 7
0049F3B0 |. E8 535EF6FF call 第25讲_?00405208
0049F3B5 |. 8D85 08FEFFFF lea eax, dword ptr ss:[ebp-1F8]
0049F3BB |. E8 245EF6FF call 第25讲_?004051E4
0049F3C0 |. 8D85 0CFEFFFF lea eax, dword ptr ss:[ebp-1F4]
0049F3C6 |. BA 02000000 mov edx, 2
0049F3CB |. E8 385EF6FF call 第25讲_?00405208
0049F3D0 |. 8D45 EC lea eax, dword ptr ss:[ebp-14]
0049F3D3 |. BA 05000000 mov edx, 5
0049F3D8 |. E8 2B5EF6FF call 第25讲_?00405208
0049F3DD \. C3 retn
0049F3DE .^ E9 9556F6FF jmp 第25讲_?00404A78
0049F3E3 .^ EB A5 jmp short 第25讲_?0049F38A
0049F3E5 . 5B pop ebx ; kernel32.7C817077
0049F3E6 . 8BE5 mov esp, ebp
0049F3E8 . 5D pop ebp ; kernel32.7C817077
0049F3E9 . C3 retn
|