程序OD加载就显示：
00443FD3 >/$ 52 push edx
00443FD4 |? BA 64000000 mov edx, 64
00443FD9 |? 85D2 test edx, edx
00443FDB |? 74 1D je short 00443FFA
00443FDD |? B9 00100000 mov ecx, 1000
00443FE2 |? 85C9 test ecx, ecx
00443FE4 |? 74 07 je short 00443FED
00443FE6 |? 01C8 add eax, ecx
00443FE8 |. 01D8 add eax, ebx
00443FEA |? 49 dec ecx
00443FEB |?^ EB F5 jmp short 00443FE2
00443FED |. 52 push edx
00443FEE |. 54 push esp
00443FEF |. 54 push esp
00443FF0 |> FF15 33705100 /call dword ptr [<&kernel32.lstrcpy>] ; kernel32.lstrcpyA
00443FF6 |? 5A pop edx
00443FF7 |? 4A dec edx
00443FF8 |.^ EB DF |jmp short 00443FD9
00443FFA |. 5A |pop edx
00443FFB |.- E9 00C03900 |jmp 007E0000
007E018C 81F1 C555B369 xor ecx, 69B355C5
007E0192 C1E9 02 shr ecx, 2
007E0195 BE 4A307104 mov esi, 471304A
007E019A 96 xchg eax, esi
007E019B F7D0 not eax
007E019D 31C6 xor esi, eax
007E019F 31F0 xor eax, esi
007E01A1 31C6 xor esi, eax
007E01A3 46 inc esi
007E01A4 81CE A928DB20 or esi, 20DB28A9
007E01AA BB 855AB209 mov ebx, 9B25A85
007E01AF 81CB 5E226814 or ebx, 1468225E
007E01B5 C1E3 06 shl ebx, 6
007E01B8 81C3 2281DD10 add ebx, 10DD8122
007E01BE 31DE xor esi, ebx
007E01C0 29F1 sub ecx, esi
007E01C2 81EE 012A454E sub esi, 4E452A01
007E01C8 29F6 sub esi, esi
007E01CA 83EC 04 sub esp, 4
007E01CD 890C24 mov dword ptr [esp], ecx
007E01D0 58 pop eax
007E01D1 57 push edi
007E01D2 BF 5B71300B mov edi, 0B30715B
007E01D7 01F9 add ecx, edi
007E01D9 5F pop edi
非常感谢
软件为fg719p,大家懂的。
[培训]内核驱动高级班，冲击BAT一流互联网大厂工
作，每周日13:00-18:00直播授课
