能力值:
( LV4,RANK:50 )
3 楼
金叶的东西
你猜得对,那是取硬盘物理序列号
下面那些长串数字是md5()
能力值:
( LV2,RANK:10 )
5 楼
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:100074B7(C), :100074C9(C), :100074E2(C), :1000756F(C), :1000761D(C)
|
:10007650 5F pop edi
:10007651 5E pop esi
:10007652 5D pop ebp
:10007653 33C0 xor eax, eax
:10007655 5B pop ebx
:10007656 81C404080000 add esp, 00000804
:1000765C C3 ret :1000765D 90 nop
:1000765E 90 nop
:1000765F 90 nop
:10007660 64A100000000 mov eax, dword ptr fs:[00000000]
:10007666 6AFF push FFFFFFFF
:10007668 6862A30010 push 1000A362
:1000766D 50 push eax
:1000766E B870140000 mov eax, 00001470
:10007673 64892500000000 mov dword ptr fs:[00000000], esp
:1000767A E8D1210000 call 10009850
:1000767F 56 push esi
:10007680 57 push edi
* Possible StringData Ref from Data Obj ->"0xb177b1165733809264b24d553ef5b53565f956d5e5f3"
->"5386d41fc1045eb7efd26fa5ac1d7f143be70c8669fe94"
->"59b2c501f25605739df640fa8a99f1acb0e7230d4d63bf"
->"2a81d3aeeeb0129a0e047b165aea7e415e61339dbfe52d"
->"8d4c3d820c50bd07defaf87be272b602786012e3fecefe"
->"732750ef1d7e03d9b1a36549af3e2a15d3e23e6bdb598e"
->"ddb6ddcd9e56f1167b51bb357cc0cc92c71784ab8e1e4b"
->"79ffe7b8a51532757270dc5c61bfb63934aa46ef15fff"
|
:10007681 6844D10010 push 1000D144
:10007686 8D4C242C lea ecx, dword ptr [esp+2C]
:1000768A E8819BFFFF call 10001210
* Possible StringData Ref from Data Obj ->"0x2faf081"
|
:1000768F 6838D10010 push 1000D138
:10007694 8D4C241C lea ecx, dword ptr [esp+1C]
:10007698 C784248414000000000000 mov dword ptr [esp+00001484], 00000000
:100076A3 E8689BFFFF call 10001210
:100076A8 8B842488140000 mov eax, dword ptr [esp+00001488]
:100076AF 8D4C2438 lea ecx, dword ptr [esp+38]
:100076B3 50 push eax
:100076B4 C684248414000001 mov byte ptr [esp+00001484], 01
:100076BC E84F9BFFFF call 10001210
:100076C1 8D4C2408 lea ecx, dword ptr [esp+08]
:100076C5 C684248014000002 mov byte ptr [esp+00001480], 02
:100076CD E82E99FFFF call 10001000
:100076D2 8D8C2458140000 lea ecx, dword ptr [esp+00001458]
:100076D9 C684248014000003 mov byte ptr [esp+00001480], 03
:100076E1 E81A99FFFF call 10001000
:100076E6 8D8C2468140000 lea ecx, dword ptr [esp+00001468]
:100076ED C684248014000004 mov byte ptr [esp+00001480], 04
:100076F5 E80699FFFF call 10001000
:100076FA B900050000 mov ecx, 00000500
:100076FF 33C0 xor eax, eax
:10007701 8D7C2458 lea edi, dword ptr [esp+58]
:10007705 F3 repz
:10007706 AB stosd
:10007707 8D4C2428 lea ecx, dword ptr [esp+28]
:1000770B 8D542418 lea edx, dword ptr [esp+18]
:1000770F 51 push ecx
:10007710 8D44243C lea eax, dword ptr [esp+3C]
:10007714 52 push edx
:10007715 8D4C2450 lea ecx, dword ptr [esp+50]
:10007719 50 push eax
:1000771A 51 push ecx
:1000771B 8D4C2468 lea ecx, dword ptr [esp+68]
:1000771F C684249014000005 mov byte ptr [esp+00001490], 05
:10007727 E8B41D0000 call 100094E0
:1000772C 50 push eax
:1000772D 8D4C240C lea ecx, dword ptr [esp+0C]
:10007731 C684248414000006 mov byte ptr [esp+00001484], 06
:10007739 E872AEFFFF call 100025B0
:1000773E 8D4C2448 lea ecx, dword ptr [esp+48]
:10007742 C684248014000005 mov byte ptr [esp+00001480], 05
:1000774A E8719BFFFF call 100012C0
:1000774F 8D4C2408 lea ecx, dword ptr [esp+08]
:10007753 E8B89DFFFF call 10001510
:10007758 8BF8 mov edi, eax
:1000775A 83C9FF or ecx, FFFFFFFF
:1000775D 33C0 xor eax, eax
:1000775F F2 repnz
:10007760 AE scasb
:10007761 F7D1 not ecx
:10007763 2BF9 sub edi, ecx
:10007765 8BD1 mov edx, ecx
:10007767 8BF7 mov esi, edi
:10007769 BF50E30010 mov edi, 1000E350
:1000776E C1E902 shr ecx, 02
:10007771 F3 repz
:10007772 A5 movsd
:10007773 8BCA mov ecx, edx
:10007775 83E103 and ecx, 00000003
:10007778 F3 repz
:10007779 A4 movsb
:1000777A 8D8C2468140000 lea ecx, dword ptr [esp+00001468]
:10007781 C684248014000007 mov byte ptr [esp+00001480], 07
:10007789 E8329BFFFF call 100012C0
:1000778E C684248014000003 mov byte ptr [esp+00001480], 03
:10007796 8D8C2458140000 lea ecx, dword ptr [esp+00001458]
:1000779D E81E9BFFFF call 100012C0
:100077A2 8D4C2408 lea ecx, dword ptr [esp+08]
:100077A6 C684248014000002 mov byte ptr [esp+00001480], 02
:100077AE E80D9BFFFF call 100012C0
:100077B3 8D4C2438 lea ecx, dword ptr [esp+38]
:100077B7 C684248014000001 mov byte ptr [esp+00001480], 01
:100077BF E8FC9AFFFF call 100012C0
:100077C4 8D4C2418 lea ecx, dword ptr [esp+18]
:100077C8 C684248014000000 mov byte ptr [esp+00001480], 00
:100077D0 E8EB9AFFFF call 100012C0
:100077D5 8D4C2428 lea ecx, dword ptr [esp+28]
:100077D9 C7842480140000FFFFFFFF mov dword ptr [esp+00001480], FFFFFFFF
:100077E4 E8D79AFFFF call 100012C0
:100077E9 8B8C2478140000 mov ecx, dword ptr [esp+00001478]
:100077F0 5F pop edi
:100077F1 B850E30010 mov eax, 1000E350
:100077F6 5E pop esi
:100077F7 64890D00000000 mov dword ptr fs:[00000000], ecx
:100077FE 81C47C140000 add esp, 0000147C
:10007804 C3 ret :10007805 90 nop
:10007806 90 nop
:10007807 90 nop
:10007808 90 nop
:10007809 90 nop
:1000780A 90 nop
:1000780B 90 nop
:1000780C 90 nop
:1000780D 90 nop
:1000780E 90 nop
:1000780F 90 nop