我怀疑是不是加花了啊??(无壳}
:0056AD2A 55 push ebp
:0056AD2B 683FB05600 push 0056B03F
:0056AD30 64FF30 push dword ptr fs:[eax]
:0056AD33 648920 mov dword ptr fs:[eax], esp
:0056AD36 8D55D8 lea edx, dword ptr [ebp-28]
:0056AD39 A1BC975900 mov eax, dword ptr [005997BC]
:0056AD3E 8B00 mov eax, dword ptr [eax]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0056ACD0(C)
|
:0056AD40 E85B660200 call 005913A0
:0056AD45 8B45D8 mov eax, dword ptr [ebp-28]
:0056AD48 8D55DC lea edx, dword ptr [ebp-24]
:0056AD4B E8C4E7E9FF call 00409514
:0056AD50 837DDC00 cmp dword ptr [ebp-24], 00000000
:0056AD54 741C je 0056AD72
:0056AD56 8D55D4 lea edx, dword ptr [ebp-2C]
:0056AD59 A1BC975900 mov eax, dword ptr [005997BC]
:0056AD5E 8B00 mov eax, dword ptr [eax]
:0056AD60 E83B660200 call 005913A0
:0056AD65 8B45D4 mov eax, dword ptr [ebp-2C]
:0056AD68 8D55E8 lea edx, dword ptr [ebp-18]
:0056AD6B E8A4E7E9FF call 00409514
:0056AD70 EB4D jmp 0056ADBF
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0056AD54(C)
|
:0056AD72 8D4DCC lea ecx, dword ptr [ebp-34]
:0056AD75 A1BC975900 mov eax, dword ptr [005997BC]
:0056AD7A 8B00 mov eax, dword ptr [eax]
:0056AD7C 33D2 xor edx, edx
:0056AD7E E88D680200 call 00591610
:0056AD83 8B45CC mov eax, dword ptr [ebp-34]
:0056AD86 8D55D0 lea edx, dword ptr [ebp-30]
:0056AD89 E886E7E9FF call 00409514
:0056AD8E 837DD000 cmp dword ptr [ebp-30], 00000000
:0056AD92 741E je 0056ADB2
:0056AD94 8D4DC8 lea ecx, dword ptr [ebp-38]
:0056AD97 A1BC975900 mov eax, dword ptr [005997BC]
:0056AD9C 8B00 mov eax, dword ptr [eax]
:0056AD9E 33D2 xor edx, edx
:0056ADA0 E86B680200 call 00591610
:0056ADA5 8B45C8 mov eax, dword ptr [ebp-38]
:0056ADA8 8D55E8 lea edx, dword ptr [ebp-18]
:0056ADAB E864E7E9FF call 00409514
:0056ADB0 EB0D jmp 0056ADBF
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0056AD92(C)
|
:0056ADB2 8D45E8 lea eax, dword ptr [ebp-18]
* Possible StringData Ref from Code Obj ->"WD-WCAJC2512504"
|
:0056ADB5 BA54B05600 mov edx, 0056B054
:0056ADBA E8AD9DE9FF call 00404B6C
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0056AD70(U), :0056ADB0(U)
|
:0056ADBF 8D45E4 lea eax, dword ptr [ebp-1C]
:0056ADC2 E80D9DE9FF call 00404AD4
:0056ADC7 8B45E8 mov eax, dword ptr [ebp-18]
:0056ADCA E8C59FE9FF call 00404D94
:0056ADCF 8BF0 mov esi, eax
:0056ADD1 85F6 test esi, esi
:0056ADD3 7E58 jle 0056AE2D
:0056ADD5 C745E001000000 mov [ebp-20], 00000001
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0056AE2B(C)
|
:0056ADDC 8D45C4 lea eax, dword ptr [ebp-3C]
:0056ADDF 50 push eax
:0056ADE0 B901000000 mov ecx, 00000001
:0056ADE5 8B55E0 mov edx, dword ptr [ebp-20]
:0056ADE8 8B45E8 mov eax, dword ptr [ebp-18]
:0056ADEB E804A2E9FF call 00404FF4
:0056ADF0 8B45C4 mov eax, dword ptr [ebp-3C]
:0056ADF3 E89CA1E9FF call 00404F94
:0056ADF8 8A18 mov bl, byte ptr [eax]
:0056ADFA 8D45C0 lea eax, dword ptr [ebp-40]
:0056ADFD 50 push eax
:0056ADFE 8D55BC lea edx, dword ptr [ebp-44]
:0056AE01 33C0 xor eax, eax
:0056AE03 8AC3 mov al, bl
:0056AE05 E8E6EBE9FF call 004099F0
:0056AE0A 8B45BC mov eax, dword ptr [ebp-44]
:0056AE0D B901000000 mov ecx, 00000001
:0056AE12 BA02000000 mov edx, 00000002
:0056AE17 E8D8A1E9FF call 00404FF4
:0056AE1C 8B55C0 mov edx, dword ptr [ebp-40]
:0056AE1F 8D45E4 lea eax, dword ptr [ebp-1C]
:0056AE22 E8759FE9FF call 00404D9C
:0056AE27 FF45E0 inc [ebp-20]
:0056AE2A 4E dec esi
:0056AE2B 75AF jne 0056ADDC
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0056ADD3(C)
|
:0056AE2D 8B45E4 mov eax, dword ptr [ebp-1C]
:0056AE30 E85F9FE9FF call 00404D94
:0056AE35 83F808 cmp eax, 00000008
:0056AE38 7E63 jle 0056AE9D
:0056AE3A 686CB05600 push 0056B06C
:0056AE3F 8D45B4 lea eax, dword ptr [ebp-4C]
:0056AE42 50 push eax
:0056AE43 B908000000 mov ecx, 00000008
:0056AE48 BA01000000 mov edx, 00000001
:0056AE4D 8B45E4 mov eax, dword ptr [ebp-1C]
:0056AE50 E89FA1E9FF call 00404FF4
:0056AE55 8B45B4 mov eax, dword ptr [ebp-4C]
:0056AE58 E8CFECE9FF call 00409B2C
:0056AE5D 8D0440 lea eax, dword ptr [eax+2*eax]
:0056AE60 058B8F0C00 add eax, 000C8F8B
:0056AE65 8D55B8 lea edx, dword ptr [ebp-48]
:0056AE68 E883EBE9FF call 004099F0
:0056AE6D FF75B8 push [ebp-48]
:0056AE70 8D45B0 lea eax, dword ptr [ebp-50]
:0056AE73 50 push eax
:0056AE74 8B45E4 mov eax, dword ptr [ebp-1C]
:0056AE77 E8189FE9FF call 00404D94
:0056AE7C 8BC8 mov ecx, eax
:0056AE7E BA09000000 mov edx, 00000009
:0056AE83 8B45E4 mov eax, dword ptr [ebp-1C]
:0056AE86 E869A1E9FF call 00404FF4
:0056AE8B FF75B0 push [ebp-50]
:0056AE8E 8D45EC lea eax, dword ptr [ebp-14]
:0056AE91 BA03000000 mov edx, 00000003
:0056AE96 E8B99FE9FF call 00404E54
:0056AE9B EB28 jmp 0056AEC5
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0056AE38(C)
|
:0056AE9D 8B45E4 mov eax, dword ptr [ebp-1C]
:0056AEA0 E887ECE9FF call 00409B2C
:0056AEA5 8D0440 lea eax, dword ptr [eax+2*eax]
:0056AEA8 058B8F0C00 add eax, 000C8F8B
:0056AEAD 8D55AC lea edx, dword ptr [ebp-54]
:0056AEB0 E83BEBE9FF call 004099F0
:0056AEB5 8B4DAC mov ecx, dword ptr [ebp-54]
:0056AEB8 8D45EC lea eax, dword ptr [ebp-14]
:0056AEBB BA6CB05600 mov edx, 0056B06C
:0056AEC0 E81B9FE9FF call 00404DE0
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0056AE9B(U)
|
* Possible StringData Ref from Code Obj ->"输入注册码错误,请重新注册."
|
:0056AEC5 B878B05600 mov eax, 0056B078
:0056AECA E8D916EDFF call 0043C5A8
:0056AECF E8802DEAFF call 0040DC54
:0056AED4 8B45FC mov eax, dword ptr [ebp-04]
:0056AED7 C6801803000001 mov byte ptr [eax+00000318], 01
:0056AEDE 8D55A4 lea edx, dword ptr [ebp-5C]
:0056AEE1 8B45FC mov eax, dword ptr [ebp-04]
:0056AEE4 8B8000030000 mov eax, dword ptr [eax+00000300]
:0056AEEA E83165F0FF call 00471420
:0056AEEF 8B45A4 mov eax, dword ptr [ebp-5C]
:0056AEF2 8D55A8 lea edx, dword ptr [ebp-58]
:0056AEF5 E81AE6E9FF call 00409514
:0056AEFA 8B45A8 mov eax, dword ptr [ebp-58]
:0056AEFD 8B55EC mov edx, dword ptr [ebp-14]
:0056AF00 E8DB9FE9FF call 00404EE0
:0056AF05 740F je 0056AF16
* Possible StringData Ref from Code Obj ->"输入注册码错误,请重新注册."
|
:0056AF07 B878B05600 mov eax, 0056B078
:0056AF0C E89716EDFF call 0043C5A8
:0056AF11 E9F4000000 jmp 0056B00A
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0056AF05(C)
|
:0056AF16 33C0 xor eax, eax
:0056AF18 55 push ebp
:0056AF19 6803B05600 push 0056B003
:0056AF1E 64FF30 push dword ptr fs:[eax]
:0056AF21 648920 mov dword ptr fs:[eax], esp
:0056AF24 B201 mov dl, 01
:0056AF26 A1E46A4400 mov eax, dword ptr [00446AE4]
:0056AF2B E8B4BCEDFF call 00446BE4
:0056AF30 8BD8 mov ebx, eax
:0056AF32 BA02000080 mov edx, 80000002
:0056AF37 8BC3 mov eax, ebx
:0056AF39 E846BDEDFF call 00446C84
:0056AF3E 8D45F8 lea eax, dword ptr [ebp-08]
* Possible StringData Ref from Code Obj ->"Software\Login\dsyotte"
|
:0056AF41 BA9CB05600 mov edx, 0056B09C
:0056AF46 E8219CE9FF call 00404B6C
:0056AF4B B101 mov cl, 01
:0056AF4D 8B55F8 mov edx, dword ptr [ebp-08]
:0056AF50 8BC3 mov eax, ebx
:0056AF52 E895BDEDFF call 00446CEC
:0056AF57 84C0 test al, al
:0056AF59 0F848E000000 je 0056AFED
:0056AF5F 8D4DF4 lea ecx, dword ptr [ebp-0C]
* Possible StringData Ref from Code Obj ->"Passwd"
|
:0056AF62 BABCB05600 mov edx, 0056B0BC
:0056AF67 8BC3 mov eax, ebx
:0056AF69 E826C1EDFF call 00447094
:0056AF6E 837DF400 cmp dword ptr [ebp-0C], 00000000
:0056AF72 741A je 0056AF8E
:0056AF74 8BC3 mov eax, ebx
:0056AF76 E8D9BCEDFF call 00446C54
:0056AF7B 8BC3 mov eax, ebx
:0056AF7D E83E8CE9FF call 00403BC0
* Possible StringData Ref from Code Obj ->"已注册过,不能再注册!"
|
:0056AF82 B8CCB05600 mov eax, 0056B0CC
:0056AF87 E81C16EDFF call 0043C5A8
:0056AF8C EB5F jmp 0056AFED
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0056AF72(C)
|
:0056AF8E 8D55A0 lea edx, dword ptr [ebp-60]
:0056AF91 8B45FC mov eax, dword ptr [ebp-04]
:0056AF94 8B8000030000 mov eax, dword ptr [eax+00000300]
:0056AF9A E88164F0FF call 00471420
:0056AF9F 8B45A0 mov eax, dword ptr [ebp-60]
:0056AFA2 8D55F0 lea edx, dword ptr [ebp-10]
:0056AFA5 E86AE5E9FF call 00409514
:0056AFAA 8D4DEC lea ecx, dword ptr [ebp-14]
:0056AFAD A1BC975900 mov eax, dword ptr [005997BC]
:0056AFB2 8B00 mov eax, dword ptr [eax]
:0056AFB4 8B55F0 mov edx, dword ptr [ebp-10]
:0056AFB7 E8606A0200 call 00591A1C
:0056AFBC 8B4DEC mov ecx, dword ptr [ebp-14]
* Possible StringData Ref from Code Obj ->"Passwd"
|
:0056AFBF BABCB05600 mov edx, 0056B0BC
:0056AFC4 8BC3 mov eax, ebx
:0056AFC6 E89DC0EDFF call 00447068
:0056AFCB A1ACBF5900 mov eax, dword ptr [0059BFAC]
:0056AFD0 E8E739F2FF call 0048E9BC
* Possible StringData Ref from Code Obj ->"恭喜,您已注册成功. "
|
:0056AFD5 B8ECB05600 mov eax, 0056B0EC
:0056AFDA E8C915EDFF call 0043C5A8
:0056AFDF 8BC3 mov eax, ebx
:0056AFE1 E86EBCEDFF call 00446C54
:0056AFE6 8BC3 mov eax, ebx
:0056AFE8 E8D38BE9FF call 00403BC0
软件下载:http://gx.onlinedown.net/soft/24112.htm
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课