如和下手破掉它-软件逆向-看雪-安全社区|安全招聘|kanxue.com

如和下手破掉它

发表于: 2007-3-22 13:06 4275

如和下手破掉它

mack

2007-3-22 13:06

4275

0041B610 .  53          push ebx
0041B611 .  56          push esi
0041B612 .  A1 B4155500 mov    eax, dword ptr [5515B4]
0041B617 .  85C0       test eax, eax
0041B619 .  0F84 BC000000 je    0041B6DB
0041B61F .  83B8 1C010200>cmp    dword ptr [eax+2011C], 0
0041B626 .  0F84 AF000000 je    0041B6DB
0041B62C .  33F6       xor    esi, esi
0041B62E >  6A 00       push 0                               ; /Arg5 = 00000000
0041B630 .  A1 B4155500 mov    eax, dword ptr [5515B4]       ; |
0041B635 .  6A 00       push 0                               ; |Arg4 = 00000000
0041B637 .  68 F41A0000 push 1AF4                            ; |Arg3 = 00001AF4
0041B63C .  68 434C5500 push 00554C43                      ; |69.155.91.132
0041B641 .  8B90 1C010200 mov    edx, dword ptr [eax+2011C]    ; |
0041B647 .  52          push edx                            ; |Arg1
0041B648 .  E8 FF5A0200 call 0044114C                      ; \dumped_.0044114C
0041B64D .  83C4 14    add    esp, 14
0041B650 .  8BD8       mov    ebx, eax
0041B652 .  84DB       test bl, bl
0041B654 .  74 53       je    short 0041B6A9
0041B656 .  6A 00       push 0                               ; /Arg2 = 00000000
0041B658 .  A1 B4155500 mov    eax, dword ptr [5515B4]       ; |
0041B65D .  8B90 1C010200 mov    edx, dword ptr [eax+2011C]    ; |
0041B663 .  52          push edx                            ; |Arg1
0041B664 .  E8 6F5B0200 call 004411D8                      ; \dumped_.004411D8
0041B669 .  83C4 08    add    esp, 8
0041B66C .  8B0D B4155500 mov    ecx, dword ptr [5515B4]
0041B672 .  8B81 1C010200 mov    eax, dword ptr [ecx+2011C]
0041B678 .  50          push eax                            ; /Arg1
0041B679 .  E8 6A5B0200 call 004411E8                      ; \dumped_.004411E8
0041B67E .  59          pop    ecx
0041B67F .  84C0       test al, al
0041B681 .  75 50       jnz    short 0041B6D3
0041B683 .  A1 B4155500 mov    eax, dword ptr [5515B4]
0041B688 .  8B90 1C010200 mov    edx, dword ptr [eax+2011C]
0041B68E .  81C2 9C000000 add    edx, 9C
0041B694 .  52          push edx                            ; /Arg5
0041B695 .  68 514C5500 push 00554C51                      ; |验证服务器-- %s...
0041B69A .  6A 03       push 3                               ; |Arg3 = 00000003
0041B69C .  6A 00       push 0                               ; |Arg2 = 00000000
0041B69E .  50          push eax                            ; |Arg1 => 00000000
0041B69F .  E8 780B0000 call 0041C21C                      ; \dumped_.0041C21C
0041B6A4 .  83C4 14    add    esp, 14
0041B6A7 .  EB 2A       jmp    short 0041B6D3
0041B6A9 >  46          inc    esi
0041B6AA .  6A 64       push 64                            ; /Timeout = 100. ms
0041B6AC .  E8 7D481200 call <jmp.&kernel32.Sleep>          ; \Sleep
0041B6B1 .  81FE 10270000 cmp    esi, 2710
0041B6B7 .  7E 1A       jle    short 0041B6D3
0041B6B9 .  6A 03       push 3                               ; /Arg2 = 00000003
0041B6BB .  8B0D B4155500 mov    ecx, dword ptr [5515B4]       ; |
0041B6C1 .  8B81 1C010200 mov    eax, dword ptr [ecx+2011C]    ; |
0041B6C7 .  50          push eax                            ; |Arg1
0041B6C8 .  E8 0B5B0200 call 004411D8                      ; \dumped_.004411D8
0041B6CD .  83C4 08    add    esp, 8
0041B6D0 .  5E          pop    esi
0041B6D1 .  5B          pop    ebx
0041B6D2 .  C3          retn
0041B6D3 >  84DB       test bl, bl
0041B6D5 .^ 0F84 53FFFFFF je    0041B62E
0041B6DB >  5E          pop    esi
0041B6DC .  5B          pop    ebx
0041B6DD .  C3          retn
0041B6DE    90          nop

00420B2B    90          nop
00420B2C  /$  55          push ebp
00420B2D  |.  8BEC       mov    ebp, esp
00420B2F  |.  83C4 D4    add    esp, -2C
00420B32  |.  B8 F05C5500 mov    eax, 00555CF0
00420B37  |.  53          push ebx
00420B38  |.  56          push esi
00420B39  |.  8B5D 08    mov    ebx, dword ptr [ebp+8]
00420B3C  |.  E8 AFC70F00 call 0051D2F0
00420B41  |.  C683 41010200>mov    byte ptr [ebx+20141], 1
00420B48  |.  83BB 1C010200>cmp    dword ptr [ebx+2011C], 0
00420B4F  |.  74 11       je    short 00420B62
00420B51  |.  B0 01       mov    al, 1
00420B53  |.  8B55 D8    mov    edx, dword ptr [ebp-28]
00420B56  |.  64:8915 00000>mov    dword ptr fs:[0], edx
00420B5D  |.  E9 26010000 jmp    00420C88
00420B62  |>  68 E4010000 push 1E4                            ; /Arg1 = 000001E4
00420B67  |.  E8 84B40F00 call 0051BFF0                      ; \dumped_.0051BFF0
00420B6C  |.  59          pop    ecx
00420B6D  |.  8945 FC    mov    dword ptr [ebp-4], eax
00420B70  |.  85C0       test eax, eax
00420B72  |.  74 1B       je    short 00420B8F
00420B74  |.  66:C745 E8 14>mov    word ptr [ebp-18], 14
00420B7A  |.  8B55 FC    mov    edx, dword ptr [ebp-4]
00420B7D  |.  52          push edx                            ; /Arg1
00420B7E  |.  E8 15020200 call 00440D98                      ; \dumped_.00440D98
00420B83  |.  59          pop    ecx
00420B84  |.  66:C745 E8 08>mov    word ptr [ebp-18], 8
00420B8A  |.  8B75 FC    mov    esi, dword ptr [ebp-4]
00420B8D  |.  EB 03       jmp    short 00420B92
00420B8F  |>  8B75 FC    mov    esi, dword ptr [ebp-4]
00420B92  |>  33C0       xor    eax, eax
00420B94  |.  89B3 1C010200 mov    dword ptr [ebx+2011C], esi
00420B9A  |.  8946 04    mov    dword ptr [esi+4], eax
00420B9D  |.  33D2       xor    edx, edx
00420B9F  |.  8956 44    mov    dword ptr [esi+44], edx
00420BA2  |.  33C9       xor    ecx, ecx
00420BA4  |.  C746 48 03000>mov    dword ptr [esi+48], 3
00420BAB  |.  898B 20010200 mov    dword ptr [ebx+20120], ecx
00420BB1  |.  33C0       xor    eax, eax
00420BB3  |.  8983 28010200 mov    dword ptr [ebx+20128], eax
00420BB9  |.  8B83 38010200 mov    eax, dword ptr [ebx+20138]
00420BBF  |.  85C0       test eax, eax
00420BC1  |.  74 1D       je    short 00420BE0
00420BC3  |.  8B93 3C010200 mov    edx, dword ptr [ebx+2013C]
00420BC9  |.  52          push edx                            ; /ExitCode
00420BCA  |.  50          push eax                            ; |hThread
00420BCB  |.  E8 64F31100 call <jmp.&kernel32.TerminateThread>  ; \TerminateThread
00420BD0  |.  33C9       xor    ecx, ecx
00420BD2  |.  33C0       xor    eax, eax
00420BD4  |.  898B 3C010200 mov    dword ptr [ebx+2013C], ecx
00420BDA  |.  8983 38010200 mov    dword ptr [ebx+20138], eax
00420BE0  |>  8D55 D4    lea    edx, dword ptr [ebp-2C]
00420BE3  |.  52          push edx                            ; /pThreadId
00420BE4  |.  6A 00       push 0                               ; |CreationFlags = 0
00420BE6  |.  6A 00       push 0                               ; |pThreadParm = NULL
00420BE8  |.  68 10B64100 push 0041B610                      ; |ThreadFunction = dumped_.0041B610
00420BED  |.  6A 00       push 0                               ; |StackSize = 0
00420BEF  |.  6A 00       push 0                               ; |pSecurity = NULL
00420BF1  |.  E8 DAF01100 call <jmp.&kernel32.CreateThread>    ; \CreateThread
00420BF6  |.  8BF0       mov    esi, eax
00420BF8  |.  89B3 38010200 mov    dword ptr [ebx+20138], esi
00420BFE  |.  85F6       test esi, esi
00420C00  |.  75 25       jnz    short 00420C27
00420C02  |.  68 04515500 push 00555104                      ; /认证连接线程创建失败！请尝试重启程序。如果多次发生该情况，请检查系统或联系客服
00420C07  |.  6A 03       push 3                               ; |Arg3 = 00000003
00420C09  |.  6A 00       push 0                               ; |Arg2 = 00000000
00420C0B  |.  A1 B4155500 mov    eax, dword ptr [5515B4]       ; |
00420C10  |.  50          push eax                            ; |Arg1 => 00000000
00420C11  |.  E8 06B6FFFF call 0041C21C                      ; \dumped_.0041C21C
00420C16  |.  83C4 10    add    esp, 10
00420C19  |.  33C0       xor    eax, eax
00420C1B  |.  8B55 D8    mov    edx, dword ptr [ebp-28]
00420C1E  |.  64:8915 00000>mov    dword ptr fs:[0], edx
00420C25  |.  EB 61       jmp    short 00420C88
00420C27  |>  8D8B 3C010200 lea    ecx, dword ptr [ebx+2013C]
00420C2D  |.  51          push ecx                            ; /pExitCode
00420C2E  |.  8B83 38010200 mov    eax, dword ptr [ebx+20138]    ; |
00420C34  |.  50          push eax                            ; |hThread
00420C35  |.  E8 3EF11100 call <jmp.&kernel32.GetExitCodeThread>; \GetExitCodeThread
00420C3A  |.  85C0       test eax, eax
00420C3C  |.  75 26       jnz    short 00420C64
00420C3E  |.  68 54515500 push 00555154                      ; /认证连接线程exitcode获取失败！请尝试重启程序。如果多次发生该情况，请检查系统或联系客服
00420C43  |.  6A 03       push 3                               ; |Arg3 = 00000003
00420C45  |.  6A 00       push 0                               ; |Arg2 = 00000000
00420C47  |.  8B15 B4155500 mov    edx, dword ptr [5515B4]       ; |
00420C4D  |.  52          push edx                            ; |Arg1 => 00000000
00420C4E  |.  E8 C9B5FFFF call 0041C21C                      ; \dumped_.0041C21C
00420C53  |.  83C4 10    add    esp, 10
00420C56  |.  33C0       xor    eax, eax
00420C58  |.  8B55 D8    mov    edx, dword ptr [ebp-28]
00420C5B  |.  64:8915 00000>mov    dword ptr fs:[0], edx
00420C62  |.  EB 24       jmp    short 00420C88
00420C64  |>  68 AC515500 push 005551AC                      ; /认证启动
00420C69  |.  6A 03       push 3                               ; |Arg3 = 00000003
00420C6B  |.  6A 00       push 0                               ; |Arg2 = 00000000
00420C6D  |.  8B0D B4155500 mov    ecx, dword ptr [5515B4]       ; |
00420C73  |.  51          push ecx                            ; |Arg1 => 00000000
00420C74  |.  E8 A3B5FFFF call 0041C21C                      ; \dumped_.0041C21C
00420C79  |.  83C4 10    add    esp, 10
00420C7C  |.  B0 01       mov    al, 1
00420C7E  |.  8B55 D8    mov    edx, dword ptr [ebp-28]
00420C81  |.  64:8915 00000>mov    dword ptr fs:[0], edx
00420C88  |>  5E          pop    esi
00420C89  |.  5B          pop    ebx
00420C8A  |.  8BE5       mov    esp, ebp
00420C8C  |.  5D          pop    ebp
00420C8D  \.  C3          retn
00420C8E    90          nop
00420C8F    90          nop
00420C90  /$  55          push ebp
00420C91  |.  8BEC       mov    ebp, esp
00420C93  |.  81C4 04F0FFFF add    esp, -0FFC
00420C99  |.  50          push eax
00420C9A  |.  83C4 F0    add    esp, -10
00420C9D  |.  803D 104C5500>cmp    byte ptr [554C10], 0
00420CA4  |.  53          push ebx
00420CA5  |.  56          push esi
00420CA6  |.  57          push edi
00420CA7  |.  8B5D 08    mov    ebx, dword ptr [ebp+8]
00420CAA  |.  75 1B       jnz    short 00420CC7
00420CAC  |.  80BB 48010200>cmp    byte ptr [ebx+20148], 0
00420CB3  |.  74 12       je    short 00420CC7
00420CB5  |.  53          push ebx                            ; /Arg1
00420CB6  |.  E8 71FEFFFF call 00420B2C                      ; \dumped_.00420B2C
00420CBB  |.  59          pop    ecx
00420CBC  |.  84C0       test al, al
00420CBE  |.  74 07       je    short 00420CC7
00420CC0  |.  C605 104C5500>mov    byte ptr [554C10], 1
00420CC7  |>  E8 36F11100 call <jmp.&kernel32.GetTickCount>    ; [GetTickCount
00420CCC  |.  8945 FC    mov    dword ptr [ebp-4], eax
00420CCF  |.  8B83 14010200 mov    eax, dword ptr [ebx+20114]
00420CD5  |.  85C0       test eax, eax
00420CD7  |.  0F84 D3010000 je    00420EB0
00420CDD  |.  8378 08 00 cmp    dword ptr [eax+8], 0
00420CE1  |.  0F84 C9010000 je    00420EB0
00420CE7  |.  8B83 1C010200 mov    eax, dword ptr [ebx+2011C]
00420CED  |.  85C0       test eax, eax
00420CEF  |.  0F84 BB010000 je    00420EB0
00420CF5  |.  50          push eax
00420CF6  |.  E8 55060200 call 00441350
00420CFB  |.  59          pop    ecx
00420CFC  |.  8B93 1C010200 mov    edx, dword ptr [ebx+2011C]
00420D02  |.  52          push edx                            ; /Arg1
00420D03  |.  E8 E8020200 call 00440FF0                      ; \dumped_.00440FF0
00420D08  |.  59          pop    ecx
00420D09  |.  83F8 02    cmp    eax, 2
00420D0C  |.  0F85 5D010000 jnz    00420E6F
00420D12  |.  8B4D FC    mov    ecx, dword ptr [ebp-4]
00420D15  |.  2B8B 20010200 sub    ecx, dword ptr [ebx+20120]
00420D1B  |.  3B8B 24010200 cmp    ecx, dword ptr [ebx+20124]
00420D21  |.  0F86 07010000 jbe    00420E2E
00420D27  |.  8B45 FC    mov    eax, dword ptr [ebp-4]
00420D2A  |.  8983 20010200 mov    dword ptr [ebx+20120], eax
00420D30  |.  E8 CDF01100 call <jmp.&kernel32.GetTickCount>    ; [GetTickCount
00420D35  |.  B9 E0930400 mov    ecx, 493E0
00420D3A  |.  33D2       xor    edx, edx
00420D3C  |.  F7F1       div    ecx
00420D3E  |.  8993 24010200 mov    dword ptr [ebx+20124], edx
00420D44  |.  83BB 14010200>cmp    dword ptr [ebx+20114], 0
00420D4B  |.  74 0B       je    short 00420D58
00420D4D  |.  8B83 14010200 mov    eax, dword ptr [ebx+20114]
00420D53  |.  8B70 08    mov    esi, dword ptr [eax+8]
00420D56  |.  EB 02       jmp    short 00420D5A
00420D58  |>  33F6       xor    esi, esi
00420D5A  |>  8BFE       mov    edi, esi
00420D5C  |.  68 00100000 push 1000                            ; /Arg3 = 00001000
00420D61  |.  C1E7 04    shl    edi, 4                         ; |
00420D64  |.  8D85 F0EFFFFF lea    eax, dword ptr [ebp-1010]       ; |
00420D6A  |.  6A 00       push 0                               ; |Arg2 = 00000000
00420D6C  |.  50          push eax                            ; |Arg1
00420D6D  |.  81C7 94000000 add    edi, 94                         ; |
00420D73  |.  E8 98C00F00 call 0051CE10                      ; \dumped_.0051CE10
00420D78  |.  83C4 0C    add    esp, 0C
00420D7B  |.  8D95 F0EFFFFF lea    edx, dword ptr [ebp-1010]
00420D81  |.  8955 F8    mov    dword ptr [ebp-8], edx
00420D84  |.  8B4D F8    mov    ecx, dword ptr [ebp-8]
00420D87  |.  66:8939    mov    word ptr [ecx], di
00420D8A  |.  8B45 F8    mov    eax, dword ptr [ebp-8]
00420D8D  |.  8B93 34010200 mov    edx, dword ptr [ebx+20134]
00420D93  |.  8950 48    mov    dword ptr [eax+48], edx
00420D96  |.  8B4D F8    mov    ecx, dword ptr [ebp-8]
00420D99  |.  8971 44    mov    dword ptr [ecx+44], esi
00420D9C  |.  8B45 F8    mov    eax, dword ptr [ebp-8]
00420D9F  |.  8B93 30010200 mov    edx, dword ptr [ebx+20130]
00420DA5  |.  8950 4C    mov    dword ptr [eax+4C], edx
00420DA8  |.  8B4D F8    mov    ecx, dword ptr [ebp-8]
00420DAB  |.  66:C741 02 00>mov    word ptr [ecx+2], 0
00420DB1  |.  C745 F4 94000>mov    dword ptr [ebp-C], 94
00420DB8  |.  8B83 14010200 mov    eax, dword ptr [ebx+20114]
00420DBE  |.  8B08       mov    ecx, dword ptr [eax]
00420DC0  |.  85C9       test ecx, ecx
00420DC2  |.  74 32       je    short 00420DF6
00420DC4  |>  8B41 10    /mov    eax, dword ptr [ecx+10]
00420DC7  |.  8D95 F0EFFFFF |lea    edx, dword ptr [ebp-1010]
00420DCD  |.  0355 F4    |add    edx, dword ptr [ebp-C]
00420DD0  |.  8B75 F4    |mov    esi, dword ptr [ebp-C]
00420DD3  |.  83C6 10    |add    esi, 10
00420DD6  |.  8975 F4    |mov    dword ptr [ebp-C], esi
00420DD9  |.  8B30       |mov    esi, dword ptr [eax]
00420DDB  |.  8932       |mov    dword ptr [edx], esi
00420DDD  |.  8B70 04    |mov    esi, dword ptr [eax+4]
00420DE0  |.  8972 04    |mov    dword ptr [edx+4], esi
00420DE3  |.  8B70 08    |mov    esi, dword ptr [eax+8]
00420DE6  |.  8972 08    |mov    dword ptr [edx+8], esi
00420DE9  |.  8B40 10    |mov    eax, dword ptr [eax+10]
00420DEC  |.  8942 0C    |mov    dword ptr [edx+C], eax
00420DEF  |.  8B49 04    |mov    ecx, dword ptr [ecx+4]
00420DF2  |.  85C9       |test ecx, ecx
00420DF4  |.^ 75 CE       \jnz    short 00420DC4
00420DF6  |>  8D95 F0EFFFFF lea    edx, dword ptr [ebp-1010]
00420DFC  |.  52          push edx                            ; /Arg2
00420DFD  |.  53          push ebx                            ; |Arg1
00420DFE  |.  E8 09010000 call 00420F0C                      ; \dumped_.00420F0C
00420E03  |.  83C4 08    add    esp, 8
00420E06  |.  8D95 F0EFFFFF lea    edx, dword ptr [ebp-1010]
00420E0C  |.  6A FF       push -1                            ; /Arg5 = FFFFFFFF
00420E0E  |.  6A 01       push 1                               ; |Arg4 = 00000001
00420E10  |.  8B4D F8    mov    ecx, dword ptr [ebp-8]          ; |
00420E13  |.  0FB701       movzx eax, word ptr [ecx]             ; |
00420E16  |.  50          push eax                            ; |Arg3
00420E17  |.  52          push edx                            ; |Arg2
00420E18  |.  8B8B 1C010200 mov    ecx, dword ptr [ebx+2011C]    ; |
00420E1E  |.  51          push ecx                            ; |Arg1
00420E1F  |.  E8 DC0B0200 call 00441A00                      ; \dumped_.00441A00
00420E24  |.  83C4 14    add    esp, 14
00420E27  |.  C683 41010200>mov    byte ptr [ebx+20141], 0
00420E2E  |>  8B45 FC    mov    eax, dword ptr [ebp-4]
00420E31  |.  2B83 28010200 sub    eax, dword ptr [ebx+20128]
00420E37  |.  3D 204E0000 cmp    eax, 4E20
00420E3C  |.  76 31       jbe    short 00420E6F
00420E3E  |.  66:C745 F0 04>mov    word ptr [ebp-10], 4
00420E44  |.  66:C745 F2 01>mov    word ptr [ebp-E], 1
00420E4A  |.  6A FF       push -1                            ; /Arg5 = FFFFFFFF
00420E4C  |.  6A 01       push 1                               ; |Arg4 = 00000001
00420E4E  |.  0FB755 F0    movzx edx, word ptr [ebp-10]          ; |
00420E52  |.  52          push edx                            ; |Arg3
00420E53  |.  8D4D F0    lea    ecx, dword ptr [ebp-10]       ; |
00420E56  |.  51          push ecx                            ; |Arg2
00420E57  |.  8B83 1C010200 mov    eax, dword ptr [ebx+2011C]    ; |
00420E5D  |.  50          push eax                            ; |Arg1
00420E5E  |.  E8 9D0B0200 call 00441A00                      ; \dumped_.00441A00
00420E63  |.  83C4 14    add    esp, 14
00420E66  |.  8B55 FC    mov    edx, dword ptr [ebp-4]
00420E69  |.  8993 28010200 mov    dword ptr [ebx+20128], edx
00420E6F  |>  8B8B 1C010200 mov    ecx, dword ptr [ebx+2011C]
00420E75  |.  51          push ecx                            ; /Arg1
00420E76  |.  E8 75010200 call 00440FF0                      ; \dumped_.00440FF0
00420E7B  |.  59          pop    ecx
00420E7C  |.  83F8 04    cmp    eax, 4
00420E7F  |.  75 2F       jnz    short 00420EB0
00420E81  |.  803D 114C5500>cmp    byte ptr [554C11], 0
00420E88  |.  75 26       jnz    short 00420EB0
00420E8A  |.  68 B5515500 push 005551B5                      ; /验证服务器断开链接.....
00420E8F  |.  6A 03       push 3                               ; |Arg3 = 00000003
00420E91  |.  6A 00       push 0                               ; |Arg2 = 00000000
00420E93  |.  A1 B4155500 mov    eax, dword ptr [5515B4]       ; |
00420E98  |.  50          push eax                            ; |Arg1 => 00000000
00420E99  |.  E8 7EB3FFFF call 0041C21C                      ; \dumped_.0041C21C
00420E9E  |.  83C4 10    add    esp, 10
00420EA1  |.  33D2       xor    edx, edx
00420EA3  |.  8993 44010200 mov    dword ptr [ebx+20144], edx
00420EA9  |.  C605 114C5500>mov    byte ptr [554C11], 1
00420EB0  |>  5F          pop    edi
00420EB1  |.  5E          pop    esi
00420EB2  |.  5B          pop    ebx
00420EB3  |.  8BE5       mov    esp, ebp
00420EB5  |.  5D          pop    ebp
00420EB6  \.  C3          retn
00420EB7    90          nop
00420EB8  /$  55          push ebp
00420EB9  |.  8BEC       mov    ebp, esp
00420EBB  |.  81C4 04F0FFFF add    esp, -0FFC
00420EC1  |.  50          push eax
00420EC2  |.  53          push ebx
00420EC3  |.  8B45 0C    mov    eax, dword ptr [ebp+C]
00420EC6  |.  8B5D 08    mov    ebx, dword ptr [ebp+8]
00420EC9  |.  8BD0       mov    edx, eax
00420ECB  |.  66:837A 02 01 cmp    word ptr [edx+2], 1
00420ED0  |.  74 33       je    short 00420F05
00420ED2  |.  8B4D 10    mov    ecx, dword ptr [ebp+10]
00420ED5  |.  51          push ecx                            ; /Arg3
00420ED6  |.  50          push eax                            ; |Arg2
00420ED7  |.  8D85 00F0FFFF lea    eax, dword ptr [ebp-1000]       ; |
00420EDD  |.  50          push eax                            ; |Arg1
00420EDE  |.  E8 BDBE0F00 call 0051CDA0                      ; \dumped_.0051CDA0
00420EE3  |.  83C4 0C    add    esp, 0C
00420EE6  |.  8D85 00F0FFFF lea    eax, dword ptr [ebp-1000]
00420EEC  |.  50          push eax
00420EED  |.  53          push ebx
00420EEE  |.  E8 E1010000 call 004210D4
00420EF3  |.  83C4 08    add    esp, 8
00420EF6  |.  8B15 9C4F5900 mov    edx, dword ptr [594F9C]       ;  dumped_._Form_Main
00420EFC  |.  8B0A       mov    ecx, dword ptr [edx]
00420EFE  |.  51          push ecx
00420EFF  |.  E8 707FFEFF call 00408E74
00420F04  |.  59          pop    ecx
00420F05  |>  5B          pop    ebx
00420F06  |.  8BE5       mov    esp, ebp
00420F08  |.  5D          pop    ebp
00420F09  \.  C3          retn
00420F0A    90          nop
00420F0B    90          nop
00420F0C  /$  55          push ebp
00420F0D  |.  8BEC       mov    ebp, esp
00420F0F  |.  83C4 F0    add    esp, -10
00420F12  |.  53          push ebx
00420F13  |.  56          push esi
00420F14  |.  57          push edi
00420F15  |.  8B45 0C    mov    eax, dword ptr [ebp+C]
00420F18  |.  8945 FC    mov    dword ptr [ebp-4], eax
00420F1B  |>  E8 9878FFFF /call 004187B8
00420F20  |.  8BD8       |mov    ebx, eax
00420F22  |.  8B45 FC    |mov    eax, dword ptr [ebp-4]
00420F25  |.  8958 50    |mov    dword ptr [eax+50], ebx
00420F28  |.  81FB 00000010 |cmp    ebx, 10000000
00420F2E  |.^ 76 EB       \jbe    short 00420F1B
00420F30  |.  8B55 FC    mov    edx, dword ptr [ebp-4]
00420F33  |.  8B4A 44    mov    ecx, dword ptr [edx+44]
00420F36  |.  894D F8    mov    dword ptr [ebp-8], ecx
00420F39  |.  B9 BC030000 mov    ecx, 3BC
00420F3E  |.  8B45 FC    mov    eax, dword ptr [ebp-4]
00420F41  |.  8170 50 EF12B>xor    dword ptr [eax+50], 93B712EF
00420F48  |.  8B55 FC    mov    edx, dword ptr [ebp-4]
00420F4B  |.  8B42 4C    mov    eax, dword ptr [edx+4C]
00420F4E  |.  33D2       xor    edx, edx
00420F50  |.  F7F1       div    ecx
00420F52  |.  8B45 FC    mov    eax, dword ptr [ebp-4]
00420F55  |.  8B4D FC    mov    ecx, dword ptr [ebp-4]
00420F58  |.  8BFA       mov    edi, edx
00420F5A  |.  8B50 50    mov    edx, dword ptr [eax+50]
00420F5D  |.  3151 4C    xor    dword ptr [ecx+4C], edx
00420F60  |.  8B55 FC    mov    edx, dword ptr [ebp-4]
00420F63  |.  8B04BD 103C55>mov    eax, dword ptr [edi*4+553C10]
00420F6A  |.  3142 44    xor    dword ptr [edx+44], eax
00420F6D  |.  8B45 FC    mov    eax, dword ptr [ebp-4]
00420F70  |.  8B0CBD 203C55>mov    ecx, dword ptr [edi*4+553C20]
00420F77  |.  3148 48    xor    dword ptr [eax+48], ecx
00420F7A  |.  33DB       xor    ebx, ebx
00420F7C  |.  8B45 FC    mov    eax, dword ptr [ebp-4]
00420F7F  |.  8D50 04    lea    edx, dword ptr [eax+4]
00420F82  |.  8955 F4    mov    dword ptr [ebp-C], edx
00420F85  |>  8B4D F4    /mov    ecx, dword ptr [ebp-C]
00420F88  |.  8BF1       |mov    esi, ecx
00420F8A  |.  E8 2978FFFF |call 004187B8
00420F8F  |.  8906       |mov    dword ptr [esi], eax
00420F91  |.  8D043B       |lea    eax, dword ptr [ebx+edi]
00420F94  |.  8B1485 F03B55>|mov    edx, dword ptr [eax*4+553BF0]
00420F9B  |.  3B16       |cmp    edx, dword ptr [esi]
00420F9D  |.^ 72 E6       |jb    short 00420F85
00420F9F  |.  43          |inc    ebx
00420FA0  |.  8345 F4 04 |add    dword ptr [ebp-C], 4
00420FA4  |.  83FB 10    |cmp    ebx, 10
00420FA7  |.^ 7C DC       \jl    short 00420F85
00420FA9  |.  33DB       xor    ebx, ebx
00420FAB  |.  8B45 FC    mov    eax, dword ptr [ebp-4]
00420FAE  |.  8D50 54    lea    edx, dword ptr [eax+54]
00420FB1  |.  8955 F0    mov    dword ptr [ebp-10], edx
00420FB4  |>  8B4D F0    /mov    ecx, dword ptr [ebp-10]
00420FB7  |.  8BF1       |mov    esi, ecx
00420FB9  |.  E8 FA77FFFF |call 004187B8
00420FBE  |.  8D143B       |lea    edx, dword ptr [ebx+edi]
00420FC1  |.  8906       |mov    dword ptr [esi], eax
00420FC3  |.  8B06       |mov    eax, dword ptr [esi]
00420FC5  |.  3B0495 303C55>|cmp    eax, dword ptr [edx*4+553C30]
00420FCC  |.^ 72 E6       |jb    short 00420FB4
00420FCE  |.  43          |inc    ebx
00420FCF  |.  8345 F0 04 |add    dword ptr [ebp-10], 4
00420FD3  |.  83FB 10    |cmp    ebx, 10
00420FD6  |.^ 7C DC       \jl    short 00420FB4
00420FD8  |.  8B45 FC    mov    eax, dword ptr [ebp-4]
00420FDB  |.  33C9       xor    ecx, ecx
00420FDD  |.  33DB       xor    ebx, ebx
00420FDF  |.  8D50 04    lea    edx, dword ptr [eax+4]
00420FE2  |>  8B02       /mov    eax, dword ptr [edx]
00420FE4  |.  83E0 0F    |and    eax, 0F
00420FE7  |.  03C8       |add    ecx, eax
00420FE9  |.  83FB 0F    |cmp    ebx, 0F
00420FEC  |.  74 08       |je    short 00420FF6
00420FEE  |.  8B42 50    |mov    eax, dword ptr [edx+50]
00420FF1  |.  83E0 0F    |and    eax, 0F
00420FF4  |.  03C8       |add    ecx, eax
00420FF6  |>  43          |inc    ebx
00420FF7  |.  83C2 04    |add    edx, 4
00420FFA  |.  83FB 10    |cmp    ebx, 10
00420FFD  |.^ 7C E3       \jl    short 00420FE2
00420FFF  |.  8B55 FC    mov    edx, dword ptr [ebp-4]
00421002  |.  33DB       xor    ebx, ebx
00421004  |.  8B82 90000000 mov    eax, dword ptr [edx+90]
0042100A  |.  25 0000FFFF and    eax, FFFF0000
0042100F  |.  0BC1       or    eax, ecx
00421011  |.  8B4D FC    mov    ecx, dword ptr [ebp-4]
00421014  |.  8BD0       mov    edx, eax
00421016  |.  8991 90000000 mov    dword ptr [ecx+90], edx
0042101C  |.  8B45 FC    mov    eax, dword ptr [ebp-4]
0042101F  |.  3150 44    xor    dword ptr [eax+44], edx
00421022  |.  8B55 FC    mov    edx, dword ptr [ebp-4]
00421025  |.  8B45 FC    mov    eax, dword ptr [ebp-4]
00421028  |.  8B8A 90000000 mov    ecx, dword ptr [edx+90]
0042102E  |.  3148 48    xor    dword ptr [eax+48], ecx
00421031  |.  33C0       xor    eax, eax
00421033  |.  3B5D F8    cmp    ebx, dword ptr [ebp-8]
00421036  |.  0F8D 8F000000 jge    004210CB
0042103C  |>  8BD3       /mov    edx, ebx
0042103E  |.  C1E2 04    |shl    edx, 4
00421041  |.  0355 0C    |add    edx, dword ptr [ebp+C]
00421044  |.  81C2 94000000 |add    edx, 94
0042104A  |.  8D0C38       |lea    ecx, dword ptr [eax+edi]
0042104D  |.  81E1 FF030080 |and    ecx, 800003FF
00421053  |.  79 08       |jns    short 0042105D
00421055  |.  49          |dec    ecx
00421056  |.  81C9 00FCFFFF |or    ecx, FFFFFC00
0042105C  |.  41          |inc    ecx
0042105D  |>  8B0C8D F03B55>|mov    ecx, dword ptr [ecx*4+553BF0]
00421064  |.  40          |inc    eax
00421065  |.  310A       |xor    dword ptr [edx], ecx
00421067  |.  8D0C38       |lea    ecx, dword ptr [eax+edi]
0042106A  |.  81E1 FF030080 |and    ecx, 800003FF
00421070  |.  79 08       |jns    short 0042107A
00421072  |.  49          |dec    ecx
00421073  |.  81C9 00FCFFFF |or    ecx, FFFFFC00
00421079  |.  41          |inc    ecx
0042107A  |>  8B0C8D F03B55>|mov    ecx, dword ptr [ecx*4+553BF0]
00421081  |.  40          |inc    eax
00421082  |.  314A 04    |xor    dword ptr [edx+4], ecx
00421085  |.  8D0C38       |lea    ecx, dword ptr [eax+edi]
00421088  |.  81E1 FF030080 |and    ecx, 800003FF
0042108E  |.  79 08       |jns    short 00421098
00421090  |.  49          |dec    ecx
00421091  |.  81C9 00FCFFFF |or    ecx, FFFFFC00
00421097  |.  41          |inc    ecx
00421098  |>  8B0C8D F03B55>|mov    ecx, dword ptr [ecx*4+553BF0]
0042109F  |.  40          |inc    eax
004210A0  |.  314A 08    |xor    dword ptr [edx+8], ecx
004210A3  |.  8D0C38       |lea    ecx, dword ptr [eax+edi]
004210A6  |.  81E1 FF030080 |and    ecx, 800003FF
004210AC  |.  79 08       |jns    short 004210B6
004210AE  |.  49          |dec    ecx
004210AF  |.  81C9 00FCFFFF |or    ecx, FFFFFC00
004210B5  |.  41          |inc    ecx
004210B6  |>  8B0C8D F03B55>|mov    ecx, dword ptr [ecx*4+553BF0]
004210BD  |.  314A 0C    |xor    dword ptr [edx+C], ecx
004210C0  |.  40          |inc    eax
004210C1  |.  43          |inc    ebx
004210C2  |.  3B5D F8    |cmp    ebx, dword ptr [ebp-8]
004210C5  |.^ 0F8C 71FFFFFF \jl    0042103C
004210CB  |>  5F          pop    edi
004210CC  |.  5E          pop    esi
004210CD  |.  5B          pop    ebx
004210CE  |.  8BE5       mov    esp, ebp
004210D0  |.  5D          pop    ebp
004210D1  \.  C3          retn
004210D2    90          nop
004210D3    90          nop
004210D4 $  55          push ebp
004210D5 .  8BEC       mov    ebp, esp
004210D7 .  83C4 F0    add    esp, -10
004210DA .  33C0       xor    eax, eax
004210DC .  53          push ebx
004210DD .  56          push esi
004210DE .  57          push edi
004210DF .  8945 FC    mov    dword ptr [ebp-4], eax
004210E2 .  8B55 0C    mov    edx, dword ptr [ebp+C]
004210E5 .  8955 F8    mov    dword ptr [ebp-8], edx
004210E8 .  33D2       xor    edx, edx
004210EA .  8B4D F8    mov    ecx, dword ptr [ebp-8]
004210ED .  8171 44 31323>xor    dword ptr [ecx+44], 88313231
004210F4 .  8B45 F8    mov    eax, dword ptr [ebp-8]
004210F7 .  B9 BC030000 mov    ecx, 3BC
004210FC .  8B40 44    mov    eax, dword ptr [eax+44]
004210FF .  F7F1       div    ecx
00421101 .  8BFA       mov    edi, edx
00421103 .  8B55 F8    mov    edx, dword ptr [ebp-8]
00421106 .  8B04BD 0C3C55>mov    eax, dword ptr [edi*4+553C0C]
0042110D .  3142 48    xor    dword ptr [edx+48], eax
00421110 .  8B45 F8    mov    eax, dword ptr [ebp-8]
00421113 .  8B0CBD 1C3C55>mov    ecx, dword ptr [edi*4+553C1C]
0042111A .  3148 4C    xor    dword ptr [eax+4C], ecx
0042111D .  33F6       xor    esi, esi
0042111F .  8B55 F8    mov    edx, dword ptr [ebp-8]
00421122 .  8B4A 48    mov    ecx, dword ptr [edx+48]
00421125 .  894D F4    mov    dword ptr [ebp-C], ecx
00421128 .  33C0       xor    eax, eax
0042112A .  8945 F0    mov    dword ptr [ebp-10], eax
0042112D .  8B55 F0    mov    edx, dword ptr [ebp-10]
00421130 .  3B55 F4    cmp    edx, dword ptr [ebp-C]
00421133 .  0F8D FD010000 jge    00421336
00421139 >  8B5D F0    mov    ebx, dword ptr [ebp-10]
0042113C .  C1E3 02    shl    ebx, 2
0042113F .  8D1C5B       lea    ebx, dword ptr [ebx+ebx*2]
00421142 .  035D 0C    add    ebx, dword ptr [ebp+C]
00421145 .  81C3 90000000 add    ebx, 90
0042114B .  8D043E       lea    eax, dword ptr [esi+edi]
0042114E .  25 FF030080 and    eax, 800003FF
00421153 .  79 07       jns    short 0042115C
00421155 .  48          dec    eax
00421156 .  0D 00FCFFFF or    eax, FFFFFC00
0042115B .  40          inc    eax
0042115C >  8B1485 F03B55>mov    edx, dword ptr [eax*4+553BF0]
00421163 .  3113       xor    dword ptr [ebx], edx
00421165 .  8B0B       mov    ecx, dword ptr [ebx]
00421167 .  51          push ecx                            ; /Arg2
00421168 .  8B45 08    mov    eax, dword ptr [ebp+8]          ; |
0042116B .  50          push eax                            ; |Arg1
0042116C .  E8 87F8FFFF call 004209F8                      ; \dumped_.004209F8
00421171 .  83C4 08    add    esp, 8
00421174 .  46          inc    esi
00421175 .  8D143E       lea    edx, dword ptr [esi+edi]
00421178 .  81E2 FF030080 and    edx, 800003FF
0042117E .  79 08       jns    short 00421188
00421180 .  4A          dec    edx
00421181 .  81CA 00FCFFFF or    edx, FFFFFC00
00421187 .  42          inc    edx
00421188 >  8B0C95 F03B55>mov    ecx, dword ptr [edx*4+553BF0]
0042118F .  46          inc    esi
00421190 .  314B 04    xor    dword ptr [ebx+4], ecx
00421193 .  8D143E       lea    edx, dword ptr [esi+edi]
00421196 .  81E2 FF030080 and    edx, 800003FF
0042119C .  79 08       jns    short 004211A6
0042119E .  4A          dec    edx
0042119F .  81CA 00FCFFFF or    edx, FFFFFC00
004211A5 .  42          inc    edx
004211A6 >  8B0C95 F03B55>mov    ecx, dword ptr [edx*4+553BF0]
004211AD .  314B 08    xor    dword ptr [ebx+8], ecx
004211B0 .  85C0       test eax, eax
004211B2 .  8B55 08    mov    edx, dword ptr [ebp+8]
004211B5 .  8B4B 08    mov    ecx, dword ptr [ebx+8]
004211B8 .  898A 30010200 mov    dword ptr [edx+20130], ecx
004211BE .  74 06       je    short 004211C6
004211C0 .  8B53 08    mov    edx, dword ptr [ebx+8]
004211C3 .  8950 10    mov    dword ptr [eax+10], edx
004211C6 >  46          inc    esi
004211C7 .  8B53 04    mov    edx, dword ptr [ebx+4]
004211CA .  81FA FF000000 cmp    edx, 0FF
004211D0 .  76 19       jbe    short 004211EB
004211D2 .  81E2 00FF0000 and    edx, 0FF00
004211D8 .  C1EA 08    shr    edx, 8
004211DB .  85C0       test eax, eax
004211DD .  74 43       je    short 00421222
004211DF .  66:8950 0C mov    word ptr [eax+C], dx
004211E3 .  66:C740 0E 02>mov    word ptr [eax+E], 2
004211E9 .  EB 37       jmp    short 00421222
004211EB >  8B4B 04    mov    ecx, dword ptr [ebx+4]
004211EE .  49          dec    ecx                            ;  Switch (cases 1..4)
004211EF .  74 0B       je    short 004211FC
004211F1 .  49          dec    ecx
004211F2 .  74 10       je    short 00421204
004211F4 .  49          dec    ecx
004211F5 .  74 15       je    short 0042120C
004211F7 .  49          dec    ecx
004211F8 .  74 1A       je    short 00421214
004211FA .  EB 20       jmp    short 0042121C
004211FC >  66:C740 0E 03>mov    word ptr [eax+E], 3             ;  Case 1 of switch 004211EE
00421202 .  EB 1E       jmp    short 00421222
00421204 >  66:C740 0E 03>mov    word ptr [eax+E], 3             ;  Case 2 of switch 004211EE
0042120A .  EB 16       jmp    short 00421222
0042120C >  66:C740 0E 04>mov    word ptr [eax+E], 4             ;  Case 3 of switch 004211EE
00421212 .  EB 0E       jmp    short 00421222
00421214 >  66:C740 0E 05>mov    word ptr [eax+E], 5             ;  Case 4 of switch 004211EE
0042121A .  EB 06       jmp    short 00421222
0042121C >  66:C740 0E 03>mov    word ptr [eax+E], 3             ;  Default case of switch 004211EE
00421222 >  85C0       test eax, eax
00421224 .  0F84 C5000000 je    004212EF
0042122A .  0FB750 0E    movzx edx, word ptr [eax+E]
0042122E .  83FA 05    cmp    edx, 5                         ;  Switch (cases 2..5)
00421231 .  0F87 B8000000 ja    004212EF
00421237 .  FF2495 3E1242>jmp    dword ptr [edx*4+42123E]
0042123E .  EF124200    dd    dumped_.004212EF                ;  分支表被用于 00421237
00421242 .  EF124200    dd    dumped_.004212EF
00421246 .  5B124200    dd    dumped_.0042125B
0042124A .  83124200    dd    dumped_.00421283
0042124E .  A7124200    dd    dumped_.004212A7
00421252 .  CC124200    dd    dumped_.004212CC
00421256 .  E9 94000000 jmp    004212EF
0042125B >  FF45 FC    inc    dword ptr [ebp-4]             ;  Case 2 of switch 0042122E
0042125E .  8B48 08    mov    ecx, dword ptr [eax+8]
00421261 .  51          push ecx                            ; /Arg7
00421262 .  8B0D B4155500 mov    ecx, dword ptr [5515B4]       ; |
00421268 .  8B50 04    mov    edx, dword ptr [eax+4]          ; |
0042126B .  52          push edx                            ; |Arg6
0042126C .  8B00       mov    eax, dword ptr [eax]          ; |
0042126E .  50          push eax                            ; |Arg5
0042126F .  68 CD515500 push 005551CD                      ; |验证成功
00421274 .  6A 01       push 1                               ; |Arg3 = 00000001
00421276 .  6A 00       push 0                               ; |Arg2 = 00000000
00421278 .  51          push ecx                            ; |Arg1 => 00000000
00421279 .  E8 9EAFFFFF call 0041C21C                      ; \dumped_.0041C21C
0042127E .  83C4 1C    add    esp, 1C
00421281 .  EB 6C       jmp    short 004212EF
00421283 >  8B50 08    mov    edx, dword ptr [eax+8]          ;  Case 3 of switch 0042122E
00421286 .  52          push edx                            ; /Arg7
00421287 .  8B48 04    mov    ecx, dword ptr [eax+4]          ; |
0042128A .  51          push ecx                            ; |Arg6
0042128B .  8B00       mov    eax, dword ptr [eax]          ; |
0042128D .  50          push eax                            ; |Arg5
0042128E .  68 E6515500 push 005551E6                      ; |错误，请核对
00421293 .  6A 03       push 3                               ; |Arg3 = 00000003
00421295 .  6A 00       push 0                               ; |Arg2 = 00000000
00421297 .  A1 B4155500 mov    eax, dword ptr [5515B4]       ; |
0042129C .  50          push eax                            ; |Arg1 => 00000000
0042129D .  E8 7AAFFFFF call 0041C21C                      ; \dumped_.0041C21C
004212A2 .  83C4 1C    add    esp, 1C
004212A5 .  EB 48       jmp    short 004212EF
004212A7 >  8B50 08    mov    edx, dword ptr [eax+8]          ;  Case 4 of switch 0042122E
004212AA .  52          push edx                            ; /Arg7
004212AB .  8B15 B4155500 mov    edx, dword ptr [5515B4]       ; |
004212B1 .  8B48 04    mov    ecx, dword ptr [eax+4]          ; |
004212B4 .  51          push ecx                            ; |Arg6
004212B5 .  8B00       mov    eax, dword ptr [eax]          ; |
004212B7 .  50          push eax                            ; |Arg5
004212B8 .  68 02525500 push 00555202                      ; |在其他机器登陆，请勿在6分钟内重复登陆
004212BD .  6A 03       push 3                               ; |Arg3 = 00000003
004212BF .  6A 00       push 0                               ; |Arg2 = 00000000
004212C1 .  52          push edx                            ; |Arg1 => 00000000
004212C2 .  E8 55AFFFFF call 0041C21C                      ; \dumped_.0041C21C
004212C7 .  83C4 1C    add    esp, 1C
004212CA .  EB 23       jmp    short 004212EF
004212CC >  8B48 08    mov    ecx, dword ptr [eax+8]          ;  Case 5 of switch 0042122E
004212CF .  51          push ecx                            ; /Arg7
004212D0 .  8B0D B4155500 mov    ecx, dword ptr [5515B4]       ; |
004212D6 .  8B50 04    mov    edx, dword ptr [eax+4]          ; |
004212D9 .  52          push edx                            ; |Arg6
004212DA .  8B00       mov    eax, dword ptr [eax]          ; |
004212DC .  50          push eax                            ; |Arg5
004212DD .  68 38525500 push 00555238                      ; |已经过期
004212E2 .  6A 03       push 3                               ; |Arg3 = 00000003
004212E4 .  6A 00       push 0                               ; |Arg2 = 00000000
004212E6 .  51          push ecx                            ; |Arg1 => 00000000
004212E7 .  E8 30AFFFFF call 0041C21C                      ; \dumped_.0041C21C
004212EC .  83C4 1C    add    esp, 1C
004212EF >  8B45 F8    mov    eax, dword ptr [ebp-8]          ;  Default case of switch 0042122E
004212F2 .  8B55 08    mov    edx, dword ptr [ebp+8]
004212F5 .  8B40 4C    mov    eax, dword ptr [eax+4C]
004212F8 .  3B82 2C010200 cmp    eax, dword ptr [edx+2012C]
004212FE .  72 0B       jb    short 0042130B
00421300 .  8B4D 08    mov    ecx, dword ptr [ebp+8]
00421303 .  8981 2C010200 mov    dword ptr [ecx+2012C], eax
00421309 .  EB 1C       jmp    short 00421327
0042130B >  68 51525500 push 00555251                      ; /cycle数据非法
00421310 .  6A 02       push 2                               ; |Arg3 = 00000002
00421312 .  6A 00       push 0                               ; |Arg2 = 00000000
00421314 .  A1 B4155500 mov    eax, dword ptr [5515B4]       ; |
00421319 .  50          push eax                            ; |Arg1 => 00000000
0042131A .  E8 FDAEFFFF call 0041C21C                      ; \dumped_.0041C21C
0042131F .  83C4 10    add    esp, 10
00421322 .  33D2       xor    edx, edx
00421324 .  8955 FC    mov    dword ptr [ebp-4], edx
00421327 >  FF45 F0    inc    dword ptr [ebp-10]
0042132A .  8B4D F0    mov    ecx, dword ptr [ebp-10]
0042132D .  3B4D F4    cmp    ecx, dword ptr [ebp-C]
00421330 .^ 0F8C 03FEFFFF jl    00421139
00421336 >  837D FC 32 cmp    dword ptr [ebp-4], 32
0042133A .  7E 07       jle    short 00421343
0042133C .  C745 FC 32000>mov    dword ptr [ebp-4], 32
00421343 >  8B45 08    mov    eax, dword ptr [ebp+8]
00421346 .  8B90 44010200 mov    edx, dword ptr [eax+20144]
0042134C .  3B55 FC    cmp    edx, dword ptr [ebp-4]
0042134F .  7E 18       jle    short 00421369
00421351 .  68 5F525500 push 0055525F                      ; /可用数减少，请检查c数量及正确性
00421356 .  6A 03       push 3                               ; |Arg3 = 00000003
00421358 .  6A 00       push 0                               ; |Arg2 = 00000000
0042135A .  8B0D B4155500 mov    ecx, dword ptr [5515B4]       ; |
00421360 .  51          push ecx                            ; |Arg1 => 00000000
00421361 .  E8 B6AEFFFF call 0041C21C                      ; \dumped_.0041C21C
00421366 .  83C4 10    add    esp, 10
00421369 >  8B45 08    mov    eax, dword ptr [ebp+8]
0042136C .  8B55 FC    mov    edx, dword ptr [ebp-4]
0042136F .  8990 44010200 mov    dword ptr [eax+20144], edx
00421375 .  33C0       xor    eax, eax
00421377 .  8B55 F8    mov    edx, dword ptr [ebp-8]
0042137A .  83C2 04    add    edx, 4
0042137D >  8B1A       mov    ebx, dword ptr [edx]
0042137F .  8D0C38       lea    ecx, dword ptr [eax+edi]
00421382 .  3B1C8D F03B55>cmp    ebx, dword ptr [ecx*4+553BF0]
00421389 .  76 05       jbe    short 00421390
0042138B .  83C8 FF    or    eax, FFFFFFFF
0042138E .  EB 5F       jmp    short 004213EF
00421390 >  83F8 0F    cmp    eax, 0F
00421393 .  74 11       je    short 004213A6
00421395 .  8B5A 4C    mov    ebx, dword ptr [edx+4C]
00421398 .  3B1C8D 303C55>cmp    ebx, dword ptr [ecx*4+553C30]
0042139F .  73 05       jnb    short 004213A6
004213A1 .  83C8 FF    or    eax, FFFFFFFF
004213A4 .  EB 49       jmp    short 004213EF
004213A6 >  40          inc    eax
004213A7 .  83C2 04    add    edx, 4
004213AA .  83F8 10    cmp    eax, 10
004213AD .^ 7C CE       jl    short 0042137D
004213AF .  33DB       xor    ebx, ebx
004213B1 .  33C9       xor    ecx, ecx
004213B3 .  8B45 F8    mov    eax, dword ptr [ebp-8]
004213B6 .  8D50 04    lea    edx, dword ptr [eax+4]
004213B9 >  8B02       mov    eax, dword ptr [edx]
004213BB .  83E0 0F    and    eax, 0F
004213BE .  03D8       add    ebx, eax
004213C0 .  83F9 0F    cmp    ecx, 0F
004213C3 .  74 08       je    short 004213CD
004213C5 .  8B42 4C    mov    eax, dword ptr [edx+4C]
004213C8 .  83E0 0F    and    eax, 0F
004213CB .  03D8       add    ebx, eax
004213CD >  41          inc    ecx
004213CE .  83C2 04    add    edx, 4
004213D1 .  83F9 10    cmp    ecx, 10
004213D4 .^ 7C E3       jl    short 004213B9
004213D6 .  8B55 F8    mov    edx, dword ptr [ebp-8]
004213D9 .  8B82 8C000000 mov    eax, dword ptr [edx+8C]
004213DF .  25 FFFF0000 and    eax, 0FFFF
004213E4 .  3BC3       cmp    eax, ebx
004213E6 .  74 05       je    short 004213ED
004213E8 .  83C8 FF    or    eax, FFFFFFFF
004213EB .  EB 02       jmp    short 004213EF
004213ED >  33C0       xor    eax, eax
004213EF >  5F          pop    edi
004213F0 .  5E          pop    esi
004213F1 .  5B          pop    ebx
004213F2 .  8BE5       mov    esp, ebp
004213F4 .  5D          pop    ebp
004213F5 .  C3          retn
004213F6    90          nop转

[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)

收藏・0

免费・0

支持

最新回复 (5)
wangai新雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 2 回帖 19 粉丝 0 关注私信	wangai新 2 楼汗。。我怎么看像外挂呀。。。能不能给个具体的软件？ 2007-3-22 13:16 0
平爱平雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 11 粉丝 0 关注私信	平爱平 3 楼 -------------------------------------------------------------------------------- 我看了,什么也不懂,要什么才可以呀转 2007-3-25 15:06 0
ghostkim 雪币： 201 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 1 回帖 17 粉丝 0 关注私信	ghostkim 4 楼一看就知道是外挂不说具体名字这个怎么分析哦! 2007-3-25 15:08 0
joyguan 雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 3 粉丝 0 关注私信	joyguan 5 楼想不到这里也有人想破解外挂,我也想学学.... 2007-3-26 12:39 0
qdk 雪币： 231 活跃值： (45) 能力值： ( LV2，RANK：10 ) 在线值：发帖 22 回帖 423 粉丝 0 关注私信	qdk 6 楼自己分析数据包写的外挂？？太有精力和时间了！！还有，为什么那个专门用来制作外挂的WPE不灵了，什么数据都拦不到，在网上下载了N个都是如此。请问一下这方面的高手，还有什么工具可以用来做外挂吗， 2007-3-26 13:24 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

mack

发帖

回帖

RANK

关注

私信

他的文章

关于我们

联系我们

企业服务

看雪公众号

最新回复 (5)
wangai新雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 2 回帖 19 粉丝 0 关注私信	wangai新 2 楼汗。。我怎么看像外挂呀。。。能不能给个具体的软件？ 2007-3-22 13:16 0
平爱平雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 11 粉丝 0 关注私信	平爱平 3 楼 -------------------------------------------------------------------------------- 我看了,什么也不懂,要什么才可以呀转 2007-3-25 15:06 0
ghostkim 雪币： 201 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 1 回帖 17 粉丝 0 关注私信	ghostkim 4 楼一看就知道是外挂不说具体名字这个怎么分析哦! 2007-3-25 15:08 0
joyguan 雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 3 粉丝 0 关注私信	joyguan 5 楼想不到这里也有人想破解外挂,我也想学学.... 2007-3-26 12:39 0
qdk 雪币： 231 活跃值： (45) 能力值： ( LV2，RANK：10 ) 在线值：发帖 22 回帖 423 粉丝 0 关注私信	qdk 6 楼自己分析数据包写的外挂？？太有精力和时间了！！还有，为什么那个专门用来制作外挂的WPE不灵了，什么数据都拦不到，在网上下载了N个都是如此。请问一下这方面的高手，还有什么工具可以用来做外挂吗， 2007-3-26 13:24 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复