------------------关键注释在后面---------------
:00404540 85D2 test edx, edx
:00404542 740A je 0040454E
:00404544 8B4AF8 mov ecx, dword ptr [edx-08]
:00404547 41 inc ecx
:00404548 7E04 jle 0040454E
:0040454A F0 lock
:0040454B FF42F8 inc [edx-08]
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404542(C), :00404548(C)
|
:0040454E 8710 xchg dword ptr [eax], edx
:00404550 85D2 test edx, edx
:00404552 7414 je 00404568
:00404554 8B4AF8 mov ecx, dword ptr [edx-08]
:00404557 49 dec ecx
:00404558 7C0E jl 00404568
:0040455A F0 lock
:0040455B FF4AF8 dec [edx-08]
:0040455E 7508 jne 00404568
:00404560 8D42F8 lea eax, dword ptr [edx-08]
:00404563 E8B8E2FFFF call 00402820
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404552(C), :00404558(C), :0040455E(C)
|
:00404568 C3 ret
:00404569 8D4000 lea eax, dword ptr [eax+00]
* Referenced by a CALL at Addresses:
|:0040450B , :004045A3 , :004047F4 , :00404886 , :00404996
|:00404B3C , :00404B7E
|
:0040456C 85C0 test eax, eax
:0040456E 7E24 jle 00404594
:00404570 50 push eax
:00404571 83C00A add eax, 0000000A
:00404574 83E0FE and eax, FFFFFFFE
:00404577 50 push eax
:00404578 E883E2FFFF call 00402800
:0040457D 5A pop edx
:0040457E 66C74402FE0000 mov [edx+eax-02], 0000
:00404585 83C008 add eax, 00000008
:00404588 5A pop edx
:00404589 8950FC mov dword ptr [eax-04], edx
:0040458C C740F801000000 mov [eax-08], 00000001
:00404593 C3 ret
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040456E(C)
|
:00404594 31C0 xor eax, eax
:00404596 C3 ret
-------------------------------------------------
:0084B85C 55 push ebp
:0084B85D 8BEC mov ebp, esp
:0084B85F B908000000 mov ecx, 00000008
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0084B869(C)
|
:0084B864 6A00 push 00000000
:0084B866 6A00 push 00000000
:0084B868 49 dec ecx
:0084B869 75F9 jne 0084B864
:0084B86B 53 push ebx
:0084B86C 56 push esi
:0084B86D 57 push edi
:0084B86E 8945FC mov dword ptr [ebp-04], eax
:0084B871 33C0 xor eax, eax
:0084B873 55 push ebp
:0084B874 684BBF8400 push 0084BF4B
:0084B879 64FF30 push dword ptr fs:[eax]
:0084B87C 648920 mov dword ptr fs:[eax], esp
:0084B87F E81CB2FCFF call 00816AA0
:0084B884 8BD8 mov ebx, eax
:0084B886 8D55E0 lea edx, dword ptr [ebp-20]
:0084B889 8B45FC mov eax, dword ptr [ebp-04]
:0084B88C 8B8010030000 mov eax, dword ptr [eax+00000310]
:0084B892 E819E9C1FF call 0046A1B0
:0084B897 8B45E0 mov eax, dword ptr [ebp-20]
:0084B89A 8D55E4 lea edx, dword ptr [ebp-1C]
:0084B89D E886D5BBFF call 00408E28
:0084B8A2 8B45E4 mov eax, dword ptr [ebp-1C]
:0084B8A5 8D55F0 lea edx, dword ptr [ebp-10]
:0084B8A8 E82BD3BBFF call 00408BD8
:0084B8AD 8D55D8 lea edx, dword ptr [ebp-28]
:0084B8B0 8B45FC mov eax, dword ptr [ebp-04]
:0084B8B3 8B8038030000 mov eax, dword ptr [eax+00000338]
:0084B8B9 E8F2E8C1FF call 0046A1B0
:0084B8BE 8B45D8 mov eax, dword ptr [ebp-28]
:0084B8C1 8D55DC lea edx, dword ptr [ebp-24]
:0084B8C4 E85FD5BBFF call 00408E28
:0084B8C9 8B45DC mov eax, dword ptr [ebp-24]
:0084B8CC 8D55EC lea edx, dword ptr [ebp-14]
:0084B8CF E804D3BBFF call 00408BD8
:0084B8D4 8D55D0 lea edx, dword ptr [ebp-30]
:0084B8D7 8B45FC mov eax, dword ptr [ebp-04]
:0084B8DA 8B803C030000 mov eax, dword ptr [eax+0000033C]
:0084B8E0 E8CBE8C1FF call 0046A1B0
:0084B8E5 8B45D0 mov eax, dword ptr [ebp-30]
:0084B8E8 8D55D4 lea edx, dword ptr [ebp-2C]
:0084B8EB E838D5BBFF call 00408E28
:0084B8F0 8B45D4 mov eax, dword ptr [ebp-2C]
:0084B8F3 8D55E8 lea edx, dword ptr [ebp-18]
:0084B8F6 E8DDD2BBFF call 00408BD8
:0084B8FB A134158B00 mov eax, dword ptr [008B1534]
:0084B900 833800 cmp dword ptr [eax], 00000000
:0084B903 7433 je 0084B938
:0084B905 A194158B00 mov eax, dword ptr [008B1594]
:0084B90A 833800 cmp dword ptr [eax], 00000000
:0084B90D 7429 je 0084B938
:0084B90F 8B45F0 mov eax, dword ptr [ebp-10]
:0084B912 50 push eax
:0084B913 8B45EC mov eax, dword ptr [ebp-14]
:0084B916 50 push eax
:0084B917 8B45E8 mov eax, dword ptr [ebp-18]
:0084B91A 50 push eax
:0084B91B 6A01 push 00000001
:0084B91D 8B1594158B00 mov edx, dword ptr [008B1594]
:0084B923 8B12 mov edx, dword ptr [edx]
:0084B925 A134158B00 mov eax, dword ptr [008B1534]
:0084B92A 8B00 mov eax, dword ptr [eax]
:0084B92C 8BCB mov ecx, ebx
:0084B92E E89DC4FCFF call 00817DD0
:0084B933 8945F8 mov dword ptr [ebp-08], eax
:0084B936 EB07 jmp 0084B93F
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0084B903(C), :0084B90D(C)
|
:0084B938 C745F8FFFFFFFF mov [ebp-08], FFFFFFFF
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0084B936(U)
|
:0084B93F 8B45F8 mov eax, dword ptr [ebp-08]
:0084B942 83E831 sub eax, 00000031
:0084B945 0F8390050000 jnb 0084BEDB
:0084B94B 33C0 xor eax, eax
:0084B94D 55 push ebp
:0084B94E 6829BA8400 push 0084BA29
:0084B953 64FF30 push dword ptr fs:[eax]
:0084B956 648920 mov dword ptr fs:[eax], esp
:0084B959 B301 mov bl, 01
:0084B95B A1001D8B00 mov eax, dword ptr [008B1D00]
:0084B960 8B00 mov eax, dword ptr [eax]
:0084B962 8BB088000000 mov esi, dword ptr [eax+00000088]
:0084B968 8BC6 mov eax, esi
:0084B96A E805C8C5FF call 004A8174
:0084B96F A150178B00 mov eax, dword ptr [008B1750]
:0084B974 FF30 push dword ptr [eax]
:0084B976 A134168B00 mov eax, dword ptr [008B1634]
:0084B97B FF30 push dword ptr [eax]
:0084B97D A18C1A8B00 mov eax, dword ptr [008B1A8C]
:0084B982 FF30 push dword ptr [eax]
:0084B984 8D45C8 lea eax, dword ptr [ebp-38]
:0084B987 BA03000000 mov edx, 00000003
:0084B98C E8A78EBBFF call 00404838
:0084B991 8B55C8 mov edx, dword ptr [ebp-38]
:0084B994 8D45CC lea eax, dword ptr [ebp-34]
:0084B997 E8BC93BBFF call 00404D58
:0084B99C 8B55CC mov edx, dword ptr [ebp-34]
:0084B99F 8BC6 mov eax, esi
:0084B9A1 E8EAA3C7FF call 004C5D90
:0084B9A6 8BC6 mov eax, esi
:0084B9A8 E867C4C7FF call 004C7E14
:0084B9AD 8B10 mov edx, dword ptr [eax]
:0084B9AF FF5244 call [edx+44]
:0084B9B2 8BC6 mov eax, esi
:0084B9B4 E85BC4C7FF call 004C7E14
:0084B9B9 BA64BF8400 mov edx, 0084BF64
:0084B9BE 8B08 mov ecx, dword ptr [eax]
:0084B9C0 FF5138 call [ecx+38]
:0084B9C3 8BC6 mov eax, esi
:0084B9C5 E872C3C7FF call 004C7D3C
:0084B9CA 8BC6 mov eax, esi
:0084B9CC E8A3C7C5FF call 004A8174
:0084B9D1 8BC6 mov eax, esi
:0084B9D3 E83CC4C7FF call 004C7E14
:0084B9D8 8B10 mov edx, dword ptr [eax]
:0084B9DA FF5244 call [edx+44]
:0084B9DD 8BC6 mov eax, esi
:0084B9DF E830C4C7FF call 004C7E14
:0084B9E4 50 push eax
:0084B9E5 6880BF8400 push 0084BF80
:0084B9EA FF75F0 push [ebp-10]
:0084B9ED 68B4BF8400 push 0084BFB4
:0084B9F2 FF75EC push [ebp-14]
:0084B9F5 68B4BF8400 push 0084BFB4
:0084B9FA FF75E8 push [ebp-18]
:0084B9FD 68C0BF8400 push 0084BFC0
:0084BA02 8D45C4 lea eax, dword ptr [ebp-3C]
:0084BA05 BA07000000 mov edx, 00000007
:0084BA0A E8298EBBFF call 00404838
:0084BA0F 8B55C4 mov edx, dword ptr [ebp-3C]
:0084BA12 58 pop eax
:0084BA13 8B08 mov ecx, dword ptr [eax]
:0084BA15 FF5138 call [ecx+38]
:0084BA18 8BC6 mov eax, esi
:0084BA1A E81DC3C7FF call 004C7D3C
:0084BA1F 33C0 xor eax, eax
:0084BA21 5A pop edx
:0084BA22 59 pop ecx
:0084BA23 59 pop ecx
:0084BA24 648910 mov dword ptr fs:[eax], edx
:0084BA27 EB0C jmp 0084BA35
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0084BA6C(C)
|
:0084BA29 E9EA80BBFF jmp 00403B18
:0084BA2E 33DB xor ebx, ebx
:0084BA30 E80F85BBFF call 00403F44
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0084BA27(U)
|
:0084BA35 84DB test bl, bl
:0084BA37 0F8484040000 je 0084BEC1
:0084BA3D 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BA40 E8638ABBFF call 004044A8
:0084BA45 8B45F8 mov eax, dword ptr [ebp-08]
:0084BA48 83F830 cmp eax, 00000030
:0084BA4B 0F8720040000 ja 0084BE71
:0084BA51 FF248558BA8400 jmp dword ptr [4*eax+0084BA58]
:0084BA58 1CBB8400 DWORD 0084BB1C
:0084BA5C 2EBB8400 DWORD 0084BB2E
:0084BA60 40BB8400 DWORD 0084BB40
:0084BA64 52BB8400 DWORD 0084BB52
:0084BA68 64BB8400 DWORD 0084BB64
:0084BA6C 76BB8400 DWORD 0084BB76
:0084BA70 88BB8400 DWORD 0084BB88
:0084BA74 9ABB8400 DWORD 0084BB9A
:0084BA78 ACBB8400 DWORD 0084BBAC
:0084BA7C BEBB8400 DWORD 0084BBBE
:0084BA80 D0BB8400 DWORD 0084BBD0
:0084BA84 E2BB8400 DWORD 0084BBE2
:0084BA88 F4BB8400 DWORD 0084BBF4
:0084BA8C 06BC8400 DWORD 0084BC06
:0084BA90 18BC8400 DWORD 0084BC18
:0084BA94 2ABC8400 DWORD 0084BC2A
:0084BA98 3CBC8400 DWORD 0084BC3C
:0084BA9C 4EBC8400 DWORD 0084BC4E
:0084BAA0 60BC8400 DWORD 0084BC60
:0084BAA4 72BC8400 DWORD 0084BC72
:0084BAA8 84BC8400 DWORD 0084BC84
:0084BAAC 96BC8400 DWORD 0084BC96
:0084BAB0 A8BC8400 DWORD 0084BCA8
:0084BAB4 BABC8400 DWORD 0084BCBA
:0084BAB8 CCBC8400 DWORD 0084BCCC
:0084BABC DEBC8400 DWORD 0084BCDE
:0084BAC0 F0BC8400 DWORD 0084BCF0
:0084BAC4 02BD8400 DWORD 0084BD02
:0084BAC8 14BD8400 DWORD 0084BD14
:0084BACC 26BD8400 DWORD 0084BD26
:0084BAD0 38BD8400 DWORD 0084BD38
:0084BAD4 4ABD8400 DWORD 0084BD4A
:0084BAD8 5CBD8400 DWORD 0084BD5C
:0084BADC 6EBD8400 DWORD 0084BD6E
:0084BAE0 80BD8400 DWORD 0084BD80
:0084BAE4 92BD8400 DWORD 0084BD92
:0084BAE8 A4BD8400 DWORD 0084BDA4
:0084BAEC B6BD8400 DWORD 0084BDB6
:0084BAF0 C8BD8400 DWORD 0084BDC8
:0084BAF4 DABD8400 DWORD 0084BDDA
:0084BAF8 ECBD8400 DWORD 0084BDEC
:0084BAFC FBBD8400 DWORD 0084BDFB
:0084BB00 0ABE8400 DWORD 0084BE0A
:0084BB04 19BE8400 DWORD 0084BE19
:0084BB08 28BE8400 DWORD 0084BE28
:0084BB0C 37BE8400 DWORD 0084BE37
:0084BB10 46BE8400 DWORD 0084BE46
:0084BB14 55BE8400 DWORD 0084BE55
:0084BB18 64BE8400 DWORD 0084BE64
:0084BB1C 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BB1F BACCBF8400 mov edx, 0084BFCC
:0084BB24 E8178ABBFF call 00404540
:0084BB29 E943030000 jmp 0084BE71
:0084BB2E 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BB31 BAF0BF8400 mov edx, 0084BFF0
:0084BB36 E8058ABBFF call 00404540
:0084BB3B E931030000 jmp 0084BE71
:0084BB40 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BB43 BA14C08400 mov edx, 0084C014
:0084BB48 E8F389BBFF call 00404540
:0084BB4D E91F030000 jmp 0084BE71
:0084BB52 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BB55 BA38C08400 mov edx, 0084C038
:0084BB5A E8E189BBFF call 00404540
:0084BB5F E90D030000 jmp 0084BE71
:0084BB64 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BB67 BA5CC08400 mov edx, 0084C05C
:0084BB6C E8CF89BBFF call 00404540
:0084BB71 E9FB020000 jmp 0084BE71
:0084BB76 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BB79 BA80C08400 mov edx, 0084C080
:0084BB7E E8BD89BBFF call 00404540
:0084BB83 E9E9020000 jmp 0084BE71
:0084BB88 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BB8B BAA4C08400 mov edx, 0084C0A4
:0084BB90 E8AB89BBFF call 00404540
:0084BB95 E9D7020000 jmp 0084BE71
:0084BB9A 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BB9D BAC8C08400 mov edx, 0084C0C8
:0084BBA2 E89989BBFF call 00404540
:0084BBA7 E9C5020000 jmp 0084BE71
:0084BBAC 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BBAF BAECC08400 mov edx, 0084C0EC
:0084BBB4 E88789BBFF call 00404540
:0084BBB9 E9B3020000 jmp 0084BE71
:0084BBBE 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BBC1 BA10C18400 mov edx, 0084C110
:0084BBC6 E87589BBFF call 00404540
:0084BBCB E9A1020000 jmp 0084BE71
:0084BBD0 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BBD3 BA34C18400 mov edx, 0084C134
:0084BBD8 E86389BBFF call 00404540
:0084BBDD E98F020000 jmp 0084BE71
:0084BBE2 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BBE5 BA58C18400 mov edx, 0084C158
:0084BBEA E85189BBFF call 00404540
:0084BBEF E97D020000 jmp 0084BE71
:0084BBF4 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BBF7 BA7CC18400 mov edx, 0084C17C
:0084BBFC E83F89BBFF call 00404540
:0084BC01 E96B020000 jmp 0084BE71
:0084BC06 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BC09 BAA0C18400 mov edx, 0084C1A0
:0084BC0E E82D89BBFF call 00404540
:0084BC13 E959020000 jmp 0084BE71
:0084BC18 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BC1B BAC4C18400 mov edx, 0084C1C4
:0084BC20 E81B89BBFF call 00404540
:0084BC25 E947020000 jmp 0084BE71
:0084BC2A 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BC2D BAE8C18400 mov edx, 0084C1E8
:0084BC32 E80989BBFF call 00404540
:0084BC37 E935020000 jmp 0084BE71
:0084BC3C 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BC3F BA0CC28400 mov edx, 0084C20C
:0084BC44 E8F788BBFF call 00404540
:0084BC49 E923020000 jmp 0084BE71
:0084BC4E 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BC51 BA30C28400 mov edx, 0084C230
:0084BC56 E8E588BBFF call 00404540
:0084BC5B E911020000 jmp 0084BE71
:0084BC60 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BC63 BA54C28400 mov edx, 0084C254
:0084BC68 E8D388BBFF call 00404540
:0084BC6D E9FF010000 jmp 0084BE71
:0084BC72 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BC75 BA78C28400 mov edx, 0084C278
:0084BC7A E8C188BBFF call 00404540
:0084BC7F E9ED010000 jmp 0084BE71
:0084BC84 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BC87 BA9CC28400 mov edx, 0084C29C
:0084BC8C E8AF88BBFF call 00404540
:0084BC91 E9DB010000 jmp 0084BE71
:0084BC96 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BC99 BAC0C28400 mov edx, 0084C2C0
:0084BC9E E89D88BBFF call 00404540
:0084BCA3 E9C9010000 jmp 0084BE71
:0084BCA8 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BCAB BAE4C28400 mov edx, 0084C2E4
:0084BCB0 E88B88BBFF call 00404540
:0084BCB5 E9B7010000 jmp 0084BE71
:0084BCBA 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BCBD BA08C38400 mov edx, 0084C308
:0084BCC2 E87988BBFF call 00404540
:0084BCC7 E9A5010000 jmp 0084BE71
:0084BCCC 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BCCF BA2CC38400 mov edx, 0084C32C
:0084BCD4 E86788BBFF call 00404540
:0084BCD9 E993010000 jmp 0084BE71
:0084BCDE 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BCE1 BA50C38400 mov edx, 0084C350
:0084BCE6 E85588BBFF call 00404540
:0084BCEB E981010000 jmp 0084BE71
:0084BCF0 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BCF3 BA74C38400 mov edx, 0084C374
:0084BCF8 E84388BBFF call 00404540
:0084BCFD E96F010000 jmp 0084BE71
:0084BD02 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BD05 BA98C38400 mov edx, 0084C398
:0084BD0A E83188BBFF call 00404540
:0084BD0F E95D010000 jmp 0084BE71
:0084BD14 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BD17 BABCC38400 mov edx, 0084C3BC
:0084BD1C E81F88BBFF call 00404540
:0084BD21 E94B010000 jmp 0084BE71
:0084BD26 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BD29 BAE0C38400 mov edx, 0084C3E0
:0084BD2E E80D88BBFF call 00404540
:0084BD33 E939010000 jmp 0084BE71
:0084BD38 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BD3B BA04C48400 mov edx, 0084C404
:0084BD40 E8FB87BBFF call 00404540
:0084BD45 E927010000 jmp 0084BE71
:0084BD4A 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BD4D BA28C48400 mov edx, 0084C428
:0084BD52 E8E987BBFF call 00404540
:0084BD57 E915010000 jmp 0084BE71
:0084BD5C 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BD5F BA4CC48400 mov edx, 0084C44C
:0084BD64 E8D787BBFF call 00404540
:0084BD69 E903010000 jmp 0084BE71
:0084BD6E 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BD71 BA70C48400 mov edx, 0084C470
:0084BD76 E8C587BBFF call 00404540
:0084BD7B E9F1000000 jmp 0084BE71
:0084BD80 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BD83 BA94C48400 mov edx, 0084C494
:0084BD88 E8B387BBFF call 00404540
:0084BD8D E9DF000000 jmp 0084BE71
:0084BD92 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BD95 BAB8C48400 mov edx, 0084C4B8
:0084BD9A E8A187BBFF call 00404540
:0084BD9F E9CD000000 jmp 0084BE71
:0084BDA4 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BDA7 BADCC48400 mov edx, 0084C4DC
:0084BDAC E88F87BBFF call 00404540
:0084BDB1 E9BB000000 jmp 0084BE71
:0084BDB6 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BDB9 BA00C58400 mov edx, 0084C500
:0084BDBE E87D87BBFF call 00404540
:0084BDC3 E9A9000000 jmp 0084BE71
:0084BDC8 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BDCB BA24C58400 mov edx, 0084C524 "你可以使用至20年12月台票31日"
:0084BDD0 E86B87BBFF call 00404540
:0084BDD5 E997000000 jmp 0084BE71
:0084BDDA 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BDDD BA48C58400 mov edx, 0084C548 "你可以使用至2041年12月台票31日"
:0084BDE2 E85987BBFF call 00404540
:0084BDE7 E985000000 jmp 0084BE71
:0084BDEC 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BDEF BA6CC58400 mov edx, 0084C56C "你可以使用至2042年12月台票31日"
:0084BDF4 E84787BBFF call 00404540
:0084BDF9 EB76 jmp 0084BE71
:0084BDFB 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BDFE BA90C58400 mov edx, 0084C590 "你可以使用至2043年12月台票31日"
:0084BE03 E83887BBFF call 00404540
:0084BE08 EB67 jmp 0084BE71
:0084BE0A 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BE0D BAB4C58400 mov edx, 0084C5B4 "你可以使用至2044年12月台票31日"
:0084BE12 E82987BBFF call 00404540
:0084BE17 EB58 jmp 0084BE71
:0084BE19 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BE1C BAD8C58400 mov edx, 0084C5D8 "你可以使用至2045年12月台票31日"
:0084BE21 E81A87BBFF call 00404540
:0084BE26 EB49 jmp 0084BE71
:0084BE28 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BE2B BAFCC58400 mov edx, 0084C5FC "你可以使用至2046年12月台票31日"
:0084BE30 E80B87BBFF call 00404540
:0084BE35 EB3A jmp 0084BE71
:0084BE37 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BE3A BA20C68400 mov edx, 0084C620 "你可以使用至2047年12月台票31日"
:0084BE3F E8FC86BBFF call 00404540
:0084BE44 EB2B jmp 0084BE71
:0084BE46 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BE49 BA44C68400 mov edx, 0084C644 "你可以使用至2048年12月台票31日"
:0084BE4E E8ED86BBFF call 00404540
:0084BE53 EB1C jmp 0084BE71
:0084BE55 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BE58 BA68C68400 mov edx, 0084C668 "你可以使用至2049年12月台票31日"
:0084BE5D E8DE86BBFF call 00404540
:0084BE62 EB0D jmp 0084BE71
:0084BE64 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BE67 BA8CC68400 mov edx, 0084C68C "你可以使用至2050年12月台票31日"
:0084BE6C E8CF86BBFF call 00404540
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0084BA4B(C), :0084BB29(U), :0084BB3B(U), :0084BB4D(U), :0084BB5F(U)
|:0084BB71(U), :0084BB83(U), :0084BB95(U), :0084BBA7(U), :0084BBB9(U)
|:0084BBCB(U), :0084BBDD(U), :0084BBEF(U), :0084BC01(U), :0084BC13(U)
|:0084BC25(U), :0084BC37(U), :0084BC49(U), :0084BC5B(U), :0084BC6D(U)
|:0084BC7F(U), :0084BC91(U), :0084BCA3(U), :0084BCB5(U), :0084BCC7(U)
|:0084BCD9(U), :0084BCEB(U), :0084BCFD(U), :0084BD0F(U), :0084BD21(U)
|:0084BD33(U), :0084BD45(U), :0084BD57(U), :0084BD69(U), :0084BD7B(U)
|:0084BD8D(U), :0084BD9F(U), :0084BDB1(U), :0084BDC3(U), :0084BDD5(U)
|:0084BDE7(U), :0084BDF9(U), :0084BE08(U), :0084BE17(U), :0084BE26(U)
|:0084BE35(U), :0084BE44(U), :0084BE53(U), :0084BE62(U)
|
:0084BE71 6A40 push 00000040
:0084BE73 8D45C0 lea eax, dword ptr [ebp-40]
:0084BE76 8B4DF4 mov ecx, dword ptr [ebp-0C]
:0084BE79 BAB0C68400 mov edx, 0084C6B0 "充值成功!"
:0084BE7E E84189BBFF call 004047C4
:0084BE83 8B45C0 mov eax, dword ptr [ebp-40]
:0084BE86 E8ED8ABBFF call 00404978
:0084BE8B 8BD0 mov edx, eax
:0084BE8D B9BCC68400 mov ecx, 0084C6BC
:0084BE92 A1C41A8B00 mov eax, dword ptr [008B1AC4]
:0084BE97 8B00 mov eax, dword ptr [eax]
:0084BE99 E84EF0C3FF call 0048AEEC
:0084BE9E 8D45F4 lea eax, dword ptr [ebp-0C]
:0084BEA1 8B4DF4 mov ecx, dword ptr [ebp-0C]
:0084BEA4 BACCC68400 mov edx, 0084C6CC "软件已充值:"
:0084BEA9 E81689BBFF call 004047C4
:0084BEAE 8B45FC mov eax, dword ptr [ebp-04]
:0084BEB1 8B804C030000 mov eax, dword ptr [eax+0000034C]
:0084BEB7 8B55F4 mov edx, dword ptr [ebp-0C]
:0084BEBA E821E3C1FF call 0046A1E0
:0084BEBF EB32 jmp 0084BEF3
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0084BA37(C)
|
:0084BEC1 6A10 push 00000010
:0084BEC3 B9DCC68400 mov ecx, 0084C6DC "警告"
:0084BEC8 BAE4C68400 mov edx, 0084C6E4 "充值失败!"
:0084BECD A1C41A8B00 mov eax, dword ptr [008B1AC4]
:0084BED2 8B00 mov eax, dword ptr [eax]
:0084BED4 E813F0C3FF call 0048AEEC
:0084BED9 EB18 jmp 0084BEF3
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0084B945(C)
|
:0084BEDB 6A10 push 00000010
:0084BEDD B9DCC68400 mov ecx, 0084C6DC "警告"
:0084BEE2 BAF0C68400 mov edx, 0084C6F0 "充值密码错误，充值失败!"
:0084BEE7 A1C41A8B00 mov eax, dword ptr [008B1AC4]
:0084BEEC 8B00 mov eax, dword ptr [eax]
:0084BEEE E8F9EFC3FF call 0048AEEC
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0084BEBF(U), :0084BED9(U)
|
:0084BEF3 33C0 xor eax, eax
:0084BEF5 5A pop edx
:0084BEF6 59 pop ecx
:0084BEF7 59 pop ecx
:0084BEF8 648910 mov dword ptr fs:[eax], edx
:0084BEFB 6852BF8400 push 0084BF52
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0084BF50(U)
|
:0084BF00 8D45C0 lea eax, dword ptr [ebp-40]
:0084BF03 BA03000000 mov edx, 00000003
:0084BF08 E8BF85BBFF call 004044CC
:0084BF0D 8D45CC lea eax, dword ptr [ebp-34]
:0084BF10 E8AF8CBBFF call 00404BC4
:0084BF15 8D45D0 lea eax, dword ptr [ebp-30]
:0084BF18 E88B85BBFF call 004044A8
:0084BF1D 8D45D4 lea eax, dword ptr [ebp-2C]
:0084BF20 E88385BBFF call 004044A8
:0084BF25 8D45D8 lea eax, dword ptr [ebp-28]
:0084BF28 E87B85BBFF call 004044A8
:0084BF2D 8D45DC lea eax, dword ptr [ebp-24]
:0084BF30 E87385BBFF call 004044A8
:0084BF35 8D45E0 lea eax, dword ptr [ebp-20]
:0084BF38 E86B85BBFF call 004044A8
:0084BF3D 8D45E4 lea eax, dword ptr [ebp-1C]
:0084BF40 BA05000000 mov edx, 00000005
:0084BF45 E88285BBFF call 004044CC
:0084BF4A C3 ret
:0084BF4B E97C7EBBFF jmp 00403DCC
:0084BF50 EBAE jmp 0084BF00
:0084BF52 5F pop edi
:0084BF53 5E pop esi
:0084BF54 5B pop ebx
:0084BF55 8BE5 mov esp, ebp
:0084BF57 5D pop ebp
:0084BF58 C3 ret
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
