http://share.cech.com.cn/get/7e3dc4da8f0334624e9a39558.html下载文件
:10001993 33D2 xor edx, edx
:10001995 8A90281A0010 mov dl, byte ptr [eax+10001A28]
:1000199B FF2495101A0010 jmp dword ptr [4*edx+10001A10] // 这里应该是关键吧.
* Possible StringData Ref from Data Obj ->"认证服务器无法连接,请稍候重试"
:100019A2 688C400010 push 1000408C
* Possible Reference to Dialog: DialogID_1B58, CONTROL_ID:1773, ""?(DF未"
:100019A7 6873170000 push 00001773
* Reference To: MFC42.Ordinal:1741, Ord:1741h
:100019AC E8370B0000 Call 100024E8
:100019B1 33C0 xor eax, eax
:100019B3 5D pop ebp
:100019B4 C20400 ret 0004
* Possible StringData Ref from Data Obj ->"登录成功"
:100019B7 6848410010 push 10004148
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:100019F9(U)
* Possible Reference to Dialog: DialogID_1B58, CONTROL_ID:1773, ""?(DF未"
.
.
.
.
.
.
* Possible Reference to Dialog: DialogID_1B58, CONTROL_ID:1773, ""?(DF未"
|
:100019E4 6873170000 push 00001773
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:10001978(C)
|
* Reference To: MFC42.Ordinal:1741, Ord:1741h
|
:100019E9 E8FA0A0000 Call 100024E8
:100019EE 33C0 xor eax, eax
:100019F0 5D pop ebp
:100019F1 C20400 ret 0004
* Possible StringData Ref from Data Obj ->"冲值成功，请重新启动风暴"
|
:100019F4 6820410010 push 10004120
:100019F9 EBC1 jmp 100019BC
* Possible StringData Ref from Data Obj ->"冲值失败"
|
:100019FB 6814410010 push 10004114
:10001A00 6873170000 push 00001773
:10001A05 E8DE0A0000 Call 100024E8
:10001A0A 33C0 xor eax, eax
:10001A0C 5D pop ebp
:10001A0D C20400 ret 0004
:10001A10 F4190010 DWORD 100019F4
:10001A14 FB190010 DWORD 100019FB
:10001A18 B7190010 DWORD 100019B7
:10001A1C DF190010 DWORD 100019DF
:10001A20 A2190010 DWORD 100019A2
:10001A24 C6190010 DWORD 100019C6
[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法
