这软件用C32ASM或PW32打开串式参考都显示灰色无法使用,在OD里只能用附加的形式才有办法打开,而且一按调试-重新开始程序马上关闭,麻烦高手指点
7C92E4F4 C3 retn
7C92E4F5 8DA424 00000000 lea esp, dword ptr [esp]
7C92E4FC 8D6424 00 lea esp, dword ptr [esp]
7C92E500 8D5424 08 lea edx, dword ptr [esp+8]
7C92E504 CD 2E int 2E
7C92E506 C3 retn
7C92E507 90 nop
7C92E508 55 push ebp
7C92E509 8BEC mov ebp, esp
7C92E50B 9C pushfd
7C92E50C 81EC D0020000 sub esp, 2D0
7C92E512 8985 DCFDFFFF mov dword ptr [ebp-224], eax
7C92E518 898D D8FDFFFF mov dword ptr [ebp-228], ecx
7C92E51E 8B45 08 mov eax, dword ptr [ebp+8]
7C92E521 8B4D 04 mov ecx, dword ptr [ebp+4]
7C92E524 8948 0C mov dword ptr [eax+C], ecx
7C92E527 8D85 2CFDFFFF lea eax, dword ptr [ebp-2D4]
7C92E52D 8988 B8000000 mov dword ptr [eax+B8], ecx
7C92E533 8998 A4000000 mov dword ptr [eax+A4], ebx
7C92E539 8990 A8000000 mov dword ptr [eax+A8], edx
7C92E53F 89B0 A0000000 mov dword ptr [eax+A0], esi
7C92E545 89B8 9C000000 mov dword ptr [eax+9C], edi
7C92E54B 8D4D 0C lea ecx, dword ptr [ebp+C]
7C92E54E 8988 C4000000 mov dword ptr [eax+C4], ecx
7C92E554 8B4D 00 mov ecx, dword ptr [ebp]
7C92E557 8988 B4000000 mov dword ptr [eax+B4], ecx
7C92E55D 8B4D FC mov ecx, dword ptr [ebp-4]
7C92E560 8988 C0000000 mov dword ptr [eax+C0], ecx
7C92E566 8C88 BC000000 mov word ptr [eax+BC], cs
7C92E56C 8C98 98000000 mov word ptr [eax+98], ds
7C92E572 8C80 94000000 mov word ptr [eax+94], es
7C92E578 8CA0 90000000 mov word ptr [eax+90], fs
7C92E57E 8CA8 8C000000 mov word ptr [eax+8C], gs
7C92E584 8C90 C8000000 mov word ptr [eax+C8], ss
7C92E58A C700 07000100 mov dword ptr [eax], 10007
7C92E590 6A 01 push 1
7C92E592 50 push eax
7C92E593 FF75 08 push dword ptr [ebp+8]
7C92E596 E8 F5F3FFFF call 7C92D990
7C92E59B 83EC 20 sub esp, 20
7C92E59E 890424 mov dword ptr [esp], eax
7C92E5A1 C74424 04 01000>mov dword ptr [esp+4], 1
7C92E5A9 C74424 10 00000>mov dword ptr [esp+10], 0
7C92E5B1 8B45 08 mov eax, dword ptr [ebp+8]
7C92E5B4 894424 08 mov dword ptr [esp+8], eax
7C92E5B8 8BC4 mov eax, esp
7C92E5BA 50 push eax
7C92E5BB E8 48FFFFFF call 7C92E508
7C92E5C0 CC int3
7C92E5C1 CC int3
7C92E5C2 CC int3
7C92E5C3 CC int3
7C92E5C4 CC int3
7C92E5C5 CC int3
7C92E5C6 83EC 0C sub esp, 0C
7C92E5C9 DD1424 fst qword ptr [esp]
7C92E5CC E8 CAFCFFFF call 7C92E29B
7C92E5D1 E8 0D000000 call 7C92E5E3
7C92E5D6 83C4 0C add esp, 0C
7C92E5D9 C3 retn
7C92E5DA 8D5424 04 lea edx, dword ptr [esp+4]
7C92E5DE E8 75FCFFFF call 7C92E258
7C92E5E3 52 push edx
7C92E5E4 9B wait
7C92E5E5 D93C24 fstcw word ptr [esp]
7C92E5E8 74 50 je short 7C92E63A
7C92E5EA 66:813C24 7F02 cmp word ptr [esp], 27F
7C92E5F0 74 06 je short 7C92E5F8
7C92E5F2 D92D 5CE7927C fldcw word ptr [7C92E75C]
7C92E5F8 D9FF fcos
7C92E5FA 9B wait
7C92E5FB DFE0 fstsw ax
7C92E5FD 9E sahf
7C92E5FE 7A 1D jpe short 7C92E61D
7C92E600 833D ACB0997C 0>cmp dword ptr [7C99B0AC], 0
7C92E607 ^ 0F85 A4FCFFFF jnz 7C92E2B1
7C92E60D BA 12000000 mov edx, 12
7C92E612 8D0D 00B0997C lea ecx, dword ptr [7C99B000]
7C92E618 ^ E9 A1FCFFFF jmp 7C92E2BE
7C92E61D DB2D 74E6927C fld tbyte ptr [7C92E674]
7C92E623 D9C9 fxch st(1)
7C92E625 D9F5 fprem1
7C92E627 9B wait
7C92E628 DFE0 fstsw ax
7C92E62A 9E sahf
7C92E62B 7A F8 jpe short 7C92E625
7C92E62D DDD9 fstp st(1)
7C92E62F D9FF fcos
7C92E631 ^ EB CD jmp short 7C92E600
7C92E633 E8 07FCFFFF call 7C92E23F
7C92E638 EB 1B jmp short 7C92E655
7C92E63A A9 FFFF0F00 test eax, 0FFFFF
7C92E63F ^ 75 F2 jnz short 7C92E633
7C92E641 837C24 08 00 cmp dword ptr [esp+8], 0
7C92E646 ^ 75 EB jnz short 7C92E633
7C92E648 DDD8 fstp st
7C92E64A DB2D 68B0997C fld tbyte ptr [7C99B068]
7C92E650 B8 01000000 mov eax, 1
7C92E655 833D ACB0997C 0>cmp dword ptr [7C99B0AC], 0
7C92E65C ^ 0F85 4FFCFFFF jnz 7C92E2B1
7C92E662 BA 12000000 mov edx, 12
7C92E667 8D0D 00B0997C lea ecx, dword ptr [7C99B000]
7C92E66D E8 7DFDFFFF call 7C92E3EF
7C92E672 5A pop edx
7C92E673 C3 retn
7C92E674 35 C26821A2 xor eax, A22168C2
7C92E679 DA0F fimul dword ptr [edi]
7C92E67B C9 leave
7C92E67C 3E:40 inc eax
7C92E67E EB 18 jmp short 7C92E698
7C92E680 8BFF mov edi, edi
7C92E682 EB 00 jmp short 7C92E684
7C92E684 83EC 0C sub esp, 0C
7C92E687 DD1424 fst qword ptr [esp]
7C92E68A E8 0CFCFFFF call 7C92E29B
7C92E68F E8 0D000000 call 7C92E6A1
7C92E694 83C4 0C add esp, 0C
7C92E697 C3 retn
7C92E698 8D5424 04 lea edx, dword ptr [esp+4]
7C92E69C E8 B7FBFFFF call 7C92E258
7C92E6A1 52 push edx
7C92E6A2 9B wait
7C92E6A3 D93C24 fstcw word ptr [esp]
7C92E6A6 74 4E je short 7C92E6F6
7C92E6A8 8B4424 0C mov eax, dword ptr [esp+C]
7C92E6AC 66:813C24 7F02 cmp word ptr [esp], 27F
7C92E6B2 74 06 je short 7C92E6BA
7C92E6B4 D92D 5CE7927C fldcw word ptr [7C92E75C]
7C92E6BA A9 0000F07F test eax, 7FF00000
7C92E6BF 74 60 je short 7C92E721
7C92E6C1 A9 00000080 test eax, 80000000
7C92E6C6 75 43 jnz short 7C92E70B
7C92E6C8 D9ED fldln2
7C92E6CA D9C9 fxch st(1)
7C92E6CC D9F1 fyl2x
7C92E6CE 833D ACB0997C 0>cmp dword ptr [7C99B0AC], 0
7C92E6D5 ^ 0F85 D6FBFFFF jnz 7C92E2B1
7C92E6DB 8D0D 10B0997C lea ecx, dword ptr [7C99B010]
7C92E6E1 BA 1A000000 mov edx, 1A
7C92E6E6 ^ E9 D3FBFFFF jmp 7C92E2BE
7C92E6EB A9 00000080 test eax, 80000000
7C92E6F0 ^ 74 D6 je short 7C92E6C8
7C92E6F2 EB 17 jmp short 7C92E70B
7C92E6F4 ^ EB D2 jmp short 7C92E6C8
7C92E6F6 A9 FFFF0F00 test eax, 0FFFFF
7C92E6FB 75 1D jnz short 7C92E71A
7C92E6FD 837C24 08 00 cmp dword ptr [esp+8], 0
7C92E702 75 16 jnz short 7C92E71A
7C92E704 25 00000080 and eax, 80000000
7C92E709 ^ 74 C3 je short 7C92E6CE
7C92E70B DDD8 fstp st
7C92E70D DB2D 68B0997C fld tbyte ptr [7C99B068]
7C92E713 B8 01000000 mov eax, 1
7C92E718 EB 22 jmp short 7C92E73C
7C92E71A E8 20FBFFFF call 7C92E23F
7C92E71F EB 1B jmp short 7C92E73C
7C92E721 A9 FFFF0F00 test eax, 0FFFFF
7C92E726 ^ 75 C3 jnz short 7C92E6EB
7C92E728 837C24 08 00 cmp dword ptr [esp+8], 0
7C92E72D ^ 75 BC jnz short 7C92E6EB
7C92E72F DDD8 fstp st
7C92E731 DB2D 8AB0997C fld tbyte ptr [7C99B08A]
7C92E737 B8 02000000 mov eax, 2
7C92E73C 833D ACB0997C 0>cmp dword ptr [7C99B0AC], 0
7C92E743 ^ 0F85 68FBFFFF jnz 7C92E2B1
7C92E749 8D0D 10B0997C lea ecx, dword ptr [7C99B010]
7C92E74F BA 1A000000 mov edx, 1A
7C92E754 E8 96FCFFFF call 7C92E3EF
7C92E759 5A pop edx
7C92E75A C3 retn
7C92E75B 90 nop
7C92E75C 7F 02 jg short 7C92E760
7C92E75E 8B4C24 08 mov ecx, dword ptr [esp+8]
7C92E762 57 push edi
7C92E763 53 push ebx
7C92E764 56 push esi
7C92E765 8A11 mov dl, byte ptr [ecx]
7C92E767 8B7C24 10 mov edi, dword ptr [esp+10]
7C92E76B 84D2 test dl, dl
7C92E76D 74 68 je short 7C92E7D7
7C92E76F 8A71 01 mov dh, byte ptr [ecx+1]
7C92E772 84F6 test dh, dh
7C92E774 74 51 je short 7C92E7C7
7C92E776 8BF7 mov esi, edi
7C92E778 8B4C24 14 mov ecx, dword ptr [esp+14]
7C92E77C 8A07 mov al, byte ptr [edi]
7C92E77E 46 inc esi
7C92E77F 3AC2 cmp al, dl
7C92E781 74 15 je short 7C92E798
7C92E783 84C0 test al, al
7C92E785 74 0B je short 7C92E792
7C92E787 8A06 mov al, byte ptr [esi]
7C92E789 46 inc esi
7C92E78A 3AC2 cmp al, dl
7C92E78C 74 0A je short 7C92E798
7C92E78E 84C0 test al, al
7C92E790 ^ 75 F5 jnz short 7C92E787
7C92E792 5E pop esi
7C92E793 5B pop ebx
7C92E794 5F pop edi
7C92E795 33C0 xor eax, eax
7C92E797 C3 retn
7C92E798 8A06 mov al, byte ptr [esi]
7C92E79A 46 inc esi
7C92E79B 3AC6 cmp al, dh
7C92E79D ^ 75 EB jnz short 7C92E78A
7C92E79F 8D7E FF lea edi, dword ptr [esi-1]
7C92E7A2 8A61 02 mov ah, byte ptr [ecx+2]
7C92E7A5 84E4 test ah, ah
7C92E7A7 74 27 je short 7C92E7D0
7C92E7A9 8A06 mov al, byte ptr [esi]
7C92E7AB 83C6 02 add esi, 2
7C92E7AE 3AC4 cmp al, ah
7C92E7B0 ^ 75 C4 jnz short 7C92E776
7C92E7B2 8A41 03 mov al, byte ptr [ecx+3]
7C92E7B5 84C0 test al, al
7C92E7B7 74 17 je short 7C92E7D0
7C92E7B9 8A66 FF mov ah, byte ptr [esi-1]
7C92E7BC 83C1 02 add ecx, 2
7C92E7BF 3AC4 cmp al, ah
7C92E7C1 ^ 75 B3 jnz short 7C92E776
7C92E7C3 ^ EB DD jmp short 7C92E7A2
7C92E7C5 ^ EB AF jmp short 7C92E776
7C92E7C7 33C0 xor eax, eax
7C92E7C9 5E pop esi
7C92E7CA 5B pop ebx
7C92E7CB 5F pop edi
7C92E7CC 8AC2 mov al, dl
7C92E7CE EB 23 jmp short 7C92E7F3
7C92E7D0 8D47 FF lea eax, dword ptr [edi-1]
7C92E7D3 5E pop esi
7C92E7D4 5B pop ebx
7C92E7D5 5F pop edi
7C92E7D6 C3 retn
7C92E7D7 8BC7 mov eax, edi
7C92E7D9 5E pop esi
7C92E7DA 5B pop ebx
7C92E7DB 5F pop edi
7C92E7DC C3 retn
7C92E7DD 8D42 FF lea eax, dword ptr [edx-1]
7C92E7E0 5B pop ebx
7C92E7E1 C3 retn
7C92E7E2 8DA424 00000000 lea esp, dword ptr [esp]
7C92E7E9 8D6424 00 lea esp, dword ptr [esp]
7C92E7ED 33C0 xor eax, eax
7C92E7EF 8A4424 08 mov al, byte ptr [esp+8]
7C92E7F3 53 push ebx
7C92E7F4 8BD8 mov ebx, eax
7C92E7F6 C1E0 08 shl eax, 8
7C92E7F9 8B5424 08 mov edx, dword ptr [esp+8]
7C92E7FD F7C2 03000000 test edx, 3
7C92E803 74 13 je short 7C92E818
7C92E805 8A0A mov cl, byte ptr [edx]
7C92E807 42 inc edx
7C92E808 3ACB cmp cl, bl
7C92E80A ^ 74 D1 je short 7C92E7DD
7C92E80C 84C9 test cl, cl
7C92E80E 74 51 je short 7C92E861
7C92E810 F7C2 03000000 test edx, 3
7C92E816 ^ 75 ED jnz short 7C92E805
7C92E818 0BD8 or ebx, eax
7C92E81A 57 push edi
7C92E81B 8BC3 mov eax, ebx
7C92E81D C1E3 10 shl ebx, 10
7C92E820 56 push esi
7C92E821 0BD8 or ebx, eax
7C92E823 8B0A mov ecx, dword ptr [edx]
7C92E825 BF FFFEFE7E mov edi, 7EFEFEFF
7C92E82A 8BC1 mov eax, ecx
7C92E82C 8BF7 mov esi, edi
7C92E82E 33CB xor ecx, ebx
7C92E830 03F0 add esi, eax
7C92E832 03F9 add edi, ecx
7C92E834 83F1 FF xor ecx, FFFFFFFF
7C92E837 83F0 FF xor eax, FFFFFFFF
7C92E83A 33CF xor ecx, edi
7C92E83C 33C6 xor eax, esi
7C92E83E 83C2 04 add edx, 4
7C92E841 81E1 00010181 and ecx, 81010100
7C92E847 75 1C jnz short 7C92E865
7C92E849 25 00010181 and eax, 81010100
7C92E84E ^ 74 D3 je short 7C92E823
7C92E850 25 00010101 and eax, 1010100
7C92E855 75 08 jnz short 7C92E85F
7C92E857 81E6 00000080 and esi, 80000000
7C92E85D ^ 75 C4 jnz short 7C92E823
7C92E85F 5E pop esi
7C92E860 5F pop edi
7C92E861 5B pop ebx
7C92E862 33C0 xor eax, eax
7C92E864 C3 retn
7C92E865 8B42 FC mov eax, dword ptr [edx-4]
7C92E868 3AC3 cmp al, bl
7C92E86A 74 38 je short 7C92E8A4
7C92E86C 84C0 test al, al
7C92E86E ^ 74 EF je short 7C92E85F
7C92E870 3AE3 cmp ah, bl
7C92E872 74 29 je short 7C92E89D
7C92E874 84E4 test ah, ah
7C92E876 ^ 74 E7 je short 7C92E85F
7C92E878 C1E8 10 shr eax, 10
7C92E87B 3AC3 cmp al, bl
7C92E87D 74 17 je short 7C92E896
7C92E87F 84C0 test al, al
7C92E881 ^ 74 DC je short 7C92E85F
7C92E883 3AE3 cmp ah, bl
7C92E885 74 08 je short 7C92E88F
7C92E887 84E4 test ah, ah
7C92E889 ^ 75 98 jnz short 7C92E823
7C92E88B ^ EB D2 jmp short 7C92E85F
7C92E88D ^ EB 94 jmp short 7C92E823
7C92E88F 5E pop esi
7C92E890 5F pop edi
7C92E891 8D42 FF lea eax, dword ptr [edx-1]
7C92E894 5B pop ebx
7C92E895 C3 retn
7C92E896 8D42 FE lea eax, dword ptr [edx-2]
7C92E899 5E pop esi
7C92E89A 5F pop edi
7C92E89B 5B pop ebx
7C92E89C C3 retn
7C92E89D 8D42 FD lea eax, dword ptr [edx-3]
7C92E8A0 5E pop esi
7C92E8A1 5F pop edi
7C92E8A2 5B pop ebx
7C92E8A3 C3 retn
7C92E8A4 8D42 FC lea eax, dword ptr [edx-4]
7C92E8A7 5E pop esi
7C92E8A8 5F pop edi
7C92E8A9 5B pop ebx
7C92E8AA C3 retn
7C92E8AB 68 00E9927C push 7C92E900
7C92E8B0 64:A1 00000000 mov eax, dword ptr fs:[0]
7C92E8B6 50 push eax
7C92E8B7 8B4424 10 mov eax, dword ptr [esp+10]
7C92E8BB 896C24 10 mov dword ptr [esp+10], ebp
7C92E8BF 8D6C24 10 lea ebp, dword ptr [esp+10]
7C92E8C3 2BE0 sub esp, eax
7C92E8C5 53 push ebx
7C92E8C6 56 push esi
7C92E8C7 57 push edi
7C92E8C8 8B45 F8 mov eax, dword ptr [ebp-8]
7C92E8CB 8965 E8 mov dword ptr [ebp-18], esp
7C92E8CE 50 push eax
7C92E8CF 8B45 FC mov eax, dword ptr [ebp-4]
7C92E8D2 C745 FC FFFFFFF>mov dword ptr [ebp-4], -1
7C92E8D9 8945 F8 mov dword ptr [ebp-8], eax
7C92E8DC 8D45 F0 lea eax, dword ptr [ebp-10]
7C92E8DF 64:A3 00000000 mov dword ptr fs:[0], eax
7C92E8E5 C3 retn
7C92E8E6 8B4D F0 mov ecx, dword ptr [ebp-10]
7C92E8E9 64:890D 0000000>mov dword ptr fs:[0], ecx
7C92E8F0 59 pop ecx
7C92E8F1 5F pop edi
7C92E8F2 5E pop esi
7C92E8F3 5B pop ebx
7C92E8F4 C9 leave
7C92E8F5 51 push ecx
7C92E8F6 C3 retn
7C92E8F7 90 nop
7C92E8F8 56 push esi
7C92E8F9 43 inc ebx
7C92E8FA 3230 xor dh, byte ptr [eax]
7C92E8FC 58 pop eax
7C92E8FD 43 inc ebx
7C92E8FE 3030 xor byte ptr [eax], dh
7C92E900 55 push ebp
7C92E901 8BEC mov ebp, esp
7C92E903 83EC 08 sub esp, 8
7C92E906 53 push ebx
7C92E907 56 push esi
7C92E908 57 push edi
7C92E909 55 push ebp
7C92E90A FC cld
7C92E90B 8B5D 0C mov ebx, dword ptr [ebp+C]
7C92E90E 8B45 08 mov eax, dword ptr [ebp+8]
7C92E911 F740 04 0600000>test dword ptr [eax+4], 6
7C92E918 0F85 AB000000 jnz 7C92E9C9
7C92E91E 8945 F8 mov dword ptr [ebp-8], eax
7C92E921 8B45 10 mov eax, dword ptr [ebp+10]
7C92E924 8945 FC mov dword ptr [ebp-4], eax
7C92E927 8D45 F8 lea eax, dword ptr [ebp-8]
7C92E92A 8943 FC mov dword ptr [ebx-4], eax
7C92E92D 8B73 0C mov esi, dword ptr [ebx+C]
7C92E930 8B7B 08 mov edi, dword ptr [ebx+8]
7C92E933 53 push ebx
7C92E934 E8 BB9A0200 call 7C9583F4
7C92E939 83C4 04 add esp, 4
7C92E93C 0BC0 or eax, eax
7C92E93E 74 7B je short 7C92E9BB
7C92E940 83FE FF cmp esi, -1
7C92E943 74 7D je short 7C92E9C2
7C92E945 8D0C76 lea ecx, dword ptr [esi+esi*2]
7C92E948 8B448F 04 mov eax, dword ptr [edi+ecx*4+4]
7C92E94C 0BC0 or eax, eax
7C92E94E 74 59 je short 7C92E9A9
7C92E950 56 push esi
7C92E951 55 push ebp
7C92E952 8D6B 10 lea ebp, dword ptr [ebx+10]
7C92E955 33DB xor ebx, ebx
7C92E957 33C9 xor ecx, ecx
7C92E959 33D2 xor edx, edx
7C92E95B 33F6 xor esi, esi
7C92E95D 33FF xor edi, edi
7C92E95F FFD0 call eax
7C92E961 5D pop ebp
7C92E962 5E pop esi
7C92E963 8B5D 0C mov ebx, dword ptr [ebp+C]
7C92E966 0BC0 or eax, eax
7C92E968 74 3F je short 7C92E9A9
7C92E96A 78 48 js short 7C92E9B4
7C92E96C 8B7B 08 mov edi, dword ptr [ebx+8]
7C92E96F 53 push ebx
7C92E970 E8 8C000000 call 7C92EA01
7C92E975 83C4 04 add esp, 4
7C92E978 8D6B 10 lea ebp, dword ptr [ebx+10]
7C92E97B 56 push esi
7C92E97C 53 push ebx
7C92E97D E8 DA000000 call 7C92EA5C
7C92E982 83C4 08 add esp, 8
7C92E985 8D0C76 lea ecx, dword ptr [esi+esi*2]
7C92E988 6A 01 push 1
7C92E98A 8B448F 08 mov eax, dword ptr [edi+ecx*4+8]
7C92E98E E8 65010000 call 7C92EAF8
7C92E993 8B048F mov eax, dword ptr [edi+ecx*4]
7C92E996 8943 0C mov dword ptr [ebx+C], eax
新手还没办法上传附件
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课