00406136 . E8 25F8FFFF CALL Easy_Vid.00405960
0040613B . 83C4 08 ADD ESP,8
0040613E . 85C0 TEST EAX,EAX
00406140 . 0F85 DF000000 JNZ Easy_Vid.00406225
00406146 > 8A4C04 08 MOV CL,BYTE PTR SS:[ESP+EAX+8]
0040614A . 8888 90964100 MOV BYTE PTR DS:[EAX+419690],CL
00406150 . 40 INC EAX
00406151 . 84C9 TEST CL,CL
00406153 .^ 75 F1 JNZ SHORT Easy_Vid.00406146
00406155 . 33C0 XOR EAX,EAX
00406157 > 8A4C04 48 MOV CL,BYTE PTR SS:[ESP+EAX+48]
0040615B . 8888 40924100 MOV BYTE PTR DS:[EAX+419240],CL
00406161 . 40 INC EAX
00406162 . 84C9 TEST CL,CL
00406164 .^ 75 F1 JNZ SHORT Easy_Vid.00406157
00406166 . C705 349A4100>MOV DWORD PTR DS:[419A34],1
00406170 . 8B53 64 MOV EDX,DWORD PTR DS:[EBX+64]
00406173 . 57 PUSH EDI
00406174 . 52 PUSH EDX ; /<%s>
00406175 . 8D8424 D00100>LEA EAX,DWORD PTR SS:[ESP+1D0] ; |
0040617C . 68 5C8B4100 PUSH Easy_Vid.00418B5C ; |format = "This copy is licensed to:%s "
00406181 . 50 PUSH EAX ; |s
00406182 . FF15 A8354100 CALL DWORD PTR DS:[<&MSVCRT.sprintf>] ; \sprintf
00406188 . 83C4 0C ADD ESP,0C
0040618B . 8D8C24 CC0100>LEA ECX,DWORD PTR SS:[ESP+1CC]
00406192 . 6A 40 PUSH 40
00406194 . 68 508B4100 PUSH Easy_Vid.00418B50 ; thank you
EAX 0012A610 ASCII "C7C22B86"
ECX 0012A5D0 ASCII "33"
EDX 7C99B178 ntdll.7C99B178
EBX 0012AD24
ESP 0012A580
EBP 0012A85C
ESI 00FB0000
EDI 0012AD24
EIP 00406136 Easy_Vid.00406136
C 0 ES 0023 32位 0(FFFFFFFF)
P 0 CS 001B 32位 0(FFFFFFFF)
A 0 SS 0023 32位 0(FFFFFFFF)
Z 0 DS 0023 32位 0(FFFFFFFF)
S 0 FS 003B 32位 7FFDF000(FFF)
T 0 GS 0000 NULL
D 0
O 0 LastErr ERROR_SUCCESS (00000000)
EFL 00000202 (NO,NB,NE,A,NS,PO,GE,G)
ST0 empty +UNORM 2DD1 07FF0000 0120027F
ST1 empty +UNORM 1F80 07FF0000 0120027F
ST2 empty 1.0251420566685707220e-2504
ST3 empty 4.8352792097197886000e+3034
ST4 empty +UNORM 2534 7FFDF700 F38424E4
ST5 empty 1.6557174472295518230e-201
ST6 empty +UNORM 052C 00000000 000006C2
ST7 empty 3780.0000000000000000
3 2 1 0 E S P U O Z D I
FST 0120 Cond 0 0 0 1 Err 0 0 1 0 0 0 0 0 (LT)
FCW 027F Prec NEAR,53 掩码 1 1 1 1 1 1
注册机设置
中断地址406136
中断次数1
指令长度5
第一字节E8
寄存器方式EAX 进制
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课