[求助]谁帮我把这段代码解释一下,怎么把这个狗对话框怎么去掉..-付费问答-看雪-安全社区|安全招聘|kanxue.com

[旧帖] [求助]谁帮我把这段代码解释一下,怎么把这个狗对话框怎么去掉.. 0.00雪花

发表于: 2007-12-7 15:20 4988

[旧帖] [求助]谁帮我把这段代码解释一下,怎么把这个狗对话框怎么去掉.. 0.00雪花

晨露流星

2007-12-7 15:20

4988

这个程序启动加载中.到90%的时候弹出请插入加密狗,我把下面
004C9272    E8 79DEF9FF call 004670F0                      这行我用nop去掉
004C9277    E8 10B4F3FF call 0040468C                      这行我用nop去掉
我用nop去掉后,可以加载进去,但进入到第二画面后,点击其中的一部分程序会卡死不动~
我应该怎么做..
004C9266    BA EC934C00 mov    edx, 004C93EC
上面这行怎么解释..高手帮小弟指点一下.. 谢谢啦~~~~~
004C9222 .  E8 A5D8F5FF call 00426ACC
004C9227 .  55          push ebp                            ; /Arg1
004C9228 .  E8 E3FAFFFF call 004C8D10                      ; \Camera_D.004C8D10
004C922D .  59          pop    ecx
004C922E .  33C0       xor    eax, eax
004C9230    55          push ebp
004C9231    68 90924C00 push 004C9290
004C9236    64:FF30    push dword ptr fs:[eax]
004C9239    64:8920    mov    dword ptr fs:[eax], esp
004C923C    E8 5F01FFFF call 004B93A0
004C9241    84C0       test al, al
004C9243    75 41       jnz    short 004C9286
004C9245    6A 10       push 10
004C9247    8D95 DCFEFFFF lea    edx, dword ptr [ebp-124]
004C924D    A1 70295200 mov    eax, dword ptr [522970]
004C9252    8B00       mov    eax, dword ptr [eax]
004C9254    E8 BFD8F9FF call 00466B18
004C9259    8B85 DCFEFFFF mov    eax, dword ptr [ebp-124]
004C925F    E8 6CBAF3FF call 00404CD0
004C9264    8BC8       mov    ecx, eax
004C9266    BA EC934C00 mov    edx, 004C93EC                   ;  请插入软件狗!
004C926B    A1 70295200 mov    eax, dword ptr [522970]
004C9270    8B00       mov    eax, dword ptr [eax]
004C9272    E8 79DEF9FF call 004670F0                      这行我用nop去掉
004C9277    E8 10B4F3FF call 0040468C                      这行我用nop去掉
004C927C    33C0       xor    eax, eax
004C927E    5A          pop    edx
004C927F    59          pop    ecx
004C9280    59          pop    ecx
004C9281    64:8910    mov    dword ptr fs:[eax], edx
004C9284    EB 33       jmp    short 004C92B9
004C9286    33C0       xor    eax, eax
004C9288    5A          pop    edx
004C9289    59          pop    ecx
004C928A    59          pop    ecx
004C928B    64:8910    mov    dword ptr fs:[eax], edx
004C928E    EB 16       jmp    short 004C92A6
004C9290 ^ E9 7BABF3FF jmp    00403E10
004C9295    E8 F2B3F3FF call 0040468C
004C929A    E8 9DAFF3FF call 0040423C
004C929F    EB 18       jmp    short 004C92B9
004C92A1    E8 96AFF3FF call 0040423C
004C92A6    E8 01F9FFFF call 004C8BAC
004C92AB .  55          push ebp                            ; /Arg1
004C92AC .  E8 5FFAFFFF call 004C8D10                      ; \Camera_D.004C8D10
004C92B1 .  59          pop    ecx
004C92B2 .  55          push ebp
004C92B3 .  E8 58FAFFFF call 004C8D10
004C92B8 .  59          pop    ecx
004C92B9 >  33C0       xor    eax, eax
004C92BB .  5A          pop    edx
004C92BC .  59          pop    ecx
004C92BD .  59          pop    ecx
004C92BE .  64:8910    mov    dword ptr fs:[eax], edx
004C92C1 .  68 E6924C00 push 004C92E6

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课

收藏・1

免费・0

支持

最新回复 (11)
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 2 楼倒,没人帮我啊~~~~~ 2007-12-8 09:55 0
rxzcums 雪币： 427 活跃值： (65) 能力值： ( LV6，RANK：90 ) 在线值：发帖 13 回帖 1174 粉丝 0 关注私信	rxzcums 2 3 楼我觉得应该这样改： 004C9243 75 41 jnz short 004C9286 改 004C9243 eb 41 jmp short 004C9286 2007-12-8 14:52 0
xingbing 雪币： 155 活跃值： (3356) 能力值： ( LV2，RANK：10 ) 在线值：发帖 2 回帖 1168 粉丝 2 关注私信	xingbing 4 楼只改这个跳转估计还有问题。 004C923C E8 5F01FFFF call 004B93A0这个是关键的call仔细跟一下，最好从这里入手。 2007-12-9 10:41 0
htsf110 雪币： 218 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 3 回帖 78 粉丝 0 关注私信	htsf110 5 楼把软件放出来 2007-12-9 14:43 0
htsf110 雪币： 218 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 3 回帖 78 粉丝 0 关注私信	htsf110 6 楼找到判断狗是否存在的地方,然后改成狗是存在的,然后改狗的DLL这样,你试试这样 2007-12-9 14:49 0
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 7 楼软件我入在c4cK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3c8E0M7r3W2F1k6K6l9H3z5q4)9J5k6i4W2K6x3e0j5^5i4K6u0W2j5$3!0E0i4@1f1&6i4K6R3%4i4K6S2o6i4@1f1@1i4@1u0m8i4K6R3$3i4K6N6q4i4K6N6q4i4K6N6q4i4@1f1&6i4K6R3J5i4@1p5K6i4@1f1@1i4@1u0p5i4K6S2p5i4@1f1#2i4@1p5@1i4@1p5%4i4@1f1@1i4@1u0q4i4@1p5H3i4@1f1#2i4@1t1^5i4@1q4q4i4@1f1$3i4K6R3^5i4K6V1I4i4@1f1%4i4K6W2o6i4K6S2n7i4@1f1%4i4K6W2o6i4K6S2n7i4K6N6q4i4K6N6q4i4K6N6q4i4@1f1$3i4K6V1H3i4K6W2q4i4@1f1@1i4@1u0m8i4K6R3$3i4@1f1#2i4@1p5#2i4@1u0p5i4@1f1@1i4@1t1&6i4K6R3#2i4@1f1$3i4K6V1H3i4K6W2q4i4@1f1@1i4@1t1^5i4K6S2p5i4@1f1#2i4@1q4q4i4K6W2m8i4@1f1#2i4K6V1#2i4K6S2m8i4K6u0W2i4K6u0W2i4@1f1^5i4@1u0r3i4K6V1&6i4@1f1$3i4K6V1^5i4@1q4r3i4@1f1$3i4K6R3^5i4K6V1I4i4@1f1^5i4K6R3@1i4@1t1I4i4@1f1@1i4@1u0m8i4K6R3$3i4@1f1#2i4@1p5K6i4@1t1K6i4@1f1%4i4K6W2m8i4K6R3@1i4K6u0W2i4K6u0W2 2007-12-9 17:48 0
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 8 楼这怎么做???? 2007-12-9 17:49 0
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 9 楼大哥你说的对,是可以跳过狗的对话框,但是进入第二画面又卡死了.. 2007-12-9 17:56 0
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 10 楼 004DB677 D5 BB AAD 0BB 004DB679 AD LODS DWORD PTR DS:[ESI] 004DB67A C3 RETN 004DB67B E6 2E OUT 2E,AL ; I/O 命令 004DB67D 77 61 JA SHORT 007.004DB6E0 004DB67F 76 00 JBE SHORT 007.004DB681 004DB681 0000 ADD BYTE PTR DS:[EAX],AL 004DB683 0055 8B ADD BYTE PTR SS:[EBP-75],DL 004DB686 EC IN AL,DX ; I/O 命令 004DB687 53 PUSH EBX 004DB688 8BD8 MOV EBX,EAX 004DB68A 66:8B01 MOV AX,WORD PTR DS:[ECX] 004DB68D 83C0 9F ADD EAX,-61 004DB690 66:83E8 09 SUB AX,9 004DB694 72 0F JB SHORT 007.004DB6A5 004DB696 74 25 JE SHORT 007.004DB6BD 004DB698 66:83E8 04 SUB AX,4 004DB69C 74 16 JE SHORT 007.004DB6B4 004DB69E 66:FFC8 DEC AX 004DB6A1 74 2C JE SHORT 007.004DB6CF 004DB6A3 EB 31 JMP SHORT 007.004DB6D6 004DB6A5 66:8B11 MOV DX,WORD PTR DS:[ECX] 004DB6A8 80EA 60 SUB DL,60 004DB6AB 8BC3 MOV EAX,EBX 004DB6AD E8 72FFFFFF CALL 007.004DB624 004DB6B2 EB 22 JMP SHORT 007.004DB6D6 004DB6B4 8BC3 MOV EAX,EBX 004DB6B6 E8 A1050000 CALL 007.004DBC5C 004DB6BB EB 19 JMP SHORT 007.004DB6D6 004DB6BD E8 CEBCFEFF CALL 007.004C7390 004DB6C2 84C0 TEST AL,AL 004DB6C4 74 10 JE SHORT 007.004DB6D6 004DB6C6 8BC3 MOV EAX,EBX 004DB6C8 E8 0BB0F8FF CALL 007.004666D8 004DB6CD EB 07 JMP SHORT 007.004DB6D6 004DB6CF 8BC3 MOV EAX,EBX 004DB6D1 E8 1E060000 CALL 007.004DBCF4 004DB6D6 5B POP EBX 004DB6D7 5D POP EBP 004DB6D8 C2 0400 RETN 4 004DB6DB 90 NOP 004DB6DC /. 55 PUSH EBP 004DB6DD \|. 8BEC MOV EBP,ESP 004DB6DF \|. 53 PUSH EBX 004DB6E0 \|. 56 PUSH ESI 004DB6E1 \|. 8BD9 MOV EBX,ECX 004DB6E3 \|. 8BF0 MOV ESI,EAX 004DB6E5 \|. 8BC3 MOV EAX,EBX 004DB6E7 \|. BA B0BA4D00 MOV EDX,007.004DBAB0 ; 1个镜头 004DB6EC E8 9B9AF2FF CALL 007.0040518C 004DB6F1 75 0E JNZ SHORT 007.004DB701 004DB6F3 B2 01 MOV DL,1 004DB6F5 8BC6 MOV EAX,ESI 004DB6F7 E8 28FFFFFF CALL 007.004DB624 004DB6FC E9 A3030000 JMP 007.004DBAA4 004DB701 8BC3 MOV EAX,EBX 004DB703 \|. BA B8BA4D00 MOV EDX,007.004DBAB8 ; 2个镜头 004DB708 \|. E8 7F9AF2FF CALL 007.0040518C 004DB70D \|. 75 0E JNZ SHORT 007.004DB71D 004DB70F \|. B2 02 MOV DL,2 004DB711 \|. 8BC6 MOV EAX,ESI 004DB713 \|. E8 0CFFFFFF CALL 007.004DB624 004DB718 \|. E9 87030000 JMP 007.004DBAA4 004DB71D \|> 8BC3 MOV EAX,EBX 004DB71F \|. BA C0BA4D00 MOV EDX,007.004DBAC0 ; 3个镜头 004DB724 \|. E8 639AF2FF CALL 007.0040518C 004DB729 \|. 75 0E JNZ SHORT 007.004DB739 004DB72B \|. B2 03 MOV DL,3 004DB72D \|. 8BC6 MOV EAX,ESI 004DB72F \|. E8 F0FEFFFF CALL 007.004DB624 004DB734 \|. E9 6B030000 JMP 007.004DBAA4 004DB739 \|> 8BC3 MOV EAX,EBX 004DB73B \|. BA C8BA4D00 MOV EDX,007.004DBAC8 ; 4个镜头 004DB740 \|. E8 479AF2FF CALL 007.0040518C 004DB745 \|. 75 0E JNZ SHORT 007.004DB755 004DB747 \|. B2 04 MOV DL,4 004DB749 \|. 8BC6 MOV EAX,ESI 004DB74B \|. E8 D4FEFFFF CALL 007.004DB624 004DB750 \|. E9 4F030000 JMP 007.004DBAA4 004DB755 \|> 8BC3 MOV EAX,EBX 004DB757 \|. BA D0BA4D00 MOV EDX,007.004DBAD0 ; 5个镜头 004DB75C \|. E8 2B9AF2FF CALL 007.0040518C 004DB761 \|. 75 0E JNZ SHORT 007.004DB771 004DB763 \|. B2 05 MOV DL,5 004DB765 \|. 8BC6 MOV EAX,ESI 004DB767 \|. E8 B8FEFFFF CALL 007.004DB624 004DB76C \|. E9 33030000 JMP 007.004DBAA4 004DB771 \|> 8BC3 MOV EAX,EBX 004DB773 \|. BA D8BA4D00 MOV EDX,007.004DBAD8 ; 6个镜头 004DB778 \|. E8 0F9AF2FF CALL 007.0040518C 004DB77D \|. 75 0E JNZ SHORT 007.004DB78D 004DB77F \|. B2 06 MOV DL,6 004DB781 \|. 8BC6 MOV EAX,ESI 004DB783 \|. E8 9CFEFFFF CALL 007.004DB624 004DB788 \|. E9 17030000 JMP 007.004DBAA4 004DB78D \|> 8BC3 MOV EAX,EBX 004DB78F \|. BA E0BA4D00 MOV EDX,007.004DBAE0 ; 7个镜头 004DB794 \|. E8 F399F2FF CALL 007.0040518C 004DB799 \|. 75 0E JNZ SHORT 007.004DB7A9 004DB79B \|. B2 07 MOV DL,7 004DB79D \|. 8BC6 MOV EAX,ESI 004DB79F \|. E8 80FEFFFF CALL 007.004DB624 004DB7A4 \|. E9 FB020000 JMP 007.004DBAA4 004DB7A9 \|> 8BC3 MOV EAX,EBX 004DB7AB \|. BA E8BA4D00 MOV EDX,007.004DBAE8 ; 8个镜头 004DB7B0 \|. E8 D799F2FF CALL 007.0040518C 004DB7B5 \|. 75 0E JNZ SHORT 007.004DB7C5 004DB7B7 \|. B2 08 MOV DL,8 004DB7B9 \|. 8BC6 MOV EAX,ESI 004DB7BB \|. E8 64FEFFFF CALL 007.004DB624 004DB7C0 \|. E9 DF020000 JMP 007.004DBAA4 004DB7C5 \|> 8BC3 MOV EAX,EBX 004DB7C7 \|. BA F0BA4D00 MOV EDX,007.004DBAF0 ; 9个镜头 004DB7CC \|. E8 BB99F2FF CALL 007.0040518C 004DB7D1 \|. 75 0E JNZ SHORT 007.004DB7E1 004DB7D3 \|. B2 09 MOV DL,9 004DB7D5 \|. 8BC6 MOV EAX,ESI 004DB7D7 \|. E8 48FEFFFF CALL 007.004DB624 004DB7DC \|. E9 C3020000 JMP 007.004DBAA4 004DB7E1 \|> 8BC3 MOV EAX,EBX 004DB7E3 \|. BA F8BA4D00 MOV EDX,007.004DBAF8 ; UNICODE "10" 004DB7E8 E8 9F99F2FF CALL 007.0040518C 004DB7ED 75 0E JNZ SHORT 007.004DB7FD 004DB7EF \|. B2 0A MOV DL,0A 004DB7F1 \|. 8BC6 MOV EAX,ESI 004DB7F3 \|. E8 2CFEFFFF CALL 007.004DB624 004DB7F8 \|. E9 A7020000 JMP 007.004DBAA4 004DB7FD \|> 8BC3 MOV EAX,EBX 004DB7FF \|. BA 04BB4D00 MOV EDX,007.004DBB04 ; UNICODE "11" 004DB804 \|. E8 8399F2FF CALL 007.0040518C 004DB809 \|. 75 0E JNZ SHORT 007.004DB819 004DB80B \|. B2 0B MOV DL,0B 004DB80D \|. 8BC6 MOV EAX,ESI 004DB80F \|. E8 10FEFFFF CALL 007.004DB624 004DB814 \|. E9 8B020000 JMP 007.004DBAA4 004DB819 \|> 8BC3 MOV EAX,EBX 004DB81B \|. BA 10BB4D00 MOV EDX,007.004DBB10 ; UNICODE "12" 004DB820 \|. E8 6799F2FF CALL 007.0040518C 004DB825 \|. 75 0E JNZ SHORT 007.004DB835 004DB827 \|. B2 0C MOV DL,0C 004DB829 \|. 8BC6 MOV EAX,ESI 004DB82B \|. E8 F4FDFFFF CALL 007.004DB624 004DB830 \|. E9 6F020000 JMP 007.004DBAA4 004DB835 \|> 8BC3 MOV EAX,EBX 004DB837 \|. BA 1CBB4D00 MOV EDX,007.004DBB1C ; UNICODE "13" 004DB83C \|. E8 4B99F2FF CALL 007.0040518C 004DB841 \|. 75 0E JNZ SHORT 007.004DB851 004DB843 \|. B2 0D MOV DL,0D 004DB845 \|. 8BC6 MOV EAX,ESI 004DB847 \|. E8 D8FDFFFF CALL 007.004DB624 004DB84C \|. E9 53020000 JMP 007.004DBAA4 004DB851 \|> 8BC3 MOV EAX,EBX 004DB853 \|. BA 28BB4D00 MOV EDX,007.004DBB28 ; UNICODE "14" 004DB858 \|. E8 2F99F2FF CALL 007.0040518C 004DB85D \|. 75 0E JNZ SHORT 007.004DB86D 004DB85F \|. B2 0E MOV DL,0E 004DB861 \|. 8BC6 MOV EAX,ESI 004DB863 \|. E8 BCFDFFFF CALL 007.004DB624 004DB868 \|. E9 37020000 JMP 007.004DBAA4 004DB86D \|> 8BC3 MOV EAX,EBX 004DB86F \|. BA 34BB4D00 MOV EDX,007.004DBB34 ; UNICODE "15" 004DB874 \|. E8 1399F2FF CALL 007.0040518C 004DB879 \|. 75 0E JNZ SHORT 007.004DB889 004DB87B \|. B2 0F MOV DL,0F 004DB87D \|. 8BC6 MOV EAX,ESI 004DB87F \|. E8 A0FDFFFF CALL 007.004DB624 004DB884 \|. E9 1B020000 JMP 007.004DBAA4 004DB889 \|> 8BC3 MOV EAX,EBX 004DB88B \|. BA 40BB4D00 MOV EDX,007.004DBB40 ; UNICODE "16" 004DB890 \|. E8 F798F2FF CALL 007.0040518C 004DB895 \|. 75 0E JNZ SHORT 007.004DB8A5 004DB897 \|. B2 10 MOV DL,10 004DB899 \|. 8BC6 MOV EAX,ESI 004DB89B \|. E8 84FDFFFF CALL 007.004DB624 004DB8A0 \|. E9 FF010000 JMP 007.004DBAA4 004DB8A5 \|> 8BC3 MOV EAX,EBX 004DB8A7 \|. BA 4CBB4D00 MOV EDX,007.004DBB4C ; UNICODE "17" 004DB8AC \|. E8 DB98F2FF CALL 007.0040518C 004DB8B1 \|. 75 0E JNZ SHORT 007.004DB8C1 004DB8B3 \|. B2 11 MOV DL,11 004DB8B5 \|. 8BC6 MOV EAX,ESI 004DB8B7 \|. E8 68FDFFFF CALL 007.004DB624 004DB8BC \|. E9 E3010000 JMP 007.004DBAA4 004DB8C1 \|> 8BC3 MOV EAX,EBX 004DB8C3 \|. BA 58BB4D00 MOV EDX,007.004DBB58 ; UNICODE "18" 004DB8C8 \|. E8 BF98F2FF CALL 007.0040518C 004DB8CD \|. 75 0E JNZ SHORT 007.004DB8DD 004DB8CF \|. B2 12 MOV DL,12 004DB8D1 \|. 8BC6 MOV EAX,ESI 004DB8D3 \|. E8 4CFDFFFF CALL 007.004DB624 004DB8D8 \|. E9 C7010000 JMP 007.004DBAA4 004DB8DD \|> 8BC3 MOV EAX,EBX 004DB8DF \|. BA 64BB4D00 MOV EDX,007.004DBB64 ; UNICODE "19" 004DB8E4 \|. E8 A398F2FF CALL 007.0040518C 004DB8E9 \|. 75 0E JNZ SHORT 007.004DB8F9 004DB8EB \|. B2 13 MOV DL,13 004DB8ED \|. 8BC6 MOV EAX,ESI 004DB8EF \|. E8 30FDFFFF CALL 007.004DB624 004DB8F4 \|. E9 AB010000 JMP 007.004DBAA4 004DB8F9 \|> 8BC3 MOV EAX,EBX 004DB8FB \|. BA 70BB4D00 MOV EDX,007.004DBB70 ; UNICODE "20" 004DB900 \|. E8 8798F2FF CALL 007.0040518C 004DB905 \|. 75 0E JNZ SHORT 007.004DB915 004DB907 \|. B2 14 MOV DL,14 004DB909 \|. 8BC6 MOV EAX,ESI 004DB90B \|. E8 14FDFFFF CALL 007.004DB624 004DB910 \|. E9 8F010000 JMP 007.004DBAA4 004DB915 \|> 8BC3 MOV EAX,EBX 004DB917 \|. BA 7CBB4D00 MOV EDX,007.004DBB7C ; UNICODE "21" 004DB91C \|. E8 6B98F2FF CALL 007.0040518C 004DB921 \|. 75 0E JNZ SHORT 007.004DB931 004DB923 \|. B2 15 MOV DL,15 004DB925 \|. 8BC6 MOV EAX,ESI 004DB927 \|. E8 F8FCFFFF CALL 007.004DB624 004DB92C \|. E9 73010000 JMP 007.004DBAA4 004DB931 \|> 8BC3 MOV EAX,EBX 004DB933 \|. BA 88BB4D00 MOV EDX,007.004DBB88 ; UNICODE "22" 004DB938 \|. E8 4F98F2FF CALL 007.0040518C 004DB93D \|. 75 0E JNZ SHORT 007.004DB94D 004DB93F \|. B2 16 MOV DL,16 004DB941 \|. 8BC6 MOV EAX,ESI 004DB943 \|. E8 DCFCFFFF CALL 007.004DB624 004DB948 \|. E9 57010000 JMP 007.004DBAA4 004DB94D \|> 8BC3 MOV EAX,EBX 004DB94F \|. BA 94BB4D00 MOV EDX,007.004DBB94 ; UNICODE "23" 004DB954 \|. E8 3398F2FF CALL 007.0040518C 004DB959 \|. 75 0E JNZ SHORT 007.004DB969 004DB95B \|. B2 17 MOV DL,17 004DB95D \|. 8BC6 MOV EAX,ESI 004DB95F \|. E8 C0FCFFFF CALL 007.004DB624 004DB964 \|. E9 3B010000 JMP 007.004DBAA4 004DB969 \|> 8BC3 MOV EAX,EBX 004DB96B \|. BA A0BB4D00 MOV EDX,007.004DBBA0 ; UNICODE "24" 004DB970 \|. E8 1798F2FF CALL 007.0040518C 004DB975 \|. 75 0E JNZ SHORT 007.004DB985 004DB977 \|. B2 18 MOV DL,18 004DB979 \|. 8BC6 MOV EAX,ESI 004DB97B \|. E8 A4FCFFFF CALL 007.004DB624 004DB980 \|. E9 1F010000 JMP 007.004DBAA4 004DB985 \|> 8BC3 MOV EAX,EBX 004DB987 \|. BA ACBB4D00 MOV EDX,007.004DBBAC 004DB98C \|. E8 FB97F2FF CALL 007.0040518C 004DB991 \|. 75 0C JNZ SHORT 007.004DB99F 004DB993 \|. 8BC6 MOV EAX,ESI 004DB995 \|. E8 C2020000 CALL 007.004DBC5C 004DB99A \|. E9 05010000 JMP 007.004DBAA4 004DB99F \|> 8BC3 MOV EAX,EBX 004DB9A1 \|. BA BCBB4D00 MOV EDX,007.004DBBBC 004DB9A6 \|. E8 E197F2FF CALL 007.0040518C 004DB9AB \|. 75 0C JNZ SHORT 007.004DB9B9 004DB9AD \|. 8BC6 MOV EAX,ESI 004DB9AF \|. E8 40030000 CALL 007.004DBCF4 004DB9B4 \|. E9 EB000000 JMP 007.004DBAA4 004DB9B9 \|> 8BC3 MOV EAX,EBX 004DB9BB \|. BA CCBB4D00 MOV EDX,007.004DBBCC 004DB9C0 \|. E8 C797F2FF CALL 007.0040518C 004DB9C5 \|. 75 0F JNZ SHORT 007.004DB9D6 004DB9C7 \|. B8 DCBB4D00 MOV EAX,007.004DBBDC 004DB9CC \|. E8 FFB9FEFF CALL 007.004C73D0 004DB9D1 \|. E9 CE000000 JMP 007.004DBAA4 004DB9D6 \|> 8BC3 MOV EAX,EBX 004DB9D8 \|. BA ECBB4D00 MOV EDX,007.004DBBEC 004DB9DD \|. E8 AA97F2FF CALL 007.0040518C 004DB9E2 \|. 75 16 JNZ SHORT 007.004DB9FA 004DB9E4 \|. B8 FCBB4D00 MOV EAX,007.004DBBFC 004DB9E9 \|. E8 E2B9FEFF CALL 007.004C73D0 004DB9EE \|. 8BC6 MOV EAX,ESI 004DB9F0 \|. E8 E3ACF8FF CALL 007.004666D8 004DB9F5 \|. E9 AA000000 JMP 007.004DBAA4 004DB9FA \|> 8BC3 MOV EAX,EBX 004DB9FC \|. BA 0CBC4D00 MOV EDX,007.004DBC0C 004DBA01 \|. E8 8697F2FF CALL 007.0040518C 004DBA06 \|. 75 1D JNZ SHORT 007.004DBA25 004DBA08 \|. E8 7B4D0400 CALL 007.00520788 004DBA0D \|. A1 74775200 MOV EAX,DWORD PTR DS:[527774] 004DBA12 \|. 8B00 MOV EAX,DWORD PTR DS:[EAX] 004DBA14 \|. E8 3B07FFFF CALL 007.004CC154 004DBA19 \|. B8 1CBC4D00 MOV EAX,007.004DBC1C 004DBA1E \|. E8 B54D0400 CALL 007.005207D8 004DBA23 \|. EB 7F JMP SHORT 007.004DBAA4 004DBA25 \|> 8BC3 MOV EAX,EBX 004DBA27 \|. BA 30BC4D00 MOV EDX,007.004DBC30 004DBA2C \|. E8 5B97F2FF CALL 007.0040518C 004DBA31 \|. 75 1D JNZ SHORT 007.004DBA50 004DBA33 \|. E8 504D0400 CALL 007.00520788 004DBA38 \|. A1 9C7C5200 MOV EAX,DWORD PTR DS:[527C9C] 004DBA3D \|. 8B00 MOV EAX,DWORD PTR DS:[EAX] 004DBA3F \|. E8 1007FFFF CALL 007.004CC154 004DBA44 \|. B8 1CBC4D00 MOV EAX,007.004DBC1C 004DBA49 \|. E8 8A4D0400 CALL 007.005207D8 004DBA4E \|. EB 54 JMP SHORT 007.004DBAA4 004DBA50 \|> 8BC3 MOV EAX,EBX 004DBA52 \|. BA 40BC4D00 MOV EDX,007.004DBC40 004DBA57 \|. E8 3097F2FF CALL 007.0040518C 004DBA5C \|. 75 1D JNZ SHORT 007.004DBA7B 004DBA5E \|. E8 254D0400 CALL 007.00520788 004DBA63 \|. A1 F47A5200 MOV EAX,DWORD PTR DS:[527AF4] 004DBA68 \|. 8B00 MOV EAX,DWORD PTR DS:[EAX] 004DBA6A \|. E8 E506FFFF CALL 007.004CC154 004DBA6F \|. B8 1CBC4D00 MOV EAX,007.004DBC1C 004DBA74 \|. E8 5F4D0400 CALL 007.005207D8 004DBA79 \|. EB 29 JMP SHORT 007.004DBAA4 004DBA7B \|> 8BC3 MOV EAX,EBX 004DBA7D \|. BA 50BC4D00 MOV EDX,007.004DBC50 ; ASCII "Kb:gM" 004DBA82 \|. E8 0597F2FF CALL 007.0040518C 004DBA87 \|. 75 1B JNZ SHORT 007.004DBAA4 004DBA89 \|. E8 FA4C0400 CALL 007.00520788 004DBA8E \|. A1 F07B5200 MOV EAX,DWORD PTR DS:[527BF0] 004DBA93 \|. 8B00 MOV EAX,DWORD PTR DS:[EAX] 004DBA95 \|. E8 BA06FFFF CALL 007.004CC154 004DBA9A \|. B8 1CBC4D00 MOV EAX,007.004DBC1C 004DBA9F \|. E8 344D0400 CALL 007.005207D8 004DBAA4 5E POP ESI 004DBAA5 5B POP EBX 004DBAA6 5D POP EBP 004DBAA7 C2 0400 RETN 4 004DBAAA 00 DB 00 004DBAAB 00 DB 00 004DBAAC 02 DB 02 004DBAAD 00 DB 00 004DBAAE 00 DB 00 004DBAAF 00 DB 00 004DBAB0 31 DB 31 ; CHAR '1' 004DBAB1 00 DB 00 004DBAB2 00 DB 00 004DBAB3 00 DB 00 004DBAB4 02 DB 02 004DBAB5 00 DB 00 004DBAB6 00 DB 00 004DBAB7 00 DB 00 004DBAB8 32 DB 32 ; CHAR '2' 004DBAB9 00 DB 00 004DBABA 00 DB 00 004DBABB 00 DB 00 004DBABC 02 DB 02 004DBABD 00 DB 00 004DBABE 00 DB 00 004DBABF 00 DB 00 004DBAC0 33 DB 33 ; CHAR '3' 004DBAC1 00 DB 00 004DBAC2 00 DB 00 004DBAC3 00 DB 00 004DBAC4 02 DB 02 004DBAC5 00 DB 00 004DBAC6 00 DB 00 004DBAC7 00 DB 00 004DBAC8 34 DB 34 ; CHAR '4' 004DBAC9 00 DB 00 004DBACA 00 DB 00 004DBACB 00 DB 00 004DBACC 02 DB 02 004DBACD 00 DB 00 004DBACE 00 DB 00 004DBACF 00 DB 00 004DBAD0 35 DB 35 ; CHAR '5' 004DBAD1 00 DB 00 004DBAD2 00 DB 00 004DBAD3 00 DB 00 004DBAD4 02 DB 02 004DBAD5 00 DB 00 004DBAD6 00 DB 00 004DBAD7 00 DB 00 004DBAD8 36 DB 36 ; CHAR '6' 004DBAD9 00 DB 00 004DBADA 00 DB 00 004DBADB 00 DB 00 004DBADC 02 DB 02 004DBADD 00 DB 00 004DBADE 00 DB 00 004DBADF 00 DB 00 004DBAE0 37 DB 37 ; CHAR '7' 004DBAE1 00 DB 00 004DBAE2 00 DB 00 004DBAE3 00 DB 00 004DBAE4 02 DB 02 004DBAE5 00 DB 00 004DBAE6 00 DB 00 004DBAE7 00 DB 00 004DBAE8 38 DB 38 ; CHAR '8' 004DBAE9 00 DB 00 004DBAEA 00 DB 00 004DBAEB 00 DB 00 004DBAEC 02 DB 02 004DBAED 00 DB 00 004DBAEE 00 DB 00 004DBAEF 00 DB 00 004DBAF0 39 DB 39 ; CHAR '9' 004DBAF1 00 DB 00 004DBAF2 00 DB 00 004DBAF3 00 DB 00 004DBAF4 04 DB 04 004DBAF5 00 DB 00 004DBAF6 00 DB 00 004DBAF7 00 DB 00 004DBAF8 31 DB 31 ; CHAR '1' 004DBAF9 00 DB 00 004DBAFA 30 DB 30 ; CHAR '0' 004DBAFB 00 DB 00 004DBAFC 00 DB 00 004DBAFD 00 DB 00 004DBAFE 00 DB 00 004DBAFF 00 DB 00 004DBB00 04 DB 04 004DBB01 00 DB 00 004DBB02 00 DB 00 004DBB03 00 DB 00 004DBB04 31 DB 31 ; CHAR '1' 004DBB05 00 DB 00 004DBB06 31 DB 31 ; CHAR '1' 004DBB07 00 DB 00 004DBB08 00 DB 00 004DBB09 00 DB 00 004DBB0A 00 DB 00 004DBB0B 00 DB 00 004DBB0C 04 DB 04 004DBB0D 00 DB 00 004DBB0E 00 DB 00 004DBB0F 00 DB 00 004DBB10 31 DB 31 ; CHAR '1' 004DBB11 00 DB 00 004DBB12 32 DB 32 ; CHAR '2' 004DBB13 00 DB 00 004DBB14 00 DB 00 004DBB15 00 DB 00 004DBB16 00 DB 00 004DBB17 00 DB 00 004DBB18 04 DB 04 004DBB19 00 DB 00 004DBB1A 00 DB 00 004DBB1B 00 DB 00 004DBB1C 31 DB 31 ; CHAR '1' 004DBB1D 00 DB 00 004DBB1E 33 DB 33 ; CHAR '3' 004DBB1F 00 DB 00 004DBB20 00 DB 00 004DBB21 00 DB 00 004DBB22 00 DB 00 004DBB23 00 DB 00 004DBB24 04 DB 04 004DBB25 00 DB 00 004DBB26 00 DB 00 004DBB27 00 DB 00 004DBB28 31 DB 31 ; CHAR '1' 004DBB29 00 DB 00 004DBB2A 34 DB 34 ; CHAR '4' 004DBB2B 00 DB 00 004DBB2C 00 DB 00 004DBB2D 00 DB 00 004DBB2E 00 DB 00 004DBB2F 00 DB 00 004DBB30 04 DB 04 004DBB31 00 DB 00 004DBB32 00 DB 00 004DBB33 00 DB 00 004DBB34 31 DB 31 ; CHAR '1' 004DBB35 00 DB 00 004DBB36 35 DB 35 ; CHAR '5' 004DBB37 00 DB 00 004DBB38 00 DB 00 004DBB39 00 DB 00 004DBB3A 00 DB 00 004DBB3B 00 DB 00 004DBB3C 04 DB 04 004DBB3D 00 DB 00 004DBB3E 00 DB 00 004DBB3F 00 DB 00 004DBB40 31 DB 31 ; CHAR '1' 004DBB41 00 DB 00 004DBB42 36 DB 36 ; CHAR '6' 004DBB43 00 DB 00 004DBB44 00 DB 00 004DBB45 00 DB 00 004DBB46 00 DB 00 004DBB47 00 DB 00 004DBB48 04 DB 04 004DBB49 00 DB 00 004DBB4A 00 DB 00 004DBB4B 00 DB 00 004DBB4C 31 DB 31 ; CHAR '1' 004DBB4D 00 DB 00 004DBB4E 37 DB 37 ; CHAR '7' 004DBB4F 00 DB 00 004DBB50 00 DB 00 004DBB51 00 DB 00 004DBB52 00 DB 00 004DBB53 00 DB 00 004DBB54 04 DB 04 004DBB55 00 DB 00 004DBB56 00 DB 00 004DBB57 00 DB 00 004DBB58 31 DB 31 ; CHAR '1' 004DBB59 00 DB 00 004DBB5A 38 DB 38 ; CHAR '8' 004DBB5B 00 DB 00 004DBB5C 00 DB 00 004DBB5D 00 DB 00 004DBB5E 00 DB 00 004DBB5F 00 DB 00 004DBB60 04 DB 04 004DBB61 00 DB 00 004DBB62 00 DB 00 004DBB63 00 DB 00 004DBB64 31 DB 31 ; CHAR '1' 004DBB65 00 DB 00 004DBB66 39 DB 39 ; CHAR '9' 004DBB67 00 DB 00 004DBB68 00 DB 00 004DBB69 00 DB 00 004DBB6A 00 DB 00 004DBB6B 00 DB 00 004DBB6C 04 DB 04 004DBB6D 00 DB 00 004DBB6E 00 DB 00 004DBB6F 00 DB 00 004DBB70 32 DB 32 ; CHAR '2' 004DBB71 00 DB 00 004DBB72 30 DB 30 ; CHAR '0' 004DBB73 00 DB 00 004DBB74 00 DB 00 004DBB75 00 DB 00 004DBB76 00 DB 00 004DBB77 00 DB 00 004DBB78 04 DB 04 004DBB79 00 DB 00 004DBB7A 00 DB 00 004DBB7B 00 DB 00 004DBB7C 32 DB 32 ; CHAR '2' 004DBB7D 00 DB 00 004DBB7E 31 DB 31 ; CHAR '1' 004DBB7F 00 DB 00 004DBB80 00 DB 00 004DBB81 00 DB 00 004DBB82 00 DB 00 004DBB83 00 DB 00 004DBB84 04 DB 04 004DBB85 00 DB 00 004DBB86 00 DB 00 004DBB87 00 DB 00 004DBB88 32 DB 32 ; CHAR '2' 004DBB89 00 DB 00 004DBB8A 32 DB 32 ; CHAR '2' 004DBB8B 00 DB 00 004DBB8C 00 DB 00 004DBB8D 00 DB 00 004DBB8E 00 DB 00 004DBB8F 00 DB 00 004DBB90 04 DB 04 004DBB91 00 DB 00 004DBB92 00 DB 00 004DBB93 00 DB 00 004DBB94 32 DB 32 ; CHAR '2' 004DBB95 00 DB 00 004DBB96 33 DB 33 ; CHAR '3' 004DBB97 00 DB 00 004DBB98 00 DB 00 004DBB99 00 DB 00 004DBB9A 00 DB 00 004DBB9B 00 DB 00 004DBB9C 04 DB 04 004DBB9D 00 DB 00 004DBB9E 00 DB 00 004DBB9F 00 DB 00 004DBBA0 32 DB 32 ; CHAR '2' 004DBBA1 00 DB 00 004DBBA2 34 DB 34 ; CHAR '4' 004DBBA3 00 DB 00 004DBBA4 00 DB 00 004DBBA5 00 DB 00 004DBBA6 00 DB 00 004DBBA7 00 DB 00 004DBBA8 08 DB 08 004DBBA9 00 DB 00 004DBBAA 00 DB 00 004DBBAB 00 DB 00 004DBBAC 0D DB 0D 004DBBAD 59 DB 59 ; CHAR 'Y' 004DBBAE 36 DB 36 ; CHAR '6' 004DBBAF 52 DB 52 ; CHAR 'R' 004DBBB0 F8 DB F8 004DBBB1 76477200 DD 007.00724776 004DBBB5 00 DB 00 004DBBB6 00 DB 00 004DBBB7 00 DB 00 004DBBB8 08 DB 08 004DBBB9 00 DB 00 004DBBBA 00 DB 00 004DBBBB 00 DB 00 004DBBBC . C2 5370 RETN 7053 004DBBBF 65 DB 65 ; CHAR 'e' 004DBBC0 BE DB BE 004DBBC1 8B6E7F00 DD 007.007F6E8B 004DBBC5 00 DB 00 004DBBC6 00 DB 00 004DBBC7 00 DB 00 004DBBC8 04 DB 04 004DBBC9 00 DB 00 004DBBCA 00 DB 00 004DBBCB 00 DB 00 004DBBCC FB DB FB 004DBBCD 7F759800 DD 007.0098757F 004DBBD1 00 DB 00 004DBBD2 00 DB 00 004DBBD3 00 DB 00 004DBBD4 FF DB FF 004DBBD5 FF DB FF 004DBBD6 FF DB FF 004DBBD7 FF DB FF 004DBBD8 0A DB 0A 004DBBD9 00 DB 00 004DBBDA 00 DB 00 004DBBDB 00 DB 00 004DBBDC C9 DB C9 004DBBDD CF DB CF 004DBBDE CF DB CF 004DBBDF C2 DB C2 004DBBE0 D2 DB D2 004DBBE1 B3 DB B3 004DBBE2 . 2E 77 61 76 0>ASCII ".wav",0 004DBBE7 00 DB 00 004DBBE8 04 DB 04 004DBBE9 00 DB 00 004DBBEA 00 DB 00 004DBBEB 00 DB 00 004DBBEC 00 DB 00 004DBBED 90 NOP 004DBBEE FA DB FA 004DBBEF 51 DB 51 ; CHAR 'Q' 004DBBF0 00 DB 00 004DBBF1 00 DB 00 004DBBF2 00 DB 00 004DBBF3 00 DB 00 004DBBF4 FF DB FF 004DBBF5 FF DB FF 004DBBF6 FF DB FF 004DBBF7 FF DB FF 004DBBF8 08 DB 08 004DBBF9 00 DB 00 004DBBFA 00 DB 00 004DBBFB 00 DB 00 004DBBFC B7 DB B7 004DBBFD B5 DB B5 004DBBFE BB DB BB 004DBBFF D8 DB D8 004DBC00 . 2E 77 61 76 0>ASCII ".wav",0 004DBC05 00 DB 00 004DBC06 00 DB 00 004DBC07 00 DB 00 004DBC08 06 DB 06 004DBC09 00 DB 00 004DBC0A 00 DB 00 004DBC0B 00 DB 00 004DBC0C 54 DB 54 ; CHAR 'T' 004DBC0D 9B DB 9B 004DBC0E . 7B 5E 66 4E 0>ASCII "{^fN",0 004DBC13 00 DB 00 004DBC14 FF DB FF 004DBC15 FF DB FF 004DBC16 FF DB FF 004DBC17 FF DB FF 004DBC18 0C DB 0C 004DBC19 00 DB 00 004DBC1A 00 DB 00 004DBC1B 00 DB 00 004DBC1C C5 DB C5 004DBC1D C4 DB C4 004DBC1E D5 DB D5 004DBC1F . D5 BB AAD 0BB 004DBC21 . AD LODS DWORD PTR DS:[ESI] 004DBC22 . C3 RETN 004DBC23 E6 DB E6 004DBC24 . 2E 77 61 76 0>ASCII ".wav",0 004DBC29 00 DB 00 004DBC2A 00 DB 00 004DBC2B 00 DB 00 004DBC2C 08 DB 08 004DBC2D 00 DB 00 004DBC2E 00 DB 00 004DBC2F 00 DB 00 004DBC30 FA DB FA 004DBC31 57 DB 57 ; CHAR 'W' 004DBC32 E0 DB E0 004DBC33 56 DB 56 ; CHAR 'V' 004DBC34 84 DB 84 004DBC35 984B6D00 DD 007.006D4B98 004DBC39 00 DB 00 004DBC3A 00 DB 00 004DBC3B 00 DB 00 004DBC3C 08 DB 08 004DBC3D 00 DB 00 004DBC3E 00 DB 00 004DBC3F 00 DB 00 004DBC40 61 DB 61 ; CHAR 'a' 004DBC41 53 DB 53 ; CHAR 'S' 004DBC42 C9626F00 DD 007.006F62C9 004DBC46 6B DB 6B ; CHAR 'k' 004DBC47 00 DB 00 004DBC48 00 DB 00 004DBC49 00 DB 00 004DBC4A 00 DB 00 004DBC4B 00 DB 00 004DBC4C 0A DB 0A 004DBC4D 00 DB 00 004DBC4E 00 DB 00 004DBC4F 00 DB 00 004DBC50 . 4B 62 3A 67 4>ASCII "Kb:gM",0 004DBC56 50 DB 50 ; CHAR 'P' 004DBC57 00 DB 00 004DBC58 33 DB 33 ; CHAR '3' 004DBC59 00 DB 00 004DBC5A 00 DB 00 004DBC5B 00 DB 00 这是第二个画面的一部分地址.... 004DB6E7 \|. BA B0BA4D00 MOV EDX,007.004DBAB0 ; 1个镜头 004DB6EC E8 9B9AF2FF CALL 007.0040518C 004DB6F1 75 0E JNZ SHORT 007.004DB701 004DB6F3 B2 01 MOV DL,1 004DB6F5 8BC6 MOV EAX,ESI 004DB6F7 E8 28FFFFFF CALL 007.004DB624 004DB6FC E9 A3030000 JMP 007.004DBAA4 004DB701 8BC3 MOV EAX,EBX 这一段是第一个按扭..一按就卡死了..不跳转啊..也不出现什么出错提示~~~望高手解决~~~~~ 2007-12-9 18:00 0
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 11 楼大哥,谢谢你的指导,正是跟进后...代码如下,如何搞? 004BC610 /$ 53 PUSH EBX 004BC611 \|. 56 PUSH ESI 004BC612 \|. 81C4 D0F9FFFF ADD ESP,-630 004BC618 \|. C60424 00 MOV BYTE PTR SS:[ESP],0 004BC61C \|. 68 54C74B00 PUSH 007.004BC754 ; /ResourceType = "dogfile" 004BC621 \|. 68 5CC74B00 PUSH 007.004BC75C ; \|ResourceName = "rsakey" 004BC626 \|. A1 18875200 MOV EAX,DWORD PTR DS:[528718] ; \| 004BC62B \|. 50 PUSH EAX ; \|hModule => NULL 004BC62C \|. E8 A7ABF4FF CALL <JMP.&kernel32.FindResourceA> ; \FindResourceA 004BC631 \|. 8BD8 MOV EBX,EAX 004BC633 \|. 53 PUSH EBX ; /hResource 004BC634 \|. A1 18875200 MOV EAX,DWORD PTR DS:[528718] ; \| 004BC639 \|. 50 PUSH EAX ; \|hModule => NULL 004BC63A \|. E8 C9ADF4FF CALL <JMP.&kernel32.SizeofResource> ; \SizeofResource 004BC63F \|. 8BF0 MOV ESI,EAX 004BC641 \|. 53 PUSH EBX ; /hResource 004BC642 \|. A1 18875200 MOV EAX,DWORD PTR DS:[528718] ; \| 004BC647 \|. 50 PUSH EAX ; \|hModule => NULL 004BC648 \|. E8 2BADF4FF CALL <JMP.&kernel32.LoadResource> ; \LoadResource 004BC64D \|. 8BD8 MOV EBX,EAX 004BC64F \|. 53 PUSH EBX ; /hResource 004BC650 \|. E8 3BADF4FF CALL <JMP.&kernel32.LockResource> ; \LockResource 004BC655 \|. 8D5424 10 LEA EDX,DWORD PTR SS:[ESP+10] 004BC659 \|. 8BCE MOV ECX,ESI 004BC65B \|. 92 XCHG EAX,EDX 004BC65C \|. E8 0FB6F4FF CALL 007.00407C70 004BC661 \|. 53 PUSH EBX ; /hResource 004BC662 \|. E8 89ABF4FF CALL <JMP.&kernel32.FreeResource> ; \FreeResource 004BC667 \|. C74424 0C 000>MOV DWORD PTR SS:[ESP+C],400 004BC66F \|. E8 64ACF4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC674 \|. 8B15 AC7D5200 MOV EDX,DWORD PTR DS:[527DAC] ; 007.00523008 004BC67A \|. 8902 MOV DWORD PTR DS:[EDX],EAX 004BC67C \|. BE 20000000 MOV ESI,20 004BC681 \|. 8D9C24 100100>LEA EBX,DWORD PTR SS:[ESP+110] 004BC688 \|> B8 FF000000 /MOV EAX,0FF 004BC68D \|. E8 126BF4FF \|CALL 007.004031A4 004BC692 \|. 8803 \|MOV BYTE PTR DS:[EBX],AL 004BC694 \|. 43 \|INC EBX 004BC695 \|. 4E \|DEC ESI 004BC696 \|.^ 75 F0 \JNZ SHORT 007.004BC688 004BC698 \|. 8D4424 0C LEA EAX,DWORD PTR SS:[ESP+C] 004BC69C \|. 50 PUSH EAX 004BC69D \|. 6A 20 PUSH 20 004BC69F \|. 8D8424 180100>LEA EAX,DWORD PTR SS:[ESP+118] 004BC6A6 \|. 50 PUSH EAX 004BC6A7 \|. 8D4424 10 LEA EAX,DWORD PTR SS:[ESP+10] 004BC6AB \|. 50 PUSH EAX 004BC6AC \|. 8D8424 400100>LEA EAX,DWORD PTR SS:[ESP+140] 004BC6B3 \|. 50 PUSH EAX 004BC6B4 \|. E8 33FAFFFF CALL <JMP.&crypt.RSAPublicEncrypt> 004BC6B9 \|. 85C0 TEST EAX,EAX 004BC6BB \|. 0F85 87000000 JNZ 007.004BC748 004BC6C1 \|. 8D8424 300500>LEA EAX,DWORD PTR SS:[ESP+530] 004BC6C8 \|. 50 PUSH EAX 004BC6C9 \|. 68 FF000000 PUSH 0FF 004BC6CE \|. 8D4424 10 LEA EAX,DWORD PTR SS:[ESP+10] 004BC6D2 \|. 50 PUSH EAX 004BC6D3 \|. 8D8424 3C0100>LEA EAX,DWORD PTR SS:[ESP+13C] 004BC6DA \|. 8B4C24 10 MOV ECX,DWORD PTR SS:[ESP+10] 004BC6DE \|. BA FF030000 MOV EDX,3FF 004BC6E3 \|. E8 50FAFFFF CALL 007.004BC138 004BC6E8 \|. 84C0 TEST AL,AL 004BC6EA \|. 74 5C JE SHORT 007.004BC748 004BC6EC \|. B9 24615200 MOV ECX,007.00526124 004BC6F1 \|. BA 20000000 MOV EDX,20 004BC6F6 \|. B0 20 MOV AL,20 004BC6F8 \|. E8 C387F4FF CALL 007.00404EC0 004BC6FD \|. B9 28615200 MOV ECX,007.00526128 004BC702 \|. BA 20000000 MOV EDX,20 004BC707 \|. B0 20 MOV AL,20 004BC709 \|. E8 B287F4FF CALL 007.00404EC0 004BC70E \|. B8 24615200 MOV EAX,007.00526124 004BC713 \|. E8 1086F4FF CALL 007.00404D28 004BC718 \|. 8D9424 100100>LEA EDX,DWORD PTR SS:[ESP+110] 004BC71F \|. B9 20000000 MOV ECX,20 004BC724 \|. E8 47B5F4FF CALL 007.00407C70 004BC729 \|. B8 28615200 MOV EAX,007.00526128 004BC72E \|. E8 F585F4FF CALL 007.00404D28 004BC733 \|. 8D9424 100100>LEA EDX,DWORD PTR SS:[ESP+110] 004BC73A \|. B9 20000000 MOV ECX,20 004BC73F \|. E8 2CB5F4FF CALL 007.00407C70 004BC744 \|. C60424 01 MOV BYTE PTR SS:[ESP],1 004BC748 \|> 8A0424 MOV AL,BYTE PTR SS:[ESP] 004BC74B \|. 81C4 30060000 ADD ESP,630 004BC751 \|. 5E POP ESI 004BC752 \|. 5B POP EBX 004BC753 \. C3 RETN 004BC754 . 64 6F 67 66 6>ASCII "dogfile",0 004BC75C . 72 73 61 6B 6>ASCII "rsakey",0 004BC763 00 DB 00 004BC764 $ 55 PUSH EBP 004BC765 . 8BEC MOV EBP,ESP 004BC767 . 83C4 D8 ADD ESP,-28 004BC76A . 53 PUSH EBX 004BC76B . 56 PUSH ESI 004BC76C . 8B5D 18 MOV EBX,DWORD PTR SS:[EBP+18] 004BC76F . 85DB TEST EBX,EBX 004BC771 . 78 0A JS SHORT 007.004BC77D 004BC773 . C1EB 02 SHR EBX,2 004BC776 > 8B3499 MOV ESI,DWORD PTR DS:[ECX+EBX*4] 004BC779 . 4B DEC EBX 004BC77A . 56 PUSH ESI 004BC77B .^ 79 F9 JNS SHORT 007.004BC776 004BC77D > 8BCC MOV ECX,ESP 004BC77F . 894D F4 MOV DWORD PTR SS:[EBP-C],ECX 004BC782 . 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX 004BC785 . 8945 FC MOV DWORD PTR SS:[EBP-4],EAX 004BC788 . C645 F3 00 MOV BYTE PTR SS:[EBP-D],0 004BC78C . E8 47ABF4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC791 . 8BD8 MOV EBX,EAX 004BC793 . 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14] 004BC796 . 50 PUSH EAX 004BC797 . 6A 00 PUSH 0 004BC799 . E8 4AE0FFFF CALL 007.004BA7E8 004BC79E . 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] 004BC7A1 . E8 CEC6F4FF CALL 007.00408E74 004BC7A6 . 8BF0 MOV ESI,EAX 004BC7A8 . 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14] 004BC7AB . 50 PUSH EAX 004BC7AC . 56 PUSH ESI 004BC7AD . E8 36E0FFFF CALL 007.004BA7E8 004BC7B2 . 85C0 TEST EAX,EAX 004BC7B4 . 0F85 01020000 JNZ 007.004BC9BB 004BC7BA . 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] 004BC7BD . B9 5C000000 MOV ECX,5C 004BC7C2 . 33D2 XOR EDX,EDX 004BC7C4 . F7F1 DIV ECX 004BC7C6 . 8945 E8 MOV DWORD PTR SS:[EBP-18],EAX 004BC7C9 . 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18] 004BC7CC . 48 DEC EAX 004BC7CD . 85C0 TEST EAX,EAX 004BC7CF . 0F8C E5000000 JL 007.004BC8BA 004BC7D5 . 40 INC EAX 004BC7D6 . 8945 D8 MOV DWORD PTR SS:[EBP-28],EAX 004BC7D9 . C745 DC 00000>MOV DWORD PTR SS:[EBP-24],0 004BC7E0 > E8 F3AAF4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC7E5 . 33D2 XOR EDX,EDX 004BC7E7 . 52 PUSH EDX 004BC7E8 . 50 PUSH EAX 004BC7E9 . 8D83 E8030000 LEA EAX,DWORD PTR DS:[EBX+3E8] 004BC7EF . 99 CDQ 004BC7F0 . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BC7F4 . 75 09 JNZ SHORT 007.004BC7FF 004BC7F6 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BC7F9 . 5A POP EDX 004BC7FA . 58 POP EAX 004BC7FB . EB 4F JMP SHORT 007.004BC84C 004BC7FD . EB 04 JMP SHORT 007.004BC803 004BC7FF > 5A POP EDX 004BC800 . 58 POP EAX 004BC801 . 7D 49 JGE SHORT 007.004BC84C 004BC803 > 33DB XOR EBX,EBX 004BC805 > 33D2 XOR EDX,EDX 004BC807 > 33C0 XOR EAX,EAX 004BC809 > 40 INC EAX 004BC80A . 3D 00000020 CMP EAX,20000000 004BC80F .^ 75 F8 JNZ SHORT 007.004BC809 004BC811 . 42 INC EDX 004BC812 . 81FA 00000020 CMP EDX,20000000 004BC818 .^ 75 ED JNZ SHORT 007.004BC807 004BC81A . 43 INC EBX 004BC81B . 81FB 00000020 CMP EBX,20000000 004BC821 .^ 75 E2 JNZ SHORT 007.004BC805 004BC823 . 33DB XOR EBX,EBX 004BC825 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BC827 . E8 4423F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BC82C . 43 INC EBX 004BC82D . 81FB 00000020 CMP EBX,20000000 004BC833 .^ 75 F0 JNZ SHORT 007.004BC825 004BC835 . 33DB XOR EBX,EBX 004BC837 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BC839 . E8 3223F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BC83E . 43 INC EBX 004BC83F . 81FB 00000020 CMP EBX,20000000 004BC845 .^ 75 F0 JNZ SHORT 007.004BC837 004BC847 . E8 407EF4FF CALL 007.0040468C 004BC84C > E8 87AAF4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC851 . 8BD8 MOV EBX,EAX 004BC853 . 8A46 50 MOV AL,BYTE PTR DS:[ESI+50] 004BC856 . 3A05 3C515300 CMP AL,BYTE PTR DS:[53513C] 004BC85C . 75 4D JNZ SHORT 007.004BC8AB 004BC85E . 8A46 51 MOV AL,BYTE PTR DS:[ESI+51] 004BC861 . 3A05 3D515300 CMP AL,BYTE PTR DS:[53513D] 004BC867 . 75 42 JNZ SHORT 007.004BC8AB 004BC869 . 8A46 52 MOV AL,BYTE PTR DS:[ESI+52] 004BC86C . 3A05 3E515300 CMP AL,BYTE PTR DS:[53513E] 004BC872 . 75 37 JNZ SHORT 007.004BC8AB 004BC874 . 8A46 53 MOV AL,BYTE PTR DS:[ESI+53] 004BC877 . 3A05 3F515300 CMP AL,BYTE PTR DS:[53513F] 004BC87D . 75 2C JNZ SHORT 007.004BC8AB 004BC87F . 8A46 54 MOV AL,BYTE PTR DS:[ESI+54] 004BC882 . 3A05 40515300 CMP AL,BYTE PTR DS:[535140] 004BC888 . 75 21 JNZ SHORT 007.004BC8AB 004BC88A . 8A46 55 MOV AL,BYTE PTR DS:[ESI+55] 004BC88D . 3A05 41515300 CMP AL,BYTE PTR DS:[535141] 004BC893 . 75 16 JNZ SHORT 007.004BC8AB 004BC895 . 8A46 56 MOV AL,BYTE PTR DS:[ESI+56] 004BC898 . 3A05 42515300 CMP AL,BYTE PTR DS:[535142] 004BC89E . 75 0B JNZ SHORT 007.004BC8AB 004BC8A0 . 8A46 57 MOV AL,BYTE PTR DS:[ESI+57] 004BC8A3 . 3A05 43515300 CMP AL,BYTE PTR DS:[535143] 004BC8A9 . 74 0F JE SHORT 007.004BC8BA 004BC8AB > 83C6 5C ADD ESI,5C 004BC8AE . FF45 DC INC DWORD PTR SS:[EBP-24] 004BC8B1 . FF4D D8 DEC DWORD PTR SS:[EBP-28] 004BC8B4 .^ 0F85 26FFFFFF JNZ 007.004BC7E0 004BC8BA > 8B45 DC MOV EAX,DWORD PTR SS:[EBP-24] 004BC8BD . 99 CDQ 004BC8BE . 52 PUSH EDX 004BC8BF . 50 PUSH EAX 004BC8C0 . 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18] 004BC8C3 . 33D2 XOR EDX,EDX 004BC8C5 . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BC8C9 . 75 0C JNZ SHORT 007.004BC8D7 004BC8CB . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BC8CE . 5A POP EDX 004BC8CF . 58 POP EAX 004BC8D0 . 77 0D JA SHORT 007.004BC8DF 004BC8D2 . E9 73010000 JMP 007.004BCA4A 004BC8D7 > 5A POP EDX 004BC8D8 . 58 POP EAX 004BC8D9 . 0F8E 6B010000 JLE 007.004BCA4A 004BC8DF > E8 F4A9F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC8E4 . 33D2 XOR EDX,EDX 004BC8E6 . 52 PUSH EDX 004BC8E7 . 50 PUSH EAX 004BC8E8 . 8D83 E8030000 LEA EAX,DWORD PTR DS:[EBX+3E8] 004BC8EE . 99 CDQ 004BC8EF . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BC8F3 . 75 09 JNZ SHORT 007.004BC8FE 004BC8F5 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BC8F8 . 5A POP EDX 004BC8F9 . 58 POP EAX 004BC8FA . EB 4F JMP SHORT 007.004BC94B 004BC8FC . EB 04 JMP SHORT 007.004BC902 004BC8FE > 5A POP EDX 004BC8FF . 58 POP EAX 004BC900 . 7D 49 JGE SHORT 007.004BC94B 004BC902 > 33DB XOR EBX,EBX 004BC904 > 33D2 XOR EDX,EDX 004BC906 > 33C0 XOR EAX,EAX 004BC908 > 40 INC EAX 004BC909 . 3D 00000020 CMP EAX,20000000 004BC90E .^ 75 F8 JNZ SHORT 007.004BC908 004BC910 . 42 INC EDX 004BC911 . 81FA 00000020 CMP EDX,20000000 004BC917 .^ 75 ED JNZ SHORT 007.004BC906 004BC919 . 43 INC EBX 004BC91A . 81FB 00000020 CMP EBX,20000000 004BC920 .^ 75 E2 JNZ SHORT 007.004BC904 004BC922 . 33DB XOR EBX,EBX 004BC924 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BC926 . E8 4522F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BC92B . 43 INC EBX 004BC92C . 81FB 00000020 CMP EBX,20000000 004BC932 .^ 75 F0 JNZ SHORT 007.004BC924 004BC934 . 33DB XOR EBX,EBX 004BC936 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BC938 . E8 3322F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BC93D . 43 INC EBX 004BC93E . 81FB 00000020 CMP EBX,20000000 004BC944 .^ 75 F0 JNZ SHORT 007.004BC936 004BC946 . E8 417DF4FF CALL 007.0040468C 004BC94B > E8 88A9F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC950 . 8BD8 MOV EBX,EAX 004BC952 . C745 E0 08000>MOV DWORD PTR SS:[EBP-20],8 004BC959 . C745 E4 01000>MOV DWORD PTR SS:[EBP-1C],1 004BC960 . 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20] 004BC963 . 50 PUSH EAX 004BC964 . 56 PUSH ESI 004BC965 . E8 46F3FFFF CALL 007.004BBCB0 004BC96A . 85C0 TEST EAX,EAX 004BC96C . 75 4D JNZ SHORT 007.004BC9BB 004BC96E . 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4] 004BC971 . 50 PUSH EAX 004BC972 . 56 PUSH ESI 004BC973 . E8 48E7FFFF CALL 007.004BB0C0 004BC978 . 85C0 TEST EAX,EAX 004BC97A . 75 3F JNZ SHORT 007.004BC9BB 004BC97C . 68 A1000000 PUSH 0A1 004BC981 . 6A 08 PUSH 8 004BC983 . 68 5CCA4B00 PUSH 007.004BCA5C ; ASCII "29323468" 004BC988 . 56 PUSH ESI 004BC989 . E8 1EE9FFFF CALL 007.004BB2AC 004BC98E . 85C0 TEST EAX,EAX 004BC990 . 75 29 JNZ SHORT 007.004BC9BB 004BC992 . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 004BC995 . 50 PUSH EAX 004BC996 . 68 80000000 PUSH 80 004BC99B . 8B45 10 MOV EAX,DWORD PTR SS:[EBP+10] 004BC99E . 50 PUSH EAX 004BC99F . 8B45 14 MOV EAX,DWORD PTR SS:[EBP+14] 004BC9A2 . 50 PUSH EAX 004BC9A3 . 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] 004BC9A6 . 50 PUSH EAX 004BC9A7 . 6A 00 PUSH 0 004BC9A9 . 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8] 004BC9AC . 50 PUSH EAX 004BC9AD . 56 PUSH ESI 004BC9AE . E8 7DF3FFFF CALL 007.004BBD30 004BC9B3 . 85C0 TEST EAX,EAX 004BC9B5 . 75 04 JNZ SHORT 007.004BC9BB 004BC9B7 . C645 F3 01 MOV BYTE PTR SS:[EBP-D],1 004BC9BB > E8 18A9F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC9C0 . 33D2 XOR EDX,EDX 004BC9C2 . 52 PUSH EDX 004BC9C3 . 50 PUSH EAX 004BC9C4 . 8D83 B80B0000 LEA EAX,DWORD PTR DS:[EBX+BB8] 004BC9CA . 99 CDQ 004BC9CB . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BC9CF . 75 09 JNZ SHORT 007.004BC9DA 004BC9D1 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BC9D4 . 5A POP EDX 004BC9D5 . 58 POP EAX 004BC9D6 . EB 61 JMP SHORT 007.004BCA39 004BC9D8 . EB 04 JMP SHORT 007.004BC9DE 004BC9DA > 5A POP EDX 004BC9DB . 58 POP EAX 004BC9DC . 7D 5B JGE SHORT 007.004BCA39 004BC9DE > 33C0 XOR EAX,EAX 004BC9E0 . 8945 DC MOV DWORD PTR SS:[EBP-24],EAX 004BC9E3 > 33D2 XOR EDX,EDX 004BC9E5 > 33C0 XOR EAX,EAX 004BC9E7 > 40 INC EAX 004BC9E8 . 3D 00000020 CMP EAX,20000000 004BC9ED .^ 75 F8 JNZ SHORT 007.004BC9E7 004BC9EF . 42 INC EDX 004BC9F0 . 81FA 00000020 CMP EDX,20000000 004BC9F6 .^ 75 ED JNZ SHORT 007.004BC9E5 004BC9F8 . FF45 DC INC DWORD PTR SS:[EBP-24] 004BC9FB . 817D DC 00000>CMP DWORD PTR SS:[EBP-24],20000000 004BCA02 .^ 75 DF JNZ SHORT 007.004BC9E3 004BCA04 . 33C0 XOR EAX,EAX 004BCA06 . 8945 DC MOV DWORD PTR SS:[EBP-24],EAX 004BCA09 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCA0B . E8 6021F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCA10 . FF45 DC INC DWORD PTR SS:[EBP-24] 004BCA13 . 817D DC 00000>CMP DWORD PTR SS:[EBP-24],20000000 004BCA1A .^ 75 ED JNZ SHORT 007.004BCA09 004BCA1C . 33C0 XOR EAX,EAX 004BCA1E . 8945 DC MOV DWORD PTR SS:[EBP-24],EAX 004BCA21 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCA23 . E8 4821F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCA28 . FF45 DC INC DWORD PTR SS:[EBP-24] 004BCA2B . 817D DC 00000>CMP DWORD PTR SS:[EBP-24],20000000 004BCA32 .^ 75 ED JNZ SHORT 007.004BCA21 004BCA34 . E8 537CF4FF CALL 007.0040468C 004BCA39 > 85F6 TEST ESI,ESI 004BCA3B . 74 0D JE SHORT 007.004BCA4A 004BCA3D . 56 PUSH ESI 004BCA3E . E8 C1DEFFFF CALL 007.004BA904 004BCA43 . 8BC6 MOV EAX,ESI 004BCA45 . E8 E65DF4FF CALL 007.00402830 004BCA4A > 8A45 F3 MOV AL,BYTE PTR SS:[EBP-D] 004BCA4D . 8B75 D0 MOV ESI,DWORD PTR SS:[EBP-30] 004BCA50 . 8B5D D4 MOV EBX,DWORD PTR SS:[EBP-2C] 004BCA53 . 8BE5 MOV ESP,EBP 004BCA55 . 5D POP EBP 004BCA56 . C2 1400 RETN 14 004BCA59 00 DB 00 004BCA5A 00 DB 00 004BCA5B 00 DB 00 004BCA5C . 32 39 33 32 3>ASCII "29323468",0 004BCA65 00 DB 00 004BCA66 00 DB 00 004BCA67 00 DB 00 004BCA68 $ 55 PUSH EBP 004BCA69 . 8BEC MOV EBP,ESP 004BCA6B . 81C4 D4FEFFFF ADD ESP,-12C 004BCA71 . 53 PUSH EBX 004BCA72 . 56 PUSH ESI 004BCA73 . 894D F4 MOV DWORD PTR SS:[EBP-C],ECX 004BCA76 . 8855 FB MOV BYTE PTR SS:[EBP-5],DL 004BCA79 . 8945 FC MOV DWORD PTR SS:[EBP-4],EAX 004BCA7C . C645 F3 00 MOV BYTE PTR SS:[EBP-D],0 004BCA80 . E8 53A8F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCA85 . 8BD8 MOV EBX,EAX 004BCA87 . 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14] 004BCA8A . 50 PUSH EAX 004BCA8B . 6A 00 PUSH 0 004BCA8D . E8 56DDFFFF CALL 007.004BA7E8 004BCA92 . 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] 004BCA95 . E8 DAC3F4FF CALL 007.00408E74 004BCA9A . 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX 004BCA9D . 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14] 004BCAA0 . 50 PUSH EAX 004BCAA1 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCAA4 . 50 PUSH EAX 004BCAA5 . E8 3EDDFFFF CALL 007.004BA7E8 004BCAAA . 85C0 TEST EAX,EAX 004BCAAC . 0F85 00030000 JNZ 007.004BCDB2 004BCAB2 . 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] 004BCAB5 . B9 5C000000 MOV ECX,5C 004BCABA . 33D2 XOR EDX,EDX 004BCABC . F7F1 DIV ECX 004BCABE . 8945 E8 MOV DWORD PTR SS:[EBP-18],EAX 004BCAC1 . 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18] 004BCAC4 . 48 DEC EAX 004BCAC5 . 85C0 TEST EAX,EAX 004BCAC7 . 0F8C F7000000 JL 007.004BCBC4 004BCACD . 40 INC EAX 004BCACE . 8945 D4 MOV DWORD PTR SS:[EBP-2C],EAX 004BCAD1 . 33F6 XOR ESI,ESI 004BCAD3 > E8 00A8F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCAD8 . 33D2 XOR EDX,EDX 004BCADA . 52 PUSH EDX 004BCADB . 50 PUSH EAX 004BCADC . 8D83 E8030000 LEA EAX,DWORD PTR DS:[EBX+3E8] 004BCAE2 . 99 CDQ 004BCAE3 . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BCAE7 . 75 09 JNZ SHORT 007.004BCAF2 004BCAE9 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BCAEC . 5A POP EDX 004BCAED . 58 POP EAX 004BCAEE . 73 4F JNB SHORT 007.004BCB3F 004BCAF0 . EB 04 JMP SHORT 007.004BCAF6 004BCAF2 > 5A POP EDX 004BCAF3 . 58 POP EAX 004BCAF4 . 7D 49 JGE SHORT 007.004BCB3F 004BCAF6 > 33DB XOR EBX,EBX 004BCAF8 > 33D2 XOR EDX,EDX 004BCAFA > 33C0 XOR EAX,EAX 004BCAFC > 40 INC EAX 004BCAFD . 3D 00000020 CMP EAX,20000000 004BCB02 .^ 75 F8 JNZ SHORT 007.004BCAFC 004BCB04 . 42 INC EDX 004BCB05 . 81FA 00000020 CMP EDX,20000000 004BCB0B .^ 75 ED JNZ SHORT 007.004BCAFA 004BCB0D . 43 INC EBX 004BCB0E . 81FB 00000020 CMP EBX,20000000 004BCB14 .^ 75 E2 JNZ SHORT 007.004BCAF8 004BCB16 . 33DB XOR EBX,EBX 004BCB18 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCB1A . E8 5120F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCB1F . 43 INC EBX 004BCB20 . 81FB 00000020 CMP EBX,20000000 004BCB26 .^ 75 F0 JNZ SHORT 007.004BCB18 004BCB28 . 33DB XOR EBX,EBX 004BCB2A > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCB2C . E8 3F20F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCB31 . 43 INC EBX 004BCB32 . 81FB 00000020 CMP EBX,20000000 004BCB38 .^ 75 F0 JNZ SHORT 007.004BCB2A 004BCB3A . E8 4D7BF4FF CALL 007.0040468C 004BCB3F > E8 94A7F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCB44 . 8BD8 MOV EBX,EAX 004BCB46 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB49 . 8A40 50 MOV AL,BYTE PTR DS:[EAX+50] 004BCB4C . 3A05 3C515300 CMP AL,BYTE PTR DS:[53513C] 004BCB52 . 75 62 JNZ SHORT 007.004BCBB6 004BCB54 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB57 . 8A40 51 MOV AL,BYTE PTR DS:[EAX+51] 004BCB5A . 3A05 3D515300 CMP AL,BYTE PTR DS:[53513D] 004BCB60 . 75 54 JNZ SHORT 007.004BCBB6 004BCB62 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB65 . 8A40 52 MOV AL,BYTE PTR DS:[EAX+52] 004BCB68 . 3A05 3E515300 CMP AL,BYTE PTR DS:[53513E] 004BCB6E . 75 46 JNZ SHORT 007.004BCBB6 004BCB70 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB73 . 8A40 53 MOV AL,BYTE PTR DS:[EAX+53] 004BCB76 . 3A05 3F515300 CMP AL,BYTE PTR DS:[53513F] 004BCB7C . 75 38 JNZ SHORT 007.004BCBB6 004BCB7E . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB81 . 8A40 54 MOV AL,BYTE PTR DS:[EAX+54] 004BCB84 . 3A05 40515300 CMP AL,BYTE PTR DS:[535140] 004BCB8A . 75 2A JNZ SHORT 007.004BCBB6 004BCB8C . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB8F . 8A40 55 MOV AL,BYTE PTR DS:[EAX+55] 004BCB92 . 3A05 41515300 CMP AL,BYTE PTR DS:[535141] 004BCB98 . 75 1C JNZ SHORT 007.004BCBB6 004BCB9A . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB9D . 8A40 56 MOV AL,BYTE PTR DS:[EAX+56] 004BCBA0 . 3A05 42515300 CMP AL,BYTE PTR DS:[535142] 004BCBA6 . 75 0E JNZ SHORT 007.004BCBB6 004BCBA8 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCBAB . 8A40 57 MOV AL,BYTE PTR DS:[EAX+57] 004BCBAE . 3A05 43515300 CMP AL,BYTE PTR DS:[535143] 004BCBB4 . 74 0E JE SHORT 007.004BCBC4 004BCBB6 > 8345 E4 5C ADD DWORD PTR SS:[EBP-1C],5C 004BCBBA . 46 INC ESI 004BCBBB . FF4D D4 DEC DWORD PTR SS:[EBP-2C] 004BCBBE .^ 0F85 0FFFFFFF JNZ 007.004BCAD3 004BCBC4 > 8BC6 MOV EAX,ESI 004BCBC6 . 99 CDQ 004BCBC7 . 52 PUSH EDX 004BCBC8 . 50 PUSH EAX 004BCBC9 . 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18] 004BCBCC . 33D2 XOR EDX,EDX 004BCBCE . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BCBD2 . 75 0C JNZ SHORT 007.004BCBE0 004BCBD4 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BCBD7 . 5A POP EDX 004BCBD8 . 58 POP EAX 004BCBD9 . 77 0D JA SHORT 007.004BCBE8 004BCBDB . E9 55020000 JMP 007.004BCE35 004BCBE0 > 5A POP EDX 004BCBE1 . 58 POP EAX 004BCBE2 . 0F8E 4D020000 JLE 007.004BCE35 004BCBE8 > E8 EBA6F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCBED . 33D2 XOR EDX,EDX 004BCBEF . 52 PUSH EDX 004BCBF0 . 50 PUSH EAX 004BCBF1 . 8D83 E8030000 LEA EAX,DWORD PTR DS:[EBX+3E8] 004BCBF7 . 99 CDQ 004BCBF8 . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BCBFC . 75 09 JNZ SHORT 007.004BCC07 004BCBFE . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BCC01 . 5A POP EDX 004BCC02 . 58 POP EAX 004BCC03 . 73 4F JNB SHORT 007.004BCC54 004BCC05 . EB 04 JMP SHORT 007.004BCC0B 004BCC07 > 5A POP EDX 004BCC08 . 58 POP EAX 004BCC09 . 7D 49 JGE SHORT 007.004BCC54 004BCC0B > 33DB XOR EBX,EBX 004BCC0D > 33D2 XOR EDX,EDX 004BCC0F > 33C0 XOR EAX,EAX 004BCC11 > 40 INC EAX 004BCC12 . 3D 00000020 CMP EAX,20000000 004BCC17 .^ 75 F8 JNZ SHORT 007.004BCC11 004BCC19 . 42 INC EDX 004BCC1A . 81FA 00000020 CMP EDX,20000000 004BCC20 .^ 75 ED JNZ SHORT 007.004BCC0F 004BCC22 . 43 INC EBX 004BCC23 . 81FB 00000020 CMP EBX,20000000 004BCC29 .^ 75 E2 JNZ SHORT 007.004BCC0D 004BCC2B . 33DB XOR EBX,EBX 004BCC2D > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCC2F . E8 3C1FF5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCC34 . 43 INC EBX 004BCC35 . 81FB 00000020 CMP EBX,20000000 004BCC3B .^ 75 F0 JNZ SHORT 007.004BCC2D 004BCC3D . 33DB XOR EBX,EBX 004BCC3F > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCC41 . E8 2A1FF5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCC46 . 43 INC EBX 004BCC47 . 81FB 00000020 CMP EBX,20000000 004BCC4D .^ 75 F0 JNZ SHORT 007.004BCC3F 004BCC4F . E8 387AF4FF CALL 007.0040468C 004BCC54 > E8 7FA6F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCC59 . 8BD8 MOV EBX,EAX 004BCC5B . C745 DC 08000>MOV DWORD PTR SS:[EBP-24],8 004BCC62 . C745 E0 01000>MOV DWORD PTR SS:[EBP-20],1 004BCC69 . 8D45 DC LEA EAX,DWORD PTR SS:[EBP-24] 004BCC6C . 50 PUSH EAX 004BCC6D . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCC70 . 50 PUSH EAX 004BCC71 . E8 3AF0FFFF CALL 007.004BBCB0 004BCC76 . 85C0 TEST EAX,EAX 004BCC78 . 0F85 34010000 JNZ 007.004BCDB2 004BCC7E . A1 18515300 MOV EAX,DWORD PTR DS:[535118] 004BCC83 . 50 PUSH EAX 004BCC84 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCC87 . 50 PUSH EAX 004BCC88 . E8 33E4FFFF CALL 007.004BB0C0 004BCC8D . 85C0 TEST EAX,EAX 004BCC8F . 0F85 1D010000 JNZ 007.004BCDB2 004BCC95 . 68 A1000000 PUSH 0A1 004BCC9A . 6A 08 PUSH 8 004BCC9C . 68 40CE4B00 PUSH 007.004BCE40 ; ASCII "29323468" 004BCCA1 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCCA4 . 50 PUSH EAX 004BCCA5 . E8 02E6FFFF CALL 007.004BB2AC 004BCCAA . 85C0 TEST EAX,EAX 004BCCAC . 0F85 00010000 JNZ 007.004BCDB2 004BCCB2 . C685 54FFFFFF>MOV BYTE PTR SS:[EBP-AC],0 004BCCB9 . C685 55FFFFFF>MOV BYTE PTR SS:[EBP-AB],0 004BCCC0 . 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28] 004BCCC3 . 50 PUSH EAX 004BCCC4 . 68 80000000 PUSH 80 004BCCC9 . 8D85 D4FEFFFF LEA EAX,DWORD PTR SS:[EBP-12C] 004BCCCF . 50 PUSH EAX 004BCCD0 . 6A 02 PUSH 2 004BCCD2 . 8D85 54FFFFFF LEA EAX,DWORD PTR SS:[EBP-AC] 004BCCD8 . 50 PUSH EAX 004BCCD9 . 6A 00 PUSH 0 004BCCDB . A1 1C515300 MOV EAX,DWORD PTR DS:[53511C] 004BCCE0 . 50 PUSH EAX 004BCCE1 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCCE4 . 50 PUSH EAX 004BCCE5 . E8 46F0FFFF CALL 007.004BBD30 004BCCEA . 85C0 TEST EAX,EAX 004BCCEC . 0F85 C0000000 JNZ 007.004BCDB2 004BCCF2 . C685 54FFFFFF>MOV BYTE PTR SS:[EBP-AC],1 004BCCF9 . 8A45 FB MOV AL,BYTE PTR SS:[EBP-5] 004BCCFC . 8885 55FFFFFF MOV BYTE PTR SS:[EBP-AB],AL 004BCD02 . 33C9 XOR ECX,ECX 004BCD04 . 8A4D FB MOV CL,BYTE PTR SS:[EBP-5] 004BCD07 . 8D85 56FFFFFF LEA EAX,DWORD PTR SS:[EBP-AA] 004BCD0D . 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4] 004BCD10 . E8 5BAFF4FF CALL 007.00407C70 004BCD15 . 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28] 004BCD18 . 50 PUSH EAX 004BCD19 . 68 80000000 PUSH 80 004BCD1E . 8D85 D4FEFFFF LEA EAX,DWORD PTR SS:[EBP-12C] 004BCD24 . 50 PUSH EAX 004BCD25 . 33C0 XOR EAX,EAX 004BCD27 . 8A45 FB MOV AL,BYTE PTR SS:[EBP-5] 004BCD2A . 83C0 02 ADD EAX,2 004BCD2D . 50 PUSH EAX 004BCD2E . 8D85 54FFFFFF LEA EAX,DWORD PTR SS:[EBP-AC] 004BCD34 . 50 PUSH EAX 004BCD35 . 6A 00 PUSH 0 004BCD37 . A1 1C515300 MOV EAX,DWORD PTR DS:[53511C] 004BCD3C . 50 PUSH EAX 004BCD3D . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCD40 . 50 PUSH EAX 004BCD41 . E8 EAEFFFFF CALL 007.004BBD30 004BCD46 . 85C0 TEST EAX,EAX 004BCD48 . 75 68 JNZ SHORT 007.004BCDB2 004BCD4A . C685 54FFFFFF>MOV BYTE PTR SS:[EBP-AC],2 004BCD51 . C685 55FFFFFF>MOV BYTE PTR SS:[EBP-AB],0 004BCD58 . 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28] 004BCD5B . 50 PUSH EAX 004BCD5C . 68 80000000 PUSH 80 004BCD61 . 8D85 D4FEFFFF LEA EAX,DWORD PTR SS:[EBP-12C] 004BCD67 . 50 PUSH EAX 004BCD68 . 6A 02 PUSH 2 004BCD6A . 8D85 54FFFFFF LEA EAX,DWORD PTR SS:[EBP-AC] 004BCD70 . 50 PUSH EAX 004BCD71 . 6A 00 PUSH 0 004BCD73 . A1 1C515300 MOV EAX,DWORD PTR DS:[53511C] 004BCD78 . 50 PUSH EAX 004BCD79 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCD7C . 50 PUSH EAX 004BCD7D . E8 AEEFFFFF CALL 007.004BBD30 004BCD82 . 85C0 TEST EAX,EAX 004BCD84 . 75 2C JNZ SHORT 007.004BCDB2 004BCD86 . 80BD D4FEFFFF>CMP BYTE PTR SS:[EBP-12C],0 004BCD8D . 75 23 JNZ SHORT 007.004BCDB2 004BCD8F . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 004BCD92 . 8A95 D5FEFFFF MOV DL,BYTE PTR SS:[EBP-12B] 004BCD98 . 8810 MOV BYTE PTR DS:[EAX],DL 004BCD9A . 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] 004BCD9D . 0FB609 MOVZX ECX,BYTE PTR DS:[ECX] 004BCDA0 . 8D95 D6FEFFFF LEA EDX,DWORD PTR SS:[EBP-12A] 004BCDA6 . 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] 004BCDA9 . E8 C2AEF4FF CALL 007.00407C70 004BCDAE . C645 F3 01 MOV BYTE PTR SS:[EBP-D],1 004BCDB2 > E8 21A5F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCDB7 . 33D2 XOR EDX,EDX 004BCDB9 . 52 PUSH EDX 004BCDBA . 50 PUSH EAX 004BCDBB . 8D83 983A0000 LEA EAX,DWORD PTR DS:[EBX+3A98] 004BCDC1 . 99 CDQ 004BCDC2 . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BCDC6 . 75 09 JNZ SHORT 007.004BCDD1 004BCDC8 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BCDCB . 5A POP EDX 004BCDCC . 58 POP EAX 004BCDCD . EB 4F JMP SHORT 007.004BCE1E 004BCDCF . EB 04 JMP SHORT 007.004BCDD5 004BCDD1 > 5A POP EDX 004BCDD2 . 58 POP EAX 004BCDD3 . 7D 49 JGE SHORT 007.004BCE1E 004BCDD5 > 33F6 XOR ESI,ESI 004BCDD7 > 33D2 XOR EDX,EDX 004BCDD9 > 33C0 XOR EAX,EAX 004BCDDB > 40 INC EAX 004BCDDC . 3D 00000020 CMP EAX,20000000 004BCDE1 .^ 75 F8 JNZ SHORT 007.004BCDDB 004BCDE3 . 42 INC EDX 004BCDE4 . 81FA 00000020 CMP EDX,20000000 ............................. 2007-12-9 18:05 0
htsf110 雪币： 218 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 3 回帖 78 粉丝 0 关注私信	htsf110 12 楼 themida 1.0.0.5你都没脱壳.软件还加了反调试 2007-12-9 21:41 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

晨露流星

发帖

回帖

RANK

关注

私信

他的文章

关于我们

联系我们

企业服务

看雪公众号

最新回复 (11)
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 2 楼倒,没人帮我啊~~~~~ 2007-12-8 09:55 0
rxzcums 雪币： 427 活跃值： (65) 能力值： ( LV6，RANK：90 ) 在线值：发帖 13 回帖 1174 粉丝 0 关注私信	rxzcums 2 3 楼我觉得应该这样改： 004C9243 75 41 jnz short 004C9286 改 004C9243 eb 41 jmp short 004C9286 2007-12-8 14:52 0
xingbing 雪币： 155 活跃值： (3356) 能力值： ( LV2，RANK：10 ) 在线值：发帖 2 回帖 1168 粉丝 2 关注私信	xingbing 4 楼只改这个跳转估计还有问题。 004C923C E8 5F01FFFF call 004B93A0这个是关键的call仔细跟一下，最好从这里入手。 2007-12-9 10:41 0
htsf110 雪币： 218 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 3 回帖 78 粉丝 0 关注私信	htsf110 5 楼把软件放出来 2007-12-9 14:43 0
htsf110 雪币： 218 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 3 回帖 78 粉丝 0 关注私信	htsf110 6 楼找到判断狗是否存在的地方,然后改成狗是存在的,然后改狗的DLL这样,你试试这样 2007-12-9 14:49 0
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 7 楼软件我入在c4cK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3c8E0M7r3W2F1k6K6l9H3z5q4)9J5k6i4W2K6x3e0j5^5i4K6u0W2j5$3!0E0i4@1f1&6i4K6R3%4i4K6S2o6i4@1f1@1i4@1u0m8i4K6R3$3i4K6N6q4i4K6N6q4i4K6N6q4i4@1f1&6i4K6R3J5i4@1p5K6i4@1f1@1i4@1u0p5i4K6S2p5i4@1f1#2i4@1p5@1i4@1p5%4i4@1f1@1i4@1u0q4i4@1p5H3i4@1f1#2i4@1t1^5i4@1q4q4i4@1f1$3i4K6R3^5i4K6V1I4i4@1f1%4i4K6W2o6i4K6S2n7i4@1f1%4i4K6W2o6i4K6S2n7i4K6N6q4i4K6N6q4i4K6N6q4i4@1f1$3i4K6V1H3i4K6W2q4i4@1f1@1i4@1u0m8i4K6R3$3i4@1f1#2i4@1p5#2i4@1u0p5i4@1f1@1i4@1t1&6i4K6R3#2i4@1f1$3i4K6V1H3i4K6W2q4i4@1f1@1i4@1t1^5i4K6S2p5i4@1f1#2i4@1q4q4i4K6W2m8i4@1f1#2i4K6V1#2i4K6S2m8i4K6u0W2i4K6u0W2i4@1f1^5i4@1u0r3i4K6V1&6i4@1f1$3i4K6V1^5i4@1q4r3i4@1f1$3i4K6R3^5i4K6V1I4i4@1f1^5i4K6R3@1i4@1t1I4i4@1f1@1i4@1u0m8i4K6R3$3i4@1f1#2i4@1p5K6i4@1t1K6i4@1f1%4i4K6W2m8i4K6R3@1i4K6u0W2i4K6u0W2 2007-12-9 17:48 0
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 8 楼这怎么做???? 2007-12-9 17:49 0
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 9 楼大哥你说的对,是可以跳过狗的对话框,但是进入第二画面又卡死了.. 2007-12-9 17:56 0
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 10 楼 004DB677 D5 BB AAD 0BB 004DB679 AD LODS DWORD PTR DS:[ESI] 004DB67A C3 RETN 004DB67B E6 2E OUT 2E,AL ; I/O 命令 004DB67D 77 61 JA SHORT 007.004DB6E0 004DB67F 76 00 JBE SHORT 007.004DB681 004DB681 0000 ADD BYTE PTR DS:[EAX],AL 004DB683 0055 8B ADD BYTE PTR SS:[EBP-75],DL 004DB686 EC IN AL,DX ; I/O 命令 004DB687 53 PUSH EBX 004DB688 8BD8 MOV EBX,EAX 004DB68A 66:8B01 MOV AX,WORD PTR DS:[ECX] 004DB68D 83C0 9F ADD EAX,-61 004DB690 66:83E8 09 SUB AX,9 004DB694 72 0F JB SHORT 007.004DB6A5 004DB696 74 25 JE SHORT 007.004DB6BD 004DB698 66:83E8 04 SUB AX,4 004DB69C 74 16 JE SHORT 007.004DB6B4 004DB69E 66:FFC8 DEC AX 004DB6A1 74 2C JE SHORT 007.004DB6CF 004DB6A3 EB 31 JMP SHORT 007.004DB6D6 004DB6A5 66:8B11 MOV DX,WORD PTR DS:[ECX] 004DB6A8 80EA 60 SUB DL,60 004DB6AB 8BC3 MOV EAX,EBX 004DB6AD E8 72FFFFFF CALL 007.004DB624 004DB6B2 EB 22 JMP SHORT 007.004DB6D6 004DB6B4 8BC3 MOV EAX,EBX 004DB6B6 E8 A1050000 CALL 007.004DBC5C 004DB6BB EB 19 JMP SHORT 007.004DB6D6 004DB6BD E8 CEBCFEFF CALL 007.004C7390 004DB6C2 84C0 TEST AL,AL 004DB6C4 74 10 JE SHORT 007.004DB6D6 004DB6C6 8BC3 MOV EAX,EBX 004DB6C8 E8 0BB0F8FF CALL 007.004666D8 004DB6CD EB 07 JMP SHORT 007.004DB6D6 004DB6CF 8BC3 MOV EAX,EBX 004DB6D1 E8 1E060000 CALL 007.004DBCF4 004DB6D6 5B POP EBX 004DB6D7 5D POP EBP 004DB6D8 C2 0400 RETN 4 004DB6DB 90 NOP 004DB6DC /. 55 PUSH EBP 004DB6DD \|. 8BEC MOV EBP,ESP 004DB6DF \|. 53 PUSH EBX 004DB6E0 \|. 56 PUSH ESI 004DB6E1 \|. 8BD9 MOV EBX,ECX 004DB6E3 \|. 8BF0 MOV ESI,EAX 004DB6E5 \|. 8BC3 MOV EAX,EBX 004DB6E7 \|. BA B0BA4D00 MOV EDX,007.004DBAB0 ; 1个镜头 004DB6EC E8 9B9AF2FF CALL 007.0040518C 004DB6F1 75 0E JNZ SHORT 007.004DB701 004DB6F3 B2 01 MOV DL,1 004DB6F5 8BC6 MOV EAX,ESI 004DB6F7 E8 28FFFFFF CALL 007.004DB624 004DB6FC E9 A3030000 JMP 007.004DBAA4 004DB701 8BC3 MOV EAX,EBX 004DB703 \|. BA B8BA4D00 MOV EDX,007.004DBAB8 ; 2个镜头 004DB708 \|. E8 7F9AF2FF CALL 007.0040518C 004DB70D \|. 75 0E JNZ SHORT 007.004DB71D 004DB70F \|. B2 02 MOV DL,2 004DB711 \|. 8BC6 MOV EAX,ESI 004DB713 \|. E8 0CFFFFFF CALL 007.004DB624 004DB718 \|. E9 87030000 JMP 007.004DBAA4 004DB71D \|> 8BC3 MOV EAX,EBX 004DB71F \|. BA C0BA4D00 MOV EDX,007.004DBAC0 ; 3个镜头 004DB724 \|. E8 639AF2FF CALL 007.0040518C 004DB729 \|. 75 0E JNZ SHORT 007.004DB739 004DB72B \|. B2 03 MOV DL,3 004DB72D \|. 8BC6 MOV EAX,ESI 004DB72F \|. E8 F0FEFFFF CALL 007.004DB624 004DB734 \|. E9 6B030000 JMP 007.004DBAA4 004DB739 \|> 8BC3 MOV EAX,EBX 004DB73B \|. BA C8BA4D00 MOV EDX,007.004DBAC8 ; 4个镜头 004DB740 \|. E8 479AF2FF CALL 007.0040518C 004DB745 \|. 75 0E JNZ SHORT 007.004DB755 004DB747 \|. B2 04 MOV DL,4 004DB749 \|. 8BC6 MOV EAX,ESI 004DB74B \|. E8 D4FEFFFF CALL 007.004DB624 004DB750 \|. E9 4F030000 JMP 007.004DBAA4 004DB755 \|> 8BC3 MOV EAX,EBX 004DB757 \|. BA D0BA4D00 MOV EDX,007.004DBAD0 ; 5个镜头 004DB75C \|. E8 2B9AF2FF CALL 007.0040518C 004DB761 \|. 75 0E JNZ SHORT 007.004DB771 004DB763 \|. B2 05 MOV DL,5 004DB765 \|. 8BC6 MOV EAX,ESI 004DB767 \|. E8 B8FEFFFF CALL 007.004DB624 004DB76C \|. E9 33030000 JMP 007.004DBAA4 004DB771 \|> 8BC3 MOV EAX,EBX 004DB773 \|. BA D8BA4D00 MOV EDX,007.004DBAD8 ; 6个镜头 004DB778 \|. E8 0F9AF2FF CALL 007.0040518C 004DB77D \|. 75 0E JNZ SHORT 007.004DB78D 004DB77F \|. B2 06 MOV DL,6 004DB781 \|. 8BC6 MOV EAX,ESI 004DB783 \|. E8 9CFEFFFF CALL 007.004DB624 004DB788 \|. E9 17030000 JMP 007.004DBAA4 004DB78D \|> 8BC3 MOV EAX,EBX 004DB78F \|. BA E0BA4D00 MOV EDX,007.004DBAE0 ; 7个镜头 004DB794 \|. E8 F399F2FF CALL 007.0040518C 004DB799 \|. 75 0E JNZ SHORT 007.004DB7A9 004DB79B \|. B2 07 MOV DL,7 004DB79D \|. 8BC6 MOV EAX,ESI 004DB79F \|. E8 80FEFFFF CALL 007.004DB624 004DB7A4 \|. E9 FB020000 JMP 007.004DBAA4 004DB7A9 \|> 8BC3 MOV EAX,EBX 004DB7AB \|. BA E8BA4D00 MOV EDX,007.004DBAE8 ; 8个镜头 004DB7B0 \|. E8 D799F2FF CALL 007.0040518C 004DB7B5 \|. 75 0E JNZ SHORT 007.004DB7C5 004DB7B7 \|. B2 08 MOV DL,8 004DB7B9 \|. 8BC6 MOV EAX,ESI 004DB7BB \|. E8 64FEFFFF CALL 007.004DB624 004DB7C0 \|. E9 DF020000 JMP 007.004DBAA4 004DB7C5 \|> 8BC3 MOV EAX,EBX 004DB7C7 \|. BA F0BA4D00 MOV EDX,007.004DBAF0 ; 9个镜头 004DB7CC \|. E8 BB99F2FF CALL 007.0040518C 004DB7D1 \|. 75 0E JNZ SHORT 007.004DB7E1 004DB7D3 \|. B2 09 MOV DL,9 004DB7D5 \|. 8BC6 MOV EAX,ESI 004DB7D7 \|. E8 48FEFFFF CALL 007.004DB624 004DB7DC \|. E9 C3020000 JMP 007.004DBAA4 004DB7E1 \|> 8BC3 MOV EAX,EBX 004DB7E3 \|. BA F8BA4D00 MOV EDX,007.004DBAF8 ; UNICODE "10" 004DB7E8 E8 9F99F2FF CALL 007.0040518C 004DB7ED 75 0E JNZ SHORT 007.004DB7FD 004DB7EF \|. B2 0A MOV DL,0A 004DB7F1 \|. 8BC6 MOV EAX,ESI 004DB7F3 \|. E8 2CFEFFFF CALL 007.004DB624 004DB7F8 \|. E9 A7020000 JMP 007.004DBAA4 004DB7FD \|> 8BC3 MOV EAX,EBX 004DB7FF \|. BA 04BB4D00 MOV EDX,007.004DBB04 ; UNICODE "11" 004DB804 \|. E8 8399F2FF CALL 007.0040518C 004DB809 \|. 75 0E JNZ SHORT 007.004DB819 004DB80B \|. B2 0B MOV DL,0B 004DB80D \|. 8BC6 MOV EAX,ESI 004DB80F \|. E8 10FEFFFF CALL 007.004DB624 004DB814 \|. E9 8B020000 JMP 007.004DBAA4 004DB819 \|> 8BC3 MOV EAX,EBX 004DB81B \|. BA 10BB4D00 MOV EDX,007.004DBB10 ; UNICODE "12" 004DB820 \|. E8 6799F2FF CALL 007.0040518C 004DB825 \|. 75 0E JNZ SHORT 007.004DB835 004DB827 \|. B2 0C MOV DL,0C 004DB829 \|. 8BC6 MOV EAX,ESI 004DB82B \|. E8 F4FDFFFF CALL 007.004DB624 004DB830 \|. E9 6F020000 JMP 007.004DBAA4 004DB835 \|> 8BC3 MOV EAX,EBX 004DB837 \|. BA 1CBB4D00 MOV EDX,007.004DBB1C ; UNICODE "13" 004DB83C \|. E8 4B99F2FF CALL 007.0040518C 004DB841 \|. 75 0E JNZ SHORT 007.004DB851 004DB843 \|. B2 0D MOV DL,0D 004DB845 \|. 8BC6 MOV EAX,ESI 004DB847 \|. E8 D8FDFFFF CALL 007.004DB624 004DB84C \|. E9 53020000 JMP 007.004DBAA4 004DB851 \|> 8BC3 MOV EAX,EBX 004DB853 \|. BA 28BB4D00 MOV EDX,007.004DBB28 ; UNICODE "14" 004DB858 \|. E8 2F99F2FF CALL 007.0040518C 004DB85D \|. 75 0E JNZ SHORT 007.004DB86D 004DB85F \|. B2 0E MOV DL,0E 004DB861 \|. 8BC6 MOV EAX,ESI 004DB863 \|. E8 BCFDFFFF CALL 007.004DB624 004DB868 \|. E9 37020000 JMP 007.004DBAA4 004DB86D \|> 8BC3 MOV EAX,EBX 004DB86F \|. BA 34BB4D00 MOV EDX,007.004DBB34 ; UNICODE "15" 004DB874 \|. E8 1399F2FF CALL 007.0040518C 004DB879 \|. 75 0E JNZ SHORT 007.004DB889 004DB87B \|. B2 0F MOV DL,0F 004DB87D \|. 8BC6 MOV EAX,ESI 004DB87F \|. E8 A0FDFFFF CALL 007.004DB624 004DB884 \|. E9 1B020000 JMP 007.004DBAA4 004DB889 \|> 8BC3 MOV EAX,EBX 004DB88B \|. BA 40BB4D00 MOV EDX,007.004DBB40 ; UNICODE "16" 004DB890 \|. E8 F798F2FF CALL 007.0040518C 004DB895 \|. 75 0E JNZ SHORT 007.004DB8A5 004DB897 \|. B2 10 MOV DL,10 004DB899 \|. 8BC6 MOV EAX,ESI 004DB89B \|. E8 84FDFFFF CALL 007.004DB624 004DB8A0 \|. E9 FF010000 JMP 007.004DBAA4 004DB8A5 \|> 8BC3 MOV EAX,EBX 004DB8A7 \|. BA 4CBB4D00 MOV EDX,007.004DBB4C ; UNICODE "17" 004DB8AC \|. E8 DB98F2FF CALL 007.0040518C 004DB8B1 \|. 75 0E JNZ SHORT 007.004DB8C1 004DB8B3 \|. B2 11 MOV DL,11 004DB8B5 \|. 8BC6 MOV EAX,ESI 004DB8B7 \|. E8 68FDFFFF CALL 007.004DB624 004DB8BC \|. E9 E3010000 JMP 007.004DBAA4 004DB8C1 \|> 8BC3 MOV EAX,EBX 004DB8C3 \|. BA 58BB4D00 MOV EDX,007.004DBB58 ; UNICODE "18" 004DB8C8 \|. E8 BF98F2FF CALL 007.0040518C 004DB8CD \|. 75 0E JNZ SHORT 007.004DB8DD 004DB8CF \|. B2 12 MOV DL,12 004DB8D1 \|. 8BC6 MOV EAX,ESI 004DB8D3 \|. E8 4CFDFFFF CALL 007.004DB624 004DB8D8 \|. E9 C7010000 JMP 007.004DBAA4 004DB8DD \|> 8BC3 MOV EAX,EBX 004DB8DF \|. BA 64BB4D00 MOV EDX,007.004DBB64 ; UNICODE "19" 004DB8E4 \|. E8 A398F2FF CALL 007.0040518C 004DB8E9 \|. 75 0E JNZ SHORT 007.004DB8F9 004DB8EB \|. B2 13 MOV DL,13 004DB8ED \|. 8BC6 MOV EAX,ESI 004DB8EF \|. E8 30FDFFFF CALL 007.004DB624 004DB8F4 \|. E9 AB010000 JMP 007.004DBAA4 004DB8F9 \|> 8BC3 MOV EAX,EBX 004DB8FB \|. BA 70BB4D00 MOV EDX,007.004DBB70 ; UNICODE "20" 004DB900 \|. E8 8798F2FF CALL 007.0040518C 004DB905 \|. 75 0E JNZ SHORT 007.004DB915 004DB907 \|. B2 14 MOV DL,14 004DB909 \|. 8BC6 MOV EAX,ESI 004DB90B \|. E8 14FDFFFF CALL 007.004DB624 004DB910 \|. E9 8F010000 JMP 007.004DBAA4 004DB915 \|> 8BC3 MOV EAX,EBX 004DB917 \|. BA 7CBB4D00 MOV EDX,007.004DBB7C ; UNICODE "21" 004DB91C \|. E8 6B98F2FF CALL 007.0040518C 004DB921 \|. 75 0E JNZ SHORT 007.004DB931 004DB923 \|. B2 15 MOV DL,15 004DB925 \|. 8BC6 MOV EAX,ESI 004DB927 \|. E8 F8FCFFFF CALL 007.004DB624 004DB92C \|. E9 73010000 JMP 007.004DBAA4 004DB931 \|> 8BC3 MOV EAX,EBX 004DB933 \|. BA 88BB4D00 MOV EDX,007.004DBB88 ; UNICODE "22" 004DB938 \|. E8 4F98F2FF CALL 007.0040518C 004DB93D \|. 75 0E JNZ SHORT 007.004DB94D 004DB93F \|. B2 16 MOV DL,16 004DB941 \|. 8BC6 MOV EAX,ESI 004DB943 \|. E8 DCFCFFFF CALL 007.004DB624 004DB948 \|. E9 57010000 JMP 007.004DBAA4 004DB94D \|> 8BC3 MOV EAX,EBX 004DB94F \|. BA 94BB4D00 MOV EDX,007.004DBB94 ; UNICODE "23" 004DB954 \|. E8 3398F2FF CALL 007.0040518C 004DB959 \|. 75 0E JNZ SHORT 007.004DB969 004DB95B \|. B2 17 MOV DL,17 004DB95D \|. 8BC6 MOV EAX,ESI 004DB95F \|. E8 C0FCFFFF CALL 007.004DB624 004DB964 \|. E9 3B010000 JMP 007.004DBAA4 004DB969 \|> 8BC3 MOV EAX,EBX 004DB96B \|. BA A0BB4D00 MOV EDX,007.004DBBA0 ; UNICODE "24" 004DB970 \|. E8 1798F2FF CALL 007.0040518C 004DB975 \|. 75 0E JNZ SHORT 007.004DB985 004DB977 \|. B2 18 MOV DL,18 004DB979 \|. 8BC6 MOV EAX,ESI 004DB97B \|. E8 A4FCFFFF CALL 007.004DB624 004DB980 \|. E9 1F010000 JMP 007.004DBAA4 004DB985 \|> 8BC3 MOV EAX,EBX 004DB987 \|. BA ACBB4D00 MOV EDX,007.004DBBAC 004DB98C \|. E8 FB97F2FF CALL 007.0040518C 004DB991 \|. 75 0C JNZ SHORT 007.004DB99F 004DB993 \|. 8BC6 MOV EAX,ESI 004DB995 \|. E8 C2020000 CALL 007.004DBC5C 004DB99A \|. E9 05010000 JMP 007.004DBAA4 004DB99F \|> 8BC3 MOV EAX,EBX 004DB9A1 \|. BA BCBB4D00 MOV EDX,007.004DBBBC 004DB9A6 \|. E8 E197F2FF CALL 007.0040518C 004DB9AB \|. 75 0C JNZ SHORT 007.004DB9B9 004DB9AD \|. 8BC6 MOV EAX,ESI 004DB9AF \|. E8 40030000 CALL 007.004DBCF4 004DB9B4 \|. E9 EB000000 JMP 007.004DBAA4 004DB9B9 \|> 8BC3 MOV EAX,EBX 004DB9BB \|. BA CCBB4D00 MOV EDX,007.004DBBCC 004DB9C0 \|. E8 C797F2FF CALL 007.0040518C 004DB9C5 \|. 75 0F JNZ SHORT 007.004DB9D6 004DB9C7 \|. B8 DCBB4D00 MOV EAX,007.004DBBDC 004DB9CC \|. E8 FFB9FEFF CALL 007.004C73D0 004DB9D1 \|. E9 CE000000 JMP 007.004DBAA4 004DB9D6 \|> 8BC3 MOV EAX,EBX 004DB9D8 \|. BA ECBB4D00 MOV EDX,007.004DBBEC 004DB9DD \|. E8 AA97F2FF CALL 007.0040518C 004DB9E2 \|. 75 16 JNZ SHORT 007.004DB9FA 004DB9E4 \|. B8 FCBB4D00 MOV EAX,007.004DBBFC 004DB9E9 \|. E8 E2B9FEFF CALL 007.004C73D0 004DB9EE \|. 8BC6 MOV EAX,ESI 004DB9F0 \|. E8 E3ACF8FF CALL 007.004666D8 004DB9F5 \|. E9 AA000000 JMP 007.004DBAA4 004DB9FA \|> 8BC3 MOV EAX,EBX 004DB9FC \|. BA 0CBC4D00 MOV EDX,007.004DBC0C 004DBA01 \|. E8 8697F2FF CALL 007.0040518C 004DBA06 \|. 75 1D JNZ SHORT 007.004DBA25 004DBA08 \|. E8 7B4D0400 CALL 007.00520788 004DBA0D \|. A1 74775200 MOV EAX,DWORD PTR DS:[527774] 004DBA12 \|. 8B00 MOV EAX,DWORD PTR DS:[EAX] 004DBA14 \|. E8 3B07FFFF CALL 007.004CC154 004DBA19 \|. B8 1CBC4D00 MOV EAX,007.004DBC1C 004DBA1E \|. E8 B54D0400 CALL 007.005207D8 004DBA23 \|. EB 7F JMP SHORT 007.004DBAA4 004DBA25 \|> 8BC3 MOV EAX,EBX 004DBA27 \|. BA 30BC4D00 MOV EDX,007.004DBC30 004DBA2C \|. E8 5B97F2FF CALL 007.0040518C 004DBA31 \|. 75 1D JNZ SHORT 007.004DBA50 004DBA33 \|. E8 504D0400 CALL 007.00520788 004DBA38 \|. A1 9C7C5200 MOV EAX,DWORD PTR DS:[527C9C] 004DBA3D \|. 8B00 MOV EAX,DWORD PTR DS:[EAX] 004DBA3F \|. E8 1007FFFF CALL 007.004CC154 004DBA44 \|. B8 1CBC4D00 MOV EAX,007.004DBC1C 004DBA49 \|. E8 8A4D0400 CALL 007.005207D8 004DBA4E \|. EB 54 JMP SHORT 007.004DBAA4 004DBA50 \|> 8BC3 MOV EAX,EBX 004DBA52 \|. BA 40BC4D00 MOV EDX,007.004DBC40 004DBA57 \|. E8 3097F2FF CALL 007.0040518C 004DBA5C \|. 75 1D JNZ SHORT 007.004DBA7B 004DBA5E \|. E8 254D0400 CALL 007.00520788 004DBA63 \|. A1 F47A5200 MOV EAX,DWORD PTR DS:[527AF4] 004DBA68 \|. 8B00 MOV EAX,DWORD PTR DS:[EAX] 004DBA6A \|. E8 E506FFFF CALL 007.004CC154 004DBA6F \|. B8 1CBC4D00 MOV EAX,007.004DBC1C 004DBA74 \|. E8 5F4D0400 CALL 007.005207D8 004DBA79 \|. EB 29 JMP SHORT 007.004DBAA4 004DBA7B \|> 8BC3 MOV EAX,EBX 004DBA7D \|. BA 50BC4D00 MOV EDX,007.004DBC50 ; ASCII "Kb:gM" 004DBA82 \|. E8 0597F2FF CALL 007.0040518C 004DBA87 \|. 75 1B JNZ SHORT 007.004DBAA4 004DBA89 \|. E8 FA4C0400 CALL 007.00520788 004DBA8E \|. A1 F07B5200 MOV EAX,DWORD PTR DS:[527BF0] 004DBA93 \|. 8B00 MOV EAX,DWORD PTR DS:[EAX] 004DBA95 \|. E8 BA06FFFF CALL 007.004CC154 004DBA9A \|. B8 1CBC4D00 MOV EAX,007.004DBC1C 004DBA9F \|. E8 344D0400 CALL 007.005207D8 004DBAA4 5E POP ESI 004DBAA5 5B POP EBX 004DBAA6 5D POP EBP 004DBAA7 C2 0400 RETN 4 004DBAAA 00 DB 00 004DBAAB 00 DB 00 004DBAAC 02 DB 02 004DBAAD 00 DB 00 004DBAAE 00 DB 00 004DBAAF 00 DB 00 004DBAB0 31 DB 31 ; CHAR '1' 004DBAB1 00 DB 00 004DBAB2 00 DB 00 004DBAB3 00 DB 00 004DBAB4 02 DB 02 004DBAB5 00 DB 00 004DBAB6 00 DB 00 004DBAB7 00 DB 00 004DBAB8 32 DB 32 ; CHAR '2' 004DBAB9 00 DB 00 004DBABA 00 DB 00 004DBABB 00 DB 00 004DBABC 02 DB 02 004DBABD 00 DB 00 004DBABE 00 DB 00 004DBABF 00 DB 00 004DBAC0 33 DB 33 ; CHAR '3' 004DBAC1 00 DB 00 004DBAC2 00 DB 00 004DBAC3 00 DB 00 004DBAC4 02 DB 02 004DBAC5 00 DB 00 004DBAC6 00 DB 00 004DBAC7 00 DB 00 004DBAC8 34 DB 34 ; CHAR '4' 004DBAC9 00 DB 00 004DBACA 00 DB 00 004DBACB 00 DB 00 004DBACC 02 DB 02 004DBACD 00 DB 00 004DBACE 00 DB 00 004DBACF 00 DB 00 004DBAD0 35 DB 35 ; CHAR '5' 004DBAD1 00 DB 00 004DBAD2 00 DB 00 004DBAD3 00 DB 00 004DBAD4 02 DB 02 004DBAD5 00 DB 00 004DBAD6 00 DB 00 004DBAD7 00 DB 00 004DBAD8 36 DB 36 ; CHAR '6' 004DBAD9 00 DB 00 004DBADA 00 DB 00 004DBADB 00 DB 00 004DBADC 02 DB 02 004DBADD 00 DB 00 004DBADE 00 DB 00 004DBADF 00 DB 00 004DBAE0 37 DB 37 ; CHAR '7' 004DBAE1 00 DB 00 004DBAE2 00 DB 00 004DBAE3 00 DB 00 004DBAE4 02 DB 02 004DBAE5 00 DB 00 004DBAE6 00 DB 00 004DBAE7 00 DB 00 004DBAE8 38 DB 38 ; CHAR '8' 004DBAE9 00 DB 00 004DBAEA 00 DB 00 004DBAEB 00 DB 00 004DBAEC 02 DB 02 004DBAED 00 DB 00 004DBAEE 00 DB 00 004DBAEF 00 DB 00 004DBAF0 39 DB 39 ; CHAR '9' 004DBAF1 00 DB 00 004DBAF2 00 DB 00 004DBAF3 00 DB 00 004DBAF4 04 DB 04 004DBAF5 00 DB 00 004DBAF6 00 DB 00 004DBAF7 00 DB 00 004DBAF8 31 DB 31 ; CHAR '1' 004DBAF9 00 DB 00 004DBAFA 30 DB 30 ; CHAR '0' 004DBAFB 00 DB 00 004DBAFC 00 DB 00 004DBAFD 00 DB 00 004DBAFE 00 DB 00 004DBAFF 00 DB 00 004DBB00 04 DB 04 004DBB01 00 DB 00 004DBB02 00 DB 00 004DBB03 00 DB 00 004DBB04 31 DB 31 ; CHAR '1' 004DBB05 00 DB 00 004DBB06 31 DB 31 ; CHAR '1' 004DBB07 00 DB 00 004DBB08 00 DB 00 004DBB09 00 DB 00 004DBB0A 00 DB 00 004DBB0B 00 DB 00 004DBB0C 04 DB 04 004DBB0D 00 DB 00 004DBB0E 00 DB 00 004DBB0F 00 DB 00 004DBB10 31 DB 31 ; CHAR '1' 004DBB11 00 DB 00 004DBB12 32 DB 32 ; CHAR '2' 004DBB13 00 DB 00 004DBB14 00 DB 00 004DBB15 00 DB 00 004DBB16 00 DB 00 004DBB17 00 DB 00 004DBB18 04 DB 04 004DBB19 00 DB 00 004DBB1A 00 DB 00 004DBB1B 00 DB 00 004DBB1C 31 DB 31 ; CHAR '1' 004DBB1D 00 DB 00 004DBB1E 33 DB 33 ; CHAR '3' 004DBB1F 00 DB 00 004DBB20 00 DB 00 004DBB21 00 DB 00 004DBB22 00 DB 00 004DBB23 00 DB 00 004DBB24 04 DB 04 004DBB25 00 DB 00 004DBB26 00 DB 00 004DBB27 00 DB 00 004DBB28 31 DB 31 ; CHAR '1' 004DBB29 00 DB 00 004DBB2A 34 DB 34 ; CHAR '4' 004DBB2B 00 DB 00 004DBB2C 00 DB 00 004DBB2D 00 DB 00 004DBB2E 00 DB 00 004DBB2F 00 DB 00 004DBB30 04 DB 04 004DBB31 00 DB 00 004DBB32 00 DB 00 004DBB33 00 DB 00 004DBB34 31 DB 31 ; CHAR '1' 004DBB35 00 DB 00 004DBB36 35 DB 35 ; CHAR '5' 004DBB37 00 DB 00 004DBB38 00 DB 00 004DBB39 00 DB 00 004DBB3A 00 DB 00 004DBB3B 00 DB 00 004DBB3C 04 DB 04 004DBB3D 00 DB 00 004DBB3E 00 DB 00 004DBB3F 00 DB 00 004DBB40 31 DB 31 ; CHAR '1' 004DBB41 00 DB 00 004DBB42 36 DB 36 ; CHAR '6' 004DBB43 00 DB 00 004DBB44 00 DB 00 004DBB45 00 DB 00 004DBB46 00 DB 00 004DBB47 00 DB 00 004DBB48 04 DB 04 004DBB49 00 DB 00 004DBB4A 00 DB 00 004DBB4B 00 DB 00 004DBB4C 31 DB 31 ; CHAR '1' 004DBB4D 00 DB 00 004DBB4E 37 DB 37 ; CHAR '7' 004DBB4F 00 DB 00 004DBB50 00 DB 00 004DBB51 00 DB 00 004DBB52 00 DB 00 004DBB53 00 DB 00 004DBB54 04 DB 04 004DBB55 00 DB 00 004DBB56 00 DB 00 004DBB57 00 DB 00 004DBB58 31 DB 31 ; CHAR '1' 004DBB59 00 DB 00 004DBB5A 38 DB 38 ; CHAR '8' 004DBB5B 00 DB 00 004DBB5C 00 DB 00 004DBB5D 00 DB 00 004DBB5E 00 DB 00 004DBB5F 00 DB 00 004DBB60 04 DB 04 004DBB61 00 DB 00 004DBB62 00 DB 00 004DBB63 00 DB 00 004DBB64 31 DB 31 ; CHAR '1' 004DBB65 00 DB 00 004DBB66 39 DB 39 ; CHAR '9' 004DBB67 00 DB 00 004DBB68 00 DB 00 004DBB69 00 DB 00 004DBB6A 00 DB 00 004DBB6B 00 DB 00 004DBB6C 04 DB 04 004DBB6D 00 DB 00 004DBB6E 00 DB 00 004DBB6F 00 DB 00 004DBB70 32 DB 32 ; CHAR '2' 004DBB71 00 DB 00 004DBB72 30 DB 30 ; CHAR '0' 004DBB73 00 DB 00 004DBB74 00 DB 00 004DBB75 00 DB 00 004DBB76 00 DB 00 004DBB77 00 DB 00 004DBB78 04 DB 04 004DBB79 00 DB 00 004DBB7A 00 DB 00 004DBB7B 00 DB 00 004DBB7C 32 DB 32 ; CHAR '2' 004DBB7D 00 DB 00 004DBB7E 31 DB 31 ; CHAR '1' 004DBB7F 00 DB 00 004DBB80 00 DB 00 004DBB81 00 DB 00 004DBB82 00 DB 00 004DBB83 00 DB 00 004DBB84 04 DB 04 004DBB85 00 DB 00 004DBB86 00 DB 00 004DBB87 00 DB 00 004DBB88 32 DB 32 ; CHAR '2' 004DBB89 00 DB 00 004DBB8A 32 DB 32 ; CHAR '2' 004DBB8B 00 DB 00 004DBB8C 00 DB 00 004DBB8D 00 DB 00 004DBB8E 00 DB 00 004DBB8F 00 DB 00 004DBB90 04 DB 04 004DBB91 00 DB 00 004DBB92 00 DB 00 004DBB93 00 DB 00 004DBB94 32 DB 32 ; CHAR '2' 004DBB95 00 DB 00 004DBB96 33 DB 33 ; CHAR '3' 004DBB97 00 DB 00 004DBB98 00 DB 00 004DBB99 00 DB 00 004DBB9A 00 DB 00 004DBB9B 00 DB 00 004DBB9C 04 DB 04 004DBB9D 00 DB 00 004DBB9E 00 DB 00 004DBB9F 00 DB 00 004DBBA0 32 DB 32 ; CHAR '2' 004DBBA1 00 DB 00 004DBBA2 34 DB 34 ; CHAR '4' 004DBBA3 00 DB 00 004DBBA4 00 DB 00 004DBBA5 00 DB 00 004DBBA6 00 DB 00 004DBBA7 00 DB 00 004DBBA8 08 DB 08 004DBBA9 00 DB 00 004DBBAA 00 DB 00 004DBBAB 00 DB 00 004DBBAC 0D DB 0D 004DBBAD 59 DB 59 ; CHAR 'Y' 004DBBAE 36 DB 36 ; CHAR '6' 004DBBAF 52 DB 52 ; CHAR 'R' 004DBBB0 F8 DB F8 004DBBB1 76477200 DD 007.00724776 004DBBB5 00 DB 00 004DBBB6 00 DB 00 004DBBB7 00 DB 00 004DBBB8 08 DB 08 004DBBB9 00 DB 00 004DBBBA 00 DB 00 004DBBBB 00 DB 00 004DBBBC . C2 5370 RETN 7053 004DBBBF 65 DB 65 ; CHAR 'e' 004DBBC0 BE DB BE 004DBBC1 8B6E7F00 DD 007.007F6E8B 004DBBC5 00 DB 00 004DBBC6 00 DB 00 004DBBC7 00 DB 00 004DBBC8 04 DB 04 004DBBC9 00 DB 00 004DBBCA 00 DB 00 004DBBCB 00 DB 00 004DBBCC FB DB FB 004DBBCD 7F759800 DD 007.0098757F 004DBBD1 00 DB 00 004DBBD2 00 DB 00 004DBBD3 00 DB 00 004DBBD4 FF DB FF 004DBBD5 FF DB FF 004DBBD6 FF DB FF 004DBBD7 FF DB FF 004DBBD8 0A DB 0A 004DBBD9 00 DB 00 004DBBDA 00 DB 00 004DBBDB 00 DB 00 004DBBDC C9 DB C9 004DBBDD CF DB CF 004DBBDE CF DB CF 004DBBDF C2 DB C2 004DBBE0 D2 DB D2 004DBBE1 B3 DB B3 004DBBE2 . 2E 77 61 76 0>ASCII ".wav",0 004DBBE7 00 DB 00 004DBBE8 04 DB 04 004DBBE9 00 DB 00 004DBBEA 00 DB 00 004DBBEB 00 DB 00 004DBBEC 00 DB 00 004DBBED 90 NOP 004DBBEE FA DB FA 004DBBEF 51 DB 51 ; CHAR 'Q' 004DBBF0 00 DB 00 004DBBF1 00 DB 00 004DBBF2 00 DB 00 004DBBF3 00 DB 00 004DBBF4 FF DB FF 004DBBF5 FF DB FF 004DBBF6 FF DB FF 004DBBF7 FF DB FF 004DBBF8 08 DB 08 004DBBF9 00 DB 00 004DBBFA 00 DB 00 004DBBFB 00 DB 00 004DBBFC B7 DB B7 004DBBFD B5 DB B5 004DBBFE BB DB BB 004DBBFF D8 DB D8 004DBC00 . 2E 77 61 76 0>ASCII ".wav",0 004DBC05 00 DB 00 004DBC06 00 DB 00 004DBC07 00 DB 00 004DBC08 06 DB 06 004DBC09 00 DB 00 004DBC0A 00 DB 00 004DBC0B 00 DB 00 004DBC0C 54 DB 54 ; CHAR 'T' 004DBC0D 9B DB 9B 004DBC0E . 7B 5E 66 4E 0>ASCII "{^fN",0 004DBC13 00 DB 00 004DBC14 FF DB FF 004DBC15 FF DB FF 004DBC16 FF DB FF 004DBC17 FF DB FF 004DBC18 0C DB 0C 004DBC19 00 DB 00 004DBC1A 00 DB 00 004DBC1B 00 DB 00 004DBC1C C5 DB C5 004DBC1D C4 DB C4 004DBC1E D5 DB D5 004DBC1F . D5 BB AAD 0BB 004DBC21 . AD LODS DWORD PTR DS:[ESI] 004DBC22 . C3 RETN 004DBC23 E6 DB E6 004DBC24 . 2E 77 61 76 0>ASCII ".wav",0 004DBC29 00 DB 00 004DBC2A 00 DB 00 004DBC2B 00 DB 00 004DBC2C 08 DB 08 004DBC2D 00 DB 00 004DBC2E 00 DB 00 004DBC2F 00 DB 00 004DBC30 FA DB FA 004DBC31 57 DB 57 ; CHAR 'W' 004DBC32 E0 DB E0 004DBC33 56 DB 56 ; CHAR 'V' 004DBC34 84 DB 84 004DBC35 984B6D00 DD 007.006D4B98 004DBC39 00 DB 00 004DBC3A 00 DB 00 004DBC3B 00 DB 00 004DBC3C 08 DB 08 004DBC3D 00 DB 00 004DBC3E 00 DB 00 004DBC3F 00 DB 00 004DBC40 61 DB 61 ; CHAR 'a' 004DBC41 53 DB 53 ; CHAR 'S' 004DBC42 C9626F00 DD 007.006F62C9 004DBC46 6B DB 6B ; CHAR 'k' 004DBC47 00 DB 00 004DBC48 00 DB 00 004DBC49 00 DB 00 004DBC4A 00 DB 00 004DBC4B 00 DB 00 004DBC4C 0A DB 0A 004DBC4D 00 DB 00 004DBC4E 00 DB 00 004DBC4F 00 DB 00 004DBC50 . 4B 62 3A 67 4>ASCII "Kb:gM",0 004DBC56 50 DB 50 ; CHAR 'P' 004DBC57 00 DB 00 004DBC58 33 DB 33 ; CHAR '3' 004DBC59 00 DB 00 004DBC5A 00 DB 00 004DBC5B 00 DB 00 这是第二个画面的一部分地址.... 004DB6E7 \|. BA B0BA4D00 MOV EDX,007.004DBAB0 ; 1个镜头 004DB6EC E8 9B9AF2FF CALL 007.0040518C 004DB6F1 75 0E JNZ SHORT 007.004DB701 004DB6F3 B2 01 MOV DL,1 004DB6F5 8BC6 MOV EAX,ESI 004DB6F7 E8 28FFFFFF CALL 007.004DB624 004DB6FC E9 A3030000 JMP 007.004DBAA4 004DB701 8BC3 MOV EAX,EBX 这一段是第一个按扭..一按就卡死了..不跳转啊..也不出现什么出错提示~~~望高手解决~~~~~ 2007-12-9 18:00 0
晨露流星雪币： 190 活跃值： (25) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 25 粉丝 0 关注私信	晨露流星 11 楼大哥,谢谢你的指导,正是跟进后...代码如下,如何搞? 004BC610 /$ 53 PUSH EBX 004BC611 \|. 56 PUSH ESI 004BC612 \|. 81C4 D0F9FFFF ADD ESP,-630 004BC618 \|. C60424 00 MOV BYTE PTR SS:[ESP],0 004BC61C \|. 68 54C74B00 PUSH 007.004BC754 ; /ResourceType = "dogfile" 004BC621 \|. 68 5CC74B00 PUSH 007.004BC75C ; \|ResourceName = "rsakey" 004BC626 \|. A1 18875200 MOV EAX,DWORD PTR DS:[528718] ; \| 004BC62B \|. 50 PUSH EAX ; \|hModule => NULL 004BC62C \|. E8 A7ABF4FF CALL <JMP.&kernel32.FindResourceA> ; \FindResourceA 004BC631 \|. 8BD8 MOV EBX,EAX 004BC633 \|. 53 PUSH EBX ; /hResource 004BC634 \|. A1 18875200 MOV EAX,DWORD PTR DS:[528718] ; \| 004BC639 \|. 50 PUSH EAX ; \|hModule => NULL 004BC63A \|. E8 C9ADF4FF CALL <JMP.&kernel32.SizeofResource> ; \SizeofResource 004BC63F \|. 8BF0 MOV ESI,EAX 004BC641 \|. 53 PUSH EBX ; /hResource 004BC642 \|. A1 18875200 MOV EAX,DWORD PTR DS:[528718] ; \| 004BC647 \|. 50 PUSH EAX ; \|hModule => NULL 004BC648 \|. E8 2BADF4FF CALL <JMP.&kernel32.LoadResource> ; \LoadResource 004BC64D \|. 8BD8 MOV EBX,EAX 004BC64F \|. 53 PUSH EBX ; /hResource 004BC650 \|. E8 3BADF4FF CALL <JMP.&kernel32.LockResource> ; \LockResource 004BC655 \|. 8D5424 10 LEA EDX,DWORD PTR SS:[ESP+10] 004BC659 \|. 8BCE MOV ECX,ESI 004BC65B \|. 92 XCHG EAX,EDX 004BC65C \|. E8 0FB6F4FF CALL 007.00407C70 004BC661 \|. 53 PUSH EBX ; /hResource 004BC662 \|. E8 89ABF4FF CALL <JMP.&kernel32.FreeResource> ; \FreeResource 004BC667 \|. C74424 0C 000>MOV DWORD PTR SS:[ESP+C],400 004BC66F \|. E8 64ACF4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC674 \|. 8B15 AC7D5200 MOV EDX,DWORD PTR DS:[527DAC] ; 007.00523008 004BC67A \|. 8902 MOV DWORD PTR DS:[EDX],EAX 004BC67C \|. BE 20000000 MOV ESI,20 004BC681 \|. 8D9C24 100100>LEA EBX,DWORD PTR SS:[ESP+110] 004BC688 \|> B8 FF000000 /MOV EAX,0FF 004BC68D \|. E8 126BF4FF \|CALL 007.004031A4 004BC692 \|. 8803 \|MOV BYTE PTR DS:[EBX],AL 004BC694 \|. 43 \|INC EBX 004BC695 \|. 4E \|DEC ESI 004BC696 \|.^ 75 F0 \JNZ SHORT 007.004BC688 004BC698 \|. 8D4424 0C LEA EAX,DWORD PTR SS:[ESP+C] 004BC69C \|. 50 PUSH EAX 004BC69D \|. 6A 20 PUSH 20 004BC69F \|. 8D8424 180100>LEA EAX,DWORD PTR SS:[ESP+118] 004BC6A6 \|. 50 PUSH EAX 004BC6A7 \|. 8D4424 10 LEA EAX,DWORD PTR SS:[ESP+10] 004BC6AB \|. 50 PUSH EAX 004BC6AC \|. 8D8424 400100>LEA EAX,DWORD PTR SS:[ESP+140] 004BC6B3 \|. 50 PUSH EAX 004BC6B4 \|. E8 33FAFFFF CALL <JMP.&crypt.RSAPublicEncrypt> 004BC6B9 \|. 85C0 TEST EAX,EAX 004BC6BB \|. 0F85 87000000 JNZ 007.004BC748 004BC6C1 \|. 8D8424 300500>LEA EAX,DWORD PTR SS:[ESP+530] 004BC6C8 \|. 50 PUSH EAX 004BC6C9 \|. 68 FF000000 PUSH 0FF 004BC6CE \|. 8D4424 10 LEA EAX,DWORD PTR SS:[ESP+10] 004BC6D2 \|. 50 PUSH EAX 004BC6D3 \|. 8D8424 3C0100>LEA EAX,DWORD PTR SS:[ESP+13C] 004BC6DA \|. 8B4C24 10 MOV ECX,DWORD PTR SS:[ESP+10] 004BC6DE \|. BA FF030000 MOV EDX,3FF 004BC6E3 \|. E8 50FAFFFF CALL 007.004BC138 004BC6E8 \|. 84C0 TEST AL,AL 004BC6EA \|. 74 5C JE SHORT 007.004BC748 004BC6EC \|. B9 24615200 MOV ECX,007.00526124 004BC6F1 \|. BA 20000000 MOV EDX,20 004BC6F6 \|. B0 20 MOV AL,20 004BC6F8 \|. E8 C387F4FF CALL 007.00404EC0 004BC6FD \|. B9 28615200 MOV ECX,007.00526128 004BC702 \|. BA 20000000 MOV EDX,20 004BC707 \|. B0 20 MOV AL,20 004BC709 \|. E8 B287F4FF CALL 007.00404EC0 004BC70E \|. B8 24615200 MOV EAX,007.00526124 004BC713 \|. E8 1086F4FF CALL 007.00404D28 004BC718 \|. 8D9424 100100>LEA EDX,DWORD PTR SS:[ESP+110] 004BC71F \|. B9 20000000 MOV ECX,20 004BC724 \|. E8 47B5F4FF CALL 007.00407C70 004BC729 \|. B8 28615200 MOV EAX,007.00526128 004BC72E \|. E8 F585F4FF CALL 007.00404D28 004BC733 \|. 8D9424 100100>LEA EDX,DWORD PTR SS:[ESP+110] 004BC73A \|. B9 20000000 MOV ECX,20 004BC73F \|. E8 2CB5F4FF CALL 007.00407C70 004BC744 \|. C60424 01 MOV BYTE PTR SS:[ESP],1 004BC748 \|> 8A0424 MOV AL,BYTE PTR SS:[ESP] 004BC74B \|. 81C4 30060000 ADD ESP,630 004BC751 \|. 5E POP ESI 004BC752 \|. 5B POP EBX 004BC753 \. C3 RETN 004BC754 . 64 6F 67 66 6>ASCII "dogfile",0 004BC75C . 72 73 61 6B 6>ASCII "rsakey",0 004BC763 00 DB 00 004BC764 $ 55 PUSH EBP 004BC765 . 8BEC MOV EBP,ESP 004BC767 . 83C4 D8 ADD ESP,-28 004BC76A . 53 PUSH EBX 004BC76B . 56 PUSH ESI 004BC76C . 8B5D 18 MOV EBX,DWORD PTR SS:[EBP+18] 004BC76F . 85DB TEST EBX,EBX 004BC771 . 78 0A JS SHORT 007.004BC77D 004BC773 . C1EB 02 SHR EBX,2 004BC776 > 8B3499 MOV ESI,DWORD PTR DS:[ECX+EBX*4] 004BC779 . 4B DEC EBX 004BC77A . 56 PUSH ESI 004BC77B .^ 79 F9 JNS SHORT 007.004BC776 004BC77D > 8BCC MOV ECX,ESP 004BC77F . 894D F4 MOV DWORD PTR SS:[EBP-C],ECX 004BC782 . 8955 F8 MOV DWORD PTR SS:[EBP-8],EDX 004BC785 . 8945 FC MOV DWORD PTR SS:[EBP-4],EAX 004BC788 . C645 F3 00 MOV BYTE PTR SS:[EBP-D],0 004BC78C . E8 47ABF4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC791 . 8BD8 MOV EBX,EAX 004BC793 . 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14] 004BC796 . 50 PUSH EAX 004BC797 . 6A 00 PUSH 0 004BC799 . E8 4AE0FFFF CALL 007.004BA7E8 004BC79E . 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] 004BC7A1 . E8 CEC6F4FF CALL 007.00408E74 004BC7A6 . 8BF0 MOV ESI,EAX 004BC7A8 . 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14] 004BC7AB . 50 PUSH EAX 004BC7AC . 56 PUSH ESI 004BC7AD . E8 36E0FFFF CALL 007.004BA7E8 004BC7B2 . 85C0 TEST EAX,EAX 004BC7B4 . 0F85 01020000 JNZ 007.004BC9BB 004BC7BA . 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] 004BC7BD . B9 5C000000 MOV ECX,5C 004BC7C2 . 33D2 XOR EDX,EDX 004BC7C4 . F7F1 DIV ECX 004BC7C6 . 8945 E8 MOV DWORD PTR SS:[EBP-18],EAX 004BC7C9 . 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18] 004BC7CC . 48 DEC EAX 004BC7CD . 85C0 TEST EAX,EAX 004BC7CF . 0F8C E5000000 JL 007.004BC8BA 004BC7D5 . 40 INC EAX 004BC7D6 . 8945 D8 MOV DWORD PTR SS:[EBP-28],EAX 004BC7D9 . C745 DC 00000>MOV DWORD PTR SS:[EBP-24],0 004BC7E0 > E8 F3AAF4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC7E5 . 33D2 XOR EDX,EDX 004BC7E7 . 52 PUSH EDX 004BC7E8 . 50 PUSH EAX 004BC7E9 . 8D83 E8030000 LEA EAX,DWORD PTR DS:[EBX+3E8] 004BC7EF . 99 CDQ 004BC7F0 . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BC7F4 . 75 09 JNZ SHORT 007.004BC7FF 004BC7F6 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BC7F9 . 5A POP EDX 004BC7FA . 58 POP EAX 004BC7FB . EB 4F JMP SHORT 007.004BC84C 004BC7FD . EB 04 JMP SHORT 007.004BC803 004BC7FF > 5A POP EDX 004BC800 . 58 POP EAX 004BC801 . 7D 49 JGE SHORT 007.004BC84C 004BC803 > 33DB XOR EBX,EBX 004BC805 > 33D2 XOR EDX,EDX 004BC807 > 33C0 XOR EAX,EAX 004BC809 > 40 INC EAX 004BC80A . 3D 00000020 CMP EAX,20000000 004BC80F .^ 75 F8 JNZ SHORT 007.004BC809 004BC811 . 42 INC EDX 004BC812 . 81FA 00000020 CMP EDX,20000000 004BC818 .^ 75 ED JNZ SHORT 007.004BC807 004BC81A . 43 INC EBX 004BC81B . 81FB 00000020 CMP EBX,20000000 004BC821 .^ 75 E2 JNZ SHORT 007.004BC805 004BC823 . 33DB XOR EBX,EBX 004BC825 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BC827 . E8 4423F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BC82C . 43 INC EBX 004BC82D . 81FB 00000020 CMP EBX,20000000 004BC833 .^ 75 F0 JNZ SHORT 007.004BC825 004BC835 . 33DB XOR EBX,EBX 004BC837 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BC839 . E8 3223F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BC83E . 43 INC EBX 004BC83F . 81FB 00000020 CMP EBX,20000000 004BC845 .^ 75 F0 JNZ SHORT 007.004BC837 004BC847 . E8 407EF4FF CALL 007.0040468C 004BC84C > E8 87AAF4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC851 . 8BD8 MOV EBX,EAX 004BC853 . 8A46 50 MOV AL,BYTE PTR DS:[ESI+50] 004BC856 . 3A05 3C515300 CMP AL,BYTE PTR DS:[53513C] 004BC85C . 75 4D JNZ SHORT 007.004BC8AB 004BC85E . 8A46 51 MOV AL,BYTE PTR DS:[ESI+51] 004BC861 . 3A05 3D515300 CMP AL,BYTE PTR DS:[53513D] 004BC867 . 75 42 JNZ SHORT 007.004BC8AB 004BC869 . 8A46 52 MOV AL,BYTE PTR DS:[ESI+52] 004BC86C . 3A05 3E515300 CMP AL,BYTE PTR DS:[53513E] 004BC872 . 75 37 JNZ SHORT 007.004BC8AB 004BC874 . 8A46 53 MOV AL,BYTE PTR DS:[ESI+53] 004BC877 . 3A05 3F515300 CMP AL,BYTE PTR DS:[53513F] 004BC87D . 75 2C JNZ SHORT 007.004BC8AB 004BC87F . 8A46 54 MOV AL,BYTE PTR DS:[ESI+54] 004BC882 . 3A05 40515300 CMP AL,BYTE PTR DS:[535140] 004BC888 . 75 21 JNZ SHORT 007.004BC8AB 004BC88A . 8A46 55 MOV AL,BYTE PTR DS:[ESI+55] 004BC88D . 3A05 41515300 CMP AL,BYTE PTR DS:[535141] 004BC893 . 75 16 JNZ SHORT 007.004BC8AB 004BC895 . 8A46 56 MOV AL,BYTE PTR DS:[ESI+56] 004BC898 . 3A05 42515300 CMP AL,BYTE PTR DS:[535142] 004BC89E . 75 0B JNZ SHORT 007.004BC8AB 004BC8A0 . 8A46 57 MOV AL,BYTE PTR DS:[ESI+57] 004BC8A3 . 3A05 43515300 CMP AL,BYTE PTR DS:[535143] 004BC8A9 . 74 0F JE SHORT 007.004BC8BA 004BC8AB > 83C6 5C ADD ESI,5C 004BC8AE . FF45 DC INC DWORD PTR SS:[EBP-24] 004BC8B1 . FF4D D8 DEC DWORD PTR SS:[EBP-28] 004BC8B4 .^ 0F85 26FFFFFF JNZ 007.004BC7E0 004BC8BA > 8B45 DC MOV EAX,DWORD PTR SS:[EBP-24] 004BC8BD . 99 CDQ 004BC8BE . 52 PUSH EDX 004BC8BF . 50 PUSH EAX 004BC8C0 . 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18] 004BC8C3 . 33D2 XOR EDX,EDX 004BC8C5 . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BC8C9 . 75 0C JNZ SHORT 007.004BC8D7 004BC8CB . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BC8CE . 5A POP EDX 004BC8CF . 58 POP EAX 004BC8D0 . 77 0D JA SHORT 007.004BC8DF 004BC8D2 . E9 73010000 JMP 007.004BCA4A 004BC8D7 > 5A POP EDX 004BC8D8 . 58 POP EAX 004BC8D9 . 0F8E 6B010000 JLE 007.004BCA4A 004BC8DF > E8 F4A9F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC8E4 . 33D2 XOR EDX,EDX 004BC8E6 . 52 PUSH EDX 004BC8E7 . 50 PUSH EAX 004BC8E8 . 8D83 E8030000 LEA EAX,DWORD PTR DS:[EBX+3E8] 004BC8EE . 99 CDQ 004BC8EF . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BC8F3 . 75 09 JNZ SHORT 007.004BC8FE 004BC8F5 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BC8F8 . 5A POP EDX 004BC8F9 . 58 POP EAX 004BC8FA . EB 4F JMP SHORT 007.004BC94B 004BC8FC . EB 04 JMP SHORT 007.004BC902 004BC8FE > 5A POP EDX 004BC8FF . 58 POP EAX 004BC900 . 7D 49 JGE SHORT 007.004BC94B 004BC902 > 33DB XOR EBX,EBX 004BC904 > 33D2 XOR EDX,EDX 004BC906 > 33C0 XOR EAX,EAX 004BC908 > 40 INC EAX 004BC909 . 3D 00000020 CMP EAX,20000000 004BC90E .^ 75 F8 JNZ SHORT 007.004BC908 004BC910 . 42 INC EDX 004BC911 . 81FA 00000020 CMP EDX,20000000 004BC917 .^ 75 ED JNZ SHORT 007.004BC906 004BC919 . 43 INC EBX 004BC91A . 81FB 00000020 CMP EBX,20000000 004BC920 .^ 75 E2 JNZ SHORT 007.004BC904 004BC922 . 33DB XOR EBX,EBX 004BC924 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BC926 . E8 4522F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BC92B . 43 INC EBX 004BC92C . 81FB 00000020 CMP EBX,20000000 004BC932 .^ 75 F0 JNZ SHORT 007.004BC924 004BC934 . 33DB XOR EBX,EBX 004BC936 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BC938 . E8 3322F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BC93D . 43 INC EBX 004BC93E . 81FB 00000020 CMP EBX,20000000 004BC944 .^ 75 F0 JNZ SHORT 007.004BC936 004BC946 . E8 417DF4FF CALL 007.0040468C 004BC94B > E8 88A9F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC950 . 8BD8 MOV EBX,EAX 004BC952 . C745 E0 08000>MOV DWORD PTR SS:[EBP-20],8 004BC959 . C745 E4 01000>MOV DWORD PTR SS:[EBP-1C],1 004BC960 . 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20] 004BC963 . 50 PUSH EAX 004BC964 . 56 PUSH ESI 004BC965 . E8 46F3FFFF CALL 007.004BBCB0 004BC96A . 85C0 TEST EAX,EAX 004BC96C . 75 4D JNZ SHORT 007.004BC9BB 004BC96E . 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4] 004BC971 . 50 PUSH EAX 004BC972 . 56 PUSH ESI 004BC973 . E8 48E7FFFF CALL 007.004BB0C0 004BC978 . 85C0 TEST EAX,EAX 004BC97A . 75 3F JNZ SHORT 007.004BC9BB 004BC97C . 68 A1000000 PUSH 0A1 004BC981 . 6A 08 PUSH 8 004BC983 . 68 5CCA4B00 PUSH 007.004BCA5C ; ASCII "29323468" 004BC988 . 56 PUSH ESI 004BC989 . E8 1EE9FFFF CALL 007.004BB2AC 004BC98E . 85C0 TEST EAX,EAX 004BC990 . 75 29 JNZ SHORT 007.004BC9BB 004BC992 . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 004BC995 . 50 PUSH EAX 004BC996 . 68 80000000 PUSH 80 004BC99B . 8B45 10 MOV EAX,DWORD PTR SS:[EBP+10] 004BC99E . 50 PUSH EAX 004BC99F . 8B45 14 MOV EAX,DWORD PTR SS:[EBP+14] 004BC9A2 . 50 PUSH EAX 004BC9A3 . 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] 004BC9A6 . 50 PUSH EAX 004BC9A7 . 6A 00 PUSH 0 004BC9A9 . 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8] 004BC9AC . 50 PUSH EAX 004BC9AD . 56 PUSH ESI 004BC9AE . E8 7DF3FFFF CALL 007.004BBD30 004BC9B3 . 85C0 TEST EAX,EAX 004BC9B5 . 75 04 JNZ SHORT 007.004BC9BB 004BC9B7 . C645 F3 01 MOV BYTE PTR SS:[EBP-D],1 004BC9BB > E8 18A9F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BC9C0 . 33D2 XOR EDX,EDX 004BC9C2 . 52 PUSH EDX 004BC9C3 . 50 PUSH EAX 004BC9C4 . 8D83 B80B0000 LEA EAX,DWORD PTR DS:[EBX+BB8] 004BC9CA . 99 CDQ 004BC9CB . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BC9CF . 75 09 JNZ SHORT 007.004BC9DA 004BC9D1 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BC9D4 . 5A POP EDX 004BC9D5 . 58 POP EAX 004BC9D6 . EB 61 JMP SHORT 007.004BCA39 004BC9D8 . EB 04 JMP SHORT 007.004BC9DE 004BC9DA > 5A POP EDX 004BC9DB . 58 POP EAX 004BC9DC . 7D 5B JGE SHORT 007.004BCA39 004BC9DE > 33C0 XOR EAX,EAX 004BC9E0 . 8945 DC MOV DWORD PTR SS:[EBP-24],EAX 004BC9E3 > 33D2 XOR EDX,EDX 004BC9E5 > 33C0 XOR EAX,EAX 004BC9E7 > 40 INC EAX 004BC9E8 . 3D 00000020 CMP EAX,20000000 004BC9ED .^ 75 F8 JNZ SHORT 007.004BC9E7 004BC9EF . 42 INC EDX 004BC9F0 . 81FA 00000020 CMP EDX,20000000 004BC9F6 .^ 75 ED JNZ SHORT 007.004BC9E5 004BC9F8 . FF45 DC INC DWORD PTR SS:[EBP-24] 004BC9FB . 817D DC 00000>CMP DWORD PTR SS:[EBP-24],20000000 004BCA02 .^ 75 DF JNZ SHORT 007.004BC9E3 004BCA04 . 33C0 XOR EAX,EAX 004BCA06 . 8945 DC MOV DWORD PTR SS:[EBP-24],EAX 004BCA09 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCA0B . E8 6021F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCA10 . FF45 DC INC DWORD PTR SS:[EBP-24] 004BCA13 . 817D DC 00000>CMP DWORD PTR SS:[EBP-24],20000000 004BCA1A .^ 75 ED JNZ SHORT 007.004BCA09 004BCA1C . 33C0 XOR EAX,EAX 004BCA1E . 8945 DC MOV DWORD PTR SS:[EBP-24],EAX 004BCA21 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCA23 . E8 4821F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCA28 . FF45 DC INC DWORD PTR SS:[EBP-24] 004BCA2B . 817D DC 00000>CMP DWORD PTR SS:[EBP-24],20000000 004BCA32 .^ 75 ED JNZ SHORT 007.004BCA21 004BCA34 . E8 537CF4FF CALL 007.0040468C 004BCA39 > 85F6 TEST ESI,ESI 004BCA3B . 74 0D JE SHORT 007.004BCA4A 004BCA3D . 56 PUSH ESI 004BCA3E . E8 C1DEFFFF CALL 007.004BA904 004BCA43 . 8BC6 MOV EAX,ESI 004BCA45 . E8 E65DF4FF CALL 007.00402830 004BCA4A > 8A45 F3 MOV AL,BYTE PTR SS:[EBP-D] 004BCA4D . 8B75 D0 MOV ESI,DWORD PTR SS:[EBP-30] 004BCA50 . 8B5D D4 MOV EBX,DWORD PTR SS:[EBP-2C] 004BCA53 . 8BE5 MOV ESP,EBP 004BCA55 . 5D POP EBP 004BCA56 . C2 1400 RETN 14 004BCA59 00 DB 00 004BCA5A 00 DB 00 004BCA5B 00 DB 00 004BCA5C . 32 39 33 32 3>ASCII "29323468",0 004BCA65 00 DB 00 004BCA66 00 DB 00 004BCA67 00 DB 00 004BCA68 $ 55 PUSH EBP 004BCA69 . 8BEC MOV EBP,ESP 004BCA6B . 81C4 D4FEFFFF ADD ESP,-12C 004BCA71 . 53 PUSH EBX 004BCA72 . 56 PUSH ESI 004BCA73 . 894D F4 MOV DWORD PTR SS:[EBP-C],ECX 004BCA76 . 8855 FB MOV BYTE PTR SS:[EBP-5],DL 004BCA79 . 8945 FC MOV DWORD PTR SS:[EBP-4],EAX 004BCA7C . C645 F3 00 MOV BYTE PTR SS:[EBP-D],0 004BCA80 . E8 53A8F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCA85 . 8BD8 MOV EBX,EAX 004BCA87 . 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14] 004BCA8A . 50 PUSH EAX 004BCA8B . 6A 00 PUSH 0 004BCA8D . E8 56DDFFFF CALL 007.004BA7E8 004BCA92 . 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] 004BCA95 . E8 DAC3F4FF CALL 007.00408E74 004BCA9A . 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX 004BCA9D . 8D45 EC LEA EAX,DWORD PTR SS:[EBP-14] 004BCAA0 . 50 PUSH EAX 004BCAA1 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCAA4 . 50 PUSH EAX 004BCAA5 . E8 3EDDFFFF CALL 007.004BA7E8 004BCAAA . 85C0 TEST EAX,EAX 004BCAAC . 0F85 00030000 JNZ 007.004BCDB2 004BCAB2 . 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] 004BCAB5 . B9 5C000000 MOV ECX,5C 004BCABA . 33D2 XOR EDX,EDX 004BCABC . F7F1 DIV ECX 004BCABE . 8945 E8 MOV DWORD PTR SS:[EBP-18],EAX 004BCAC1 . 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18] 004BCAC4 . 48 DEC EAX 004BCAC5 . 85C0 TEST EAX,EAX 004BCAC7 . 0F8C F7000000 JL 007.004BCBC4 004BCACD . 40 INC EAX 004BCACE . 8945 D4 MOV DWORD PTR SS:[EBP-2C],EAX 004BCAD1 . 33F6 XOR ESI,ESI 004BCAD3 > E8 00A8F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCAD8 . 33D2 XOR EDX,EDX 004BCADA . 52 PUSH EDX 004BCADB . 50 PUSH EAX 004BCADC . 8D83 E8030000 LEA EAX,DWORD PTR DS:[EBX+3E8] 004BCAE2 . 99 CDQ 004BCAE3 . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BCAE7 . 75 09 JNZ SHORT 007.004BCAF2 004BCAE9 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BCAEC . 5A POP EDX 004BCAED . 58 POP EAX 004BCAEE . 73 4F JNB SHORT 007.004BCB3F 004BCAF0 . EB 04 JMP SHORT 007.004BCAF6 004BCAF2 > 5A POP EDX 004BCAF3 . 58 POP EAX 004BCAF4 . 7D 49 JGE SHORT 007.004BCB3F 004BCAF6 > 33DB XOR EBX,EBX 004BCAF8 > 33D2 XOR EDX,EDX 004BCAFA > 33C0 XOR EAX,EAX 004BCAFC > 40 INC EAX 004BCAFD . 3D 00000020 CMP EAX,20000000 004BCB02 .^ 75 F8 JNZ SHORT 007.004BCAFC 004BCB04 . 42 INC EDX 004BCB05 . 81FA 00000020 CMP EDX,20000000 004BCB0B .^ 75 ED JNZ SHORT 007.004BCAFA 004BCB0D . 43 INC EBX 004BCB0E . 81FB 00000020 CMP EBX,20000000 004BCB14 .^ 75 E2 JNZ SHORT 007.004BCAF8 004BCB16 . 33DB XOR EBX,EBX 004BCB18 > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCB1A . E8 5120F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCB1F . 43 INC EBX 004BCB20 . 81FB 00000020 CMP EBX,20000000 004BCB26 .^ 75 F0 JNZ SHORT 007.004BCB18 004BCB28 . 33DB XOR EBX,EBX 004BCB2A > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCB2C . E8 3F20F5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCB31 . 43 INC EBX 004BCB32 . 81FB 00000020 CMP EBX,20000000 004BCB38 .^ 75 F0 JNZ SHORT 007.004BCB2A 004BCB3A . E8 4D7BF4FF CALL 007.0040468C 004BCB3F > E8 94A7F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCB44 . 8BD8 MOV EBX,EAX 004BCB46 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB49 . 8A40 50 MOV AL,BYTE PTR DS:[EAX+50] 004BCB4C . 3A05 3C515300 CMP AL,BYTE PTR DS:[53513C] 004BCB52 . 75 62 JNZ SHORT 007.004BCBB6 004BCB54 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB57 . 8A40 51 MOV AL,BYTE PTR DS:[EAX+51] 004BCB5A . 3A05 3D515300 CMP AL,BYTE PTR DS:[53513D] 004BCB60 . 75 54 JNZ SHORT 007.004BCBB6 004BCB62 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB65 . 8A40 52 MOV AL,BYTE PTR DS:[EAX+52] 004BCB68 . 3A05 3E515300 CMP AL,BYTE PTR DS:[53513E] 004BCB6E . 75 46 JNZ SHORT 007.004BCBB6 004BCB70 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB73 . 8A40 53 MOV AL,BYTE PTR DS:[EAX+53] 004BCB76 . 3A05 3F515300 CMP AL,BYTE PTR DS:[53513F] 004BCB7C . 75 38 JNZ SHORT 007.004BCBB6 004BCB7E . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB81 . 8A40 54 MOV AL,BYTE PTR DS:[EAX+54] 004BCB84 . 3A05 40515300 CMP AL,BYTE PTR DS:[535140] 004BCB8A . 75 2A JNZ SHORT 007.004BCBB6 004BCB8C . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB8F . 8A40 55 MOV AL,BYTE PTR DS:[EAX+55] 004BCB92 . 3A05 41515300 CMP AL,BYTE PTR DS:[535141] 004BCB98 . 75 1C JNZ SHORT 007.004BCBB6 004BCB9A . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCB9D . 8A40 56 MOV AL,BYTE PTR DS:[EAX+56] 004BCBA0 . 3A05 42515300 CMP AL,BYTE PTR DS:[535142] 004BCBA6 . 75 0E JNZ SHORT 007.004BCBB6 004BCBA8 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCBAB . 8A40 57 MOV AL,BYTE PTR DS:[EAX+57] 004BCBAE . 3A05 43515300 CMP AL,BYTE PTR DS:[535143] 004BCBB4 . 74 0E JE SHORT 007.004BCBC4 004BCBB6 > 8345 E4 5C ADD DWORD PTR SS:[EBP-1C],5C 004BCBBA . 46 INC ESI 004BCBBB . FF4D D4 DEC DWORD PTR SS:[EBP-2C] 004BCBBE .^ 0F85 0FFFFFFF JNZ 007.004BCAD3 004BCBC4 > 8BC6 MOV EAX,ESI 004BCBC6 . 99 CDQ 004BCBC7 . 52 PUSH EDX 004BCBC8 . 50 PUSH EAX 004BCBC9 . 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18] 004BCBCC . 33D2 XOR EDX,EDX 004BCBCE . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BCBD2 . 75 0C JNZ SHORT 007.004BCBE0 004BCBD4 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BCBD7 . 5A POP EDX 004BCBD8 . 58 POP EAX 004BCBD9 . 77 0D JA SHORT 007.004BCBE8 004BCBDB . E9 55020000 JMP 007.004BCE35 004BCBE0 > 5A POP EDX 004BCBE1 . 58 POP EAX 004BCBE2 . 0F8E 4D020000 JLE 007.004BCE35 004BCBE8 > E8 EBA6F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCBED . 33D2 XOR EDX,EDX 004BCBEF . 52 PUSH EDX 004BCBF0 . 50 PUSH EAX 004BCBF1 . 8D83 E8030000 LEA EAX,DWORD PTR DS:[EBX+3E8] 004BCBF7 . 99 CDQ 004BCBF8 . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BCBFC . 75 09 JNZ SHORT 007.004BCC07 004BCBFE . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BCC01 . 5A POP EDX 004BCC02 . 58 POP EAX 004BCC03 . 73 4F JNB SHORT 007.004BCC54 004BCC05 . EB 04 JMP SHORT 007.004BCC0B 004BCC07 > 5A POP EDX 004BCC08 . 58 POP EAX 004BCC09 . 7D 49 JGE SHORT 007.004BCC54 004BCC0B > 33DB XOR EBX,EBX 004BCC0D > 33D2 XOR EDX,EDX 004BCC0F > 33C0 XOR EAX,EAX 004BCC11 > 40 INC EAX 004BCC12 . 3D 00000020 CMP EAX,20000000 004BCC17 .^ 75 F8 JNZ SHORT 007.004BCC11 004BCC19 . 42 INC EDX 004BCC1A . 81FA 00000020 CMP EDX,20000000 004BCC20 .^ 75 ED JNZ SHORT 007.004BCC0F 004BCC22 . 43 INC EBX 004BCC23 . 81FB 00000020 CMP EBX,20000000 004BCC29 .^ 75 E2 JNZ SHORT 007.004BCC0D 004BCC2B . 33DB XOR EBX,EBX 004BCC2D > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCC2F . E8 3C1FF5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCC34 . 43 INC EBX 004BCC35 . 81FB 00000020 CMP EBX,20000000 004BCC3B .^ 75 F0 JNZ SHORT 007.004BCC2D 004BCC3D . 33DB XOR EBX,EBX 004BCC3F > 6A 0A PUSH 0A ; /Timeout = 10. ms 004BCC41 . E8 2A1FF5FF CALL <JMP.&kernel32.Sleep> ; \Sleep 004BCC46 . 43 INC EBX 004BCC47 . 81FB 00000020 CMP EBX,20000000 004BCC4D .^ 75 F0 JNZ SHORT 007.004BCC3F 004BCC4F . E8 387AF4FF CALL 007.0040468C 004BCC54 > E8 7FA6F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCC59 . 8BD8 MOV EBX,EAX 004BCC5B . C745 DC 08000>MOV DWORD PTR SS:[EBP-24],8 004BCC62 . C745 E0 01000>MOV DWORD PTR SS:[EBP-20],1 004BCC69 . 8D45 DC LEA EAX,DWORD PTR SS:[EBP-24] 004BCC6C . 50 PUSH EAX 004BCC6D . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCC70 . 50 PUSH EAX 004BCC71 . E8 3AF0FFFF CALL 007.004BBCB0 004BCC76 . 85C0 TEST EAX,EAX 004BCC78 . 0F85 34010000 JNZ 007.004BCDB2 004BCC7E . A1 18515300 MOV EAX,DWORD PTR DS:[535118] 004BCC83 . 50 PUSH EAX 004BCC84 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCC87 . 50 PUSH EAX 004BCC88 . E8 33E4FFFF CALL 007.004BB0C0 004BCC8D . 85C0 TEST EAX,EAX 004BCC8F . 0F85 1D010000 JNZ 007.004BCDB2 004BCC95 . 68 A1000000 PUSH 0A1 004BCC9A . 6A 08 PUSH 8 004BCC9C . 68 40CE4B00 PUSH 007.004BCE40 ; ASCII "29323468" 004BCCA1 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCCA4 . 50 PUSH EAX 004BCCA5 . E8 02E6FFFF CALL 007.004BB2AC 004BCCAA . 85C0 TEST EAX,EAX 004BCCAC . 0F85 00010000 JNZ 007.004BCDB2 004BCCB2 . C685 54FFFFFF>MOV BYTE PTR SS:[EBP-AC],0 004BCCB9 . C685 55FFFFFF>MOV BYTE PTR SS:[EBP-AB],0 004BCCC0 . 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28] 004BCCC3 . 50 PUSH EAX 004BCCC4 . 68 80000000 PUSH 80 004BCCC9 . 8D85 D4FEFFFF LEA EAX,DWORD PTR SS:[EBP-12C] 004BCCCF . 50 PUSH EAX 004BCCD0 . 6A 02 PUSH 2 004BCCD2 . 8D85 54FFFFFF LEA EAX,DWORD PTR SS:[EBP-AC] 004BCCD8 . 50 PUSH EAX 004BCCD9 . 6A 00 PUSH 0 004BCCDB . A1 1C515300 MOV EAX,DWORD PTR DS:[53511C] 004BCCE0 . 50 PUSH EAX 004BCCE1 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCCE4 . 50 PUSH EAX 004BCCE5 . E8 46F0FFFF CALL 007.004BBD30 004BCCEA . 85C0 TEST EAX,EAX 004BCCEC . 0F85 C0000000 JNZ 007.004BCDB2 004BCCF2 . C685 54FFFFFF>MOV BYTE PTR SS:[EBP-AC],1 004BCCF9 . 8A45 FB MOV AL,BYTE PTR SS:[EBP-5] 004BCCFC . 8885 55FFFFFF MOV BYTE PTR SS:[EBP-AB],AL 004BCD02 . 33C9 XOR ECX,ECX 004BCD04 . 8A4D FB MOV CL,BYTE PTR SS:[EBP-5] 004BCD07 . 8D85 56FFFFFF LEA EAX,DWORD PTR SS:[EBP-AA] 004BCD0D . 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4] 004BCD10 . E8 5BAFF4FF CALL 007.00407C70 004BCD15 . 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28] 004BCD18 . 50 PUSH EAX 004BCD19 . 68 80000000 PUSH 80 004BCD1E . 8D85 D4FEFFFF LEA EAX,DWORD PTR SS:[EBP-12C] 004BCD24 . 50 PUSH EAX 004BCD25 . 33C0 XOR EAX,EAX 004BCD27 . 8A45 FB MOV AL,BYTE PTR SS:[EBP-5] 004BCD2A . 83C0 02 ADD EAX,2 004BCD2D . 50 PUSH EAX 004BCD2E . 8D85 54FFFFFF LEA EAX,DWORD PTR SS:[EBP-AC] 004BCD34 . 50 PUSH EAX 004BCD35 . 6A 00 PUSH 0 004BCD37 . A1 1C515300 MOV EAX,DWORD PTR DS:[53511C] 004BCD3C . 50 PUSH EAX 004BCD3D . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCD40 . 50 PUSH EAX 004BCD41 . E8 EAEFFFFF CALL 007.004BBD30 004BCD46 . 85C0 TEST EAX,EAX 004BCD48 . 75 68 JNZ SHORT 007.004BCDB2 004BCD4A . C685 54FFFFFF>MOV BYTE PTR SS:[EBP-AC],2 004BCD51 . C685 55FFFFFF>MOV BYTE PTR SS:[EBP-AB],0 004BCD58 . 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28] 004BCD5B . 50 PUSH EAX 004BCD5C . 68 80000000 PUSH 80 004BCD61 . 8D85 D4FEFFFF LEA EAX,DWORD PTR SS:[EBP-12C] 004BCD67 . 50 PUSH EAX 004BCD68 . 6A 02 PUSH 2 004BCD6A . 8D85 54FFFFFF LEA EAX,DWORD PTR SS:[EBP-AC] 004BCD70 . 50 PUSH EAX 004BCD71 . 6A 00 PUSH 0 004BCD73 . A1 1C515300 MOV EAX,DWORD PTR DS:[53511C] 004BCD78 . 50 PUSH EAX 004BCD79 . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] 004BCD7C . 50 PUSH EAX 004BCD7D . E8 AEEFFFFF CALL 007.004BBD30 004BCD82 . 85C0 TEST EAX,EAX 004BCD84 . 75 2C JNZ SHORT 007.004BCDB2 004BCD86 . 80BD D4FEFFFF>CMP BYTE PTR SS:[EBP-12C],0 004BCD8D . 75 23 JNZ SHORT 007.004BCDB2 004BCD8F . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 004BCD92 . 8A95 D5FEFFFF MOV DL,BYTE PTR SS:[EBP-12B] 004BCD98 . 8810 MOV BYTE PTR DS:[EAX],DL 004BCD9A . 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] 004BCD9D . 0FB609 MOVZX ECX,BYTE PTR DS:[ECX] 004BCDA0 . 8D95 D6FEFFFF LEA EDX,DWORD PTR SS:[EBP-12A] 004BCDA6 . 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] 004BCDA9 . E8 C2AEF4FF CALL 007.00407C70 004BCDAE . C645 F3 01 MOV BYTE PTR SS:[EBP-D],1 004BCDB2 > E8 21A5F4FF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount 004BCDB7 . 33D2 XOR EDX,EDX 004BCDB9 . 52 PUSH EDX 004BCDBA . 50 PUSH EAX 004BCDBB . 8D83 983A0000 LEA EAX,DWORD PTR DS:[EBX+3A98] 004BCDC1 . 99 CDQ 004BCDC2 . 3B5424 04 CMP EDX,DWORD PTR SS:[ESP+4] 004BCDC6 . 75 09 JNZ SHORT 007.004BCDD1 004BCDC8 . 3B0424 CMP EAX,DWORD PTR SS:[ESP] 004BCDCB . 5A POP EDX 004BCDCC . 58 POP EAX 004BCDCD . EB 4F JMP SHORT 007.004BCE1E 004BCDCF . EB 04 JMP SHORT 007.004BCDD5 004BCDD1 > 5A POP EDX 004BCDD2 . 58 POP EAX 004BCDD3 . 7D 49 JGE SHORT 007.004BCE1E 004BCDD5 > 33F6 XOR ESI,ESI 004BCDD7 > 33D2 XOR EDX,EDX 004BCDD9 > 33C0 XOR EAX,EAX 004BCDDB > 40 INC EAX 004BCDDC . 3D 00000020 CMP EAX,20000000 004BCDE1 .^ 75 F8 JNZ SHORT 007.004BCDDB 004BCDE3 . 42 INC EDX 004BCDE4 . 81FA 00000020 CMP EDX,20000000 ............................. 2007-12-9 18:05 0
htsf110 雪币： 218 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 3 回帖 78 粉丝 0 关注私信	htsf110 12 楼 themida 1.0.0.5你都没脱壳.软件还加了反调试 2007-12-9 21:41 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复