|
0056DD9F JMP 0056DE42
0056DE5B JMP 0056DF7D
0056DE60 NOP
0056DE61 NOP
0056DE62 NOP
0056DF79 NOP
0056DF7A NOP
0056DF7B NOP
0056DF7C NOP
0056DF7D MOV EAX, 005D1C09
0056DF82 MOV DWORD PTR SS:[EBP-20],EAX
0056E3F5 NOP
0056E3F6 LEA ECX,DWORD PTR SS:[EBP-58C]
0056E3FC MOV EDX, 0056F5AC ; ASCII \"200****0101\"
0056E401 MOV EAX,DWORD PTR DS:[ESI+40]
0056E404 CALL 0054A844
0056E409 MOV EAX,DWORD PTR SS:[EBP-58C]
0056E40F CALL 00***04CEC
0056E414 PUSH EAX
0056E415 LEA EAX,DWORD PTR SS:[EBP-58C]
0056E41B CALL 00***04F44
0056E420 LEA EDX,DWORD PTR DS:[ 5D1C7C]
0056E426 POP ECX
0056E427 CALL 00***02AC4
0056E42C NOP
0056E42D MOV EAX, 005D1CAC
0056E432 MOV DWORD PTR SS:[EBP-14],EAX
0056E435 MOV EAX,DWORD PTR SS:[EBP-14]
0056E438 CALL 00***04CEC
0056E43D PUSH EAX
0056E43E LEA EAX,DWORD PTR SS:[EBP-14]
0056E441 CALL 00***04F44
0056E446 LEA EDX,DWORD PTR DS:[12F33C]
0056E44C POP ECX
0056E44D CALL 00***02AC4
0056E452 XOR EAX,EAX
0056E454 PUSH EBP
0056E455 PUSH 0056E824
0056E45A PUSH DWORD PTR FS:[EAX]
0056E45D MOV DWORD PTR FS:[EAX],ESP
0056E460 PUSH 5D1C7C
0056E465 LEA ECX,DWORD PTR SS:[EBP-10]
0056E468 MOV EDX, 5D1C7C
0056E46D MOV EAX,EBX
0056E46F CALL 0054A844
0056E474 PUSH DWORD PTR SS:[EBP-10]
0056E477 LEA EAX,DWORD PTR SS:[EBP-10]
0056E47A MOV EDX,2
0056E47F CALL 00***04DAC
0056E484 JMP SHORT 0056E4C8
0056E486 NOP
0056E487 NOP
0056E488 NOP
0056E489 NOP
0056E48A NOP
0056E48B NOP
0056E48C NOP
0056E48D NOP
0056E48E NOP
0056E62D JMP 0056E8F2
0056E8F2 MOV DL,1
0056E8F4 MOV EAX,DWORD PTR DS:[418F80]
0056E8F9 CALL 00***03BCC
0056E8FE MOV EBX,EAX
0056E900 LEA EDX,DWORD PTR SS:[EBP-5A8]
0056E906 XOR EAX,EAX
0056E908 CALL 00***02BF0
0056E90D MOV EAX,DWORD PTR SS:[EBP-5A8]
0056E913 LEA EDX,DWORD PTR SS:[EBP-5A4]
0056E919 CALL 0040A12C
0056E91E LEA EAX,DWORD PTR SS:[EBP-5A4]
0056E924 MOV EDX, 005D1C1A
0056E929 CALL 00***04CF4
0056E92E MOV EDX,DWORD PTR SS:[EBP-5A4]
0056E934 MOV EAX,EBX
0056E936 CALL 0041E44C
0056E93B PUSH 0
0056E93D PUSH 0
0056E93F MOV EAX,EBX
0056E941 CALL 41DC38
0056E946 NOP
0056E947 LEA EDX,DWORD PTR SS:[EBP-20]
0056E94A MOV EAX,DWORD PTR DS:[5DFCF0]
0056E94F MOV EAX,DWORD PTR DS:[EAX+348]
0056E955 CALL 004C5E70
0056E95A MOV EDX,DWORD PTR SS:[EBP-20]
0056E95D MOV EAX,EBX
0056E95F CALL 0041E378
0056E964 MOV EAX,EBX
0056E966 CALL 00***03BFC
0056E96B NOP
0056E96C MOV EAX, 05D1C41
0056E971 MOV DWORD PTR SS:[EBP-1C],EAX
0056E974 MOV EDX,DWORD PTR SS:[EBP-1C]
0056EB7F JMP 0056EC8E
0056EB84 NOP
0056EB85 NOP
0056EB86 NOP
0056EC94 MOV EDX,0
0056ECB6 PUSH 1
0056ECB8 NOP
0056ECB9 NOP
0056ECBA NOP
0056ECC0 JMP 0056EE0F
0056ECC5 NOP
0056ECC6 NOP
0056EE80 JMP 0056EF0A
0056EE85 NOP
0056EE86 NOP
0056EF6D JMP 0056F088
0056EF72 NOP
0056EF73 NOP
0054A55F |. /0F84 070****0000 je0054A66C 将此句直接NOP 掉 (加密函数里的)
005D1B00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005D1B10 FF FF FF FF 05 00 00 00 31 31 31 31 31 00 00 00 ...11***11...
005D1B20 00 FF FF FF FF 0E 00 00 00 63 61 63 68 65 5C 32 . ...cache\\2
005D1B30 30 30 37 2E 64 61 74 00 00 00 00 FF FF FF FF 08 007.dat....
005D1B40 00 00 00 FF FF FF FF E0 03 00 00 00 00 00 20 44 ... ?..... D
005D1B50 61 79 20 57 61 6E 20 4B 69 6E 67 20 26 20 90 DB ay Wan King & 愛
005D1B60 A4 CE CE A8 C3 C0 C9 F1 D4 92 20 26 20 44 65 70 のshwy & Dep
005D1B70 72 61 76 65 64 20 41 6E 67 65 6C 20 00 00 00 00 raved Angel ....
005D1B80 00 00 00 FF FF FF FF 20 00 00 00 00 00 00 00 00 ... ........
005D1B90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005D1BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005D1BB0 00 00 00 FF FF FF FF 08 00 00 00 FF FF FF FF E0 ... ...
005D1BD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005D1BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005D1BF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ |
|