Ë㷨dz̽¡ª¡ªÑ¶ÎªÍ¨Óð칫Óë¿Í»§¹ÜÀíϵͳ
V6.2 רҵ°æ
ÏÂÔØÒ³Ã棺 http://www.skycn.com/soft/10011.html
Èí¼þ´óС£º
2542 KB
Èí¼þÓïÑÔ£º ¼òÌåÖÐÎÄ
Èí¼þÀà±ð£º ¹ú²úÈí¼þ / ¹²Ïí°æ / ÐÅÏ¢¹ÜÀí
Ó¦ÓÃƽ̨£º Win9x/NT/2000/XP
¼ÓÈëʱ¼ä£º
2003-04-30 08:41:09
ÏÂÔØ´ÎÊý£º 1114
ÍƼöµÈ¼¶£º ***
¿ª ·¢ ÉÌ£º http://www.timenote.com/
¡¾Èí¼þ¼ò½é¡¿£ºÑ¶ÎªÍ¨Óð칫Óë¿Í»§¹ÜÀíϵͳ´ó·ù¶ÈÌá¸ßÏúÊÛÈËÔ±Òµ¼¨£¬È«Ãæ¸ÄÉư칫ЧÂÊ£¬ÓÐЧ´Ù½øÈËÔ±¡¢²¿ÃÅÖ®¼äÐ×÷µÄÏîÄ¿Ðͬ°ì¹«(OA)Óë¿Í»§¹Øϵ¹ÜÀí(CRM)Èí¼þ¡£.¹¦ÄÜÌص㣺´ó·ù¶ÈÌá¸ßÏúÊÛÒµ¼¨£¬È«Ãæ¸ÄÉư칫ЧÂÊ.ÊÊÓöÔÏó£ºÊÊÓø÷ÐÐÒµÖÐСÐ͹«Ë¾£¬²¿ÃÅ£¬¸öÈË(²¿ÃžÀí¡¢¿Í»§Êг¡ÈËÔ±)µÈÐͬ°ì¹«£¬ÒÔ¼°¿Í»§ÓªÏú¹ÜÀí¡£
¡¾Èí¼þÏÞÖÆ¡¿£ºÊÔÓÃ50´Î
¡¾×÷ÕßÉùÃ÷¡¿£º³õѧCrack£¬Ö»ÊǸÐÐËȤ£¬Ã»ÓÐÆäËüÄ¿µÄ¡£Ê§ÎóÖ®´¦¾´ÇëÖîλ´óÏÀ´Í½Ì£¡
¡¾Æƽ⹤¾ß¡¿£ºTRW2000ÍÞÍÞÐ޸İ桢Ollydbg1.09¡¢PEiD¡¢AspackDie¡¢W32Dasm 9.0°×½ð°æ
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
¡¾¹ý
³Ì¡¿£º
ѶΪͨÓð칫Óë¿Í»§¹ÜÀíϵͳ.exe ÊÇASPack 2.12¿Ç£¬ÓÃAspackDieÍÑÖ®¡£1.25M->6.33M¡£
Delphi ±àд¡£
Èí¼þ¸ù¾Ý×¢²áÂëµÄ²»Í¬·ÖΪ4¸ö°æ±¾¡£ºÇºÇ£¬ÎÒÊÔÊÔ×î¸ß¼¶±ðµÄ°æ±¾°É¡£
Óû§Ãû£ºfly
ÊÔÁ¶Â룺13572468
Óû§Êý£º²»ÏÞÓû§
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
:005D880B
E8FCDAE5FF call 0043630C
:005D8810
8B45EC mov eax,
dword ptr [ebp-14]
:005D8813 8D55F0
lea edx, dword ptr [ebp-10]
:005D8816 E87D12E3FF
call 00409A98
:005D881B 837DF000
cmp dword ptr [ebp-10], 00000000
====>ûÓÐÓû§Ãû£¿
:005D881F
751D jne
005D883E
:005D8821 6A00
push 00000000
* Possible StringData
Ref from Code Obj ->"Ìáʾ"
|
:005D8823
B9008C5D00 mov ecx, 005D8C00
*
Possible StringData Ref from Code Obj ->"ÇëÊäÈëÓû§Ãû£¡"
|
:005D8828 BA088C5D00
mov edx, 005D8C08
:005D882D A180605F00
mov eax, dword ptr [005F6080]
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005D87CB(C)
|
:005D8832
8B00 mov
eax, dword ptr [eax]
:005D8834 E87FD4E7FF
call 00455CB8
:005D8839 E91A030000
jmp 005D8B58
* Referenced by
a (U)nconditional or (C)onditional Jump at Address:
|:005D881F(C)
|
:005D883E
8D55E4 lea edx,
dword ptr [ebp-1C]
:005D8841 8B83DC020000
mov eax, dword ptr [ebx+000002DC]
:005D8847 E8C0DAE5FF
call 0043630C
:005D884C 8B45E4
mov eax, dword ptr [ebp-1C]
:005D884F
8D55E8 lea edx,
dword ptr [ebp-18]
:005D8852 E84112E3FF
call 00409A98
:005D8857 837DE800
cmp dword ptr [ebp-18], 00000000
====>ûÓÐ×¢²áÂ룿
:005D885B 751D
jne 005D887A
:005D885D
6A00 push
00000000
* Possible StringData Ref from Code Obj
->"Ìáʾ"
|
:005D885F B9008C5D00
mov ecx, 005D8C00
*
Possible StringData Ref from Code Obj ->"ÇëÊäÈë×¢²áÂ룡"
|
:005D8864 BA188C5D00
mov edx, 005D8C18
:005D8869 A180605F00
mov eax, dword ptr [005F6080]
:005D886E 8B00
mov eax, dword ptr [eax]
:005D8870
E843D4E7FF call 00455CB8
:005D8875
E9DE020000 jmp 005D8B58
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005D885B(C)
|
:005D887A
8B8314030000 mov eax, dword ptr [ebx+00000314]
:005D8880
E8E353E5FF call 0042DC68
:005D8885
83F804 cmp eax,
00000004
:005D8888 7739
ja 005D88C3
:005D888A FF248591885D00
jmp dword ptr [4*eax+005D8891]
:005D8891 A5885D00
DWORD 005D88A5
:005D8895
AC885D00 DWORD 005D88AC
:005D8899
B3885D00 DWORD 005D88B3
:005D889D
BA885D00 DWORD 005D88BA
:005D88A1
C1885D00 DWORD 005D88C1
:005D88A5
BE01000000 mov esi, 00000001
====>1Óû§
:005D88AA
EB17 jmp
005D88C3
:005D88AC BE03000000 mov
esi, 00000003
====>3Óû§
:005D88B1
EB10 jmp
005D88C3
:005D88B3 BE05000000 mov
esi, 00000005
====>5Óû§
:005D88B8
EB09 jmp
005D88C3
:005D88BA BE0A000000 mov
esi, 0000000A
====>10Óû§
:005D88BF
EB02 jmp
005D88C3
:005D88C1 33F6
xor esi, esi
====>²»ÏÞÓû§
*
Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:005D8888(C),
:005D88AA(U), :005D88B1(U), :005D88B8(U), :005D88BF(U)
|
:005D88C3 8D45E0
lea eax, dword ptr
[ebp-20]
:005D88C6 50
push eax
:005D88C7 8D55D8
lea edx, dword ptr [ebp-28]
:005D88CA 8B83D8020000
mov eax, dword ptr [ebx+000002D8]
:005D88D0
E837DAE5FF call 0043630C
:005D88D5
8B45D8 mov eax,
dword ptr [ebp-28]
====>EAX=fly
̞
:005D88D8
8D55DC lea edx,
dword ptr [ebp-24]
:005D88DB E8B811E3FF
call 00409A98
:005D88E0 8B55DC
mov edx, dword ptr [ebp-24]
:005D88E3 A118615F00
mov eax, dword ptr [005F6118]
:005D88E8
8B00 mov
eax, dword ptr [eax]
:005D88EA 8BCE
mov ecx, esi
:005D88EC E86BCCFDFF
call 005B555C
====>¹Ø¼üCALL¢Ù£¡½øÈ룡
:005D88F1 8B45E0
mov eax, dword ptr [ebp-20]
====>EAX=MZAGBZLAZWKW ×¢²áÂë
:005D88F4
50 push
eax
:005D88F5 8D55D0
lea edx, dword ptr [ebp-30]
:005D88F8 8B83DC020000
mov eax, dword ptr [ebx+000002DC]
:005D88FE E809DAE5FF
call 0043630C
:005D8903 8B45D0
mov eax, dword ptr
[ebp-30]
====>EAX=13572468
ÊÔÁ¶Âë
:005D8906 8D55D4
lea edx, dword ptr [ebp-2C]
:005D8909
E88A11E3FF call 00409A98
:005D890E
8B55D4 mov edx,
dword ptr [ebp-2C]
====>±¬ÆƵã¢Ù£¡
:005D8911
58 pop
eax
:005D8912 E869B9E2FF call
00404280
====>±È½ÏCALL£¡
:005D8917
0F851E020000 jne 005D8B3B
====>ÌøÔòOVER£¡
====>ÏÂÃæÊDZ£´æ×¢²áÐÅÏ¢£¡
* Possible StringData Ref from
Code Obj ->"UUserName"
¡¡ ¡¡ Ê¡ ÂÔ ¡¡ ¡¡
:005D898A
8B45A0 mov eax,
dword ptr [ebp-60]
====>±¬ÆƵã¢Ú£¡
:005D898D
8D55A4 lea edx,
dword ptr [ebp-5C]
:005D8990 E80311E3FF
call 00409A98
:005D8995 8B55A4
mov edx, dword ptr [ebp-5C]
:005D8998 8D45A8
lea eax, dword ptr [ebp-58]
:005D899B
E8B4CBE2FF call 00405554
:005D89A0
8D45A8 lea eax,
dword ptr [ebp-58]
:005D89A3 50
push eax
:005D89A4 8B45FC
mov eax, dword ptr [ebp-04]
:005D89A7 E804F9F1FF
call 004F82B0
*
Possible StringData Ref from Code Obj ->"MMarkCode"
¡¡ ¡¡ Ê¡ ÂÔ ¡¡ ¡¡
* Referenced by a (U)nconditional or
(C)onditional Jump at Address:
|:005D8AF7(U)
|
:005D8B12 8B45F4
mov eax, dword ptr [ebp-0C]
:005D8B15
E88A1EEFFF call 004CA9A4
:005D8B1A
6A00 push
00000000
* Possible StringData Ref from Code Obj
->"Ìáʾ"
|
:005D8B1C B9008C5D00
mov ecx, 005D8C00
*
Possible StringData Ref from Code Obj ->"¹§Ï²Äú,×¢²á³É¹¦,ÇëÄúÖØÐÂÆô¶¯±¾ÏµÍ³£¡"
====>ºÇºÇ£¬Ê¤ÀûÅ®Éñ£¡
:005D8B21 BA6C8D5D00 mov
edx, 005D8D6C
:005D8B26 A180605F00
mov eax, dword ptr [005F6080]
:005D8B2B 8B00
mov eax, dword ptr [eax]
:005D8B2D
E886D1E7FF call 00455CB8
:005D8B32
8BC3 mov
eax, ebx
:005D8B34 E8D397E7FF call
0045230C
:005D8B39 EB1D
jmp 005D8B58
* Referenced by a (U)nconditional
or (C)onditional Jump at Address:
|:005D8917(C)
|
:005D8B3B E8504FE3FF
call 0040DA90
:005D8B40 6A00
push 00000000
*
Possible StringData Ref from Code Obj ->"´íÎó"
|
:005D8B42 B9948D5D00
mov ecx, 005D8D94
* Possible StringData Ref
from Code Obj ->"ÄúÊäÈëµÄ×¢²áÂë²»ÕýÈ·,ÇëÖØÐÂÊäÈ룡"
====>BAD BOY£¡
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
½øÈë¹Ø¼üCALL¢Ù£º005D88EC call 005B555C
*
Referenced by a CALL at Addresses:
|:005B52A2 , :005D88EC
|
:005B555C
55 push
ebp
:005B555D 8BEC
mov ebp, esp
:005B555F 6A00
push 00000000
:005B5561 6A00
push 00000000
:005B5563
6A00 push
00000000
:005B5565 6A00
push 00000000
:005B5567 6A00
push 00000000
:005B5569 53
push ebx
:005B556A
56 push
esi
:005B556B 57
push edi
:005B556C 8BD9
mov ebx, ecx
:005B556E 8955F8
mov dword ptr [ebp-08], edx
:005B5571
8945FC mov dword
ptr [ebp-04], eax
:005B5574 8B45F8
mov eax, dword ptr [ebp-08]
====>EAX=fly ̞
:005B5577
E8A8EDE4FF call 00404324
:005B557C
33C0 xor
eax, eax
:005B557E 55
push ebp
:005B557F 68E4565B00
push 005B56E4
:005B5584 64FF30
push dword ptr fs:[eax]
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005B5532(C)
|
:005B5587
648920 mov dword
ptr fs:[eax], esp
:005B558A 8B4508
mov eax, dword ptr [ebp+08]
:005B558D E85EE9E4FF
call 00403EF0
:005B5592 83FB0A
cmp ebx, 0000000A
:005B5595
0F87E3000000 ja 005B567E
:005B559B
FF249DA2555B00 jmp dword ptr [4*ebx+005B55A2]
:005B55A2
CE555B00 DWORD 005B55CE
:005B55A6
F4555B00 DWORD 005B55F4
:005B55AA
7E565B00 DWORD 005B567E
:005B55AE
17565B00 DWORD 005B5617
:005B55B2
7E565B00 DWORD 005B567E
:005B55B6
3A565B00 DWORD 005B563A
:005B55BA
7E565B00 DWORD 005B567E
:005B55BE
7E565B00 DWORD 005B567E
:005B55C2
7E565B00 DWORD 005B567E
:005B55C6
7E565B00 DWORD 005B567E
:005B55CA
5D565B00 DWORD 005B565D
:005B55CE
8B45F8 mov eax,
dword ptr [ebp-08]
====>EAX=fly
̞
:005B55D1
E89AEBE4FF call 00404170
====>EAX=È¡Óû§Ãû³¤¶È
:005B55D6
50 push
eax
====>EAX=3
:005B55D7
8D45F4 lea eax,
dword ptr [ebp-0C]
:005B55DA 50
push eax
:005B55DB 8B45F8
mov eax, dword ptr [ebp-08]
====>EAX=fly
̞
:005B55DE E851EDE4FF
call 00404334
:005B55E3 8BD0
mov edx, eax
:005B55E5 33C9
xor ecx,
ecx
:005B55E7 8B45FC
mov eax, dword ptr [ebp-04]
:005B55EA E879440000
call 005B9A68
====>¹Ø¼üCALL¢Ú£¡½øÈ룡
:005B55EF E98A000000 jmp 005B567E
¡¡ ¡¡ Ê¡ ÂÔ ¡¡ ¡¡
* Referenced by a
(U)nconditional or (C)onditional Jump at Addresses:
|:005B5595(C), :005B55EF(U),
:005B5615(U), :005B5638(U), :005B565B(U)
|
:005B567E 8D45F0
lea eax, dword ptr [ebp-10]
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
ÄÚ´æÖеÄÖµ£º
011E0978
D2 39 82 C2 61 DF F8 BF 89 1D 96 0D CF B4 73 4F
011E0988 20
20 20
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B5681
E86AE8E4FF call 00403EF0
:005B5686
8B45F4 mov eax,
dword ptr [ebp-0C]
:005B5689 E8E2EAE4FF
call 00404170
====>ÇóÉÏÃæ×Ö·û´®µÄ³¤¶È
:005B568E
8BF8 mov
edi, eax
====>EDI=EAX=13£¨H£©
:005B5690
85FF test
edi, edi
:005B5692 7E27
jle 005B56BB
:005B5694 BE01000000
mov esi, 00000001
* Referenced
by a (U)nconditional or (C)onditional Jump at Address:
|:005B56B9(C)
|
:005B5699
8B45F4 mov eax,
dword ptr [ebp-0C]
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
ÄÚ´æÖеÄÖµ£º
011E0978
D2 39 82 C2 61 DF F8 BF 89 1D 96 0D CF B4 73 4F
011E0988 20
20 20
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B569C
8A5C30FF mov bl, byte ptr
[eax+esi-01]
====>ÒÀ´ÎÈ¡ÉÏÃæµÄHEXÖµ
:005B56A0
8D55EC lea edx,
dword ptr [ebp-14]
:005B56A3 33C0
xor eax, eax
:005B56A5 8AC3
mov al, bl
:005B56A7 E86C46E5FF
call 00409D18
====>ÒÀ´ÎÈ¡ÉÏÃæHEXÖµµÄ10½øÖÆÖµ
:005B56AC
8B55EC mov edx,
dword ptr [ebp-14]
:005B56AF 8D45F0
lea eax, dword ptr [ebp-10]
:005B56B2 E8C1EAE4FF
call 00404178
====>Á¬½Óÿ´ÎÑ»·µÃµ½µÄÖµ
:005B56B7 46
inc esi
:005B56B8
4F dec
edi
:005B56B9 75DE
jne 005B5699
====>Ñ»·19´Î
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005B5692(C)
|
:005B56BB
8B4D08 mov ecx,
dword ptr [ebp+08]
:005B56BE 8B55F0
mov edx, dword ptr [ebp-10]
====>ÉÏÃæÑ»·µÃµ½Ò»×éÊý×Ö
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
ÄÚ´æÖеÄÖµ£º
011E9E7C
32 31 30 35 37 31 33 30 31 39 34 39 37 32 32 33 2105713019497223
011E9E8C
32 34 38 31 39 31 31 33 37 32 39 31 35 30 31 33 2481911372915013
011E9E9C
32 30 37 31 38 30 31 31 35 37 39 33 32 33 32 33 2071801157932323
011E9EAC
32
2
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B56C1
8B45FC mov eax,
dword ptr [ebp-04]
:005B56C4 E83B3C0000
call 005B9304
====>¹Ø¼üCALL¢Û£¡Éú³É×¢²áÂ룡
:005B56C9
33C0 xor
eax, eax
:005B56CB 5A
pop edx
:005B56CC 59
pop ecx
:005B56CD 59
pop ecx
:005B56CE
648910 mov dword
ptr fs:[eax], edx
:005B56D1 68EB565B00
push 005B56EB
* Referenced by a (U)nconditional
or (C)onditional Jump at Address:
|:005B56E9(U)
|
:005B56D6 8D45EC
lea eax, dword ptr [ebp-14]
:005B56D9
BA04000000 mov edx, 00000004
:005B56DE
E831E8E4FF call 00403F14
:005B56E3
C3 ret
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
½øÈë¹Ø¼üCALL¢Ú£º005B55EA call 005B9A68
*
Referenced by a CALL at Address:
|:005B55EA
|
:005B9A68 55
push ebp
:005B9A69
8BEC mov
ebp, esp
:005B9A6B 81C420FFFFFF add
esp, FFFFFF20
:005B9A71 53
push ebx
:005B9A72 56
push esi
:005B9A73 33DB
xor ebx, ebx
:005B9A75
899D20FFFFFF mov dword ptr [ebp+FFFFFF20],
ebx
:005B9A7B 894DFC
mov dword ptr [ebp-04], ecx
:005B9A7E 8BDA
mov ebx, edx
:005B9A80 33C0
xor eax, eax
:005B9A82
55 push
ebp
:005B9A83 68E59B5B00 push
005B9BE5
:005B9A88 64FF30
push dword ptr fs:[eax]
:005B9A8B 648920
mov dword ptr fs:[eax], esp
:005B9A8E
837DFC00 cmp dword ptr
[ebp-04], 00000000
:005B9A92 7531
jne 005B9AC5
:005B9A94 8D8520FFFFFF
lea eax, dword ptr [ebp+FFFFFF20]
:005B9A9A 8BD3
mov edx,
ebx
====>EDX=fly
̞
:005B9A9C
E807A6E4FF call 004040A8
:005B9AA1
8D8520FFFFFF lea eax, dword ptr [ebp+FFFFFF20]
*
Possible StringData Ref from Code Obj ->"
"
|
:005B9AA7
BAFC9B5B00 mov edx, 005B9BFC
====>EDX=16¸ö20£¨H£© ³ÌÐò×Ô¸ø
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
ÄÚ´æÖеÄÖµ£º
005B9BFC
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B9AAC
E8C7A6E4FF call 00404178
====>½«flyµÄHEXÖµºÍ16¸ö20£¨H£©Á¬½ÓÆðÀ´
:005B9AB1 8B8520FFFFFF mov eax, dword ptr [ebp+FFFFFF20]
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
[ebp+FFFFFF20]ÄÚ´æÖеÄÖµ£º
011E801C
66 6C 79 20 20 20 20 20 20 20 20 20 20 20 20 20
011E802C 20 20
20
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B9AB7
E878A8E4FF call 00404334
:005B9ABC
8945F8 mov dword
ptr [ebp-08], eax
:005B9ABF 83450C10
add dword ptr [ebp+0C], 00000010
:005B9AC3 EB03
jmp 005B9AC8
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005B9A92(C)
|
:005B9AC5
895DF8 mov dword
ptr [ebp-08], ebx
* Referenced by a (U)nconditional
or (C)onditional Jump at Address:
|:005B9AC3(U)
|
:005B9AC8 B201
mov dl, 01
*
Possible StringData Ref from Code Obj ->"¸QA"
|
:005B9ACA A178164100
mov eax, dword ptr [00411678]
:005B9ACF E82C96E4FF
call 00403100
:005B9AD4 8945F4
mov dword ptr [ebp-0C], eax
:005B9AD7
33D2 xor
edx, edx
:005B9AD9 55
push ebp
:005B9ADA 68C59B5B00
push 005B9BC5
:005B9ADF 64FF32
push dword ptr fs:[edx]
:005B9AE2 648922
mov dword ptr fs:[edx],
esp
:005B9AE5 8B55F8
mov edx, dword ptr [ebp-08]
:005B9AE8 8B4D0C
mov ecx, dword ptr [ebp+0C]
:005B9AEB 8B45F4
mov eax, dword ptr
[ebp-0C]
:005B9AEE 8B18
mov ebx, dword ptr [eax]
:005B9AF0 FF5308
call [ebx+08]
:005B9AF3 8B45F4
mov eax, dword ptr [ebp-0C]
:005B9AF6
E889B2E5FF call 00414D84
:005B9AFB
89450C mov dword
ptr [ebp+0C], eax
:005B9AFE 68A8595F00
push 005F59A8
* Possible StringData Ref from
Data Obj ->"))6Fevx"2BR&uˆ™ª»ÌÝ?"
|
:005B9B03 BAA0595F00
mov edx, 005F59A0
====>EDX=))6Fevx"2BR&uˆ™ª»ÌÝ?
³ÌÐò×Ô¸øµÄ²ÎÊý
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
ÄÚ´æÖеÄÖµ£º
005F59A0
19 29 29 36 46 65 76 78 15 22 32 42 52 26 75 88 ))6Fevx"2BR&u
005F59B0
99 AA BB CC DD EE FF
™ª»ÌÝîÿ.ÔSF
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B9B08
8D8524FFFFFF lea eax, dword ptr [ebp+FFFFFF24]
:005B9B0E
B908000000 mov ecx, 00000008
====>ECX=8
:005B9B13
E80C83FFFF call 005B1E24
:005B9B18
8B750C mov esi,
dword ptr [ebp+0C]
====>ESI=13
:005B9B1B
85F6 test
esi, esi
:005B9B1D 7903
jns 005B9B22
:005B9B1F 83C60F
add esi, 0000000F
* Referenced
by a (U)nconditional or (C)onditional Jump at Address:
|:005B9B1D(C)
|
:005B9B22
C1FE04 sar esi,
04
:005B9B25 85F6
test esi, esi
:005B9B27 7E4B
jle 005B9B74
:005B9B29 BB01000000
mov ebx, 00000001
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005B9B72(C)
|
:005B9B2E
837DFC00 cmp dword ptr
[ebp-04], 00000000
:005B9B32 751F
jne 005B9B53
:005B9B34 8B45F4
mov eax, dword ptr [ebp-0C]
:005B9B37
8B4004 mov eax,
dword ptr [eax+04]
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
ÄÚ´æÖеÄÖµ£º
00ABFB2C
66 6C 79 20 20 20 20 20 20 20 20 20 20 20 20 20 fly
00ABFB3C 20
20 20
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B9B3A
8BD3 mov
edx, ebx
:005B9B3C 4A
dec edx
:005B9B3D C1E204
shl edx, 04
:005B9B40 03C2
add eax, edx
:005B9B42 8BC8
mov ecx,
eax
:005B9B44 8BD0
mov edx, eax
:005B9B46 8D8524FFFFFF
lea eax, dword ptr [ebp+FFFFFF24]
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
ÄÚ´æÖеÄÖµ£º
00C8F158
15 22 32 42 52 26 75 88 99 AA BB CC DD EE FF 00 "2BR&uˆ™ª»ÌÝ?.52
2
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B9B4C
E85B87FFFF call 005B22AC
====>¹Ø¼üCALL¢Ü£¡½øÈ룡
:005B9B51 EB1D jmp 005B9B70
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
½øÈë¹Ø¼üCALL¢Ü£º005B9B4C
call 005B22AC
* Referenced by a CALL at
Addresses:
|:005B94AC , :005B9654 , :005B97FC , :005B99A4
, :005B9B4C
|
:005B22AC 53
push ebx
:005B22AD 56
push esi
:005B22AE
8BD9 mov
ebx, ecx
:005B22B0 8BF0
mov esi, eax
:005B22B2 6A10
push 00000010
:005B22B4 8D4610
lea eax, dword ptr [esi+10]
:005B22B7
8BCB mov
ecx, ebx
:005B22B9 92
xchg eax,edx
:005B22BA E8FDFAFFFF
call 005B1DBC
====>¹Ø¼üCALL¢Ý£¡½øÈ룡
:005B22BF 8BC6 mov eax, esi
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
ÄÚ´æÖеÄÖµ£º
00C8F158
15 22 32 42 52 26 75 88 99 AA BB CC DD EE FF 00 "2BR&uˆ™ª»ÌÝ?.52
2
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B22C1
8BCB mov
ecx, ebx
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
ÄÚ´æÖеÄÖµÊÇÉÏÃæ¹Ø¼üCALL¢ÝÔËËãµÃ³öµÄ£º
00AE5064
73 4E 4B 62 72 06 55 A8 B9 8A 9B EC FD CE DF 20
00AE5074 20
20 20
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B22C3
8BD3 mov
edx, ebx
:005B22C5 E81EFDFFFF call
005B1FE8
====>¹Ø¼üCALL¢Þ£¡½øÈ룡
:005B22CA
8D5610 lea edx,
dword ptr [esi+10]
:005B22CD 8BC3
mov eax, ebx
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
ÄÚ´æÖеÄÖµÊÇÉÏÃæ¹Ø¼üCALL¢ÞÔËËãµÃ³öµÄ£º
00ABFB2C
D2 39 82 C2 61 DF F8 BF 89 1D 96 0D CF B4 73 4F
00ABFB3C 20
20 20
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B22CF
B910000000 mov ecx, 00000010
:005B22D4
E8AB06E5FF call 00402984
:005B22D9
5E pop
esi
:005B22DA 5B
pop ebx
:005B22DB C3
ret
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
½øÈë¹Ø¼üCALL¢Ý£º005B22BA call 005B1DBC
*
Referenced by a CALL at Addresses:
|:005B22BA , :005B230A
|
:005B1DBC
55 push
ebp
:005B1DBD 8BEC
mov ebp, esp
:005B1DBF 51
push ecx
:005B1DC0 53
push ebx
:005B1DC1 56
push
esi
:005B1DC2 57
push edi
:005B1DC3 894DFC
mov dword ptr [ebp-04], ecx
:005B1DC6 8B4D08
mov ecx, dword ptr [ebp+08]
:005B1DC9
49 dec
ecx
:005B1DCA 85C9
test ecx, ecx
:005B1DCC 7C13
jl 005B1DE1
:005B1DCE 41
inc ecx
:005B1DCF 33F6
xor esi,
esi
* Referenced by a (U)nconditional or (C)onditional
Jump at Address:
|:005B1DDF(C)
|
:005B1DD1 8A1C30
mov bl, byte ptr [eax+esi]
:005B1DD4
321C32 xor bl, byte
ptr [edx+esi]
====>ÒÀ´ÎÈ¡66 6C 79 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20
ºÍ15 22 32 42 52 26 75 88 99 AA BB CC DD
EE FF 00 00 00 00Òì»ò
:005B1DD7 8B7DFC
mov edi, dword ptr [ebp-04]
:005B1DDA
881C37 mov byte
ptr [edi+esi], bl
:005B1DDD 46
inc esi
:005B1DDE 49
dec ecx
:005B1DDF 75F0
jne 005B1DD1
====>Ñ»·16´Î£¡
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
×îºóµÃ³öµÄÖµ£º
00AE5064
73 4E 4B 62 72 06 55 A8 B9 8A 9B EC FD CE DF 20
00AE5074 20
20 20
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
½øÈë¹Ø¼üCALL¢Þ£º005B22C5 call 005B1FE8
ÒòΪÕâµØ·½Ì«ÊÇ·³Ëö£¬ÎÒûÓÐÏêϸ¸ú×ÙÁË¡£
*
Referenced by a CALL at Address:
|:005B22C5
|
:005B1FE8 53
push ebx
:005B1FE9
56 push
esi
:005B1FEA 57
push edi
:005B1FEB 55
push ebp
:005B1FEC 83C4EC
add esp, FFFFFFEC
:005B1FEF 890C24
mov dword ptr [esp],
ecx
:005B1FF2 8BDA
mov ebx, edx
:005B1FF4 8BF8
mov edi, eax
:005B1FF6 8D542404
lea edx, dword ptr [esp+04]
:005B1FFA
8BC3 mov
eax, ebx
:005B1FFC B904000000 mov
ecx, 00000004
:005B2001 E87E09E5FF
call 00402984
:005B2006 8D542408
lea edx, dword ptr [esp+08]
:005B200A 8BF3
mov esi, ebx
:005B200C 8BC6
mov eax,
esi
:005B200E 83C004
add eax, 00000004
:005B2011 B904000000
mov ecx, 00000004
:005B2016 E86909E5FF
call 00402984
:005B201B 8D54240C
lea edx, dword ptr [esp+0C]
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005B1FB5(C)
|
:005B201F
8BC6 mov
eax, esi
:005B2021 83C008
add eax, 00000008
:005B2024 B904000000
mov ecx, 00000004
:005B2029 E85609E5FF
call 00402984
:005B202E 8D542410
lea edx, dword ptr [esp+10]
:005B2032 8BC6
mov eax,
esi
:005B2034 83C00C
add eax, 0000000C
:005B2037 B904000000
mov ecx, 00000004
:005B203C E84309E5FF
call 00402984
:005B2041 8B4720
mov eax, dword ptr [edi+20]
:005B2044 01442408
add dword ptr [esp+08],
eax
:005B2048 8B4724
mov eax, dword ptr [edi+24]
:005B204B 01442410
add dword ptr [esp+10], eax
:005B204F BE01000000
mov esi, 00000001
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005B20D8(C)
|
:005B2054
8B442408 mov eax, dword
ptr [esp+08]
:005B2058 03C0
add eax, eax
:005B205A 40
inc eax
:005B205B F76C2408
imul [esp+08]
:005B205F BA05000000
mov edx, 00000005
:005B2064
E82BFDFFFF call 005B1D94
:005B2069
8BD8 mov
ebx, eax
:005B206B 8B442410
mov eax, dword ptr [esp+10]
:005B206F 03C0
add eax, eax
:005B2071 40
inc eax
:005B2072
F76C2410 imul [esp+10]
:005B2076
BA05000000 mov edx, 00000005
:005B207B
E814FDFFFF call 005B1D94
:005B2080
8BE8 mov
ebp, eax
:005B2082 8B442404
mov eax, dword ptr [esp+04]
:005B2086 33C3
xor eax, ebx
:005B2088 8BD5
mov edx, ebp
:005B208A
E805FDFFFF call 005B1D94
:005B208F
8BD6 mov
edx, esi
:005B2091 03D2
add edx, edx
:005B2093 03449720
add eax, dword ptr [edi+4*edx+20]
:005B2097 89442404
mov dword ptr [esp+04], eax
:005B209B
8B44240C mov eax, dword
ptr [esp+0C]
:005B209F 33C5
xor eax, ebp
:005B20A1 8BD3
mov edx, ebx
:005B20A3 E8ECFCFFFF
call 005B1D94
:005B20A8 8BD6
mov edx,
esi
:005B20AA 03D2
add edx, edx
:005B20AC 03449724
add eax, dword ptr [edi+4*edx+24]
:005B20B0 8944240C
mov dword ptr [esp+0C], eax
:005B20B4
8B5C2404 mov ebx, dword
ptr [esp+04]
:005B20B8 8B442408
mov eax, dword ptr [esp+08]
:005B20BC 89442404
mov dword ptr [esp+04], eax
:005B20C0 8B44240C
mov eax, dword ptr [esp+0C]
:005B20C4
89442408 mov dword ptr
[esp+08], eax
:005B20C8 8B442410
mov eax, dword ptr [esp+10]
:005B20CC 8944240C
mov dword ptr [esp+0C], eax
:005B20D0 895C2410
mov dword ptr [esp+10],
ebx
:005B20D4 46
inc esi
:005B20D5 83FE15
cmp esi, 00000015
:005B20D8 0F8576FFFFFF
jne 005B2054
====>Ñ»·21´Î£¡µÃ³ö×îºóµÄÔËËã²ÎÊý£¡
:005B20DE
8B87C8000000 mov eax, dword ptr [edi+000000C8]
:005B20E4
01442404 add dword ptr
[esp+04], eax
:005B20E8 8B87CC000000 mov
eax, dword ptr [edi+000000CC]
:005B20EE 0144240C
add dword ptr [esp+0C], eax
:005B20F2 8B1424
mov edx, dword ptr [esp]
:005B20F5
8D442404 lea eax, dword
ptr [esp+04]
:005B20F9 B904000000
mov ecx, 00000004
:005B20FE E88108E5FF
call 00402984
:005B2103 8B1C24
mov ebx, dword ptr [esp]
:005B2106 8BD3
mov edx, ebx
:005B2108
83C204 add edx,
00000004
:005B210B 8D442408
lea eax, dword ptr [esp+08]
:005B210F B904000000
mov ecx, 00000004
:005B2114 E86B08E5FF
call 00402984
:005B2119 8BD3
mov edx, ebx
:005B211B
83C208 add edx,
00000008
:005B211E 8D44240C
lea eax, dword ptr [esp+0C]
:005B2122 B904000000
mov ecx, 00000004
:005B2127 E85808E5FF
call 00402984
:005B212C 8BD3
mov edx, ebx
:005B212E
83C20C add edx,
0000000C
:005B2131 8D442410
lea eax, dword ptr [esp+10]
:005B2135 B904000000
mov ecx, 00000004
:005B213A E84508E5FF
call 00402984
:005B213F 83C414
add esp, 00000014
:005B2142
5D pop
ebp
:005B2143 5F
pop edi
:005B2144 5E
pop esi
:005B2145 5B
pop ebx
:005B2146 C3
ret
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
½øÈë¹Ø¼üCALL¢Û£º005B56C4 call 005B9304
*
Referenced by a CALL at Address:
|:005B56C4
|
:005B9304 55
push ebp
:005B9305
8BEC mov
ebp, esp
:005B9307 6A00
push 00000000
:005B9309 6A00
push 00000000
:005B930B 6A00
push 00000000
:005B930D
53 push
ebx
:005B930E 56
push esi
:005B930F 8BF1
mov esi, ecx
:005B9311 8955FC
mov dword ptr [ebp-04], edx
:005B9314
8B45FC mov eax,
dword ptr [ebp-04]
:005B9317 E808B0E4FF
call 00404324
:005B931C 33C0
xor eax, eax
:005B931E 55
push ebp
:005B931F 68A1935B00
push 005B93A1
:005B9324 64FF30
push dword ptr fs:[eax]
:005B9327
648920 mov dword
ptr fs:[eax], esp
:005B932A 8B45FC
mov eax, dword ptr [ebp-04]
:005B932D E83EAEE4FF
call 00404170
====>È¡µÚһλÊý×ÖµÄHEXÖµ
:005B9332 83F80C
cmp eax, 0000000C
====>ºÍC±È½Ï
:005B9335
7D0D jge
005B9344
====>²»Ð¡ÓÚC¾ÍÌø
:005B9337 8D45FC lea eax, dword ptr [ebp-04]
* Possible StringData Ref from
Code Obj ->"3578223423325"
|
:005B933A
BAB8935B00 mov edx, 005B93B8
:005B933F
E834AEE4FF call 00404178
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005B9335(C)
|
:005B9344
8BC6 mov
eax, esi
:005B9346 E8A5ABE4FF call
00403EF0
:005B934B BB01000000 mov
ebx, 00000001
====>EBX³õʼֵ=1
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005B9384(C)
|
:005B9350
8D45F4 lea eax,
dword ptr [ebp-0C]
:005B9353 8B55FC
mov edx, dword ptr [ebp-04]
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
ÄÚ´æÖеÄÖµ£º
011E8058
32 31 30 35 37 31 33 30 31 39 34 39 37 32 32 33 2105713019497223
011E8068
32 34 38 31 39 31 31 33 37 32 39 31 35 30 31 33 2481911372915013
011E8078
32 30 37 31 38 30 31 31 35 37 39 33 32 33 32 33 2071801157932323
011E8088
32
2
¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î¡î
:005B9356
8A541AFF mov dl, byte ptr
[edx+ebx-01]
====>ÒÀ´ÎÈ¡×Ö·ûµÄHEXÖµ
:005B935A
E839ADE4FF call 00404098
:005B935F
8B45F4 mov eax,
dword ptr [ebp-0C]
:005B9362 E8E109E5FF
call 00409D48
====>¶ÔÉÏÃæËùÈ¡µÄHEXÖµ½øÐд¦Àí£¨Ç°12룩
Èç¹ûÊÇ30-39µÄ¼õ30£¬ÊÇÆäËüµÄÔò-30-20¡¡£¬ÆäʵÉÏÃæÓ¦¸Ã¶¼ÊÇÊý×ÖµÄѽ£¬ÏëдË㷨ע²á»úµÄÅóÓÑÔÙ¿´¿´°É¡£
32
31 30 35 37 31 33 30 31 39 34 39 ¡ª>210571301949
:005B9367
E830FFFFFF call 005B929C
====>¹Ø¼üCALL¢ß£¬Éú³É×¢²áÂ룡
:005B936C
8BD0 mov
edx, eax
:005B936E 8D45F8
lea eax, dword ptr [ebp-08]
:005B9371 E822ADE4FF
call 00404098
:005B9376 8B55F8
mov edx, dword ptr [ebp-08]
:005B9379
8BC6 mov
eax, esi
:005B937B E8F8ADE4FF call
00404178
====>ÒÀ´ÎÁ¬½ÓËùÉú³ÉµÄ×Ö·û
====>×îºóµÃ³ö£ºMZAGBZLAZWKW ¾ÍÊÇ×¢²áÂëÁË£¡
:005B9380
43 inc
ebx
:005B9381 83FB0D
cmp ebx, 0000000D
====>Ñ»·´ÎÊýÊÇD-1=C
:005B9384
75CA jne
005B9350
====>Ñ»·12´Î
:005B9386
33C0 xor
eax, eax
:005B9388 5A
pop edx
:005B9389 59
pop ecx
:005B938A 59
pop ecx
:005B938B
648910 mov dword
ptr fs:[eax], edx
:005B938E 68A8935B00
push 005B93A8
* Referenced by a (U)nconditional
or (C)onditional Jump at Address:
|:005B93A6(U)
|
:005B9393 8D45F4
lea eax, dword ptr [ebp-0C]
:005B9396
BA03000000 mov edx, 00000003
:005B939B
E874ABE4FF call 00403F14
:005B93A0
C3 ret
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
½øÈë¹Ø¼üCALL¢ß£º005B9367 call 005B929C
*
Referenced by a CALL at Address:
|:005B9367
|
:005B929C 83F809
cmp eax, 00000009
====>´óÓÚ9ÏÂÃæÔòÌøÁË
:005B929F
775E ja 005B92FF
:005B92A1
FF2485A8925B00 jmp dword ptr [4*eax+005B92A8]
====>¸ù¾ÝEAXµÄÖµ´ÓÏÂÃæµÄ²»Í¬µØ·½È¡Öµ£¬Ï൱ÓÚÒ»ÕűíÁË¡£
:005B92A8
D0925B00 DWORD 005B92D0
:005B92AC
D5925B00 DWORD 005B92D5
:005B92B0
DA925B00 DWORD 005B92DA
:005B92B4
DF925B00 DWORD 005B92DF
:005B92B8
E4925B00 DWORD 005B92E4
:005B92BC
E9925B00 DWORD 005B92E9
:005B92C0
EE925B00 DWORD 005B92EE
:005B92C4
F3925B00 DWORD 005B92F3
:005B92C8
F8925B00 DWORD 005B92F8
:005B92CC
FD925B00 DWORD 005B92FD
====>EAX=210571301949
ÏÂÃæÒÀ´ÎÈ¡Öµ£º
:005B92D0 B241
mov dl, 41
3¡¢ ====>EAX=0
DL=41 ¼´£ºA
8¡¢ ====>EAX=0
DL=41 ¼´£ºA
:005B92D2 8BC2
mov eax,
edx
:005B92D4 C3
ret
:005B92D5 B25A
mov dl, 5A
2¡¢
====>EAX=1 DL=5A ¼´£ºZ
6¡¢
====>EAX=1 DL=5A ¼´£ºZ
9¡¢
====>EAX=1 DL=5A ¼´£ºZ
:005B92D7
8BC2 mov
eax, edx
:005B92D9 C3
ret
:005B92DA B24D
mov dl, 4D
1¡¢
====>EAX=2 DL=4D ¼´£ºM
:005B92DC
8BC2 mov
eax, edx
:005B92DE C3
ret
:005B92DF B24C
mov dl, 4C
7¡¢
====>EAX=3 DL=4C ¼´£ºL
:005B92E1
8BC2 mov
eax, edx
:005B92E3 C3
ret
:005B92E4 B24B
mov dl, 4B
11¡¢
====>EAX=4 DL=4B ¼´£ºK
:005B92E6
8BC2 mov
eax, edx
:005B92E8 C3
ret
:005B92E9 B247
mov dl, 47
4¡¢
====>EAX=5 DL=47 ¼´£ºG
:005B92EB
8BC2 mov
eax, edx
:005B92ED C3
ret
:005B92EE B248
mov dl, 48
:005B92F0
8BC2 mov
eax, edx
:005B92F2 C3
ret
:005B92F3 B242
mov dl, 42
5¡¢
====>EAX=7 DL=42 ¼´£ºB
:005B92F5
8BC2 mov
eax, edx
:005B92F7 C3
ret
:005B92F8 B24E
mov dl, 4E
:005B92FA
8BC2 mov
eax, edx
:005B92FC C3
ret
:005B92FD B257
mov dl, 57
10¡¢
====>EAX=9 DL=57 ¼´£ºW
12¡¢
====>EAX=9 DL=57 ¼´£ºW
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005B929F(C)
|
:005B92FF
8BC2 mov
eax, edx
:005B9301 C3
ret
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
¡¾Ëã
·¨ ×Ü ½á¡¿£º
1¡¢È¡Óû§Ãû×Ö·ûµÄHEXÖµ£¬Á¬½Ó³ÌÐò¸øµÄ16¸ö20£¨H£©
2¡¢66 6C 79 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ºÍ³ÌÐò¸øµÄ15 22 32 42 52 26 75 88 99 AA BB CC DD EE FF 00 00 00 00½øÐÐÔËËãµÃ³öD2 39 82 C2 61 DF F8 BF 89 1D 96 0D CF B4 73 4F 20 20 20 ·Ç³£±§Ç¸£¡ÕâÒ»²½ÔËËãºÜÊÇ·³Ëö£¬ÎÒÍ·ÌÛµÄû¿´Í꣬Èç¹ûÓдóÏÀÏëдË㷨ע²á»úÂé·³Äú×Ô¼ºÔÙ×Ðϸ·ÖÎöһϣ¬Ð»Ð»£¡
3¡¢·Ö±ðÈ¡D2
39 82 C2 61 DF F8 BF 89 1D 96 0D CF B4 73 4F 20 20 20µÄ10½øÖÆÖµ£¬
µÃ³ö£º2105713019497223248191137291501320718011579323232
4¡¢È¡2105713019497223248191137291501320718011579323232µÄÇ°12λ210571301949
5¡¢ÒÔ210571301949Ϊ²ÎÊý´Óʵ¼ÊÉÏÏ൱ÓÚÒ»ÕűíÖÐÈ¡Öµ
¹éÄÉÒ»ÏÂÕâÕżòµ¥µÄ±í£º0È¡A
¡¢1È¡Z¡¢2È¡M¡¢3È¡L¡¢4È¡K¡¢5È¡G¡¢6È¡H¡¢7È¡B¡¢8È¡N¡¢9È¡W
210571301949 µÃ³ö£ºMZAGBZLAZWKW Õâ¾ÍÊÇflyµÄÕ¾µã°æ×¢²áÂëÁË¡£
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
¡¾Íê ÃÀ ±¬ ÆÆ¡¿£º
1¡¢005D890E 8B55D4
mov edx, dword ptr [ebp-2C]
¸ÄΪ£º 8B55E0
lea edx, dword ptr [ebp-20]
ºÇºÇ£¬ÈÃÕæÂëºÍÕæÂë±È½Ï£¡
2¡¢005D898A
8B45A0 mov eax,
dword ptr [ebp-60]
¸ÄΪ£º 8D45E0
mov eax, dword ptr [ebp-20]
ºÇºÇ£¬ÈóÌÐò×Ô¶¯±£´æÕæÂ룡
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
¡¾KeyMakeÖ®{80th}ÄÚ´æ×¢²á»ú¡¿£º
ÖжϵØÖ·£º005D88F4
ÖжϴÎÊý£º1
µÚÒ»×Ö½Ú£º50
Ö¸Á¶È£º1
Äڴ淽ʽ£ºEAX
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
¡¾×¢²áÐÅÏ¢±£´æ¡¿£º
ͬĿ¼ÏµÄMainManage.mdbÖеÄusermark¡£ºÇºÇ£¬Êý¾Ý¿âÃÜÂë¾Íû±ØҪ˵ÁË¡£^O^^O^
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
¡¾Õû Àí¡¿£º
Óû§Ãû£ºfly
×¢²áÂ룺MZAGBZLAZWKW
£¨ÎÞÏÞÖÆÓû§°æ£©
¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª
, _/
/| _.-~/
\_ , Çà´º¶¼Ò»âÃ
( /~ / \~-._
|\
`\\ _/
\ ~\ ) Ḛ̀Ѹ¡Ãû
_-~~~-.) )__/;;,. \_ //'
/'_,\ --~ \ ~~~- ,;;\___( (.-~~~-.
»»ÁËÆƽâÇá¿ñ
`~ _( ,_..--\ ( ,;'' /
~-- /._`\
/~~//' /' `~\
) /--.._, )_ `~
" `~" "
`" /~'`\ `\\~~\
"
" "~' ""
Cracked By ³²Ë®¹¤×÷·»¡ª¡ªfly [OCN][FCG]
2003-05-05 18:36