[Asm] 纯文本查看 复制代码
看到有人把注册机制作出来了，以前制作注册文件的笔记我也放出来让大家参考一下，方法很傻。
参考友益文书8.6.2
我的机器码：Y3EXXZ36DMU56BO27 W33524942C101D3 C30364020C
注意！只取EXXZ36DMU56BO27运算，这里机器码为15柆（有些为9位）
修改注册文件regyyws.dat
1.偏移1203：E5（机器码位数！(E5 - D6 = F [15位]) ）
2.偏移1204：0B 0D 19 09 06 0A 0B 07 06 09 06 09 机器码：57C304510303运算后的，计算如下：
———————————————————————————————————
机器码：EXXZ36DMU56BO27
转换十六进制：45 58 58 5A 33 36 44 4D 55 35 36 42 4F 32 37
每位字节+D6结果：11B 12E 12E 130 109 10C 11A 123 12B 10B 10C 118 125 108 10D
取后面二位：1B 2E 2E 30 09 0C 1A 23 2B 0B 0C 18 25 08 0D
———————————————————————————————————
3.注册特征：偏移1928(十六进制788) 06 06 06 09 0B 06 08 09（35023） ****商用注册版(在线)****
4.修改注册文件regyyws.dat（OD载入友益文书8.6.2.exe通过即可）
005DC148 $ 55 push ebp
005DC149 . 8BEC mov ebp,esp
005DC14B . B9 14010000 mov ecx,114
005DC150 > 6A 00 push 0
005DC152 . 6A 00 push 0
005DC154 . 49 dec ecx
005DC155 .^ 75 F9 jnz short 005DC150
005DC157 . 51 push ecx
005DC158 . 53 push ebx
005DC159 . 56 push esi
005DC15A . 57 push edi
005DC15B . 8955 F8 mov dword ptr ss:[ebp-8],edx
005DC15E . 8945 FC mov dword ptr ss:[ebp-4],eax
005DC161 . 8B45 F8 mov eax,dword ptr ss:[ebp-8]
005DC164 . E8 2F80E2FF call 00404198
005DC169 . 33C0 xor eax,eax
005DC16B . 55 push ebp
005DC16C . 68 3ACE5D00 push 005DCE3A
005DC171 . 64:FF30 push dword ptr fs:[eax]
005DC174 . 64:8920 mov dword ptr fs:[eax],esp
005DC177 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC17A . E8 C90F0100 call 005ED148
005DC17F . 33C0 xor eax,eax
005DC181 . 8945 F4 mov dword ptr ss:[ebp-C],eax
005DC184 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC187 . 8B90 C43A0000 mov edx,dword ptr ds:[eax+3AC4]
005DC18D . 8D45 F0 lea eax,dword ptr ss:[ebp-10]
005DC190 . B9 54CE5D00 mov ecx,005DCE54 ; mw.tmp
005DC195 . E8 967EE2FF call 00404030
005DC19A . 8B45 F8 mov eax,dword ptr ss:[ebp-8]
005DC19D . E8 3ADDE2FF call 00409EDC
005DC1A2 . 84C0 test al,al
005DC1A4 . 75 0A jnz short 005DC1B0
005DC1A6 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DC1A9 . E8 B67BE2FF call 00403D64
005DC1AE . EB 31 jmp short 005DC1E1
005DC1B0 > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC1B3 . 8B80 D81E0000 mov eax,dword ptr ds:[eax+1ED8]
005DC1B9 . 8B55 F8 mov edx,dword ptr ss:[ebp-8]
005DC1BC . E8 0F81E2FF call 004042D0
005DC1C1 . 85C0 test eax,eax
005DC1C3 . 7E 0F jle short 005DC1D4
005DC1C5 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DC1C8 . BA 64CE5D00 mov edx,005DCE64 ; exepath\n\n
005DC1CD . E8 2A7CE2FF call 00403DFC
005DC1D2 . EB 0D jmp short 005DC1E1
005DC1D4 > 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DC1D7 . BA 78CE5D00 mov edx,005DCE78 ; sysp\n\n
005DC1DC . E8 1B7CE2FF call 00403DFC
005DC1E1 > 68 E8030000 push 3E8
005DC1E6 . 6A 00 push 0
005DC1E8 . 33C9 xor ecx,ecx
005DC1EA . 8B55 F8 mov edx,dword ptr ss:[ebp-8]
005DC1ED . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC1F0 . E8 3B240000 call 005DE630 比较regyyws.dat文件偏移0-C90整个文件逐字累加合
005DC1F5 . 48 dec eax EAX=1
005DC1F6 . 0F85 F10A0000 jnz 005DCCED 不能跳哦
005DC1FC . FF75 E0 push dword ptr ss:[ebp-20]
005DC1FF . 68 88CE5D00 push 005DCE88 ; suc 1
005DC204 . 68 98CE5D00 push 005DCE98 ; \n
005DC209 . 68 A4CE5D00 push 005DCEA4 ; \n
005DC20E . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DC211 . BA 04000000 mov edx,4
005DC216 . E8 897EE2FF call 004040A4
005DC21B . 33D2 xor edx,edx
005DC21D . 55 push ebp
005DC21E . 68 C4CC5D00 push 005DCCC4
005DC223 . 64:FF32 push dword ptr fs:[edx]
005DC226 . 64:8922 mov dword ptr fs:[edx],esp
005DC229 . 8B55 F8 mov edx,dword ptr ss:[ebp-8]
005DC22C . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC232 . E8 7FA7E2FF call 004069B6
005DC237 . A1 A83B6700 mov eax,dword ptr ds:[673BA8]
005DC23C . C600 00 mov byte ptr ds:[eax],0
005DC23F . BA 01000000 mov edx,1
005DC244 . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC24A . E8 9EACE2FF call 00406EED
005DC24F . E8 2866E2FF call 0040287C
005DC254 . BA 21000000 mov edx,21
005DC259 . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC25F . E8 C0ACE2FF call 00406F24
005DC264 . E8 1366E2FF call 0040287C
005DC269 . 6A 00 push 0
005DC26B . 8D55 DC lea edx,dword ptr ss:[ebp-24]
005DC26E . B9 04000000 mov ecx,4
005DC273 . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC279 . E8 DAA7E2FF call 00406A58
005DC27E . E8 F965E2FF call 0040287C
005DC283 . BA 00040000 mov edx,400
005DC288 . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC28E . E8 91ACE2FF call 00406F24
005DC293 . E8 E465E2FF call 0040287C
005DC298 . 6A 00 push 0
005DC29A . 8D55 EF lea edx,dword ptr ss:[ebp-11]
005DC29D . B9 01000000 mov ecx,1
005DC2A2 . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC2A8 . E8 ABA7E2FF call 00406A58
005DC2AD . E8 CA65E2FF call 0040287C
005DC2B2 . 6A 00 push 0
005DC2B4 . 8D95 90FAFFFF lea edx,dword ptr ss:[ebp-570]
005DC2BA . B9 00040000 mov ecx,400
005DC2BF . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC2C5 . E8 8EA7E2FF call 00406A58
005DC2CA . E8 AD65E2FF call 0040287C
005DC2CF . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC2D5 . E8 46A8E2FF call 00406B20
005DC2DA . E8 9D65E2FF call 0040287C
005DC2DF . 8B55 F0 mov edx,dword ptr ss:[ebp-10]
005DC2E2 . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC2E8 . E8 C9A6E2FF call 004069B6
005DC2ED . BA 01000000 mov edx,1
005DC2F2 . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC2F8 . E8 07ACE2FF call 00406F04
005DC2FD . E8 7A65E2FF call 0040287C
005DC302 . 6A 00 push 0
005DC304 . 8D95 90FAFFFF lea edx,dword ptr ss:[ebp-570]
005DC30A . B9 00040000 mov ecx,400
005DC30F . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC315 . E8 A2A7E2FF call 00406ABC
005DC31A . E8 5D65E2FF call 0040287C
005DC31F . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC325 . E8 F6A7E2FF call 00406B20
005DC32A . E8 4D65E2FF call 0040287C
005DC32F . 6A 02 push 2
005DC331 . 6A 00 push 0
005DC333 . 33C9 xor ecx,ecx
005DC335 . 8B55 F0 mov edx,dword ptr ss:[ebp-10]
005DC338 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC33B . E8 F0220000 call 005DE630 比较regyyws.dat文件偏移1025+400 逐字累加合
005DC340 . 48 dec eax EAX=1
005DC341 . 0F85 1F090000 jnz 005DCC66 不能跳哦
005DC347 . FF75 E0 push dword ptr ss:[ebp-20]
005DC34A . 68 B0CE5D00 push 005DCEB0 ; suc 2
005DC34F . 68 98CE5D00 push 005DCE98 ; \n
005DC354 . 68 A4CE5D00 push 005DCEA4 ; \n
005DC359 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DC35C . BA 04000000 mov edx,4
005DC361 . E8 3E7DE2FF call 004040A4
005DC366 . BB 00040000 mov ebx,400
005DC36B . 8D85 90FAFFFF lea eax,dword ptr ss:[ebp-570]
005DC371 > 8A55 EF mov dl,byte ptr ss:[ebp-11]
005DC374 . 2810 sub byte ptr ds:[eax],dl
005DC376 . 40 inc eax
005DC377 . 4B dec ebx
005DC378 .^ 75 F7 jnz short 005DC371
005DC37A . BA 01000000 mov edx,1
005DC37F . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC385 . E8 7AABE2FF call 00406F04
005DC38A . E8 ED64E2FF call 0040287C
005DC38F . 6A 00 push 0
005DC391 . 8D95 90FAFFFF lea edx,dword ptr ss:[ebp-570]
005DC397 . B9 00040000 mov ecx,400
005DC39C . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC3A2 . E8 15A7E2FF call 00406ABC
005DC3A7 . E8 D064E2FF call 0040287C
005DC3AC . BA 0A000000 mov edx,0A
005DC3B1 . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC3B7 . E8 68ABE2FF call 00406F24
005DC3BC . E8 BB64E2FF call 0040287C
005DC3C1 . 837D DC 00 cmp dword ptr ss:[ebp-24],0
005DC3C5 . 0F85 11050000 jnz 005DC8DC
005DC3CB . 6A 00 push 0
005DC3CD . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC3D0 . 8D90 D82A0000 lea edx,dword ptr ds:[eax+2AD8]
005DC3D6 . B9 B0010000 mov ecx,1B0
005DC3DB . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC3E1 . E8 72A6E2FF call 00406A58
005DC3E6 . E8 9164E2FF call 0040287C
005DC3EB . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC3F1 . E8 2AA7E2FF call 00406B20
005DC3F6 . E8 8164E2FF call 0040287C
005DC3FB . 8B45 F0 mov eax,dword ptr ss:[ebp-10]
005DC3FE . E8 F5DBE2FF call 00409FF8
005DC403 . E8 A0ECE2FF call 0040B0A8
005DC408 . 83C4 F8 add esp,-8
005DC40B . DD1C24 fstp qword ptr ss:[esp]
005DC40E . 9B wait
005DC40F . 8D45 E8 lea eax,dword ptr ss:[ebp-18]
005DC412 . BA C0CE5D00 mov edx,005DCEC0 ; yyyy-mm-dd
005DC417 . E8 8CF8E2FF call 0040BCA8
005DC41C . FF75 E0 push dword ptr ss:[ebp-20]
005DC41F . 8D85 C0F8FFFF lea eax,dword ptr ss:[ebp-740]
005DC425 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC428 . 81C2 392C0000 add edx,2C39
005DC42E . E8 557BE2FF call 00403F88
005DC433 . FFB5 C0F8FFFF push dword ptr ss:[ebp-740]
005DC439 . 68 98CE5D00 push 005DCE98 ; \n
005DC43E . 68 A4CE5D00 push 005DCEA4 ; \n
005DC443 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DC446 . BA 04000000 mov edx,4
005DC44B . E8 547CE2FF call 004040A4
005DC450 . 8D85 BCF8FFFF lea eax,dword ptr ss:[ebp-744]
005DC456 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC459 . 81C2 392C0000 add edx,2C39
005DC45F . E8 247BE2FF call 00403F88
005DC464 . 8B85 BCF8FFFF mov eax,dword ptr ss:[ebp-744]
005DC46A . 8B55 E8 mov edx,dword ptr ss:[ebp-18]
005DC46D . E8 827CE2FF call 004040F4
005DC472 . 77 18 ja short 005DC48C
005DC474 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC477 . 05 392C0000 add eax,2C39
005DC47C . BA CCCE5D00 mov edx,005DCECC ; \n2002-01-01
005DC481 . E8 7E67E2FF call 00402C04
005DC486 . 0F83 2E080000 jnb 005DCCBA
005DC48C > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC48F . 05 442C0000 add eax,2C44
005DC494 . BA D8CE5D00 mov edx,005DCED8
005DC499 . E8 6667E2FF call 00402C04
005DC49E . 73 11 jnb short 005DC4B1
005DC4A0 . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
005DC4A3 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC4A6 . 8B92 DC3A0000 mov edx,dword ptr ds:[edx+3ADC]
005DC4AC . E8 4B79E2FF call 00403DFC
005DC4B1 > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC4B4 . 05 442C0000 add eax,2C44
005DC4B9 . BA D8CE5D00 mov edx,005DCED8
005DC4BE . 33C9 xor ecx,ecx
005DC4C0 . 8A08 mov cl,byte ptr ds:[eax]
005DC4C2 . 41 inc ecx
005DC4C3 . E8 C067E2FF call 00402C88
005DC4C8 . 75 11 jnz short 005DC4DB
005DC4CA . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
005DC4CD . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC4D0 . 8B92 D83A0000 mov edx,dword ptr ds:[edx+3AD8]
005DC4D6 . E8 2179E2FF call 00403DFC
005DC4DB > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC4DE . 05 442C0000 add eax,2C44
005DC4E3 . BA DCCE5D00 mov edx,005DCEDC
005DC4E8 . 33C9 xor ecx,ecx
005DC4EA . 8A08 mov cl,byte ptr ds:[eax]
005DC4EC . 41 inc ecx
005DC4ED . E8 9667E2FF call 00402C88
005DC4F2 . 75 11 jnz short 005DC505
005DC4F4 . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
005DC4F7 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC4FA . 8B92 E03A0000 mov edx,dword ptr ds:[edx+3AE0]
005DC500 . E8 F778E2FF call 00403DFC
005DC505 > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC508 . 05 442C0000 add eax,2C44
005DC50D . BA E0CE5D00 mov edx,005DCEE0
005DC512 . 33C9 xor ecx,ecx
005DC514 . 8A08 mov cl,byte ptr ds:[eax]
005DC516 . 41 inc ecx
005DC517 . E8 6C67E2FF call 00402C88
005DC51C . 75 11 jnz short 005DC52F
005DC51E . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
005DC521 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC524 . 8B92 E83A0000 mov edx,dword ptr ds:[edx+3AE8]
005DC52A . E8 CD78E2FF call 00403DFC
005DC52F > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC532 . 05 442C0000 add eax,2C44
005DC537 . BA E4CE5D00 mov edx,005DCEE4
005DC53C . 33C9 xor ecx,ecx
005DC53E . 8A08 mov cl,byte ptr ds:[eax]
005DC540 . 41 inc ecx
005DC541 . E8 4267E2FF call 00402C88
005DC546 . 75 11 jnz short 005DC559
005DC548 . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
005DC54B . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC54E . 8B92 EC3A0000 mov edx,dword ptr ds:[edx+3AEC]
005DC554 . E8 A378E2FF call 00403DFC
005DC559 > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC55C . 05 442C0000 add eax,2C44
005DC561 . BA E8CE5D00 mov edx,005DCEE8
005DC566 . 33C9 xor ecx,ecx
005DC568 . 8A08 mov cl,byte ptr ds:[eax]
005DC56A . 41 inc ecx
005DC56B . E8 1867E2FF call 00402C88
005DC570 . 75 11 jnz short 005DC583
005DC572 . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
005DC575 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC578 . 8B92 F03A0000 mov edx,dword ptr ds:[edx+3AF0]
005DC57E . E8 7978E2FF call 00403DFC
005DC583 > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC586 . 05 442C0000 add eax,2C44
005DC58B . BA ECCE5D00 mov edx,005DCEEC
005DC590 . 33C9 xor ecx,ecx
005DC592 . 8A08 mov cl,byte ptr ds:[eax]
005DC594 . 41 inc ecx
005DC595 . E8 EE66E2FF call 00402C88
005DC59A . 75 28 jnz short 005DC5C4
005DC59C . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
005DC59F . 50 push eax
005DC5A0 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC5A3 . 8B80 F43A0000 mov eax,dword ptr ds:[eax+3AF4]
005DC5A9 . E8 367AE2FF call 00403FE4
005DC5AE . 8BC8 mov ecx,eax
005DC5B0 . 49 dec ecx
005DC5B1 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC5B4 . 8B80 F43A0000 mov eax,dword ptr ds:[eax+3AF4]
005DC5BA . BA 02000000 mov edx,2
005DC5BF . E8 287CE2FF call 004041EC
005DC5C4 > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC5C7 . 05 442C0000 add eax,2C44
005DC5CC . BA F0CE5D00 mov edx,005DCEF0
005DC5D1 . 33C9 xor ecx,ecx
005DC5D3 . 8A08 mov cl,byte ptr ds:[eax]
005DC5D5 . 41 inc ecx
005DC5D6 . E8 AD66E2FF call 00402C88
005DC5DB . 74 19 je short 005DC5F6
005DC5DD . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC5E0 . 05 442C0000 add eax,2C44
005DC5E5 . BA F4CE5D00 mov edx,005DCEF4
005DC5EA . 33C9 xor ecx,ecx
005DC5EC . 8A08 mov cl,byte ptr ds:[eax]
005DC5EE . 41 inc ecx
005DC5EF . E8 9466E2FF call 00402C88
005DC5F4 . 75 28 jnz short 005DC61E
005DC5F6 > 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
005DC5F9 . 50 push eax
005DC5FA . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC5FD . 8B80 F83A0000 mov eax,dword ptr ds:[eax+3AF8]
005DC603 . E8 DC79E2FF call 00403FE4
005DC608 . 8BC8 mov ecx,eax
005DC60A . 49 dec ecx
005DC60B . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC60E . 8B80 F83A0000 mov eax,dword ptr ds:[eax+3AF8]
005DC614 . BA 02000000 mov edx,2
005DC619 . E8 CE7BE2FF call 004041EC
005DC61E > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC621 . 05 442C0000 add eax,2C44
005DC626 . BA F4CE5D00 mov edx,005DCEF4
005DC62B . E8 D465E2FF call 00402C04
005DC630 . 76 11 jbe short 005DC643
005DC632 . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
005DC635 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC638 . 8B92 E43A0000 mov edx,dword ptr ds:[edx+3AE4]
005DC63E . E8 B977E2FF call 00403DFC
005DC643 > FF75 E0 push dword ptr ss:[ebp-20]
005DC646 . FF75 E4 push dword ptr ss:[ebp-1C]
005DC649 . 68 00CF5D00 push 005DCF00
005DC64E . 8D85 B8F8FFFF lea eax,dword ptr ss:[ebp-748]
005DC654 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC657 . 81C2 442C0000 add edx,2C44
005DC65D . E8 2679E2FF call 00403F88
005DC662 . FFB5 B8F8FFFF push dword ptr ss:[ebp-748]
005DC668 . 68 98CE5D00 push 005DCE98 ; \n
005DC66D . 68 A4CE5D00 push 005DCEA4 ; \n
005DC672 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DC675 . BA 06000000 mov edx,6
005DC67A . E8 257AE2FF call 004040A4
005DC67F . FF75 E0 push dword ptr ss:[ebp-20]
005DC682 . 8D85 B4F8FFFF lea eax,dword ptr ss:[ebp-74C]
005DC688 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC68B . 81C2 2E2C0000 add edx,2C2E
005DC691 . E8 F278E2FF call 00403F88
005DC696 . FFB5 B4F8FFFF push dword ptr ss:[ebp-74C]
005DC69C . 68 98CE5D00 push 005DCE98 ; \n
005DC6A1 . 68 A4CE5D00 push 005DCEA4 ; \n
005DC6A6 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DC6A9 . BA 04000000 mov edx,4
005DC6AE . E8 F179E2FF call 004040A4
005DC6B3 . 33D2 xor edx,edx
005DC6B5 . 55 push ebp
005DC6B6 . 68 CDC85D00 push 005DC8CD
005DC6BB . 64:FF32 push dword ptr fs:[edx]
005DC6BE . 64:8922 mov dword ptr fs:[edx],esp
005DC6C1 . 837D E4 00 cmp dword ptr ss:[ebp-1C],0
005DC6C5 . 0F84 F5010000 je 005DC8C0
005DC6CB . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC6CE . 05 182C0000 add eax,2C18
005DC6D3 . BA 04CF5D00 mov edx,005DCF04 ; ASCII 05,"8.6.2"
005DC6D8 . E8 2765E2FF call 00402C04
005DC6DD . 77 18 ja short 005DC6F7
005DC6DF . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC6E2 . 05 182C0000 add eax,2C18
005DC6E7 . BA 0CCF5D00 mov edx,005DCF0C
005DC6EC . E8 1365E2FF call 00402C04
005DC6F1 . 0F83 C9010000 jnb 005DC8C0
005DC6F7 > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC6FA . 8B80 042B0000 mov eax,dword ptr ds:[eax+2B04]
005DC700 . 85C0 test eax,eax
005DC702 . 0F8E B8010000 jle 005DC8C0
005DC708 . 83F8 33 cmp eax,33
005DC70B . 0F8D AF010000 jge 005DC8C0
005DC711 . 8BF0 mov esi,eax
005DC713 . 85F6 test esi,esi
005DC715 . 0F8E A5010000 jle 005DC8C0
005DC71B . BB 01000000 mov ebx,1
005DC720 > FF75 E0 push dword ptr ss:[ebp-20]
005DC723 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC726 . 8B8498 042B0000 mov eax,dword ptr ds:[eax+ebx*4+2B04]
005DC72D . 05 AD200000 add eax,20AD
005DC732 . 33D2 xor edx,edx
005DC734 . 52 push edx
005DC735 . 50 push eax
005DC736 . 8D85 B0F8FFFF lea eax,dword ptr ss:[ebp-750]
005DC73C . E8 9BD4E2FF call 00409BDC
005DC741 . FFB5 B0F8FFFF push dword ptr ss:[ebp-750]
005DC747 . 68 98CE5D00 push 005DCE98 ; \n
005DC74C . 68 A4CE5D00 push 005DCEA4 ; \n
005DC751 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DC754 . BA 04000000 mov edx,4
005DC759 . E8 4679E2FF call 004040A4
005DC75E . 8D85 ACF8FFFF lea eax,dword ptr ss:[ebp-754]
005DC764 . 50 push eax
005DC765 . 8B45 E4 mov eax,dword ptr ss:[ebp-1C]
005DC768 . E8 7778E2FF call 00403FE4
005DC76D . 8BC8 mov ecx,eax
005DC76F . 83E9 03 sub ecx,3
005DC772 . BA 04000000 mov edx,4
005DC777 . 8B45 E4 mov eax,dword ptr ss:[ebp-1C]
005DC77A . E8 6D7AE2FF call 004041EC
005DC77F . 8B85 ACF8FFFF mov eax,dword ptr ss:[ebp-754]
005DC785 . E8 3ED5E2FF call 00409CC8
005DC78A . 52 push edx
005DC78B . 50 push eax
005DC78C . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC78F . 8B8498 042B0000 mov eax,dword ptr ds:[eax+ebx*4+2B04]
005DC796 . 05 AD200000 add eax,20AD
005DC79B . 33D2 xor edx,edx
005DC79D . 3B5424 04 cmp edx,dword ptr ss:[esp+4]
005DC7A1 . 75 03 jnz short 005DC7A6
005DC7A3 . 3B0424 cmp eax,dword ptr ss:[esp]
005DC7A6 > 5A pop edx
005DC7A7 . 58 pop eax
005DC7A8 . 0F85 0A010000 jnz 005DC8B8
005DC7AE . C745 F4 01000000 mov dword ptr ss:[ebp-C],1
005DC7B5 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC7B8 . C780 74250000 10000000 mov dword ptr ds:[eax+2574],10
005DC7C2 . 8D85 A4F8FFFF lea eax,dword ptr ss:[ebp-75C]
005DC7C8 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC7CB . 81C2 2E2C0000 add edx,2C2E
005DC7D1 . E8 B277E2FF call 00403F88
005DC7D6 . 8B85 A4F8FFFF mov eax,dword ptr ss:[ebp-75C]
005DC7DC . 8D95 A8F8FFFF lea edx,dword ptr ss:[ebp-758]
005DC7E2 . E8 DDD1E2FF call 004099C4
005DC7E7 . 8B95 A8F8FFFF mov edx,dword ptr ss:[ebp-758]
005DC7ED . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC7F0 . 05 103B0000 add eax,3B10
005DC7F5 . E8 BE75E2FF call 00403DB8
005DC7FA . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC7FD . 8B88 401C0000 mov ecx,dword ptr ds:[eax+1C40]
005DC803 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC806 . 8B90 C83A0000 mov edx,dword ptr ds:[eax+3AC8]
005DC80C . 8D85 A0F8FFFF lea eax,dword ptr ss:[ebp-760]
005DC812 . E8 1978E2FF call 00404030
005DC817 . 8B85 A0F8FFFF mov eax,dword ptr ss:[ebp-760]
005DC81D . E8 BAD6E2FF call 00409EDC
005DC822 . 84C0 test al,al
005DC824 . 74 2A je short 005DC850
005DC826 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC829 . 8B88 401C0000 mov ecx,dword ptr ds:[eax+1C40]
005DC82F . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC832 . 8B90 C83A0000 mov edx,dword ptr ds:[eax+3AC8]
005DC838 . 8D85 9CF8FFFF lea eax,dword ptr ss:[ebp-764]
005DC83E . E8 ED77E2FF call 00404030
005DC843 . 8B85 9CF8FFFF mov eax,dword ptr ss:[ebp-764]
005DC849 . 33D2 xor edx,edx
005DC84B . E8 B0D6E2FF call 00409F00
005DC850 > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC853 . 8B88 401C0000 mov ecx,dword ptr ds:[eax+1C40]
005DC859 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC85C . 8B90 C83A0000 mov edx,dword ptr ds:[eax+3AC8]
005DC862 . 8D85 98F8FFFF lea eax,dword ptr ss:[ebp-768]
005DC868 . E8 C377E2FF call 00404030
005DC86D . 8B95 98F8FFFF mov edx,dword ptr ss:[ebp-768]
005DC873 . 8B45 F8 mov eax,dword ptr ss:[ebp-8]
005DC876 . E8 7978E2FF call 004040F4
005DC87B . 74 43 je short 005DC8C0
005DC87D . 6A 00 push 0
005DC87F . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC882 . 8B88 401C0000 mov ecx,dword ptr ds:[eax+1C40]
005DC888 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC88B . 8B90 C83A0000 mov edx,dword ptr ds:[eax+3AC8]
005DC891 . 8D85 94F8FFFF lea eax,dword ptr ss:[ebp-76C]
005DC897 . E8 9477E2FF call 00404030
005DC89C . 8B85 94F8FFFF mov eax,dword ptr ss:[ebp-76C]
005DC8A2 . E8 0179E2FF call 004041A8
005DC8A7 . 50 push eax
005DC8A8 . 8B45 F8 mov eax,dword ptr ss:[ebp-8]
005DC8AB . E8 F878E2FF call 004041A8
005DC8B0 . 50 push eax ; |ExistingFileName
005DC8B1 . E8 D2B0E2FF call 00407988 ; \CopyFileA
005DC8B6 . EB 08 jmp short 005DC8C0
005DC8B8 > 43 inc ebx
005DC8B9 . 4E dec esi
005DC8BA .^ 0F85 60FEFFFF jnz 005DC720
005DC8C0 > 33C0 xor eax,eax
005DC8C2 . 5A pop edx
005DC8C3 . 59 pop ecx
005DC8C4 . 59 pop ecx
005DC8C5 . 64:8910 mov dword ptr fs:[eax],edx
005DC8C8 . E9 ED030000 jmp 005DCCBA
005DC8CD .^ E9 F26BE2FF jmp 004034C4
005DC8D2 . E8 496FE2FF call 00403820
005DC8D7 . E9 DE030000 jmp 005DCCBA
005DC8DC > 6A 00 push 0
005DC8DE . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC8E1 . 8D90 882C0000 lea edx,dword ptr ds:[eax+2C88]
005DC8E7 . B9 E4030000 mov ecx,3E4
005DC8EC . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC8F2 . E8 61A1E2FF call 00406A58
005DC8F7 . E8 805FE2FF call 0040287C
005DC8FC . 8D85 90FEFFFF lea eax,dword ptr ss:[ebp-170]
005DC902 . E8 19A2E2FF call 00406B20
005DC907 . E8 705FE2FF call 0040287C
005DC90C . 8B45 F0 mov eax,dword ptr ss:[ebp-10]
005DC90F . E8 E4D6E2FF call 00409FF8
005DC914 . E8 8FE7E2FF call 0040B0A8
005DC919 . 83C4 F8 add esp,-8
005DC91C . DD1C24 fstp qword ptr ss:[esp]
005DC91F . 9B wait
005DC920 . 8D45 E8 lea eax,dword ptr ss:[ebp-18]
005DC923 . BA C0CE5D00 mov edx,005DCEC0 ; yyyy-mm-dd
005DC928 . E8 7BF3E2FF call 0040BCA8
005DC92D . FF75 E0 push dword ptr ss:[ebp-20]
005DC930 . 8D85 90F8FFFF lea eax,dword ptr ss:[ebp-770]
005DC936 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC939 . 81C2 0F300000 add edx,300F
005DC93F . E8 4476E2FF call 00403F88
005DC944 . FFB5 90F8FFFF push dword ptr ss:[ebp-770]
005DC94A . 68 98CE5D00 push 005DCE98 ; \n
005DC94F . 68 A4CE5D00 push 005DCEA4 ; \n
005DC954 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DC957 . BA 04000000 mov edx,4
005DC95C . E8 4377E2FF call 004040A4
005DC961 . 8D85 8CF8FFFF lea eax,dword ptr ss:[ebp-774]
005DC967 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC96A . 81C2 0F300000 add edx,300F
005DC970 . E8 1376E2FF call 00403F88
005DC975 . 8B85 8CF8FFFF mov eax,dword ptr ss:[ebp-774]
005DC97B . 8B55 E8 mov edx,dword ptr ss:[ebp-18]
005DC97E . E8 7177E2FF call 004040F4
005DC983 . 77 18 ja short 005DC99D
005DC985 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC988 . 05 0F300000 add eax,300F
005DC98D . BA CCCE5D00 mov edx,005DCECC ; \n2002-01-01
005DC992 . E8 6D62E2FF call 00402C04
005DC997 . 0F83 1D030000 jnb 005DCCBA
005DC99D > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DC9A0 . 8B80 2C2D0000 mov eax,dword ptr ds:[eax+2D2C]
005DC9A6 . 99 cdq
005DC9A7 . 33C2 xor eax,edx
005DC9A9 . 2BC2 sub eax,edx
005DC9AB . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC9AE . 8982 2C2D0000 mov dword ptr ds:[edx+2D2C],eax
005DC9B4 . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
005DC9B7 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC9BA . 8B92 24200000 mov edx,dword ptr ds:[edx+2024]
005DC9C0 . E8 3774E2FF call 00403DFC
005DC9C5 . FF75 E0 push dword ptr ss:[ebp-20]
005DC9C8 . FF75 E4 push dword ptr ss:[ebp-1C]
005DC9CB . 68 00CF5D00 push 005DCF00
005DC9D0 . 8D85 88F8FFFF lea eax,dword ptr ss:[ebp-778]
005DC9D6 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DC9D9 . 81C2 1A300000 add edx,301A
005DC9DF . E8 A475E2FF call 00403F88
005DC9E4 . FFB5 88F8FFFF push dword ptr ss:[ebp-778]
005DC9EA . 68 98CE5D00 push 005DCE98 ; \n
005DC9EF . 68 A4CE5D00 push 005DCEA4 ; \n
005DC9F4 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DC9F7 . BA 06000000 mov edx,6
005DC9FC . E8 A376E2FF call 004040A4
005DCA01 . FF75 E0 push dword ptr ss:[ebp-20]
005DCA04 . 8D85 84F8FFFF lea eax,dword ptr ss:[ebp-77C]
005DCA0A . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DCA0D . 81C2 04300000 add edx,3004
005DCA13 . E8 7075E2FF call 00403F88
005DCA18 . FFB5 84F8FFFF push dword ptr ss:[ebp-77C]
005DCA1E . 68 98CE5D00 push 005DCE98 ; \n
005DCA23 . 68 A4CE5D00 push 005DCEA4 ; \n
005DCA28 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DCA2B . BA 04000000 mov edx,4
005DCA30 . E8 6F76E2FF call 004040A4
005DCA35 . 33D2 xor edx,edx
005DCA37 . 55 push ebp
005DCA38 . 68 5ACC5D00 push 005DCC5A
005DCA3D . 64:FF32 push dword ptr fs:[edx]
005DCA40 . 64:8922 mov dword ptr fs:[edx],esp
005DCA43 . 837D E4 00 cmp dword ptr ss:[ebp-1C],0
005DCA47 . 0F84 03020000 je 005DCC50
005DCA4D . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCA50 . 05 EE2F0000 add eax,2FEE
005DCA55 . BA 04CF5D00 mov edx,005DCF04 ; ASCII 05,"8.6.2"
005DCA5A . E8 A561E2FF call 00402C04
005DCA5F . 77 18 ja short 005DCA79
005DCA61 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCA64 . 05 EE2F0000 add eax,2FEE
005DCA69 . BA 0CCF5D00 mov edx,005DCF0C
005DCA6E . E8 9161E2FF call 00402C04
005DCA73 . 0F83 D7010000 jnb 005DCC50
005DCA79 > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCA7C . 8B80 2C2D0000 mov eax,dword ptr ds:[eax+2D2C]
005DCA82 . 85C0 test eax,eax
005DCA84 . 0F8E C6010000 jle 005DCC50
005DCA8A . 83F8 1F cmp eax,1F
005DCA8D . 0F8D BD010000 jge 005DCC50
005DCA93 . 8BF0 mov esi,eax
005DCA95 . 85F6 test esi,esi
005DCA97 . 0F8E B3010000 jle 005DCC50
005DCA9D . BB 01000000 mov ebx,1
005DCAA2 > FF75 E0 push dword ptr ss:[ebp-20]
005DCAA5 . 8D85 80F8FFFF lea eax,dword ptr ss:[ebp-780]
005DCAAB . 6BD3 15 imul edx,ebx,15
005DCAAE . 8B4D FC mov ecx,dword ptr ss:[ebp-4]
005DCAB1 . 8D9411 1B2D0000 lea edx,dword ptr ds:[ecx+edx+2D1B]
005DCAB8 . E8 CB74E2FF call 00403F88
005DCABD . FFB5 80F8FFFF push dword ptr ss:[ebp-780]
005DCAC3 . 68 98CE5D00 push 005DCE98 ; \n
005DCAC8 . 68 A4CE5D00 push 005DCEA4 ; \n
005DCACD . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DCAD0 . BA 04000000 mov edx,4
005DCAD5 . E8 CA75E2FF call 004040A4
005DCADA . 8D85 7CF8FFFF lea eax,dword ptr ss:[ebp-784]
005DCAE0 . 6BD3 15 imul edx,ebx,15
005DCAE3 . 8B4D FC mov ecx,dword ptr ss:[ebp-4]
005DCAE6 . 8D9411 1B2D0000 lea edx,dword ptr ds:[ecx+edx+2D1B]
005DCAED . E8 9674E2FF call 00403F88
005DCAF2 . 8B85 7CF8FFFF mov eax,dword ptr ss:[ebp-784]
005DCAF8 . 8B55 E4 mov edx,dword ptr ss:[ebp-1C]
005DCAFB . E8 F475E2FF call 004040F4 关键CALL（regyyws.dat偏移1204运算后的结果与机器码比较）
005DCB00 . 0F85 42010000 jnz 005DCC48 不能跳
005DCB06 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCB09 . E8 E2F5FFFF call 005DC0F0
005DCB0E . C745 F4 01000000 mov dword ptr ss:[ebp-C],1
005DCB15 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCB18 . C780 74250000 10000000 mov dword ptr ds:[eax+2574],10
005DCB22 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCB25 . 05 D82A0000 add eax,2AD8
005DCB2A . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DCB2D . 81C2 882C0000 add edx,2C88
005DCB33 . B1 14 mov cl,14
005DCB35 . E8 9A60E2FF call 00402BD4
005DCB3A . 8D85 74F8FFFF lea eax,dword ptr ss:[ebp-78C]
005DCB40 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DCB43 . 81C2 04300000 add edx,3004
005DCB49 . E8 3A74E2FF call 00403F88
005DCB4E . 8B85 74F8FFFF mov eax,dword ptr ss:[ebp-78C]
005DCB54 . 8D95 78F8FFFF lea edx,dword ptr ss:[ebp-788]
005DCB5A . E8 65CEE2FF call 004099C4
005DCB5F . 8B95 78F8FFFF mov edx,dword ptr ss:[ebp-788]
005DCB65 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCB68 . 05 103B0000 add eax,3B10
005DCB6D . E8 4672E2FF call 00403DB8
005DCB72 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCB75 . 05 2E2C0000 add eax,2C2E
005DCB7A . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DCB7D . 81C2 04300000 add edx,3004
005DCB83 . B1 0A mov cl,0A
005DCB85 . E8 4A60E2FF call 00402BD4
005DCB8A . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCB8D . 8B88 401C0000 mov ecx,dword ptr ds:[eax+1C40]
005DCB93 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCB96 . 8B90 C83A0000 mov edx,dword ptr ds:[eax+3AC8]
005DCB9C . 8D85 70F8FFFF lea eax,dword ptr ss:[ebp-790]
005DCBA2 . E8 8974E2FF call 00404030
005DCBA7 . 8B85 70F8FFFF mov eax,dword ptr ss:[ebp-790]
005DCBAD . E8 2AD3E2FF call 00409EDC
005DCBB2 . 84C0 test al,al
005DCBB4 . 74 2A je short 005DCBE0
005DCBB6 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCBB9 . 8B88 401C0000 mov ecx,dword ptr ds:[eax+1C40]
005DCBBF . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCBC2 . 8B90 C83A0000 mov edx,dword ptr ds:[eax+3AC8]
005DCBC8 . 8D85 6CF8FFFF lea eax,dword ptr ss:[ebp-794]
005DCBCE . E8 5D74E2FF call 00404030
005DCBD3 . 8B85 6CF8FFFF mov eax,dword ptr ss:[ebp-794]
005DCBD9 . 33D2 xor edx,edx
005DCBDB . E8 20D3E2FF call 00409F00
005DCBE0 > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCBE3 . 8B88 401C0000 mov ecx,dword ptr ds:[eax+1C40]
005DCBE9 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCBEC . 8B90 C83A0000 mov edx,dword ptr ds:[eax+3AC8]
005DCBF2 . 8D85 68F8FFFF lea eax,dword ptr ss:[ebp-798]
005DCBF8 . E8 3374E2FF call 00404030
005DCBFD . 8B95 68F8FFFF mov edx,dword ptr ss:[ebp-798]
005DCC03 . 8B45 F8 mov eax,dword ptr ss:[ebp-8]
005DCC06 . E8 E974E2FF call 004040F4
005DCC0B . 74 43 je short 005DCC50
005DCC0D . 6A 00 push 0
005DCC0F . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCC12 . 8B88 401C0000 mov ecx,dword ptr ds:[eax+1C40]
005DCC18 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCC1B . 8B90 C83A0000 mov edx,dword ptr ds:[eax+3AC8]
005DCC21 . 8D85 64F8FFFF lea eax,dword ptr ss:[ebp-79C]
005DCC27 . E8 0474E2FF call 00404030
005DCC2C . 8B85 64F8FFFF mov eax,dword ptr ss:[ebp-79C]
005DCC32 . E8 7175E2FF call 004041A8
005DCC37 . 50 push eax
005DCC38 . 8B45 F8 mov eax,dword ptr ss:[ebp-8]
005DCC3B . E8 6875E2FF call 004041A8
005DCC40 . 50 push eax ; |ExistingFileName
005DCC41 . E8 42ADE2FF call 00407988 ; \CopyFileA
005DCC46 . EB 08 jmp short 005DCC50
005DCC48 > 43 inc ebx
005DCC49 . 4E dec esi
005DCC4A .^ 0F85 52FEFFFF jnz 005DCAA2
005DCC50 > 33C0 xor eax,eax
005DCC52 . 5A pop edx
005DCC53 . 59 pop ecx
005DCC54 . 59 pop ecx
005DCC55 . 64:8910 mov dword ptr fs:[eax],edx
005DCC58 . EB 60 jmp short 005DCCBA
005DCC5A .^ E9 6568E2FF jmp 004034C4
005DCC5F . E8 BC6BE2FF call 00403820
005DCC64 . EB 54 jmp short 005DCCBA
005DCC66 > 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCC69 . 8B88 401C0000 mov ecx,dword ptr ds:[eax+1C40]
005DCC6F . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCC72 . 8B90 C83A0000 mov edx,dword ptr ds:[eax+3AC8]
005DCC78 . 8D85 60F8FFFF lea eax,dword ptr ss:[ebp-7A0]
005DCC7E . E8 AD73E2FF call 00404030
005DCC83 . 8B85 60F8FFFF mov eax,dword ptr ss:[ebp-7A0]
005DCC89 . E8 4ED2E2FF call 00409EDC
005DCC8E . 84C0 test al,al
005DCC90 . 74 28 je short 005DCCBA
005DCC92 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCC95 . 8B88 401C0000 mov ecx,dword ptr ds:[eax+1C40]
005DCC9B . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCC9E . 8B90 C83A0000 mov edx,dword ptr ds:[eax+3AC8]
005DCCA4 . 8D85 5CF8FFFF lea eax,dword ptr ss:[ebp-7A4]
005DCCAA . E8 8173E2FF call 00404030
005DCCAF . 8B85 5CF8FFFF mov eax,dword ptr ss:[ebp-7A4]
005DCCB5 . E8 3ED3E2FF call 00409FF8
005DCCBA > 33C0 xor eax,eax
005DCCBC . 5A pop edx
005DCCBD . 59 pop ecx
005DCCBE . 59 pop ecx
005DCCBF . 64:8910 mov dword ptr fs:[eax],edx
005DCCC2 . EB 29 jmp short 005DCCED
005DCCC4 .^ E9 FB67E2FF jmp 004034C4
005DCCC9 . FF75 E0 push dword ptr ss:[ebp-20]
005DCCCC . 68 18CF5D00 push 005DCF18 ; except
005DCCD1 . 68 98CE5D00 push 005DCE98 ; \n
005DCCD6 . 68 A4CE5D00 push 005DCEA4 ; \n
005DCCDB . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DCCDE . BA 04000000 mov edx,4
005DCCE3 . E8 BC73E2FF call 004040A4
005DCCE8 . E8 336BE2FF call 00403820
005DCCED > 837D F4 01 cmp dword ptr ss:[ebp-C],1
005DCCF1 . 0F84 B5000000 je 005DCDAC
005DCCF7 . 837D E0 00 cmp dword ptr ss:[ebp-20],0
005DCCFB . 0F84 AB000000 je 005DCDAC
005DCD01 . 33C0 xor eax,eax
005DCD03 . 55 push ebp
005DCD04 . 68 A2CD5D00 push 005DCDA2
005DCD09 . 64:FF30 push dword ptr fs:[eax]
005DCD0C . 64:8920 mov dword ptr fs:[eax],esp
005DCD0F . FF75 E0 push dword ptr ss:[ebp-20]
005DCD12 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCD15 . FFB0 E43A0000 push dword ptr ds:[eax+3AE4]
005DCD1B . 68 00CF5D00 push 005DCF00
005DCD20 . 68 28CF5D00 push 005DCF28 ; 8.6.2
005DCD25 . 68 98CE5D00 push 005DCE98 ; \n
005DCD2A . 68 A4CE5D00 push 005DCEA4 ; \n
005DCD2F . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DCD32 . BA 06000000 mov edx,6
005DCD37 . E8 6873E2FF call 004040A4
005DCD3C . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCD3F . 8B90 D81E0000 mov edx,dword ptr ds:[eax+1ED8]
005DCD45 . 8D45 F8 lea eax,dword ptr ss:[ebp-8]
005DCD48 . B9 38CF5D00 mov ecx,005DCF38 ; yytest
005DCD4D . E8 DE72E2FF call 00404030
005DCD52 . 8B55 F8 mov edx,dword ptr ss:[ebp-8]
005DCD55 . 8D85 C4F8FFFF lea eax,dword ptr ss:[ebp-73C]
005DCD5B . E8 569CE2FF call 004069B6
005DCD60 . 8D85 C4F8FFFF lea eax,dword ptr ss:[ebp-73C]
005DCD66 . E8 73A0E2FF call 00406DDE
005DCD6B . E8 0C5BE2FF call 0040287C
005DCD70 . 8B55 E0 mov edx,dword ptr ss:[ebp-20]
005DCD73 . 8D85 C4F8FFFF lea eax,dword ptr ss:[ebp-73C]
005DCD79 . E8 FE75E2FF call 0040437C
005DCD7E . E8 A0A2E2FF call 00407023
005DCD83 . E8 F45AE2FF call 0040287C
005DCD88 . 8D85 C4F8FFFF lea eax,dword ptr ss:[ebp-73C]
005DCD8E . E8 8D9DE2FF call 00406B20
005DCD93 . E8 E45AE2FF call 0040287C
005DCD98 . 33C0 xor eax,eax
005DCD9A . 5A pop edx
005DCD9B . 59 pop ecx
005DCD9C . 59 pop ecx
005DCD9D . 64:8910 mov dword ptr fs:[eax],edx
005DCDA0 . EB 0A jmp short 005DCDAC
005DCDA2 .^ E9 1D67E2FF jmp 004034C4
005DCDA7 . E8 746AE2FF call 00403820
005DCDAC > 837D F4 00 cmp dword ptr ss:[ebp-C],0
005DCDB0 . 75 38 jnz short 005DCDEA
005DCDB2 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCDB5 . C680 D82A0000 00 mov byte ptr ds:[eax+2AD8],0
005DCDBC . 8D85 5CF7FFFF lea eax,dword ptr ss:[ebp-8A4]
005DCDC2 . 8B55 FC mov edx,dword ptr ss:[ebp-4]
005DCDC5 . 8B92 64250000 mov edx,dword ptr ds:[edx+2564]
005DCDCB . B9 FF000000 mov ecx,0FF
005DCDD0 . E8 EB71E2FF call 00403FC0
005DCDD5 . 8D95 5CF7FFFF lea edx,dword ptr ss:[ebp-8A4]
005DCDDB . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCDDE . 05 732C0000 add eax,2C73
005DCDE3 . B1 14 mov cl,14
005DCDE5 . E8 EA5DE2FF call 00402BD4
005DCDEA > 8B5D F4 mov ebx,dword ptr ss:[ebp-C]
005DCDED . B9 01000000 mov ecx,1
005DCDF2 . BA 05000000 mov edx,5
005DCDF7 . 8B45 FC mov eax,dword ptr ss:[ebp-4]
005DCDFA . E8 89030100 call 005ED188
005DCDFF . 33C0 xor eax,eax
005DCE01 . 5A pop edx
005DCE02 . 59 pop ecx
005DCE03 . 59 pop ecx
005DCE04 . 64:8910 mov dword ptr fs:[eax],edx
005DCE07 . 68 41CE5D00 push 005DCE41
005DCE0C > 8D85 5CF8FFFF lea eax,dword ptr ss:[ebp-7A4]
005DCE12 . BA 1A000000 mov edx,1A
005DCE17 . E8 6C6FE2FF call 00403D88
005DCE1C . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
005DCE1F . BA 03000000 mov edx,3
005DCE24 . E8 5F6FE2FF call 00403D88
005DCE29 . 8D45 F0 lea eax,dword ptr ss:[ebp-10]
005DCE2C . E8 336FE2FF call 00403D64
005DCE31 . 8D45 F8 lea eax,dword ptr ss:[ebp-8]
005DCE34 . E8 2B6FE2FF call 00403D64
005DCE39 . C3 retn
005DCE3A .^ E9 3969E2FF jmp 00403778
005DCE3F .^ EB CB jmp short 005DCE0C
005DCE41 . 8BC3 mov eax,ebx
005DCE43 . 5F pop edi
005DCE44 . 5E pop esi
005DCE45 . 5B pop ebx
005DCE46 . 8BE5 mov esp,ebp
005DCE48 . 5D pop ebp
005DCE49 . C3 retn
[复制链接]
发表于 2019-1-26 00:55
