:0047A810
55 push
ebp
:0047A811 8BEC
mov ebp, esp
:0047A813 83E8
add esp, FFFFFFE8
:0047A816 53
push ebx
:0047A817 56
push
esi
:0047A818 57
push edi
:0047A819 33C9
xor ecx, ecx
:0047A81B 894DEC
mov dword ptr [ebp-14], ecx
:0047A81E
894DE8 mov dword
ptr [ebp-18], ecx
:0047A821 8BDA
mov ebx, edx
:0047A823 8BF0
mov esi, eax
:0047A825 33C0
xor eax,
eax
:0047A827 55
push ebp
:0047A828 684AA94700
push 0047A94A
:0047A82D 64FF30
push dword ptr fs:[eax]
:0047A830 648920
mov dword ptr fs:[eax],
esp
:0047A833 8BC3
mov eax, ebx
:0047A835 E8F27DF9FF
call 0041262C
:0047A83A 8BD0
mov edx, eax
:0047A83C 83EA10
sub edx, 00000010
:0047A83F
33C9 xor
ecx, ecx
:0047A841 8BC3
mov eax, ebx
:0047A843 8B38
mov edi, dword ptr [eax]
:0047A845 FF570C
call [edi+0C]
:0047A848
8D55F0 lea edx,
dword ptr [ebp-10]
:0047A84B B910000000
mov ecx, 00000010
:0047A850 8BC3
mov eax, ebx
:0047A852 8B38
mov edi, dword ptr [eax]
:0047A854
FF5704 call [edi+04]
:0047A857
8B7DFC mov edi,
dword ptr [ebp-04]
:0047A85A 81FF97130000
cmp edi, 00001397
:0047A860 7440
je 0047A8A2
<===跳转了,不然就进看下面:-)
:0047A862 6A00
push 00000000
:0047A864 8D4DE8
lea ecx, dword ptr
[ebp-18]
:0047A867 33D2
xor edx, edx
:0047A869 8BC7
mov eax, edi
:0047A86B E8C0E0F8FF
call 00408930
:0047A870 8B4DE8
mov ecx, dword ptr [ebp-18]
:0047A873
8D45EC lea eax,
dword ptr [ebp-14]
*
Possible StringData Ref from Code Obj ->"这本 eBook 具有一个错误的签名. "
->"这个程序将被终止.
签名:
"
|
:0047A876 BA60A94700
mov edx, 0047A960
:0047A87B E8F095F8FF
call 00403E70
:0047A880 8B45EC
mov eax, dword ptr
[ebp-14]
:0047A883 668B0DB4A94700 mov cx,
word ptr [0047A9B4]
:0047A88A B201
mov dl, 01
:0047A88C E8D337FDFF
call 0044E064
:0047A891 A10CE84700
mov eax, dword ptr [0047E80C]
:0047A896 8B00
mov eax,
dword ptr [eax]
:0047A898 E8ABFCFCFF
call 0044A548
:0047A89D E98D000000
jmp 0047A92F
*
Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047A860(C)
|
:0047A8A2
8BC3 mov
eax, ebx <===程序跳到这里,继续往下走
:0047A8A4
E8837DF9FF call 0041262C
:0047A8A9
8BF8 mov
edi, eax
:0047A8AB 2B7DF0
sub edi, dword ptr [ebp-10]
:0047A8AE 89BE1C030000
mov dword ptr [esi+0000031C], edi
:0047A8B4 33C9
xor ecx,
ecx
:0047A8B6 8BD7
mov edx, edi
:0047A8B8 8BC3
mov eax, ebx
:0047A8BA 8B38
mov edi, dword ptr [eax]
:0047A8BC
FF570C call [edi+0C]
:0047A8BF
8BD3 mov
edx, ebx
:0047A8C1 8BC6
mov eax, esi
:0047A8C3 E858030000
call 0047AC20
:0047A8C8 8BD3
mov edx, ebx
:0047A8CA 8BC6
mov eax, esi
:0047A8CC
E807F5FFFF call 00479DD8 <===因为一过这里就出现了未注册信息,所以F8第五次进入(555555~~~~还要进)
:0047A8D1 8BD3
mov edx, ebx
:0047A8D3 8BC6
mov eax, esi
:0047A8D5 E816FAFFFF
call 0047A2F0
:0047A8DA 8BD3
mov edx,
ebx
:0047A8DC 8BC6
mov eax, esi
:0047A8DE E8C9F5FFFF
call 00479EAC
:0047A8E3 80BE6C03000000
cmp byte ptr [esi+0000036C], 00
:0047A8EA 7509
jne 0047A8F5
:0047A8EC 8BD3
mov edx,
ebx
:0047A8EE 8BC6
mov eax, esi
:0047A8F0 E83BFAFFFF
call 0047A330
......
......
_______________________________F8来到下面代码段_______________________________________________
:00479DD8
55 push
ebp
:00479DD9 8BEC
mov ebp, esp
:00479DDB 51
push ecx
:00479DDC 53
push ebx
:00479DDD 56
push
esi
:00479DDE 8BF2
mov esi, edx
:00479DE0 8BD8
mov ebx, eax
:00479DE2 8D9320030000
lea edx, dword ptr [ebx+00000320]
:00479DE8
8BC6 mov
eax, esi
:00479DEA E83DE5FFFF call
0047832C
:00479DEF 8D9324030000 lea
edx, dword ptr [ebx+00000324]
:00479DF5 8BC6
mov eax, esi
:00479DF7 E830E5FFFF
call 0047832C
:00479DFC 8D9328030000
lea edx, dword ptr [ebx+00000328]
:00479E02
8BC6 mov
eax, esi
:00479E04 E823E5FFFF call
0047832C
:00479E09 6A00
push 00000000
:00479E0B 8B9324030000
mov edx, dword ptr [ebx+00000324]
:00479E11 8B8320030000
mov eax, dword ptr [ebx+00000320]
本文来自电脑杂谈,转载请注明本文网址:
https://www.pc-fly.com/a/ruanjian/article-14170-3.html
泻作屎
刚开战没多久
就算原料里有虫卵但后续的磨粉再到高温烤熟密封包装都会让虫卵坏死