• 2382阅读
  • 0回复

才翻出来的以前的HP保护相关资源 [复制链接]

上一主题 下一主题
离线啊冲
 

只看楼主 倒序阅读 使用道具 楼主  发表于: 2015-06-01


HP保护,老版本的代码。
这是一位网友给我的,我都忘了,还是发给大家吧。


[XueTr][[Disasm]]: 436
地址        二进制        汇编
87D77050        55        push   ebp
87D77051        8BEC        mov    ebp, esp
87D77053        6A FF        push   -1
87D77055        68 0067D887        push   87D86700
87D7705A        68 0E56D887        push   87D8560E
87D7705F        64:A1 00000000        mov    eax, dword ptr fs:[0]
87D77065        50        push   eax
87D77066        64:8925 00000000        mov    dword ptr fs:[0], esp
87D7706D        81C4 70FFFFFF        add    esp, 0FFFFFF70
87D77073        53        push   ebx
87D77074        56        push   esi
87D77075        57        push   edi
87D77076        8965 E8        mov    dword ptr [ebp-18], esp
87D77079        C745 E0 00000000        mov    dword ptr [ebp-20], 0
87D77080        C745 E4 00000000        mov    dword ptr [ebp-1C], 0
87D77087        C745 DC 00000000        mov    dword ptr [ebp-24], 0
87D7708E        B8 904CD987        mov    eax, 87D94C90  //+3F
87D77093        B9 01000000        mov    ecx, 1
87D77098        F0:0FC108        lock xadd  dword ptr [eax], ecx  //老规矩 【87D94C90】+1
87D7709C        833D D44ED987 00        cmp    dword ptr [87D94ED4], 00000000  //42
87D770A3        74 0D        je     87D770B2
87D770A5        833D D84ED987 00        cmp    dword ptr [87D94ED8], 00000000  //28
87D770AC        0F85 F5000000        jne    87D771A7
87D770B2        833D D864D987 05        cmp    dword ptr [87D964D8], 00000005 //5
87D770B9        75 26        jne    87D770E1
87D770BB        833D 7862D987 00        cmp    dword ptr [87D96278], 00000000 // 1
87D770C2        75 1D        jne    87D770E1
87D770C4        BA 40000000        mov    edx, 40  //
87D770C9        B8 D44ED987        mov    eax, 87D94ED4
87D770CE        8710        xchg   dword ptr [eax], edx
87D770D0        B9 28000000        mov    ecx, 28
87D770D5        BA D84ED987        mov    edx, 87D94ED8
87D770DA        870A        xchg   dword ptr [edx], ecx
87D770DC        E9 C6000000        jmp    87D771A7
87D770E1        833D D864D987 05        cmp    dword ptr [87D964D8], 00000005 //相等
87D770E8        75 26        jne    87D77110
87D770EA        833D 7862D987 01        cmp    dword ptr [87D96278], 00000001 //两个一直都相等
87D770F1        75 1D        jne    87D77110
87D770F3        B8 42000000        mov    eax, 42
87D770F8        B9 D44ED987        mov    ecx, 87D94ED4
87D770FD        8701        xchg   dword ptr [ecx], eax
87D770FF        BA 28000000        mov    edx, 28
87D77104        B8 D84ED987        mov    eax, 87D94ED8
87D77109        8710        xchg   dword ptr [eax], edx
87D7710B        E9 97000000        jmp    87D771A7
87D77110        833D D864D987 05        cmp    dword ptr [87D964D8], 00000005
87D77117        75 23        jne    87D7713C
87D77119        833D 7862D987 02        cmp    dword ptr [87D96278], 00000002
87D77120        75 1A        jne    87D7713C
87D77122        B9 42000000        mov    ecx, 42
87D77127        BA D44ED987        mov    edx, 87D94ED4
87D7712C        870A        xchg   dword ptr [edx], ecx
87D7712E        B8 28000000        mov    eax, 28
87D77133        B9 D84ED987        mov    ecx, 87D94ED8
87D77138        8701        xchg   dword ptr [ecx], eax
87D7713A        EB 6B        jmp    87D771A7
87D7713C        833D D864D987 06        cmp    dword ptr [87D964D8], 00000006
87D77143        75 23        jne    87D77168
87D77145        833D 7862D987 00        cmp    dword ptr [87D96278], 00000000
87D7714C        75 1A        jne    87D77168
87D7714E        BA 42000000        mov    edx, 42
87D77153        B8 D44ED987        mov    eax, 87D94ED4
87D77158        8710        xchg   dword ptr [eax], edx
87D7715A        B9 30000000        mov    ecx, 30
87D7715F        BA D84ED987        mov    edx, 87D94ED8
87D77164        870A        xchg   dword ptr [edx], ecx
87D77166        EB 3F        jmp    87D771A7
87D77168        833D D864D987 06        cmp    dword ptr [87D964D8], 00000006
87D7716F        75 23        jne    87D77194
87D77171        833D 7862D987 01        cmp    dword ptr [87D96278], 00000001
87D77178        75 1A        jne    87D77194
87D7717A        B8 41000000        mov    eax, 41
87D7717F        B9 D44ED987        mov    ecx, 87D94ED4
87D77184        8701        xchg   dword ptr [ecx], eax
87D77186        BA 30000000        mov    edx, 30
87D7718B        B8 D84ED987        mov    eax, 87D94ED8
87D77190        8710        xchg   dword ptr [eax], edx
87D77192        EB 13        jmp    87D771A7
87D77194        83C9 FF        or     ecx, FFFFFFFF
87D77197        BA D44ED987        mov    edx, 87D94ED4
87D7719C        870A        xchg   dword ptr [edx], ecx
87D7719E        33C0        xor    eax, eax
87D771A0        B9 D84ED987        mov    ecx, 87D94ED8
87D771A5        8701        xchg   dword ptr [ecx], eax
87D771A7        8B55 08        mov    edx, dword ptr [ebp+8]
87D771AA        3B15 D44ED987        cmp    edx, dword ptr [87D94ED4]  //42
87D771B0        74 05        je     87D771B7----------------------------------------------
87D771B2        E9 C1030000        jmp    87D77578--------------------------------------分水岭就在这里
87D771B7        6A 00        push   0      //如果跳过去了,EAX==0,转到主HOOK的第2个函数去了,其中的全局变量可以不用管了,除了老1
87D771B9        FF15 BC60D887        call   dword ptr [87D860BC]-----------------------------------IoGetCurrentProcess
87D771BF //+16f        50        push   eax                          //注意EBP+X的参数改变了没
87D771C0        E8 5B3AFFFF        call   87D6AC20  //不能调用这个CALL,危险    
87D771C5        0FB6C0        movzx  eax, al                 //在Io里改EBP-X的值没用,因为可能不到IO,直接都跳过去了,没机会改
87D771C8        85C0        test   eax, eax
87D771CA        75 05        jne    87D771D1
87D771CC        E9 A7030000        jmp    87D77578 //放过IO,也不定会到下面的函数了,除非
87D771D1        C745 FC 00000000        mov    dword ptr [ebp-4], 0
87D771D8        8B4D 0C        mov    ecx, dword ptr [ebp+C]
87D771DB        030D D84ED987        add    ecx, dword ptr [87D94ED8]
87D771E1        894D D8        mov    dword ptr [ebp-28], ecx
87D771E4        68 47415054        push   54504147
87D771E9        68 08020000        push   208
87D771EE        6A 01        push   1
87D771F0        FF15 3460D887        call   dword ptr [87D86034]
87D771F6        8945 E4        mov    dword ptr [ebp-1C], eax
87D771F9        68 47415054        push   54504147
87D771FE        68 08020000        push   208
87D77203        6A 01        push   1
87D77205        FF15 3460D887        call   dword ptr [87D86034]
87D7720B        8945 DC        mov    dword ptr [ebp-24], eax
87D7720E        837D E4 00        cmp    dword ptr [ebp-1C], 00000000
87D77212        74 06        je     87D7721A
87D77214        837D DC 00        cmp    dword ptr [ebp-24], 00000000
87D77218        75 0C        jne    87D77226
87D7721A        C745 FC FFFFFFFF        mov    dword ptr [ebp-4], 0FFFFFFFF
87D77221        E9 52030000        jmp    87D77578
87D77226        6A 02        push   2
87D77228        68 00A7D887        push   87D8A700
87D7722D        8B55 D8        mov    edx, dword ptr [ebp-28]
87D77230        83C2 02        add    edx, 2
87D77233        52        push   edx
87D77234        E8 CFE30000        call   87D85608
87D77239        83C4 0C        add    esp, 0C
87D7723C        85C0        test   eax, eax
87D7723E        0F84 B6010000        je     87D773FA
87D77244        833D DC4ED987 00        cmp    dword ptr [87D94EDC], 00000000
87D7724B        75 39        jne    87D77286
87D7724D        C745 D4 A05FD987        mov    dword ptr [ebp-2C], 87D95FA0
87D77254        8B45 D4        mov    eax, dword ptr [ebp-2C]
87D77257        83C0 02        add    eax, 2
87D7725A        8945 D0        mov    dword ptr [ebp-30], eax
87D7725D        8B4D D4        mov    ecx, dword ptr [ebp-2C]
87D77260        66:8B11        mov    dx, word ptr [ecx]
87D77263        66:8955 CE        mov    word ptr [ebp-32], dx
87D77267        8345 D4 02        add    dword ptr [ebp-2C], 2
87D7726B        66:837D CE 00        cmp    word ptr [ebp-32], 0000
87D77270        75 EB        jne    87D7725D
87D77272        8B45 D4        mov    eax, dword ptr [ebp-2C]
87D77275        2B45 D0        sub    eax, dword ptr [ebp-30]
87D77278        D1F8        sar    eax,
87D7727A        8945 C8        mov    dword ptr [ebp-38], eax
87D7727D        8B4D C8        mov    ecx, dword ptr [ebp-38]
87D77280        890D DC4ED987        mov    dword ptr [87D94EDC], ecx
87D77286        8B55 D8        mov    edx, dword ptr [ebp-28]
87D77289        8955 C4        mov    dword ptr [ebp-3C], edx
87D7728C        8B45 C4        mov    eax, dword ptr [ebp-3C]
87D7728F        83C0 02        add    eax, 2
87D77292        8945 C0        mov    dword ptr [ebp-40], eax
87D77295        8B4D C4        mov    ecx, dword ptr [ebp-3C]
87D77298        66:8B11        mov    dx, word ptr [ecx]
87D7729B        66:8955 BE        mov    word ptr [ebp-42], dx
87D7729F        8345 C4 02        add    dword ptr [ebp-3C], 2
87D772A3        66:837D BE 00        cmp    word ptr [ebp-42], 0000
87D772A8        75 EB        jne    87D77295
87D772AA        8B45 C4        mov    eax, dword ptr [ebp-3C]
87D772AD        2B45 C0        sub    eax, dword ptr [ebp-40]
87D772B0        D1F8        sar    eax,
87D772B2        8945 B8        mov    dword ptr [ebp-48], eax
87D772B5        8B4D B8        mov    ecx, dword ptr [ebp-48]
87D772B8        8B15 DC4ED987        mov    edx, dword ptr [87D94EDC]
87D772BE        8D440A 09        lea    eax, [edx+ecx+9]
87D772C2        3D 03010000        cmp    eax, 103
87D772C7        0F83 2B010000        jnc    87D773F8
87D772CD        C745 B4 A05FD987        mov    dword ptr [ebp-4C], 87D95FA0
87D772D4        8B4D E4        mov    ecx, dword ptr [ebp-1C]
87D772D7        894D B0        mov    dword ptr [ebp-50], ecx
87D772DA        8B55 B0        mov    edx, dword ptr [ebp-50]
87D772DD        8955 AC        mov    dword ptr [ebp-54], edx
87D772E0        8B45 B4        mov    eax, dword ptr [ebp-4C]
87D772E3        66:8B08        mov    cx, word ptr [eax]
87D772E6        66:894D AA        mov    word ptr [ebp-56], cx
87D772EA        8B55 B0        mov    edx, dword ptr [ebp-50]
87D772ED        66:8B45 AA        mov    ax, word ptr [ebp-56]
87D772F1        66:8902        mov    word ptr [edx], ax
87D772F4        8B4D B4        mov    ecx, dword ptr [ebp-4C]
87D772F7        83C1 02        add    ecx, 2
87D772FA        894D B4        mov    dword ptr [ebp-4C], ecx
87D772FD        8B55 B0        mov    edx, dword ptr [ebp-50]
87D77300        83C2 02        add    edx, 2
87D77303        8955 B0        mov    dword ptr [ebp-50], edx
87D77306        66:837D AA 00        cmp    word ptr [ebp-56], 0000
87D7730B        75 D3        jne    87D772E0
87D7730D        C745 A4 08A7D887        mov    dword ptr [ebp-5C], 87D8A708
87D77314        8B45 A4        mov    eax, dword ptr [ebp-5C]
87D77317        8945 A0        mov    dword ptr [ebp-60], eax
87D7731A        8B4D A4        mov    ecx, dword ptr [ebp-5C]
87D7731D        66:8B11        mov    dx, word ptr [ecx]
87D77320        66:8955 9E        mov    word ptr [ebp-62], dx
87D77324        8345 A4 02        add    dword ptr [ebp-5C], 2
87D77328        66:837D 9E 00        cmp    word ptr [ebp-62], 0000
87D7732D        75 EB        jne    87D7731A
87D7732F        8B45 A4        mov    eax, dword ptr [ebp-5C]
87D77332        2B45 A0        sub    eax, dword ptr [ebp-60]
87D77335        8B4D A0        mov    ecx, dword ptr [ebp-60]
87D77338        894D 98        mov    dword ptr [ebp-68], ecx
87D7733B        8945 94        mov    dword ptr [ebp-6C], eax
87D7733E        8B55 E4        mov    edx, dword ptr [ebp-1C]
87D77341        83C2 FE        add    edx, -2
87D77344        8955 90        mov    dword ptr [ebp-70], edx
87D77347        8B45 90        mov    eax, dword ptr [ebp-70]
87D7734A        66:8B48 02        mov    cx, word ptr [eax+2]
87D7734E        66:894D 8E        mov    word ptr [ebp-72], cx
87D77352        8345 90 02        add    dword ptr [ebp-70], 2
87D77356        66:837D 8E 00        cmp    word ptr [ebp-72], 0000
87D7735B        75 EA        jne    87D77347
87D7735D        8B7D 90        mov    edi, dword ptr [ebp-70]
87D77360        8B75 98        mov    esi, dword ptr [ebp-68]
87D77363        8B55 94        mov    edx, dword ptr [ebp-6C]
87D77366        8BCA        mov    ecx, edx
87D77368        C1E9 02        shr    ecx, 2
87D7736B        F3:A5        rep(e) movsw/d  dword ptr es:esi, es:edi
87D7736D        8BCA        mov    ecx, edx
87D7736F        83E1 03        and    ecx, 00000003
87D77372        F3:A4        rep(e) movsb  es:esi, es:edi
87D77374        8B45 D8        mov    eax, dword ptr [ebp-28]
87D77377        8945 88        mov    dword ptr [ebp-78], eax
87D7737A        8B4D 88        mov    ecx, dword ptr [ebp-78]
87D7737D        894D 84        mov    dword ptr [ebp-7C], ecx
87D77380        8B55 88        mov    edx, dword ptr [ebp-78]
87D77383        66:8B02        mov    ax, word ptr [edx]
87D77386        66:8945 82        mov    word ptr [ebp-7E], ax
87D7738A        8345 88 02        add    dword ptr [ebp-78], 2
87D7738E        66:837D 82 00        cmp    word ptr [ebp-7E], 0000
87D77393        75 EB        jne    87D77380
87D77395        8B4D 88        mov    ecx, dword ptr [ebp-78]
87D77398        2B4D 84        sub    ecx, dword ptr [ebp-7C]
87D7739B        8B55 84        mov    edx, dword ptr [ebp-7C]
87D7739E        8995 7CFFFFFF        mov    dword ptr [ebp+FFFFFF7C], edx
87D773A4        898D 78FFFFFF        mov    dword ptr [ebp+FFFFFF78], ecx
87D773AA        8B45 E4        mov    eax, dword ptr [ebp-1C]
87D773AD        83C0 FE        add    eax, -2
87D773B0        8985 74FFFFFF        mov    dword ptr [ebp+FFFFFF74], eax
87D773B6        8B8D 74FFFFFF        mov    ecx, dword ptr [ebp+FFFFFF74]
87D773BC        66:8B51 02        mov    dx, word ptr [ecx+2]
87D773C0        66:8995 72FFFFFF        mov    word ptr [ebp+FFFFFF72], dx
87D773C7        8385 74FFFFFF 02        add    dword ptr [ebp+FFFFFF74], 2
87D773CE        66:83BD 72FFFFFF 00        cmp    word ptr [ebp+FFFFFF72], 0000
87D773D6        75 DE        jne    87D773B6
87D773D8        8BBD 74FFFFFF        mov    edi, dword ptr [ebp+FFFFFF74]
87D773DE        8BB5 7CFFFFFF        mov    esi, dword ptr [ebp+FFFFFF7C]
87D773E4        8B85 78FFFFFF        mov    eax, dword ptr [ebp+FFFFFF78]
87D773EA        8BC8        mov    ecx, eax
87D773EC        C1E9 02        shr    ecx, 2
87D773EF        F3:A5        rep(e) movsw/d  dword ptr es:esi, es:edi
87D773F1        8BC8        mov    ecx, eax
87D773F3        83E1 03        and    ecx, 00000003
87D773F6        F3:A4        rep(e) movsb  es:esi, es:edi
87D773F8        EB 66        jmp    87D77460
87D773FA        8B4D D8        mov    ecx, dword ptr [ebp-28]
87D773FD        898D 6CFFFFFF        mov    dword ptr [ebp+FFFFFF6C], ecx
87D77403        8B55 E4        mov    edx, dword ptr [ebp-1C]
87D77406        8995 68FFFFFF        mov    dword ptr [ebp+FFFFFF68], edx
87D7740C        8B85 68FFFFFF        mov    eax, dword ptr [ebp+FFFFFF68]
87D77412        8985 64FFFFFF        mov    dword ptr [ebp+FFFFFF64], eax
87D77418        8B8D 6CFFFFFF        mov    ecx, dword ptr [ebp+FFFFFF6C]
87D7741E        66:8B11        mov    dx, word ptr [ecx]
87D77421        66:8995 62FFFFFF        mov    word ptr [ebp+FFFFFF62], dx
87D77428        8B85 68FFFFFF        mov    eax, dword ptr [ebp+FFFFFF68]
87D7742E        66:8B8D 62FFFFFF        mov    cx, word ptr [ebp+FFFFFF62]
87D77435        66:8908        mov    word ptr [eax], cx
87D77438        8B95 6CFFFFFF        mov    edx, dword ptr [ebp+FFFFFF6C]
87D7743E        83C2 02        add    edx, 2
87D77441        8995 6CFFFFFF        mov    dword ptr [ebp+FFFFFF6C], edx
87D77447        8B85 68FFFFFF        mov    eax, dword ptr [ebp+FFFFFF68]
87D7744D        83C0 02        add    eax, 2
87D77450        8985 68FFFFFF        mov    dword ptr [ebp+FFFFFF68], eax
87D77456        66:83BD 62FFFFFF 00        cmp    word ptr [ebp+FFFFFF62], 0000
87D7745E        75 B8        jne    87D77418
87D77460        FF15 BC60D887        call   dword ptr [87D860BC]
87D77466        50        push   eax
87D77467        6A 00        push   0
87D77469        8B4D DC        mov    ecx, dword ptr [ebp-24]
87D7746C        51        push   ecx
87D7746D        E8 DEA5FEFF        call   87D61A50
87D77472        0FB6D0        movzx  edx, al
87D77475        85D2        test   edx, edx
87D77477        75 0C        jne    87D77485
87D77479        C745 FC FFFFFFFF        mov    dword ptr [ebp-4], 0FFFFFFFF
87D77480        E9 F3000000        jmp    87D77578
87D77485        8B45 E4        mov    eax, dword ptr [ebp-1C]
87D77488        50        push   eax
87D77489        8B4D DC        mov    ecx, dword ptr [ebp-24]
87D7748C        51        push   ecx
87D7748D        E8 7EE20000        call   87D85710
87D77492        83C4 08        add    esp, 8
87D77495        85C0        test   eax, eax
87D77497        75 0C        jne    87D774A5
87D77499        C745 FC FFFFFFFF        mov    dword ptr [ebp-4], 0FFFFFFFF
87D774A0        E9 D3000000        jmp    87D77578
87D774A5        6A 01        push   1
87D774A7        68 1CA7D887        push   87D8A71C
87D774AC        8B55 E4        mov    edx, dword ptr [ebp-1C]
87D774AF        52        push   edx
87D774B0        E8 EBE3FEFF        call   87D658A0
87D774B5        0FB6C0        movzx  eax, al
87D774B8        85C0        test   eax, eax
87D774BA        75 5C        jne    87D77518
87D774BC        6A 01        push   1
87D774BE        68 34A7D887        push   87D8A734
87D774C3        8B4D E4        mov    ecx, dword ptr [ebp-1C]
87D774C6        51        push   ecx
87D774C7        E8 D4E3FEFF        call   87D658A0
87D774CC        0FB6D0        movzx  edx, al
87D774CF        85D2        test   edx, edx
87D774D1        75 45        jne    87D77518
87D774D3        6A 01        push   1
87D774D5        68 48A7D887        push   87D8A748
87D774DA        8B45 E4        mov    eax, dword ptr [ebp-1C]
87D774DD        50        push   eax
87D774DE        E8 BDE3FEFF        call   87D658A0
87D774E3        0FB6C8        movzx  ecx, al
87D774E6        85C9        test   ecx, ecx
87D774E8        75 2E        jne    87D77518
87D774EA        6A 01        push   1
87D774EC        68 60A7D887        push   87D8A760
87D774F1        8B55 E4        mov    edx, dword ptr [ebp-1C]
87D774F4        52        push   edx
87D774F5        E8 A6E3FEFF        call   87D658A0
87D774FA        0FB6C0        movzx  eax, al
87D774FD        85C0        test   eax, eax
87D774FF        75 17        jne    87D77518
87D77501        6A 01        push   1
87D77503        68 7CA7D887        push   87D8A77C
87D77508        8B4D E4        mov    ecx, dword ptr [ebp-1C]
87D7750B        51        push   ecx
87D7750C        E8 8FE3FEFF        call   87D658A0
87D77511        0FB6D0        movzx  edx, al
87D77514        85D2        test   edx, edx
87D77516        74 09        je     87D77521
87D77518        C745 FC FFFFFFFF        mov    dword ptr [ebp-4], 0FFFFFFFF
87D7751F        EB 57        jmp    87D77578
87D77521        8B45 E4        mov    eax, dword ptr [ebp-1C]
87D77524        50        push   eax
87D77525        E8 96A1FFFF        call   87D716C0
87D7752A        0FB6C8        movzx  ecx, al
87D7752D        85C9        test   ecx, ecx
87D7752F        74 09        je     87D7753A
87D77531        C745 FC FFFFFFFF        mov    dword ptr [ebp-4], 0FFFFFFFF
87D77538        EB 3E        jmp    87D77578
87D7753A        C745 E0 01000000        mov    dword ptr [ebp-20], 1
87D77541        C745 FC FFFFFFFF        mov    dword ptr [ebp-4], 0FFFFFFFF
87D77548        EB 2E        jmp    87D77578
87D7754A        B8 01000000        mov    eax, 1
87D7754F        C3        retn
87D77550        8B65 E8        mov    esp, dword ptr [ebp-18]
87D77553        68 A2050000        push   5A2
87D77558        68 94A7D887        push   87D8A794
87D7755D        68 A0A7D887        push   87D8A7A0
87D77562        68 A8A7D887        push   87D8A7A8
87D77567        6A 03        push   3
87D77569        E8 929AFEFF        call   87D61000
87D7756E        83C4 14        add    esp, 14
87D77571        C745 FC FFFFFFFF        mov    dword ptr [ebp-4], 0FFFFFFFF
87D77578        837D E4 00        cmp    dword ptr [ebp-1C], 00000000
87D7757C        74 0F        je     87D7758D
87D7757E        68 47415054        push   54504147
87D77583        8B55 E4        mov    edx, dword ptr [ebp-1C]
87D77586        52        push   edx
87D77587        FF15 3860D887        call   dword ptr [87D86038]
87D7758D        837D DC 00        cmp    dword ptr [ebp-24], 00000000
87D77591        74 0F        je     87D775A2
87D77593        68 47415054        push   54504147
87D77598        8B45 DC        mov    eax, dword ptr [ebp-24]
87D7759B        50        push   eax
87D7759C        FF15 3860D887        call   dword ptr [87D86038]
87D775A2        B9 904CD987        mov    ecx, 87D94C90
87D775A7        83CA FF        or     edx, FFFFFFFF
87D775AA        F0:0FC111        lock xadd  dword ptr [ecx], edx  //EDX=0 EAX=0 ECX=FS:[0]=[EBP-10]
87D775AE        8B45 E0        mov    eax, dword ptr [ebp-20]            
87D775B1        8B4D F0        mov    ecx, dword ptr [ebp-10]
87D775B4        64:890D 00000000        mov    dword ptr fs:[0], ecx
87D775BB        5F        pop    edi
87D775BC        5E        pop    esi
87D775BD        5B        pop    ebx
87D775BE        8BE5        mov    esp, ebp
87D775C0        5D        pop    ebp
87D775C1        C2 0800        retn   8
87D775C4        CC        int3
87D775C5        CC        int3
87D775C6        CC        int3
87D775C7        CC        int3
87D775C8        CC        int3
87D775C9        CC        int3
87D775CA        CC        int3
87D775CB        CC        int3
87D775CC        CC        int3
87D775CD        CC        int3
87D775CE        CC        int3
87D775CF        CC        int3
87D775D0        8B4424 08        mov    eax, dword ptr [esp+8]
87D775D4        50        push   eax
87D775D5        8B4424 08        mov    eax, dword ptr [esp+8]
87D775D9        50        push   eax
87D775DA        E8 71FAFFFF        call   87D77050
87D775DF        83F8 00        cmp    eax, 00000000
87D775E2        74 08        je     87D775EC
87D775E4        B8 010000C0        mov    eax, 0C0000001
87D775E9        C2 1400        retn   14
87D775EC        FF25 D849D987        jmp    dword ptr [87D949D8]
87D775F2        CC        int3
87D775F3        CC        int3
87D775F4        CC        int3
87D775F5        CC        int3
87D775F6        CC        int3
87D775F7        CC        int3
87D775F8        CC        int3
87D775F9        CC        int3
87D775FA        CC        int3
87D775FB        CC        int3
87D775FC        CC        int3
87D775FD        CC        int3
87D775FE        CC        int3
87D775FF        CC        int3
87D77600        55        push   ebp
87D77601        8BEC        mov    ebp, esp
87D77603        81EC 10020000        sub    esp, 210
87D77609        B8 904CD987        mov    eax, 87D94C90
87D7760E        B9 01000000        mov    ecx, 1
87D77613        F0:0FC108        lock xadd  dword ptr [eax], ecx
87D77617        0FB655 10        movzx  edx, byte ptr [ebp+10]
87D7761B        85D2        test   edx, edx
87D7761D        0F84 29010000        je     87D7774C
87D77623        A1 744CD987        mov    eax, dword ptr [87D94C74]
87D77628        50        push   eax
87D77629        E8 22EDFEFF        call   87D66350
87D7762E        50        push   eax
87D7762F        E8 FC85FFFF        call   87D6FC30
87D77634        3D 60EA0000        cmp    eax, 0EA60
87D77639        76 05        jbe    87D77640
87D7763B        E9 0C010000        jmp    87D7774C
87D77640        8B4D 08        mov    ecx, dword ptr [ebp+8]
87D77643        51        push   ecx
87D77644        6A 00        push   0
87D77646        E8 D535FFFF        call   87D6AC20
87D7764B        0FB6D0        movzx  edx, al
87D7764E        85D2        test   edx, edx

此帖售价 10 小风币,已有 2 人购买 [记录] [购买]
购买后,将显示帖子中所有出售内容。
若发现会员采用欺骗的方法获取财富,请立刻举报,我们会对会员处以2-N倍的罚金,严重者封掉ID!
此段为出售的内容,购买后显示

善者 慈悲心常在 无怨无恨 以苦为乐
默认压缩密码www.hifyl.com
文件分享密码问题:http://www.hifyl.com/read-htm-tid-4444.html
快速回复
限100 字节
批量上传需要先选择文件,再选择上传
 
上一个 下一个