|
直接用PE-Scan脱壳,用w32dasm反汇编 * Referenced by a (U)nconditional or (C)onditional Jump at Address: :004A903C(C)--------------------------跟进
:004A9087 6A10 push 00000010 * Possible StringData Ref from Code Obj ->"PCMedik Registration" :004A9089 68E4904A00 push 004A90E4 * Possible StringData Ref from Code Obj ->"Sorry Invalid Key File!" ******************** 到这儿 :004A903C 7449 je 004A9087------------jne :004A903E A1BC8D4C00 mov eax, dword ptr [004C8DBC] :004A9043 E8708BFBFF call 00461BB8 :004A9048 A1B0784C00 mov eax, dword ptr [004C78B0] :004A904D 8B00 mov eax, dword ptr [eax] :004A904F 8B8014030000 mov eax, dword ptr [eax+00000314] :004A9055 E8CEA6F5FF call 00403728 :004A905A A1B0784C00 mov eax, dword ptr [004C78B0] :004A905F 8B00 mov eax, dword ptr [eax] :004A9061 8B8018030000 mov eax, dword ptr [eax+00000318] :004A9067 E8BCA6F5FF call 00403728 :004A906C 6A40 push 00000040 * Possible StringData Ref from Code Obj ->"PCMedik Registration"
上一篇:WinRescue XP V1.07.20
下一篇:关于小小助手的破解
|