* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:676965D3(C)
|
:676965E2 8A5D0B mov bl, byte ptr [ebp+0B]
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:676965B6(C), :676965CE(C)
|
:676965E5 FF75FC push [ebp-04]
:676965E8 FFD6 call esi
:676965EA 8AC3 mov al, bl
:676965EC 5E pop esi
:676965ED 5B pop ebx
:676965EE C9 leave
:676965EF C3 ret
* Referenced by a CALL at Addresses:
|:6769654F , :676965C4
|
:67696645 55 push ebp
:67696646 8BEC mov ebp, esp
:67696648 83EC10 sub esp, 00000010
:6769664B 53 push ebx
:6769664C 56 push esi
:6769664D 8B7508 mov esi, dword ptr [ebp+08]
:67696650 33DB xor ebx, ebx
:67696652 57 push edi
:67696653 8B06 mov eax, dword ptr [esi]
:67696655 3BC3 cmp eax, ebx
:67696657 0F84A0000000 je 676966FD
:6769665D 50 push eax
* Reference To: OLEAUT32.SysStringLen, Ord:0007h
|
:6769665E FF154CA26967 Call dword ptr [6769A24C]
:67696664 83F820 cmp eax, 00000020 <---比对License串的长度是否为32字节
:67696667 0F8590000000 jne 676966FD
:6769666D 33C0 xor eax, eax
:6769666F 8D7DF4 lea edi, dword ptr [ebp-0C]
:67696672 895DF0 mov dword ptr [ebp-10], ebx
:67696675 AB stosd
:67696676 AB stosd
:67696677 AB stosd
:67696678 8B06 mov eax, dword ptr [esi]
:6769667A 3BC3 cmp eax, ebx
:6769667C 894508 mov dword ptr [ebp+08], eax
:6769667F 7504 jne 67696685
:67696681 33F6 xor esi, esi
:67696683 EB2C jmp 676966B1
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:6769667F(C)
|
:67696685 50 push eax
* Reference To: KERNEL32.lstrlenW, Ord:0309h
|
:67696686 FF15A8A16967 Call dword ptr [6769A1A8]
:6769668C 8D7C0002 lea edi, dword ptr [eax+eax+02]
:67696690 8BC7 mov eax, edi
:67696692 83C003 add eax, 00000003
:67696695 24FC and al, FC
:67696697 E8D42F0000 call 67699670
:6769669C 8BF4 mov esi, esp
:6769669E 53 push ebx
:6769669F 53 push ebx
:676966A0 57 push edi
:676966A1 56 push esi
:676966A2 6AFF push FFFFFFFF
:676966A4 FF7508 push [ebp+08]
:676966A7 881E mov byte ptr [esi], bl
:676966A9 53 push ebx
:676966AA 53 push ebx
* Reference To: KERNEL32.WideCharToMultiByte, Ord:02D2h
|
:676966AB FF15B4A16967 Call dword ptr [6769A1B4]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:67696683(U)
|
:676966B1 8D45F0 lea eax, dword ptr [ebp-10]
:676966B4 50 push eax
:676966B5 56 push esi
* Possible StringData Ref from Data Obj ->"Xceed Software Inc."
|
:676966B6 68002C6A67 push 676A2C00
:676966BB E830FFFFFF call 676965F0
:676966C0 0FB775F6 movzx esi, word ptr [ebp-0A]-----
:676966C4 8A4DFB mov cl, byte ptr [ebp-05] |
:676966C7 0375F0 add esi, dword ptr [ebp-10] |
:676966CA 0FB745F4 movzx eax, word ptr [ebp-0C] |
:676966CE 0FB6D1 movzx edx, cl |
:676966D1 03F2 add esi, edx |计算
:676966D3 33D2 xor edx, edx |
:676966D5 03C6 add eax, esi |
:676966D7 BEFF000000 mov esi, 000000FF |
:676966DC F7F6 div esi <---------------------|
:676966DE 83C40C add esp, 0000000C
:676966E1 3A55FF cmp dl, byte ptr [ebp-01] <----关键
:676966E4 7517 jne 676966FD
:676966E6 8B450C mov eax, dword ptr [ebp+0C]
:676966E9 F6C101 test cl, 01
:676966EC 7413 je 67696701
:676966EE 53 push ebx
:676966EF C60001 mov byte ptr [eax], 01
:676966F2 E88CFCFFFF call 67696383
:676966F7 3945F0 cmp dword ptr [ebp-10], eax
:676966FA 59 pop ecx
:676966FB 7408 je 67696705
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:67696657(C), :67696667(C), :676966E4(C)
|
:676966FD 32C0 xor al, al
:676966FF EB13 jmp 67696714
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:676966EC(C)
|
:67696701 8818 mov byte ptr [eax], bl
:67696703 EB03 jmp 67696708
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:676966FB(C)
|
:67696705 8A4DFB mov cl, byte ptr [ebp-05]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:67696703(U)
|
:67696708 8B4510 mov eax, dword ptr [ebp+10]
:6769670B D0E9 shr cl, 1
:6769670D 80E101 and cl, 01
:67696710 8808 mov byte ptr [eax], cl
:67696712 B001 mov al, 01
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:676966FF(U)
|
:67696714 8D65E4 lea esp, dword ptr [ebp-1C]
:67696717 5F pop edi
:67696718 5E pop esi
:67696719 5B pop ebx
:6769671A C9 leave
:6769671B C3 ret
|
|