BarTender入门版提供了易于使用的设计工具，可进行基本的商业标签设计和打印，让用户轻松快速地设计和打印商业标签。 BarTender直观的设计工具、向导以及丰富的示例标签模板库，让用户在几分钟内即可上手。BarTender专业版提供动态业务打印，包括数据录入表单、Intelligent Templates?（智能模板）、数据库关联、编码和按需随时随地设备打印。 BarTender专业版适用于需要将标签打印操作标准化的各规模组织。
BarTender企业版针对受行业法规监管的、跨地区经营的、或者需要集中管控标签设计和打印的企业，BarTender企业版可提供全面的企业级打标方案，包括集中管理、工作流程编排、修订控制、审批、网络打印和移动打印，时刻保障高可用性，提高安全性。
BarTender 2022 不再支持旧的操作系统。如： WINDOWS 7、8，WINDOWS Server 2008、2012
使用x64dbg进行汇编和谐调试。
和谐主文件 BarTend.EXE
BarTend 2022 R4 是最新版，但只能在Windows 10以上安装运行。
下载链接：
1、安装原程序百度下载链接：https://pan.baidu.com/s/1vtOy0V-LU_fg-z6HvMwAvw
提取码：ZYYU
2、安装官方 BarTend 2021 R9 V11.2.186.892 （BarTend 2021最终版，可以在WINDOWS7下运行）
3、关闭注册服务 BarTender Licensing Service
4、BarTend-2021-R9.EXE 替换 原 BarTend.EXE
或者使用特征码替换补丁工具调入config-BT2021-R9.prg对原文件BarTend.EXE进行补丁
config-BT2019-R10 对应 BarTend 2019 R10
config-BT2022-R1 对应 BarTend 2022 R1
5、双击 Seagull-key.reg 导入注册信息
和谐日志：
1、注册验证 3B D9 48 8B 5C 24 30 0F 94 C0 -->改为 3B D9 48 8B 5C 24 30 0F 95 C0
00000001400A4F0A | 33C9 | xor ecx,ecx |
00000001400A4F0C | 48:895C24 30 | mov qword ptr ss:[rsp+30],rbx | [rsp+30]:"minkernel\\ntdll\\ldrinit.c"
00000001400A4F11 | E8 3A3D7600 | call bartend.140808C50 |
00000001400A4F16 | 48:8BCF | mov rcx,rdi | rdi:"minkernel\\ntdll\\ldrinit.c"
00000001400A4F19 | 8BD8 | mov ebx,eax |
00000001400A4F1B | E8 80258500 | call bartend.1408F74A0 |
00000001400A4F20 | 0FB7C8 | movzx ecx,ax |
00000001400A4F23 | 3BD9 | cmp ebx,ecx |
00000001400A4F25 | 48:8B5C24 30 | mov rbx,qword ptr ss:[rsp+30] | [rsp+30]:"minkernel\\ntdll\\ldrinit.c"
00000001400A4F2A | 0F94C0 | sete al |--->汇编修改为1400A4F2A | 0F95C0 | setne al
00000001400A4F2D | 48:83C4 20 | add rsp,20 |
00000001400A4F31 | 5F | pop rdi | rdi:"minkernel\\ntdll\\ldrinit.c"
00000001400A4F32 | C3 | ret |
2、注册验证 48 8B D8 48 85 C0 75 08 8D 43 FF ---> 48 33 C0 90 90 90 90 90 90 90 90
00000001402EFE4F | CC | int3 |
00000001402EFE50 | 48:895C24 08 | mov qword ptr ss:[rsp+8],rbx |
00000001402EFE55 | 48:897424 10 | mov qword ptr ss:[rsp+10],rsi |
00000001402EFE5A | 48:897C24 18 | mov qword ptr ss:[rsp+18],rdi | [rsp+18]:"LdrpInitializeProcess"
00000001402EFE5F | 55 | push rbp |
00000001402EFE60 | 41:56 | push r14 |
00000001402EFE62 | 41:57 | push r15 |
00000001402EFE64 | 48:8D6C24 B9 | lea rbp,qword ptr ss:[rsp-47] |
00000001402EFE69 | 48:81EC D0000000 | sub rsp,D0 |
00000001402EFE70 | 4D:8BF9 | mov r15,r9 |
00000001402EFE73 | 45:0FB6F0 | movzx r14d,r8b |
00000001402EFE77 | 48:8BFA | mov rdi,rdx | rdi:"minkernel\\ntdll\\ldrinit.c"
00000001402EFE7A | 48:8BF1 | mov rsi,rcx |
00000001402EFE7D | E8 BEA1D4FF | call bartend.14003A040 |
00000001402EFE82 | 48:8BD8 | mov rbx,rax | rbx:"LdrpInitializeProcess"--->1402EFE82 | 48:33C0 | xor rax,rax
00000001402EFE85 | 48:85C0 | test rax,rax |--->1402EFE85 | 90 | nop
00000001402EFE88 | 75 08 | jne bartend.1402EFE92 |--->1402EFE86 | 90 | nop
00000001402EFE8A | 8D43 FF | lea eax,qword ptr ds:[rbx-1] |--->1402EFE87 | 90 | nop
--->1402EFE88 | 90 | nop
--->1402EFE89 | 90 | nop
--->1402EFE8A | 90 | nop
--->1402EFE8B | 90 | nop
--->1402EFE8C | 90 | nop
00000001402EFE8D | E9 76020000 | jmp bartend.1402F0108 |
00000001402EFE92 | 48:8BCB | mov rcx,rbx | rbx:"LdrpInitializeProcess"
00000001402EFE95 | E8 46786000 | call bartend.1408F76E0 |
00000001402EFE9A | 84C0 | test al,al |
00000001402EFE9C | 75 07 | jne bartend.1402EFEA5 |
00000001402EFE9E | 33C0 | xor eax,eax |
00000001402EFEA0 | E9 63020000 | jmp bartend.1402F0108 |
00000001402EFEA5 | 41:C607 00 | mov byte ptr ds:[r15],0 |
00000001402EFEA9 | 48:8D4D A7 | lea rcx,qword ptr ss:[rbp-59] |
00000001402EFEAD | FF15 450D7600 | call qword ptr ds:[] |
00000001402EFEB3 | 90 | nop |
00000001402EFEB4 | 48:8D4D B7 | lea rcx,qword ptr ss:[rbp-49] |
00000001402EFEB8 | E8 93856000 | call bartend.1408F8450 |
00000001402EFEBD | 90 | nop |
00000001402EFEBE | E8 BD485500 | call bartend.140844780 |
00000001402EFEC3 | 85C0 | test eax,eax |
00000001402EFEC5 | 0F84 91010000 | je bartend.1402F005C |
00000001402EFECB | 48:8D55 B7 | lea rdx,qword ptr ss:[rbp-49] |
00000001402EFECF | 48:8D4D AF | lea rcx,qword ptr ss:[rbp-51] |
00000001402EFED3 | E8 C88C7500 | call bartend.140A48BA0 |
注册验证 1 和 2 步必须有一个,或者全部!!!
3、消除打印初始化适配注册相关水印 85 C0 74 07 BB 01 00 00 00 EB 02 33 DB 48 8D 0D---> 85 C0 74 00 BB 01 00 00 00 EB 02 33 DB 48 8D 0D
00000001408443FF | CC | int3 |
0000000140844400 | 81F9 8D010000 | cmp ecx,18D |
0000000140844406 | 77 14 | ja bartend.14084441C |
0000000140844408 | 6BC1 FD | imul eax,ecx,FFFFFFFD |
000000014084440B | 48:63C8 | movsxd rcx,eax |
000000014084440E | 48:8D05 2F242400 | lea rax,qword ptr ds:[140A86844] |
0000000140844415 | 0FB60401 | movzx eax,byte ptr ds:[rcx+rax] |
0000000140844419 | 34 87 | xor al,87 |
000000014084441B | C3 | ret |
000000014084441C | 32C0 | xor al,al |
000000014084441E | C3 | ret |
000000014084441F | CC | int3 |
0000000140844420 | 40:53 | push rbx | rbx:"LdrpInitializeProcess"
0000000140844422 | 48:83EC 20 | sub rsp,20 |
0000000140844426 | 48:8BD9 | mov rbx,rcx | rbx:"LdrpInitializeProcess"
0000000140844429 | BA FFFFFFFF | mov edx,FFFFFFFF |
000000014084442E | 48:8D0D 73A89700 | lea rcx,qword ptr ds:[1411BECA8] |
0000000140844435 | E8 8E301000 | call |
000000014084443A | 48:8BCB | mov rcx,rbx | rbx:"LdrpInitializeProcess"
000000014084443D | E8 3E000000 | call bartend.140844480 |
0000000140844442 | 85C0 | test eax,eax |
0000000140844444 | 74 13 | je bartend.140844459 |
0000000140844446 | 48:8BCB | mov rcx,rbx | rbx:"LdrpInitializeProcess"
0000000140844449 | E8 22040000 | call bartend.140844870 |
000000014084444E | 85C0 | test eax,eax |
0000000140844450 | 74 07 | je bartend.140844459 |--->140844450 | 74 00 | je bartend.140844452
0000000140844452 | BB 01000000 | mov ebx,1 |
0000000140844457 | EB 02 | jmp bartend.14084445B |
0000000140844459 | 33DB | xor ebx,ebx |
000000014084445B | 48:8D0D 46A89700 | lea rcx,qword ptr ds:[1411BECA8] |
0000000140844462 | E8 67301000 | call |
0000000140844467 | 8BC3 | mov eax,ebx |
0000000140844469 | EB 02 | jmp bartend.14084446D |
000000014084446B | 33C0 | xor eax,eax |
000000014084446D | 48:83C4 20 | add rsp,20 |
0000000140844471 | 5B | pop rbx | rbx:"LdrpInitializeProcess"
0000000140844472 | C3 | ret |
4、打印初始化效验信用 85 FF 0F 94 C3 8B C3 ---> 85 FF 0F 95 C3 8B C3
000000014084486F | CC | int3 |
0000000140844870 | 48:895C24 10 | mov qword ptr ss:[rsp+10],rbx |
0000000140844875 | 48:897C24 18 | mov qword ptr ss:[rsp+18],rdi | [rsp+18]:"LdrpInitializeProcess"
000000014084487A | 55 | push rbp |
000000014084487B | 48:8D6C24 A9 | lea rbp,qword ptr ss:[rsp-57] |
0000000140844880 | 48:81EC B0000000 | sub rsp,B0 |
0000000140844887 | 48:8B05 3AEE8F00 | mov rax,qword ptr ds:[1411436C8] |
000000014084488E | 48:33C4 | xor rax,rsp |
0000000140844891 | 48:8945 47 | mov qword ptr ss:[rbp+47],rax |
0000000140844895 | 33DB | xor ebx,ebx |
0000000140844897 | 48:894D 1F | mov qword ptr ss:[rbp+1F],rcx |
000000014084489B | 0F57C0 | xorps xmm0,xmm0 |
000000014084489E | 48:895D CF | mov qword ptr ss:[rbp-31],rbx |
00000001408448A2 | 48:8D45 17 | lea rax,qword ptr ss:[rbp+17] |
00000001408448A6 | 48:895D D7 | mov qword ptr ss:[rbp-29],rbx |
00000001408448AA | 33C9 | xor ecx,ecx |
00000001408448AC | 48:895D FF | mov qword ptr ss:[rbp-1],rbx |
00000001408448B0 | 4C:8D45 C7 | lea r8,qword ptr ss:[rbp-39] |
00000001408448B4 | 48:895D 07 | mov qword ptr ss:[rbp+7],rbx |
00000001408448B8 | 48:8D55 37 | lea rdx,qword ptr ss:[rbp+37] |
00000001408448BC | 48:8945 EF | mov qword ptr ss:[rbp-11],rax |
00000001408448C0 | F3:0F7F45 27 | movdqu xmmword ptr ss:[rbp+27],xmm0 |
00000001408448C5 | 48:C745 17 20000000 | mov qword ptr ss:[rbp+17],20 | 20:' '
00000001408448CD | C745 37 6BC5AA00 | mov dword ptr ss:[rbp+37],AAC56B |
00000001408448D4 | C745 3B 44CDD011 | mov dword ptr ss:[rbp+3B],11D0CD44 |
00000001408448DB | C745 3F 8CC200C0 | mov dword ptr ss:[rbp+3F],C000C28C |
00000001408448E2 | C745 43 4FC295EE | mov dword ptr ss:[rbp+43],EE95C24F |
00000001408448E9 | 48:C745 C7 50000000 | mov qword ptr ss:[rbp-39],50 | 50:'P'
00000001408448F1 | 48:C745 E7 01000000 | mov qword ptr ss:[rbp-19],1 |
00000001408448F9 | 48:C745 F7 01000000 | mov qword ptr ss:[rbp-9],1 |
0000000140844901 | 48:C745 DF 02000000 | mov qword ptr ss:[rbp-21],2 |
0000000140844909 | 48:C745 0F 10020000 | mov qword ptr ss:[rbp+F],210 |
0000000140844911 | E8 61940400 | call |
0000000140844916 | 8BF8 | mov edi,eax |
0000000140844918 | 3D 00010B80 | cmp eax,800B0100 |
000000014084491D | 75 06 | jne bartend.140844925 |
000000014084491F | FF15 B3612000 | call qword ptr ds:[] |
0000000140844925 | 4C:8D45 C7 | lea r8,qword ptr ss:[rbp-39] |
0000000140844929 | C745 F7 02000000 | mov dword ptr ss:[rbp-9],2 |
0000000140844930 | 48:8D55 37 | lea rdx,qword ptr ss:[rbp+37] |
0000000140844934 | 33C9 | xor ecx,ecx |
0000000140844936 | E8 3C940400 | call |
000000014084493B | 85FF | test edi,edi |
000000014084493D | 0F94C3 | sete bl |--->14084493D | 0F95C3 | setne bl
0000000140844940 | 8BC3 | mov eax,ebx |
0000000140844942 | 48:8B4D 47 | mov rcx,qword ptr ss:[rbp+47] |
0000000140844946 | 48:33CC | xor rcx,rsp |
0000000140844949 | E8 023F1000 | call bartend.140948850 |
000000014084494E | 4C:8D9C24 B0000000 | lea r11,qword ptr ss:[rsp+B0] |
0000000140844956 | 49:8B5B 18 | mov rbx,qword ptr ds:[r11+18] | rbx:"LdrpInitializeProcess"
000000014084495A | 49:8B7B 20 | mov rdi,qword ptr ds:[r11+20] | rdi:"minkernel\\ntdll\\ldrinit.c"
000000014084495E | 49:8BE3 | mov rsp,r11 |
0000000140844961 | 5D | pop rbp |
0000000140844962 | C3 | ret |
5、资源加载 0F B6 C0 85 C0 74 56 ---> 0F B6 C0 85 C0 74 00
00000001408F715F | CC | int3 |
00000001408F7160 | 4C:894C24 20 | mov qword ptr ss:[rsp+20],r9 |
00000001408F7165 | 44:894424 18 | mov dword ptr ss:[rsp+18],r8d |
00000001408F716A | 48:895424 10 | mov qword ptr ss:[rsp+10],rdx |
00000001408F716F | 48:894C24 08 | mov qword ptr ss:[rsp+8],rcx |
00000001408F7174 | 48:83EC 58 | sub rsp,58 |
00000001408F7178 | 8B4424 70 | mov eax,dword ptr ss:[rsp+70] | [rsp+70]:L"rt"
00000001408F717C | 894424 28 | mov dword ptr ss:[rsp+28],eax |
00000001408F7180 | C74424 20 00000000 | mov dword ptr ss:[rsp+20],0 |
00000001408F7188 | 48:C74424 38 00000000 | mov qword ptr ss:[rsp+38],0 |
00000001408F7191 | 45:33C9 | xor r9d,r9d |
00000001408F7194 | 4C:8B4424 68 | mov r8,qword ptr ss:[rsp+68] |
00000001408F7199 | BA 0A000000 | mov edx,A | A:'\n'
00000001408F719E | 48:8B4C24 78 | mov rcx,qword ptr ss:[rsp+78] |
00000001408F71A3 | FF15 D7361500 | call qword ptr ds:[] |
00000001408F71A9 | 48:894424 40 | mov qword ptr ss:[rsp+40],rax | [rsp+40]:L"wnDlls"
00000001408F71AE | 48:837C24 40 00 | cmp qword ptr ss:[rsp+40],0 | [rsp+40]:L"wnDlls"
00000001408F71B4 | 0F84 D9000000 | je bartend.1408F7293 |
00000001408F71BA | 48:8B5424 40 | mov rdx,qword ptr ss:[rsp+40] | [rsp+40]:L"wnDlls"
00000001408F71BF | 48:8B4C24 78 | mov rcx,qword ptr ss:[rsp+78] |
00000001408F71C4 | FF15 26381500 | call qword ptr ds:[] |
00000001408F71CA | 894424 20 | mov dword ptr ss:[rsp+20],eax |
00000001408F71CE | 8B4424 20 | mov eax,dword ptr ss:[rsp+20] |
00000001408F71D2 | 33D2 | xor edx,edx |
00000001408F71D4 | B9 04000000 | mov ecx,4 |
00000001408F71D9 | 48:F7F1 | div rcx |
00000001408F71DC | 48:83F8 04 | cmp rax,4 |
00000001408F71E0 | 0F86 AD000000 | jbe bartend.1408F7293 |
00000001408F71E6 | 48:8B5424 40 | mov rdx,qword ptr ss:[rsp+40] | [rsp+40]:L"wnDlls"
00000001408F71EB | 48:8B4C24 78 | mov rcx,qword ptr ss:[rsp+78] |
00000001408F71F0 | FF15 0A381500 | call qword ptr ds:[] |
00000001408F71F6 | 48:894424 48 | mov qword ptr ss:[rsp+48],rax |
00000001408F71FB | 48:837C24 48 00 | cmp qword ptr ss:[rsp+48],0 |
00000001408F7201 | 0F84 8C000000 | je bartend.1408F7293 |
00000001408F7207 | 48:8B4C24 48 | mov rcx,qword ptr ss:[rsp+48] |
00000001408F720C | FF15 E6371500 | call qword ptr ds:[] |
00000001408F7212 | 48:894424 38 | mov qword ptr ss:[rsp+38],rax |
00000001408F7217 | 44:8B4424 20 | mov r8d,dword ptr ss:[rsp+20] |
00000001408F721C | 48:8B5424 38 | mov rdx,qword ptr ss:[rsp+38] |
00000001408F7221 | 48:8B4C24 60 | mov rcx,qword ptr ss:[rsp+60] |
00000001408F7226 | E8 35100000 | call bartend.1408F8260 |
00000001408F722B | 0FB6C0 | movzx eax,al |
00000001408F722E | 85C0 | test eax,eax |
00000001408F7230 | 74 56 | je bartend.1408F7288 |--->1408F7230 | 74 00 | je bartend.1408F7232
00000001408F7232 | 48:8B4424 38 | mov rax,qword ptr ss:[rsp+38] |
00000001408F7237 | 8B40 08 | mov eax,dword ptr ds:[rax+8] |
00000001408F723A | 25 FF000000 | and eax,FF |
00000001408F723F | 894424 24 | mov dword ptr ss:[rsp+24],eax |
00000001408F7243 | 33D2 | xor edx,edx |
00000001408F7245 | 8B4424 20 | mov eax,dword ptr ss:[rsp+20] |
00000001408F7249 | B9 04000000 | mov ecx,4 |
00000001408F724E | F7F1 | div ecx |
00000001408F7250 | 83E8 05 | sub eax,5 |
00000001408F7253 | 894424 2C | mov dword ptr ss:[rsp+2C],eax |
00000001408F7257 | C74424 30 00000000 | mov dword ptr ss:[rsp+30],0 |
00000001408F725F | 4C:8D4424 2C | lea r8,qword ptr ss:[rsp+2C] |
00000001408F7264 | 48:8D5424 24 | lea rdx,qword ptr ss:[rsp+24] |
00000001408F7269 | 48:8D4C24 30 | lea rcx,qword ptr ss:[rsp+30] | [rsp+30]:"minkernel\\ntdll\\ldrinit.c"
00000001408F726E | E8 BDFBFFFF | call bartend.1408F6E30 |
00000001408F7273 | 85C0 | test eax,eax |
00000001408F7275 | 74 11 | je bartend.1408F7288 |
00000001408F7277 | 8B4424 24 | mov eax,dword ptr ss:[rsp+24] |
00000001408F727B | 48:8B4C24 38 | mov rcx,qword ptr ss:[rsp+38] |
00000001408F7280 | 8B4481 0C | mov eax,dword ptr ds:[rcx+rax*4+C] |
00000001408F7284 | 894424 28 | mov dword ptr ss:[rsp+28],eax |
00000001408F7288 | 48:8B4C24 48 | mov rcx,qword ptr ss:[rsp+48] |
00000001408F728D | FF15 8D371500 | call qword ptr ds:[] |
00000001408F7293 | 8B4424 28 | mov eax,dword ptr ss:[rsp+28] |
00000001408F7297 | 48:83C4 58 | add rsp,58 |
00000001408F729B | C3 | ret |
6、打印预览水印控制 BA 04 00 00 00 8B C8 E8---> BA 00 00 00 00 8B C8 E8
00000001408F77DF | CC | int3 |
00000001408F77E0 | 48:894C24 08 | mov qword ptr ss:[rsp+8],rcx |
00000001408F77E5 | 48:83EC 28 | sub rsp,28 |
00000001408F77E9 | 48:8B4C24 30 | mov rcx,qword ptr ss:[rsp+30] | [rsp+30]:"minkernel\\ntdll\\ldrinit.c"
00000001408F77EE | E8 2DFEFFFF | call bartend.1408F7620 |
00000001408F77F3 | BA 04000000 | mov edx,4 |--->1408F77F3 | BA 00000000 | mov edx,0
00000001408F77F8 | 8BC8 | mov ecx,eax |
00000001408F77FA | E8 51000000 | call bartend.1408F7850 |
00000001408F77FF | 48:83C4 28 | add rsp,28 |
00000001408F7803 | C3 | ret |
7、资源加载验证 E8 DD F3 FF FF 83 F8 FF 75 0C ---> E8 DD F3 FF FF 83 F8 FF EB 0C
00000001408F7C8F | CC | int3 |
00000001408F7C90 | 885424 10 | mov byte ptr ss:[rsp+10],dl |
00000001408F7C94 | 48:894C24 08 | mov qword ptr ss:[rsp+8],rcx |
00000001408F7C99 | 48:83EC 38 | sub rsp,38 |
00000001408F7C9D | F2:0F100D 63363000 | movsd xmm1,qword ptr ds:[140BFB308] |
00000001408F7CA5 | F2:0F1005 F3AE1A00 | movsd xmm0,qword ptr ds:[140AA2BA0] |
00000001408F7CAD | E8 95360500 | call |
00000001408F7CB2 | F2:0F2CC0 | cvttsd2si eax,xmm0 |
00000001408F7CB6 | 894424 24 | mov dword ptr ss:[rsp+24],eax |
00000001408F7CBA | F2:0F100D DEAE1A00 | movsd xmm1,qword ptr ds:[140AA2BA0] |
00000001408F7CC2 | F2:0F1005 B6761A00 | movsd xmm0,qword ptr ds:[140A9F380] |
00000001408F7CCA | E8 78360500 | call |
00000001408F7CCF | F2:0F2CC0 | cvttsd2si eax,xmm0 |
00000001408F7CD3 | 8B4C24 24 | mov ecx,dword ptr ss:[rsp+24] |
00000001408F7CD7 | 8D4401 15 | lea eax,qword ptr ds:[rcx+rax+15] |
00000001408F7CDB | 894424 20 | mov dword ptr ss:[rsp+20],eax |
00000001408F7CDF | 0FB64424 48 | movzx eax,byte ptr ss:[rsp+48] |
00000001408F7CE4 | 85C0 | test eax,eax |
00000001408F7CE6 | 74 5E | je bartend.1408F7D46 |
00000001408F7CE8 | 48:8B4424 40 | mov rax,qword ptr ss:[rsp+40] | [rsp+40]:L"wnDlls"
00000001408F7CED | 48:8B00 | mov rax,qword ptr ds:[rax] |
00000001408F7CF0 | 48:8B40 08 | mov rax,qword ptr ds:[rax+8] |
00000001408F7CF4 | 48:894424 28 | mov qword ptr ss:[rsp+28],rax |
00000001408F7CF9 | 44:8B4424 20 | mov r8d,dword ptr ss:[rsp+20] |
00000001408F7CFE | 48:8B4424 40 | mov rax,qword ptr ss:[rsp+40] | [rsp+40]:L"wnDlls"
00000001408F7D03 | 48:8B90 98000000 | mov rdx,qword ptr ds:[rax+98] |
00000001408F7D0A | 48:8B4C24 40 | mov rcx,qword ptr ss:[rsp+40] | [rsp+40]:L"wnDlls"
00000001408F7D0F | FF5424 28 | call qword ptr ss:[rsp+28] |
00000001408F7D13 | 48:8B4C24 40 | mov rcx,qword ptr ss:[rsp+40] | [rsp+40]:L"wnDlls"
00000001408F7D18 | 8941 08 | mov dword ptr ds:[rcx+8],eax |
00000001408F7D1B | 48:8B4424 40 | mov rax,qword ptr ss:[rsp+40] | [rsp+40]:L"wnDlls"
00000001408F7D20 | 8B4C24 20 | mov ecx,dword ptr ss:[rsp+20] |
00000001408F7D24 | 3948 08 | cmp dword ptr ds:[rax+8],ecx |
00000001408F7D27 | 74 1B | je bartend.1408F7D44 |
00000001408F7D29 | 48:8B4C24 40 | mov rcx,qword ptr ss:[rsp+40] | [rsp+40]:L"wnDlls"
00000001408F7D2E | E8 DDF3FFFF | call bartend.1408F7110 |
00000001408F7D33 | 83F8 FF | cmp eax,FFFFFFFF |
00000001408F7D36 | 75 0C | jne bartend.1408F7D44 |--->1408F7D36 | EB 0C | jmp bartend.1408F7D44
00000001408F7D38 | 48:8B4424 40 | mov rax,qword ptr ss:[rsp+40] | [rsp+40]:L"wnDlls"
00000001408F7D3D | 8B4C24 20 | mov ecx,dword ptr ss:[rsp+20] |
00000001408F7D41 | 8948 08 | mov dword ptr ds:[rax+8],ecx |
00000001408F7D44 | EB 0C | jmp bartend.1408F7D52 |
00000001408F7D46 | 48:8B4424 40 | mov rax,qword ptr ss:[rsp+40] | [rsp+40]:L"wnDlls"
00000001408F7D4B | 8B4C24 20 | mov ecx,dword ptr ss:[rsp+20] |
00000001408F7D4F | 8948 08 | mov dword ptr ds:[rax+8],ecx |
00000001408F7D52 | 48:83C4 38 | add rsp,38 |
00000001408F7D56 | C3 | ret |
8、断开与证书服务器连接 48 01 00 00 C1 92 35 7C ---> 00 00 10 00 C1 92 35 7C
000000014125BA64 | 0000 | add byte ptr ds:[rax],al |
000000014125BA66 | 0000 | add byte ptr ds:[rax],al |
000000014125BA68 | 0000 | add byte ptr ds:[rax],al |
000000014125BA6A | 0000 | add byte ptr ds:[rax],al |
000000014125BA6C | 0000 | add byte ptr ds:[rax],al |
000000014125BA6E | 0000 | add byte ptr ds:[rax],al |
000000014125BA70 | 0000 | add byte ptr ds:[rax],al |
000000014125BA72 | 0000 | add byte ptr ds:[rax],al |
000000014125BA74 | 48:0100 | add qword ptr ds:[rax],rax |--->14125BA74 | 0000 | add byte ptr ds:[rax],al
000000014125BA77 | 00C1 | add cl,al |--->14125BA76 | 1000 | adc byte ptr ds:[rax],al
000000014125BA79 | 92 | xchg edx,eax |--->14125BA78 | C192 357C0000 00 | rcl dword ptr ds:[rdx+7C35],0 |
000000014125BA7A | 35 7C000000 | xor eax,7C |
000000014125BA7F | 0000 | add byte ptr ds:[rax],al |
000000014125BA81 | 0000 | add byte ptr ds:[rax],al |
000000014125BA83 | 0000 | add byte ptr ds:[rax],al |
000000014125BA85 | 0000 | add byte ptr ds:[rax],al |
000000014125BA87 | 0000 | add byte ptr ds:[rax],al |
000000014125BA89 | 0000 | add byte ptr ds:[rax],al |
000000014125BA8B | 0000 | add byte ptr ds:[rax],al |
000000014125BA8D | 0000 | add byte ptr ds:[rax],al |
000000014125BA8F | 0000 | add byte ptr ds:[rax],al |
000000014125BA91 | 0000 | add byte ptr ds:[rax],al |
000000014125BA93 | 0000 | add byte ptr ds:[rax],al |
000000014125BA95 | 0000 | add byte ptr ds:[rax],al |
000000014125BA97 | 0000 | add byte ptr ds:[rax],al |
000000014125BA99 | 0000 | add byte ptr ds:[rax],al |
000000014125BA9B | 00FF | add bh,bh
和谐文件：
BT2022 R4和谐.rar
(115.75 KB, 下载次数: 842)
2023-1-10 17:29 上传
点击文件名下载附件
下载积分: 吾爱币 -1 CB
