DNF牛牛骗钱软件
只要在卡号处填入以下卡号便会登录成功，可惜是空壳软件，根本无任何效果。
卡号：3FAASFNIQWRQWRNWZFH
以下为DNF牛牛卡号登录反汇编代码
0040D699 . 68 90C54000 push 0040C590 ; UNICODE "3FAASFNIQWRQWRNWZFH"；默认卡号
0040D69E . FF15 3C104000 call dword ptr [<&MSVBVM60.__vbaStrCm>; MSVBVM60.__vbaStrCmp
0040D6A4 . 8BF0 mov esi, eax
0040D6A6 . 8D4D E8 lea ecx, dword ptr [ebp-18]
0040D6A9 . F7DE neg esi
0040D6AB . 1BF6 sbb esi, esi
0040D6AD . 46 inc esi
0040D6AE . F7DE neg esi
0040D6B0 . FF15 90104000 call dword ptr [<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
0040D6B6 . 8D4D E4 lea ecx, dword ptr [ebp-1C]
0040D6B9 . FF15 8C104000 call dword ptr [<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObj
0040D6BF . B9 04000280 mov ecx, 80020004
0040D6C4 . B8 0A000000 mov eax, 0A
0040D6C9 . 66:3BF7 cmp si, di
0040D6CC . 894D AC mov dword ptr [ebp-54], ecx
0040D6CF . 8945 A4 mov dword ptr [ebp-5C], eax
0040D6D2 . 894D BC mov dword ptr [ebp-44], ecx
0040D6D5 . 8945 B4 mov dword ptr [ebp-4C], eax
0040D6D8 . 894D CC mov dword ptr [ebp-34], ecx
0040D6DB . 8945 C4 mov dword ptr [ebp-3C], eax
0040D6DE . 74 43 je short 0040D723 比较卡号是否与3FAASFNIQWRQWRNWZFH相同，相同的话则不跳转，提示登录成功
0040D6E0 . 8D55 94 lea edx, dword ptr [ebp-6C]
0040D6E3 . 8D4D D4 lea ecx, dword ptr [ebp-2C]
0040D6E6 . C745 9C BCC54>mov dword ptr [ebp-64], 0040C5BC
0040D6ED . C745 94 08000>mov dword ptr [ebp-6C], 8
0040D6F4 . FF15 78104000 call dword ptr [<&MSVBVM60.__vbaVarDu>; MSVBVM60.__vbaVarDup
0040D6FA . 8D4D A4 lea ecx, dword ptr [ebp-5C]
0040D6FD . 8D55 B4 lea edx, dword ptr [ebp-4C]
0040D700 . 51 push ecx
0040D701 . 8D45 C4 lea eax, dword ptr [ebp-3C]
0040D704 . 52 push edx
0040D705 . 50 push eax
0040D706 . 8D4D D4 lea ecx, dword ptr [ebp-2C]
0040D709 . 57 push edi
0040D70A . 51 push ecx
0040D70B . FF15 24104000 call dword ptr [<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox 提示登录成功
0040D711 . 8D55 A4 lea edx, dword ptr [ebp-5C]
0040D714 . 8D45 B4 lea eax, dword ptr [ebp-4C]
0040D717 . 52 push edx
0040D718 . 8D4D C4 lea ecx, dword ptr [ebp-3C]
0040D71B . 50 push eax
0040D71C . 8D55 D4 lea edx, dword ptr [ebp-2C]
0040D71F . 51 push ecx
0040D720 . 52 push edx
0040D721 . EB 41 jmp short 0040D764
0040D723 > 8D55 94 lea edx, dword ptr [ebp-6C]
0040D726 . 8D4D D4 lea ecx, dword ptr [ebp-2C]
0040D729 . C745 9C CCC54>mov dword ptr [ebp-64], 0040C5CC
0040D730 . C745 94 08000>mov dword ptr [ebp-6C], 8
0040D737 . FF15 78104000 call dword ptr [<&MSVBVM60.__vbaVarDu>; MSVBVM60.__vbaVarDup
0040D73D . 8D45 A4 lea eax, dword ptr [ebp-5C]
0040D740 . 8D4D B4 lea ecx, dword ptr [ebp-4C]
0040D743 . 50 push eax
0040D744 . 8D55 C4 lea edx, dword ptr [ebp-3C]
0040D747 . 51 push ecx
0040D748 . 52 push edx
0040D749 . 8D45 D4 lea eax, dword ptr [ebp-2C]
0040D74C . 57 push edi
0040D74D . 50 push eax
0040D74E . FF15 24104000 call dword ptr [<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox 提示卡号错误
