w32dasm反汇编,串式参考"您成功注册！"
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040438B(C)
|
:004043A9 53 push ebx
:004043AA E830230000 call 004066DF
:004043AF 8B4C241C mov ecx, dword ptr [esp+1C]
:004043B3 83C404 add esp, 00000004
:004043B6 3BC8 cmp ecx, eax **** 关键比较
:004043B8 0F850E010000 jne 004044CC ****
:004043BE 83FF01 cmp edi, 00000001
:004043C1 0F8605010000 jbe 004044CC
:004043C7 83FD01 cmp ebp, 00000001
:004043CA 0F86FC000000 jbe 004044CC

* Possible StringData Ref from Data Obj ->"whm_w"
|
:004043D0 6874334200 push 00423374
:004043D5 8D4C2414 lea ecx, dword ptr [esp+14]
:004043D9 E852B60000 call 0040FA30
:004043DE 8B442424 mov eax, dword ptr [esp+24]
:004043E2 8B4C2420 mov ecx, dword ptr [esp+20]
:004043E6 57 push edi

* Reference To: ADVAPI32.RegSetValueExA, Ord:0186h
|
:004043E7 8B3D08C04100 mov edi, dword ptr [0041C008]
:004043ED 50 push eax
:004043EE 6A01 push 00000001
:004043F0 6A00 push 00000000

* Possible StringData Ref from Data Obj ->"UserName"
|
:004043F2 6888334200 push 00423388
:004043F7 51 push ecx
:004043F8 FFD7 call edi
:004043FA 8B542420 mov edx, dword ptr [esp+20]
:004043FE 55 push ebp
:004043FF 53 push ebx
:00404400 6A01 push 00000001
:00404402 6A00 push 00000000

* Possible StringData Ref from Data Obj ->"PassWord"
|
:00404404 687C334200 push 0042337C
:00404409 52 push edx
:0040440A FFD7 call edi
:0040440C 6800100000 push 00001000

* Possible StringData Ref from Data Obj ->"注册信息"
|
:00404411 68B0344200 push 004234B0

* Possible StringData Ref from Data Obj ->"您成功注册！"
|
:00404416 68A0344200 push 004234A0
:0040441B 8BCE mov ecx, esi
:0040441D E8AAE20000 call 004126CC
:00404422 6A00 push 00000000
:00404424 8BCE mov ecx, esi

运行trw2000,
运行密码截取2.2版
输入姓名: jia

[1] [2] 下一页