| 作者：gg1211 文章来源：龙族联盟论坛 点击数： 更新时间：2007-1-3 19:53:50
|
edx, eax
005E021B . 8D45 D4 lea eax, [ebp-2C]
005E021E . E8 ED4AE2FF call 00404D10
005E0223 . 8B4D D4 mov ecx, [ebp-2C]
005E0226 . BA 70035E00 mov edx, 005E0370 ; signcode
005E022B . 8BC3 mov eax, ebx
005E022D . E8 1232E9FF call 00473444
005E0232 . 8B45 F8 mov eax, [ebp-8]
005E0235 . E8 964DE2FF call 00404FD0
005E023A . 50 push eax
005E023B . E8 4C09FFFF call <jmp.&PunUnitLib.SavePass>
005E0240 . 8BD0 mov edx, eax
005E0242 . 8D45 CC lea eax, [ebp-34]
005E0245 . E8 C64AE2FF call 00404D10
005E024A . 8B4D CC mov ecx, [ebp-34]
005E024D . BA 84035E00 mov edx, 005E0384 ; regcode
005E0252 . 8BC3 mov eax, ebx
005E0254 . E8 EB31E9FF call 00473444
005E0259 . 8BC3 mov eax, ebx
005E025B . E8 CC39E2FF call 00403C2C
005E0260 . 6A 00 push 0
005E0262 . 68 8C035E00 push 005E038C ; 系统注册成功，欢迎你使用本软件！
005E0267 . E8 F808FFFF call <jmp.&PunUnitLib.ShowMess>
005E026C . A1 34C56300 mov eax, [63C534]
005E0271 . C700 02000000 mov dword ptr [eax], 2
005E0277 . A1 ECC26300 mov eax, [63C2EC]
005E027C . 8B00 mov eax, [eax]
005E027E . E8 7108E9FF call 00470AF4
005E0283 . 33C0 xor eax, eax
005E0285 . 5A pop edx
005E0286 . 59 pop ecx
005E0287 . 59 pop ecx
005E0288 . 64:8910 mov fs:[eax], edx
005E028B . EB 20 jmp short 005E02AD
005E028D .^ E9 7A3EE2FF jmp 0040410C
005E0292 . 8B45 FC mov eax, [ebp-4]
005E0295 . E8 AACFE8FF call 0046D244
005E029A . E8 9942E2FF call 00404538
005E029F . EB 0C jmp short 005E02AD
005E02A1 > 6A 03 push 3
005E02A3 . 68 B0035E00 push 005E03B0 ; 系统注册失败，请检查注册是否有误！
由上分析找到了关键call，跟进
来到这里005D0B94 $- FF25 4C0B6400 jmp [<&PunUnitLib.GetRegPass>] ; PunUnitL.GetRegPass
005D0B9A 8BC0 mov eax, eax
005D0B9C $- FF25 480B6400 jmp [<&PunUnitLib.DispFormPos>] ; PunUnitL.DispFormPos
005D0BA2 8BC0 mov eax, eax
005D0BA4 FF db FF
005D0BA5 FF db FF
005D0BA6 FF db FF
f8来到这里
003E9024 > 55 push ebp
003E9025 8BEC mov ebp, esp
003E9027 B9 06000000 mov ecx, 6
003E902C 6A 00 push 0
003E902E 6A 00 push 0
003E9030 49 dec ecx
003E9031 ^ 75 F9 jnz short 003E902C
003E9033 53 push ebx
003E9034 56 push esi
003E9035 33C0 xor eax, eax
003E9037 55 push ebp
003E9038 68 F2913E00 push 003E91F2
003E903D 64:FF30 push dword ptr fs:[eax]
003E9040 64:8920 mov fs:[eax], esp
003E9043 8D45 EC lea eax, [ebp-14]
003E9046 E8 65B5F8FF call 003745B0
003E904B 8D45 F0 lea eax, [ebp-10]
003E904E 8B55 08 mov edx, [ebp+8]
003E9051 E8 4AB7F8FF call 003747A0
003E9056 8B45 F0 mov eax, [ebp-10]
003E9059 E8 0AB8F8FF call 00374868
003E905E 8BF0 mov esi, eax
003E9060 85F6 test esi, esi
003E9062 7E 26 jle short 003E908A
003E9064 BB 01000000 mov ebx, 1 \\这里进行循环，将机器码字符窜转换位他对应的asc字符串，假设位a
003E9069 8D4D E8 lea ecx, [ebp-18]
003E906C 8B45 F0 mov eax, [ebp-10]
003E906F 0FB64418 FF movzx eax, byte ptr [eax+ebx-1]
003E9074 33D2 xor edx, edx
003E9076 E8 F905F9FF call 00379674
003E907B 8B55 E8 mov edx, [ebp-18]
003E907E 8D45 FC lea eax, [ebp-4]
003E9081 E8 EAB7F8FF call 00374870
003E9086 43 inc ebx
003E9087 4E dec esi
003E9088 ^ 75 DF jnz short 003E9069 \\循环借宿
003E908A 8B45 FC mov eax, [ebp-4]
003E908D E8 D6B7F8FF call 00374868
003E9092 8BF0 mov esi, eax
003E9094 85F6 test esi, esi
003E9096 7E 2C jle short 003E90C4
003E9098 BB 01000000 mov ebx, 1
003E909D 8B45 FC mov eax, [ebp-4]\\这里将a颠倒，变换后假设为b
003E90A0 E8 C3B7F8FF call 00374868
003E90A5 2BC3 sub eax, ebx
003E90A7 8B55 FC mov edx, [ebp-4]
003E90AA 8A1402 mov dl, [edx+eax]
003E90AD 8D45 E4 lea eax, [ebp-1C]
003E90B0 E8 DBB6F8FF call 00374790
003E90B5 8B55 E4 mov edx, [ebp-1C]
003E90B8 8D45 F8 lea eax, [ebp-8]
003E90BB E8 B0B7F8FF call 00374870
003E90C0 43 inc ebx
003E90C1 4E dec esi
003E90C2 ^ 75 D9 jnz short 003E909D \\循环借宿
003E90C4 8D45 FC lea eax, [ebp-4]
003E90C7 50 push eax
003E90C8 B9 04000000 mov ecx, 4
003E90CD BA 01000000 mov edx, 1
003E90D2 8B45 F8 mov eax, [ebp-8]
003E90D5 E8 E6B9F8FF call 00374AC0 \\取b的前四位,假设为c
003E90DA 8D45 F8 lea eax, [ebp-8]
003E90DD 50 push eax
003E90DE B9 04000000 mov ecx, 4
003E90E3 BA 05000000 mov edx, 5
003E90E8 8B45 F8 mov eax, [ebp-8]
003E90EB E8 D0B9F8FF call 00374AC0 \\取b的5－8位，假设位d
003E90F0 8B45 FC mov eax, [ebp-4]
003E90F3 E8 70B7F8FF call 00374868
003E90F8 83F8 04 cmp eax, 4
003E90FB 7D 2F jge short 003E912C
003E90FD 8B45 FC mov eax, [ebp-4]
003E9100 E8 63B7F8FF call 00374868
003E9105 8BD8 mov ebx, eax
003E9107 83FB 03 cmp ebx, 3
003E910A 7F 20 jg short 003E912C
003E910C 8D4D E0 lea ecx, [ebp-20]
003E910F 8BC3 mov eax, ebx
003E9111 C1E0 02 shl eax, 2
003E9114 33D2 xor edx, edx
003E9116 E8 5905F9FF call 00379674
003E911B 8B55 E0 mov edx, [ebp-20]
003E911E 8D45 FC lea eax, [ebp-4]
003E9121 E8 4AB7F8FF call 00374870
003E9126 43 inc ebx
003E912上一页 [1] [2] [3] 下一页
|
用户登录 
新用户注册 
网友评论：（只显示最新10条。评论内容只代表网友观点，与本站立场无关！）