求助
为什么经常在F12调用后,下断的一个meassageBoxA CALL进去后是这样啊,这样怎么能追到注册码啊00407128 $- FF25 D4865800 JMP DWORD PTR DS:[<&user32.MessageBoxA>] ;user32.MessageBoxA
0040712E 8BC0 MOV EAX,EAX
00407130 $- FF25 D0865800 JMP DWORD PTR DS:[<&user32.MsgWaitForMul>;user32.MsgWaitForMultipleObjects
00407136 8BC0 MOV EAX,EAX
00407138 $- FF25 CC865800 JMP DWORD PTR DS:[<&user32.OemToCharA>];user32.OemToCharA
0040713E 8BC0 MOV EAX,EAX
00407140 $- FF25 C8865800 JMP DWORD PTR DS:[<&user32.OffsetRect>];user32.OffsetRect
00407146 8BC0 MOV EAX,EAX
00407148 $- FF25 C4865800 JMP DWORD PTR DS:[<&user32.OpenClipboard>;user32.OpenClipboard
0040714E 8BC0 MOV EAX,EAX
00407150 $- FF25 C0865800 JMP DWORD PTR DS:[<&user32.PeekMessageA>>;user32.PeekMessageA
00407156 8BC0 MOV EAX,EAX
00407158 $- FF25 BC865800 JMP DWORD PTR DS:[<&user32.PostMessageA>>;user32.PostMessageA
0040715E 8BC0 MOV EAX,EAX
00407160 $- FF25 B8865800 JMP DWORD PTR DS:[<&user32.PostQuitMessa>;user32.PostQuitMessage
00407166 8BC0 MOV EAX,EAX
00407168 $- FF25 B4865800 JMP DWORD PTR DS:[<&user32.PtInRect>] ;user32.PtInRect
0040716E 8BC0 MOV EAX,EAX
00407170 $- FF25 B0865800 JMP DWORD PTR DS:[<&user32.RedrawWindow>>;user32.RedrawWindow
00407176 8BC0 MOV EAX,EAX
00407178 $- FF25 AC865800 JMP DWORD PTR DS:[<&user32.RegisterClass>;user32.RegisterClassA
0040717E 8BC0 MOV EAX,EAX
00407180 $- FF25 A8865800 JMP DWORD PTR DS:[<&user32.RegisterClipb>;user32.RegisterWindowMessageA
00407186 8BC0 MOV EAX,EAX
00407188 $- FF25 A4865800 JMP DWORD PTR DS:[<&user32.RegisterWindo>;user32.RegisterWindowMessageA
0040718E 8BC0 MOV EAX,EAX
00407190 $- FF25 A0865800 JMP DWORD PTR DS:[<&user32.ReleaseCaptur>;user32.ReleaseCapture
00407196 8BC0 MOV EAX,EAX
00407198 $- FF25 9C865800 JMP DWORD PTR DS:[<&user32.ReleaseDC>] ;user32.ReleaseDC
0040719E 8BC0 MOV EAX,EAX
004071A0 $- FF25 98865800 JMP DWORD PTR DS:[<&user32.RemoveMenu>];user32.RemoveMenu
004071A6 8BC0 MOV EAX,EAX
004071A8 $- FF25 94865800 JMP DWORD PTR DS:[<&user32.RemovePropA>] ;user32.RemovePropA
004071AE 8BC0 MOV EAX,EAX
004071B0 $- FF25 90865800 JMP DWORD PTR DS:[<&user32.ScreenToClien>;user32.ScreenToClient
004071B6 8BC0 MOV EAX,EAX
004071B8 $- FF25 8C865800 JMP DWORD PTR DS:[<&user32.ScrollWindow>>;user32.ScrollWindow
004071BE 8BC0 MOV EAX,EAX
004071C0 $- FF25 88865800 JMP DWORD PTR DS:[<&user32.SendDlgItemMe>;user32.SendDlgItemMessageA
004071C6 8BC0 MOV EAX,EAX
004071C8 $- FF25 84865800 JMP DWORD PTR DS:[<&user32.SendMessageA>>;user32.SendMessageA
004071CE 8BC0 MOV EAX,EAX
004071D0 $- FF25 80865800 JMP DWORD PTR DS:[<&user32.SendNotifyMes>;user32.SendNotifyMessageA
004071D6 8BC0 MOV EAX,EAX
004071D8 $- FF25 7C865800 JMP DWORD PTR DS:[<&user32.SetActiveWind>;user32.SetActiveWindow
004071DE 8BC0 MOV EAX,EAX
004071E0 $- FF25 78865800 JMP DWORD PTR DS:[<&user32.SetCapture>];user32.SetCapture
004071E6 8BC0 MOV EAX,EAX
004071E8 $- FF25 74865800 JMP DWORD PTR DS:[<&user32.SetClassLongA>;user32.SetClassLongA
004071EE 8BC0 MOV EAX,EAX
004071F0 $- FF25 70865800 JMP DWORD PTR DS:[<&user32.SetClipboardD>;user32.SetClipboardData
004071F6 8BC0 MOV EAX,EAX
004071F8 $- FF25 6C865800 JMP DWORD PTR DS:[<&user32.SetCursor>] ;user32.SetCursor
004071FE 8BC0 MOV EAX,EAX
00407200 $- FF25 68865800 JMP DWORD PTR DS:[<&user32.SetFocus>] ;user32.SetFocus
00407206 8BC0 MOV EAX,EAX
00407208 $- FF25 64865800 JMP DWORD PTR DS:[<&user32.SetForeground>;user32.SetForegroundWindow
0040720E 8BC0 MOV EAX,EAX
00407210 $- FF25 60865800 JMP DWORD PTR DS:[<&user32.SetKeyboardSt>;user32.SetKeyboardState
00407216 8BC0 MOV EAX,EAX
00407218 $- FF25 5C865800 JMP DWORD PTR DS:[<&user32.SetMenu>] ;user32.SetMenu
0040721E 8BC0 MOV EAX,EAX
00407220 $- FF25 58865800 JMP DWORD PTR DS:[<&user32.SetMenuItemIn>;user32.SetMenuItemInfoA
00407226 8BC0 MOV EAX,EAX
00407228 $- FF25 54865800 JMP DWORD PTR DS:[<&user32.SetParent>] ;user32.SetParent
0040722E 8BC0 MOV EAX,EAX
00407230 $- FF25 50865800 JMP DWORD PTR DS:[<&user32.SetPropA>] ;user32.SetPropA
00407236 8BC0 MOV EAX,EAX
00407238 $- FF25 4C865800 JMP DWORD PTR DS:[<&user32.SetRect>] ;user32.SetRect
0040723E 8BC0 MOV EAX,EAX
00407240 $- FF25 48865800 JMP DWORD PTR DS:[<&user32.SetRectEmpty>>;user32.SetRectEmpty
00407246 8BC0 MOV EAX,EAX
00407248 .- FF25 44865800 JMP DWORD PTR DS:[<&user32.SetScrollInfo>;user32.SetScrollInfo
0040724E 8BC0 MOV EAX,EAX
00407250 .- FF25 40865800 JMP DWORD PTR DS:[<&user32.SetScrollPos>>;user32.SetScrollPos
00407256 8BC0 MOV EAX,EAX
00407258 .- FF25 3C865800 JMP DWORD PTR DS:[<&user32.SetScrollRang>;user32.SetScrollRange
0040725E 8BC0 MOV EAX,EAX
00407260 $- FF25 38865800 JMP DWORD PTR DS:[<&user32.SetTimer>] ;user32.SetTimer
00407266 8BC0 MOV EAX,EAX
00407268 $- FF25 34865800 JMP DWORD PTR DS:[<&user32.SetWindowLong>;user32.SetWindowLongA
0040726E 8BC0 MOV EAX,EAX
00407270 $- FF25 30865800 JMP DWORD PTR DS:[<&user32.SetWindowPlac>;user32.SetWindowPlacement
00407276 8BC0 MOV EAX,EAX
00407278 $- FF25 2C865800 JMP DWORD PTR DS:[<&user32.SetWindowPos>>;user32.SetWindowPos
0040727E 8BC0 MOV EAX,EAX
00407280 $- FF25 28865800 JMP DWORD PTR DS:[<&user32.SetWindowText>;user32.SetWindowTextA
00407286 8BC0 MOV EAX,EAX
00407288 $- FF25 24865800 JMP DWORD PTR DS:[<&user32.SetWindowsHoo>;user32.SetWindowsHookExA
0040728E 8BC0 MOV EAX,EAX
00407290 $- FF25 20865800 JMP DWORD PTR DS:[<&user32.SetWindowRgn>>;user32.SetWindowRgn
00407296 8BC0 MOV EAX,EAX
00407298 $- FF25 1C865800 JMP DWORD PTR DS:[<&user32.ShowCaret>] ;user32.ShowCaret
0040729E 8BC0 MOV EAX,EAX
004072A0 $- FF25 18865800 JMP DWORD PTR DS:[<&user32.ShowCursor>];user32.ShowCursor
004072A6 8BC0 MOV EAX,EAX
004072A8 $- FF25 14865800 JMP DWORD PTR DS:[<&user32.ShowOwnedPopu>;user32.ShowOwnedPopups
004072AE 8BC0 MOV EAX,EAX
004072B0 .- FF25 10865800 JMP DWORD PTR DS:[<&user32.ShowScrollBar>;user32.ShowScrollBar
004072B6 8BC0 MOV EAX,EAX
004072B8 $- FF25 0C865800 JMP DWORD PTR DS:[<&user32.ShowWindow>];user32.ShowWindow
004072BE 8BC0 MOV EAX,EAX
004072C0 $- FF25 08865800 JMP DWORD PTR DS:[<&user32.SystemParamet>;user32.SystemParametersInfoA
004072C6 8BC0 MOV EAX,EAX
004072C8 $- FF25 04865800 JMP DWORD PTR DS:[<&user32.TrackPopupMen>;user32.TrackPopupMenu
004072CE 8BC0 MOV EAX,EAX
004072D0 $- FF25 00865800 JMP DWORD PTR DS:[<&user32.TranslateMDIS>;user32.TranslateMDISysAccel
004072D6 8BC0 MOV EAX,EAX
004072D8 $- FF25 FC855800 JMP DWORD PTR DS:[<&user32.TranslateMess>;user32.TranslateMessage
004072DE 8BC0 MOV EAX,EAX
004072E0 $- FF25 F8855800 JMP DWORD PTR DS:[<&user32.UnhookWindows>;user32.UnhookWindowsHookEx
004072E6 8BC0 MOV EAX,EAX
004072E8 $- FF25 F4855800 JMP DWORD PTR DS:[<&user32.UnregisterCla>;user32.UnregisterClassA
004072EE 8BC0 MOV EAX,EAX
004072F0 $- FF25 F0855800 JMP DWORD PTR DS:[<&user32.UpdateWindow>>;user32.UpdateWindow
004072F6 8BC0 MOV EAX,EAX
004072F8 $- FF25 EC855800 JMP DWORD PTR DS:[<&user32.ValidateRect>>;user32.ValidateRect
004072FE 8BC0 MOV EAX,EAX
00407300 $- FF25 E8855800 JMP DWORD PTR DS:[<&user32.VkKeyScanA>];user32.VkKeyScanA
00407306 8BC0 MOV EAX,EAX
00407308 $- FF25 E4855800 JMP DWORD PTR DS:[<&user32.WaitMessage>] ;user32.WaitMessage
0040730E 8BC0 MOV EAX,EAX
00407310 $- FF25 E0855800 JMP DWORD PTR DS:[<&user32.WinHelpA>] ;user32.WinHelpA
00407316 8BC0 MOV EAX,EAX
00407318 $- FF25 DC855800 JMP DWORD PTR DS:[<&user32.WindowFromPoi>;user32.WindowFromPoint
0040731E 8BC0 MOV EAX,EAX
00407320/$0FB7C0 MOVZX EAX,AX
00407323|.0FB7D2 MOVZX EDX,DX
00407326|.C1E2 10 SHL EDX,10
00407329|.0BC2 OR EAX,EDX
0040732B\.C3 RETN
0040732C/$C1E8 10 SHR EAX,10
0040732F\.C3 RETN
00407330/$E8 13F5FFFF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount
00407335\.C3 RETN
00407336 8BC0 MOV EAX,EAX
00407338/$33C0 XOR EAX,EAX
0040733A\.C3 RETN
0040733B 90 NOP
0040733C/$52 PUSH EDX ; /MemSize
0040733D|.50 PUSH EAX ; |Flags
0040733E|.E8 35F5FFFF CALL <JMP.&kernel32.GlobalAlloc> ; \GlobalAlloc
00407343|.50 PUSH EAX ; /hMem
00407344|.E8 4FF5FFFF CALL <JMP.&kernel32.GlobalLock> ; \GlobalLock
00407349\.C3 RETN
0040734A 8BC0 MOV EAX,EAX
0040734C/$51 PUSH ECX ; /Flags
0040734D|.52 PUSH EDX ; |NewSize
0040734E|.50 PUSH EAX ; |/pMem
0040734F|.E8 4CF5FFFF CALL <JMP.&kernel32.GlobalHandle> ; |\GlobalHandle
00407354|.50 PUSH EAX ; |hMem
00407355|.50 PUSH EAX ; |/hMem
00407356|.E8 5DF5FFFF CALL <JMP.&kernel32.GlobalUnlock> ; |\GlobalUnlock
0040735B|.E8 48F5FFFF CALL <JMP.&kernel32.GlobalReAlloc> ; \GlobalReAlloc
00407360|.50 PUSH EAX ; /hMem
00407361|.E8 32F5FFFF CALL <JMP.&kernel32.GlobalLock> ; \GlobalLock
00407366\.C3 RETN
00407367 90 NOP
00407368/$50 PUSH EAX ; /pMem
00407369|.E8 32F5FFFF CALL <JMP.&kernel32.GlobalHandle> ; \GlobalHandle
0040736E|.50 PUSH EAX ; /hMem
0040736F|.50 PUSH EAX ; |/hMem
00407370|.E8 43F5FFFF CALL <JMP.&kernel32.GlobalUnlock> ; |\GlobalUnlock
00407375|.E8 16F5FFFF CALL <JMP.&kernel32.GlobalFree> ; \GlobalFree
0040737A\.C3 RETN
0040737B 90 NOP
0040737C/$A9 00000080 TEST EAX,80000000
00407381|.0F95C0 SETNE AL
00407384|.F6D8 NEG AL
00407386|.1BC0 SBB EAX,EAX
00407388\.C3 RETN
00407389 8D40 00 LEA EAX,DWORD PTR DS:
0040738C/$C1E2 08 SHL EDX,8
0040738F|.81E2 000000FF AND EDX,FF000000
00407395|.0BC2 OR EAX,EDX
00407397\.C3 RETN
00407398/$25 FF000000 AND EAX,0FF
0040739D|.81E2 FF000000 AND EDX,0FF
004073A3|.C1E2 08 SHL EDX,8
004073A6|.0BC2 OR EAX,EDX
004073A8|.33D2 XOR EDX,EDX
004073AA|.8AD1 MOV DL,CL
004073AC|.C1E2 10 SHL EDX,10
004073AF|.0BC2 OR EAX,EDX
004073B1\.C3 RETN
004073B2 8BC0 MOV EAX,EAX
004073B4/$0FB7C0 MOVZX EAX,AX
004073B7|.0D 00000001 OR EAX,1000000
004073BC\.C3 RETN
004073BD 8D40 00 LEA EAX,DWORD PTR DS:
004073C0 $C3 RETN
004073C1 8D40 00 LEA EAX,DWORD PTR DS:
004073C4/$C1E8 08 SHR EAX,8
004073C7\.C3 RETN
004073C8/$C1E8 10 SHR EAX,10
004073CB\.C3 RETN
004073CC/$51 PUSH ECX
004073CD|.890424 MOV DWORD PTR SS:,EAX
004073D0|.0FBF0424 MOVSX EAX,WORD PTR SS:
004073D4|.8902 MOV DWORD PTR DS:,EAX
004073D6|.0FBF4424 02 MOVSX EAX,WORD PTR SS:
004073DB|.8942 04 MOV DWORD PTR DS:,EAX
004073DE|.5A POP EDX
004073DF\.C3 RETN
004073E0/$51 PUSH ECX
004073E1|.66:8B10 MOV DX,WORD PTR DS:
004073E4|.66:891424 MOV WORD PTR SS:,DX
004073E8|.66:8B40 04 MOV AX,WORD PTR DS:
004073EC|.66:894424 02MOV WORD PTR SS:,AX
004073F1|.8B0424 MOV EAX,DWORD PTR SS:
004073F4|.5A POP EDX
004073F5\.C3 RETN
004073F6 8BC0 MOV EAX,EAX
004073F8/$E8 23FFFFFF CALL ae.00407320
004073FD\.C3 RETN
004073FE 8BC0 MOV EAX,EAX
00407400/$E8 1BFFFFFF CALL ae.00407320
00407405\.C3 RETN
00407406 8BC0 MOV EAX,EAX
00407408 $- FF25 D8855800 JMP DWORD PTR DS:[<&user32.CreateWindowE>;user32.CreateWindowExA
0040740E 8BC0 MOV EAX,EAX
00407410/$55 PUSH EBP
00407411|.8BEC MOV EBP,ESP
00407413|.51 PUSH ECX
00407414|.53 PUSH EBX
00407415|.56 PUSH ESI
00407416|.57 PUSH EDI
00407417|.894D FC MOV DWORD PTR SS:,ECX
0040741A|.8BFA MOV EDI,EDX
0040741C|.8BF0 MOV ESI,EAX
0040741E|.E8 15B7FFFF CALL ae.00402B38
00407423|.8BD8 MOV EBX,EAX
00407425|.8B45 08 MOV EAX,DWORD PTR SS:
00407428|.50 PUSH EAX ; /lParam
页:
[1]