请高手分析一下
1000C86D/$8B4424 08 MOV EAX,DWORD PTR SS:1000C871|.53 PUSH EBX
1000C872|.56 PUSH ESI
1000C873|.57 PUSH EDI
1000C874|.33FF XOR EDI,EDI
1000C876|.2BC7 SUB EAX,EDI
1000C878|.0F84 7F010000 JE ysthh.1000C9FD
1000C87E|.48 DEC EAX
1000C87F|.0F85 D0010000 JNZ ysthh.1000CA55
1000C885|.BE 50D20710 MOV ESI,ysthh.1007D250
1000C88A|.56 PUSH ESI
1000C88B|.68 EE020000 PUSH 2EE
1000C890|.6A 0F PUSH 0F
1000C892|.E8 C3150000 CALL ysthh.1000DE5A
1000C897|.83C4 0C ADD ESP,0C
1000C89A|.83F8 F9 CMP EAX,-7
1000C89D|.A3 E4E00710 MOV DWORD PTR DS:,EAX
1000C8A2|.75 18 JNZ SHORT ysthh.1000C8BC
1000C8A4|.6A 21 PUSH 21
1000C8A6|.68 24310110 PUSH ysthh.10013124 ;注册信息
1000C8AB|.68 04310110 PUSH ysthh.10013104 ;没找到 lock.vxd\n请重新安装软件
1000C8B0|>57 PUSH EDI ; |hOwner
1000C8B1|.FF15 C0110110 CALL DWORD PTR DS:[<&USER32.MessageBoxA>>; \MessageBoxA
1000C8B7|.E9 03010000 JMP ysthh.1000C9BF
1000C8BC|>83F8 F6 CMP EAX,-0A
1000C8BF|.75 0E JNZ SHORT ysthh.1000C8CF
1000C8C1|.6A 10 PUSH 10
1000C8C3|.68 24310110 PUSH ysthh.10013124 ;注册信息
1000C8C8|.68 E4300110 PUSH ysthh.100130E4 ;没找到 disk.vxd\n请重新安装软件
1000C8CD|.^ EB E1 JMP SHORT ysthh.1000C8B0
1000C8CF|>8B1D C0110110 MOV EBX,DWORD PTR DS:[<&USER32.MessageBo>;USER32.MessageBoxA
1000C8D5|.83F8 FF CMP EAX,-1
1000C8D8|.55 PUSH EBP
1000C8D9|.0F85 BE000000 JNZ ysthh.1000C99D
1000C8DF|.BD 24310110 MOV EBP,ysthh.10013124 ;注册信息
1000C8E4|.6A 24 PUSH 24 ; /Style = MB_YESNO|MB_ICONQUESTION|MB_APPLMODAL
1000C8E6|.55 PUSH EBP ; |Title => "注册信息"
1000C8E7|.68 90450110 PUSH ysthh.10014590 ; |软件没有注册并已超过试用期\n现在要注册吗？\n\n请把密钥盘打开写保护，插入软驱中！
1000C8EC|.57 PUSH EDI ; |hOwner
1000C8ED|.FFD3 CALL EBX ; \MessageBoxA
1000C8EF|.83F8 06 CMP EAX,6
1000C8F2|.0F85 A5000000 JNZ ysthh.1000C99D
1000C8F8|.8D4424 18 LEA EAX,DWORD PTR SS:
1000C8FC|.50 PUSH EAX
1000C8FD|.56 PUSH ESI
1000C8FE|.57 PUSH EDI
1000C8FF|.E8 73150000 CALL ysthh.1000DE77
1000C904|.83C4 0C ADD ESP,0C
1000C907|.83F8 F8 CMP EAX,-8
1000C90A|.75 6E JNZ SHORT ysthh.1000C97A
1000C90C|.803D 50D20710>CMP BYTE PTR DS:,4
1000C913|.75 59 JNZ SHORT ysthh.1000C96E
1000C915|.803D 51D20710>CMP BYTE PTR DS:,79
1000C91C|.75 50 JNZ SHORT ysthh.1000C96E
1000C91E|.803D 52D20710>CMP BYTE PTR DS:,0E
1000C925|.75 47 JNZ SHORT ysthh.1000C96E
1000C927|.803D 53D20710>CMP BYTE PTR DS:,23
1000C92E|.75 3E JNZ SHORT ysthh.1000C96E
1000C930|.803D 54D20710>CMP BYTE PTR DS:,0A
1000C937|.75 35 JNZ SHORT ysthh.1000C96E
1000C939|.803D 55D20710>CMP BYTE PTR DS:,62
1000C940|.75 2C JNZ SHORT ysthh.1000C96E
1000C942|.803D 56D20710>CMP BYTE PTR DS:,36
1000C949|.75 23 JNZ SHORT ysthh.1000C96E
1000C94B|.803D 57D20710>CMP BYTE PTR DS:,3B
1000C952|.75 1A JNZ SHORT ysthh.1000C96E
1000C954|.803D 58D20710>CMP BYTE PTR DS:,47
1000C95B|.75 11 JNZ SHORT ysthh.1000C96E
1000C95D|.803D 59D20710>CMP BYTE PTR DS:,4A
1000C964|.75 08 JNZ SHORT ysthh.1000C96E
1000C966|.FF7424 18 PUSH DWORD PTR SS:
1000C96A|.57 PUSH EDI
1000C96B|.50 PUSH EAX
1000C96C|.EB 12 JMP SHORT ysthh.1000C980
1000C96E|>57 PUSH EDI
1000C96F|.55 PUSH EBP
1000C970|.68 AC300110 PUSH ysthh.100130AC ;密钥盘错误或操作失败!!!
1000C975|.57 PUSH EDI
1000C976|.FFD3 CALL EBX
1000C978|.EB 0E JMP SHORT ysthh.1000C988
1000C97A|>FF7424 18 PUSH DWORD PTR SS:
1000C97E|.57 PUSH EDI
1000C97F|.50 PUSH EAX
1000C980|>E8 BE5FFFFF CALL ysthh.10002943
1000C985|.83C4 0C ADD ESP,0C
1000C988|>56 PUSH ESI
1000C989|.68 EE020000 PUSH 2EE
1000C98E|.6A 0F PUSH 0F
1000C990|.E8 C5140000 CALL ysthh.1000DE5A
1000C995|.83C4 0C ADD ESP,0C
1000C998|.A3 E4E00710 MOV DWORD PTR DS:,EAX
1000C99D|>8B4424 14 MOV EAX,DWORD PTR SS:
1000C9A1|.A3 40D20710 MOV DWORD PTR DS:,EAX
1000C9A6|.E8 B194FFFF CALL ysthh.10005E5C
1000C9AB|.85C0 TEST EAX,EAX
1000C9AD|.5D POP EBP
1000C9AE|.75 16 JNZ SHORT ysthh.1000C9C6
1000C9B0|.6A 10 PUSH 10
1000C9B2|.68 E4430110 PUSH ysthh.100143E4 ;错误
1000C9B7|.68 80450110 PUSH ysthh.10014580 ;读取码表失败！
1000C9BC|.57 PUSH EDI
1000C9BD|.FFD3 CALL EBX
1000C9BF|>33C0 XOR EAX,EAX
1000C9C1|.E9 92000000 JMP ysthh.1000CA58
1000C9C6|>68 78450110 PUSH ysthh.10014578 ; /simsun
1000C9CB|.57 PUSH EDI ; |PitchAndFamily
1000C9CC|.6A 04 PUSH 4 ; |Quality = 4.
1000C9CE|.6A 20 PUSH 20 ; |ClipPrecision = CLIP_DEFAULT_PRECIS|CLIP_TT_ALWAYS
1000C9D0|.6A 04 PUSH 4 ; |OutputPrecision = OUT_TT_PRECIS
1000C9D2|.68 86000000 PUSH 86 ; |CharSet = 134.
1000C9D7|.57 PUSH EDI ; |StrikeOut
1000C9D8|.57 PUSH EDI ; |Underline
1000C9D9|.57 PUSH EDI ; |Italic
1000C9DA|.68 90010000 PUSH 190 ; |Weight = FW_NORMAL
1000C9DF|.57 PUSH EDI ; |Orientation
1000C9E0|.57 PUSH EDI ; |Escapement
1000C9E1|.57 PUSH EDI ; |Width
1000C9E2|.6A 10 PUSH 10 ; |Height = 10 (16.)
1000C9E4|.FF15 60100110 CALL DWORD PTR DS:[<&GDI32.CreateFontA>] ; \CreateFontA
1000C9EA|.FF35 40D20710 PUSH DWORD PTR DS:
1000C9F0|.A3 98460110 MOV DWORD PTR DS:,EAX
1000C9F5|.E8 64000000 CALL ysthh.1000CA5E
1000C9FA|.59 POP ECX
1000C9FB|.EB 58 JMP SHORT ysthh.1000CA55
1000C9FD|>FF35 98460110 PUSH DWORD PTR DS: ; /hObject = NULL
1000CA03|.FF15 44100110 CALL DWORD PTR DS:[<&GDI32.DeleteObject>>; \DeleteObject
1000CA09|.FF35 40D20710 PUSH DWORD PTR DS: ; /hInst = NULL
1000CA0F|.8B35 14120110 MOV ESI,DWORD PTR DS:[<&USER32.Unregiste>; |USER32.UnregisterClassA
1000CA15|.68 B43B0110 PUSH ysthh.10013BB4 ; |ysthhuiclass
1000CA1A|.FFD6 CALL ESI ; \UnregisterClassA
1000CA1C|.FF35 40D20710 PUSH DWORD PTR DS: ; /hInst = NULL
1000CA22|.68 04440110 PUSH ysthh.10014404 ; |ysthhcompclass
1000CA27|.FFD6 CALL ESI ; \UnregisterClassA
1000CA29|.FF35 40D20710 PUSH DWORD PTR DS: ; /hInst = NULL
1000CA2F|.68 58450110 PUSH ysthh.10014558 ; |ysthhstatusclass
1000CA34|.FFD6 CALL ESI ; \UnregisterClassA
1000CA36|.FF35 40D20710 PUSH DWORD PTR DS: ; /hInst = NULL
1000CA3C|.68 18450110 PUSH ysthh.10014518 ; |ysthhskclass
1000CA41|.FFD6 CALL ESI ; \UnregisterClassA
1000CA43|.FF35 40D20710 PUSH DWORD PTR DS: ; /hInst = NULL
1000CA49|.68 5C440110 PUSH ysthh.1001445C ; |ysthhengclewclass
1000CA4E|.FFD6 CALL ESI ; \UnregisterClassA
1000CA50|.E8 0E98FFFF CALL ysthh.10006263
1000CA55|>6A 01 PUSH 1
1000CA57|.58 POP EAX
1000CA58|>5F POP EDI
1000CA59|.5E POP ESI
1000CA5A|.5B POP EBX
1000CA5B\.C2 0C00 RETN 0C
[ 本帖最后由 tigerisme 于 2006-8-26 21:29 编辑 ]
页:
[1]