- UID
- 9488
注册时间2006-3-15
阅读权限20
最后登录1970-1-1
以武会友
 
TA的每日心情 | 开心
2020-12-27 19:17 |
|---|
签到天数: 40 天 [LV.5]常住居民I
|
发表于 2009-6-25 01:10:26
|
显示全部楼层
分析了下，注册码加密后保存在 jsy003.dll 文件内
具体分析如下：
00403926 |. 6A 00 push 0
00403928 |. 8B8B D2000000 mov ecx,dword ptr ds:[ebx+D2]
0040392E |. 51 push ecx
0040392F |. E8 58881900 call <jmp.&PBVM80.#2384> ; 计算机器码
00403934 |. 89C7 mov edi,eax
00403936 |. 85C0 test eax,eax
00403938 |. 7D 2D jge short app.00403967
0040393A |. 8B43 0C mov eax,dword ptr ds:[ebx+C]
0040393D |. 8378 04 00 cmp dword ptr ds:[eax+4],0
00403FBE |. 56 push esi
00403FBF |. 53 push ebx
00403FC0 |. E8 1B821900 call <jmp.&PBVM80.#2050> ; 解密注册码
00403FC5 |. 89C7 mov edi,eax
00403FC7 |. 8B83 64010000 mov eax,dword ptr ds:[ebx+164]
00408190 |. 50 push eax
00408191 |. 53 push ebx
00408192 |. E8 49401900 call <jmp.&PBVM80.#2050> ; 真注册码
00408197 |. 89C5 mov ebp,eax
00408199 |. 8B93 64010000 mov edx,dword ptr ds:[ebx+164]
0040819F |. 66:8B52 04 mov dx,word ptr ds:[edx+4]
---------------
这段计算注册码
00407A87 |> /57 /push edi
00407A88 |. |53 |push ebx
00407A89 |. |E8 40471900 |call <jmp.&PBVM80.#2426>
00407A8E |. |8B8B 60010000 |mov ecx,dword ptr ds:[ebx+160]
00407A94 |. |51 |push ecx
00407A95 |. |53 |push ebx
00407A96 |. |E8 45471900 |call <jmp.&PBVM80.#2050>
00407A9B |. |89C7 |mov edi,eax
00407A9D |. |8B83 60010000 |mov eax,dword ptr ds:[ebx+160]
00407AA3 |. |66:8B40 04 |mov ax,word ptr ds:[eax+4]
00407AA7 |. |89C6 |mov esi,eax
00407AA9 |. |83E6 01 |and esi,1
00407AAC |. |31C0 |xor eax,eax
00407AAE |. |66:898424 C600000>|mov word ptr ss:[esp+C6],ax
00407AB6 |. |8D8424 88000000 |lea eax,dword ptr ss:[esp+88]
00407ABD |. |50 |push eax
00407ABE |. |53 |push ebx
00407ABF |. |E8 04471900 |call <jmp.&PBVM80.#2295>
00407AC4 |. |8B8424 8C000000 |mov eax,dword ptr ss:[esp+8C]
00407ACB |. |24 FE |and al,0FE
00407ACD |. |09C6 |or esi,eax
00407ACF |. |66:89B424 8C00000>|mov word ptr ss:[esp+8C],si
00407AD7 |. |89F0 |mov eax,esi
00407AD9 |. |80E4 E3 |and ah,0E3
00407ADC |. |80CC 0C |or ah,0C
00407ADF |. |66:898424 8C00000>|mov word ptr ss:[esp+8C],ax
00407AE7 |. |89BC24 88000000 |mov dword ptr ss:[esp+88],edi
00407AEE |. |8B9424 A4000000 |mov edx,dword ptr ss:[esp+A4]
00407AF5 |. |30F6 |xor dh,dh
00407AF7 |. |80E2 01 |and dl,1
00407AFA |. |8B8424 A4000000 |mov eax,dword ptr ss:[esp+A4]
00407B01 |. |24 FE |and al,0FE
00407B03 |. |09C2 |or edx,eax
00407B05 |. |66:899424 A400000>|mov word ptr ss:[esp+A4],dx
00407B0D |. |66:FF8424 A000000>|inc word ptr ss:[esp+A0]
00407B15 |> |8B8424 9C000000 mov eax,dword ptr ss:[esp+9C]
00407B1C |. |30E4 |xor ah,ah
00407B1E |. |24 01 |and al,1
00407B20 |. |31D2 |xor edx,edx
00407B22 |. |66:89C2 |mov dx,ax
00407B25 |. |31C9 |xor ecx,ecx
00407B27 |. |66:898C24 BE00000>|mov word ptr ss:[esp+BE],cx
00407B2F |. |8B8424 A4000000 |mov eax,dword ptr ss:[esp+A4]
00407B36 |. |30E4 |xor ah,ah
00407B38 |. |24 01 |and al,1
00407B3A |. |31FF |xor edi,edi
00407B3C |. |66:89C7 |mov di,ax
00407B3F |. |66:898C24 C600000>|mov word ptr ss:[esp+C6],cx
00407B47 |. |8B8424 98000000 |mov eax,dword ptr ss:[esp+98]
00407B4E |. |66:3B8424 A000000>|cmp ax,word ptr ss:[esp+A0]
00407B56 |. |7C 07 |jl short app.00407B5F
00407B58 |. |BE 01000000 |mov esi,1
00407B5D |. |EB 02 |jmp short app.00407B61
00407B5F |> |31F6 |xor esi,esi
00407B61 |> |85D2 |test edx,edx
00407B63 |. |75 04 |jnz short app.00407B69
00407B65 |. |85FF |test edi,edi
00407B67 |. |74 07 |je short app.00407B70
00407B69 |> |B8 01000000 |mov eax,1
00407B6E |. |EB 02 |jmp short app.00407B72
00407B70 |> |31C0 |xor eax,eax
00407B72 |> |31FF |xor edi,edi
00407B74 |. |66:89BC24 BE00000>|mov word ptr ss:[esp+BE],di
00407B7C |. |85C0 |test eax,eax
00407B7E |. |0F85 0E050000 |jnz app.00408092
00407B84 |. |66:85F6 |test si,si
00407B87 |. |0F84 05050000 |je app.00408092
00407B8D |. |8DAC24 A8000000 |lea ebp,dword ptr ss:[esp+A8]
00407B94 |. |8D4424 10 |lea eax,dword ptr ss:[esp+10]
00407B98 |. |50 |push eax
00407B99 |. |53 |push ebx
00407B9A |. |E8 41461900 |call <jmp.&PBVM80.#2050>
00407B9F |. |898424 C0000000 |mov dword ptr ss:[esp+C0],eax
00407BA6 |. |66:C78424 C600000>|mov word ptr ss:[esp+C6],6
00407BB0 |. |66:C78424 C400000>|mov word ptr ss:[esp+C4],0C00
00407BBA |. |8B4424 14 |mov eax,dword ptr ss:[esp+14]
00407BBE |. |30E4 |xor ah,ah
00407BC0 |. |24 01 |and al,1
00407BC2 |. |80CC 0C |or ah,0C
00407BC5 |. |66:898424 C400000>|mov word ptr ss:[esp+C4],ax
00407BCD |. |8B8424 9C000000 |mov eax,dword ptr ss:[esp+9C]
00407BD4 |. |30E4 |xor ah,ah
00407BD6 |. |24 01 |and al,1
00407BD8 |. |31F6 |xor esi,esi
00407BDA |. |66:89C6 |mov si,ax
00407BDD |. |66:89BC24 CE00000>|mov word ptr ss:[esp+CE],di
00407BE5 |. |8B8424 A4000000 |mov eax,dword ptr ss:[esp+A4]
00407BEC |. |30E4 |xor ah,ah
00407BEE |. |24 01 |and al,1
00407BF0 |. |31FF |xor edi,edi
00407BF2 |. |66:89C7 |mov di,ax
00407BF5 |. |8B9424 9E000000 |mov edx,dword ptr ss:[esp+9E]
00407BFC |. |C1FA 10 |sar edx,10
00407BFF |. |30C0 |xor al,al
00407C01 |. |66:898424 D600000>|mov word ptr ss:[esp+D6],ax
00407C09 |. |8B8424 96000000 |mov eax,dword ptr ss:[esp+96]
00407C10 |. |C1F8 10 |sar eax,10
00407C13 |. |29D0 |sub eax,edx
00407C15 |. |85F6 |test esi,esi
00407C17 |. |75 04 |jnz short app.00407C1D
00407C19 |. |85FF |test edi,edi
00407C1B |. |74 07 |je short app.00407C24
00407C1D |> |BA 01000000 |mov edx,1
00407C22 |. |EB 02 |jmp short app.00407C26
00407C24 |> |31D2 |xor edx,edx
00407C26 |> |40 |inc eax
00407C27 |. |898424 C8000000 |mov dword ptr ss:[esp+C8],eax
00407C2E |. |66:C78424 CE00000>|mov word ptr ss:[esp+CE],2
00407C38 |. |BF 001C0000 |mov edi,1C00
00407C3D |. |66:89BC24 CC00000>|mov word ptr ss:[esp+CC],di
00407C45 |. |89FE |mov esi,edi
00407C47 |. |85D2 |test edx,edx
00407C49 |. |74 07 |je short app.00407C52
00407C4B |. |B8 01000000 |mov eax,1
00407C50 |. |EB 02 |jmp short app.00407C54
00407C52 |> |31C0 |xor eax,eax
00407C54 |> |09F0 |or eax,esi
00407C56 |. |66:898424 CC00000>|mov word ptr ss:[esp+CC],ax
00407C5E |. |53 |push ebx
00407C5F |. |E8 58451900 |call <jmp.&PBVM80.#2479>
00407C64 |. |89C6 |mov esi,eax
00407C66 |. |31C0 |xor eax,eax
00407C68 |. |66:898424 D600000>|mov word ptr ss:[esp+D6],ax
00407C70 |. |C783 04020000 1A0>|mov dword ptr ds:[ebx+204],1A
00407C7A |. |C783 5C010000 000>|mov dword ptr ds:[ebx+15C],0
00407C84 |. |C783 58010000 000>|mov dword ptr ds:[ebx+158],0
00407C8E |. |8D8424 C0000000 |lea eax,dword ptr ss:[esp+C0]
00407C95 |. |8983 54010000 |mov dword ptr ds:[ebx+154],eax
00407C9B |. |6A 00 |push 0
00407C9D |. |53 |push ebx
00407C9E |. |E8 49451900 |call <jmp.&PBVM80.#2638>
00407CA3 |. |8B46 08 |mov eax,dword ptr ds:[esi+8]
00407CA6 |. |6A 02 |push 2
00407CA8 |. |53 |push ebx
00407CA9 |. |FF90 0C040000 |call dword ptr ds:[eax+40C]
00407CAF |. |89C6 |mov esi,eax
00407CB1 |. |53 |push ebx
00407CB2 |. |E8 2F451900 |call <jmp.&PBVM80.#2639>
00407CB7 |. |85F6 |test esi,esi
00407CB9 |. |74 06 |je short app.00407CC1
00407CBB |. |837B 6E 00 |cmp dword ptr ds:[ebx+6E],0
00407CBF |. |74 0E |je short app.00407CCF
00407CC1 |> |31C9 |xor ecx,ecx
00407CC3 |. |898C24 1C010000 |mov dword ptr ss:[esp+11C],ecx
00407CCA |. |E9 0D160000 |jmp app.004092DC
00407CCF |> |8B93 64010000 |mov edx,dword ptr ds:[ebx+164]
00407CD5 |. |52 |push edx
00407CD6 |. |53 |push ebx
00407CD7 |. |E8 04451900 |call <jmp.&PBVM80.#2050>
00407CDC |. |8B93 64010000 |mov edx,dword ptr ds:[ebx+164]
00407CE2 |. |66:8B52 04 |mov dx,word ptr ds:[edx+4]
00407CE6 |. |30F6 |xor dh,dh
00407CE8 |. |80E2 01 |and dl,1
00407CEB |. |31F6 |xor esi,esi
00407CED |. |66:89D6 |mov si,dx
00407CF0 |. |30D2 |xor dl,dl
00407CF2 |. |66:899424 C600000>|mov word ptr ss:[esp+C6],dx
00407CFA |. |85F6 |test esi,esi
00407CFC |. |75 19 |jnz short app.00407D17
00407CFE |. |66:0FB630 |movzx si,byte ptr ds:[eax]
00407D02 |. |31FF |xor edi,edi
00407D04 |. |31C9 |xor ecx,ecx
00407D06 |. |66:898C24 C600000>|mov word ptr ss:[esp+C6],cx
00407D0E |. |50 |push eax
00407D0F |. |53 |push ebx
00407D10 |. |E8 B9441900 |call <jmp.&PBVM80.#2426>
00407D15 |. |EB 14 |jmp short app.00407D2B
00407D17 |> |BE FFFFFFFF |mov esi,-1
00407D1C |. |BF 01000000 |mov edi,1
00407D21 |. |31C0 |xor eax,eax
00407D23 |. |66:898424 C600000>|mov word ptr ss:[esp+C6],ax
00407D2B |> |66:8B45 04 |mov ax,word ptr ss:[ebp+4]
00407D2F |. |24 FE |and al,0FE
00407D31 |. |09C7 |or edi,eax
00407D33 |. |66:897D 04 |mov word ptr ss:[ebp+4],di
00407D37 |. |66:8975 00 |mov word ptr ss:[ebp],si
00407D3B |. |8D8424 88000000 |lea eax,dword ptr ss:[esp+88]
00407D42 |. |50 |push eax
00407D43 |. |53 |push ebx
00407D44 |. |E8 97441900 |call <jmp.&PBVM80.#2050>
00407D49 |. |89C5 |mov ebp,eax
00407D4B |. |8B8424 8C000000 |mov eax,dword ptr ss:[esp+8C]
00407D52 |. |30E4 |xor ah,ah
00407D54 |. |24 01 |and al,1
00407D56 |. |31F6 |xor esi,esi
00407D58 |. |66:89C6 |mov si,ax
00407D5B |. |31D2 |xor edx,edx
00407D5D |. |66:899424 C600000>|mov word ptr ss:[esp+C6],dx
00407D65 |. |8B9424 AC000000 |mov edx,dword ptr ss:[esp+AC]
00407D6C |. |30F6 |xor dh,dh
00407D6E |. |80E2 01 |and dl,1
00407D71 |. |8B8424 A6000000 |mov eax,dword ptr ss:[esp+A6]
00407D78 |. |C1F8 10 |sar eax,10
00407D7B |. |898424 C8000000 |mov dword ptr ss:[esp+C8],eax
00407D82 |. |66:C78424 CE00000>|mov word ptr ss:[esp+CE],2
00407D8C |. |80CE 1C |or dh,1C
00407D8F |. |66:899424 CC00000>|mov word ptr ss:[esp+CC],dx
00407D97 |. |68 42E15900 |push app.0059E142 ; ASCII "<C"
00407D9C |. |53 |push ebx
00407D9D |. |E8 38441900 |call <jmp.&PBVM80.#2448>
00407DA2 |. |898424 D0000000 |mov dword ptr ss:[esp+D0],eax
00407DA9 |. |66:C78424 D600000>|mov word ptr ss:[esp+D6],6
00407DB3 |. |66:C78424 D400000>|mov word ptr ss:[esp+D4],0C00
00407DBD |. |6A 21 |push 21
00407DBF |. |68 02800000 |push 8002
00407DC4 |. |8B8C24 28010000 |mov ecx,dword ptr ss:[esp+128]
00407DCB |. |51 |push ecx
00407DCC |. |53 |push ebx
00407DCD |. |E8 20441900 |call <jmp.&PBVM80.#2480>
00407DD2 |. |89C7 |mov edi,eax
00407DD4 |. |31D2 |xor edx,edx
00407DD6 |. |66:899424 DE00000>|mov word ptr ss:[esp+DE],dx
00407DDE |. |C783 04020000 1B0>|mov dword ptr ds:[ebx+204],1B
00407DE8 |. |C783 5C010000 000>|mov dword ptr ds:[ebx+15C],0
00407DF2 |. |C783 58010000 000>|mov dword ptr ds:[ebx+158],0
00407DFC |. |8D8424 D0000000 |lea eax,dword ptr ss:[esp+D0]
00407E03 |. |8983 54010000 |mov dword ptr ds:[ebx+154],eax
00407E09 |. |6A 00 |push 0
00407E0B |. |53 |push ebx
00407E0C |. |E8 DB431900 |call <jmp.&PBVM80.#2638>
00407E11 |. |8B47 08 |mov eax,dword ptr ds:[edi+8]
00407E14 |. |6A 01 |push 1
00407E16 |. |53 |push ebx
00407E17 |. |FF50 4C |call dword ptr ds:[eax+4C]
00407E1A |. |89C7 |mov edi,eax
00407E1C |. |53 |push ebx
00407E1D |. |E8 C4431900 |call <jmp.&PBVM80.#2639>
00407E22 |. |85FF |test edi,edi
00407E24 |. |74 06 |je short app.00407E2C
00407E26 |. |837B 6E 00 |cmp dword ptr ds:[ebx+6E],0
00407E2A |. |74 0E |je short app.00407E3A
00407E2C |> |31D2 |xor edx,edx
00407E2E |. |899424 1C010000 |mov dword ptr ss:[esp+11C],edx
00407E35 |. |E9 A2140000 |jmp app.004092DC
00407E3A |> |8B83 64010000 |mov eax,dword ptr ds:[ebx+164]
00407E40 |. |50 |push eax
00407E41 |. |53 |push ebx
00407E42 |. |E8 99431900 |call <jmp.&PBVM80.#2050>
00407E47 |. |898424 D0000000 |mov dword ptr ss:[esp+D0],eax
00407E4E |. |66:C78424 D600000>|mov word ptr ss:[esp+D6],6
00407E58 |. |66:C78424 D400000>|mov word ptr ss:[esp+D4],0C00
00407E62 |. |8B83 64010000 |mov eax,dword ptr ds:[ebx+164]
00407E68 |. |66:8B40 04 |mov ax,word ptr ds:[eax+4]
00407E6C |. |30E4 |xor ah,ah
00407E6E |. |24 01 |and al,1
00407E70 |. |80CC 0C |or ah,0C
00407E73 |. |66:898424 D400000>|mov word ptr ss:[esp+D4],ax
00407E7B |. |53 |push ebx
00407E7C |. |E8 3B431900 |call <jmp.&PBVM80.#2479>
00407E81 |. |89C7 |mov edi,eax
00407E83 |. |31C0 |xor eax,eax
00407E85 |. |66:898424 DE00000>|mov word ptr ss:[esp+DE],ax
00407E8D |. |C783 04020000 1B0>|mov dword ptr ds:[ebx+204],1B
00407E97 |. |C783 5C010000 000>|mov dword ptr ds:[ebx+15C],0
00407EA1 |. |C783 58010000 000>|mov dword ptr ds:[ebx+158],0
00407EAB |. |8D8424 D0000000 |lea eax,dword ptr ss:[esp+D0]
00407EB2 |. |8983 54010000 |mov dword ptr ds:[ebx+154],eax
00407EB8 |. |6A 00 |push 0
00407EBA |. |53 |push ebx
00407EBB |. |E8 2C431900 |call <jmp.&PBVM80.#2638>
00407EC0 |. |8B47 08 |mov eax,dword ptr ds:[edi+8]
00407EC3 |. |6A 01 |push 1
00407EC5 |. |53 |push ebx
00407EC6 |. |FF90 94010000 |call dword ptr ds:[eax+194]
00407ECC |. |89C7 |mov edi,eax
00407ECE |. |53 |push ebx
00407ECF |. |E8 12431900 |call <jmp.&PBVM80.#2639>
00407ED4 |. |85FF |test edi,edi
00407ED6 |. |74 06 |je short app.00407EDE
00407ED8 |. |837B 6E 00 |cmp dword ptr ds:[ebx+6E],0
00407EDC |. |74 0E |je short app.00407EEC
00407EDE |> |31C0 |xor eax,eax
00407EE0 |. |898424 1C010000 |mov dword ptr ss:[esp+11C],eax
00407EE7 |. |E9 F0130000 |jmp app.004092DC
00407EEC |> |8B93 64010000 |mov edx,dword ptr ds:[ebx+164]
00407EF2 |. |66:8B02 |mov ax,word ptr ds:[edx]
00407EF5 |. |66:8B52 04 |mov dx,word ptr ds:[edx+4]
00407EF9 |. |89D7 |mov edi,edx
00407EFB |. |83E7 01 |and edi,1
00407EFE |. |98 |cwde
00407EFF |. |898424 D0000000 |mov dword ptr ss:[esp+D0],eax
00407F06 |. |66:C78424 D600000>|mov word ptr ss:[esp+D6],2
00407F10 |. |81CF 001C0000 |or edi,1C00
00407F16 |. |66:89BC24 D400000>|mov word ptr ss:[esp+D4],di
00407F1E |. |6A 22 |push 22
00407F20 |. |68 02800000 |push 8002
00407F25 |. |8B8C24 28010000 |mov ecx,dword ptr ss:[esp+128]
00407F2C |. |51 |push ecx
00407F2D |. |53 |push ebx
00407F2E |. |E8 BF421900 |call <jmp.&PBVM80.#2480>
00407F33 |. |89C7 |mov edi,eax
00407F35 |. |31C9 |xor ecx,ecx
00407F37 |. |66:898C24 DE00000>|mov word ptr ss:[esp+DE],cx
00407F3F |. |C783 04020000 1B0>|mov dword ptr ds:[ebx+204],1B
00407F49 |. |C783 5C010000 000>|mov dword ptr ds:[ebx+15C],0
00407F53 |. |C783 58010000 000>|mov dword ptr ds:[ebx+158],0
00407F5D |. |8D8424 C8000000 |lea eax,dword ptr ss:[esp+C8]
00407F64 |. |8983 54010000 |mov dword ptr ds:[ebx+154],eax
00407F6A |. |6A 00 |push 0
00407F6C |. |53 |push ebx
00407F6D |. |E8 7A421900 |call <jmp.&PBVM80.#2638>
00407F72 |. |8B47 08 |mov eax,dword ptr ds:[edi+8]
00407F75 |. |6A 02 |push 2
00407F77 |. |53 |push ebx
00407F78 |. |FF50 4C |call dword ptr ds:[eax+4C]
00407F7B |. |89C7 |mov edi,eax
00407F7D |. |53 |push ebx
00407F7E |. |E8 63421900 |call <jmp.&PBVM80.#2639>
00407F83 |. |85FF |test edi,edi
00407F85 |. |74 06 |je short app.00407F8D
00407F87 |. |837B 6E 00 |cmp dword ptr ds:[ebx+6E],0
00407F8B |. |74 0E |je short app.00407F9B
00407F8D |> |31ED |xor ebp,ebp
00407F8F |. |89AC24 1C010000 |mov dword ptr ss:[esp+11C],ebp
00407F96 |. |E9 41130000 |jmp app.004092DC
00407F9B |> |8B83 64010000 |mov eax,dword ptr ds:[ebx+164]
00407FA1 |. |8B00 |mov eax,dword ptr ds:[eax]
00407FA3 |. |898424 C8000000 |mov dword ptr ss:[esp+C8],eax
00407FAA |. |66:C78424 CE00000>|mov word ptr ss:[esp+CE],2
00407FB4 |. |66:C78424 CC00000>|mov word ptr ss:[esp+CC],1C00
00407FBE |. |8B83 64010000 |mov eax,dword ptr ds:[ebx+164]
00407FC4 |. |66:8B40 04 |mov ax,word ptr ds:[eax+4]
00407FC8 |. |30E4 |xor ah,ah
00407FCA |. |24 01 |and al,1
00407FCC |. |80CC 1C |or ah,1C
00407FCF |. |66:898424 CC00000>|mov word ptr ss:[esp+CC],ax
00407FD7 |. |53 |push ebx
00407FD8 |. |E8 DF411900 |call <jmp.&PBVM80.#2479>
00407FDD |. |89C7 |mov edi,eax
00407FDF |. |31D2 |xor edx,edx
00407FE1 |. |66:899424 D600000>|mov word ptr ss:[esp+D6],dx
00407FE9 |. |C783 04020000 1A0>|mov dword ptr ds:[ebx+204],1A
00407FF3 |. |C783 5C010000 000>|mov dword ptr ds:[ebx+15C],0
00407FFD |. |C783 58010000 000>|mov dword ptr ds:[ebx+158],0
00408007 |. |8D8424 C8000000 |lea eax,dword ptr ss:[esp+C8]
0040800E |. |8983 54010000 |mov dword ptr ds:[ebx+154],eax
00408014 |. |6A 00 |push 0
00408016 |. |53 |push ebx
00408017 |. |E8 D0411900 |call <jmp.&PBVM80.#2638>
0040801C |. |8B47 08 |mov eax,dword ptr ds:[edi+8]
0040801F |. |6A 01 |push 1
00408021 |. |53 |push ebx
00408022 |. |FF90 A0040000 |call dword ptr ds:[eax+4A0]
00408028 |. |89C7 |mov edi,eax
0040802A |. |53 |push ebx
0040802B |. |E8 B6411900 |call <jmp.&PBVM80.#2639>
00408030 |. |85FF |test edi,edi
00408032 |. |74 06 |je short app.0040803A
00408034 |. |837B 6E 00 |cmp dword ptr ds:[ebx+6E],0
00408038 |. |74 0E |je short app.00408048
0040803A |> |31FF |xor edi,edi
0040803C |. |89BC24 1C010000 |mov dword ptr ss:[esp+11C],edi
00408043 |. |E9 94120000 |jmp app.004092DC
00408048 |> |8B93 64010000 |mov edx,dword ptr ds:[ebx+164]
0040804E |. |52 |push edx
0040804F |. |53 |push ebx
00408050 |. |E8 8B411900 |call <jmp.&PBVM80.#2050>
00408055 |. |89C7 |mov edi,eax
00408057 |. |8B83 64010000 |mov eax,dword ptr ds:[ebx+164]
0040805D |. |66:8B40 04 |mov ax,word ptr ds:[eax+4]
00408061 |. |30E4 |xor ah,ah
00408063 |. |24 01 |and al,1
00408065 |. |25 FFFF0000 |and eax,0FFFF
0040806A |. |31C9 |xor ecx,ecx
0040806C |. |66:898C24 CE00000>|mov word ptr ss:[esp+CE],cx
00408074 |. |50 |push eax
00408075 |. |57 |push edi
00408076 |. |56 |push esi
00408077 |. |55 |push ebp
00408078 |. |53 |push ebx
00408079 |. |E8 44411900 |call <jmp.&PBVM80.#2632>
0040807E |. |85C0 |test eax,eax
00408080 |.^\0F85 01FAFFFF \jnz app.00407A87 |
|
IP卡
提升卡
置顶卡
变色卡
千斤顶
显身卡
发表于 2009-6-12 01:56:22
楼主
发表于 2009-6-18 06:01:51
