|
发表于 2007-4-2 17:34:05
|
显示全部楼层
00407634 FF51 18 call dword ptr [ecx+18] 都是调用这CALL
CALL进去
00401140 83EC 0C sub esp, 0C
00401143 56 push esi
00401144 C64424 04 65 mov byte ptr [esp+4], 65
00401149 C64424 05 3B mov byte ptr [esp+5], 3B
0040114E C64424 06 20 mov byte ptr [esp+6], 20
00401153 . C64424 07 21 mov byte ptr [esp+7], 21
00401158 . C64424 08 0E mov byte ptr [esp+8], 0E
0040115D . C64424 09 EF mov byte ptr [esp+9], 0EF
00401162 . C64424 0A C2 mov byte ptr [esp+A], 0C2
00401167 . C64424 0B 09 mov byte ptr [esp+B], 9
0040116C . C64424 0C 2A mov byte ptr [esp+C], 2A
00401171 . C64424 0D 84 mov byte ptr [esp+D], 84
00401176 . C64424 0E DF mov byte ptr [esp+E], 0DF
0040117B . C64424 0F CC mov byte ptr [esp+F], 0CC
00401180 E8 8B000000 call 00401210
00401185 8BF0 mov esi, eax
00401187 85F6 test esi, esi
00401189 75 09 jnz short 00401194 NOP
0040118B 32C0 xor al, al mov al,1
0040118D 5E pop esi
0040118E 83C4 0C add esp, 0C
00401191 . C2 0400 retn 4
:) |
|