- UID
- 41370
注册时间2007-12-15
阅读权限10
最后登录1970-1-1
周游历练
该用户从未签到
|
051D5C9 |> /8D4D D0 |/LEA ECX,DWORD PTR SS:[EBP-30]
0051D5CC |. |33C0 ||XOR EAX,EAX
0051D5CE |. |8A03 ||MOV AL,BYTE PTR DS:[EBX]
0051D5D0 |. |BA 02000000 ||MOV EDX,2
0051D5D5 |. |E8 2ABDEEFF ||CALL 88888.00409304
0051D5DA |. |8B55 D0 ||MOV EDX,DWORD PTR SS:[EBP-30]
0051D5DD |. |8BC7 ||MOV EAX,EDI
0051D5DF |. |E8 0874EEFF ||CALL 88888.004049EC
0051D5E4 |. |43 ||INC EBX
0051D5E5 |. |4E ||DEC ESI
0051D5E6 |.^\75 E1 |\JNZ SHORT 88888.0051D5C9
0051D5E8 |. 8345 D8 08 |ADD DWORD PTR SS:[EBP-28],8
0051D5EC |. 8B45 DC |MOV EAX,DWORD PTR SS:[EBP-24]
上面是一段算法CALL,每过0051D5D5后就在寄存器窗口出现两个注册码!
0051D5D5 这个CALL进入后的代码如下:
00409304 /$ 83C4 F0 ADD ESP,-10
00409307 |. 6A 01 PUSH 1 ; /Arg1 = 00000001
00409309 |. 895424 04 MOV DWORD PTR SS:[ESP+4],EDX ; |
0040930D |. C64424 08 00 MOV BYTE PTR SS:[ESP+8],0 ; |
00409312 |. 894424 0C MOV DWORD PTR SS:[ESP+C],EAX ; |
00409316 |. C64424 10 00 MOV BYTE PTR SS:[ESP+10],0 ; |
0040931B |. 8D4424 04 LEA EAX,DWORD PTR SS:[ESP+4] ; |
0040931F |. BA 38934000 MOV EDX,88888.00409338 ; |%.*x
00409324 |. 91 XCHG EAX,ECX ; |
00409325 |. E8 320B0000 CALL 88888.00409E5C ; \88888.00409E5C
0040932A |. 83C4 10 ADD ESP,10
0040932D \. C3 RETN
请高手逐段行一下代码意思,以便小弟学习之!小弟不甚感激! |
|