- UID
- 49872
注册时间2008-5-1
阅读权限10
最后登录1970-1-1
周游历练
该用户从未签到
|
为什么经常在F12调用后,下断的一个meassageBoxA CALL进去后是这样啊,这样怎么能追到注册码啊
00407128 $- FF25 D4865800 JMP DWORD PTR DS:[<&user32.MessageBoxA>] ; user32.MessageBoxA
0040712E 8BC0 MOV EAX,EAX
00407130 $- FF25 D0865800 JMP DWORD PTR DS:[<&user32.MsgWaitForMul>; user32.MsgWaitForMultipleObjects
00407136 8BC0 MOV EAX,EAX
00407138 $- FF25 CC865800 JMP DWORD PTR DS:[<&user32.OemToCharA>] ; user32.OemToCharA
0040713E 8BC0 MOV EAX,EAX
00407140 $- FF25 C8865800 JMP DWORD PTR DS:[<&user32.OffsetRect>] ; user32.OffsetRect
00407146 8BC0 MOV EAX,EAX
00407148 $- FF25 C4865800 JMP DWORD PTR DS:[<&user32.OpenClipboard>; user32.OpenClipboard
0040714E 8BC0 MOV EAX,EAX
00407150 $- FF25 C0865800 JMP DWORD PTR DS:[<&user32.PeekMessageA>>; user32.PeekMessageA
00407156 8BC0 MOV EAX,EAX
00407158 $- FF25 BC865800 JMP DWORD PTR DS:[<&user32.PostMessageA>>; user32.PostMessageA
0040715E 8BC0 MOV EAX,EAX
00407160 $- FF25 B8865800 JMP DWORD PTR DS:[<&user32.PostQuitMessa>; user32.PostQuitMessage
00407166 8BC0 MOV EAX,EAX
00407168 $- FF25 B4865800 JMP DWORD PTR DS:[<&user32.PtInRect>] ; user32.PtInRect
0040716E 8BC0 MOV EAX,EAX
00407170 $- FF25 B0865800 JMP DWORD PTR DS:[<&user32.RedrawWindow>>; user32.RedrawWindow
00407176 8BC0 MOV EAX,EAX
00407178 $- FF25 AC865800 JMP DWORD PTR DS:[<&user32.RegisterClass>; user32.RegisterClassA
0040717E 8BC0 MOV EAX,EAX
00407180 $- FF25 A8865800 JMP DWORD PTR DS:[<&user32.RegisterClipb>; user32.RegisterWindowMessageA
00407186 8BC0 MOV EAX,EAX
00407188 $- FF25 A4865800 JMP DWORD PTR DS:[<&user32.RegisterWindo>; user32.RegisterWindowMessageA
0040718E 8BC0 MOV EAX,EAX
00407190 $- FF25 A0865800 JMP DWORD PTR DS:[<&user32.ReleaseCaptur>; user32.ReleaseCapture
00407196 8BC0 MOV EAX,EAX
00407198 $- FF25 9C865800 JMP DWORD PTR DS:[<&user32.ReleaseDC>] ; user32.ReleaseDC
0040719E 8BC0 MOV EAX,EAX
004071A0 $- FF25 98865800 JMP DWORD PTR DS:[<&user32.RemoveMenu>] ; user32.RemoveMenu
004071A6 8BC0 MOV EAX,EAX
004071A8 $- FF25 94865800 JMP DWORD PTR DS:[<&user32.RemovePropA>] ; user32.RemovePropA
004071AE 8BC0 MOV EAX,EAX
004071B0 $- FF25 90865800 JMP DWORD PTR DS:[<&user32.ScreenToClien>; user32.ScreenToClient
004071B6 8BC0 MOV EAX,EAX
004071B8 $- FF25 8C865800 JMP DWORD PTR DS:[<&user32.ScrollWindow>>; user32.ScrollWindow
004071BE 8BC0 MOV EAX,EAX
004071C0 $- FF25 88865800 JMP DWORD PTR DS:[<&user32.SendDlgItemMe>; user32.SendDlgItemMessageA
004071C6 8BC0 MOV EAX,EAX
004071C8 $- FF25 84865800 JMP DWORD PTR DS:[<&user32.SendMessageA>>; user32.SendMessageA
004071CE 8BC0 MOV EAX,EAX
004071D0 $- FF25 80865800 JMP DWORD PTR DS:[<&user32.SendNotifyMes>; user32.SendNotifyMessageA
004071D6 8BC0 MOV EAX,EAX
004071D8 $- FF25 7C865800 JMP DWORD PTR DS:[<&user32.SetActiveWind>; user32.SetActiveWindow
004071DE 8BC0 MOV EAX,EAX
004071E0 $- FF25 78865800 JMP DWORD PTR DS:[<&user32.SetCapture>] ; user32.SetCapture
004071E6 8BC0 MOV EAX,EAX
004071E8 $- FF25 74865800 JMP DWORD PTR DS:[<&user32.SetClassLongA>; user32.SetClassLongA
004071EE 8BC0 MOV EAX,EAX
004071F0 $- FF25 70865800 JMP DWORD PTR DS:[<&user32.SetClipboardD>; user32.SetClipboardData
004071F6 8BC0 MOV EAX,EAX
004071F8 $- FF25 6C865800 JMP DWORD PTR DS:[<&user32.SetCursor>] ; user32.SetCursor
004071FE 8BC0 MOV EAX,EAX
00407200 $- FF25 68865800 JMP DWORD PTR DS:[<&user32.SetFocus>] ; user32.SetFocus
00407206 8BC0 MOV EAX,EAX
00407208 $- FF25 64865800 JMP DWORD PTR DS:[<&user32.SetForeground>; user32.SetForegroundWindow
0040720E 8BC0 MOV EAX,EAX
00407210 $- FF25 60865800 JMP DWORD PTR DS:[<&user32.SetKeyboardSt>; user32.SetKeyboardState
00407216 8BC0 MOV EAX,EAX
00407218 $- FF25 5C865800 JMP DWORD PTR DS:[<&user32.SetMenu>] ; user32.SetMenu
0040721E 8BC0 MOV EAX,EAX
00407220 $- FF25 58865800 JMP DWORD PTR DS:[<&user32.SetMenuItemIn>; user32.SetMenuItemInfoA
00407226 8BC0 MOV EAX,EAX
00407228 $- FF25 54865800 JMP DWORD PTR DS:[<&user32.SetParent>] ; user32.SetParent
0040722E 8BC0 MOV EAX,EAX
00407230 $- FF25 50865800 JMP DWORD PTR DS:[<&user32.SetPropA>] ; user32.SetPropA
00407236 8BC0 MOV EAX,EAX
00407238 $- FF25 4C865800 JMP DWORD PTR DS:[<&user32.SetRect>] ; user32.SetRect
0040723E 8BC0 MOV EAX,EAX
00407240 $- FF25 48865800 JMP DWORD PTR DS:[<&user32.SetRectEmpty>>; user32.SetRectEmpty
00407246 8BC0 MOV EAX,EAX
00407248 .- FF25 44865800 JMP DWORD PTR DS:[<&user32.SetScrollInfo>; user32.SetScrollInfo
0040724E 8BC0 MOV EAX,EAX
00407250 .- FF25 40865800 JMP DWORD PTR DS:[<&user32.SetScrollPos>>; user32.SetScrollPos
00407256 8BC0 MOV EAX,EAX
00407258 .- FF25 3C865800 JMP DWORD PTR DS:[<&user32.SetScrollRang>; user32.SetScrollRange
0040725E 8BC0 MOV EAX,EAX
00407260 $- FF25 38865800 JMP DWORD PTR DS:[<&user32.SetTimer>] ; user32.SetTimer
00407266 8BC0 MOV EAX,EAX
00407268 $- FF25 34865800 JMP DWORD PTR DS:[<&user32.SetWindowLong>; user32.SetWindowLongA
0040726E 8BC0 MOV EAX,EAX
00407270 $- FF25 30865800 JMP DWORD PTR DS:[<&user32.SetWindowPlac>; user32.SetWindowPlacement
00407276 8BC0 MOV EAX,EAX
00407278 $- FF25 2C865800 JMP DWORD PTR DS:[<&user32.SetWindowPos>>; user32.SetWindowPos
0040727E 8BC0 MOV EAX,EAX
00407280 $- FF25 28865800 JMP DWORD PTR DS:[<&user32.SetWindowText>; user32.SetWindowTextA
00407286 8BC0 MOV EAX,EAX
00407288 $- FF25 24865800 JMP DWORD PTR DS:[<&user32.SetWindowsHoo>; user32.SetWindowsHookExA
0040728E 8BC0 MOV EAX,EAX
00407290 $- FF25 20865800 JMP DWORD PTR DS:[<&user32.SetWindowRgn>>; user32.SetWindowRgn
00407296 8BC0 MOV EAX,EAX
00407298 $- FF25 1C865800 JMP DWORD PTR DS:[<&user32.ShowCaret>] ; user32.ShowCaret
0040729E 8BC0 MOV EAX,EAX
004072A0 $- FF25 18865800 JMP DWORD PTR DS:[<&user32.ShowCursor>] ; user32.ShowCursor
004072A6 8BC0 MOV EAX,EAX
004072A8 $- FF25 14865800 JMP DWORD PTR DS:[<&user32.ShowOwnedPopu>; user32.ShowOwnedPopups
004072AE 8BC0 MOV EAX,EAX
004072B0 .- FF25 10865800 JMP DWORD PTR DS:[<&user32.ShowScrollBar>; user32.ShowScrollBar
004072B6 8BC0 MOV EAX,EAX
004072B8 $- FF25 0C865800 JMP DWORD PTR DS:[<&user32.ShowWindow>] ; user32.ShowWindow
004072BE 8BC0 MOV EAX,EAX
004072C0 $- FF25 08865800 JMP DWORD PTR DS:[<&user32.SystemParamet>; user32.SystemParametersInfoA
004072C6 8BC0 MOV EAX,EAX
004072C8 $- FF25 04865800 JMP DWORD PTR DS:[<&user32.TrackPopupMen>; user32.TrackPopupMenu
004072CE 8BC0 MOV EAX,EAX
004072D0 $- FF25 00865800 JMP DWORD PTR DS:[<&user32.TranslateMDIS>; user32.TranslateMDISysAccel
004072D6 8BC0 MOV EAX,EAX
004072D8 $- FF25 FC855800 JMP DWORD PTR DS:[<&user32.TranslateMess>; user32.TranslateMessage
004072DE 8BC0 MOV EAX,EAX
004072E0 $- FF25 F8855800 JMP DWORD PTR DS:[<&user32.UnhookWindows>; user32.UnhookWindowsHookEx
004072E6 8BC0 MOV EAX,EAX
004072E8 $- FF25 F4855800 JMP DWORD PTR DS:[<&user32.UnregisterCla>; user32.UnregisterClassA
004072EE 8BC0 MOV EAX,EAX
004072F0 $- FF25 F0855800 JMP DWORD PTR DS:[<&user32.UpdateWindow>>; user32.UpdateWindow
004072F6 8BC0 MOV EAX,EAX
004072F8 $- FF25 EC855800 JMP DWORD PTR DS:[<&user32.ValidateRect>>; user32.ValidateRect
004072FE 8BC0 MOV EAX,EAX
00407300 $- FF25 E8855800 JMP DWORD PTR DS:[<&user32.VkKeyScanA>] ; user32.VkKeyScanA
00407306 8BC0 MOV EAX,EAX
00407308 $- FF25 E4855800 JMP DWORD PTR DS:[<&user32.WaitMessage>] ; user32.WaitMessage
0040730E 8BC0 MOV EAX,EAX
00407310 $- FF25 E0855800 JMP DWORD PTR DS:[<&user32.WinHelpA>] ; user32.WinHelpA
00407316 8BC0 MOV EAX,EAX
00407318 $- FF25 DC855800 JMP DWORD PTR DS:[<&user32.WindowFromPoi>; user32.WindowFromPoint
0040731E 8BC0 MOV EAX,EAX
00407320 /$ 0FB7C0 MOVZX EAX,AX
00407323 |. 0FB7D2 MOVZX EDX,DX
00407326 |. C1E2 10 SHL EDX,10
00407329 |. 0BC2 OR EAX,EDX
0040732B \. C3 RETN
0040732C /$ C1E8 10 SHR EAX,10
0040732F \. C3 RETN
00407330 /$ E8 13F5FFFF CALL <JMP.&kernel32.GetTickCount> ; [GetTickCount
00407335 \. C3 RETN
00407336 8BC0 MOV EAX,EAX
00407338 /$ 33C0 XOR EAX,EAX
0040733A \. C3 RETN
0040733B 90 NOP
0040733C /$ 52 PUSH EDX ; /MemSize
0040733D |. 50 PUSH EAX ; |Flags
0040733E |. E8 35F5FFFF CALL <JMP.&kernel32.GlobalAlloc> ; \GlobalAlloc
00407343 |. 50 PUSH EAX ; /hMem
00407344 |. E8 4FF5FFFF CALL <JMP.&kernel32.GlobalLock> ; \GlobalLock
00407349 \. C3 RETN
0040734A 8BC0 MOV EAX,EAX
0040734C /$ 51 PUSH ECX ; /Flags
0040734D |. 52 PUSH EDX ; |NewSize
0040734E |. 50 PUSH EAX ; |/pMem
0040734F |. E8 4CF5FFFF CALL <JMP.&kernel32.GlobalHandle> ; |\GlobalHandle
00407354 |. 50 PUSH EAX ; |hMem
00407355 |. 50 PUSH EAX ; |/hMem
00407356 |. E8 5DF5FFFF CALL <JMP.&kernel32.GlobalUnlock> ; |\GlobalUnlock
0040735B |. E8 48F5FFFF CALL <JMP.&kernel32.GlobalReAlloc> ; \GlobalReAlloc
00407360 |. 50 PUSH EAX ; /hMem
00407361 |. E8 32F5FFFF CALL <JMP.&kernel32.GlobalLock> ; \GlobalLock
00407366 \. C3 RETN
00407367 90 NOP
00407368 /$ 50 PUSH EAX ; /pMem
00407369 |. E8 32F5FFFF CALL <JMP.&kernel32.GlobalHandle> ; \GlobalHandle
0040736E |. 50 PUSH EAX ; /hMem
0040736F |. 50 PUSH EAX ; |/hMem
00407370 |. E8 43F5FFFF CALL <JMP.&kernel32.GlobalUnlock> ; |\GlobalUnlock
00407375 |. E8 16F5FFFF CALL <JMP.&kernel32.GlobalFree> ; \GlobalFree
0040737A \. C3 RETN
0040737B 90 NOP
0040737C /$ A9 00000080 TEST EAX,80000000
00407381 |. 0F95C0 SETNE AL
00407384 |. F6D8 NEG AL
00407386 |. 1BC0 SBB EAX,EAX
00407388 \. C3 RETN
00407389 8D40 00 LEA EAX,DWORD PTR DS:[EAX]
0040738C /$ C1E2 08 SHL EDX,8
0040738F |. 81E2 000000FF AND EDX,FF000000
00407395 |. 0BC2 OR EAX,EDX
00407397 \. C3 RETN
00407398 /$ 25 FF000000 AND EAX,0FF
0040739D |. 81E2 FF000000 AND EDX,0FF
004073A3 |. C1E2 08 SHL EDX,8
004073A6 |. 0BC2 OR EAX,EDX
004073A8 |. 33D2 XOR EDX,EDX
004073AA |. 8AD1 MOV DL,CL
004073AC |. C1E2 10 SHL EDX,10
004073AF |. 0BC2 OR EAX,EDX
004073B1 \. C3 RETN
004073B2 8BC0 MOV EAX,EAX
004073B4 /$ 0FB7C0 MOVZX EAX,AX
004073B7 |. 0D 00000001 OR EAX,1000000
004073BC \. C3 RETN
004073BD 8D40 00 LEA EAX,DWORD PTR DS:[EAX]
004073C0 $ C3 RETN
004073C1 8D40 00 LEA EAX,DWORD PTR DS:[EAX]
004073C4 /$ C1E8 08 SHR EAX,8
004073C7 \. C3 RETN
004073C8 /$ C1E8 10 SHR EAX,10
004073CB \. C3 RETN
004073CC /$ 51 PUSH ECX
004073CD |. 890424 MOV DWORD PTR SS:[ESP],EAX
004073D0 |. 0FBF0424 MOVSX EAX,WORD PTR SS:[ESP]
004073D4 |. 8902 MOV DWORD PTR DS:[EDX],EAX
004073D6 |. 0FBF4424 02 MOVSX EAX,WORD PTR SS:[ESP+2]
004073DB |. 8942 04 MOV DWORD PTR DS:[EDX+4],EAX
004073DE |. 5A POP EDX
004073DF \. C3 RETN
004073E0 /$ 51 PUSH ECX
004073E1 |. 66:8B10 MOV DX,WORD PTR DS:[EAX]
004073E4 |. 66:891424 MOV WORD PTR SS:[ESP],DX
004073E8 |. 66:8B40 04 MOV AX,WORD PTR DS:[EAX+4]
004073EC |. 66:894424 02 MOV WORD PTR SS:[ESP+2],AX
004073F1 |. 8B0424 MOV EAX,DWORD PTR SS:[ESP]
004073F4 |. 5A POP EDX
004073F5 \. C3 RETN
004073F6 8BC0 MOV EAX,EAX
004073F8 /$ E8 23FFFFFF CALL ae.00407320
004073FD \. C3 RETN
004073FE 8BC0 MOV EAX,EAX
00407400 /$ E8 1BFFFFFF CALL ae.00407320
00407405 \. C3 RETN
00407406 8BC0 MOV EAX,EAX
00407408 $- FF25 D8855800 JMP DWORD PTR DS:[<&user32.CreateWindowE>; user32.CreateWindowExA
0040740E 8BC0 MOV EAX,EAX
00407410 /$ 55 PUSH EBP
00407411 |. 8BEC MOV EBP,ESP
00407413 |. 51 PUSH ECX
00407414 |. 53 PUSH EBX
00407415 |. 56 PUSH ESI
00407416 |. 57 PUSH EDI
00407417 |. 894D FC MOV DWORD PTR SS:[EBP-4],ECX
0040741A |. 8BFA MOV EDI,EDX
0040741C |. 8BF0 MOV ESI,EAX
0040741E |. E8 15B7FFFF CALL ae.00402B38
00407423 |. 8BD8 MOV EBX,EAX
00407425 |. 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
00407428 |. 50 PUSH EAX ; /lParam |
|