Borland Delphi 6.0 - 7.0 [Overlay]脱壳后无法运行，请高手指点。-付费问答-看雪-安全社区|安全招聘|kanxue.com

最新回复 (9)
logkiller 雪币： 7906 活跃值： (3086) 能力值： ( LV2，RANK：10 ) 在线值：发帖 16 回帖 776 粉丝 1 关注私信	logkiller 2 楼这是net程序，你用什么脱的上传的附件： game_.rar （493.71kb，22次下载） 2010-7-26 20:22 0
lishuo果雪币： 41 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 1 回帖 14 粉丝 0 关注私信	lishuo果 4 楼这是C#的程序，我反编译后，也有问题 00405A72 push 2 00405A74 push 0 00405A76 lea eax,[ebp-11Dh] 00405A7C push eax 00405A7D call 00401300 00405A82 mov esi,eax 00405A84 test esi,esi 00405A86 jne 00405AA8 00405A88 mov byte ptr [ebp-0Bh],0 00405A8C lea eax,[ebp-0Dh] 00405A8F push eax 00405A90 push ebx 00405A91 call 00401310 00405A96 push 2 00405A98 push 0 00405A9A lea eax,[ebp-11Dh] 00405AA0 push eax 00405AA1 call 00401300 00405AA6 mov esi,eax 00405AA8 mov eax,esi 00405AAA pop esi 00405AAB pop ebx 00405AAC mov esp,ebp 00405AAE pop ebp 00405AAF ret 00405AB0 push ebx 00405AB1 outs dx,dword ptr [esi] 00405AB2 je 00005B2C 00405AB5 popad 00405AB6 jb 00405B1D 00405AB8 pop esp 00405AB9 inc edx 00405ABA outs dx,dword ptr [esi] 00405ABB jb 00405B29 00405ABD popad 00405ABE outs dx,byte ptr [esi] 00405ABF pop esp 00405AC1 dec esp 00405AC2 outs dx,dword ptr [esi] 00405AC3 arpl word ptr [ecx+6Ch],sp 00405AC6 jae 00405AC9 00405AC9 add byte ptr [eax],al 00405ACB add byte ptr [ebx+6Fh],dl 00405ACE je 00005B48 00405AD1 popad 00405AD2 jb 00405B39 00405AD4 pop esp 00405AD5 inc edx 00405AD6 outs dx,dword ptr [esi] 00405AD7 jb 00405B45 00405AD9 popad 00405ADA outs dx,byte ptr [esi] 00405ADB pop esp 00405ADD inc esp 00405ADE ins byte ptr es:[edi],dx 00405AE0 jo 00405B4A 00405AE2 imul ebx,dword ptr [esp+ecx*2+6Fh],656C6163h 00405AEA jae 00405AEC 00405AEC add byte ptr [eax],al 00405AEE add byte ptr [eax],al 00405AF0 call 00405B00 00405AF5 ret 00405AF6 mov eax,eax 00405AF8 call 00405B20 00405AFD ret 00405AFE mov eax,eax 00405B00 push ebx 00405B01 mov ebx,eax 00405B03 mov eax,8 00405B08 call 00402724 00405B0D mov edx,dword ptr ds:[4FA020h] 00405B13 mov dword ptr [eax],edx 00405B15 mov dword ptr [eax+4],ebx 00405B18 mov dword ptr ds:[004FA020h],eax 00405B1D pop ebx 00405B1E ret 00405B1F nop 00405B20 push ebx 00405B21 push esi 00405B22 mov esi,dword ptr ds:[4FA020h] 00405B28 test esi,esi 00405B2A je 00405B4E 00405B2C mov edx,dword ptr [esi+4] 00405B2F cmp edx,eax 00405B31 jne 00405B4E 00405B33 mov eax,dword ptr ds:[004FA020h] 00405B38 mov eax,dword ptr [eax] 00405B3A mov dword ptr ds:[004FA020h],eax 00405B3F mov edx,8 00405B44 mov eax,esi 00405B46 call 0040273C 00405B4B pop esi 00405B4C pop ebx 00405B4D ret 00405B4E mov edx,esi 00405B50 test edx,edx 00405B52 je 00405B7B 00405B54 mov ecx,dword ptr [edx] 00405B56 test ecx,ecx 00405B58 je 00405B75 00405B5A mov ebx,dword ptr [ecx+4] 00405B5D cmp ebx,eax 00405B5F jne 00405B75 00405B61 mov esi,ecx 00405B63 mov eax,dword ptr [ecx] 00405B65 mov dword ptr [edx],eax 00405B67 mov edx,8 00405B6C mov eax,esi 00405B6E call 0040273C 00405B73 jmp 00405B7B 00405B75 mov edx,dword ptr [edx] 00405B77 test edx,edx 00405B79 jne 00405B54 00405B7B pop esi 00405B7C pop ebx 00405B7D ret 00405B7E mov eax,eax 00405B80 push ebp 00405B81 mov ebp,esp 00405B83 add esp,0FFFFFFF8h 00405B86 push ebx 00405B87 push esi 00405B88 push edi 00405B89 mov dword ptr [ebp-4],eax 00405B8C mov eax,dword ptr ds:[004FA020h] 00405B91 mov dword ptr [ebp-8],eax 00405B94 cmp dword ptr [ebp-8],0 00405B98 je 00405BD3 00405B9A xor eax,eax 00405B9C push ebp 00405B9D push 405BBBh 00405BA2 push dword ptr fs:[eax] 00405BA5 mov dword ptr fs:[eax],esp 00405BA8 mov ebx,dword ptr [ebp-8] 00405BAB mov eax,dword ptr [ebp-4] 00405BAE call dword ptr [ebx+4] 00405BB1 xor eax,eax 00405BB3 pop edx 00405BB4 pop ecx 00405BB5 pop ecx 00405BB6 mov dword ptr fs:[eax],edx 00405BB9 jmp 00405BC5 00405BBB jmp 004034B8 00405BC0 call 00403814 00405BC5 mov eax,dword ptr [ebp-8] 00405BC8 mov eax,dword ptr [eax] 00405BCA mov dword ptr [ebp-8],eax 00405BCD cmp dword ptr [ebp-8],0 00405BD1 jne 00405B9A 00405BD3 pop edi 00405BD4 pop esi 00405BD5 pop ebx 00405BD6 pop ecx 00405BD7 pop ecx 00405BD8 pop ebp 00405BD9 ret 00405BDA mov eax,eax 00405BDC mov edx,dword ptr ds:[4FA01Ch] 00405BE2 mov dword ptr [eax],edx 00405BE4 mov dword ptr ds:[004FA01Ch],eax 00405BE9 ret 00405BEA mov eax,eax 00405BEC push ebp 00405BED mov ebp,esp 00405BEF push ecx 00405BF0 mov dword ptr [ebp-4],eax 00405BF3 xor edx,edx 00405BF5 push ebp 00405BF6 push 405C50h 00405BFB push dword ptr fs:[edx] 00405BFE mov dword ptr fs:[edx],esp 00405C01 mov eax,dword ptr [ebp-4] 00405C04 mov eax,dword ptr [eax+4] 00405C07 call 00405B80 00405C0C xor eax,eax 00405C0E pop edx 00405C0F pop ecx 00405C10 pop ecx 00405C11 mov dword ptr fs:[eax],edx 00405C14 push 405C57h 00405C19 mov eax,dword ptr [ebp-4] 00405C1C cmp eax,dword ptr ds:[4FA01Ch] 00405C22 jne 00405C30 00405C24 mov eax,dword ptr [ebp-4] 00405C27 mov eax,dword ptr [eax] 00405C29 mov dword ptr ds:[004FA01Ch],eax 00405C2E jmp 00405C4F 00405C30 mov eax,dword ptr ds:[004FA01Ch] 00405C35 test eax,eax 00405C37 je 00405C4F 00405C39 mov edx,dword ptr [eax] 00405C3B cmp edx,dword ptr [ebp-4] 00405C3E jne 00405C49 00405C40 mov edx,dword ptr [ebp-4] 00405C43 mov edx,dword ptr [edx] 00405C45 mov dword ptr [eax],edx 00405C47 jmp 00405C4F 00405C49 mov eax,dword ptr [eax] 00405C4B test eax,eax 00405C4D jne 00405C39 00405C4F ret 00405C50 jmp 0040376C 00405C55 jmp 00405C19 00405C57 pop ecx 00405C58 pop ebp 00405C59 ret 00405C5A mov eax,eax 00405C5C push ebx 00405C5D push esi 00405C5E add esp,0FFFFFC00h 00405C64 mov esi,edx 00405C66 mov ebx,eax 00405C68 test ebx,ebx 00405C6A je 00405CA9 00405C6C cmp dword ptr [ebx+4],10000h 00405C73 jge 00405C9F 00405C75 push 400h 00405C7A lea eax,[esp+4] 00405C7E push eax 00405C7F mov eax,dword ptr [ebx+4] 00405C82 push eax 00405C83 mov eax,dword ptr [ebx] 00405C85 mov eax,dword ptr [eax] 00405C87 call 00405714 00405C8C push eax 00405C8D call 00401308 00405C92 mov ecx,eax 00405C94 mov edx,esp 00405C96 mov eax,esi 00405C98 call 00403E5C 00405C9D jmp 00405CA9 00405C9F mov eax,esi 00405CA1 mov edx,dword ptr [ebx+4] 00405CA4 call 00403F2C 00405CA9 add esp,400h 00405CAF pop esi 00405CB0 pop ebx 00405CB1 ret 00405CB2 mov eax,eax 00405CB4 mov edx,dword ptr [eax] 00405CB6 test edx,edx 00405CB8 je 00405CC8 00405CBA mov dword ptr [eax],0 00405CC0 push eax 00405CC1 push edx 00405CC2 mov eax,dword ptr [edx] 00405CC4 call dword ptr [eax+8] 00405CC7 pop eax 00405CC8 ret 00405CC9 lea eax,[eax] 00405CCC mov ecx,dword ptr [eax] 00405CCE mov dword ptr [eax],edx 00405CD0 test edx,edx 00405CD2 je 00405CDC 00405CD4 push ecx 00405CD5 push edx 00405CD6 mov eax,dword ptr [edx] 00405CD8 call dword ptr [eax+4] 00405CDB pop ecx 00405CDC test ecx,ecx 00405CDE je 00405CE6 00405CE0 push ecx 00405CE1 mov eax,dword ptr [ecx] 00405CE3 call dword ptr [eax+8] 00405CE6 ret 00405CE7 nop 00405CE8 test eax,eax 00405CEA je 00405CF2 00405CEC push eax 00405CED mov eax,dword ptr [eax] 00405CEF call dword ptr [eax+4] 00405CF2 ret 00405CF3 nop 00405CF4 add eax,4 00405CF7 push eax 00405CF8 call 00401398 00405CFD ret 00405CFE mov eax,eax 00405D00 cmp dword ptr [eax+4],0 00405D04 je 00405D0D 00405D06 mov al,2 00405D08 call 004027B0 00405D0D ret 00405D0E mov eax,eax 00405D10 call 00402FA0 00405D15 mov dword ptr [eax+4],1 00405D1C ret 00405D1D lea eax,[eax] 00405D20 push ebp 00405D21 mov ebp,esp 00405D23 push ebx 00405D24 mov ebx,dword ptr [ebp+8] 00405D27 mov ecx,dword ptr [ebp+10h] 00405D2A mov edx,dword ptr [ebp+0Ch] 00405D2D mov eax,ebx 00405D2F call 004030A0 00405D34 test al,al 00405D36 je 00405D3C 00405D38 xor eax,eax 00405D3A jmp 00405D41 00405D3C mov eax,80004002h 00405D41 pop ebx 00405D42 pop ebp 00405D43 ret 0Ch 00405D46 mov eax,eax 00405D48 push ebp 00405D49 mov ebp,esp 00405D4B mov eax,dword ptr [ebp+8] 00405D4E add eax,4 00405D51 push eax 00405D52 call 00401390 00405D57 pop ebp 00405D58 ret 4 00405D5B nop 00405D5C push ebp 00405D5D mov ebp,esp 00405D5F push ebx 00405D60 push esi 00405D61 mov ebx,dword ptr [ebp+8] 00405D64 lea eax,[ebx+4] 00405D67 push eax 00405D68 call 00401398 00405D6D mov esi,eax 00405D6F test esi,esi 00405D71 jne 00405D7C 00405D73 mov dl,1 00405D75 mov eax,ebx 00405D77 mov ecx,dword ptr [eax] 00405D79 call dword ptr [ecx-4] 00405D7C mov eax,esi 00405D7E pop esi 00405D7F pop ebx 00405D80 pop ebp 00405D81 ret 4 00405D84 call 02980004 00405D89 mov ch,8Bh 00405D8B sal byte ptr [ebx],0D2h 00405D8E mov dword ptr [eax+10h],edx 00405D91 mov dword ptr [eax+0Ch],edx 00405D94 push edx 00405D95 lea edx,[eax+10h] 00405D98 push edx 00405D99 push dword ptr [eax+8] 00405D9C push dword ptr [eax+14h] 00405D9F push dword ptr [eax] 00405DA1 call 00401250 00405DA6 test eax,eax 00405DA8 je 00405DAD 00405DAA xor eax,eax 00405DAC ret 00405DAD call 004012C8 00405DB2 cmp eax,6Dh 00405DB5 je 00405DAA 00405DB7 ret 00405DB8 xor eax,eax 00405DBA ret 00405DBB push ecx 00405DBC mov edx,dword ptr [eax+0Ch] 00405DBF test edx,edx 00405DC1 jle 00405DDD 00405DC3 xor ecx,ecx 00405DC5 mov dword ptr [eax+0Ch],ecx 00405DC8 push ecx 00405DC9 lea ecx,[esp+4] 00405DCD push ecx 00405DCE push edx 00405DCF push dword ptr [eax+14h] 00405DD2 push dword ptr [eax] 00405DD4 call 00401278 00405DD9 test eax,eax 00405DDB je 00405DE1 00405DDD xor eax,eax 00405DDF pop ecx 00405DE0 ret 00405DE1 call 004012C8 00405DE6 jmp 00405DDF 00405DE8 push dword ptr [eax] 00405DEA mov dword ptr [eax+4],0D7B0h 00405DF1 call 00401218 00405DF6 dec eax 00405DF7 jne 00405DFA 00405DF9 ret 00405DFA call 004012C8 00405DFF ret 00405E00 push esi 00405E01 mov esi,eax 00405E03 xor eax,eax 00405E05 mov dword ptr [esi+0Ch],eax 00405E08 mov dword ptr [esi+10h],eax 00405E0B mov eax,dword ptr [esi+4] 00405E0E sub eax,0D7B1h 00405E13 je 00405E20 00405E15 dec eax 00405E16 je 00405E38 00405E18 dec eax 00405E19 je 00405E49 00405E1B jmp 00405F69 00405E20 mov eax,80000000h 00405E25 mov edx,1 00405E2A mov ecx,3 00405E2F mov dword ptr [esi+1Ch],405D8Ch 00405E36 jmp 00405E5F 00405E38 mov eax,40000000h 00405E3D mov edx,1 00405E42 mov ecx,2 00405E47 jmp 00405E58 00405E49 mov eax,0C0000000h 00405E4E mov edx,1 00405E53 mov ecx,3 00405E58 mov dword ptr [esi+1Ch],405DBBh 00405E5F mov dword ptr [esi+24h],405DE8h 00405E66 mov dword ptr [esi+20h],405DB8h 00405E6D cmp byte ptr [esi+48h],0 00405E71 je 00405F25 00405E77 push 0 00405E79 push 80h 00405E7E push ecx 00405E7F push 0 00405E81 push edx 00405E82 push eax 00405E83 lea eax,[esi+48h] 00405E86 push eax 2010-7-27 14:49 0
logkiller 雪币： 7906 活跃值： (3086) 能力值： ( LV2，RANK：10 ) 在线值：发帖 16 回帖 776 粉丝 1 关注私信	logkiller 5 楼不知道楼上的贴的什么意思？你要反就反我给出的吧，至少还能运行。。。但是.net程序用OD看实在是件痛苦的事，PF楼上的 2010-7-28 05:16 0
miszqy 雪币： 0 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 1 粉丝 0 关注私信	miszqy 6 楼有难度哦有难度哦有难度哦 2010-11-29 22:59 0
淡忘阿呆雪币： 21 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 9 粉丝 0 关注私信	淡忘阿呆 7 楼要是可以你发到我的邮箱里直接给你KO了就行了 2010-12-7 19:20 0
xyzfxg 雪币： 25 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 16 回帖 58 粉丝 0 关注私信	xyzfxg 8 楼淡忘阿呆的邮箱是多少，我给你发个帮我看看，如能破解，帮你申请邀请码 2010-12-8 10:25 0
LuckyFox 雪币： 1 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 3 回帖 74 粉丝 0 关注私信	LuckyFox 9 楼努力学习，看看大家都用那些工具 2010-12-10 15:34 0
wr天天飞雪币： 32 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 1 回帖 2 粉丝 0 关注私信	wr天天飞 10 楼这个有结果了吗？ 2011-3-8 16:39 0
夜魂雪币： 31 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 5 回帖 16 粉丝 0 关注私信	夜魂 11 楼我的也是那种壳但不知道要在那里反 2011-8-10 00:51 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

logkiller

雪币： 7906

活跃值： (3086)

能力值：

( LV2，RANK：10 )

在线值：

发帖

16

回帖

776

粉丝

1

关注

私信

logkiller: 2 楼

这是net程序，你用什么脱的

上传的附件：

game_.rar （493.71kb，22次下载）

2010-7-26 20:22

0

lishuo果

雪币： 41

活跃值： (10)

能力值：

( LV2，RANK：10 )

在线值：

发帖

1

回帖

14

粉丝

0

关注

私信

lishuo果: 4 楼

这是C#的程序，我反编译后，也有问题

00405A72  push       2
00405A74  push       0
00405A76  lea       eax,[ebp-11Dh]
00405A7C  push       eax
00405A7D  call       00401300
00405A82  mov       esi,eax
00405A84  test       esi,esi
00405A86  jne       00405AA8
00405A88  mov       byte ptr [ebp-0Bh],0
00405A8C  lea       eax,[ebp-0Dh]
00405A8F  push       eax
00405A90  push       ebx
00405A91  call       00401310
00405A96  push       2
00405A98  push       0
00405A9A  lea       eax,[ebp-11Dh]
00405AA0  push       eax
00405AA1  call       00401300
00405AA6  mov       esi,eax
00405AA8  mov       eax,esi
00405AAA  pop       esi
00405AAB  pop       ebx
00405AAC  mov       esp,ebp
00405AAE  pop       ebp
00405AAF  ret
00405AB0  push       ebx
00405AB1  outs       dx,dword ptr [esi]
00405AB2  je       00005B2C
00405AB5  popad
00405AB6  jb       00405B1D
00405AB8  pop       esp
00405AB9  inc       edx
00405ABA  outs       dx,dword ptr [esi]
00405ABB  jb       00405B29
00405ABD  popad
00405ABE  outs       dx,byte ptr [esi]
00405ABF  pop       esp
00405AC1  dec       esp
00405AC2  outs       dx,dword ptr [esi]
00405AC3  arpl       word ptr [ecx+6Ch],sp
00405AC6  jae       00405AC9
00405AC9  add       byte ptr [eax],al
00405ACB  add       byte ptr [ebx+6Fh],dl
00405ACE  je       00005B48
00405AD1  popad
00405AD2  jb       00405B39
00405AD4  pop       esp
00405AD5  inc       edx
00405AD6  outs       dx,dword ptr [esi]
00405AD7  jb       00405B45
00405AD9  popad
00405ADA  outs       dx,byte ptr [esi]
00405ADB  pop       esp
00405ADD  inc       esp
00405ADE  ins       byte ptr es:[edi],dx
00405AE0  jo       00405B4A
00405AE2  imul       ebx,dword ptr [esp+ecx*2+6Fh],656C6163h
00405AEA  jae       00405AEC
00405AEC  add       byte ptr [eax],al
00405AEE  add       byte ptr [eax],al
00405AF0  call       00405B00
00405AF5  ret
00405AF6  mov       eax,eax
00405AF8  call       00405B20
00405AFD  ret
00405AFE  mov       eax,eax
00405B00  push       ebx
00405B01  mov       ebx,eax
00405B03  mov       eax,8
00405B08  call       00402724
00405B0D  mov       edx,dword ptr ds:[4FA020h]
00405B13  mov       dword ptr [eax],edx
00405B15  mov       dword ptr [eax+4],ebx
00405B18  mov       dword ptr ds:[004FA020h],eax
00405B1D  pop       ebx
00405B1E  ret
00405B1F  nop
00405B20  push       ebx
00405B21  push       esi
00405B22  mov       esi,dword ptr ds:[4FA020h]
00405B28  test       esi,esi
00405B2A  je       00405B4E
00405B2C  mov       edx,dword ptr [esi+4]
00405B2F  cmp       edx,eax
00405B31  jne       00405B4E
00405B33  mov       eax,dword ptr ds:[004FA020h]
00405B38  mov       eax,dword ptr [eax]
00405B3A  mov       dword ptr ds:[004FA020h],eax
00405B3F  mov       edx,8
00405B44  mov       eax,esi
00405B46  call       0040273C
00405B4B  pop       esi
00405B4C  pop       ebx
00405B4D  ret
00405B4E  mov       edx,esi
00405B50  test       edx,edx
00405B52  je       00405B7B
00405B54  mov       ecx,dword ptr [edx]
00405B56  test       ecx,ecx
00405B58  je       00405B75
00405B5A  mov       ebx,dword ptr [ecx+4]
00405B5D  cmp       ebx,eax
00405B5F  jne       00405B75
00405B61  mov       esi,ecx
00405B63  mov       eax,dword ptr [ecx]
00405B65  mov       dword ptr [edx],eax
00405B67  mov       edx,8
00405B6C  mov       eax,esi
00405B6E  call       0040273C
00405B73  jmp       00405B7B
00405B75  mov       edx,dword ptr [edx]
00405B77  test       edx,edx
00405B79  jne       00405B54
00405B7B  pop       esi
00405B7C  pop       ebx
00405B7D  ret
00405B7E  mov       eax,eax
00405B80  push       ebp
00405B81  mov       ebp,esp
00405B83  add       esp,0FFFFFFF8h
00405B86  push       ebx
00405B87  push       esi
00405B88  push       edi
00405B89  mov       dword ptr [ebp-4],eax
00405B8C  mov       eax,dword ptr ds:[004FA020h]
00405B91  mov       dword ptr [ebp-8],eax
00405B94  cmp       dword ptr [ebp-8],0
00405B98  je       00405BD3
00405B9A  xor       eax,eax
00405B9C  push       ebp
00405B9D  push       405BBBh
00405BA2  push       dword ptr fs:[eax]
00405BA5  mov       dword ptr fs:[eax],esp
00405BA8  mov       ebx,dword ptr [ebp-8]
00405BAB  mov       eax,dword ptr [ebp-4]
00405BAE  call       dword ptr [ebx+4]
00405BB1  xor       eax,eax
00405BB3  pop       edx
00405BB4  pop       ecx
00405BB5  pop       ecx
00405BB6  mov       dword ptr fs:[eax],edx
00405BB9  jmp       00405BC5
00405BBB  jmp       004034B8
00405BC0  call       00403814
00405BC5  mov       eax,dword ptr [ebp-8]
00405BC8  mov       eax,dword ptr [eax]
00405BCA  mov       dword ptr [ebp-8],eax
00405BCD  cmp       dword ptr [ebp-8],0
00405BD1  jne       00405B9A
00405BD3  pop       edi
00405BD4  pop       esi
00405BD5  pop       ebx
00405BD6  pop       ecx
00405BD7  pop       ecx
00405BD8  pop       ebp
00405BD9  ret
00405BDA  mov       eax,eax
00405BDC  mov       edx,dword ptr ds:[4FA01Ch]
00405BE2  mov       dword ptr [eax],edx
00405BE4  mov       dword ptr ds:[004FA01Ch],eax
00405BE9  ret
00405BEA  mov       eax,eax
00405BEC  push       ebp
00405BED  mov       ebp,esp
00405BEF  push       ecx
00405BF0  mov       dword ptr [ebp-4],eax
00405BF3  xor       edx,edx
00405BF5  push       ebp
00405BF6  push       405C50h
00405BFB  push       dword ptr fs:[edx]
00405BFE  mov       dword ptr fs:[edx],esp
00405C01  mov       eax,dword ptr [ebp-4]
00405C04  mov       eax,dword ptr [eax+4]
00405C07  call       00405B80
00405C0C  xor       eax,eax
00405C0E  pop       edx
00405C0F  pop       ecx
00405C10  pop       ecx
00405C11  mov       dword ptr fs:[eax],edx
00405C14  push       405C57h
00405C19  mov       eax,dword ptr [ebp-4]
00405C1C  cmp       eax,dword ptr ds:[4FA01Ch]
00405C22  jne       00405C30
00405C24  mov       eax,dword ptr [ebp-4]
00405C27  mov       eax,dword ptr [eax]
00405C29  mov       dword ptr ds:[004FA01Ch],eax
00405C2E  jmp       00405C4F
00405C30  mov       eax,dword ptr ds:[004FA01Ch]
00405C35  test       eax,eax
00405C37  je       00405C4F
00405C39  mov       edx,dword ptr [eax]
00405C3B  cmp       edx,dword ptr [ebp-4]
00405C3E  jne       00405C49
00405C40  mov       edx,dword ptr [ebp-4]
00405C43  mov       edx,dword ptr [edx]
00405C45  mov       dword ptr [eax],edx
00405C47  jmp       00405C4F
00405C49  mov       eax,dword ptr [eax]
00405C4B  test       eax,eax
00405C4D  jne       00405C39
00405C4F  ret
00405C50  jmp       0040376C
00405C55  jmp       00405C19
00405C57  pop       ecx
00405C58  pop       ebp
00405C59  ret
00405C5A  mov       eax,eax
00405C5C  push       ebx
00405C5D  push       esi
00405C5E  add       esp,0FFFFFC00h
00405C64  mov       esi,edx
00405C66  mov       ebx,eax
00405C68  test       ebx,ebx
00405C6A  je       00405CA9
00405C6C  cmp       dword ptr [ebx+4],10000h
00405C73  jge       00405C9F
00405C75  push       400h
00405C7A  lea       eax,[esp+4]
00405C7E  push       eax
00405C7F  mov       eax,dword ptr [ebx+4]
00405C82  push       eax
00405C83  mov       eax,dword ptr [ebx]
00405C85  mov       eax,dword ptr [eax]
00405C87  call       00405714
00405C8C  push       eax
00405C8D  call       00401308
00405C92  mov       ecx,eax
00405C94  mov       edx,esp
00405C96  mov       eax,esi
00405C98  call       00403E5C
00405C9D  jmp       00405CA9
00405C9F  mov       eax,esi
00405CA1  mov       edx,dword ptr [ebx+4]
00405CA4  call       00403F2C
00405CA9  add       esp,400h
00405CAF  pop       esi
00405CB0  pop       ebx
00405CB1  ret
00405CB2  mov       eax,eax
00405CB4  mov       edx,dword ptr [eax]
00405CB6  test       edx,edx
00405CB8  je       00405CC8
00405CBA  mov       dword ptr [eax],0
00405CC0  push       eax
00405CC1  push       edx
00405CC2  mov       eax,dword ptr [edx]
00405CC4  call       dword ptr [eax+8]
00405CC7  pop       eax
00405CC8  ret
00405CC9  lea       eax,[eax]
00405CCC  mov       ecx,dword ptr [eax]
00405CCE  mov       dword ptr [eax],edx
00405CD0  test       edx,edx
00405CD2  je       00405CDC
00405CD4  push       ecx
00405CD5  push       edx
00405CD6  mov       eax,dword ptr [edx]
00405CD8  call       dword ptr [eax+4]
00405CDB  pop       ecx
00405CDC  test       ecx,ecx
00405CDE  je       00405CE6
00405CE0  push       ecx
00405CE1  mov       eax,dword ptr [ecx]
00405CE3  call       dword ptr [eax+8]
00405CE6  ret
00405CE7  nop
00405CE8  test       eax,eax
00405CEA  je       00405CF2
00405CEC  push       eax
00405CED  mov       eax,dword ptr [eax]
00405CEF  call       dword ptr [eax+4]
00405CF2  ret
00405CF3  nop
00405CF4  add       eax,4
00405CF7  push       eax
00405CF8  call       00401398
00405CFD  ret
00405CFE  mov       eax,eax
00405D00  cmp       dword ptr [eax+4],0
00405D04  je       00405D0D
00405D06  mov       al,2
00405D08  call       004027B0
00405D0D  ret
00405D0E  mov       eax,eax
00405D10  call       00402FA0
00405D15  mov       dword ptr [eax+4],1
00405D1C  ret
00405D1D  lea       eax,[eax]
00405D20  push       ebp
00405D21  mov       ebp,esp
00405D23  push       ebx
00405D24  mov       ebx,dword ptr [ebp+8]
00405D27  mov       ecx,dword ptr [ebp+10h]
00405D2A  mov       edx,dword ptr [ebp+0Ch]
00405D2D  mov       eax,ebx
00405D2F  call       004030A0
00405D34  test       al,al
00405D36  je       00405D3C
00405D38  xor       eax,eax
00405D3A  jmp       00405D41
00405D3C  mov       eax,80004002h
00405D41  pop       ebx
00405D42  pop       ebp
00405D43  ret       0Ch
00405D46  mov       eax,eax
00405D48  push       ebp
00405D49  mov       ebp,esp
00405D4B  mov       eax,dword ptr [ebp+8]
00405D4E  add       eax,4
00405D51  push       eax
00405D52  call       00401390
00405D57  pop       ebp
00405D58  ret       4
00405D5B  nop
00405D5C  push       ebp
00405D5D  mov       ebp,esp
00405D5F  push       ebx
00405D60  push       esi
00405D61  mov       ebx,dword ptr [ebp+8]
00405D64  lea       eax,[ebx+4]
00405D67  push       eax
00405D68  call       00401398
00405D6D  mov       esi,eax
00405D6F  test       esi,esi
00405D71  jne       00405D7C
00405D73  mov       dl,1
00405D75  mov       eax,ebx
00405D77  mov       ecx,dword ptr [eax]
00405D79  call       dword ptr [ecx-4]
00405D7C  mov       eax,esi
00405D7E  pop       esi
00405D7F  pop       ebx
00405D80  pop       ebp
00405D81  ret       4
00405D84  call       02980004
00405D89  mov       ch,8Bh
00405D8B  sal       byte ptr [ebx],0D2h
00405D8E  mov       dword ptr [eax+10h],edx
00405D91  mov       dword ptr [eax+0Ch],edx
00405D94  push       edx
00405D95  lea       edx,[eax+10h]
00405D98  push       edx
00405D99  push       dword ptr [eax+8]
00405D9C  push       dword ptr [eax+14h]
00405D9F  push       dword ptr [eax]
00405DA1  call       00401250
00405DA6  test       eax,eax
00405DA8  je       00405DAD
00405DAA  xor       eax,eax
00405DAC  ret
00405DAD  call       004012C8
00405DB2  cmp       eax,6Dh
00405DB5  je       00405DAA
00405DB7  ret
00405DB8  xor       eax,eax
00405DBA  ret
00405DBB  push       ecx
00405DBC  mov       edx,dword ptr [eax+0Ch]
00405DBF  test       edx,edx
00405DC1  jle       00405DDD
00405DC3  xor       ecx,ecx
00405DC5  mov       dword ptr [eax+0Ch],ecx
00405DC8  push       ecx
00405DC9  lea       ecx,[esp+4]
00405DCD  push       ecx
00405DCE  push       edx
00405DCF  push       dword ptr [eax+14h]
00405DD2  push       dword ptr [eax]
00405DD4  call       00401278
00405DD9  test       eax,eax
00405DDB  je       00405DE1
00405DDD  xor       eax,eax
00405DDF  pop       ecx
00405DE0  ret
00405DE1  call       004012C8
00405DE6  jmp       00405DDF
00405DE8  push       dword ptr [eax]
00405DEA  mov       dword ptr [eax+4],0D7B0h
00405DF1  call       00401218
00405DF6  dec       eax
00405DF7  jne       00405DFA
00405DF9  ret
00405DFA  call       004012C8
00405DFF  ret
00405E00  push       esi
00405E01  mov       esi,eax
00405E03  xor       eax,eax
00405E05  mov       dword ptr [esi+0Ch],eax
00405E08  mov       dword ptr [esi+10h],eax
00405E0B  mov       eax,dword ptr [esi+4]
00405E0E  sub       eax,0D7B1h
00405E13  je       00405E20
00405E15  dec       eax
00405E16  je       00405E38
00405E18  dec       eax
00405E19  je       00405E49
00405E1B  jmp       00405F69
00405E20  mov       eax,80000000h
00405E25  mov       edx,1
00405E2A  mov       ecx,3
00405E2F  mov       dword ptr [esi+1Ch],405D8Ch
00405E36  jmp       00405E5F
00405E38  mov       eax,40000000h
00405E3D  mov       edx,1
00405E42  mov       ecx,2
00405E47  jmp       00405E58
00405E49  mov       eax,0C0000000h
00405E4E  mov       edx,1
00405E53  mov       ecx,3
00405E58  mov       dword ptr [esi+1Ch],405DBBh
00405E5F  mov       dword ptr [esi+24h],405DE8h
00405E66  mov       dword ptr [esi+20h],405DB8h
00405E6D  cmp       byte ptr [esi+48h],0
00405E71  je       00405F25
00405E77  push       0
00405E79  push       80h
00405E7E  push       ecx
00405E7F  push       0
00405E81  push       edx
00405E82  push       eax
00405E83  lea       eax,[esi+48h]
00405E86  push       eax

2010-7-27 14:49

0