-
-
没有狗狗能行吗?
-
发表于: 2005-9-14 21:01 3696
-
我的汇编水平了了,那位高手看看下面的代码没有原狗狗能否解决?
00D17532 50 push eax
00D17533 51 push ecx
00D17534 6A 01 push 1
00D17536 E8 05050000 call new.00D17A40-------->读狗狗
00D1753B 83C4 24 add esp,24
00D1753E 66:85C0 test ax,ax
00D17541 0F85 91020000 jnz new.00D177D8 -------->不能跳,否则到错误提示!
00D17547 BB 01000000 mov ebx,1
00D1754C EB 3B jmp short new.00D17589
00D1754E 8D5424 3C lea edx,dword ptr ss:[esp+3C]
00D17552 8D4424 20 lea eax,dword ptr ss:[esp+20]
00D17556 52 push edx
00D17557 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D1755B 50 push eax
00D1755C 8D5424 20 lea edx,dword ptr ss:[esp+20]
00D17560 51 push ecx
00D17561 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D17565 52 push edx
00D17566 8D4C24 38 lea ecx,dword ptr ss:[esp+38]
00D1756A 50 push eax
00D1756B 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D1756F 51 push ecx
00D17570 8D4424 2A lea eax,dword ptr ss:[esp+2A]
00D17574 52 push edx
00D17575 50 push eax
00D17576 6A 02 push 2
00D17578 E8 C3040000 call new.00D17A40
00D1757D 83C4 24 add esp,24
00D17580 66:85C0 test ax,ax
00D17583 0F85 4F020000 jnz new.00D177D8-------->不能跳,否则到错误提示!
00D17589 8B46 0A mov eax,dword ptr ds:[esi+A]
00D1758C 8B4C24 14 mov ecx,dword ptr ss:[esp+14]
00D17590 3BC5 cmp eax,ebp
00D17592 74 14 je short new.00D175A8
00D17594 3BC8 cmp ecx,eax
00D17596 0F85 9F000000 jnz new.00D1763B
00D1759C 894C24 46 mov dword ptr ss:[esp+46],ecx
00D175A0 C74424 2C 0E000000 mov dword ptr ss:[esp+2C],0E
00D175A8 894C24 30 mov dword ptr ss:[esp+30],ecx
00D175AC 8D4C24 3C lea ecx,dword ptr ss:[esp+3C]
00D175B0 8D5424 20 lea edx,dword ptr ss:[esp+20]
00D175B4 51 push ecx
00D175B5 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D175B9 52 push edx
00D175BA 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
00D175BE 50 push eax
00D175BF 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D175C3 51 push ecx
00D175C4 8D4424 38 lea eax,dword ptr ss:[esp+38]
00D175C8 52 push edx
00D175C9 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D175CD 50 push eax
00D175CE 8D5424 2A lea edx,dword ptr ss:[esp+2A]
00D175D2 51 push ecx
00D175D3 52 push edx
00D175D4 6A 03 push 3
00D175D6 E8 65040000 call new.00D17A40
00D175DB 83C4 24 add esp,24
00D175DE 66:85C0 test ax,ax
00D175E1 0F85 F1010000 jnz new.00D177D8-------->不能跳,否则到错误提示!
00D175E7 66:8B46 08 mov ax,word ptr ds:[esi+8]
00D175EB 66:3D FFFF cmp ax,0FFFF
00D175EF 74 6F je short new.00D17660
00D175F1 83E0 0F and eax,0F
00D175F4 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
00D175F8 894424 1C mov dword ptr ss:[esp+1C],eax
00D175FC 8D4424 3C lea eax,dword ptr ss:[esp+3C]
00D17600 50 push eax
00D17601 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D17605 51 push ecx
00D17606 8D4424 20 lea eax,dword ptr ss:[esp+20]
00D1760A 52 push edx
00D1760B 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D1760F 50 push eax
00D17610 8D5424 38 lea edx,dword ptr ss:[esp+38]
00D17614 51 push ecx
00D17615 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D17619 52 push edx
00D1761A 8D4C24 2A lea ecx,dword ptr ss:[esp+2A]
00D1761E 50 push eax
00D1761F 51 push ecx
00D17620 6A 0C push 0C
00D17622 E8 19040000 call new.00D17A40
00D17627 83C4 24 add esp,24
00D1762A 66:85C0 test ax,ax
00D1762D 0F85 73010000 jnz new.00D177A6-------->不能跳,否则到错误提示!
00D17633 66:837C24 18 01 cmp word ptr ss:[esp+18],1
00D17639 74 0B je short new.00D17646
00D1763B 66:83FB 02 cmp bx,2
00D1763F 74 1F je short new.00D17660
00D17641 ^ E9 A9FEFFFF jmp new.00D174EF
00D17646 8B4424 2C mov eax,dword ptr ss:[esp+2C]
00D1764A 66:8B56 08 mov dx,word ptr ds:[esi+8]
00D1764E 83F8 08 cmp eax,8
00D17651 66:895424 44 mov word ptr ss:[esp+44],dx
00D17656 75 08 jnz short new.00D17660
00D17658 C74424 2C 0A000000 mov dword ptr ss:[esp+2C],0A
00D17660 66:8B4424 12 mov ax,word ptr ss:[esp+12]
00D17665 8B4C24 30 mov ecx,dword ptr ss:[esp+30]
00D17669 66:A3 5041D100 mov word ptr ds:[D14150],ax
00D1766F 894E 0A mov dword ptr ds:[esi+A],ecx
00D17672 8B5F 2C mov ebx,dword ptr ds:[edi+2C]
00D17675 33C0 xor eax,eax
00D17677 03DF add ebx,edi
00D17679 896C24 30 mov dword ptr ss:[esp+30],ebp
00D1767D 66:8B03 mov ax,word ptr ds:[ebx]
00D17680 83C3 02 add ebx,2
00D17683 3BC5 cmp eax,ebp
00D17685 894424 38 mov dword ptr ss:[esp+38],eax
00D17689 0F8E BA000000 jle new.00D17749
00D1768F EB 04 jmp short new.00D17695
00D17691 8B7C24 50 mov edi,dword ptr ss:[esp+50]
00D17695 8B03 mov eax,dword ptr ds:[ebx]
00D17697 8B6B 04 mov ebp,dword ptr ds:[ebx+4]
00D1769A 83C3 04 add ebx,4
00D1769D 894424 34 mov dword ptr ss:[esp+34],eax
00D176A1 894424 28 mov dword ptr ss:[esp+28],eax
00D176A5 8D5424 3C lea edx,dword ptr ss:[esp+3C]
00D176A9 8D4424 20 lea eax,dword ptr ss:[esp+20]
00D176AD 52 push edx
00D176AE 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D176B2 50 push eax
00D176B3 8D5424 20 lea edx,dword ptr ss:[esp+20]
00D176B7 51 push ecx
00D176B8 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D176BC 52 push edx
00D176BD 8D4C24 38 lea ecx,dword ptr ss:[esp+38]
00D176C1 50 push eax
00D176C2 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D176C6 51 push ecx
00D176C7 8D4424 2A lea eax,dword ptr ss:[esp+2A]
00D176CB 52 push edx
00D176CC 50 push eax
00D176CD 6A 08 push 8
00D176CF 83C3 04 add ebx,4
00D176D2 E8 69030000 call new.00D17A40
00D176D7 83C4 24 add esp,24
00D176DA 66:85C0 test ax,ax
00D176DD 0F85 C1000000 jnz new.00D177A4
00D176E3 66:8B4C24 1C mov cx,word ptr ss:[esp+1C]
00D176E8 8B7F 04 mov edi,dword ptr ds:[edi+4]
00D176EB 66:8B5424 18 mov dx,word ptr ss:[esp+18]
00D176F0 66:8B4424 24 mov ax,word ptr ss:[esp+24]
00D176F5 66:894C24 3C mov word ptr ss:[esp+3C],cx
00D176FA 66:8B4C24 20 mov cx,word ptr ss:[esp+20]
00D176FF 66:894C24 42 mov word ptr ss:[esp+42],cx
00D17704 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
00D17708 03F9 add edi,ecx
00D1770A 33C9 xor ecx,ecx
00D1770C 85ED test ebp,ebp
00D1770E 66:895424 3E mov word ptr ss:[esp+3E],dx
00D17713 66:894424 40 mov word ptr ss:[esp+40],ax
00D17718 7E 18 jle short new.00D17732
00D1771A 8BC1 mov eax,ecx
00D1771C 99 cdq
00D1771D F77C24 2C idiv dword ptr ss:[esp+2C]
00D17721 8A0439 mov al,byte ptr ds:[ecx+edi]
00D17724 8A5414 3C mov dl,byte ptr ss:[esp+edx+3C]
00D17728 32C2 xor al,dl
00D1772A 880439 mov byte ptr ds:[ecx+edi],al
00D1772D 41 inc ecx
00D1772E 3BCD cmp ecx,ebp
00D17730 ^ 7C E8 jl short new.00D1771A
00D17732 8B4424 30 mov eax,dword ptr ss:[esp+30]
00D17736 8B4C24 38 mov ecx,dword ptr ss:[esp+38]
00D1773A 40 inc eax
00D1773B 3BC1 cmp eax,ecx
00D1773D 894424 30 mov dword ptr ss:[esp+30],eax
00D17741 ^ 0F8C 4AFFFFFF jl new.00D17691
00D17747 33ED xor ebp,ebp
00D17749 8D4424 3C lea eax,dword ptr ss:[esp+3C]
00D1774D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
00D17751 50 push eax
00D17752 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D17756 51 push ecx
00D17757 8D4424 20 lea eax,dword ptr ss:[esp+20]
00D1775B 52 push edx
00D1775C 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D17760 50 push eax
00D17761 8D5424 38 lea edx,dword ptr ss:[esp+38]
00D17765 51 push ecx
00D17766 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D1776A 52 push edx
00D1776B 8D4C24 2A lea ecx,dword ptr ss:[esp+2A]
00D1776F 50 push eax
00D17770 51 push ecx
00D17771 6A 04 push 4
00D17773 E8 C8020000 call new.00D17A40
00D17778 8B06 mov eax,dword ptr ds:[esi]
00D1777A 83C4 24 add esp,24
00D1777D 3BC5 cmp eax,ebp
00D1777F 74 19 je short new.00D1779A
00D17781 68 F4BCD100 push new.00D1BCF4
00D17786 55 push ebp
00D17787 56 push esi
00D17788 68 7073D100 push new.00D17370
00D1778D 55 push ebp
00D1778E 55 push ebp
00D1778F FF15 3C40D100 call dword ptr ds:[D1403C] ; kernel32.CreateThread
00D17795 A3 F0BCD100 mov dword ptr ds:[D1BCF0],eax
00D1779A 5F pop edi
00D1779B 5E pop esi
00D1779C 5D pop ebp
00D1779D 5B pop ebx
00D1779E 83C4 3C add esp,3C
00D177A1 C2 0400 retn 4
00D177A4 33ED xor ebp,ebp
00D177A6 8D4424 3C lea eax,dword ptr ss:[esp+3C]
00D177AA 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
00D177AE 50 push eax
00D177AF 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D177B3 51 push ecx
00D177B4 8D4424 20 lea eax,dword ptr ss:[esp+20]
00D177B8 52 push edx
00D177B9 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D177BD 50 push eax
00D177BE 8D5424 38 lea edx,dword ptr ss:[esp+38]
00D177C2 51 push ecx
00D177C3 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D177C7 52 push edx
00D177C8 8D4C24 2A lea ecx,dword ptr ss:[esp+2A]
00D177CC 50 push eax
00D177CD 51 push ecx
00D177CE 6A 04 push 4
00D177D0 E8 6B020000 call new.00D17A40
00D177D5 83C4 24 add esp,24
00D177D8 8D56 0E lea edx,dword ptr ds:[esi+E]
00D177DB 55 push ebp
00D177DC 83C6 5E add esi,5E
00D177DF 52 push edx
00D177E0 56 push esi
00D177E1 55 push ebp
00D177E2 FF15 1441D100 call dword ptr ds:[D14114] ; USER32.MessageBoxA-->错误提示!
00D177E8 55 push ebp
00D177E9 FF15 A040D100 call dword ptr ds:[D140A0] ; kernel32.ExitProcess
00D177EF 5F pop edi
00D177F0 5E pop esi
00D177F1 5D pop ebp
00D177F2 5B pop ebx
00D177F3 83C4 3C add esp,3C
00D177F6 C2 0400 retn 4
00D17532 50 push eax
00D17533 51 push ecx
00D17534 6A 01 push 1
00D17536 E8 05050000 call new.00D17A40-------->读狗狗
00D1753B 83C4 24 add esp,24
00D1753E 66:85C0 test ax,ax
00D17541 0F85 91020000 jnz new.00D177D8 -------->不能跳,否则到错误提示!
00D17547 BB 01000000 mov ebx,1
00D1754C EB 3B jmp short new.00D17589
00D1754E 8D5424 3C lea edx,dword ptr ss:[esp+3C]
00D17552 8D4424 20 lea eax,dword ptr ss:[esp+20]
00D17556 52 push edx
00D17557 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D1755B 50 push eax
00D1755C 8D5424 20 lea edx,dword ptr ss:[esp+20]
00D17560 51 push ecx
00D17561 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D17565 52 push edx
00D17566 8D4C24 38 lea ecx,dword ptr ss:[esp+38]
00D1756A 50 push eax
00D1756B 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D1756F 51 push ecx
00D17570 8D4424 2A lea eax,dword ptr ss:[esp+2A]
00D17574 52 push edx
00D17575 50 push eax
00D17576 6A 02 push 2
00D17578 E8 C3040000 call new.00D17A40
00D1757D 83C4 24 add esp,24
00D17580 66:85C0 test ax,ax
00D17583 0F85 4F020000 jnz new.00D177D8-------->不能跳,否则到错误提示!
00D17589 8B46 0A mov eax,dword ptr ds:[esi+A]
00D1758C 8B4C24 14 mov ecx,dword ptr ss:[esp+14]
00D17590 3BC5 cmp eax,ebp
00D17592 74 14 je short new.00D175A8
00D17594 3BC8 cmp ecx,eax
00D17596 0F85 9F000000 jnz new.00D1763B
00D1759C 894C24 46 mov dword ptr ss:[esp+46],ecx
00D175A0 C74424 2C 0E000000 mov dword ptr ss:[esp+2C],0E
00D175A8 894C24 30 mov dword ptr ss:[esp+30],ecx
00D175AC 8D4C24 3C lea ecx,dword ptr ss:[esp+3C]
00D175B0 8D5424 20 lea edx,dword ptr ss:[esp+20]
00D175B4 51 push ecx
00D175B5 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D175B9 52 push edx
00D175BA 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
00D175BE 50 push eax
00D175BF 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D175C3 51 push ecx
00D175C4 8D4424 38 lea eax,dword ptr ss:[esp+38]
00D175C8 52 push edx
00D175C9 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D175CD 50 push eax
00D175CE 8D5424 2A lea edx,dword ptr ss:[esp+2A]
00D175D2 51 push ecx
00D175D3 52 push edx
00D175D4 6A 03 push 3
00D175D6 E8 65040000 call new.00D17A40
00D175DB 83C4 24 add esp,24
00D175DE 66:85C0 test ax,ax
00D175E1 0F85 F1010000 jnz new.00D177D8-------->不能跳,否则到错误提示!
00D175E7 66:8B46 08 mov ax,word ptr ds:[esi+8]
00D175EB 66:3D FFFF cmp ax,0FFFF
00D175EF 74 6F je short new.00D17660
00D175F1 83E0 0F and eax,0F
00D175F4 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
00D175F8 894424 1C mov dword ptr ss:[esp+1C],eax
00D175FC 8D4424 3C lea eax,dword ptr ss:[esp+3C]
00D17600 50 push eax
00D17601 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D17605 51 push ecx
00D17606 8D4424 20 lea eax,dword ptr ss:[esp+20]
00D1760A 52 push edx
00D1760B 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D1760F 50 push eax
00D17610 8D5424 38 lea edx,dword ptr ss:[esp+38]
00D17614 51 push ecx
00D17615 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D17619 52 push edx
00D1761A 8D4C24 2A lea ecx,dword ptr ss:[esp+2A]
00D1761E 50 push eax
00D1761F 51 push ecx
00D17620 6A 0C push 0C
00D17622 E8 19040000 call new.00D17A40
00D17627 83C4 24 add esp,24
00D1762A 66:85C0 test ax,ax
00D1762D 0F85 73010000 jnz new.00D177A6-------->不能跳,否则到错误提示!
00D17633 66:837C24 18 01 cmp word ptr ss:[esp+18],1
00D17639 74 0B je short new.00D17646
00D1763B 66:83FB 02 cmp bx,2
00D1763F 74 1F je short new.00D17660
00D17641 ^ E9 A9FEFFFF jmp new.00D174EF
00D17646 8B4424 2C mov eax,dword ptr ss:[esp+2C]
00D1764A 66:8B56 08 mov dx,word ptr ds:[esi+8]
00D1764E 83F8 08 cmp eax,8
00D17651 66:895424 44 mov word ptr ss:[esp+44],dx
00D17656 75 08 jnz short new.00D17660
00D17658 C74424 2C 0A000000 mov dword ptr ss:[esp+2C],0A
00D17660 66:8B4424 12 mov ax,word ptr ss:[esp+12]
00D17665 8B4C24 30 mov ecx,dword ptr ss:[esp+30]
00D17669 66:A3 5041D100 mov word ptr ds:[D14150],ax
00D1766F 894E 0A mov dword ptr ds:[esi+A],ecx
00D17672 8B5F 2C mov ebx,dword ptr ds:[edi+2C]
00D17675 33C0 xor eax,eax
00D17677 03DF add ebx,edi
00D17679 896C24 30 mov dword ptr ss:[esp+30],ebp
00D1767D 66:8B03 mov ax,word ptr ds:[ebx]
00D17680 83C3 02 add ebx,2
00D17683 3BC5 cmp eax,ebp
00D17685 894424 38 mov dword ptr ss:[esp+38],eax
00D17689 0F8E BA000000 jle new.00D17749
00D1768F EB 04 jmp short new.00D17695
00D17691 8B7C24 50 mov edi,dword ptr ss:[esp+50]
00D17695 8B03 mov eax,dword ptr ds:[ebx]
00D17697 8B6B 04 mov ebp,dword ptr ds:[ebx+4]
00D1769A 83C3 04 add ebx,4
00D1769D 894424 34 mov dword ptr ss:[esp+34],eax
00D176A1 894424 28 mov dword ptr ss:[esp+28],eax
00D176A5 8D5424 3C lea edx,dword ptr ss:[esp+3C]
00D176A9 8D4424 20 lea eax,dword ptr ss:[esp+20]
00D176AD 52 push edx
00D176AE 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D176B2 50 push eax
00D176B3 8D5424 20 lea edx,dword ptr ss:[esp+20]
00D176B7 51 push ecx
00D176B8 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D176BC 52 push edx
00D176BD 8D4C24 38 lea ecx,dword ptr ss:[esp+38]
00D176C1 50 push eax
00D176C2 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D176C6 51 push ecx
00D176C7 8D4424 2A lea eax,dword ptr ss:[esp+2A]
00D176CB 52 push edx
00D176CC 50 push eax
00D176CD 6A 08 push 8
00D176CF 83C3 04 add ebx,4
00D176D2 E8 69030000 call new.00D17A40
00D176D7 83C4 24 add esp,24
00D176DA 66:85C0 test ax,ax
00D176DD 0F85 C1000000 jnz new.00D177A4
00D176E3 66:8B4C24 1C mov cx,word ptr ss:[esp+1C]
00D176E8 8B7F 04 mov edi,dword ptr ds:[edi+4]
00D176EB 66:8B5424 18 mov dx,word ptr ss:[esp+18]
00D176F0 66:8B4424 24 mov ax,word ptr ss:[esp+24]
00D176F5 66:894C24 3C mov word ptr ss:[esp+3C],cx
00D176FA 66:8B4C24 20 mov cx,word ptr ss:[esp+20]
00D176FF 66:894C24 42 mov word ptr ss:[esp+42],cx
00D17704 8B4C24 34 mov ecx,dword ptr ss:[esp+34]
00D17708 03F9 add edi,ecx
00D1770A 33C9 xor ecx,ecx
00D1770C 85ED test ebp,ebp
00D1770E 66:895424 3E mov word ptr ss:[esp+3E],dx
00D17713 66:894424 40 mov word ptr ss:[esp+40],ax
00D17718 7E 18 jle short new.00D17732
00D1771A 8BC1 mov eax,ecx
00D1771C 99 cdq
00D1771D F77C24 2C idiv dword ptr ss:[esp+2C]
00D17721 8A0439 mov al,byte ptr ds:[ecx+edi]
00D17724 8A5414 3C mov dl,byte ptr ss:[esp+edx+3C]
00D17728 32C2 xor al,dl
00D1772A 880439 mov byte ptr ds:[ecx+edi],al
00D1772D 41 inc ecx
00D1772E 3BCD cmp ecx,ebp
00D17730 ^ 7C E8 jl short new.00D1771A
00D17732 8B4424 30 mov eax,dword ptr ss:[esp+30]
00D17736 8B4C24 38 mov ecx,dword ptr ss:[esp+38]
00D1773A 40 inc eax
00D1773B 3BC1 cmp eax,ecx
00D1773D 894424 30 mov dword ptr ss:[esp+30],eax
00D17741 ^ 0F8C 4AFFFFFF jl new.00D17691
00D17747 33ED xor ebp,ebp
00D17749 8D4424 3C lea eax,dword ptr ss:[esp+3C]
00D1774D 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
00D17751 50 push eax
00D17752 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D17756 51 push ecx
00D17757 8D4424 20 lea eax,dword ptr ss:[esp+20]
00D1775B 52 push edx
00D1775C 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D17760 50 push eax
00D17761 8D5424 38 lea edx,dword ptr ss:[esp+38]
00D17765 51 push ecx
00D17766 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D1776A 52 push edx
00D1776B 8D4C24 2A lea ecx,dword ptr ss:[esp+2A]
00D1776F 50 push eax
00D17770 51 push ecx
00D17771 6A 04 push 4
00D17773 E8 C8020000 call new.00D17A40
00D17778 8B06 mov eax,dword ptr ds:[esi]
00D1777A 83C4 24 add esp,24
00D1777D 3BC5 cmp eax,ebp
00D1777F 74 19 je short new.00D1779A
00D17781 68 F4BCD100 push new.00D1BCF4
00D17786 55 push ebp
00D17787 56 push esi
00D17788 68 7073D100 push new.00D17370
00D1778D 55 push ebp
00D1778E 55 push ebp
00D1778F FF15 3C40D100 call dword ptr ds:[D1403C] ; kernel32.CreateThread
00D17795 A3 F0BCD100 mov dword ptr ds:[D1BCF0],eax
00D1779A 5F pop edi
00D1779B 5E pop esi
00D1779C 5D pop ebp
00D1779D 5B pop ebx
00D1779E 83C4 3C add esp,3C
00D177A1 C2 0400 retn 4
00D177A4 33ED xor ebp,ebp
00D177A6 8D4424 3C lea eax,dword ptr ss:[esp+3C]
00D177AA 8D4C24 20 lea ecx,dword ptr ss:[esp+20]
00D177AE 50 push eax
00D177AF 8D5424 28 lea edx,dword ptr ss:[esp+28]
00D177B3 51 push ecx
00D177B4 8D4424 20 lea eax,dword ptr ss:[esp+20]
00D177B8 52 push edx
00D177B9 8D4C24 28 lea ecx,dword ptr ss:[esp+28]
00D177BD 50 push eax
00D177BE 8D5424 38 lea edx,dword ptr ss:[esp+38]
00D177C2 51 push ecx
00D177C3 8D4424 28 lea eax,dword ptr ss:[esp+28]
00D177C7 52 push edx
00D177C8 8D4C24 2A lea ecx,dword ptr ss:[esp+2A]
00D177CC 50 push eax
00D177CD 51 push ecx
00D177CE 6A 04 push 4
00D177D0 E8 6B020000 call new.00D17A40
00D177D5 83C4 24 add esp,24
00D177D8 8D56 0E lea edx,dword ptr ds:[esi+E]
00D177DB 55 push ebp
00D177DC 83C6 5E add esi,5E
00D177DF 52 push edx
00D177E0 56 push esi
00D177E1 55 push ebp
00D177E2 FF15 1441D100 call dword ptr ds:[D14114] ; USER32.MessageBoxA-->错误提示!
00D177E8 55 push ebp
00D177E9 FF15 A040D100 call dword ptr ds:[D140A0] ; kernel32.ExitProcess
00D177EF 5F pop edi
00D177F0 5E pop esi
00D177F1 5D pop ebp
00D177F2 5B pop ebx
00D177F3 83C4 3C add esp,3C
00D177F6 C2 0400 retn 4
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)
赞赏
他的文章
- 求助:关于WinLicense的注册设置 5567
- .net下的主要跳转指令,请高手... 4283
- 请教,使用netsowell 脱好的Epe 06 为什么不能干活? 3850
- 没有狗狗能行吗? 3697
- 关于installshiled疑问。 4225
看原图
赞赏
雪币:
留言: