【文章标题】: 第一次浅析MD5算法
【文章作者】: vxin
【软件名称】: Project1.exe
【保护方式】: 序列号
【使用工具】: OD
【作者声明】: 只是感兴趣，没有其他目的。失误之处敬请诸位大侠赐教!
--------------------------------------------------------------------------------
【详细过程】
0045184C 50 push eax
0045184D 8D55 E0 lea edx,dword ptr ss:[ebp-20] ; ss:[ebp-20]送至edx=77F5C24
00451850 8B83 08030000 mov eax,dword ptr ds:[ebx+308] ; ds:[ebx+308]移eax=0012F61C
00451856 E8 81E3FDFF call Project1.0042FBDC
0045185B 8B55 E0 mov edx,dword ptr ss:[ebp-20] ; ss:[ebp-20]入edx=77F5C24
0045185E 58 pop eax
0045185F E8 7428FBFF call Project1.004040D8 ; 机器码＋用户名
00451864 8B45 E4 mov eax,dword ptr ss:[ebp-1C] ; 6D681618AFE9FBBFvxin
00451867 8D55 E8 lea edx,dword ptr ss:[ebp-18] ; ss:[ebp-18]入edx=vxin
0045186A E8 6DFBFFFF call Project1.004513DC ; 关键call F7
0045186F 8D45 E8 lea eax,dword ptr ss:[ebp-18]
00451872 8D55 F8 lea edx,dword ptr ss:[ebp-8] ; edx=0098270C=6D681618AFE9FBBFvxin
00451875 E8 D6FBFFFF call Project1.00451450 ; 查表转成小写 F7进
0045187A 8B55 F8 mov edx,dword ptr ss:[ebp-8] ; edx= 4514b026798d718ab522687593032d79
0045187D 58 pop eax ; 压栈
0045187E E8 9929FBFF call Project1.0040421C ; 比较试注册码
00451883 75 1A jnz short Project1.0045189F ; 不等则跳，跳则over
00451885 6A 40 push 40
00451887 B9 F0184500 mov ecx,Project1.004518F0 ; 提示
0045188C BA F8184500 mov edx,Project1.004518F8 ; 注册成功，感谢支持本软件！
00451891 A1 54304500 mov eax,dword ptr ds:[453054]
00451896 8B00 mov eax,dword ptr ds:[eax]
00451898 E8 97DBFFFF call Project1.0044F434
0045189D EB 18 jmp short Project1.004518B7
0045189F 6A 10 push 10
004518A1 B9 14194500 mov ecx,Project1.00451914 ; 错误
004518A6 BA 1C194500 mov edx,Project1.0045191C ; 注册失败，请与软件开发商联系！
004518AB A1 54304500 mov eax,dword ptr ds:[453054]
004518B0 8B00 mov eax,dword ptr ds:[eax]
004518B2 E8 7DDBFFFF call Project1.0044F434
=====================================================================
0045186A 处 F7进入 (关键Call )
004513DC /$ 55 PUSH EBP
004513DD |. 8BEC MOV EBP,ESP
004513DF |. 83C4 A4 ADD ESP,-5C
004513E2 |. 53 PUSH EBX
004513E3 |. 8BDA MOV EBX,EDX
004513E5 |. 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
004513E8 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
004513EB |. E8 D02EFBFF CALL Project1.004042C0
004513F0 |. 33C0 XOR EAX,EAX
004513F2 |. 55 PUSH EBP
004513F3 |. 68 42144500 PUSH Project1.00451442
004513F8 |. 64:FF30 PUSH DWORD PTR FS:[EAX]
004513FB |. 64:8920 MOV DWORD PTR FS:[EAX],ESP
004513FE |. 8D45 A4 LEA EAX,DWORD PTR SS:[EBP-5C]
00451401 |. E8 AEFEFFFF CALL Project1.004512B4 ; 初试化变量 F7
00451406 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4] ; [EBP-4]机器码+用户名
00451409 |. E8 C22CFBFF CALL Project1.004040D0
0045140E |. 50 PUSH EAX
0045140F |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
00451412 |. E8 B92EFBFF CALL Project1.004042D0
00451417 |. 8BD0 MOV EDX,EAX
00451419 |. 8D45 A4 LEA EAX,DWORD PTR SS:[EBP-5C]
0045141C |. 59 POP ECX
0045141D |. E8 C6FEFFFF CALL Project1.004512E8 ; MD5加密
00451422 |. 8BD3 MOV EDX,EBX
00451424 |. 8D45 A4 LEA EAX,DWORD PTR SS:[EBP-5C]
00451427 |. E8 3CFFFFFF CALL Project1.00451368 ;
0045142C |. 33C0 XOR EAX,EAX
0045142E |. 5A POP EDX
0045142F |. 59 POP ECX
00451430 |. 59 POP ECX
00451431 |. 64:8910 MOV DWORD PTR FS:[EAX],EDX
00451434 |. 68 49144500 PUSH Project1.00451449
00451439 |> 8D45 FC LEA EAX,DWORD PTR SS:[EBP-4]
0045143C |. E8 CF29FBFF CALL Project1.00403E10
00451441 \. C3 RETN
00451442 .^ E9 CD23FBFF JMP Project1.00403814
00451447 .^ EB F0 JMP SHORT Project1.00451439
00451449 . 5B POP EBX
0045144A . 8BE5 MOV ESP,EBP
0045144C . 5D POP EBP
=====================================================================
00451401 Call MD5初始化变量：
004512B4 C700 01234567 mov dword ptr ds:[eax],67452301 ; ----->A
004512BA C740 04 89ABCDEF mov dword ptr ds:[eax+4],EFCDAB89 ; ----->B
004512C1 C740 08 FEDCBA98 mov dword ptr ds:[eax+8],98BADCFE ; ----->C
004512C8 C740 0C 76543210 mov dword ptr ds:[eax+C],10325476 ; ----->D
004512CF 33D2 xor edx,edx
004512D1 8950 10 mov dword ptr ds:[eax+10],edx ; 堆栈空出空间
004512D4 33D2 xor edx,edx
004512D6 8950 14 mov dword ptr ds:[eax+14],edx ; 堆栈空出空间
004512D9 83C0 18 add eax,18
004512DC BA 40000000 mov edx,40
004512E1 E8 7E53FBFF call Project1.00406664
004512E6 C3 retn ; 返回
============================================================
0045141D 处进入 (MD5加密)
00450B84 /$ 53 PUSH EBX
00450B85 |. 56 PUSH ESI
00450B86 |. 57 PUSH EDI
00450B87 |. 55 PUSH EBP
00450B88 |. 83C4 A8 ADD ESP,-58
00450B8B |. 895424 04 MOV DWORD PTR SS:[ESP+4],EDX
00450B8F |. 890424 MOV DWORD PTR SS:[ESP],EAX
00450B92 |. 8D5C24 08 LEA EBX,DWORD PTR SS:[ESP+8]
00450B96 |. 8D7424 0C LEA ESI,DWORD PTR SS:[ESP+C]
00450B9A |. 8D7C24 10 LEA EDI,DWORD PTR SS:[ESP+10]
00450B9E |. 8D6C24 14 LEA EBP,DWORD PTR SS:[ESP+14]
00450BA2 |. 8D5424 18 LEA EDX,DWORD PTR SS:[ESP+18]
00450BA6 |. B9 40000000 MOV ECX,40
00450BAB |. 8B0424 MOV EAX,DWORD PTR SS:[ESP]
00450BAE |. E8 5DFFFFFF CALL Project1.00450B10
00450BB3 |. 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
00450BB7 |. 8B00 MOV EAX,DWORD PTR DS:[EAX]
00450BB9 |. 8903 MOV DWORD PTR DS:[EBX],EAX
00450BBB |. 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
00450BBF |. 8B40 04 MOV EAX,DWORD PTR DS:[EAX+4]
00450BC2 |. 8906 MOV DWORD PTR DS:[ESI],EAX
00450BC4 |. 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
00450BC8 |. 8B40 08 MOV EAX,DWORD PTR DS:[EAX+8]
00450BCB |. 8907 MOV DWORD PTR DS:[EDI],EAX
00450BCD |. 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
00450BD1 |. 8B40 0C MOV EAX,DWORD PTR DS:[EAX+C]
00450BD4 |. 8945 00 MOV DWORD PTR SS:[EBP],EAX
00450BD7 |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00450BDA |. 50 PUSH EAX ; /Arg4 = 10325476
00450BDB |. 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C] ; |
00450BDF |. 50 PUSH EAX ; |Arg3
00450BE0 |. 6A 07 PUSH 7 ; |Arg2 = 00000007
00450BE2 |. 68 78A46AD7 PUSH D76AA478 ; |Arg1 = D76AA478
00450BE7 |. 8BC3 MOV EAX,EBX ; |
00450BE9 |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00450BEB |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00450BED |. E8 4EFEFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450BF2 |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00450BF4 |. 50 PUSH EAX ; /Arg4
00450BF5 |. 8B4424 20 MOV EAX,DWORD PTR SS:[ESP+20] ; |
00450BF9 |. 50 PUSH EAX ; |Arg3
00450BFA |. 6A 0C PUSH 0C ; |Arg2 = 0000000C
00450BFC |. 68 56B7C7E8 PUSH E8C7B756 ; |Arg1 = E8C7B756
00450C01 |. 8BC5 MOV EAX,EBP ; |
00450C03 |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00450C05 |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00450C07 |. E8 34FEFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450C0C |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00450C0E |. 50 PUSH EAX ; /Arg4
00450C0F |. 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24] ; |
00450C13 |. 50 PUSH EAX ; |Arg3
00450C14 |. 6A 11 PUSH 11 ; |Arg2 = 00000011
00450C16 |. 68 DB702024 PUSH 242070DB ; |Arg1 = 242070DB
00450C1B |. 8BC7 MOV EAX,EDI ; |
00450C1D |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00450C1F |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00450C22 |. E8 19FEFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450C27 |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00450C29 |. 50 PUSH EAX ; /Arg4
00450C2A |. 8B4424 28 MOV EAX,DWORD PTR SS:[ESP+28] ; |
00450C2E |. 50 PUSH EAX ; |Arg3
00450C2F |. 6A 16 PUSH 16 ; |Arg2 = 00000016
00450C31 |. 68 EECEBDC1 PUSH C1BDCEEE ; |Arg1 = C1BDCEEE
00450C36 |. 8BC6 MOV EAX,ESI ; |
00450C38 |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00450C3B |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00450C3D |. E8 FEFDFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450C42 |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00450C45 |. 50 PUSH EAX ; /Arg4
00450C46 |. 8B4424 2C MOV EAX,DWORD PTR SS:[ESP+2C] ; |
00450C4A |. 50 PUSH EAX ; |Arg3
00450C4B |. 6A 07 PUSH 7 ; |Arg2 = 00000007
00450C4D |. 68 AF0F7CF5 PUSH F57C0FAF ; |Arg1 = F57C0FAF
00450C52 |. 8BC3 MOV EAX,EBX ; |
00450C54 |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00450C56 |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00450C58 |. E8 E3FDFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450C5D |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00450C5F |. 50 PUSH EAX ; /Arg4
00450C60 |. 8B4424 30 MOV EAX,DWORD PTR SS:[ESP+30] ; |
00450C64 |. 50 PUSH EAX ; |Arg3
00450C65 |. 6A 0C PUSH 0C ; |Arg2 = 0000000C
00450C67 |. 68 2AC68747 PUSH 4787C62A ; |Arg1 = 4787C62A
00450C6C |. 8BC5 MOV EAX,EBP ; |
00450C6E |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00450C70 |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00450C72 |. E8 C9FDFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450C77 |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00450C79 |. 50 PUSH EAX ; /Arg4
00450C7A |. 8B4424 34 MOV EAX,DWORD PTR SS:[ESP+34] ; |
00450C7E |. 50 PUSH EAX ; |Arg3
00450C7F |. 6A 11 PUSH 11 ; |Arg2 = 00000011
00450C81 |. 68 134630A8 PUSH A8304613 ; |Arg1 = A8304613
00450C86 |. 8BC7 MOV EAX,EDI ; |
00450C88 |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00450C8A |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00450C8D |. E8 AEFDFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450C92 |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00450C94 |. 50 PUSH EAX ; /Arg4
00450C95 |. 8B4424 38 MOV EAX,DWORD PTR SS:[ESP+38] ; |
00450C99 |. 50 PUSH EAX ; |Arg3
00450C9A |. 6A 16 PUSH 16 ; |Arg2 = 00000016
00450C9C |. 68 019546FD PUSH FD469501 ; |Arg1 = FD469501
00450CA1 |. 8BC6 MOV EAX,ESI ; |
00450CA3 |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00450CA6 |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00450CA8 |. E8 93FDFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450CAD |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00450CB0 |. 50 PUSH EAX ; /Arg4
00450CB1 |. 8B4424 3C MOV EAX,DWORD PTR SS:[ESP+3C] ; |
00450CB5 |. 50 PUSH EAX ; |Arg3
00450CB6 |. 6A 07 PUSH 7 ; |Arg2 = 00000007
00450CB8 |. 68 D8988069 PUSH 698098D8 ; |Arg1 = 698098D8
00450CBD |. 8BC3 MOV EAX,EBX ; |
00450CBF |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00450CC1 |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00450CC3 |. E8 78FDFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450CC8 |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00450CCA |. 50 PUSH EAX ; /Arg4
00450CCB |. 8B4424 40 MOV EAX,DWORD PTR SS:[ESP+40] ; |
00450CCF |. 50 PUSH EAX ; |Arg3
00450CD0 |. 6A 0C PUSH 0C ; |Arg2 = 0000000C
00450CD2 |. 68 AFF7448B PUSH 8B44F7AF ; |Arg1 = 8B44F7AF
00450CD7 |. 8BC5 MOV EAX,EBP ; |
00450CD9 |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00450CDB |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00450CDD |. E8 5EFDFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450CE2 |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00450CE4 |. 50 PUSH EAX ; /Arg4
00450CE5 |. 8B4424 44 MOV EAX,DWORD PTR SS:[ESP+44] ; |
00450CE9 |. 50 PUSH EAX ; |Arg3
00450CEA |. 6A 11 PUSH 11 ; |Arg2 = 00000011
00450CEC |. 68 B15BFFFF PUSH FFFF5BB1 ; |Arg1 = FFFF5BB1
00450CF1 |. 8BC7 MOV EAX,EDI ; |
00450CF3 |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00450CF5 |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00450CF8 |. E8 43FDFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450CFD |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00450CFF |. 50 PUSH EAX ; /Arg4
00450D00 |. 8B4424 48 MOV EAX,DWORD PTR SS:[ESP+48] ; |
00450D04 |. 50 PUSH EAX ; |Arg3
00450D05 |. 6A 16 PUSH 16 ; |Arg2 = 00000016
00450D07 |. 68 BED75C89 PUSH 895CD7BE ; |Arg1 = 895CD7BE
00450D0C |. 8BC6 MOV EAX,ESI ; |
00450D0E |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00450D11 |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00450D13 |. E8 28FDFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450D18 |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00450D1B |. 50 PUSH EAX ; /Arg4
00450D1C |. 8B4424 4C MOV EAX,DWORD PTR SS:[ESP+4C] ; |
00450D20 |. 50 PUSH EAX ; |Arg3
00450D21 |. 6A 07 PUSH 7 ; |Arg2 = 00000007
00450D23 |. 68 2211906B PUSH 6B901122 ; |Arg1 = 6B901122
00450D28 |. 8BC3 MOV EAX,EBX ; |
00450D2A |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00450D2C |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00450D2E |. E8 0DFDFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450D33 |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00450D35 |. 50 PUSH EAX ; /Arg4
00450D36 |. 8B4424 50 MOV EAX,DWORD PTR SS:[ESP+50] ; |
00450D3A |. 50 PUSH EAX ; |Arg3
00450D3B |. 6A 0C PUSH 0C ; |Arg2 = 0000000C
00450D3D |. 68 937198FD PUSH FD987193 ; |Arg1 = FD987193
00450D42 |. 8BC5 MOV EAX,EBP ; |
00450D44 |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00450D46 |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00450D48 |. E8 F3FCFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450D4D |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00450D4F |. 50 PUSH EAX ; /Arg4
00450D50 |. 8B4424 54 MOV EAX,DWORD PTR SS:[ESP+54] ; |
00450D54 |. 50 PUSH EAX ; |Arg3
00450D55 |. 6A 11 PUSH 11 ; |Arg2 = 00000011
00450D57 |. 68 8E4379A6 PUSH A679438E ; |Arg1 = A679438E
00450D5C |. 8BC7 MOV EAX,EDI ; |
00450D5E |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00450D60 |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00450D63 |. E8 D8FCFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450D68 |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00450D6A |. 50 PUSH EAX ; /Arg4
00450D6B |. 8B4424 58 MOV EAX,DWORD PTR SS:[ESP+58] ; |
00450D6F |. 50 PUSH EAX ; |Arg3
00450D70 |. 6A 16 PUSH 16 ; |Arg2 = 00000016
00450D72 |. 68 2108B449 PUSH 49B40821 ; |Arg1 = 49B40821
00450D77 |. 8BC6 MOV EAX,ESI ; |
00450D79 |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00450D7C |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00450D7E |. E8 BDFCFFFF CALL Project1.00450A40 ; \Project1.00450A40
00450D83 |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00450D86 |. 50 PUSH EAX ; /Arg4
00450D87 |. 8B4424 20 MOV EAX,DWORD PTR SS:[ESP+20] ; |
00450D8B |. 50 PUSH EAX ; |Arg3
00450D8C |. 6A 05 PUSH 5 ; |Arg2 = 00000005
00450D8E |. 68 62251EF6 PUSH F61E2562 ; |Arg1 = F61E2562
00450D93 |. 8BC3 MOV EAX,EBX ; |
00450D95 |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00450D97 |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00450D99 |. E8 D6FCFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450D9E |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00450DA0 |. 50 PUSH EAX ; /Arg4
00450DA1 |. 8B4424 34 MOV EAX,DWORD PTR SS:[ESP+34] ; |
00450DA5 |. 50 PUSH EAX ; |Arg3
00450DA6 |. 6A 09 PUSH 9 ; |Arg2 = 00000009
00450DA8 |. 68 40B340C0 PUSH C040B340 ; |Arg1 = C040B340
00450DAD |. 8BC5 MOV EAX,EBP ; |
00450DAF |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00450DB1 |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00450DB3 |. E8 BCFCFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450DB8 |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00450DBA |. 50 PUSH EAX ; /Arg4
00450DBB |. 8B4424 48 MOV EAX,DWORD PTR SS:[ESP+48] ; |
00450DBF |. 50 PUSH EAX ; |Arg3
00450DC0 |. 6A 0E PUSH 0E ; |Arg2 = 0000000E
00450DC2 |. 68 515A5E26 PUSH 265E5A51 ; |Arg1 = 265E5A51
00450DC7 |. 8BC7 MOV EAX,EDI ; |
00450DC9 |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00450DCB |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00450DCE |. E8 A1FCFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450DD3 |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00450DD5 |. 50 PUSH EAX ; /Arg4
00450DD6 |. 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C] ; |
00450DDA |. 50 PUSH EAX ; |Arg3
00450DDB |. 6A 14 PUSH 14 ; |Arg2 = 00000014
00450DDD |. 68 AAC7B6E9 PUSH E9B6C7AA ; |Arg1 = E9B6C7AA
00450DE2 |. 8BC6 MOV EAX,ESI ; |
00450DE4 |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00450DE7 |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00450DE9 |. E8 86FCFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450DEE |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00450DF1 |. 50 PUSH EAX ; /Arg4
00450DF2 |. 8B4424 30 MOV EAX,DWORD PTR SS:[ESP+30] ; |
00450DF6 |. 50 PUSH EAX ; |Arg3
00450DF7 |. 6A 05 PUSH 5 ; |Arg2 = 00000005
00450DF9 |. 68 5D102FD6 PUSH D62F105D ; |Arg1 = D62F105D
00450DFE |. 8BC3 MOV EAX,EBX ; |
00450E00 |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00450E02 |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00450E04 |. E8 6BFCFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450E09 |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00450E0B |. 50 PUSH EAX ; /Arg4
00450E0C |. 8B4424 44 MOV EAX,DWORD PTR SS:[ESP+44] ; |
00450E10 |. 50 PUSH EAX ; |Arg3
00450E11 |. 6A 09 PUSH 9 ; |Arg2 = 00000009
00450E13 |. 68 53144402 PUSH 2441453 ; |Arg1 = 02441453
00450E18 |. 8BC5 MOV EAX,EBP ; |
00450E1A |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00450E1C |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00450E1E |. E8 51FCFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450E23 |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00450E25 |. 50 PUSH EAX ; /Arg4
00450E26 |. 8B4424 58 MOV EAX,DWORD PTR SS:[ESP+58] ; |
00450E2A |. 50 PUSH EAX ; |Arg3
00450E2B |. 6A 0E PUSH 0E ; |Arg2 = 0000000E
00450E2D |. 68 81E6A1D8 PUSH D8A1E681 ; |Arg1 = D8A1E681
00450E32 |. 8BC7 MOV EAX,EDI ; |
00450E34 |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00450E36 |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00450E39 |. E8 36FCFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450E3E |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00450E40 |. 50 PUSH EAX ; /Arg4
00450E41 |. 8B4424 2C MOV EAX,DWORD PTR SS:[ESP+2C] ; |
00450E45 |. 50 PUSH EAX ; |Arg3
00450E46 |. 6A 14 PUSH 14 ; |Arg2 = 00000014
00450E48 |. 68 C8FBD3E7 PUSH E7D3FBC8 ; |Arg1 = E7D3FBC8
00450E4D |. 8BC6 MOV EAX,ESI ; |
00450E4F |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00450E52 |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00450E54 |. E8 1BFCFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450E59 |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00450E5C |. 50 PUSH EAX ; /Arg4
00450E5D |. 8B4424 40 MOV EAX,DWORD PTR SS:[ESP+40] ; |
00450E61 |. 50 PUSH EAX ; |Arg3
00450E62 |. 6A 05 PUSH 5 ; |Arg2 = 00000005
00450E64 |. 68 E6CDE121 PUSH 21E1CDE6 ; |Arg1 = 21E1CDE6
00450E69 |. 8BC3 MOV EAX,EBX ; |
00450E6B |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00450E6D |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00450E6F |. E8 00FCFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450E74 |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00450E76 |. 50 PUSH EAX ; /Arg4
00450E77 |. 8B4424 54 MOV EAX,DWORD PTR SS:[ESP+54] ; |
00450E7B |. 50 PUSH EAX ; |Arg3
00450E7C |. 6A 09 PUSH 9 ; |Arg2 = 00000009
00450E7E |. 68 D60737C3 PUSH C33707D6 ; |Arg1 = C33707D6
00450E83 |. 8BC5 MOV EAX,EBP ; |
00450E85 |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00450E87 |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00450E89 |. E8 E6FBFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450E8E |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00450E90 |. 50 PUSH EAX ; /Arg4
00450E91 |. 8B4424 28 MOV EAX,DWORD PTR SS:[ESP+28] ; |
00450E95 |. 50 PUSH EAX ; |Arg3
00450E96 |. 6A 0E PUSH 0E ; |Arg2 = 0000000E
00450E98 |. 68 870DD5F4 PUSH F4D50D87 ; |Arg1 = F4D50D87
00450E9D |. 8BC7 MOV EAX,EDI ; |
00450E9F |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00450EA1 |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00450EA4 |. E8 CBFBFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450EA9 |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00450EAB |. 50 PUSH EAX ; /Arg4
00450EAC |. 8B4424 3C MOV EAX,DWORD PTR SS:[ESP+3C] ; |
00450EB0 |. 50 PUSH EAX ; |Arg3
00450EB1 |. 6A 14 PUSH 14 ; |Arg2 = 00000014
00450EB3 |. 68 ED145A45 PUSH 455A14ED ; |Arg1 = 455A14ED
00450EB8 |. 8BC6 MOV EAX,ESI ; |
00450EBA |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00450EBD |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00450EBF |. E8 B0FBFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450EC4 |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00450EC7 |. 50 PUSH EAX ; /Arg4
00450EC8 |. 8B4424 50 MOV EAX,DWORD PTR SS:[ESP+50] ; |
00450ECC |. 50 PUSH EAX ; |Arg3
00450ECD |. 6A 05 PUSH 5 ; |Arg2 = 00000005
00450ECF |. 68 05E9E3A9 PUSH A9E3E905 ; |Arg1 = A9E3E905
00450ED4 |. 8BC3 MOV EAX,EBX ; |
00450ED6 |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00450ED8 |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00450EDA |. E8 95FBFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450EDF |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00450EE1 |. 50 PUSH EAX ; /Arg4
00450EE2 |. 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24] ; |
00450EE6 |. 50 PUSH EAX ; |Arg3
00450EE7 |. 6A 09 PUSH 9 ; |Arg2 = 00000009
00450EE9 |. 68 F8A3EFFC PUSH FCEFA3F8 ; |Arg1 = FCEFA3F8
00450EEE |. 8BC5 MOV EAX,EBP ; |
00450EF0 |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00450EF2 |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00450EF4 |. E8 7BFBFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450EF9 |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00450EFB |. 50 PUSH EAX ; /Arg4
00450EFC |. 8B4424 38 MOV EAX,DWORD PTR SS:[ESP+38] ; |
00450F00 |. 50 PUSH EAX ; |Arg3
00450F01 |. 6A 0E PUSH 0E ; |Arg2 = 0000000E
00450F03 |. 68 D9026F67 PUSH 676F02D9 ; |Arg1 = 676F02D9
00450F08 |. 8BC7 MOV EAX,EDI ; |
00450F0A |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00450F0C |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00450F0F |. E8 60FBFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450F14 |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00450F16 |. 50 PUSH EAX ; /Arg4
00450F17 |. 8B4424 4C MOV EAX,DWORD PTR SS:[ESP+4C] ; |
00450F1B |. 50 PUSH EAX ; |Arg3
00450F1C |. 6A 14 PUSH 14 ; |Arg2 = 00000014
00450F1E |. 68 8A4C2A8D PUSH 8D2A4C8A ; |Arg1 = 8D2A4C8A
00450F23 |. 8BC6 MOV EAX,ESI ; |
00450F25 |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00450F28 |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00450F2A |. E8 45FBFFFF CALL Project1.00450A74 ; \Project1.00450A74
00450F2F |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00450F32 |. 50 PUSH EAX ; /Arg4
00450F33 |. 8B4424 30 MOV EAX,DWORD PTR SS:[ESP+30] ; |
00450F37 |. 50 PUSH EAX ; |Arg3
00450F38 |. 6A 04 PUSH 4 ; |Arg2 = 00000004
00450F3A |. 68 4239FAFF PUSH FFFA3942 ; |Arg1 = FFFA3942
00450F3F |. 8BC3 MOV EAX,EBX ; |
00450F41 |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00450F43 |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00450F45 |. E8 5EFBFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
00450F4A |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00450F4C |. 50 PUSH EAX ; /Arg4
00450F4D |. 8B4424 3C MOV EAX,DWORD PTR SS:[ESP+3C] ; |
00450F51 |. 50 PUSH EAX ; |Arg3
00450F52 |. 6A 0B PUSH 0B ; |Arg2 = 0000000B
00450F54 |. 68 81F67187 PUSH 8771F681 ; |Arg1 = 8771F681
00450F59 |. 8BC5 MOV EAX,EBP ; |
00450F5B |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00450F5D |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00450F5F |. E8 44FBFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
00450F64 |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00450F66 |. 50 PUSH EAX ; /Arg4
00450F67 |. 8B4424 48 MOV EAX,DWORD PTR SS:[ESP+48] ; |
00450F6B |. 50 PUSH EAX ; |Arg3
00450F6C |. 6A 10 PUSH 10 ; |Arg2 = 00000010
00450F6E |. 68 22619D6D PUSH 6D9D6122 ; |Arg1 = 6D9D6122
00450F73 |. 8BC7 MOV EAX,EDI ; |
00450F75 |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00450F77 |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00450F7A |. E8 29FBFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
00450F7F |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00450F81 |. 50 PUSH EAX ; /Arg4
00450F82 |. 8B4424 54 MOV EAX,DWORD PTR SS:[ESP+54] ; |
00450F86 |. 50 PUSH EAX ; |Arg3
00450F87 |. 6A 17 PUSH 17 ; |Arg2 = 00000017
00450F89 |. 68 0C38E5FD PUSH FDE5380C ; |Arg1 = FDE5380C
00450F8E |. 8BC6 MOV EAX,ESI ; |
00450F90 |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00450F93 |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00450F95 |. E8 0EFBFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
00450F9A |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00450F9D |. 50 PUSH EAX ; /Arg4
00450F9E |. 8B4424 20 MOV EAX,DWORD PTR SS:[ESP+20] ; |
00450FA2 |. 50 PUSH EAX ; |Arg3
00450FA3 |. 6A 04 PUSH 4 ; |Arg2 = 00000004
00450FA5 |. 68 44EABEA4 PUSH A4BEEA44 ; |Arg1 = A4BEEA44
00450FAA |. 8BC3 MOV EAX,EBX ; |
00450FAC |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00450FAE |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00450FB0 |. E8 F3FAFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
00450FB5 |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00450FB7 |. 50 PUSH EAX ; /Arg4
00450FB8 |. 8B4424 2C MOV EAX,DWORD PTR SS:[ESP+2C] ; |
00450FBC |. 50 PUSH EAX ; |Arg3
00450FBD |. 6A 0B PUSH 0B ; |Arg2 = 0000000B
00450FBF |. 68 A9CFDE4B PUSH 4BDECFA9 ; |Arg1 = 4BDECFA9
00450FC4 |. 8BC5 MOV EAX,EBP ; |
00450FC6 |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00450FC8 |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00450FCA |. E8 D9FAFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
00450FCF |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00450FD1 |. 50 PUSH EAX ; /Arg4
00450FD2 |. 8B4424 38 MOV EAX,DWORD PTR SS:[ESP+38] ; |
00450FD6 |. 50 PUSH EAX ; |Arg3
00450FD7 |. 6A 10 PUSH 10 ; |Arg2 = 00000010
00450FD9 |. 68 604BBBF6 PUSH F6BB4B60 ; |Arg1 = F6BB4B60
00450FDE |. 8BC7 MOV EAX,EDI ; |
00450FE0 |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00450FE2 |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00450FE5 |. E8 BEFAFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
00450FEA |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00450FEC |. 50 PUSH EAX ; /Arg4
00450FED |. 8B4424 44 MOV EAX,DWORD PTR SS:[ESP+44] ; |
00450FF1 |. 50 PUSH EAX ; |Arg3
00450FF2 |. 6A 17 PUSH 17 ; |Arg2 = 00000017
00450FF4 |. 68 70BCBFBE PUSH BEBFBC70 ; |Arg1 = BEBFBC70
00450FF9 |. 8BC6 MOV EAX,ESI ; |
00450FFB |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00450FFE |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00451000 |. E8 A3FAFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
00451005 |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00451008 |. 50 PUSH EAX ; /Arg4
00451009 |. 8B4424 50 MOV EAX,DWORD PTR SS:[ESP+50] ; |
0045100D |. 50 PUSH EAX ; |Arg3
0045100E |. 6A 04 PUSH 4 ; |Arg2 = 00000004
00451010 |. 68 C67E9B28 PUSH 289B7EC6 ; |Arg1 = 289B7EC6
00451015 |. 8BC3 MOV EAX,EBX ; |
00451017 |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00451019 |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
0045101B |. E8 88FAFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
00451020 |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00451022 |. 50 PUSH EAX ; /Arg4
00451023 |. 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C] ; |
00451027 |. 50 PUSH EAX ; |Arg3
00451028 |. 6A 0B PUSH 0B ; |Arg2 = 0000000B
0045102A |. 68 FA27A1EA PUSH EAA127FA ; |Arg1 = EAA127FA
0045102F |. 8BC5 MOV EAX,EBP ; |
00451031 |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00451033 |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00451035 |. E8 6EFAFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
0045103A |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
0045103C |. 50 PUSH EAX ; /Arg4
0045103D |. 8B4424 28 MOV EAX,DWORD PTR SS:[ESP+28] ; |
00451041 |. 50 PUSH EAX ; |Arg3
00451042 |. 6A 10 PUSH 10 ; |Arg2 = 00000010
00451044 |. 68 8530EFD4 PUSH D4EF3085 ; |Arg1 = D4EF3085
00451049 |. 8BC7 MOV EAX,EDI ; |
0045104B |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
0045104D |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00451050 |. E8 53FAFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
00451055 |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00451057 |. 50 PUSH EAX ; /Arg4
00451058 |. 8B4424 34 MOV EAX,DWORD PTR SS:[ESP+34] ; |
0045105C |. 50 PUSH EAX ; |Arg3
0045105D |. 6A 17 PUSH 17 ; |Arg2 = 00000017
0045105F |. 68 051D8804 PUSH 4881D05 ; |Arg1 = 04881D05
00451064 |. 8BC6 MOV EAX,ESI ; |
00451066 |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00451069 |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
0045106B |. E8 38FAFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
00451070 |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00451073 |. 50 PUSH EAX ; /Arg4
00451074 |. 8B4424 40 MOV EAX,DWORD PTR SS:[ESP+40] ; |
00451078 |. 50 PUSH EAX ; |Arg3
00451079 |. 6A 04 PUSH 4 ; |Arg2 = 00000004
0045107B |. 68 39D0D4D9 PUSH D9D4D039 ; |Arg1 = D9D4D039
00451080 |. 8BC3 MOV EAX,EBX ; |
00451082 |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00451084 |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00451086 |. E8 1DFAFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
0045108B |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
0045108D |. 50 PUSH EAX ; /Arg4
0045108E |. 8B4424 4C MOV EAX,DWORD PTR SS:[ESP+4C] ; |
00451092 |. 50 PUSH EAX ; |Arg3
00451093 |. 6A 0B PUSH 0B ; |Arg2 = 0000000B
00451095 |. 68 E599DBE6 PUSH E6DB99E5 ; |Arg1 = E6DB99E5
0045109A |. 8BC5 MOV EAX,EBP ; |
0045109C |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
0045109E |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
004510A0 |. E8 03FAFFFF CALL Project1.00450AA8 ; \Project1.00450AA8
004510A5 |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
004510A7 |. 50 PUSH EAX ; /Arg4
004510A8 |. 8B4424 58 MOV EAX,DWORD PTR SS:[ESP+58] ; |
004510AC |. 50 PUSH EAX ; |Arg3
004510AD |. 6A 10 PUSH 10 ; |Arg2 = 00000010
004510AF |. 68 F87CA21F PUSH 1FA27CF8 ; |Arg1 = 1FA27CF8
004510B4 |. 8BC7 MOV EAX,EDI ; |
004510B6 |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
004510B8 |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
004510BB |. E8 E8F9FFFF CALL Project1.00450AA8 ; \Project1.00450AA8
004510C0 |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
004510C2 |. 50 PUSH EAX ; /Arg4
004510C3 |. 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24] ; |
004510C7 |. 50 PUSH EAX ; |Arg3
004510C8 |. 6A 17 PUSH 17 ; |Arg2 = 00000017
004510CA |. 68 6556ACC4 PUSH C4AC5665 ; |Arg1 = C4AC5665
004510CF |. 8BC6 MOV EAX,ESI ; |
004510D1 |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
004510D4 |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
004510D6 |. E8 CDF9FFFF CALL Project1.00450AA8 ; \Project1.00450AA8
004510DB |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
004510DE |. 50 PUSH EAX ; /Arg4
004510DF |. 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C] ; |
004510E3 |. 50 PUSH EAX ; |Arg3
004510E4 |. 6A 06 PUSH 6 ; |Arg2 = 00000006
004510E6 |. 68 442229F4 PUSH F4292244 ; |Arg1 = F4292244
004510EB |. 8BC3 MOV EAX,EBX ; |
004510ED |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
004510EF |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
004510F1 |. E8 E6F9FFFF CALL Project1.00450ADC ; \Project1.00450ADC
004510F6 |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
004510F8 |. 50 PUSH EAX ; /Arg4
004510F9 |. 8B4424 38 MOV EAX,DWORD PTR SS:[ESP+38] ; |
004510FD |. 50 PUSH EAX ; |Arg3
004510FE |. 6A 0A PUSH 0A ; |Arg2 = 0000000A
00451100 |. 68 97FF2A43 PUSH 432AFF97 ; |Arg1 = 432AFF97
00451105 |. 8BC5 MOV EAX,EBP ; |
00451107 |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00451109 |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
0045110B |. E8 CCF9FFFF CALL Project1.00450ADC ; \Project1.00450ADC
00451110 |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00451112 |. 50 PUSH EAX ; /Arg4
00451113 |. 8B4424 54 MOV EAX,DWORD PTR SS:[ESP+54] ; |
00451117 |. 50 PUSH EAX ; |Arg3
00451118 |. 6A 0F PUSH 0F ; |Arg2 = 0000000F
0045111A |. 68 A72394AB PUSH AB9423A7 ; |Arg1 = AB9423A7
0045111F |. 8BC7 MOV EAX,EDI ; |
00451121 |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00451123 |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00451126 |. E8 B1F9FFFF CALL Project1.00450ADC ; \Project1.00450ADC
0045112B |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
0045112D |. 50 PUSH EAX ; /Arg4
0045112E |. 8B4424 30 MOV EAX,DWORD PTR SS:[ESP+30] ; |
00451132 |. 50 PUSH EAX ; |Arg3
00451133 |. 6A 15 PUSH 15 ; |Arg2 = 00000015
00451135 |. 68 39A093FC PUSH FC93A039 ; |Arg1 = FC93A039
0045113A |. 8BC6 MOV EAX,ESI ; |
0045113C |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
0045113F |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00451141 |. E8 96F9FFFF CALL Project1.00450ADC ; \Project1.00450ADC
00451146 |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
00451149 |. 50 PUSH EAX ; /Arg4
0045114A |. 8B4424 4C MOV EAX,DWORD PTR SS:[ESP+4C] ; |
0045114E |. 50 PUSH EAX ; |Arg3
0045114F |. 6A 06 PUSH 6 ; |Arg2 = 00000006
00451151 |. 68 C3595B65 PUSH 655B59C3 ; |Arg1 = 655B59C3
00451156 |. 8BC3 MOV EAX,EBX ; |
00451158 |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
0045115A |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
0045115C |. E8 7BF9FFFF CALL Project1.00450ADC ; \Project1.00450ADC
00451161 |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00451163 |. 50 PUSH EAX ; /Arg4
00451164 |. 8B4424 28 MOV EAX,DWORD PTR SS:[ESP+28] ; |
00451168 |. 50 PUSH EAX ; |Arg3
00451169 |. 6A 0A PUSH 0A ; |Arg2 = 0000000A
0045116B |. 68 92CC0C8F PUSH 8F0CCC92 ; |Arg1 = 8F0CCC92
00451170 |. 8BC5 MOV EAX,EBP ; |
00451172 |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
00451174 |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
00451176 |. E8 61F9FFFF CALL Project1.00450ADC ; \Project1.00450ADC
0045117B |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
0045117D |. 50 PUSH EAX ; /Arg4
0045117E |. 8B4424 44 MOV EAX,DWORD PTR SS:[ESP+44] ; |
00451182 |. 50 PUSH EAX ; |Arg3
00451183 |. 6A 0F PUSH 0F ; |Arg2 = 0000000F
00451185 |. 68 7DF4EFFF PUSH FFEFF47D ; |Arg1 = FFEFF47D
0045118A |. 8BC7 MOV EAX,EDI ; |
0045118C |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
0045118E |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00451191 |. E8 46F9FFFF CALL Project1.00450ADC ; \Project1.00450ADC
00451196 |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00451198 |. 50 PUSH EAX ; /Arg4
00451199 |. 8B4424 20 MOV EAX,DWORD PTR SS:[ESP+20] ; |
0045119D |. 50 PUSH EAX ; |Arg3
0045119E |. 6A 15 PUSH 15 ; |Arg2 = 00000015
004511A0 |. 68 D15D8485 PUSH 85845DD1 ; |Arg1 = 85845DD1
004511A5 |. 8BC6 MOV EAX,ESI ; |
004511A7 |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
004511AA |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
004511AC |. E8 2BF9FFFF CALL Project1.00450ADC ; \Project1.00450ADC
004511B1 |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
004511B4 |. 50 PUSH EAX ; /Arg4
004511B5 |. 8B4424 3C MOV EAX,DWORD PTR SS:[ESP+3C] ; |
004511B9 |. 50 PUSH EAX ; |Arg3
004511BA |. 6A 06 PUSH 6 ; |Arg2 = 00000006
004511BC |. 68 4F7EA86F PUSH 6FA87E4F ; |Arg1 = 6FA87E4F
004511C1 |. 8BC3 MOV EAX,EBX ; |
004511C3 |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
004511C5 |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
004511C7 |. E8 10F9FFFF CALL Project1.00450ADC ; \Project1.00450ADC
004511CC |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
004511CE |. 50 PUSH EAX ; /Arg4
004511CF |. 8B4424 58 MOV EAX,DWORD PTR SS:[ESP+58] ; |
004511D3 |. 50 PUSH EAX ; |Arg3
004511D4 |. 6A 0A PUSH 0A ; |Arg2 = 0000000A
004511D6 |. 68 E0E62CFE PUSH FE2CE6E0 ; |Arg1 = FE2CE6E0
004511DB |. 8BC5 MOV EAX,EBP ; |
004511DD |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
004511DF |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
004511E1 |. E8 F6F8FFFF CALL Project1.00450ADC ; \Project1.00450ADC
004511E6 |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
004511E8 |. 50 PUSH EAX ; /Arg4
004511E9 |. 8B4424 34 MOV EAX,DWORD PTR SS:[ESP+34] ; |
004511ED |. 50 PUSH EAX ; |Arg3
004511EE |. 6A 0F PUSH 0F ; |Arg2 = 0000000F
004511F0 |. 68 144301A3 PUSH A3014314 ; |Arg1 = A3014314
004511F5 |. 8BC7 MOV EAX,EDI ; |
004511F7 |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
004511F9 |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
004511FC |. E8 DBF8FFFF CALL Project1.00450ADC ; \Project1.00450ADC
00451201 |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
00451203 |. 50 PUSH EAX ; /Arg4
00451204 |. 8B4424 50 MOV EAX,DWORD PTR SS:[ESP+50] ; |
00451208 |. 50 PUSH EAX ; |Arg3
00451209 |. 6A 15 PUSH 15 ; |Arg2 = 00000015
0045120B |. 68 A111084E PUSH 4E0811A1 ; |Arg1 = 4E0811A1
00451210 |. 8BC6 MOV EAX,ESI ; |
00451212 |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00451215 |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00451217 |. E8 C0F8FFFF CALL Project1.00450ADC ; \Project1.00450ADC
0045121C |. 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
0045121F |. 50 PUSH EAX ; /Arg4
00451220 |. 8B4424 2C MOV EAX,DWORD PTR SS:[ESP+2C] ; |
00451224 |. 50 PUSH EAX ; |Arg3
00451225 |. 6A 06 PUSH 6 ; |Arg2 = 00000006
00451227 |. 68 827E53F7 PUSH F7537E82 ; |Arg1 = F7537E82
0045122C |. 8BC3 MOV EAX,EBX ; |
0045122E |. 8B0F MOV ECX,DWORD PTR DS:[EDI] ; |
00451230 |. 8B16 MOV EDX,DWORD PTR DS:[ESI] ; |
00451232 |. E8 A5F8FFFF CALL Project1.00450ADC ; \Project1.00450ADC
00451237 |. 8B07 MOV EAX,DWORD PTR DS:[EDI]
00451239 |. 50 PUSH EAX ; /Arg4
0045123A |. 8B4424 48 MOV EAX,DWORD PTR SS:[ESP+48] ; |
0045123E |. 50 PUSH EAX ; |Arg3
0045123F |. 6A 0A PUSH 0A ; |Arg2 = 0000000A
00451241 |. 68 35F23ABD PUSH BD3AF235 ; |Arg1 = BD3AF235
00451246 |. 8BC5 MOV EAX,EBP ; |
00451248 |. 8B0E MOV ECX,DWORD PTR DS:[ESI] ; |
0045124A |. 8B13 MOV EDX,DWORD PTR DS:[EBX] ; |
0045124C |. E8 8BF8FFFF CALL Project1.00450ADC ; \Project1.00450ADC
00451251 |. 8B06 MOV EAX,DWORD PTR DS:[ESI]
00451253 |. 50 PUSH EAX ; /Arg4
00451254 |. 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24] ; |
00451258 |. 50 PUSH EAX ; |Arg3
00451259 |. 6A 0F PUSH 0F ; |Arg2 = 0000000F
0045125B |. 68 BBD2D72A PUSH 2AD7D2BB ; |Arg1 = 2AD7D2BB
00451260 |. 8BC7 MOV EAX,EDI ; |
00451262 |. 8B0B MOV ECX,DWORD PTR DS:[EBX] ; |
00451264 |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP] ; |
00451267 |. E8 70F8FFFF CALL Project1.00450ADC ; \Project1.00450ADC
0045126C |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
0045126E |. 50 PUSH EAX ; /Arg4
0045126F |. 8B4424 40 MOV EAX,DWORD PTR SS:[ESP+40] ; |
00451273 |. 50 PUSH EAX ; |Arg3
00451274 |. 6A 15 PUSH 15 ; |Arg2 = 00000015
00451276 |. 68 91D386EB PUSH EB86D391 ; |Arg1 = EB86D391
0045127B |. 8BC6 MOV EAX,ESI ; |
0045127D |. 8B4D 00 MOV ECX,DWORD PTR SS:[EBP] ; |
00451280 |. 8B17 MOV EDX,DWORD PTR DS:[EDI] ; |
00451282 |. E8 55F8FFFF CALL Project1.00450ADC ; \Project1.00450ADC
00451287 |. 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
0045128B |. 8B13 MOV EDX,DWORD PTR DS:[EBX]
0045128D |. 0110 ADD DWORD PTR DS:[EAX],EDX
0045128F |. 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
00451293 |. 8B16 MOV EDX,DWORD PTR DS:[ESI]
00451295 |. 0150 04 ADD DWORD PTR DS:[EAX+4],EDX
00451298 |. 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
0045129C |. 8B17 MOV EDX,DWORD PTR DS:[EDI]
0045129E |. 0150 08 ADD DWORD PTR DS:[EAX+8],EDX
004512A1 |. 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
004512A5 |. 8B55 00 MOV EDX,DWORD PTR SS:[EBP]
004512A8 |. 0150 0C ADD DWORD PTR DS:[EAX+C],EDX
004512AB |. 83C4 58 ADD ESP,58
004512AE |. 5D POP EBP
004512AF |. 5F POP EDI
004512B0 |. 5E POP ESI
004512B1 |. 5B POP EBX
004512B2 \. C3 RETN
=====================================================================
00451875处，F7进：
00451450 55 push ebp
00451451 8BEC mov ebp,esp
00451453 83C4 E8 add esp,-18
00451456 53 push ebx
00451457 56 push esi
00451458 57 push edi
00451459 33C9 xor ecx,ecx
0045145B 894D EC mov dword ptr ss:[ebp-14],ecx
0045145E 894D E8 mov dword ptr ss:[ebp-18],ecx
00451461 8BF0 mov esi,eax
00451463 8D7D F0 lea edi,dword ptr ss:[ebp-10]
00451466 A5 movs dword ptr es:[edi],dword ptr ds>
00451467 A5 movs dword ptr es:[edi],dword ptr ds>
00451468 A5 movs dword ptr es:[edi],dword ptr ds>
00451469 A5 movs dword ptr es:[edi],dword ptr ds>
0045146A 8BFA mov edi,edx
...........................略N行............................
查表转成小写 ：
000451486 FF37 push dword ptr ds:[edi] ; 压栈
00451488 8D45 EC lea eax,dword ptr ss:[ebp-14] ; ss:[ebp-14]入eax
0045148B 33D2 xor edx,edx ; 异或
0045148D 8A16 mov dl,byte ptr ds:[esi] ; ds:[esi]入dl
0045148F C1EA 04 shr edx,4 ; 右移4位
00451492 83E2 0F and edx,0F ; 逻辑与运算
00451495 8A92 C02D4500 mov dl,byte ptr ds:[edx+452DC0] ; ds:[edx+452DC0]入dl
0045149B E8 582BFBFF call Project1.00403FF8
004514A0 FF75 EC push dword ptr ss:[ebp-14] ; 压栈
004514A3 8D45 E8 lea eax,dword ptr ss:[ebp-18] ; ss:[ebp-18]入eax
004514A6 8A16 mov dl,byte ptr ds:[esi]
004514A8 80E2 0F and dl,0F
004514AB 81E2 FF000000 and edx,0FF
004514B1 8A92 C02D4500 mov dl,byte ptr ds:[edx+452DC0]
004514B7 E8 3C2BFBFF call Project1.00403FF8
004514BC FF75 E8 push dword ptr ss:[ebp-18]
004514BF 8BC7 mov eax,edi ; eax=edi
004514C1 BA 03000000 mov edx,3 ; edx=3
004514C6 E8 C52CFBFF call Project1.00404190
004514CB 46 inc esi ; esi=esi+1
004514CC FECB dec bl ; bl=bl-1
004514CE ^ 75 B6 jnz short Project1.00451486
=============================循环计算================================
第1轮：堆栈 ds:[0012F630]=0098564C, (ASCII "45")
第2轮：堆栈 ds:[0012F630]=0098566C, (ASCII "4514")
第3轮：堆栈 ds:[0012F630]=0098566C, (ASCII "4514b0")
第4轮：堆栈 ds:[0012F630]=009856B0, (ASCII "4514b026")
第5轮：堆栈 ds:[0012F630]=009856B0, (ASCII "4514b02679")
第6轮：堆栈 ds:[0012F630]=009856E8, (ASCII "4514b026798d")
第7轮：堆栈 ds:[0012F630]=009856E8, (ASCII "4514b026798d71")
第8轮：堆栈 ds:[0012F630]=00985734, (ASCII "4514b026798d718a")
第9轮：堆栈 ds:[0012F630]=00985734, (ASCII "4514b026798d718ab5")
第10轮：堆栈 ds:[0012F630]=00984598, (ASCII "4514b026798d718ab522")
第11轮：堆栈 ds:[0012F630]=00984598, (ASCII "4514b026798d718ab52268")
第12轮：堆栈 ds:[0012F630]=009857B4, (ASCII "4514b026798d718ab5226875")
第13轮：堆栈 ds:[0012F630]=009857B4, (ASCII "4514b026798d718ab522687593")
第14轮：堆栈 ds:[0012F630]=0098580C, (ASCII "4514b026798d718ab52268759303")
第15轮：堆栈 ds:[0012F630]=0098580C, (ASCII "4514b026798d718ab522687593032d")
=====================================================================
【算法总结】
机器码(6D681618AFE9FBBF)＋用户名(6D681618AFE9FBBF) = CodeA
MD5(CodeA)=注册码(4514b026798d718ab522687593032d)
--------------------------------------------------------------------------------
【版权声明】: 本文属于技术交流, 转载请注明作者并保持文章的完整, 谢谢!
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
