:005A3819 8B4D84 mov ecx, dword ptr [ebp-7C]
:005A381C 83C101 add ecx, 00000001
:005A381F 894D84 mov dword ptr [ebp-7C], ecx
:005A3822 BA01000000 mov edx, 00000001
:005A3827 85D2 test edx, edx
:005A3829 7412 je 005A383D
:005A382B 8B4584 mov eax, dword ptr [ebp-7C]
:005A382E 83E801 sub eax, 00000001
:005A3831 894584 mov dword ptr [ebp-7C], eax
:005A3834 8B4D84 mov ecx, dword ptr [ebp-7C]
:005A3837 83C101 add ecx, 00000001
:005A383A 894D84 mov dword ptr [ebp-7C], ecx
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005A3829(C)
|
:005A383D 8B55F0 mov edx, dword ptr [ebp-10] ----------------------在OD中到这句后EAX就成零了，以前一直为1的。
:005A3840 899578FFFFFF mov dword ptr [ebp+FFFFFF78], edx
:005A3846 C745FCFFFFFFFF mov [ebp-04], FFFFFFFF
:005A384D 8D8D7CFFFFFF lea ecx, dword ptr [ebp+FFFFFF7C]
* Reference To: MFC42.Ordinal:0320, Ord:0320h
|
:005A3853 E812F10B00 Call 0066296A
:005A3858 8B8578FFFFFF mov eax, dword ptr [ebp+FFFFFF78] --------------eax为0就退出了
:005A385E 8B4DF4 mov ecx, dword ptr [ebp-0C]
:005A3861 64890D00000000 mov dword ptr fs:[00000000], ecx
:005A3868 8BE5 mov esp, ebp
:005A386A 5D pop ebp
:005A386B C3 ret
我的问题是如何修改能使EAX一直保持1不变，使程序运行下去。
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
