能力值:
( LV2,RANK:10 )
|
-
-
2 楼
以下代码是我查找demo对话框里的字符串"Thank you for trying",
谁能给我一些信息!
004033DF 90 nop
004033E0 /$ 6A FF push -1
004033E2 |. 68 63584000 push VIEWER.00405863 ; SE handler installation
004033E7 |. 64:A1 0000000>mov eax,dword ptr fs:[0]
004033ED |. 50 push eax
004033EE |. 64:8925 00000>mov dword ptr fs:[0],esp
004033F5 |. 81EC A4000000 sub esp,0A4
004033FB |. 53 push ebx
004033FC |. 55 push ebp
004033FD |. 56 push esi
004033FE |. 57 push edi
004033FF |. E8 3E190000 call <jmp.&MFC42.#1168>
00403404 |. 8B40 04 mov eax,dword ptr ds:[eax+4]
00403407 |. 33ED xor ebp,ebp
00403409 |. 55 push ebp
0040340A |. 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
0040340E |. 8B70 7C mov esi,dword ptr ds:[eax+7C]
00403411 |. 8A4424 17 mov al,byte ptr ss:[esp+17]
00403415 |. 884424 18 mov byte ptr ss:[esp+18],al
00403419 |. FF15 B4624000 call dword ptr ds:[<&MSVCP60.std::basic_strin>;
MSVCP60.std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Tidy
0040341F |. 8BFE mov edi,esi
00403421 |. 83C9 FF or ecx,FFFFFFFF
00403424 |. 33C0 xor eax,eax
00403426 |. 6A 01 push 1
00403428 |. F2:AE repne scas byte ptr es:[edi]
0040342A |. F7D1 not ecx
0040342C |. 49 dec ecx
0040342D |. 8BD9 mov ebx,ecx
0040342F |. 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
00403433 |. 53 push ebx
00403434 |. FF15 1C624000 call dword ptr ds:[<&MSVCP60.std::basic_strin>;
MSVCP60.std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Grow
0040343A |. 84C0 test al,al
0040343C |. 74 1F je short VIEWER.0040345D
0040343E |. 8B7C24 18 mov edi,dword ptr ss:[esp+18]
00403442 |. 8BCB mov ecx,ebx
00403444 |. 8BD1 mov edx,ecx
00403446 |. 53 push ebx
00403447 |. C1E9 02 shr ecx,2
0040344A |. F3:A5 rep movs dword ptr es:[edi],dword ptr ds:[esi>
0040344C |. 8BCA mov ecx,edx
0040344E |. 83E1 03 and ecx,3
00403451 |. F3:A4 rep movs byte ptr es:[edi],byte ptr ds:[esi]
00403453 |. 8D4C24 18 lea ecx,dword ptr ss:[esp+18]
00403457 |. FF15 AC624000 call dword ptr ds:[<&MSVCP60.std::basic_strin>;
MSVCP60.std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Eos
0040345D |> 8D4424 14 lea eax,dword ptr ss:[esp+14]
00403461 |. 8D8C24 A40000>lea ecx,dword ptr ss:[esp+A4]
00403468 |. 50 push eax
00403469 |. 68 20924000 push VIEWER.00409220 ; ASCII "Thank You for trying "
0040346E |. 51 push ecx
0040346F |. 89AC24 C80000>mov dword ptr ss:[esp+C8],ebp
00403476 |. E8 6B1D0000 call <jmp.&MSVCP60.std::operator+>
0040347B |. 68 1C924000 push VIEWER.0040921C ; ASCII "
"
00403480 |. 8D5424 54 lea edx,dword ptr ss:[esp+54]
00403484 |. 50 push eax
00403485 |. 52 push edx
00403486 |. C68424 D40000>mov byte ptr ss:[esp+D4],1
0040348E |. E8 591D0000 call <jmp.&MSVCP60.std::operator+>
00403493 |. 68 E4914000 push VIEWER.004091E4 ; ASCII "This is a DEMO version for the evaluation
use only.
"
00403498 |. 50 push eax
00403499 |. 8D4424 54 lea eax,dword ptr ss:[esp+54]
0040349D |. C68424 DC0000>mov byte ptr ss:[esp+DC],2
004034A5 |. 50 push eax
004034A6 |. E8 411D0000 call <jmp.&MSVCP60.std::operator+>
004034AB |. 68 AC914000 push VIEWER.004091AC ; ASCII "This is a fully functional version, but
You can not
"
004034B0 |. 8D4C24 4C lea ecx,dword ptr ss:[esp+4C]
004034B4 |. 50 push eax
004034B5 |. 51 push ecx
004034B6 |. C68424 EC0000>mov byte ptr ss:[esp+EC],3
004034BE |. E8 291D0000 call <jmp.&MSVCP60.std::operator+>
004034C3 |. 68 88914000 push VIEWER.00409188 ; ASCII "write the results to the disk.
"
004034C8 |. 8D9424 B80000>lea edx,dword ptr ss:[esp+B8]
004034CF |. 50 push eax
004034D0 |. 52 push edx
004034D1 |. C68424 F80000>mov byte ptr ss:[esp+F8],4
004034D9 |. E8 0E1D0000 call <jmp.&MSVCP60.std::operator+>
004034DE |. 68 5C914000 push VIEWER.0040915C ; ASCII "For ordering information how to register
"
004034E3 |. 50 push eax
004034E4 |. 8D8424 A80000>lea eax,dword ptr ss:[esp+A8]
004034EB |. C68424 000100>mov byte ptr ss:[esp+100],5
004034F3 |. 50 push eax
004034F4 |. E8 F31C0000 call <jmp.&MSVCP60.std::operator+>
004034F9 |. 83C4 48 add esp,48
004034FC |. 8D4C24 14 lea ecx,dword ptr ss:[esp+14]
00403500 |. 8D9424 940000>lea edx,dword ptr ss:[esp+94]
00403507 |. 51 push ecx
00403508 |. 50 push eax
00403509 |. 52 push edx
0040350A |. C68424 C80000>mov byte ptr ss:[esp+C8],6
00403512 |. E8 DB1C0000 call <jmp.&MSVCP60.std::operator+>
00403517 |. 68 58914000 push VIEWER.00409158
0040351C |. 50 push eax
0040351D |. 8D8424 880000>lea eax,dword ptr ss:[esp+88]
00403524 |. C68424 D00000>mov byte ptr ss:[esp+D0],7
0040352C |. 50 push eax
0040352D |. E8 BA1C0000 call <jmp.&MSVCP60.std::operator+>
00403532 |. 68 20914000 push VIEWER.00409120 ; ASCII "contact Fonov Serge by e-mail
'sergey.fonov@dlr.de'
"
00403537 |. 8D4C24 70 lea ecx,dword ptr ss:[esp+70]
0040353B |. B3 08 mov bl,8
0040353D |. 50 push eax
0040353E |. 51 push ecx
0040353F |. 889C24 E00000>mov byte ptr ss:[esp+E0],bl
00403546 |. E8 A11C0000 call <jmp.&MSVCP60.std::operator+>
0040354B |. 55 push ebp
0040354C |. 55 push ebp
0040354D |. 50 push eax
0040354E |. C68424 EC0000>mov byte ptr ss:[esp+EC],9
00403556 |. E8 55FEFFFF call VIEWER.004033B0
0040355B |. 83C4 30 add esp,30
0040355E |. 8D4C24 54 lea ecx,dword ptr ss:[esp+54]
00403562 |. 889C24 BC0000>mov byte ptr ss:[esp+BC],bl
00403569 |. 6A 01 push 1
0040356B |. FF15 B4624000 call dword ptr ds:[<&MSVCP60.std::basic_strin>;
MSVCP60.std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Tidy
00403571 |. C68424 BC0000>mov byte ptr ss:[esp+BC],7
00403579 |. 6A 01 push 1
0040357B |. 8D4C24 78 lea ecx,dword ptr ss:[esp+78]
0040357F |. FF15 B4624000 call dword ptr ds:[<&MSVCP60.std::basic_strin>;
MSVCP60.std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Tidy
00403585 |. 6A 01 push 1
00403587 |. 8D8C24 980000>lea ecx,dword ptr ss:[esp+98]
0040358E |. C68424 C00000>mov byte ptr ss:[esp+C0],6
00403596 |. FF15 B4624000 call dword ptr ds:[<&MSVCP60.std::basic_strin>;
MSVCP60.std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Tidy
0040359C |. 6A 01 push 1
0040359E |. 8D4C24 68 lea ecx,dword ptr ss:[esp+68]
004035A2 |. C68424 C00000>mov byte ptr ss:[esp+C0],5
004035AA |. FF15 B4624000 call dword ptr ds:[<&MSVCP60.std::basic_strin>;
MSVCP60.std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Tidy
004035B0 |. 6A 01 push 1
004035B2 |. 8D8C24 880000>lea ecx,dword ptr ss:[esp+88]
004035B9 |. C68424 C00000>mov byte ptr ss:[esp+C0],4
004035C1 |. FF15 B4624000 call dword ptr ds:[<&MSVCP60.std::basic_strin>;
MSVCP60.std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Tidy
004035C7 |. 8B4424 28 mov eax,dword ptr ss:[esp+28]
004035CB |. 3BC5 cmp eax,ebp
004035CD |. 74 1C je short VIEWER.004035EB
004035CF |. 8A48 FF mov cl,byte ptr ds:[eax-1]
004035D2 |. 48 dec eax
004035D3 |. 84C9 test cl,cl
004035D5 |. 74 0B je short VIEWER.004035E2
004035D7 |. 80F9 FF cmp cl,0FF
004035DA |. 74 06 je short VIEWER.004035E2
004035DC |. FEC9 dec cl
004035DE |. 8808 mov byte ptr ds:[eax],cl
004035E0 |. EB 09 jmp short VIEWER.004035EB
004035E2 |> 50 push eax ; /block
004035E3 |. E8 42170000 call <jmp.&MFC42.#825> ; \free
004035E8 |. 83C4 04 add esp,4
004035EB |> 8B4424 38 mov eax,dword ptr ss:[esp+38]
004035EF |. 896C24 28 mov dword ptr ss:[esp+28],ebp
004035F3 |. 3BC5 cmp eax,ebp
004035F5 |. 896C24 2C mov dword ptr ss:[esp+2C],ebp
004035F9 |. 896C24 30 mov dword ptr ss:[esp+30],ebp
004035FD |. 74 1D je short VIEWER.0040361C
004035FF |. 8D48 FF lea ecx,dword ptr ds:[eax-1]
00403602 |. 8A40 FF mov al,byte ptr ds:[eax-1]
00403605 |. 84C0 test al,al
00403607 |. 74 0A je short VIEWER.00403613
00403609 |. 3C FF cmp al,0FF
0040360B |. 74 06 je short VIEWER.00403613
0040360D |. FEC8 dec al
0040360F |. 8801 mov byte ptr ds:[ecx],al
00403611 |. EB 09 jmp short VIEWER.0040361C
00403613 |> 51 push ecx ; /block
00403614 |. E8 11170000 call <jmp.&MFC42.#825> ; \free
00403619 |. 83C4 04 add esp,4
0040361C |> 8B4424 48 mov eax,dword ptr ss:[esp+48]
00403620 |. 896C24 38 mov dword ptr ss:[esp+38],ebp
00403624 |. 3BC5 cmp eax,ebp
00403626 |. 896C24 3C mov dword ptr ss:[esp+3C],ebp
0040362A |. 896C24 40 mov dword ptr ss:[esp+40],ebp
0040362E |. 74 1D je short VIEWER.0040364D
00403630 |. 8D48 FF lea ecx,dword ptr ds:[eax-1]
00403633 |. 8A40 FF mov al,byte ptr ds:[eax-1]
00403636 |. 84C0 test al,al
00403638 |. 74 0A je short VIEWER.00403644
0040363A |. 3C FF cmp al,0FF
0040363C |. 74 06 je short VIEWER.00403644
0040363E |. FEC8 dec al
00403640 |. 8801 mov byte ptr ds:[ecx],al
00403642 |. EB 09 jmp short VIEWER.0040364D
00403644 |> 51 push ecx ; /block
00403645 |. E8 E0160000 call <jmp.&MFC42.#825> ; \free
0040364A |. 83C4 04 add esp,4
0040364D |> 8B8424 A80000>mov eax,dword ptr ss:[esp+A8]
00403654 |. 896C24 48 mov dword ptr ss:[esp+48],ebp
00403658 |. 3BC5 cmp eax,ebp
0040365A |. 896C24 4C mov dword ptr ss:[esp+4C],ebp
0040365E |. 896C24 50 mov dword ptr ss:[esp+50],ebp
00403662 |. 74 1D je short VIEWER.00403681
00403664 |. 8D48 FF lea ecx,dword ptr ds:[eax-1]
00403667 |. 8A40 FF mov al,byte ptr ds:[eax-1]
0040366A |. 84C0 test al,al
0040366C |. 74 0A je short VIEWER.00403678
0040366E |. 3C FF cmp al,0FF
00403670 |. 74 06 je short VIEWER.00403678
00403672 |. FEC8 dec al
00403674 |. 8801 mov byte ptr ds:[ecx],al
00403676 |. EB 09 jmp short VIEWER.00403681
00403678 |> 51 push ecx ; /block
00403679 |. E8 AC160000 call <jmp.&MFC42.#825> ; \free
0040367E |. 83C4 04 add esp,4
00403681 |> 8B4C24 18 mov ecx,dword ptr ss:[esp+18]
00403685 |. 5F pop edi
00403686 |. 5E pop esi
00403687 |. 3BCD cmp ecx,ebp
00403689 |. 5D pop ebp
0040368A |. 5B pop ebx
0040368B |. 74 31 je short VIEWER.004036BE
0040368D |. 8A41 FF mov al,byte ptr ds:[ecx-1]
00403690 |. 84C0 test al,al
00403692 |. 74 20 je short VIEWER.004036B4
00403694 |. 3C FF cmp al,0FF
00403696 |. 74 1C je short VIEWER.004036B4
00403698 |. FEC8 dec al
0040369A |. 8841 FF mov byte ptr ds:[ecx-1],al
0040369D |. 32C0 xor al,al
0040369F |. 8B8C24 A40000>mov ecx,dword ptr ss:[esp+A4]
004036A6 |. 64:890D 00000>mov dword ptr fs:[0],ecx
004036AD |. 81C4 B0000000 add esp,0B0
004036B3 |. C3 retn
004036B4 |> 49 dec ecx
004036B5 |. 51 push ecx ; /block
004036B6 |. E8 6F160000 call <jmp.&MFC42.#825> ; \free
004036BB |. 83C4 04 add esp,4
004036BE |> 8B8C24 A40000>mov ecx,dword ptr ss:[esp+A4]
004036C5 |. 32C0 xor al,al
004036C7 |. 64:890D 00000>mov dword ptr fs:[0],ecx
004036CE |. 81C4 B0000000 add esp,0B0
004036D4 \. C3 retn
004036D5 90 nop
|