我有个程序，读取一个xml配置文件调用用户的信息，但用户名称部分是加密的，想添加用户但不知加密的方式，在软件里面是显示没加密的信息，那应该只要软件里面的读取方式就应该可以制作，现在OD检测到比较接近的地方，但汇编不怎么行，有人能说说这三段的解析吗？先谢了
005547A6 |. 68 849F6A00 push 006A9F84 ; setupinfor.xml
005547AB |. 8D8D 20FFFFFF lea ecx, dword ptr [ebp-E0]
005547B1 |. FF15 C45E6D00 call dword ptr [<&MFC71D.#310>] ; MFC71D.#310
005547B7 |. 3BF4 cmp esi, esp
005547B9 |. E8 88CEF8FF call 004E1646
005547BE |. C645 FC 01 mov byte ptr [ebp-4], 1
005547C2 |. 8B85 2CFFFFFF mov eax, dword ptr [ebp-D4]
005547C8 |. 83C8 01 or eax, 1
005547CB |. 8985 2CFFFFFF mov dword ptr [ebp-D4], eax
005547D1 |. 8D8D 20FFFFFF lea ecx, dword ptr [ebp-E0]
005547D7 |. 51 push ecx
005547D8 |. 8B8D 14FFFFFF mov ecx, dword ptr [ebp-EC]
005547DE |. E8 15AEF8FF call 004DF5F8
005547E3 |. 8985 00FFFFFF mov dword ptr [ebp-100], eax
005547E9 |. EB 0A jmp short 005547F5
005547EB |> C785 00FFFFFF>mov dword ptr [ebp-100], 0
005547F5 |> 8B95 00FFFFFF mov edx, dword ptr [ebp-100]
005547FB |. 8995 08FFFFFF mov dword ptr [ebp-F8], edx
00554801 |. C745 FC 02000>mov dword ptr [ebp-4], 2
00554808 |. 8B85 08FFFFFF mov eax, dword ptr [ebp-F8]
0055480E |. A3 642E6D00 mov dword ptr [6D2E64], eax
00554813 |. C745 FC FFFFF>mov dword ptr [ebp-4], -1
0055481A |. 8B8D 2CFFFFFF mov ecx, dword ptr [ebp-D4]
00554820 |. 83E1 01 and ecx, 1
00554823 |. 74 1C je short 00554841
00554825 |. 83A5 2CFFFFFF>and dword ptr [ebp-D4], FFFFFFFE
0055482C |. 8BF4 mov esi, esp
0055482E |. 8D8D 20FFFFFF lea ecx, dword ptr [ebp-E0]
00554834 |. FF15 20656D00 call dword ptr [<&MFC71D.#674>] ; MFC71D.#673
0055483A |. 3BF4 cmp esi, esp
0055483C |. E8 05CEF8FF call 004E1646
00554841 |> B9 682E6D00 mov ecx, 006D2E68
00554846 |. E8 F2EAF8FF call 004E333D
0055484B |> A1 642E6D00 mov eax, dword ptr [6D2E64]
00554850 |. 8B4D F4 mov ecx, dword ptr [ebp-C]
00554853 |. 64:890D 00000>mov dword ptr fs:[0], ecx
0055485A |. 5F pop edi
0055485B |. 5E pop esi
0055485C |. 5B pop ebx
0055485D |. 81C4 00010000 add esp, 100
00554863 |. 3BEC cmp ebp, esp
00554865 |. E8 DCCDF8FF call 004E1646
0055486A |. 8BE5 mov esp, ebp
0055486C |. 5D pop ebp
0055486D \. C3 retn
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
00553BBF |. 68 849F6A00 push 006A9F84 ; setupinfor.xml
00553BC4 |. 8B4D EC mov ecx, dword ptr [ebp-14]
00553BC7 |. FF15 B05E6D00 call dword ptr [<&MFC71D.#1157>] ; MFC71D.#1157
00553BCD |. 3BF4 cmp esi, esp
00553BCF |. E8 72DAF8FF call 004E1646
00553BD4 |. EB 16 jmp short 00553BEC
00553BD6 |> 8BF4 mov esi, esp
00553BD8 |. 8B45 08 mov eax, dword ptr [ebp+8]
00553BDB |. 50 push eax
00553BDC |. 8B4D EC mov ecx, dword ptr [ebp-14]
00553BDF |. FF15 A45E6D00 call dword ptr [<&MFC71D.#1153>] ; MFC71D.#1153
00553BE5 |. 3BF4 cmp esi, esp
00553BE7 |. E8 5ADAF8FF call 004E1646
00553BEC |> 8B45 EC mov eax, dword ptr [ebp-14]
00553BEF |. C740 68 01000>mov dword ptr [eax+68], 1
00553BF6 |. 8B4D EC mov ecx, dword ptr [ebp-14]
00553BF9 |. E8 1FD1F8FF call 004E0D1D
00553BFE |. C745 FC FFFFF>mov dword ptr [ebp-4], -1
00553C05 |. 8B45 EC mov eax, dword ptr [ebp-14]
00553C08 |. 8B4D F4 mov ecx, dword ptr [ebp-C]
00553C0B |. 64:890D 00000>mov dword ptr fs:[0], ecx
00553C12 |. 5F pop edi
00553C13 |. 5E pop esi
00553C14 |. 5B pop ebx
00553C15 |. 81C4 EC000000 add esp, 0EC
00553C1B |. 3BEC cmp ebp, esp
00553C1D |. E8 24DAF8FF call 004E1646
00553C22 |. 8BE5 mov esp, ebp
00553C24 |. 5D pop ebp
00553C25 \. C2 0400 retn 4
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
00554A10 /> \55 push ebp
00554A11 |. 8BEC mov ebp, esp
00554A13 |. 6A FF push -1
00554A15 |. 68 06FE6800 push 0068FE06 ; SE 处理程序安装
00554A1A |. 64:A1 0000000>mov eax, dword ptr fs:[0]
00554A20 |. 50 push eax
00554A21 |. 64:8925 00000>mov dword ptr fs:[0], esp
00554A28 |. 81EC 60010000 sub esp, 160
00554A2E |. 53 push ebx
00554A2F |. 56 push esi
00554A30 |. 57 push edi
00554A31 |. 51 push ecx
00554A32 |. 8DBD 94FEFFFF lea edi, dword ptr [ebp-16C]
00554A38 |. B9 58000000 mov ecx, 58
00554A3D |. B8 CCCCCCCC mov eax, CCCCCCCC
00554A42 |. F3:AB rep stos dword ptr es:[edi]
00554A44 |. 59 pop ecx
00554A45 |. 894D EC mov dword ptr [ebp-14], ecx
00554A48 |. 8D4D D8 lea ecx, dword ptr [ebp-28]
00554A4B |. E8 2FC5F8FF call 004E0F7F
00554A50 |. C745 FC 00000>mov dword ptr [ebp-4], 0
00554A57 |. 68 06766A00 push 006A7606
00554A5C |. 8B45 EC mov eax, dword ptr [ebp-14]
00554A5F |. 50 push eax
00554A60 |. E8 2DB7F8FF call 004E0192
00554A65 |. 83C4 08 add esp, 8
00554A68 |. 0FB6C8 movzx ecx, al
00554A6B |. 85C9 test ecx, ecx
00554A6D |. 74 24 je short 00554A93
00554A6F |. C785 A0FEFFFF>mov dword ptr [ebp-160], 0
00554A79 |. C745 FC FFFFF>mov dword ptr [ebp-4], -1
00554A80 |. 8D4D D8 lea ecx, dword ptr [ebp-28]
00554A83 |. E8 9789F8FF call 004DD41F
00554A88 |. 8B85 A0FEFFFF mov eax, dword ptr [ebp-160]
00554A8E |. E9 38020000 jmp 00554CCB
00554A93 |> 51 push ecx
00554A94 |. 8BCC mov ecx, esp
00554A96 |. 89A5 ACFEFFFF mov dword ptr [ebp-154], esp
00554A9C |. 8BF4 mov esi, esp
00554A9E |. 8B45 EC mov eax, dword ptr [ebp-14]
00554AA1 |. 50 push eax
00554AA2 |. FF15 7C5C6D00 call dword ptr [<&MFC71D.#303>] ; MFC71D.#303
00554AA8 |. 3BF4 cmp esi, esp
00554AAA |. E8 97CBF8FF call 004E1646
00554AAF |. 8985 98FEFFFF mov dword ptr [ebp-168], eax
00554AB5 |. 8D4D D8 lea ecx, dword ptr [ebp-28]
00554AB8 |. E8 09A6F8FF call 004DF0C6
00554ABD |. 8985 94FEFFFF mov dword ptr [ebp-16C], eax
00554AC3 |. 83BD 94FEFFFF>cmp dword ptr [ebp-16C], 0
00554ACA |. 75 24 jnz short 00554AF0
00554ACC |. C785 B8FEFFFF>mov dword ptr [ebp-148], 0
00554AD6 |. C745 FC FFFFF>mov dword ptr [ebp-4], -1
00554ADD |. 8D4D D8 lea ecx, dword ptr [ebp-28]
00554AE0 |. E8 3A89F8FF call 004DD41F
00554AE5 |. 8B85 B8FEFFFF mov eax, dword ptr [ebp-148]
00554AEB |. E9 DB010000 jmp 00554CCB
00554AF0 |> 8BF4 mov esi, esp
00554AF2 |. 68 00A06A00 push 006AA000 ; userinfrotable
00554AF7 |. 8D8D C4FEFFFF lea ecx, dword ptr [ebp-13C]
00554AFD |. FF15 C45E6D00 call dword ptr [<&MFC71D.#310>] ; MFC71D.#310
00554B03 |. 3BF4 cmp esi, esp
00554B05 |. E8 3CCBF8FF call 004E1646
00554B0A |. C645 FC 01 mov byte ptr [ebp-4], 1
00554B0E |. 8D85 C4FEFFFF lea eax, dword ptr [ebp-13C]
00554B14 |. 50 push eax
00554B15 |. 8D4D D8 lea ecx, dword ptr [ebp-28]
00554B18 |. 51 push ecx
00554B19 |. 8B4D EC mov ecx, dword ptr [ebp-14]
00554B1C |. E8 A7BCF8FF call 004E07C8
00554B21 |. C645 FC 00 mov byte ptr [ebp-4], 0
00554B25 |. 8BF4 mov esi, esp
00554B27 |. 8D8D C4FEFFFF lea ecx, dword ptr [ebp-13C]
00554B2D |. FF15 20656D00 call dword ptr [<&MFC71D.#674>] ; MFC71D.#673
00554B33 |. 3BF4 cmp esi, esp
00554B35 |. E8 0CCBF8FF call 004E1646
00554B3A |. 8BF4 mov esi, esp
00554B3C |. 68 F49F6A00 push 006A9FF4 ; ruletable
00554B41 |. 8D8D D0FEFFFF lea ecx, dword ptr [ebp-130]
00554B47 |. FF15 C45E6D00 call dword ptr [<&MFC71D.#310>] ; MFC71D.#310
00554B4D |. 3BF4 cmp esi, esp
00554B4F |. E8 F2CAF8FF call 004E1646
00554B54 |. C645 FC 02 mov byte ptr [ebp-4], 2
00554B58 |. 8D85 D0FEFFFF lea eax, dword ptr [ebp-130]
00554B5E |. 50 push eax
00554B5F |. 8D4D D8 lea ecx, dword ptr [ebp-28]
00554B62 |. 51 push ecx
00554B63 |. 8B4D EC mov ecx, dword ptr [ebp-14]
00554B66 |. E8 7C93F8FF call 004DDEE7
00554B6B |. C645 FC 00 mov byte ptr [ebp-4], 0
00554B6F |. 8BF4 mov esi, esp
00554B71 |. 8D8D D0FEFFFF lea ecx, dword ptr [ebp-130]
00554B77 |. FF15 20656D00 call dword ptr [<&MFC71D.#674>] ; MFC71D.#673
00554B7D |. 3BF4 cmp esi, esp
00554B7F |. E8 C2CAF8FF call 004E1646
00554B84 |. 8BF4 mov esi, esp
00554B86 |. 68 DC9F6A00 push 006A9FDC ; suitedpolicytable
00554B8B |. 8D8D DCFEFFFF lea ecx, dword ptr [ebp-124]
00554B91 |. FF15 C45E6D00 call dword ptr [<&MFC71D.#310>] ; MFC71D.#310
00554B97 |. 3BF4 cmp esi, esp
00554B99 |. E8 A8CAF8FF call 004E1646
00554B9E |. C645 FC 03 mov byte ptr [ebp-4], 3
00554BA2 |. 8D85 DCFEFFFF lea eax, dword ptr [ebp-124]
00554BA8 |. 50 push eax
00554BA9 |. 8D4D D8 lea ecx, dword ptr [ebp-28]
00554BAC |. 51 push ecx
00554BAD |. 8B4D EC mov ecx, dword ptr [ebp-14]
00554BB0 |. E8 0CE1F8FF call 004E2CC1
00554BB5 |. C645 FC 00 mov byte ptr [ebp-4], 0
00554BB9 |. 8BF4 mov esi, esp
00554BBB |. 8D8D DCFEFFFF lea ecx, dword ptr [ebp-124]
00554BC1 |. FF15 20656D00 call dword ptr [<&MFC71D.#674>] ; MFC71D.#673
00554BC7 |. 3BF4 cmp esi, esp
00554BC9 |. E8 78CAF8FF call 004E1646
00554BCE |. 8BF4 mov esi, esp
00554BD0 |. 68 C89F6A00 push 006A9FC8 ; betpolicytable
00554BD5 |. 8D8D E8FEFFFF lea ecx, dword ptr [ebp-118]
00554BDB |. FF15 C45E6D00 call dword ptr [<&MFC71D.#310>] ; MFC71D.#310
00554BE1 |. 3BF4 cmp esi, esp
00554BE3 |. E8 5ECAF8FF call 004E1646
00554BE8 |. C645 FC 04 mov byte ptr [ebp-4], 4
00554BEC |. 8D85 E8FEFFFF lea eax, dword ptr [ebp-118]
00554BF2 |. 50 push eax
00554BF3 |. 8D4D D8 lea ecx, dword ptr [ebp-28]
00554BF6 |. 51 push ecx
00554BF7 |. 8B4D EC mov ecx, dword ptr [ebp-14]
00554BFA |. E8 92E3F8FF call 004E2F91
00554BFF |. C645 FC 00 mov byte ptr [ebp-4], 0
00554C03 |. 8BF4 mov esi, esp
00554C05 |. 8D8D E8FEFFFF lea ecx, dword ptr [ebp-118]
00554C0B |. FF15 20656D00 call dword ptr [<&MFC71D.#674>] ; MFC71D.#673
00554C11 |. 3BF4 cmp esi, esp
00554C13 |. E8 2ECAF8FF call 004E1646
00554C18 |. 8BF4 mov esi, esp
00554C1A |. 68 B09F6A00 push 006A9FB0 ; repairpolicytable
00554C1F |. 8D8D F4FEFFFF lea ecx, dword ptr [ebp-10C]
00554C25 |. FF15 C45E6D00 call dword ptr [<&MFC71D.#310>] ; MFC71D.#310
00554C2B |. 3BF4 cmp esi, esp
00554C2D |. E8 14CAF8FF call 004E1646
00554C32 |. C645 FC 05 mov byte ptr [ebp-4], 5
00554C36 |. 8D85 F4FEFFFF lea eax, dword ptr [ebp-10C]
00554C3C |. 50 push eax
00554C3D |. 8D4D D8 lea ecx, dword ptr [ebp-28]
00554C40 |. 51 push ecx
00554C41 |. 8B4D EC mov ecx, dword ptr [ebp-14]
00554C44 |. E8 6495F8FF call 004DE1AD
00554C49 |. C645 FC 00 mov byte ptr [ebp-4], 0
00554C4D |. 8BF4 mov esi, esp
00554C4F |. 8D8D F4FEFFFF lea ecx, dword ptr [ebp-10C]
00554C55 |. FF15 20656D00 call dword ptr [<&MFC71D.#674>] ; MFC71D.#673
00554C5B |. 3BF4 cmp esi, esp
00554C5D |. E8 E4C9F8FF call 004E1646
00554C62 |. 8BF4 mov esi, esp
00554C64 |. 68 989F6A00 push 006A9F98 ; advancedpolicytable
00554C69 |. 8D8D 00FFFFFF lea ecx, dword ptr [ebp-100]
00554C6F |. FF15 C45E6D00 call dword ptr [<&MFC71D.#310>] ; MFC71D.#310
00554C75 |. 3BF4 cmp esi, esp
00554C77 |. E8 CAC9F8FF call 004E1646
00554C7C |. C645 FC 06 mov byte ptr [ebp-4], 6
00554C80 |. 8D85 00FFFFFF lea eax, dword ptr [ebp-100]
00554C86 |. 50 push eax
00554C87 |. 8D4D D8 lea ecx, dword ptr [ebp-28]
00554C8A |. 51 push ecx
00554C8B |. 8B4D EC mov ecx, dword ptr [ebp-14]
00554C8E |. E8 E6D2F8FF call 004E1F79
00554C93 |. C645 FC 00 mov byte ptr [ebp-4], 0
00554C97 |. 8BF4 mov esi, esp
00554C99 |. 8D8D 00FFFFFF lea ecx, dword ptr [ebp-100]
00554C9F |. FF15 20656D00 call dword ptr [<&MFC71D.#674>] ; MFC71D.#673
00554CA5 |. 3BF4 cmp esi, esp
00554CA7 |. E8 9AC9F8FF call 004E1646
00554CAC |. C785 0CFFFFFF>mov dword ptr [ebp-F4], 1
00554CB6 |. C745 FC FFFFF>mov dword ptr [ebp-4], -1
00554CBD |. 8D4D D8 lea ecx, dword ptr [ebp-28]
00554CC0 |. E8 5A87F8FF call 004DD41F
00554CC5 |. 8B85 0CFFFFFF mov eax, dword ptr [ebp-F4]
00554CCB |> 52 push edx
00554CCC |. 8BCD mov ecx, ebp
00554CCE |. 50 push eax
00554CCF |. 8D15 FA4C5500 lea edx, dword ptr [554CFA]
00554CD5 |. E8 C0E3F8FF call 004E309A
00554CDA |. 58 pop eax
00554CDB |. 5A pop edx
00554CDC |. 8B4D F4 mov ecx, dword ptr [ebp-C]
00554CDF |. 64:890D 00000>mov dword ptr fs:[0], ecx
00554CE6 |. 5F pop edi
00554CE7 |. 5E pop esi
00554CE8 |. 5B pop ebx
00554CE9 |. 81C4 6C010000 add esp, 16C
00554CEF |. 3BEC cmp ebp, esp
00554CF1 |. E8 50C9F8FF call 004E1646
00554CF6 |. 8BE5 mov esp, ebp
00554CF8 |. 5D pop ebp
00554CF9 \. C3 retn
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
