0045EE00 /$ 83EC 24 sub esp, 24
0045EE03 |. 53 push ebx
0045EE04 |. 55 push ebp
0045EE05 |. 56 push esi
0045EE06 |. 57 push edi
0045EE07 |. 6A 03 push 3 ; /Arg1 = 00000003
0045EE09 |. 8BD9 mov ebx, ecx ; |
0045EE0B |. E8 80CD1F00 call 0065BB90 ; \213.0065BB90
0045EE10 |. 8B83 100B0000 mov eax, dword ptr [ebx+B10]
0045EE16 |. 83C4 04 add esp, 4
0045EE19 |. 85C0 test eax, eax
0045EE1B |. A1 B4A99100 mov eax, dword ptr [91A9B4]
0045EE20 |. 8B48 1C mov ecx, dword ptr [eax+1C]
0045EE23 |. 8B51 08 mov edx, dword ptr [ecx+8]
0045EE26 |. 0F84 B2000000 je 0045EEDE ; 213.0045EEDE
0045EE2C |. 8B83 C4070000 mov eax, dword ptr [ebx+7C4]
0045EE32 |. 8B6A 1C mov ebp, dword ptr [edx+1C]
0045EE35 |. 85C0 test eax, eax
0045EE37 |. 74 0E je short 0045EE47 ; 213.0045EE47
0045EE39 |. 78 0C js short 0045EE47 ; 213.0045EE47
0045EE3B |. 3B83 40020000 cmp eax, dword ptr [ebx+240]
0045EE41 |. 74 04 je short 0045EE47 ; 213.0045EE47
0045EE43 |. 8BF8 mov edi, eax
0045EE45 |. EB 02 jmp short 0045EE49 ; 213.0045EE49
0045EE47 |> 33FF xor edi, edi
0045EE49 |> 57 push edi ; /Arg1
0045EE4A |. 8BCD mov ecx, ebp ; |
0045EE4C |. E8 6FD11000 call 0056BFC0 ; \213.0056BFC0
0045EE51 |. 8BF0 mov esi, eax
0045EE53 |. 85F6 test esi, esi
0045EE55 |. 0F84 2C010000 je 0045EF87 ; 213.0045EF87
0045EE5B |. 3BF7 cmp esi, edi
0045EE5D |. 74 1A je short 0045EE79 ; 213.0045EE79
0045EE5F |. 89B3 C8070000 mov dword ptr [ebx+7C8], esi
0045EE65 |. A1 B4A99100 mov eax, dword ptr [91A9B4]
0045EE6A |. 56 push esi ; /Arg1
0045EE6B |. 8B48 20 mov ecx, dword ptr [eax+20] ; |
0045EE6E |. 81C1 D4000000 add ecx, 0D4 ; |
0045EE74 |. E8 C7CF1100 call 0057BE40 ; \213.0057BE40
0045EE79 |> 6A 00 push 0
0045EE7B |. 56 push esi
0045EE7C |. 8BCD mov ecx, ebp
0045EE7E |. E8 2D0B1000 call 0055F9B0 ; 213.0055F9B0
0045EE83 |. 8BF0 mov esi, eax
0045EE85 |. 85F6 test esi, esi
0045EE87 |. 0F84 FA000000 je 0045EF87 ; 213.0045EF87
0045EE8D |. 8BCE mov ecx, esi
0045EE8F |. E8 AC1B0200 call 00480A40 ; 213.00480A40
0045EE94 |. D940 10 fld dword ptr [eax+10]
0045EE97 |. DCC0 fadd st, st
0045EE99 |. 8D4C24 10 lea ecx, dword ptr [esp+10]
0045EE9D |. 6A 03 push 3
0045EE9F |. 51 push ecx
0045EEA0 |. 8D4E 0C lea ecx, dword ptr [esi+C]
0045EEA3 |. D95C24 34 fstp dword ptr [esp+34]
0045EEA7 |. E8 D4FAFBFF call 0041E980 ; 213.0041E980
0045EEAC |. D94424 10 fld dword ptr [esp+10]
0045EEB0 |. D95C24 1C fstp dword ptr [esp+1C]
0045EEB4 |. D94424 14 fld dword ptr [esp+14]
0045EEB8 |. D84424 2C fadd dword ptr [esp+2C]
0045EEBC |. 8B15 B4A99100 mov edx, dword ptr [91A9B4] ; 213.0091E488
0045EEC2 |. D95C24 20 fstp dword ptr [esp+20]
0045EEC6 |. D94424 18 fld dword ptr [esp+18]
0045EECA |. D95C24 24 fstp dword ptr [esp+24]
0045EECE |. 8B42 1C mov eax, dword ptr [edx+1C]
0045EED1 |. 8D5424 1C lea edx, dword ptr [esp+1C]
0045EED5 |. 52 push edx
0045EED6 |. 8B48 04 mov ecx, dword ptr [eax+4]
0045EED9 |. E9 9D000000 jmp 0045EF7B ; 213.0045EF7B
0045EEDE |> 8BBB C4070000 mov edi, dword ptr [ebx+7C4]
0045EEE4 |. 8B6A 20 mov ebp, dword ptr [edx+20]
0045EEE7 |. 85FF test edi, edi
0045EEE9 |. 79 08 jns short 0045EEF3 ; 213.0045EEF3
0045EEEB |. F7C7 00000040 test edi, 40000000
0045EEF1 |. 74 02 je short 0045EEF5 ; 213.0045EEF5
0045EEF3 |> 33FF xor edi, edi
0045EEF5 |> 57 push edi ; /Arg1
0045EEF6 |. 8BCD mov ecx, ebp ; |
0045EEF8 |. E8 03491000 call 00563800 ; \213.00563800
0045EEFD |. 8BF0 mov esi, eax
0045EEFF |. 85F6 test esi, esi
0045EF01 |. 0F84 80000000 je 0045EF87 ; 213.0045EF87
0045EF07 |. 3BF7 cmp esi, edi
0045EF09 |. 74 1A je short 0045EF25 ; 213.0045EF25
0045EF0B |. 89B3 C8070000 mov dword ptr [ebx+7C8], esi
0045EF11 |. A1 B4A99100 mov eax, dword ptr [91A9B4]
0045EF16 |. 56 push esi ; /Arg1
0045EF17 |. 8B48 20 mov ecx, dword ptr [eax+20] ; |
0045EF1A |. 81C1 D4000000 add ecx, 0D4 ; |
0045EF20 |. E8 1BCF1100 call 0057BE40 ; \213.0057BE40
0045EF25 |> 6A 00 push 0
0045EF27 |. 56 push esi
0045EF28 |. 8BCD mov ecx, ebp
0045EF2A |. E8 810A1000 call 0055F9B0 ; 213.0055F9B0
0045EF2F |. 8BF0 mov esi, eax
0045EF31 |. 85F6 test esi, esi
0045EF33 |. 74 52 je short 0045EF87 ; 213.0045EF87
0045EF35 |. 8BCE mov ecx, esi
0045EF37 |. E8 C4890200 call 00487900 ; 213.00487900
0045EF3C |. D940 10 fld dword ptr [eax+10]
0045EF3F |. DCC0 fadd st, s
这里是个call 怎么知道这个call有没有参数,有的话有几个参数
004587C1 > \50 push eax ; /Arg1; Case 145 of switch 00458277
004587C2 . E8 39660000 call 0045EE00 ; \213.0045EE00
004587C7 . B0 01 mov al, 1
004587C9 . 5E pop esi
004587CA . C2 0400 retn 4
这个是调用这个call的地方
[课程]Android-CTF解题方法汇总！
