这里是原来的按钮过程开始处
004501D4 /. 55 push ebp ; 验证注册码按钮过程
004501D5 |. 8BEC mov ebp, esp
004501D7 |. 51 push ecx
004501D8 |? 53 push ebx
004501D9 |. 8BDA mov ebx, edx
004501DB |? 8945 FC mov dword ptr [ebp-4], eax
004501DE |. 8B45 FC mov eax, dword ptr [ebp-4]
004501E1 |? E8 DA40FBFF call 004042C0
004501E6 |? 33C0 xor eax, eax
004501E8 |? 55 push ebp
004501E9 |? 68 19024500 push 00450219
004501EE |? 64:FF30 push dword ptr fs:[eax]
004501F1 |? 64:8920 mov dword ptr fs:[eax], esp
004501F4 |? 8BC3 mov eax, ebx
004501F6 |? B9 2C024500 mov ecx, 0045022C
004501FB |. 8B55 FC mov edx, dword ptr [ebp-4]
004501FE |? E8 193FFBFF call 0040411C
00450203 |? 33C0 xor eax, eax
00450205 5A pop edx
00450206 59 pop ecx
00450207 |. 59 pop ecx
00450208 |? 64:8910 mov dword ptr fs:[eax], edx
0045020B |? 68 20024500 push 00450220
00450210 |? 8D45 FC lea eax, dword ptr [ebp-4]
00450213 |? E8 F83BFBFF call 00403E10
00450218 |. C3 retn
00450219 |?^ E9 F635FBFF jmp 00403814
0045021E |.^ EB F0 jmp short 00450210
00450220 |. 5B pop ebx
00450221 |? 59 pop ecx
00450222 |? 5D pop ebp
00450223 |> C3 retn
00450224 |? FFFF ??? ; 未知命令
00450226 |. FFFF ??? ; 未知命令
00450228 |. 0100 add dword ptr [eax], eax
0045022A |? 0000 add byte ptr [eax], al
0045022C |? 3000 xor byte ptr [eax], al
0045022E |? 0000 add byte ptr [eax], al
这里是修改原代码后的新的按钮过程开始处
00450230 |> 55 push ebp
00450231 |? 8BEC mov ebp, esp
00450233 |. 6A 00 push 0
00450235 |? 6A 00 push 0
00450237 |? 53 push ebx
00450238 \. 8BD8 mov ebx, eax
0045023A ? 33C0 xor eax, eax
0045023C ? 55 push ebp
0045023D ? 68 AA024500 push 004502AA
00450242 . 64:FF30 push dword ptr fs:[eax]
00450245 ? 64:8920 mov dword ptr fs:[eax], esp
00450248 . 8D55F88B dd 8BF8558D
0045024C . 83 FC 02 00 0>ascii "凕
00450253 F1 db F1
00450254 . FD std
00450255 . FF8B 45F88D55 dec dword ptr [ebx+558DF845]
0045025B ? FC cld
0045025C ? E8 73FFFFFF call 004501D4
00450261 ? 8B45 FC mov eax, dword ptr [ebp-4]
00450264 ? BA C0024500 mov edx, 004502C0 ; ASCII "abcdef0"
00450269 ? E8 AE3FFBFF call 0040421C
0045026E . 75 0F jnz short 0045027F
00450270 . B2 01 mov dl, 1
00450272 ? 8B83 04030000 mov eax, dword ptr [ebx+304]
00450278 > 8B08 mov ecx, dword ptr [eax] ; RET 用作跳转到 00450280
0045027A ? FF51 64 call dword ptr [ecx+64]
0045027D ? EB 0D jmp short 0045028C
0045027F ? 33D2 xor edx, edx
00450281 . 8B83 04030000 mov eax, dword ptr [ebx+304]
00450287 ? 8B08 mov ecx, dword ptr [eax]
00450289 ? FF51 64 call dword ptr [ecx+64]
0045028C . 33C0 xor eax, eax
0045028E ? 5A pop edx
0045028F . 59 pop ecx
00450290 ? 59 pop ecx
00450291 . 64:8910 mov dword ptr fs:[eax], edx
00450294 ? 68 B1024500 push 004502B1 ; ASCII "[YY]?
00450299 ? 8D45 F8 lea eax, dword ptr [ebp-8]
0045029C ? E8 6F3BFBFF call 00403E10
004502A1 . 8D45 FC lea eax, dword ptr [ebp-4]
004502A4 ? E8 673BFBFF call 00403E10
004502A9 ? C3 retn
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
