[求助]w32Dasm静态分析,找不到被何处调用-付费问答-看雪-安全社区|安全招聘|kanxue.com

[旧帖] [求助]w32Dasm静态分析,找不到被何处调用 0.00雪花

发表于: 2008-7-28 11:18 4008

[旧帖] [求助]w32Dasm静态分析,找不到被何处调用 0.00雪花

Lovelost

2008-7-28 11:18

4008

小弟初学破解，在用W32DASM分析一个试用版软件时，有一个时间及数量的限制，但找不到是何处在调用这里，请各位大侠给点指导，不胜感激！代码如下：

* Referenced by a CALL at Address:
|:00416F2F
|
:0041410C 55                   push ebp
:0041410D 8BEC                   mov ebp, esp
:0041410F B930000000             mov ecx, 00000030

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414119(C)
|
:00414114 6A00                   push 00000000
:00414116 6A00                   push 00000000
:00414118 49                   dec ecx
:00414119 75F9                   jne 00414114
:0041411B 51                   push ecx
:0041411C 33C0                   xor eax, eax
:0041411E 55                   push ebp
:0041411F 68D9464100             push 004146D9
:00414124 64FF30                push dword ptr fs:[eax]
:00414127 648920                mov dword ptr fs:[eax], esp
:0041412A C745FC01000000       mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041418A(C)
|
:00414131 8D85F4FEFFFF          lea eax, dword ptr [ebp+FFFFFEF4]
:00414137 6B55FC15             imul edx, dword ptr [ebp-04], 00000015
:0041413B 81C2B3225A00          add edx, 005A22B3
:00414141 E852D2FEFF             call 00401398
:00414146 8B85F4FEFFFF          mov eax, dword ptr [ebp+FFFFFEF4]
:0041414C 8D95F8FEFFFF          lea edx, dword ptr [ebp+FFFFFEF8]
:00414152 E88DFFFFFF             call 004140E4
:00414157 8B95F8FEFFFF          mov edx, dword ptr [ebp+FFFFFEF8]
:0041415D 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:00414163 B9FF000000             mov ecx, 000000FF
:00414168 E843D2FEFF             call 004013B0
:0041416D 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:00414173 6B45FC15             imul eax, dword ptr [ebp-04], 00000015
:00414177 05B3225A00             add eax, 005A22B3
:0041417C B114                   mov cl, 14
:0041417E E8C5CFFEFF             call 00401148
:00414183 FF45FC                inc [ebp-04]
:00414186 837DFC0A             cmp dword ptr [ebp-04], 0000000A
:0041418A 75A5                   jne 00414131
:0041418C C745FC01000000       mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004141F8(C)
|
:00414193 8D85ECFEFFFF          lea eax, dword ptr [ebp+FFFFFEEC]
:00414199 8B55FC                mov edx, dword ptr [ebp-04]
:0041419C 8BCA                   mov ecx, edx
:0041419E C1E204                shl edx, 04
:004141A1 03D1                   add edx, ecx
:004141A3 81C277235A00          add edx, 005A2377
:004141A9 E8EAD1FEFF             call 00401398
:004141AE 8B85ECFEFFFF          mov eax, dword ptr [ebp+FFFFFEEC]
:004141B4 8D95F0FEFFFF          lea edx, dword ptr [ebp+FFFFFEF0]
:004141BA E825FFFFFF             call 004140E4
:004141BF 8B95F0FEFFFF          mov edx, dword ptr [ebp+FFFFFEF0]
:004141C5 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:004141CB B9FF000000             mov ecx, 000000FF
:004141D0 E8DBD1FEFF             call 004013B0
:004141D5 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:004141DB 8B45FC                mov eax, dword ptr [ebp-04]
:004141DE 8BC8                   mov ecx, eax
:004141E0 C1E004                shl eax, 04
:004141E3 03C1                   add eax, ecx
:004141E5 0577235A00             add eax, 005A2377
:004141EA B110                   mov cl, 10
:004141EC E857CFFEFF             call 00401148
:004141F1 FF45FC                inc [ebp-04]
:004141F4 837DFC03             cmp dword ptr [ebp-04], 00000003
:004141F8 7599                   jne 00414193
:004141FA 33C0                   xor eax, eax
:004141FC 8945FC                mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414258(C)
|
:004141FF 8D85E4FEFFFF          lea eax, dword ptr [ebp+FFFFFEE4]
:00414205 6B55FC15             imul edx, dword ptr [ebp-04], 00000015
:00414209 81C2AC235A00          add edx, 005A23AC
:0041420F E884D1FEFF             call 00401398
:00414214 8B85E4FEFFFF          mov eax, dword ptr [ebp+FFFFFEE4]
:0041421A 8D95E8FEFFFF          lea edx, dword ptr [ebp+FFFFFEE8]
:00414220 E8BFFEFFFF             call 004140E4
:00414225 8B95E8FEFFFF          mov edx, dword ptr [ebp+FFFFFEE8]
:0041422B 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:00414231 B9FF000000             mov ecx, 000000FF
:00414236 E875D1FEFF             call 004013B0
:0041423B 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:00414241 6B45FC15             imul eax, dword ptr [ebp-04], 00000015
:00414245 05AC235A00             add eax, 005A23AC
:0041424A B114                   mov cl, 14
:0041424C E8F7CEFEFF             call 00401148
:00414251 FF45FC                inc [ebp-04]
:00414254 837DFC05             cmp dword ptr [ebp-04], 00000005
:00414258 75A5                   jne 004141FF
:0041425A C745FC01000000       mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004142C6(C)
|
:00414261 8D85DCFEFFFF          lea eax, dword ptr [ebp+FFFFFEDC]
:00414267 8B55FC                mov edx, dword ptr [ebp-04]
:0041426A 8BCA                   mov ecx, edx
:0041426C C1E203                shl edx, 03
:0041426F 2BD1                   sub edx, ecx
:00414271 81C211245A00          add edx, 005A2411
:00414277 E81CD1FEFF             call 00401398
:0041427C 8B85DCFEFFFF          mov eax, dword ptr [ebp+FFFFFEDC]
:00414282 8D95E0FEFFFF          lea edx, dword ptr [ebp+FFFFFEE0]
:00414288 E857FEFFFF             call 004140E4
:0041428D 8B95E0FEFFFF          mov edx, dword ptr [ebp+FFFFFEE0]
:00414293 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:00414299 B9FF000000             mov ecx, 000000FF
:0041429E E80DD1FEFF             call 004013B0
:004142A3 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:004142A9 8B45FC                mov eax, dword ptr [ebp-04]
:004142AC 8BC8                   mov ecx, eax
:004142AE C1E003                shl eax, 03
:004142B1 2BC1                   sub eax, ecx
:004142B3 0511245A00             add eax, 005A2411
:004142B8 B106                   mov cl, 06
:004142BA E889CEFEFF             call 00401148
:004142BF FF45FC                inc [ebp-04]
:004142C2 837DFC11             cmp dword ptr [ebp-04], 00000011
:004142C6 7599                   jne 00414261
:004142C8 C745FC01000000       mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041432C(C)
|
:004142CF 8D85D4FEFFFF          lea eax, dword ptr [ebp+FFFFFED4]
:004142D5 8B55FC                mov edx, dword ptr [ebp-04]
:004142D8 8D1492                lea edx, dword ptr [edx+4*edx]
:004142DB 81C283245A00          add edx, 005A2483
:004142E1 E8B2D0FEFF             call 00401398
:004142E6 8B85D4FEFFFF          mov eax, dword ptr [ebp+FFFFFED4]
:004142EC 8D95D8FEFFFF          lea edx, dword ptr [ebp+FFFFFED8]
:004142F2 E8EDFDFFFF             call 004140E4
:004142F7 8B95D8FEFFFF          mov edx, dword ptr [ebp+FFFFFED8]
:004142FD 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:00414303 B9FF000000             mov ecx, 000000FF
:00414308 E8A3D0FEFF             call 004013B0
:0041430D 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:00414313 8B45FC                mov eax, dword ptr [ebp-04]
:00414316 8D0480                lea eax, dword ptr [eax+4*eax]
:00414319 0583245A00             add eax, 005A2483
:0041431E B104                   mov cl, 04
:00414320 E823CEFEFF             call 00401148
:00414325 FF45FC                inc [ebp-04]
:00414328 837DFC09             cmp dword ptr [ebp-04], 00000009
:0041432C 75A1                   jne 004142CF
:0041432E C745FC01000000       mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041438E(C)
|
:00414335 8D85CCFEFFFF          lea eax, dword ptr [ebp+FFFFFECC]
:0041433B 6B55FC0B             imul edx, dword ptr [ebp-04], 0000000B
:0041433F 81C2A5245A00          add edx, 005A24A5
:00414345 E84ED0FEFF             call 00401398
:0041434A 8B85CCFEFFFF          mov eax, dword ptr [ebp+FFFFFECC]
:00414350 8D95D0FEFFFF          lea edx, dword ptr [ebp+FFFFFED0]
:00414356 E889FDFFFF             call 004140E4
:0041435B 8B95D0FEFFFF          mov edx, dword ptr [ebp+FFFFFED0]
:00414361 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:00414367 B9FF000000             mov ecx, 000000FF
:0041436C E83FD0FEFF             call 004013B0
:00414371 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:00414377 6B45FC0B             imul eax, dword ptr [ebp-04], 0000000B
:0041437B 05A5245A00             add eax, 005A24A5
:00414380 B10A                   mov cl, 0A
:00414382 E8C1CDFEFF             call 00401148
:00414387 FF45FC                inc [ebp-04]
:0041438A 837DFC03             cmp dword ptr [ebp-04], 00000003
:0041438E 75A5                   jne 00414335
:00414390 C745FC01000000       mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414401(C)
|
:00414397 8D85C0FEFFFF          lea eax, dword ptr [ebp+FFFFFEC0]
:0041439D 6B55FC0B             imul edx, dword ptr [ebp-04], 0000000B
:004143A1 81C2BD245A00          add edx, 005A24BD
:004143A7 E8ECCFFEFF             call 00401398
:004143AC 8B85C0FEFFFF          mov eax, dword ptr [ebp+FFFFFEC0]
:004143B2 8D95C4FEFFFF          lea edx, dword ptr [ebp+FFFFFEC4]
:004143B8 E827FDFFFF             call 004140E4
:004143BD 8B85C4FEFFFF          mov eax, dword ptr [ebp+FFFFFEC4]
:004143C3 8D95C8FEFFFF          lea edx, dword ptr [ebp+FFFFFEC8]
:004143C9 E86E210000             call 0041653C
:004143CE 8B95C8FEFFFF          mov edx, dword ptr [ebp+FFFFFEC8]
:004143D4 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:004143DA B9FF000000             mov ecx, 000000FF
:004143DF E8CCCFFEFF             call 004013B0
:004143E4 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:004143EA 6B45FC0B             imul eax, dword ptr [ebp-04], 0000000B
:004143EE 05BD245A00             add eax, 005A24BD
:004143F3 B10A                   mov cl, 0A
:004143F5 E84ECDFEFF             call 00401148
:004143FA FF45FC                inc [ebp-04]
:004143FD 837DFC03             cmp dword ptr [ebp-04], 00000003
:00414401 7594                   jne 00414397
:00414403 C745FC01000000       mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414478(C)
|
:0041440A 8D85B4FEFFFF          lea eax, dword ptr [ebp+FFFFFEB4]
:00414410 8B55FC                mov edx, dword ptr [ebp-04]
:00414413 8D14D2                lea edx, dword ptr [edx+8*edx]
:00414416 81C2D7245A00          add edx, 005A24D7
:0041441C E877CFFEFF             call 00401398
:00414421 8B85B4FEFFFF          mov eax, dword ptr [ebp+FFFFFEB4]
:00414427 8D95B8FEFFFF          lea edx, dword ptr [ebp+FFFFFEB8]
:0041442D E8B2FCFFFF             call 004140E4
:00414432 8B85B8FEFFFF          mov eax, dword ptr [ebp+FFFFFEB8]
:00414438 8D95BCFEFFFF          lea edx, dword ptr [ebp+FFFFFEBC]
:0041443E E8F9200000             call 0041653C
:00414443 8B95BCFEFFFF          mov edx, dword ptr [ebp+FFFFFEBC]
:00414449 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:0041444F B9FF000000             mov ecx, 000000FF
:00414454 E857CFFEFF             call 004013B0
:00414459 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:0041445F 8B45FC                mov eax, dword ptr [ebp-04]
:00414462 8D04C0                lea eax, dword ptr [eax+8*eax]
:00414465 05D7245A00             add eax, 005A24D7
:0041446A B108                   mov cl, 08
:0041446C E8D7CCFEFF             call 00401148
:00414471 FF45FC                inc [ebp-04]
:00414474 837DFC04             cmp dword ptr [ebp-04], 00000004
:00414478 7590                   jne 0041440A
:0041447A C745FC01000000       mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004144DE(C)
|
:00414481 8D85ACFEFFFF          lea eax, dword ptr [ebp+FFFFFEAC]
:00414487 8B55FC                mov edx, dword ptr [ebp-04]
:0041448A 8D14D2                lea edx, dword ptr [edx+8*edx]
:0041448D 81C2F3245A00          add edx, 005A24F3
:00414493 E800CFFEFF             call 00401398
:00414498 8B85ACFEFFFF          mov eax, dword ptr [ebp+FFFFFEAC]
:0041449E 8D95B0FEFFFF          lea edx, dword ptr [ebp+FFFFFEB0]
:004144A4 E83BFCFFFF             call 004140E4
:004144A9 8B95B0FEFFFF          mov edx, dword ptr [ebp+FFFFFEB0]
:004144AF 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:004144B5 B9FF000000             mov ecx, 000000FF
:004144BA E8F1CEFEFF             call 004013B0
:004144BF 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:004144C5 8B45FC                mov eax, dword ptr [ebp-04]
:004144C8 8D04C0                lea eax, dword ptr [eax+8*eax]
:004144CB 05F3245A00             add eax, 005A24F3
:004144D0 B108                   mov cl, 08
:004144D2 E871CCFEFF             call 00401148
:004144D7 FF45FC                inc [ebp-04]
:004144DA 837DFC05             cmp dword ptr [ebp-04], 00000005
:004144DE 75A1                   jne 00414481
:004144E0 C745FC01000000       mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041454C(C)
|
:004144E7 8D85A4FEFFFF          lea eax, dword ptr [ebp+FFFFFEA4]
:004144ED 8B55FC                mov edx, dword ptr [ebp-04]
:004144F0 8BCA                   mov ecx, edx
:004144F2 C1E205                shl edx, 05
:004144F5 2BD1                   sub edx, ecx
:004144F7 81C201255A00          add edx, 005A2501
:004144FD E896CEFEFF             call 00401398
:00414502 8B85A4FEFFFF          mov eax, dword ptr [ebp+FFFFFEA4]
:00414508 8D95A8FEFFFF          lea edx, dword ptr [ebp+FFFFFEA8]
:0041450E E8D1FBFFFF             call 004140E4
:00414513 8B95A8FEFFFF          mov edx, dword ptr [ebp+FFFFFEA8]
:00414519 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:0041451F B9FF000000             mov ecx, 000000FF
:00414524 E887CEFEFF             call 004013B0
:00414529 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:0041452F 8B45FC                mov eax, dword ptr [ebp-04]
:00414532 8BC8                   mov ecx, eax
:00414534 C1E005                shl eax, 05
:00414537 2BC1                   sub eax, ecx
:00414539 0501255A00             add eax, 005A2501
:0041453E B11E                   mov cl, 1E
:00414540 E803CCFEFF             call 00401148
:00414545 FF45FC                inc [ebp-04]
:00414548 837DFC07             cmp dword ptr [ebp-04], 00000007
:0041454C 7599                   jne 004144E7
:0041454E 8D859CFEFFFF          lea eax, dword ptr [ebp+FFFFFE9C]
:00414554 BADC255A00             mov edx, 005A25DC
:00414559 E83ACEFEFF             call 00401398
:0041455E 8B859CFEFFFF          mov eax, dword ptr [ebp+FFFFFE9C]
:00414564 8D95A0FEFFFF          lea edx, dword ptr [ebp+FFFFFEA0]
:0041456A E875FBFFFF             call 004140E4
:0041456F 8B95A0FEFFFF          mov edx, dword ptr [ebp+FFFFFEA0]
:00414575 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:0041457B B9FF000000             mov ecx, 000000FF
:00414580 E82BCEFEFF             call 004013B0
:00414585 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:0041458B B8DC255A00             mov eax, 005A25DC
:00414590 B128                   mov cl, 28
:00414592 E8B1CBFEFF             call 00401148
:00414597 8D8594FEFFFF          lea eax, dword ptr [ebp+FFFFFE94]

* Possible StringData Ref from Data Obj ->"本软件已经超过使用时间"
                              |
:0041459D BA08265A00             mov edx, 005A2608
:004145A2 E8F1CDFEFF             call 00401398
:004145A7 8B8594FEFFFF          mov eax, dword ptr [ebp+FFFFFE94]
:004145AD 8D9598FEFFFF          lea edx, dword ptr [ebp+FFFFFE98]
:004145B3 E82CFBFFFF             call 004140E4
:004145B8 8B9598FEFFFF          mov edx, dword ptr [ebp+FFFFFE98]
:004145BE 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:004145C4 B9FF000000             mov ecx, 000000FF
:004145C9 E8E2CDFEFF             call 004013B0
:004145CE 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]

* Possible StringData Ref from Data Obj ->"本软件已经超过使用时间"
                              |
:004145D4 B808265A00             mov eax, 005A2608
:004145D9 B128                   mov cl, 28
:004145DB E868CBFEFF             call 00401148
:004145E0 8D858CFEFFFF          lea eax, dword ptr [ebp+FFFFFE8C]

* Possible StringData Ref from Data Obj ->";用户数超过系统容量, 系统可能无法正常工作
请联"
                                    ->"系系统升级事宜"
                              |
:004145E6 BA34265A00             mov edx, 005A2634
:004145EB E8A8CDFEFF             call 00401398
:004145F0 8B858CFEFFFF          mov eax, dword ptr [ebp+FFFFFE8C]
:004145F6 8D9590FEFFFF          lea edx, dword ptr [ebp+FFFFFE90]
:004145FC E8E3FAFFFF             call 004140E4
:00414601 8B9590FEFFFF          mov edx, dword ptr [ebp+FFFFFE90]
:00414607 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:0041460D B9FF000000             mov ecx, 000000FF
:00414612 E899CDFEFF             call 004013B0
:00414617 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]

* Possible StringData Ref from Data Obj ->";用户数超过系统容量, 系统可能无法正常工作
请联"
                                    ->"系系统升级事宜"
                              |
:0041461D B834265A00             mov eax, 005A2634
:00414622 B164                   mov cl, 64
:00414624 E81FCBFEFF             call 00401148
:00414629 8D8584FEFFFF          lea eax, dword ptr [ebp+FFFFFE84]

* Possible StringData Ref from Data Obj ->"注意"
                              |
:0041462F BA9C265A00             mov edx, 005A269C
:00414634 E85FCDFEFF             call 00401398
:00414639 8B8584FEFFFF          mov eax, dword ptr [ebp+FFFFFE84]
:0041463F 8D9588FEFFFF          lea edx, dword ptr [ebp+FFFFFE88]
:00414645 E89AFAFFFF             call 004140E4
:0041464A 8B9588FEFFFF          mov edx, dword ptr [ebp+FFFFFE88]
:00414650 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:00414656 B9FF000000             mov ecx, 000000FF
:0041465B E850CDFEFF             call 004013B0
:00414660 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]

* Possible StringData Ref from Data Obj ->"注意"
                              |
:00414666 B89C265A00             mov eax, 005A269C
:0041466B B10A                   mov cl, 0A
:0041466D E8D6CAFEFF             call 00401148
:00414672 8D857CFEFFFF          lea eax, dword ptr [ebp+FFFFFE7C]
:00414678 BAA8265A00             mov edx, 005A26A8
:0041467D E816CDFEFF             call 00401398
:00414682 8B857CFEFFFF          mov eax, dword ptr [ebp+FFFFFE7C]
:00414688 8D9580FEFFFF          lea edx, dword ptr [ebp+FFFFFE80]
:0041468E E851FAFFFF             call 004140E4
:00414693 8B9580FEFFFF          mov edx, dword ptr [ebp+FFFFFE80]
:00414699 8D85FCFEFFFF          lea eax, dword ptr [ebp+FFFFFEFC]
:0041469F B9FF000000             mov ecx, 000000FF
:004146A4 E807CDFEFF             call 004013B0
:004146A9 8D95FCFEFFFF          lea edx, dword ptr [ebp+FFFFFEFC]
:004146AF B8A8265A00             mov eax, 005A26A8
:004146B4 B10A                   mov cl, 0A
:004146B6 E88DCAFEFF             call 00401148
:004146BB 33C0                   xor eax, eax
:004146BD 5A                   pop edx
:004146BE 59                   pop ecx
:004146BF 59                   pop ecx
:004146C0 648910                mov dword ptr fs:[eax], edx
:004146C3 68E0464100             push 004146E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004146DE(U)
|
:004146C8 8D857CFEFFFF          lea eax, dword ptr [ebp+FFFFFE7C]
:004146CE BA20000000             mov edx, 00000020
:004146D3 E888CCFEFF             call 00401360
:004146D8 C3                   ret

:004146D9 E922CCFEFF             jmp 00401300
:004146DE EBE8                   jmp 004146C8
:004146E0 8BE5                   mov esp, ebp
:004146E2 5D                   pop ebp
:004146E3 C3                   ret

:004146E4 55                   push ebp
:004146E5 8BEC                   mov ebp, esp
:004146E7 33C0                   xor eax, eax
:004146E9 55                   push ebp
:004146EA 6809474100             push 00414709
:004146EF 64FF30                push dword ptr fs:[eax]
:004146F2 648920                mov dword ptr fs:[eax], esp
:004146F5 FF053C195C00          inc dword ptr [005C193C]
:004146FB 33C0                   xor eax, eax
:004146FD 5A                   pop edx
:004146FE 59                   pop ecx
:004146FF 59                   pop ecx
:00414700 648910                mov dword ptr fs:[eax], edx
:00414703 6810474100             push 00414710

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041470E(U)
|
:00414708 C3                   ret
:00414709 E9F2CBFEFF             jmp 00401300
:0041470E EBF8                   jmp 00414708
:00414710 5D                   pop ebp
:00414711 C3                   ret

[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)

收藏・0

免费・0

支持

最新回复 (7)
lixupeng 雪币： 561 活跃值： (124) 能力值： ( LV2，RANK：10 ) 在线值：发帖 31 回帖 1636 粉丝 0 关注私信	lixupeng 2 楼看看这里　http://www.pediy.com/tutorial/chap5/Chap5-1-6.htm http://www.pediy.com/tutorial/chap6/Chap6-1-3.htm 2008-7-28 13:35 0
Lovelost 雪币： 197 活跃值： (434) 能力值： ( LV2，RANK：10 ) 在线值：发帖 10 回帖 93 粉丝 2 关注私信	Lovelost 3 楼非常感谢,不过应该不是这个,现在我所遇到的限制是时间还没到,但时我在增加用户时用户数起过限制了,软件总是在跳"用户数超过系统容量"。这个软件共有很多处“用户数超过系统容量”，其他的地方我都找到调用比较的地方，把用户容量修改了，只有这一处我找不到是哪里比较后跳过来的。能不能给我多一点提示，谢谢！ 2008-7-28 13:49 0
kyuanzhao 雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 2 回帖 14 粉丝 0 关注私信	kyuanzhao 4 楼好象在绕圈子 2008-7-28 14:18 0
Lovelost 雪币： 197 活跃值： (434) 能力值： ( LV2，RANK：10 ) 在线值：发帖 10 回帖 93 粉丝 2 关注私信	Lovelost 5 楼是呀,我找不到有其他什么地方调用这段，不知道哪位大侠能再给些指导？不胜感激！ 2008-7-28 14:28 0
Lovelost 雪币： 197 活跃值： (434) 能力值： ( LV2，RANK：10 ) 在线值：发帖 10 回帖 93 粉丝 2 关注私信	Lovelost 6 楼请各位大侠不吝赐教，谢谢！ 2008-7-28 16:10 0
Lovelost 雪币： 197 活跃值： (434) 能力值： ( LV2，RANK：10 ) 在线值：发帖 10 回帖 93 粉丝 2 关注私信	Lovelost 7 楼是不是我的问题太初级了?高手都不屑回答啊？ 2008-7-29 10:38 0
Lovelost 雪币： 197 活跃值： (434) 能力值： ( LV2，RANK：10 ) 在线值：发帖 10 回帖 93 粉丝 2 关注私信	Lovelost 8 楼还有哪位大侠能给我些提示吗?谢谢了! 2008-8-4 14:21 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

Lovelost

发帖

回帖

RANK

关注

私信

他的文章

[下载]IDA_v9.0.24.0807 [beta (Expires on 2037-12-31)] 3051
[求助].NET程序脱壳 27574
[求助]圣天狗授权信息 9776
[下载]innounp 5.24 4073
[讨论]软件的数量限制问题 5591

关于我们

联系我们

企业服务

看雪公众号

最新回复 (7)
lixupeng 雪币： 561 活跃值： (124) 能力值： ( LV2，RANK：10 ) 在线值：发帖 31 回帖 1636 粉丝 0 关注私信	lixupeng 2 楼看看这里　http://www.pediy.com/tutorial/chap5/Chap5-1-6.htm http://www.pediy.com/tutorial/chap6/Chap6-1-3.htm 2008-7-28 13:35 0
Lovelost 雪币： 197 活跃值： (434) 能力值： ( LV2，RANK：10 ) 在线值：发帖 10 回帖 93 粉丝 2 关注私信	Lovelost 3 楼非常感谢,不过应该不是这个,现在我所遇到的限制是时间还没到,但时我在增加用户时用户数起过限制了,软件总是在跳"用户数超过系统容量"。这个软件共有很多处“用户数超过系统容量”，其他的地方我都找到调用比较的地方，把用户容量修改了，只有这一处我找不到是哪里比较后跳过来的。能不能给我多一点提示，谢谢！ 2008-7-28 13:49 0
kyuanzhao 雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 2 回帖 14 粉丝 0 关注私信	kyuanzhao 4 楼好象在绕圈子 2008-7-28 14:18 0
Lovelost 雪币： 197 活跃值： (434) 能力值： ( LV2，RANK：10 ) 在线值：发帖 10 回帖 93 粉丝 2 关注私信	Lovelost 5 楼是呀,我找不到有其他什么地方调用这段，不知道哪位大侠能再给些指导？不胜感激！ 2008-7-28 14:28 0
Lovelost 雪币： 197 活跃值： (434) 能力值： ( LV2，RANK：10 ) 在线值：发帖 10 回帖 93 粉丝 2 关注私信	Lovelost 6 楼请各位大侠不吝赐教，谢谢！ 2008-7-28 16:10 0
Lovelost 雪币： 197 活跃值： (434) 能力值： ( LV2，RANK：10 ) 在线值：发帖 10 回帖 93 粉丝 2 关注私信	Lovelost 7 楼是不是我的问题太初级了?高手都不屑回答啊？ 2008-7-29 10:38 0
Lovelost 雪币： 197 活跃值： (434) 能力值： ( LV2，RANK：10 ) 在线值：发帖 10 回帖 93 粉丝 2 关注私信	Lovelost 8 楼还有哪位大侠能给我些提示吗?谢谢了! 2008-8-4 14:21 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复