[求助]用OD跟一个Call。。怎么都变这样了？-付费问答-看雪-安全社区|安全招聘|kanxue.com

[旧帖] [求助]用OD跟一个Call。。怎么都变这样了？ 0.00雪花

发表于: 2008-8-16 10:53 4422

[旧帖] [求助]用OD跟一个Call。。怎么都变这样了？ 0.00雪花

applelove

2008-8-16 10:53

4422

0041846E $- FF25 14254400 JMP DWORD PTR DS:[<&MFC42u.#1165>]    ;  MFC42u.#1165
00418474 $- FF25 10254400 JMP DWORD PTR DS:[<&MFC42u.#4704>]    ;  MFC42u.#4704
0041847A $- FF25 0C254400 JMP DWORD PTR DS:[<&MFC42u.#4050>]    ;  MFC42u.#4050
00418480 .- FF25 08254400 JMP DWORD PTR DS:[<&MFC42u.#1764>]    ;  MFC42u.#1764
00418486 .- FF25 04254400 JMP DWORD PTR DS:[<&MFC42u.#1764>]    ;  MFC42u.#1764
0041848C .- FF25 00254400 JMP DWORD PTR DS:[<&MFC42u.#1672>]    ;  MFC42u.#2501
00418492 .- FF25 FC244400 JMP DWORD PTR DS:[<&MFC42u.#1016>]    ;  MFC42u.#4564
00418498 .- FF25 F8244400 JMP DWORD PTR DS:[<&MFC42u.#1672>]    ;  MFC42u.#2501
0041849E .- FF25 F4244400 JMP DWORD PTR DS:[<&MFC42u.#1672>]    ;  MFC42u.#2501
004184A4 .- FF25 F0244400 JMP DWORD PTR DS:[<&MFC42u.#1016>]    ;  MFC42u.#4564
004184AA .- FF25 EC244400 JMP DWORD PTR DS:[<&MFC42u.#1768>]    ;  MFC42u.#4662
004184B0 .- FF25 88244400 JMP DWORD PTR DS:[<&MFC42u.#4395>]    ;  MFC42u.#4395
004184B6 .- FF25 0C234400 JMP DWORD PTR DS:[<&MFC42u.#5286>]    ;  MFC42u.#5286
004184BC .- FF25 74244400 JMP DWORD PTR DS:[<&MFC42u.#3397>]    ;  MFC42u.#3397
004184C2 .- FF25 7C244400 JMP DWORD PTR DS:[<&MFC42u.#4418>]    ;  MFC42u.#4418
004184C8 .- FF25 78244400 JMP DWORD PTR DS:[<&MFC42u.#3634>]    ;  MFC42u.#3634
004184CE $- FF25 D4224400 JMP DWORD PTR DS:[<&MFC42u.#692>]       ;  MFC42u.#692
004184D4 $- FF25 70244400 JMP DWORD PTR DS:[<&MFC42u.#567>]       ;  MFC42u.#567
004184DA $- FF25 08234400 JMP DWORD PTR DS:[<&MFC42u.#3087>]    ;  MFC42u.#3087
004184E0 $- FF25 98214400 JMP DWORD PTR DS:[<&MFC42u.#6193>]    ;  MFC42u.#6193
004184E6 $- FF25 9C214400 JMP DWORD PTR DS:[<&MFC42u.#755>]       ;  MFC42u.#755
004184EC $- FF25 58214400 JMP DWORD PTR DS:[<&MFC42u.#2746>]    ;  MFC42u.#2746
004184F2 $- FF25 54214400 JMP DWORD PTR DS:[<&MFC42u.#470>]       ;  MFC42u.#470
004184F8 .- FF25 4C214400 JMP DWORD PTR DS:[<&MFC42u.#4667>]    ;  MFC42u.#4667
004184FE .- FF25 5C214400 JMP DWORD PTR DS:[<&MFC42u.#3614>]    ;  MFC42u.#3614
00418504 .- FF25 70214400 JMP DWORD PTR DS:[<&MFC42u.#6371>]    ;  MFC42u.#6371
0041850A .- FF25 60214400 JMP DWORD PTR DS:[<&MFC42u.#4480>]    ;  MFC42u.#4480
00418510 .- FF25 64214400 JMP DWORD PTR DS:[<&MFC42u.#2546>]    ;  MFC42u.#2546
00418516 .- FF25 68214400 JMP DWORD PTR DS:[<&MFC42u.#2504>]    ;  MFC42u.#2504
0041851C .- FF25 6C214400 JMP DWORD PTR DS:[<&MFC42u.#5727>]    ;  MFC42u.#5727
00418522 .- FF25 78214400 JMP DWORD PTR DS:[<&MFC42u.#3917>]    ;  MFC42u.#3917
00418528 .- FF25 74214400 JMP DWORD PTR DS:[<&MFC42u.#1089>]    ;  MFC42u.#1089
0041852E .- FF25 A0214400 JMP DWORD PTR DS:[<&MFC42u.#5193>]    ;  MFC42u.#5193
00418534 .- FF25 7C214400 JMP DWORD PTR DS:[<&MFC42u.#2388>]    ;  MFC42u.#2388
0041853A .- FF25 80214400 JMP DWORD PTR DS:[<&MFC42u.#3341>]    ;  MFC42u.#3341
00418540 .- FF25 84214400 JMP DWORD PTR DS:[<&MFC42u.#5296>]    ;  MFC42u.#5296
00418546 .- FF25 88214400 JMP DWORD PTR DS:[<&MFC42u.#5298>]    ;  MFC42u.#5298
0041854C .- FF25 8C214400 JMP DWORD PTR DS:[<&MFC42u.#2717>]    ;  MFC42u.#2717
00418552 .- FF25 90214400 JMP DWORD PTR DS:[<&MFC42u.#4074>]    ;  MFC42u.#4074
00418558 .- FF25 94214400 JMP DWORD PTR DS:[<&MFC42u.#4692>]    ;  MFC42u.#4692
0041855E .- FF25 F4214400 JMP DWORD PTR DS:[<&MFC42u.#5303>]    ;  MFC42u.#5303
00418564 .- FF25 AC214400 JMP DWORD PTR DS:[<&MFC42u.#5285>]    ;  MFC42u.#5285
0041856A .- FF25 F8214400 JMP DWORD PTR DS:[<&MFC42u.#5710>]    ;  MFC42u.#5710
00418570 .- FF25 A4214400 JMP DWORD PTR DS:[<&MFC42u.#4616>]    ;  MFC42u.#4616
00418576 .- FF25 A8214400 JMP DWORD PTR DS:[<&MFC42u.#3733>]    ;  MFC42u.#3733
0041857C $- FF25 08224400 JMP DWORD PTR DS:[<&MFC42u.#815>]       ;  MFC42u.#815
00418582 $- FF25 B0214400 JMP DWORD PTR DS:[<&MFC42u.#561>]       ;  MFC42u.#561
00418588 .- FF25 B4214400 JMP DWORD PTR DS:[<&MFC42u.#3621>]    ;  MFC42u.#3621
0041858E .- FF25 B8214400 JMP DWORD PTR DS:[<&MFC42u.#3658>]    ;  MFC42u.#3658
00418594 $- FF25 BC214400 JMP DWORD PTR DS:[<&MFC42u.#2406>]    ;  MFC42u.#2406
0041859A $- FF25 C0214400 JMP DWORD PTR DS:[<&MFC42u.#6399>]    ;  MFC42u.#6399
004185A0 $- FF25 C4214400 JMP DWORD PTR DS:[<&MFC42u.#6398>]    ;  MFC42u.#6398
004185A6 $- FF25 C8214400 JMP DWORD PTR DS:[<&MFC42u.#809>]       ;  MFC42u.#809
004185AC $- FF25 CC214400 JMP DWORD PTR DS:[<&MFC42u.#801>]       ;  MFC42u.#801
004185B2 $- FF25 D0214400 JMP DWORD PTR DS:[<&MFC42u.#1634>]    ;  MFC42u.#1634
004185B8 $- FF25 D4214400 JMP DWORD PTR DS:[<&MFC42u.#861>]       ;  MFC42u.#861
004185BE $- FF25 D8214400 JMP DWORD PTR DS:[<&MFC42u.#2810>]    ;  MFC42u.#2810
004185C4 $- FF25 DC214400 JMP DWORD PTR DS:[<&MFC42u.#858>]       ;  MFC42u.#858
004185CA $- FF25 E0214400 JMP DWORD PTR DS:[<&MFC42u.#3517>]    ;  MFC42u.#3517
004185D0 $- FF25 E4214400 JMP DWORD PTR DS:[<&MFC42u.#3516>]    ;  MFC42u.#3516
004185D6 $- FF25 E8214400 JMP DWORD PTR DS:[<&MFC42u.#6113>]    ;  MFC42u.#6113
004185DC $- FF25 EC214400 JMP DWORD PTR DS:[<&MFC42u.#6211>]    ;  MFC42u.#6211
004185E2 $- FF25 F0214400 JMP DWORD PTR DS:[<&MFC42u.#1761>]    ;  MFC42u.#1761
004185E8 $- FF25 20224400 JMP DWORD PTR DS:[<&MFC42u.#2859>]    ;  MFC42u.#2859
004185EE $- FF25 B0224400 JMP DWORD PTR DS:[<&MFC42u.#2078>]    ;  MFC42u.#2078
004185F4 $- FF25 FC214400 JMP DWORD PTR DS:[<&MFC42u.#535>]       ;  MFC42u.#535
004185FA $- FF25 00224400 JMP DWORD PTR DS:[<&MFC42u.#2914>]    ;  MFC42u.#2914
00418600 $- FF25 04224400 JMP DWORD PTR DS:[<&MFC42u.#941>]       ;  MFC42u.#941
00418606 $- FF25 B4224400 JMP DWORD PTR DS:[<&MFC42u.#2606>]    ;  MFC42u.#2606
0041860C $- FF25 0C224400 JMP DWORD PTR DS:[<&MFC42u.#5706>]    ;  MFC42u.#5706
00418612 $- FF25 10224400 JMP DWORD PTR DS:[<&MFC42u.#5568>]    ;  MFC42u.#5568
00418618 $- FF25 14224400 JMP DWORD PTR DS:[<&MFC42u.#2910>]    ;  MFC42u.#2910
0041861E $- FF25 18224400 JMP DWORD PTR DS:[<&MFC42u.#6504>]    ;  MFC42u.#6504
00418624 $- FF25 1C224400 JMP DWORD PTR DS:[<&MFC42u.#616>]       ;  MFC42u.#616
0041862A $- FF25 D8224400 JMP DWORD PTR DS:[<&MFC42u.#793>]       ;  MFC42u.#793
00418630 $- FF25 24224400 JMP DWORD PTR DS:[<&MFC42u.#4272>]    ;  MFC42u.#4272
00418636 $- FF25 28224400 JMP DWORD PTR DS:[<&MFC42u.#5679>]    ;  MFC42u.#5679
0041863C $- FF25 2C224400 JMP DWORD PTR DS:[<&MFC42u.#1172>]    ;  MFC42u.#1172
00418642 $- FF25 30224400 JMP DWORD PTR DS:[<&MFC42u.#6279>]    ;  MFC42u.#6279
00418648 $- FF25 34224400 JMP DWORD PTR DS:[<&MFC42u.#6278>]    ;  MFC42u.#6278
0041864E $- FF25 38224400 JMP DWORD PTR DS:[<&MFC42u.#541>]       ;  MFC42u.#541
00418654 $- FF25 3C224400 JMP DWORD PTR DS:[<&MFC42u.#556>]       ;  MFC42u.#556
0041865A $- FF25 40224400 JMP DWORD PTR DS:[<&MFC42u.#1088>]    ;  MFC42u.#1088
00418660 $- FF25 44224400 JMP DWORD PTR DS:[<&MFC42u.#2114>]    ;  MFC42u.#2114
00418666 $- FF25 48224400 JMP DWORD PTR DS:[<&MFC42u.#6195>]    ;  MFC42u.#6195
0041866C $- FF25 4C224400 JMP DWORD PTR DS:[<&MFC42u.#6451>]    ;  MFC42u.#6451
00418672 $- FF25 50224400 JMP DWORD PTR DS:[<&MFC42u.#4219>]    ;  MFC42u.#4219
00418678 $- FF25 54224400 JMP DWORD PTR DS:[<&MFC42u.#2634>]    ;  MFC42u.#2634
0041867E .- FF25 58224400 JMP DWORD PTR DS:[<&MFC42u.#3566>]    ;  MFC42u.#3566
00418684 $- FF25 5C224400 JMP DWORD PTR DS:[<&MFC42u.#640>]       ;  MFC42u.#640
0041868A $- FF25 60224400 JMP DWORD PTR DS:[<&MFC42u.#2397>]    ;  MFC42u.#2397
00418690 $- FF25 64224400 JMP DWORD PTR DS:[<&MFC42u.#6168>]    ;  MFC42u.#6168
00418696 $- FF25 68224400 JMP DWORD PTR DS:[<&MFC42u.#5783>]    ;  MFC42u.#5783
0041869C $- FF25 6C224400 JMP DWORD PTR DS:[<&MFC42u.#5871>]    ;  MFC42u.#5871
004186A2 $- FF25 70224400 JMP DWORD PTR DS:[<&MFC42u.#5781>]    ;  MFC42u.#5781
004186A8 $- FF25 74224400 JMP DWORD PTR DS:[<&MFC42u.#1633>]    ;  MFC42u.#1633
004186AE $- FF25 78224400 JMP DWORD PTR DS:[<&MFC42u.#323>]       ;  MFC42u.#323
004186B4 $- FF25 7C224400 JMP DWORD PTR DS:[<&MFC42u.#6139>]    ;  MFC42u.#6139
004186BA .- FF25 80224400 JMP DWORD PTR DS:[<&MFC42u.#1672>]    ;  MFC42u.#2501
004186C0 .- FF25 84224400 JMP DWORD PTR DS:[<&MFC42u.#1672>]    ;  MFC42u.#2501
004186C6 .- FF25 88224400 JMP DWORD PTR DS:[<&MFC42u.#3649>]    ;  MFC42u.#3649
004186CC $- FF25 8C224400 JMP DWORD PTR DS:[<&MFC42u.#2430>]    ;  MFC42u.#2430
004186D2 $- FF25 90224400 JMP DWORD PTR DS:[<&MFC42u.#2371>]    ;  MFC42u.#2371
004186D8 $- FF25 94224400 JMP DWORD PTR DS:[<&MFC42u.#6266>]    ;  MFC42u.#6266
004186DE $- FF25 98224400 JMP DWORD PTR DS:[<&MFC42u.#2858>]    ;  MFC42u.#2858
004186E4 $- FF25 9C224400 JMP DWORD PTR DS:[<&MFC42u.#1637>]    ;  MFC42u.#1637
004186EA $- FF25 A0224400 JMP DWORD PTR DS:[<&MFC42u.#1143>]    ;  MFC42u.#1143
004186F0 $- FF25 A4224400 JMP DWORD PTR DS:[<&MFC42u.#3753>]    ;  MFC42u.#3753
004186F6 $- FF25 A8224400 JMP DWORD PTR DS:[<&MFC42u.#3403>]    ;  MFC42u.#3403
004186FC $- FF25 AC224400 JMP DWORD PTR DS:[<&MFC42u.#3222>]    ;  MFC42u.#3222
00418702 $- FF25 60254400 JMP DWORD PTR DS:[<&MFC42u.#3050>]    ;  MFC42u.#3050
00418708 $- FF25 64254400 JMP DWORD PTR DS:[<&MFC42u.#2806>]    ;  MFC42u.#2806
0041870E $- FF25 B8224400 JMP DWORD PTR DS:[<&MFC42u.#929>]       ;  MFC42u.#929
00418714 $- FF25 BC224400 JMP DWORD PTR DS:[<&MFC42u.#3223>]    ;  MFC42u.#3223
0041871A $- FF25 C0224400 JMP DWORD PTR DS:[<&MFC42u.#3404>]    ;  MFC42u.#3404
00418720 $- FF25 C4224400 JMP DWORD PTR DS:[<&MFC42u.#3754>]    ;  MFC42u.#3754
00418726 $- FF25 C8224400 JMP DWORD PTR DS:[<&MFC42u.#920>]       ;  MFC42u.#920
0041872C $- FF25 CC224400 JMP DWORD PTR DS:[<&MFC42u.#5930>]    ;  MFC42u.#5930
00418732 $- FF25 D0224400 JMP DWORD PTR DS:[<&MFC42u.#5604>]    ;  MFC42u.#5604
00418738 $- FF25 80244400 JMP DWORD PTR DS:[<&MFC42u.#5857>]    ;  MFC42u.#5857
0041873E $- FF25 84244400 JMP DWORD PTR DS:[<&MFC42u.#935>]       ;  MFC42u.#935
00418744 $- FF25 DC224400 JMP DWORD PTR DS:[<&MFC42u.#832>]       ;  MFC42u.#832
0041874A $- FF25 E0224400 JMP DWORD PTR DS:[<&MFC42u.#919>]       ;  MFC42u.#919
00418750 .- FF25 E4224400 JMP DWORD PTR DS:[<&MFC42u.#6733>]    ;  MFC42u.#6733
00418756 $- FF25 E8224400 JMP DWORD PTR DS:[<&MFC42u.#1672>]    ;  MFC42u.#2501
0041875C .- FF25 EC224400 JMP DWORD PTR DS:[<&MFC42u.#1016>]    ;  MFC42u.#4564
00418762 .- FF25 F0224400 JMP DWORD PTR DS:[<&MFC42u.#1672>]    ;  MFC42u.#2501
00418768 .- FF25 F4224400 JMP DWORD PTR DS:[<&MFC42u.#1672>]    ;  MFC42u.#2501
0041876E .- FF25 F8224400 JMP DWORD PTR DS:[<&MFC42u.#4392>]    ;  MFC42u.#4392
00418774 .- FF25 FC224400 JMP DWORD PTR DS:[<&MFC42u.#3577>]    ;  MFC42u.#3577
0041877A $- FF25 00234400 JMP DWORD PTR DS:[<&MFC42u.#6912>]    ;  MFC42u.#6912
00418780 $- FF25 04234400 JMP DWORD PTR DS:[<&MFC42u.#5947>]    ;  MFC42u.#5947
00418786 $- FF25 58254400 JMP DWORD PTR DS:[<&MFC42u.#6910>]    ;  MFC42u.#6910
0041878C $- FF25 5C254400 JMP DWORD PTR DS:[<&MFC42u.#3805>]    ;  MFC42u.#3805
00418792 $- FF25 10234400 JMP DWORD PTR DS:[<&MFC42u.#548>]       ;  MFC42u.#548
00418798 $- FF25 14234400 JMP DWORD PTR DS:[<&MFC42u.#6664>]    ;  MFC42u.#6664
0041879E $- FF25 18234400 JMP DWORD PTR DS:[<&MFC42u.#5929>]    ;  MFC42u.#5929
004187A4 $- FF25 1C234400 JMP DWORD PTR DS:[<&MFC42u.#3875>]    ;  MFC42u.#3875
004187AA $- FF25 20234400 JMP DWORD PTR DS:[<&MFC42u.#3420>]    ;  MFC42u.#3420
004187B0 $- FF25 24234400 JMP DWORD PTR DS:[<&MFC42u.#3049>]    ;  MFC42u.#3049
004187B6 $- FF25 28234400 JMP DWORD PTR DS:[<&MFC42u.#6758>]    ;  MFC42u.#6758
004187BC $- FF25 2C234400 JMP DWORD PTR DS:[<&MFC42u.#3090>]    ;  MFC42u.#3090
004187C2 .- FF25 30234400 JMP DWORD PTR DS:[<&MFC42u.#1672>]    ;  MFC42u.#2501
004187C8 .- FF25 34234400 JMP DWORD PTR DS:[<&MFC42u.#4390>]    ;  MFC42u.#4396
004187CE .- FF25 38234400 JMP DWORD PTR DS:[<&MFC42u.#3635>]    ;  MFC42u.#3635
004187D4 >- FF25 3C234400 JMP DWORD PTR DS:[<&MFC42u.#693>]       ;  MFC42u.#693
004187DA $- FF25 44234400 JMP DWORD PTR DS:[<&MFC42u.#283>]       ;  MFC42u.#283
004187E0 .- FF25 48234400 JMP DWORD PTR DS:[<&MFC42u.#1672>]    ;  MFC42u.#2501
004187E6 .- FF25 4C234400 JMP DWORD PTR DS:[<&MFC42u.#4390>]    ;  MFC42u.#4396
004187EC .- FF25 50234400 JMP DWORD PTR DS:[<&MFC42u.#3569>]    ;  MFC42u.#3569
004187F2 $- FF25 54234400 JMP DWORD PTR DS:[<&MFC42u.#609>]       ;  MFC42u.#609
004187F8 $- FF25 5C234400 JMP DWORD PTR DS:[<&MFC42u.#3871>]    ;  MFC42u.#3871
004187FE $- FF25 60234400 JMP DWORD PTR DS:[<&MFC42u.#2855>]    ;  MFC42u.#2855
00418804 .- FF25 64234400 JMP DWORD PTR DS:[<&MFC42u.#3568>]    ;  MFC42u.#3568
0041880A .- FF25 68234400 JMP DWORD PTR DS:[<&MFC42u.#3688>]    ;  MFC42u.#3688
00418810 $- FF25 6C234400 JMP DWORD PTR DS:[<&MFC42u.#4128>]    ;  MFC42u.#4128
00418816 $- FF25 70234400 JMP DWORD PTR DS:[<&MFC42u.#4292>]    ;  MFC42u.#4292
0041881C $- FF25 74234400 JMP DWORD PTR DS:[<&MFC42u.#5783>]    ;  MFC42u.#5783
00418822 $- FF25 78234400 JMP DWORD PTR DS:[<&MFC42u.#5783>]    ;  MFC42u.#5783
00418828 $- FF25 7C234400 JMP DWORD PTR DS:[<&MFC42u.#6868>]    ;  MFC42u.#6868
0041882E $- FF25 80234400 JMP DWORD PTR DS:[<&MFC42u.#3915>]    ;  MFC42u.#3915
00418834 $- FF25 84234400 JMP DWORD PTR DS:[<&MFC42u.#2559>]    ;  MFC42u.#2559
0041883A $- FF25 88234400 JMP DWORD PTR DS:[<&MFC42u.#2637>]    ;  MFC42u.#2637
00418840 $- FF25 8C234400 JMP DWORD PTR DS:[<&MFC42u.#2854>]    ;  MFC42u.#2854
00418846 $- FF25 90234400 JMP DWORD PTR DS:[<&MFC42u.#6238>]    ;  MFC42u.#6238
0041884C $- FF25 94234400 JMP DWORD PTR DS:[<&MFC42u.#6316>]    ;  MFC42u.#6316
00418852 $- FF25 98234400 JMP DWORD PTR DS:[<&MFC42u.#6107>]    ;  MFC42u.#6107
00418858 $- FF25 A0234400 JMP DWORD PTR DS:[<&MFC42u.#3991>]    ;  MFC42u.#3991
0041885E $- FF25 A4234400 JMP DWORD PTR DS:[<&MFC42u.#3297>]    ;  MFC42u.#3297
00418864 $- FF25 A8234400 JMP DWORD PTR DS:[<&MFC42u.#2507>]    ;  MFC42u.#2507
0041886A $- FF25 AC234400 JMP DWORD PTR DS:[<&MFC42u.#355>]       ;  MFC42u.#355
00418870 $- FF25 B0234400 JMP DWORD PTR DS:[<&MFC42u.#6003>]    ;  MFC42u.#6003
00418876 $- FF25 B4234400 JMP DWORD PTR DS:[<&MFC42u.#6898>]    ;  MFC42u.#6898
0041887C $- FF25 B8234400 JMP DWORD PTR DS:[<&MFC42u.#3993>]    ;  MFC42u.#3993
00418882 $- FF25 BC234400 JMP DWORD PTR DS:[<&MFC42u.#4273>]    ;  MFC42u.#4273
00418888 $- FF25 C0234400 JMP DWORD PTR DS:[<&MFC42u.#3281>]    ;  MFC42u.#3281
0041888E $- FF25 C4234400 JMP DWORD PTR DS:[<&MFC42u.#5977>]    ;  MFC42u.#5977
00418894 $- FF25 C8234400 JMP DWORD PTR DS:[<&MFC42u.#3092>]    ;  MFC42u.#3092
0041889A $- FF25 CC234400 JMP DWORD PTR DS:[<&MFC42u.#6871>]    ;  MFC42u.#6871
004188A0 $- FF25 D0234400 JMP DWORD PTR DS:[<&MFC42u.#3312>]    ;  MFC42u.#3312
004188A6 .- FF25 D4234400 JMP DWORD PTR DS:[<&MFC42u.#3714>]    ;  MFC42u.#3714
004188AC $- FF25 D8234400 JMP DWORD PTR DS:[<&MFC42u.#5210>]    ;  MFC42u.#5210
004188B2 $- FF25 DC234400 JMP DWORD PTR DS:[<&MFC42u.#3093>]    ;  MFC42u.#3093
004188B8 $- FF25 E0234400 JMP DWORD PTR DS:[<&MFC42u.#3870>]    ;  MFC42u.#3870
004188BE $- FF25 E4234400 JMP DWORD PTR DS:[<&MFC42u.#4118>]    ;  MFC42u.#4118
004188C4 $- FF25 E8234400 JMP DWORD PTR DS:[<&MFC42u.#3332>]    ;  MFC42u.#3332
004188CA $- FF25 68254400 JMP DWORD PTR DS:[<&MFC42u.#4199>]    ;  MFC42u.#4199
004188D0 .- FF25 F0234400 JMP DWORD PTR DS:[<&MFC42u.#3716>]    ;  MFC42u.#3716
004188D6 $- FF25 F4234400 JMP DWORD PTR DS:[<&MFC42u.#795>]       ;  MFC42u.#795
004188DC $- FF25 F8234400 JMP DWORD PTR DS:[<&MFC42u.#5869>]    ;  MFC42u.#5869
004188E2 $- FF25 FC234400 JMP DWORD PTR DS:[<&MFC42u.#3084>]    ;  MFC42u.#3084
004188E8 $- FF25 00244400 JMP DWORD PTR DS:[<&MFC42u.#5047>]    ;  MFC42u.#5047
004188EE $- FF25 04244400 JMP DWORD PTR DS:[<&MFC42u.#4279>]    ;  MFC42u.#4279
004188F4 .- FF25 08244400 JMP DWORD PTR DS:[<&MFC42u.#3711>]    ;  MFC42u.#3711
004188FA $- FF25 0C244400 JMP DWORD PTR DS:[<&MFC42u.#790>]       ;  MFC42u.#790
00418900 $- FF25 10244400 JMP DWORD PTR DS:[<&MFC42u.#4688>]    ;  MFC42u.#5142
00418906 .- FF25 14244400 JMP DWORD PTR DS:[<&MFC42u.#3737>]    ;  MFC42u.#3737
0041890C >- FF25 18244400 JMP DWORD PTR DS:[<&MFC42u.#818>]       ;  MFC42u.#818
00418912 >/$  55          PUSH EBP                               ;  (初始 cpu 选择)
00418913  |.  8BEC       MOV EBP,ESP
00418915  |.  6A FF       PUSH -1
00418917  |.  68 18884400 PUSH AtLarge2.00448818
0041891C  |.  68 968C4100 PUSH <JMP.&msvcrt._except_handler3>    ;  SE 处理程序安装
00418921  |.  64:A1 0000000>MOV EAX,DWORD PTR FS:[0]
00418927  |.  50          PUSH EAX
00418928  |.  64:8925 00000>MOV DWORD PTR FS:[0],ESP
0041892F  |.  83EC 68    SUB ESP,68
00418932  |.  53          PUSH EBX
00418933  |.  56          PUSH ESI
00418934  |.  57          PUSH EDI
00418935  |.  8965 E8    MOV DWORD PTR SS:[EBP-18],ESP
00418938  |.  33DB       XOR EBX,EBX
0041893A  |.  895D FC    MOV DWORD PTR SS:[EBP-4],EBX
0041893D  |.  6A 02       PUSH 2
0041893F  |.  5F          POP EDI
00418940  |.  57          PUSH EDI
00418941  |.  FF15 8C254400 CALL DWORD PTR DS:[<&msvcrt.__set_app_ty>;  msvcrt.__set_app_type
00418947  |.  59          POP ECX
00418948  |.  830D 849F4500>OR DWORD PTR DS:[459F84],FFFFFFFF
0041894F  |.  830D 889F4500>OR DWORD PTR DS:[459F88],FFFFFFFF
00418956  |.  FF15 90254400 CALL DWORD PTR DS:[<&msvcrt.__p__fmode>] ;  msvcrt.__p__fmode
0041895C  |.  8B0D 649D4500 MOV ECX,DWORD PTR DS:[459D64]
00418962  |.  8908       MOV DWORD PTR DS:[EAX],ECX
00418964  |.  FF15 94254400 CALL DWORD PTR DS:[<&msvcrt.__p__commode>;  msvcrt.__p__commode
0041896A  |.  8B0D 609D4500 MOV ECX,DWORD PTR DS:[459D60]
00418970  |.  8908       MOV DWORD PTR DS:[EAX],ECX
00418972  |.  A1 98254400 MOV EAX,DWORD PTR DS:[<&msvcrt._adjust_f>
00418977  |.  8B00       MOV EAX,DWORD PTR DS:[EAX]
00418979  |.  A3 809F4500 MOV DWORD PTR DS:[459F80],EAX
0041897E  |.  E8 12030000 CALL AtLarge2.00418C95
00418983  |.  391D 907D4500 CMP DWORD PTR DS:[457D90],EBX
00418989  |.  75 0C       JNZ SHORT AtLarge2.00418997
0041898B  |.  68 928C4100 PUSH AtLarge2.00418C92
00418990  |.  FF15 9C254400 CALL DWORD PTR DS:[<&msvcrt.__setusermat>;  msvcrt.__setusermatherr
00418996  |.  59          POP ECX
00418997  |>  E8 E4020000 CALL AtLarge2.00418C80
0041899C  |.  68 14304500 PUSH AtLarge2.00453014
004189A1  |.  68 10304500 PUSH AtLarge2.00453010
004189A6  |.  E8 CF020000 CALL <JMP.&msvcrt._initterm>
004189AB  |.  A1 5C9D4500 MOV EAX,DWORD PTR DS:[459D5C]
004189B0  |.  8945 94    MOV DWORD PTR SS:[EBP-6C],EAX
004189B3  |.  8D45 94    LEA EAX,DWORD PTR SS:[EBP-6C]
004189B6  |.  50          PUSH EAX
004189B7  |.  FF35 589D4500 PUSH DWORD PTR DS:[459D58]
004189BD  |.  8D45 9C    LEA EAX,DWORD PTR SS:[EBP-64]
004189C0  |.  50          PUSH EAX
004189C1  |.  8D45 90    LEA EAX,DWORD PTR SS:[EBP-70]
004189C4  |.  50          PUSH EAX
004189C5  |.  8D45 A0    LEA EAX,DWORD PTR SS:[EBP-60]
004189C8  |.  50          PUSH EAX
004189C9  |.  FF15 B4254400 CALL DWORD PTR DS:[<&msvcrt.__wgetmainar>;  msvcrt.__wgetmainargs
004189CF  |.  68 0C304500 PUSH AtLarge2.0045300C
004189D4  |.  68 00304500 PUSH AtLarge2.00453000
004189D9  |.  E8 9C020000 CALL <JMP.&msvcrt._initterm>
004189DE  |.  83C4 24    ADD ESP,24
004189E1  |.  A1 B8254400 MOV EAX,DWORD PTR DS:[<&msvcrt._wcmdln>]
004189E6  |.  8B30       MOV ESI,DWORD PTR DS:[EAX]
004189E8  |.  3BF3       CMP ESI,EBX
004189EA  |.  75 13       JNZ SHORT AtLarge2.004189FF
004189EC  |.  834D FC FF OR DWORD PTR SS:[EBP-4],FFFFFFFF
004189F0  |.  8B4D F0    MOV ECX,DWORD PTR SS:[EBP-10]
004189F3  |.  64:890D 00000>MOV DWORD PTR FS:[0],ECX
004189FA  |.  5F          POP EDI
004189FB  |.  5E          POP ESI
004189FC  |.  5B          POP EBX
004189FD  |.  C9          LEAVE
004189FE  |.  C3          RETN

这要从哪里看呢？

[课程]Android-CTF解题方法汇总！

收藏・0

免费・0

支持

最新回复 (4)
锐捷技术雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 1 回帖 49 粉丝 0 关注私信	锐捷技术 2 楼你跟进的CALL是调用API的，可以直接F8过 2008-8-16 11:03 0
applelove 雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 7 回帖 13 粉丝 0 关注私信	applelove 3 楼你说跟进这个地方是函数。。但是这个call后面就是程序判断注册的地方。。 0040C5C0 . 8B40 04 MOV EAX,DWORD PTR DS:[EAX+4] 0040C5C3 . 8A88 FC000000 MOV CL,BYTE PTR DS:[EAX+FC] 0040C5C9 . 84C9 TEST CL,CL 0040C5CB . 0F85 AA000000 JNZ AtLarge2.0040C67B 这个要怎么跟踪呢？ 2008-8-16 11:09 0
锐捷技术雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 1 回帖 49 粉丝 0 关注私信	锐捷技术 4 楼恩有些程序的注册码比较是在系统领空里你达到 0041846E $- FF25 14254400 JMP DWORD PTR DS:[<&MFC42u.#1165>] ; MFC42u.#1165 后在F8到达系统领空后跟随。 2008-8-16 11:19 0
applelove 雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 7 回帖 13 粉丝 0 关注私信	applelove 5 楼跟进去了。。这个程序是重启验证的。。能加你好友吗？ QQ33646983 2008-8-16 11:25 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

applelove

发帖

回帖

RANK

关注

私信

他的文章

关于我们

联系我们

企业服务

看雪公众号

最新回复 (4)
锐捷技术雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 1 回帖 49 粉丝 0 关注私信	锐捷技术 2 楼你跟进的CALL是调用API的，可以直接F8过 2008-8-16 11:03 0
applelove 雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 7 回帖 13 粉丝 0 关注私信	applelove 3 楼你说跟进这个地方是函数。。但是这个call后面就是程序判断注册的地方。。 0040C5C0 . 8B40 04 MOV EAX,DWORD PTR DS:[EAX+4] 0040C5C3 . 8A88 FC000000 MOV CL,BYTE PTR DS:[EAX+FC] 0040C5C9 . 84C9 TEST CL,CL 0040C5CB . 0F85 AA000000 JNZ AtLarge2.0040C67B 这个要怎么跟踪呢？ 2008-8-16 11:09 0
锐捷技术雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 1 回帖 49 粉丝 0 关注私信	锐捷技术 4 楼恩有些程序的注册码比较是在系统领空里你达到 0041846E $- FF25 14254400 JMP DWORD PTR DS:[<&MFC42u.#1165>] ; MFC42u.#1165 后在F8到达系统领空后跟随。 2008-8-16 11:19 0
applelove 雪币： 200 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 7 回帖 13 粉丝 0 关注私信	applelove 5 楼跟进去了。。这个程序是重启验证的。。能加你好友吗？ QQ33646983 2008-8-16 11:25 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复