我是个新手,正在学习《加密与解密》第三版,现在我这里有个软件,已脱壳。我通过OllyDBG里查找API函数中的MessageBoxExA,找到了注册码输好后的中断的入口。但看到里面的汇编语言,象是天书一样。看一下就头疼,请前辈们帮我分析一下
0045D7D7 |. 8945 F8 mov dword ptr [ebp-8], eax
0045D7DA |. 33C0 xor eax, eax
0045D7DC |. 5A pop edx
0045D7DD |. 59 pop ecx
0045D7DE |. 59 pop ecx
0045D7DF |. 64:8910 mov dword ptr fs:[eax], edx
0045D7E2 |. 68 40D84500 push 0045D840
0045D7E7 |> 8B45 EC mov eax, dword ptr [ebp-14]
0045D7EA |. 3B45 E8 cmp eax, dword ptr [ebp-18]
0045D7ED 74 38 je short 0045D827
0045D7EF |. 6A 1D push 1D
0045D7F1 |. 6A 00 push 0
0045D7F3 |. 6A 00 push 0
0045D7F5 |. 8B4D BC mov ecx, dword ptr [ebp-44]
0045D7F8 |. 8B55 B4 mov edx, dword ptr [ebp-4C]
0045D7FB |. 2BCA sub ecx, edx
0045D7FD |. D1F9 sar ecx, 1
0045D7FF 79 03 jns short 0045D804
0045D801 |. 83D1 00 adc ecx, 0
0045D804 |> 03CA add ecx, edx
0045D806 |. 51 push ecx
0045D807 |. 8B55 B8 mov edx, dword ptr [ebp-48]
0045D80A |. 8B45 B0 mov eax, dword ptr [ebp-50]
0045D80D |. 2BD0 sub edx, eax
0045D80F |. D1FA sar edx, 1
0045D811 79 03 jns short 0045D816
0045D813 |. 83D2 00 adc edx, 0
0045D816 |> 03D0 add edx, eax ; |
0045D818 |. 52 push edx ; |X
0045D819 |. 6A 00 push 0 ; |InsertAfter = HWND_TOP
0045D81B |. 8B45 FC mov eax, dword ptr [ebp-4] ; |
0045D81E |. 8B40 24 mov eax, dword ptr [eax+24] ; |
0045D821 |. 50 push eax ; |hWnd
0045D822 |. E8 15B8FAFF call <jmp.&user32.SetWindowPos> ; \SetWindowPos
0045D827 |> 8B45 F0 mov eax, dword ptr [ebp-10]
0045D82A |. E8 5963FFFF call 00453B88
0045D82F |. 8B45 F4 mov eax, dword ptr [ebp-C]
0045D832 |. 50 push eax ; /hWnd
0045D833 |. E8 64B7FAFF call <jmp.&user32.SetActiveWindow> ; \SetActiveWindow
0045D838 \. C3 retn
0045D839 .^ E9 3662FAFF jmp 00403A74
0045D83E .^ EB A7 jmp short 0045D7E7
0045D840 . 8B45 F8 mov eax, dword ptr [ebp-8]
0045D843 . 5F pop edi
0045D844 . 5E pop esi
0045D845 . 5B pop ebx
0045D846 . 8BE5 mov esp, ebp
0045D848 . 5D pop ebp
0045D849 . C2 0400 retn 4
0045D84C /$ 55 push ebp
0045D84D |. 8BEC mov ebp, esp
0045D84F |. 81C4 F8FEFFFF add esp, -108
0045D855 |. 53 push ebx
0045D856 |. 56 push esi
0045D857 |. 33C9 xor ecx, ecx
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课