棣栧厛瑕佸仛鐨勪簨鎯呭氨鏄慨鏀圭▼搴忓叆鍙ｇ偣錛岃繖鏍蜂竴鏉ユ墠鑳戒紭鍏堣幏鍙栫▼搴忕殑鎺у埗鏉冿紝搴熻瘽灝變笉澶氳浜嗐?br>
1. 鎯寵淇敼紼嬪簭鐨勫叆鍙ｇ偣棣栧厛灝辮瑙傚療涓嬬▼搴忓憳鍏堢殑鍏ュ彛鐐瑰湪浠涔堜綅緗紝榪欐牱涓鏉ョ瓑鎴戜滑鐨勫鐞嗗畬姣曞悗榪樻槸瑕佹妸鎺у埗鏉冭繕緇欒浜嬫湰錛屼互鍏嶅嚭鐜伴敊璇?/p>
鐢↙oadPE鐪嬬湅璁頒簨鏈殑涓浜涗俊鎭?/p>
浠庤繖閲屽彲浠ュ緢娓呮鐨勫彂鐜扮鐩樻枃浠跺叆鍙ｅ湪400鍋忕Щ澶勮屾枃浠跺榻愭槸7800瀛楄妭澶у皬錛屽疄闄呬嬌鐢ㄧ殑鏄?748瀛楄妭澶у皬錛岄偅涔堜篃灝辨槸璇?800-7748=b8h絀洪棿鍙互渚涙垜浠彃鍏ヤ唬鐮?br>
2. 鐭ラ亾浜嗗嵆灝嗘彃鍏ヤ唬鐮佺殑鍦版柟錛岄偅涔堝氨鍑嗗濂芥満鍣ㄧ爜浠ヤ究澶勭悊錛岃繖閲屾垜浠厛鍙慨鏀圭▼搴忓叆鍙ｏ紝鍏朵綑鐨勬搷浣滀互鍚庡啀鍐欍?/p>
浠庤繖閲屾垜浠彲浠ョ湅鍒扮▼搴忓師鍏堢殑鍏ュ彛鍋忕Щ鍦板潃鍦?39dh澶勶紝涔熷氨鏄鎴戜滑鍋氬畬鑷繁鐨勫鐞嗗悗瑕佽煩杞埌榪欓噷銆?/p>
B8 9D 73 00 01 ff E0
榪欎究鏄?/p>
mov eax, 0100739dh
jmp eax
鐨勬満鍣ㄧ爜
3. 淇敼鏂囦歡鍏ュ彛
鍥犱負鏂囦歡鍋忕Щ鍦板潃涓?00h鑰屽疄闄呬嬌鐢ㄧ殑瀛楄妭鏁頒負7748h閭ｄ箞涔熷氨鏄鎴戜滑瑕佸湪 7b49h澶勬彃鍏ユ垜浠殑浠ｇ爜銆?鍐嶅０鏄庝竴嬈★紝鏃墮棿鏈夐檺浠婂ぉ鍙兘鍐欎慨鏀瑰叆鍙ｏ紝鑷充簬鍏朵粬鎿嶄綔錛屽悗闈㈡湁鏃墮棿鐨勬椂鍊欏啀緇х畫鍐?
鐢║E鎵撳紑notepade.exe錛屽湪絀洪殭澶勬彃鍏ユ垜浠柊鐨勫叆鍙ｄ唬鐮?/p>
4. 淇敼紼嬪簭鍏ュ彛鐐?/p>
鍥犱負鍘熷厛鐨勪唬鐮佹鍋忕Щ鍦板潃涓?000h錛岃屽疄闄?text鑺傚ぇ灝忎負7748閭ｄ箞涔熷氨鏄鏂扮殑紼嬪簭鍏ュ彛搴旇鏄?748h+1000h=8749h
淇敼瀹屾瘯鍚庣偣鍑籗ava銆?/p>
鍐嶆榪愯notepad.exe
娌℃湁浠諱綍寮傚父錛岄偅涔堜慨鏀圭▼搴忓叆鍙ｆ垚鍔熴?br>
褰撶劧浣犲彲鑳借涓轟粈涔堥兘榪樹箞鍋氬憿銆傚懙鍛碉紝鍏ュ彛鎺у埗鏉冭鎷垮埌浜嗭紝閭ｄ箞鎺ヤ笅鏉ュ氨鍙互鑷敱鍙戞尌浜嗐?br>
鏃墮棿鏈夐檺錛屼笅嬈″皢鍦ㄤ粖澶╀慨鏀圭殑鍏ュ彛鐐圭粰notepad.exe杞藉叆鎴戜滑鐨刣ll鏂囦歡錛岀揣鎺ョ潃錛岀敤鎴戜滑鐨刣lll鏉ュ鐞嗚浜嬫湰鐨勭炕欏靛姛鑳藉緟緇?#8230;
]]>
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
; 淇勭綏鏂柟鍧?by Originality
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
.386
.model flat, stdcall
option casemap : none
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
; Include 鏂囦歡瀹氫箟
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
include rgame.inc
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
; 浠ｇ爜孌?br>;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
.code
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
; 瀹氭椂鍣ㄦ祴璇?br>;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
DwonTest proc _hWnd, _uMsg, _idEvent, _dwTime
pushad
mov eax, curState
.if eax ;涓嬭惤緇撴潫
mov curState, 0
invoke InitControl1
.else
invoke Control1Down
.endif
popad
ret
DwonTest endp
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
; 紿楀彛榪囩▼
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
_ProcWinMain proc uses ebx edi esi hWnd, uMsg, wParam, lParam
local @stPs : PAINTSTRUCT
local @stRect : RECT
local @hDc
mov eax, uMsg
;********************************************************************
.if eax == WM_PAINT
invoke BeginPaint, hWnd, addr @stPs
invoke InitContainer
invoke ShowControl, 1
invoke Control1Down
invoke EndPaint, hWnd, addr @stPs
.elseif eax == WM_CREATE
invoke GetDC, hWnd
mov hGame, eax
;銆愭澶勫畾鏃跺櫒涓烘祴璇曟墍鐢ㄣ?br> invoke SetTimer, NULL, NULL, 1000, offset DwonTest
.elseif eax == WM_CLOSE
invoke ReleaseDC, hWnd, hGame
invoke DestroyWindow, hWinMain
invoke PostQuitMessage, NULL
.elseif eax == WM_SIZE
invoke ValidateRect, hWnd, offset gameArea
.else
invoke DefWindowProc, hWnd, uMsg, wParam, lParam
ret
.endif
;********************************************************************
xor eax, eax
ret
_ProcWinMain endp
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
_WinMain proc
local @stWndClass : WNDCLASSEX
local @stMsg : MSG
invoke GetModuleHandle, NULL ;鑾峰緱搴旂敤紼嬪簭瀹炰緥
mov hInstance, eax ;瀹炰緥淇濆瓨鍦ㄥ叏灞鍙橀噺涓?br> invoke RtlZeroMemory, addr @stWndClass, sizeof @stWndClass ;浠?濉厖WNDCLASSEX緇撴瀯浣?br>
********************************************************************
; 娉ㄥ唽紿楀彛綾?br>;********************************************************************
invoke LoadCursor, 0, IDC_ARROW ;鑾峰彇鍏夋爣鍙ユ焺
mov @stWndClass.hCursor, eax ;璁劇疆鍏夋爣
push hInstance
pop @stWndClass.hInstance ;淇濆瓨搴旂敤紼嬪簭瀹炰緥
mov @stWndClass.cbSize, sizeof WNDCLASSEX ;淇濆瓨緇撴瀯浣撳ぇ灝?br> mov @stWndClass.style, CS_HREDRAW or CS_VREDRAW ;璁劇疆紿椾綋鏍峰紡
mov @stWndClass.lpfnWndProc, offset _ProcWinMain ;淇濆瓨鍥炶皟鍑芥暟
mov @stWndClass.hbrBackground, COLOR_WINDOW + 3 ;璁劇疆紿椾綋鑳屾櫙鑹?br> mov @stWndClass.lpszClassName, offset szClassName ;淇濆瓨紿椾綋綾誨悕
invoke RegisterClassEx, addr @stWndClass ;娉ㄥ唽紿楀彛綾?br>;********************************************************************
; 寤虹珛騫舵樉紺虹獥鍙?br>;********************************************************************
invoke CreateWindowEx, WS_EX_TOOLWINDOW, offset szClassName, offset szCaptionMain,\
WS_OVERLAPPEDWINDOW,\
100, 100, 400, 456,\
NULL, NULL, hInstance, NULL ;寤虹珛紿楀彛
mov hWinMain, eax ;淇濆瓨紿楀彛鍙ユ焺
invoke ShowWindow, hWinMain, SW_SHOWNORMAL ;鏄劇ず紿楀彛
invoke UpdateWindow, hWinMain ;鏇存柊紿楀彛
;********************************************************************
; 娑堟伅寰幆
;********************************************************************
.while TRUE ;娑堟伅寰幆
invoke GetMessage, addr @stMsg, NULL, 0, 0 ;鑾峰彇娑堟伅騫跺～鍏匨SG緇撴瀯浣?br>
.break .if eax == 0 ;鍒ゆ柇鏄惁閫鍑?br> invoke TranslateMessage, addr @stMsg ;娑堟伅瑁呮崲
invoke DispatchMessage, addr @stMsg ;鍒嗗彂娑堟伅
.endw
ret
_WinMain endp
;********************************************************************
; 鍒濆鍖栨父鎴忓鍣?br>;********************************************************************
InitContainer proc
local @lpRect : RECT
pushad
;寤虹珛娓告垙瀹瑰櫒杈規
invoke CreatePen, PS_SOLID, 5, 8000FFh
push eax
invoke SelectObject, hGame, eax
invoke DeleteObject, eax
pop eax
invoke FrameRect, hGame, offset gameArea, eax
popad
ret
InitContainer endp
;********************************************************************
; 鏄劇ず鏂瑰潡鎺т歡
; type錛氭帶浠剁被鍨?涓?鏍兼í鏉★紝2涓虹敯瀛楀艦錛?..4..
;********************************************************************
ShowControl proc cType : DWORD
pushad
.if cType == 1 ;4鏍兼í鏉♀枲鈻犫枲鈻?br>
invoke InitControl1
.endif
popad
ret
ShowControl endp
;********************************************************************
; 鍒濆鍖栤枲鈻犫枲鈻犲浘褰?br>;********************************************************************
InitControl1 proc
pushad
;璁劇疆鏂瑰潡棰滆壊
invoke SetColor, 0FF80FFh, 400040h
;鍒涘緩鏂瑰潡騫舵帓鍒楁柟鍧?br> mov ecx, 60 ;宸︿笂瑙掕搗濮嬩綅緗?br> mov edx, 90 ;鍙充笅瑙掕搗濮嬩綅緗?br> xor esi, esi
lea ebx, curControl
@@:
cmp ecx, 180
jz @F ;4涓柟鍧楅兘鍒濆鍖栧畬姣?br> push ebx
push ecx
push edx
invoke Rectangle, hGame, ecx, 5, edx, 30
pop edx
pop ecx
pop ebx
mov [ebx + esi], ecx
push topSpace
pop DWORD ptr [ebx + esi + 4]
add esi, 8
add ecx, 30
add edx, 30
jmp @B
@@:
popad
ret
InitControl1 endp
;********************************************************************
; 璁劇疆鏂瑰潡棰滆壊
;********************************************************************
SetColor proc color : DWORD, pColor : DWORD
pushad
invoke CreatePen, PS_SOLID, 1, pColor
invoke SelectObject, hGame, eax
invoke DeleteObject, eax
invoke CreateSolidBrush, color
invoke SelectObject, hGame, eax
invoke DeleteObject, eax
popad
ret
SetColor endp
;********************************************************************
; 鈻犫枲鈻犫枲鍥懼艦鍚戜笅璧板姩
;********************************************************************
Control1Down proc
pushad
invoke IsDownEnd
.if eax == 1 ;涓嬮潰鏈夐殰紕嶏紝鏀瑰彉鐘舵佷負鍒涘緩鏂扮殑鏂瑰潡騫朵繚瀛樺綋鍓嶆柟鍧楀湪瀹瑰櫒涓殑浣嶇疆
mov curState, 1
invoke ChangeAreaState
invoke RtlZeroMemory, offset curControl, sizeof curControl
popad
ret
.endif
;濡傛灉涓嬮潰涓嶆槸闅滅錛屽垯鈻犫枲鈻犫枲鍚戜笅璧板姩
lea edx, curControl
xor ecx, ecx
@@:
cmp ecx, 4
jz @F
;瑕嗙洊鍘熸湁鐨勬柟鍧?br> push ecx
invoke SetColor, 0h, 0h
mov eax, [edx + ecx * 8 + 4]
mov ebx, 30
add ebx, eax ;ebx鍙充笅瑙抷鍧愭爣
mov eax, [edx + ecx * 8]
add eax, 30 ;eax涓哄彸涓嬭x鍧愭爣
push eax ;淇濆瓨鍙充笅瑙掑潗鏍?br> push ebx
push edx
invoke Rectangle, hGame, [edx + ecx * 8], [edx + ecx * 8 + 4], eax, ebx
pop edx
;鐢熸垚鏂扮殑鏂瑰潡
invoke SetColor, 0FF80FFh, 400040h
pop ebx
pop eax
pop ecx
add DWORD ptr [edx + ecx * 8 + 4], 30
add ebx, 30
push ecx
push edx
invoke Rectangle, hGame, [edx + ecx * 8], [edx + ecx * 8 + 4], eax, ebx
pop edx
pop ecx
inc ecx
jmp @B
@@:
popad
ret
Control1Down endp
;********************************************************************
; 淇濆瓨褰撳墠鏂瑰潡鍦ㄥ鍣ㄤ腑鐨勭姸鎬?br>;********************************************************************
ChangeAreaState proc
pushad
;璁＄畻鍖哄煙鍗曞厓鍧愭爣
lea ebx, curControl
xor ecx, ecx
@@:
cmp ecx, 4
jz @F
;璁＄畻浜岀淮x鍧愭爣
invoke CalculatePos, [ebx + ecx * 8 ], [ebx + ecx * 8 + 4], 1
mov esi, eax
;璁＄畻浜岀淮y鍧愭爣
invoke CalculatePos, [ebx + ecx * 8 ], [ebx + ecx * 8 + 4], 2
mov edi, eax
;璁劇疆鍖哄煙鏇存柊錛屾洿鏂扮殑鍧愭爣浣嶇疆錛坋ax + esi * 4 * 8 + edi * 4錛?br> lea eax, area
push eax
xchg edi, eax
mov edi, 8
mul edi
add esi, eax
pop eax
mov DWORD ptr [eax + esi * 4], 1 ;璁劇疆褰撳墠浣嶇疆宸茬粡琚～鍏?br> inc ecx
jmp @B
@@:
popad
ret
ChangeAreaState endp
;********************************************************************
; 鏍規嵁欏惰璁＄畻浜岀淮鍧愭爣
; left, top錛氶《瑙掑儚绱?br>; posType錛?琛ㄧず璁＄畻x鍧愭爣錛?琛ㄧず璁＄畻y鍧愭爣
; eax榪斿洖浜岀淮鍧愭爣
;********************************************************************
CalculatePos proc left : DWORD, top :DWORD, posType : DWORD
local @ret : DWORD
pushad
mov edx, left
add edx, rectArea ;鍙充笅瑙抶鍧愭爣
mov ecx, top
add ecx, rectArea ;鍙充笅瑙抷鍧愭爣
.if posType == 1
mov eax, edx
mov ebx, 30
xor edx, edx
div ebx
.elseif
mov eax, ecx
sub eax, topSpace
mov ecx, 30
xor edx, edx
div ecx
.endif
mov @ret, eax
popad
mov eax, @ret
dec eax
ret
CalculatePos endp
;********************************************************************
; 鍒ゆ柇涓嬮潰鏄惁鏈夐殰紕?br>; 榪斿洖鍊?錛歟ax涓?琛ㄧず涓嬭惤瀹屾瘯錛屼負0琛ㄧず鏈畬姣?br>;********************************************************************
IsDownEnd proc
pushad
lea ebx, curControl
xor ecx, ecx
@@:
cmp ecx, 4
jz @F
;璁＄畻浜岀淮x鍧愭爣
invoke CalculatePos, [ebx + ecx * 8 ], [ebx + ecx * 8 + 4], 1
mov esi, eax
;璁＄畻浜岀淮y鍧愭爣
invoke CalculatePos, [ebx + ecx * 8 ], [ebx + ecx * 8 + 4], 2
mov edi, eax
inc edi
;璁劇疆鍖哄煙鏇存柊錛屾洿鏂扮殑鍧愭爣浣嶇疆錛坋ax + esi * 4 * 8 + edi * 4錛?br> lea eax, area
push eax
xchg edi, eax
mov edi, 8
mul edi
add esi, eax
pop eax
mov edx, [eax + esi * 4]
.if edx == 1
popad
mov eax, 1
ret
.endif
inc ecx
jmp @B
@@:
popad
xor eax, eax
ret
IsDownEnd endp
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
start:
call _WinMain
invoke ExitProcess, NULL
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
end start
]]>
004011AE . 6A 51 PUSH 51 ; /Count = 51 (81.)
004011B0 . 50 PUSH EAX ; |Buffer
004011B1 . 6A 6E PUSH 6E ; |ControlID = 6E (110.)
004011B3 . 56 PUSH ESI ; |hWnd
004011B4 . FFD7 CALL EDI ; \GetDlgItemTextA
004011B6 . 8D8C24 9C0000>LEA ECX,DWORD PTR SS:[ESP+9C]
004011BD . 6A 65 PUSH 65 ; /Count = 65 (101.)
004011BF . 51 PUSH ECX ; |Buffer
004011C0 . 68 E8030000 PUSH 3E8 ; |ControlID = 3E8 (1000.)
004011C5 . 56 PUSH ESI ; |hWnd
004011C6 . 8BD8 MOV EBX,EAX ; |EBX瀛樻斁鐢ㄦ埛鍚嶇殑闀垮害
004011C8 . FFD7 CALL EDI ; \GetDlgItemTextA
004011CA . 8A4424 4C MOV AL,BYTE PTR SS:[ESP+4C]
004011CE . 84C0 TEST AL,AL ; 鏄惁緇撴潫
004011D0 . 74 76 JE SHORT TraceMe.00401248
004011D2 . 83FB 05 CMP EBX,5
004011D5 . 7C 71 JL SHORT TraceMe.00401248 ; 濡傛灉鐢ㄦ埛鍚嶉暱搴﹀皬浜?錛岃煩
004011D7 . 8D5424 4C LEA EDX,DWORD PTR SS:[ESP+4C] ; EDX鎸囧悜鐢ㄦ埛鍚?br>004011DB . 53 PUSH EBX ; 鐢ㄦ埛鍚嶉暱搴?br>004011DC . 8D8424 A00000>LEA EAX,DWORD PTR SS:[ESP+A0]
004011E3 . 52 PUSH EDX ; 鐢ㄦ埛鍚?br>004011E4 . 50 PUSH EAX ; key
004011E5 . E8 56010000 CALL TraceMe.00401340 ; 鍒ゆ柇娉ㄥ唽鐮佹槸鍚︽紜紝鏈変笁涓弬鏁癧杈撳叆key錛岀敤鎴峰悕錛岀敤鎴峰悕闀垮害]
鎬濊礬錛?br>浠庣敤鎴峰悕鐨勭4涓瓧絎﹀紑濮嬪垎鍒笌鍏ㄥ眬鐨勪竴涓暱搴︿負7鐨勬爣璇嗙浉涔樻渶鍚庡拰灝變負key
--娉ㄥ唽鐮侀儴鍒?-
00401340 /$ 55 PUSH EBP ; 淇濆瓨EBP
00401341 |. 8B6C24 0C MOV EBP,DWORD PTR SS:[ESP+C] ; 鑾峰彇絎?涓弬鏁幫紝鐢ㄦ埛鍚?br>00401345 |. 56 PUSH ESI ; 淇濇姢ESI,EDI
00401346 |. 57 PUSH EDI
00401347 |. 8B7C24 18 MOV EDI,DWORD PTR SS:[ESP+18] ; 鍙栫涓涓弬鏁幫紝鐢ㄦ埛鍚嶉暱搴?br>0040134B |. B9 03000000 MOV ECX,3
00401350 |. 33F6 XOR ESI,ESI
00401352 |. 33C0 XOR EAX,EAX
00401354 |. 3BF9 CMP EDI,ECX
00401356 |. 7E 21 JLE SHORT TraceMe.00401379 ; 濡傛灉鐢ㄦ埛鍚嶉暱搴﹀皬浜庣瓑浜?錛岃煩
00401358 |. 53 PUSH EBX
00401359 |> 83F8 07 /CMP EAX,7
0040135C |. 7E 02 |JLE SHORT TraceMe.00401360 ; 濡傛灉EAX灝忎簬絳変簬7錛岃煩
0040135E |. 33C0 |XOR EAX,EAX
00401360 |> 33D2 |XOR EDX,EDX
00401362 |. 33DB |XOR EBX,EBX
00401364 |. 8A1429 |MOV DL,BYTE PTR DS:[ECX+EBP] ; DL瀛樻斁浠庣敤鎴峰悕涓彇鍑虹殑絎珽CX瀛楃
00401367 |. 8A98 30504000 |MOV BL,BYTE PTR DS:[EAX+405030] ; BL瀛樻斁鏌愪釜鍏ㄥ眬鍙橀噺
0040136D |. 0FAFD3 |IMUL EDX,EBX ; 鏌愪釜鐢ㄦ埛鍚?#215;鍏ㄥ眬鍙橀噺C
00401370 |. 03F2 |ADD ESI,EDX ; ESI浼間箮鏄繖浜涘肩殑緇熻
00401372 |. 41 |INC ECX
00401373 |. 40 |INC EAX
00401374 |. 3BCF |CMP ECX,EDI ; 濡傛灉ECX灝忎簬鐢ㄦ埛鍚嶇殑闀垮害鍒欑戶緇驚鐜?br>00401376 |.^ 7C E1 \JL SHORT TraceMe.00401359
00401378 |. 5B POP EBX ; 榪樺師EBX錛屼笉闇瑕佷嬌鐢ㄤ簡
00401379 |> 56 PUSH ESI ; /<%ld>
0040137A |. 68 78504000 PUSH TraceMe.00405078 ; |Format = "%ld"
0040137F |. 55 PUSH EBP ; |s
00401380 |. FF15 9C404000 CALL DWORD PTR DS:[<&USER32.wsprintfA>] ; \wsprintfA
00401386 |. 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C]
0040138A |. 83C4 0C ADD ESP,0C ; C璋冪敤鏂瑰紡
0040138D |. 55 PUSH EBP ; /String2
0040138E |. 50 PUSH EAX ; |String1
0040138F |. FF15 04404000 CALL DWORD PTR DS:[<&KERNEL32.lstrcmpA>] ; \lstrcmpA
00401395 |. F7D8 NEG EAX
00401397 |. 1BC0 SBB EAX,EAX
00401399 |. 5F POP EDI
0040139A |. 5E POP ESI
0040139B |. 40 INC EAX
0040139C |. 5D POP EBP
0040139D \. C3 RETN
private string GetKey(string userName, int userNameLength)
{
int ecx = 3;
int sum = 0;
int eax = 0;
int[] flag = {0x0C, 0x0A, 0x13, 0x09, 0x0C, 0x0B, 0x0A, 0x08};
while (ecx < userNameLength)
{
if (eax >= flag.Length)
eax = eax % flag.Length;
sum += userName[ecx] * flag[eax];
ecx++;
eax++;
}
return sum.ToString();
}
{
int ecx = 3;
int sum = 0;
int eax = 0;
int[] flag = {0x0C, 0x0A, 0x13, 0x09, 0x0C, 0x0B, 0x0A, 0x08};
while (ecx < userNameLength)
{
if (eax >= flag.Length)
eax = eax % flag.Length;
sum += userName[ecx] * flag[eax];
ecx++;
eax++;
}
return sum.ToString();
}
]]>
娉ㄩ噴鍐欑殑寰堟竻妤氾紝鑰屼笖寰堢畝鍗曪紝鎵浠ヤ笉澶氬仛瑙ｉ噴浜嗐?/p>
6E26152C > 8BFF MOV EDI,EDI
6E26152E 55 PUSH EBP
6E26152F 8BEC MOV EBP,ESP
6E261531 53 PUSH EBX
6E261532 8B5D 08 MOV EBX,DWORD PTR SS:[EBP+8] ; EBX涓虹涓涓弬鏁?br>6E261535 56 PUSH ESI
6E261536 57 PUSH EDI
6E261537 53 PUSH EBX
6E261538 83CF FF OR EDI,FFFFFFFF ; EDI=-1
6E26153B FF15 6C10256E CALL DWORD PTR DS:[<&msvcrt.malloc>] ; msvcrt.malloc
6E261541 8BF0 MOV ESI,EAX ; ESI淇濆瓨鍐呭瓨鎸囬拡
6E261543 83C4 04 ADD ESP,4 ; 鍫嗘爤騫寵
6E261546 85F6 TEST ESI,ESI ; 鍒ゆ柇鍒嗛厤鏄惁鎴愬姛
6E261548 0F84 9E1E0000 JE MFC42.6E2633EC ; 濡傛灉鍒嗛厤澶辮觸鍒欒煩杞?br>6E26154E 5F POP EDI ; 浠庤繖閲屽彲浠ョ湅鍑?E261537H鍦板潃澶勭殑PUSH涓轟紶鍙傝屼笉鏄瘎瀛樺櫒淇濇姢
6E26154F 8BC6 MOV EAX,ESI ; 鍒頒簡榪欓噷涔熷氨鐭ラ亾浜哅FC42.#823鍙峰嚱鏁頒富瑕佸氨鏄垎閰嶅唴瀛樼殑浣滅敤
6E261551 5E POP ESI
6E261552 5B POP EBX
6E261553 5D POP EBP
6E261554 C3 RETN
]]>