2059查看
11回复

[原创] 对MIR2.DAT的破解

tintin1986

主题	好友	78 积分

注册会员

发消息

发表于 2009-6-10 13:47:09 |显示全部楼层

老样子查壳 ASP2.001的。。。
ESP定律干掉。。。
00559CB4    C3          RETN
00559CB5 .  8BEC       MOV EBP,ESP
00559CB7 .  83C4 DC    ADD ESP,-24
00559CBA .  33C9       XOR ECX,ECX
00559CBC .  894D E4    MOV DWORD PTR SS:[EBP-1C],ECX
00559CBF .  894D F0    MOV DWORD PTR SS:[EBP-10],ECX
00559CC2 .  8955 E8    MOV DWORD PTR SS:[EBP-18],EDX
00559CC5 .  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
00559CC8 .  33C0       XOR EAX,EAX
00559CCA    55          PUSH EBP
00559CCB .  68 049F5500 PUSH MIR2_u.00559F04
00559CD0 .  64:FF30    PUSH DWORD PTR FS:[EAX]
00559CD3 .  64:8920    MOV DWORD PTR FS:[EAX],ESP
00559CD6 .  A1 30295700 MOV EAX,DWORD PTR DS:[572930]
00559CDB .  8338 00    CMP DWORD PTR DS:[EAX],0
00559CDE .  7E 07       JLE SHORT MIR2_u.00559CE7
00559CE0 .  A1 30295700 MOV EAX,DWORD PTR DS:[572930]
00559CE5 .  FF08       DEC DWORD PTR DS:[EAX]
00559CE7 >  A1 40205700 MOV EAX,DWORD PTR DS:[572040]
00559CEC .  0FB640 40    MOVZX EAX,BYTE PTR DS:[EAX+40]
00559CF0 .  BA 14000000 MOV EDX,14
00559CF5 .  2BD0       SUB EDX,EAX
00559CF7 .  6BC2 46    IMUL EAX,EDX,46
00559CFA .  8B15 FC285700 MOV EDX,DWORD PTR DS:[5728FC]          ;  MIR2_u.00571C58
00559D00 .  8902       MOV DWORD PTR DS:[EDX],EAX
00559D02 .  A1 40205700 MOV EAX,DWORD PTR DS:[572040]
00559D07 .  0FB640 41    MOVZX EAX,BYTE PTR DS:[EAX+41]
00559D0B .  BA 14000000 MOV EDX,14
00559D10 .  2BD0       SUB EDX,EAX
00559D12 .  6BC2 46    IMUL EAX,EDX,46
00559D15 .  8B15 2C205700 MOV EDX,DWORD PTR DS:[57202C]          ;  MIR2_u.00571C60
00559D1B .  8902       MOV DWORD PTR DS:[EDX],EAX
00559D1D .  A1 10B15E00 MOV EAX,DWORD PTR DS:[5EB110]
00559D22 .  8B80 EC3B0C00 MOV EAX,DWORD PTR DS:[EAX+C3BEC]
00559D28 .  8B40 08    MOV EAX,DWORD PTR DS:[EAX+8]
00559D2B .  48          DEC EAX
00559D2C .  85C0       TEST EAX,EAX
00559D2E .  7C 6B       JL SHORT MIR2_u.00559D9B
00559D30 .  40          INC EAX
00559D31 .  8945 EC    MOV DWORD PTR SS:[EBP-14],EAX
00559D34 .  C745 F8 00000>MOV DWORD PTR SS:[EBP-8],0
00559D3B >  A1 10B15E00 MOV EAX,DWORD PTR DS:[5EB110]
00559D40 .  8B80 EC3B0C00 MOV EAX,DWORD PTR DS:[EAX+C3BEC]
00559D46 .  8B55 F8    MOV EDX,DWORD PTR SS:[EBP-8]
00559D49 .  E8 2A2AECFF CALL MIR2_u.0041C778
00559D4E .  8B50 34    MOV EDX,DWORD PTR DS:[EAX+34]
00559D51 .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
00559D54 .  E8 4B32FFFF CALL MIR2_u.0054CFA4
00559D59 .  84C0       TEST AL,AL
00559D5B .  74 1C       JE SHORT MIR2_u.00559D79
00559D5D .  A1 10B15E00 MOV EAX,DWORD PTR DS:[5EB110]
00559D62 .  8B80 EC3B0C00 MOV EAX,DWORD PTR DS:[EAX+C3BEC]
00559D68 .  8B55 F8    MOV EDX,DWORD PTR SS:[EBP-8]
00559D6B .  E8 082AECFF CALL MIR2_u.0041C778
00559D70 .  C680 00020000>MOV BYTE PTR DS:[EAX+200],1
00559D77 .  EB 1A       JMP SHORT MIR2_u.00559D93
00559D79 >  A1 10B15E00 MOV EAX,DWORD PTR DS:[5EB110]
00559D7E .  8B80 EC3B0C00 MOV EAX,DWORD PTR DS:[EAX+C3BEC]
00559D84 .  8B55 F8    MOV EDX,DWORD PTR SS:[EBP-8]
00559D87 .  E8 EC29ECFF CALL MIR2_u.0041C778
00559D8C .  C680 00020000>MOV BYTE PTR DS:[EAX+200],0
00559D93 >  FF45 F8    INC DWORD PTR SS:[EBP-8]
00559D96 .  FF4D EC    DEC DWORD PTR SS:[EBP-14]
00559D99 .^ 75 A0       JNZ SHORT MIR2_u.00559D3B
00559D9B >  A1 38255700 MOV EAX,DWORD PTR DS:[572538]
00559DA0 .  8B00       MOV EAX,DWORD PTR DS:[EAX]
00559DA2 .  8B40 08    MOV EAX,DWORD PTR DS:[EAX+8]
00559DA5 .  48          DEC EAX
00559DA6 .  83F8 00    CMP EAX,0
00559DA9 .  7C 53       JL SHORT MIR2_u.00559DFE
00559DAB .  8945 F8    MOV DWORD PTR SS:[EBP-8],EAX
00559DAE >  A1 38255700 MOV EAX,DWORD PTR DS:[572538]
00559DB3 .  8B00       MOV EAX,DWORD PTR DS:[EAX]
00559DB5 .  8B55 F8    MOV EDX,DWORD PTR SS:[EBP-8]
00559DB8 .  E8 BB29ECFF CALL MIR2_u.0041C778
00559DBD .  FFB0 2C020000 PUSH DWORD PTR DS:[EAX+22C]
00559DC3 .  E8 54F6F7FF CALL MIR2_u.004D941C
00559DC8 .  5A          POP EDX
00559DC9 .  2BC2       SUB EAX,EDX
00559DCB .  3D 60EA0000 CMP EAX,0EA60
00559DD0 .  76 23       JBE SHORT MIR2_u.00559DF5
00559DD2 .  A1 38255700 MOV EAX,DWORD PTR DS:[572538]
00559DD7 .  8B00       MOV EAX,DWORD PTR DS:[EAX]
00559DD9 .  8B55 F8    MOV EDX,DWORD PTR SS:[EBP-8]
00559DDC .  E8 9729ECFF CALL MIR2_u.0041C778
00559DE1 .  E8 C2A2EAFF CALL MIR2_u.004040A8
00559DE6 .  A1 38255700 MOV EAX,DWORD PTR DS:[572538]
00559DEB .  8B00       MOV EAX,DWORD PTR DS:[EAX]
00559DED .  8B55 F8    MOV EDX,DWORD PTR SS:[EBP-8]
00559DF0 .  E8 7328ECFF CALL MIR2_u.0041C668
00559DF5 >  FF4D F8    DEC DWORD PTR SS:[EBP-8]
00559DF8 .  837D F8 FF CMP DWORD PTR SS:[EBP-8],-1
00559DFC .^ 75 B0       JNZ SHORT MIR2_u.00559DAE
00559DFE >  E8 19F6F7FF CALL MIR2_u.004D941C
00559E03 .  8B15 EC285700 MOV EDX,DWORD PTR DS:[5728EC]          ;  MIR2_u.0057DFC0
00559E09 .  2B02       SUB EAX,DWORD PTR DS:[EDX]
00559E0B .  3D 88130000 CMP EAX,1388
00559E10 .  72 15       JB SHORT MIR2_u.00559E27
00559E12 .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
00559E15 .  E8 F29A0000 CALL MIR2_u.0056390C
00559E1A .  E8 FDF5F7FF CALL MIR2_u.004D941C
00559E1F .  8B15 EC285700 MOV EDX,DWORD PTR DS:[5728EC]          ;  MIR2_u.0057DFC0
00559E25 .  8902       MOV DWORD PTR DS:[EDX],EAX
00559E27 >  E8 F0F5F7FF CALL MIR2_u.004D941C
00559E2C .  8B15 18205700 MOV EDX,DWORD PTR DS:[572018]          ;  MIR2_u.0058A2C4
00559E32 .  2B02       SUB EAX,DWORD PTR DS:[EDX]
00559E34 .  3D 10270000 CMP EAX,2710
00559E39 .  E9 A8000000 JMP MIR2_u.00559EE6
00559E3E    90          NOP
00559E3F .  E8 D8F5F7FF CALL MIR2_u.004D941C
00559E44 .  8B15 18205700 MOV EDX,DWORD PTR DS:[572018]          ;  MIR2_u.0058A2C4
00559E4A .  8902       MOV DWORD PTR DS:[EDX],EAX
00559E4C .  8D55 F0    LEA EDX,DWORD PTR SS:[EBP-10]
00559E4F .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
00559E52 .  E8 DD800000 CALL MIR2_u.00561F34
00559E57 .  84C0       TEST AL,AL
00559E59 .  E9 88000000 JMP MIR2_u.00559EE6
00559E5E .  50          PUSH EAX                               ; /Arg1
00559E5F .  8B45 F0    MOV EAX,DWORD PTR SS:[EBP-10]          ; |
00559E62 .  8945 DC    MOV DWORD PTR SS:[EBP-24],EAX          ; |
00559E65 .  C645 E0 0B MOV BYTE PTR SS:[EBP-20],0B             ; |
00559E69 .  8D55 DC    LEA EDX,DWORD PTR SS:[EBP-24]          ; |
00559E6C .  33C9       XOR ECX,ECX                            ; |
00559E6E .  B8 189F5500 MOV EAX,MIR2_u.00559F18                ; |特征字符:%s\
00559E73 .  E8 202DEBFF CALL MIR2_u.0040CB98                   ; \MIR2_u.0040CB98
00559E78 .  8D45 E4    LEA EAX,DWORD PTR SS:[EBP-1C]
00559E7B .  BA 309F5500 MOV EDX,MIR2_u.00559F30                ;  系统检测到你正在使用非法程序,请关闭后在重新进入游戏.
00559E80 .  E8 77B2EAFF CALL MIR2_u.004050FC
00559E85 .  8B55 E4    MOV EDX,DWORD PTR SS:[EBP-1C]
00559E88 .  A1 7C2C5700 MOV EAX,DWORD PTR DS:[572C7C]
00559E8D .  8B00       MOV EAX,DWORD PTR DS:[EAX]
00559E8F .  66:8B0D 689F5>MOV CX,WORD PTR DS:[559F68]
00559E96 .  E8 7966F9FF CALL MIR2_u.004F0514
00559E9B .  A1 FCB05E00 MOV EAX,DWORD PTR DS:[5EB0FC]
00559EA0 .  E8 932FF1FF CALL MIR2_u.0046CE38
00559EA5 .  A1 1C295700 MOV EAX,DWORD PTR DS:[57291C]
00559EAA .  8038 00    CMP BYTE PTR DS:[EAX],0
00559EAD .  EB 37       JMP SHORT MIR2_u.00559EE6
00559EAF .  6A 00       PUSH 0                                  ; /Title = NULL
00559EB1 .  68 6C9F5500 PUSH MIR2_u.00559F6C                   ; |Class = "TfrmJsyClient"
00559EB6 .  E8 9DDBEAFF CALL <JMP.&user32.FindWindowA>          ; \FindWindowA
00559EBB .  8945 F4    MOV DWORD PTR SS:[EBP-C],EAX
00559EBE .  837D F4 00 CMP DWORD PTR SS:[EBP-C],0
00559EC2 .  EB 22       JMP SHORT MIR2_u.00559EE6
00559EC4 .  A1 7C2C5700 MOV EAX,DWORD PTR DS:[572C7C]
00559EC9 .  8B00       MOV EAX,DWORD PTR DS:[EAX]
00559ECB .  66:8B0D 689F5>MOV CX,WORD PTR DS:[559F68]
00559ED2 .  BA 309F5500 MOV EDX,MIR2_u.00559F30
00559ED7 .  E8 3866F9FF CALL MIR2_u.004F0514
00559EDC .  A1 FCB05E00 MOV EAX,DWORD PTR DS:[5EB0FC]
00559EE1 .  E8 522FF1FF CALL MIR2_u.0046CE38
00559EE6 >  33C0       XOR EAX,EAX
00559EE8 .  5A          POP EDX
00559EE9 .  59          POP ECX
00559EEA .  59          POP ECX
00559EEB .  64:8910    MOV DWORD PTR FS:[EAX],EDX
00559EEE .  68 0B9F5500 PUSH MIR2_u.00559F0B
00559EF3 >  8D45 E4    LEA EAX,DWORD PTR SS:[EBP-1C]
00559EF6 .  E8 39AFEAFF CALL MIR2_u.00404E34
00559EFB .  8D45 F0    LEA EAX,DWORD PTR SS:[EBP-10]
00559EFE .  E8 31AFEAFF CALL MIR2_u.00404E34
00559F03 .  C3          RETN
00559F04 .^ E9 07A9EAFF JMP MIR2_u.00404810
00559F09 >^ EB E8       JMP SHORT MIR2_u.00559EF3
00559F0B .  8BE5       MOV ESP,EBP
00559F0D .  5D          POP EBP
00559F0E .  C3          RETN

使用道具举报

tintin1986

主题	好友	78 积分

注册会员

发消息

发表于 2009-6-10 13:47:49 |显示全部楼层

红字
0054D046 .  C3          RETN
0054D047    90          NOP
0054D048 .  55          PUSH EBP
0054D049 .  8BEC       MOV EBP,ESP
0054D04B .  83C4 D0    ADD ESP,-30
0054D04E .  33C9       XOR ECX,ECX
0054D050 .  894D D0    MOV DWORD PTR SS:[EBP-30],ECX
0054D053 .  894D D4    MOV DWORD PTR SS:[EBP-2C],ECX
0054D056 .  894D D8    MOV DWORD PTR SS:[EBP-28],ECX
0054D059 .  894D E4    MOV DWORD PTR SS:[EBP-1C],ECX
0054D05C .  894D F8    MOV DWORD PTR SS:[EBP-8],ECX
0054D05F .  8955 E8    MOV DWORD PTR SS:[EBP-18],EDX
0054D062 .  8945 FC    MOV DWORD PTR SS:[EBP-4],EAX
0054D065 .  33C0       XOR EAX,EAX
0054D067 .  55          PUSH EBP
0054D068 .  68 86D35400 PUSH mir2.0054D386
0054D06D .  64:FF30    PUSH DWORD PTR FS:[EAX]
0054D070 .  64:8920    MOV DWORD PTR FS:[EAX],ESP
0054D073 .  A1 1C295700 MOV EAX,DWORD PTR DS:[57291C]
0054D078 .  8038 00    CMP BYTE PTR DS:[EAX],0
0054D07B .  E9 AC000000 JMP mir2.0054D12C
0054D080    90          NOP
0054D081 .  A1 6C205700 MOV EAX,DWORD PTR DS:[57206C]
0054D086 .  8338 00    CMP DWORD PTR DS:[EAX],0
0054D089 .  E9 9E000000 JMP mir2.0054D12C
0054D08E    90          NOP
0054D08F .  A1 88295700 MOV EAX,DWORD PTR DS:[572988]
0054D094 .  8338 00    CMP DWORD PTR DS:[EAX],0
0054D097 .  E9 90000000 JMP mir2.0054D12C
0054D09C    90          NOP
0054D09D    90          NOP
0054D09E .  8B15 AC2B5700 MOV EDX,DWORD PTR DS:[572BAC]          ;  mir2.00580EF0
0054D0A4 .  2B02       SUB EAX,DWORD PTR DS:[EDX]
0054D0A6 .  83F8 64    CMP EAX,64
0054D0A9 .  E9 7E000000 JMP mir2.0054D12C
0054D0AE    90          NOP
0054D0AF    90          NOP
0054D0B0 .  FF08       DEC DWORD PTR DS:[EAX]
0054D0B2 .  E8 65C3F8FF CALL mir2.004D941C
0054D0B7 .  8B15 AC2B5700 MOV EDX,DWORD PTR DS:[572BAC]          ;  mir2.00580EF0
0054D0BD .  8902       MOV DWORD PTR DS:[EDX],EAX
0054D0BF .  A1 88295700 MOV EAX,DWORD PTR DS:[572988]
0054D0C4 .  8338 00    CMP DWORD PTR DS:[EAX],0
0054D0C7 .  EB 63       JMP SHORT mir2.0054D12C
0054D0C9 .  8B15 88295700 MOV EDX,DWORD PTR DS:[572988]          ;  mir2.00580EEC
0054D0CF .  8B12       MOV EDX,DWORD PTR DS:[EDX]
0054D0D1 .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D0D4 .  E8 538B0100 CALL mir2.00565C2C
0054D0D9 .  E8 3AA4EBFF CALL <JMP.&kernel32.GetTickCount>       ; [GetTickCount
0054D0DE .  8B15 DC2B5700 MOV EDX,DWORD PTR DS:[572BDC]          ;  mir2.0058A194
0054D0E4 .  2B02       SUB EAX,DWORD PTR DS:[EDX]
0054D0E6 .  3D 88130000 CMP EAX,1388
0054D0EB .  EB 3F       JMP SHORT mir2.0054D12C
0054D0ED .  E8 26A4EBFF CALL <JMP.&kernel32.GetTickCount>       ; [GetTickCount
0054D0F2 .  8B15 DC2B5700 MOV EDX,DWORD PTR DS:[572BDC]          ;  mir2.0058A194
0054D0F8 .  8902       MOV DWORD PTR DS:[EDX],EAX
0054D0FA .  E8 1D89F8FF CALL mir2.004D5A1C
0054D0FF .  84C0       TEST AL,AL
0054D101 .  EB 29       JMP SHORT mir2.0054D12C
0054D103 .  68 FFFFFF00 PUSH 0FFFFFF
0054D108 .  B9 FF000000 MOV ECX,0FF
0054D10D .  BA 9CD35400 MOV EDX,mir2.0054D39C                   ;  系统检测到你正在使用变速齿轮,请关闭后重新进入游戏.
0054D112 .  A1 00B15E00 MOV EAX,DWORD PTR DS:[5EB100]
0054D117 .  E8 A0FAFEFF CALL mir2.0053CBBC
0054D11C .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D11F .  8B80 28030000 MOV EAX,DWORD PTR DS:[EAX+328]
0054D125 .  33D2       XOR EDX,EDX
0054D127 .  E8 8469F2FF CALL mir2.00473AB0
0054D12C >  A1 28205700 MOV EAX,DWORD PTR DS:[572028]
0054D131 .  8338 00    CMP DWORD PTR DS:[EAX],0
0054D134 .  74 28       JE SHORT mir2.0054D15E
0054D136 .  E8 E1C2F8FF CALL mir2.004D941C
0054D13B .  8B15 D81E5700 MOV EDX,DWORD PTR DS:[571ED8]          ;  mir2.0057DFA4
0054D141 .  2B02       SUB EAX,DWORD PTR DS:[EDX]
0054D143 .  3D E8030000 CMP EAX,3E8
0054D148 .  72 14       JB SHORT mir2.0054D15E
0054D14A .  E8 CDC2F8FF CALL mir2.004D941C
0054D14F .  8B15 D81E5700 MOV EDX,DWORD PTR DS:[571ED8]          ;  mir2.0057DFA4
0054D155 .  8902       MOV DWORD PTR DS:[EDX],EAX
0054D157 .  A1 5C295700 MOV EAX,DWORD PTR DS:[57295C]
0054D15C .  FF08       DEC DWORD PTR DS:[EAX]
0054D15E >  803D 081D5700>CMP BYTE PTR DS:[571D08],0
0054D165 .  0F85 F0010000 JNZ mir2.0054D35B
0054D16B .  C605 081D5700>MOV BYTE PTR DS:[571D08],1
0054D172 .  33C0       XOR EAX,EAX
0054D174 .  55          PUSH EBP
0054D175 .  68 83D25400 PUSH mir2.0054D283
0054D17A .  64:FF30    PUSH DWORD PTR FS:[EAX]
0054D17D .  64:8920    MOV DWORD PTR FS:[EAX],ESP
0054D180 .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D183 .  05 1C040000 ADD EAX,41C
0054D188 .  8B55 FC    MOV EDX,DWORD PTR SS:[EBP-4]
0054D18B .  8B92 18040000 MOV EDX,DWORD PTR DS:[EDX+418]
0054D191 .  E8 667FEBFF CALL mir2.004050FC
0054D196 .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D199 .  05 18040000 ADD EAX,418
0054D19E .  E8 917CEBFF CALL mir2.00404E34
0054D1A3 .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D1A6 .  83B8 1C040000>CMP DWORD PTR DS:[EAX+41C],0
0054D1AD .  0F84 BB000000 JE mir2.0054D26E
0054D1B3 .  33C0       XOR EAX,EAX
0054D1B5 .  8945 F0    MOV DWORD PTR SS:[EBP-10],EAX
0054D1B8 .  E9 9A000000 JMP mir2.0054D257
0054D1BD >  A1 C4275700 MOV EAX,DWORD PTR DS:[5727C4]
0054D1C2 .  8038 00    CMP BYTE PTR DS:[EAX],0
0054D1C5 .  0F85 A3000000 JNZ mir2.0054D26E
0054D1CB .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D1CE .  8B90 1C040000 MOV EDX,DWORD PTR DS:[EAX+41C]
0054D1D4 .  B8 D8D35400 MOV EAX,mir2.0054D3D8                   ;  !
0054D1D9 .  E8 5A82EBFF CALL mir2.00405438
0054D1DE .  85C0       TEST EAX,EAX
0054D1E0 .  0F8E 88000000 JLE mir2.0054D26E
0054D1E6 .  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0054D1E9 .  50          PUSH EAX
0054D1EA .  8D45 D8    LEA EAX,DWORD PTR SS:[EBP-28]
0054D1ED .  50          PUSH EAX
0054D1EE .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D1F1 .  8B80 1C040000 MOV EAX,DWORD PTR DS:[EAX+41C]
0054D1F7 .  B9 D8D35400 MOV ECX,mir2.0054D3D8                   ;  !
0054D1FC .  BA E4D35400 MOV EDX,mir2.0054D3E4                   ;  #
0054D201 .  E8 9A9CF4FF CALL mir2.00496EA0
0054D206 .  8B55 D8    MOV EDX,DWORD PTR SS:[EBP-28]
0054D209 .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D20C .  05 1C040000 ADD EAX,41C
0054D211 .  E8 727CEBFF CALL mir2.00404E88
0054D216 .  837D F8 00 CMP DWORD PTR SS:[EBP-8],0
0054D21A .  74 24       JE SHORT mir2.0054D240
0054D21C .  33C0       XOR EAX,EAX
0054D21E .  8945 F4    MOV DWORD PTR SS:[EBP-C],EAX
0054D221 >  8B55 F8    MOV EDX,DWORD PTR SS:[EBP-8]
0054D224 .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D227 .  E8 BC010000 CALL mir2.0054D3E8
0054D22C .  8845 EF    MOV BYTE PTR SS:[EBP-11],AL
0054D22F .  FF45 F4    INC DWORD PTR SS:[EBP-C]
0054D232 .  807D EF 00 CMP BYTE PTR SS:[EBP-11],0
0054D236 .  75 1F       JNZ SHORT mir2.0054D257
0054D238 .  837D F4 05 CMP DWORD PTR SS:[EBP-C],5
0054D23C .^ 7C E3       JL SHORT mir2.0054D221
0054D23E .  EB 17       JMP SHORT mir2.0054D257
0054D240 >  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D243 .  8B90 1C040000 MOV EDX,DWORD PTR DS:[EAX+41C]
0054D249 .  B8 D8D35400 MOV EAX,mir2.0054D3D8                   ;  !
0054D24E .  E8 E581EBFF CALL mir2.00405438
0054D253 .  85C0       TEST EAX,EAX
0054D255 .  7E 17       JLE SHORT mir2.0054D26E
0054D257 >  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D25A .  8B80 1C040000 MOV EAX,DWORD PTR DS:[EAX+41C]
0054D260 .  E8 8F7EEBFF CALL mir2.004050F4
0054D265 .  83F8 02    CMP EAX,2
0054D268 .^ 0F8D 4FFFFFFF JGE mir2.0054D1BD
0054D26E >  33C0       XOR EAX,EAX
0054D270 .  5A          POP EDX
0054D271 .  59          POP ECX
0054D272 .  59          POP ECX
0054D273 .  64:8910    MOV DWORD PTR FS:[EAX],EDX
0054D276 .  68 8AD25400 PUSH mir2.0054D28A                      ;  ≡#w
0054D27B >  C605 081D5700>MOV BYTE PTR DS:[571D08],0
0054D282 .  C3          RETN                                  ;  RET 用作跳转到 0054D28A
0054D283 .^ E9 8875EBFF JMP mir2.00404810
0054D288 .^ EB F1       JMP SHORT mir2.0054D27B
0054D28A >  A1 D4235700 MOV EAX,DWORD PTR DS:[5723D4]
0054D28F .  8038 00    CMP BYTE PTR DS:[EAX],0
0054D292 .  0F84 8F000000 JE mir2.0054D327
0054D298 .  E8 7FC1F8FF CALL mir2.004D941C
0054D29D .  8B15 24225700 MOV EDX,DWORD PTR DS:[572224]          ;  mir2.0058765C
0054D2A3 .  2B02       SUB EAX,DWORD PTR DS:[EDX]
0054D2A5 .  3D F4010000 CMP EAX,1F4
0054D2AA .  72 7B       JB SHORT mir2.0054D327

使用道具举报

tintin1986

主题	好友	78 积分

注册会员

发消息

发表于 2009-6-10 13:48:19 |显示全部楼层

本帖最后由 tintin1986 于 2009-6-10 13:52 编辑

0054D2AC .  A1 D4235700 MOV EAX,DWORD PTR DS:[5723D4]
0054D2B1 .  C600 00    MOV BYTE PTR DS:[EAX],0
0054D2B4 .  A1 7C2C5700 MOV EAX,DWORD PTR DS:[572C7C]
0054D2B9 .  8B00       MOV EAX,DWORD PTR DS:[EAX]
0054D2BB .  8A80 F00C0000 MOV AL,BYTE PTR DS:[EAX+CF0]
0054D2C1 .  2C 01       SUB AL,1                               ;  Switch (cases 0..1)
0054D2C3 .  72 04       JB SHORT mir2.0054D2C9
0054D2C5 .  74 32       JE SHORT mir2.0054D2F9
0054D2C7 .  EB 5E       JMP SHORT mir2.0054D327
0054D2C9 >  8D45 D4    LEA EAX,DWORD PTR SS:[EBP-2C]          ;  Case 0 of switch 0054D2C1
0054D2CC .  8B15 481F5700 MOV EDX,DWORD PTR DS:[571F48]          ;  mir2.00587374
0054D2D2 .  E8 C17DEBFF CALL mir2.00405098
0054D2D7 .  8B45 D4    MOV EAX,DWORD PTR SS:[EBP-2C]
0054D2DA .  50          PUSH EAX
0054D2DB .  8B0D 481F5700 MOV ECX,DWORD PTR DS:[571F48]          ;  mir2.00587374
0054D2E1 .  8B89 8C000000 MOV ECX,DWORD PTR DS:[ECX+8C]
0054D2E7 .  8B15 C8235700 MOV EDX,DWORD PTR DS:[5723C8]          ;  mir2.0057E79C
0054D2ED .  8B12       MOV EDX,DWORD PTR DS:[EDX]
0054D2EF .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D2F2 .  E8 B5E6FFFF CALL mir2.0054B9AC
0054D2F7 .  EB 2E       JMP SHORT mir2.0054D327
0054D2F9 >  8D45 D0    LEA EAX,DWORD PTR SS:[EBP-30]          ;  Case 1 of switch 0054D2C1
0054D2FC .  8B15 481F5700 MOV EDX,DWORD PTR DS:[571F48]          ;  mir2.00587374
0054D302 .  E8 917DEBFF CALL mir2.00405098
0054D307 .  8B45 D0    MOV EAX,DWORD PTR SS:[EBP-30]
0054D30A .  50          PUSH EAX
0054D30B .  8B0D 481F5700 MOV ECX,DWORD PTR DS:[571F48]          ;  mir2.00587374
0054D311 .  8B89 8C000000 MOV ECX,DWORD PTR DS:[ECX+8C]
0054D317 .  8B15 C8235700 MOV EDX,DWORD PTR DS:[5723C8]          ;  mir2.0057E79C
0054D31D .  8B12       MOV EDX,DWORD PTR DS:[EDX]
0054D31F .  8B45 FC    MOV EAX,DWORD PTR SS:[EBP-4]
0054D322 .  E8 31E7FFFF CALL mir2.0054BA58
0054D327 >  A1 E8285700 MOV EAX,DWORD PTR DS:[5728E8]          ;  Default case of switch 0054D2C1
0054D32C .  8338 00    CMP DWORD PTR DS:[EAX],0
0054D32F .  7E 16       JLE SHORT mir2.0054D347
0054D331 .  A1 7C2C5700 MOV EAX,DWORD PTR DS:[572C7C]
0054D336 .  8B00       MOV EAX,DWORD PTR DS:[EAX]
0054D338 .  8B80 C4050000 MOV EAX,DWORD PTR DS:[EAX+5C4]
0054D33E .  C680 6C020000>MOV BYTE PTR DS:[EAX+26C],1
0054D345 .  EB 14       JMP SHORT mir2.0054D35B
0054D347 >  A1 7C2C5700 MOV EAX,DWORD PTR DS:[572C7C]
0054D34C .  8B00       MOV EAX,DWORD PTR DS:[EAX]
0054D34E .  8B80 C4050000 MOV EAX,DWORD PTR DS:[EAX+5C4]
0054D354 .  C680 6C020000>MOV BYTE PTR DS:[EAX+26C],0
0054D35B >  33C0       XOR EAX,EAX
0054D35D .  5A          POP EDX
0054D35E .  59          POP ECX
0054D35F .  59          POP ECX
0054D360 .  64:8910    MOV DWORD PTR FS:[EAX],EDX
0054D363 .  68 8DD35400 PUSH mir2.0054D38D
0054D368 >  8D45 D0    LEA EAX,DWORD PTR SS:[EBP-30]
0054D36B .  BA 03000000 MOV EDX,3
0054D370 .  E8 E37AEBFF CALL mir2.00404E58
0054D375 >  8D45 E4    LEA EAX,DWORD PTR SS:[EBP-1C]
0054D378 .  E8 B77AEBFF CALL mir2.00404E34
0054D37D .  8D45 F8    LEA EAX,DWORD PTR SS:[EBP-8]
0054D380 .  E8 AF7AEBFF CALL mir2.00404E34
0054D385 .  C3          RETN
0054D386 .^ E9 8574EBFF JMP mir2.00404810
0054D38B .^ EB DB       JMP SHORT mir2.0054D368
0054D38D .  8BE5       MOV ESP,EBP
0054D38F .  5D          POP EBP
0054D390 .  C3          RETN

00559CB4    C3          RETN
0054D046 .  C3          RETN
0054D174 .  55          RETN
三处都RETN掉干掉没问题了

使用道具举报