borland delphi 7.0_borland delphi反编译_borland 知乎(4)

00700E73|.E8 30D1D9FF callcontract.0049DFA8

00700E78|> 8BC6 moveax,esi

00700E7A|.E8 C927D0FF callcontract.00403648

00700E7F|> 33C0 xoreax,eax

00700E81|. 5A popedx ;kernel32.7C817077

00700E82|. 59 popecx ;kernel32.7C817077

00700E83|. 59 popecx ;kernel32.7C817077

00700E84|.64:8910 mov dword ptrfs:[eax],edx ;ntdll.KiFastSystemCallRet

00700E87|.68 E30E7000 pushcontract.00700EE3

00700E8C|>8D45 lea eax,[local.15]

00700E8F|.E8 0436D0FF callcontract.00404498

00700E94|.8D45 C8 lea eax,[local.14]

00700E97|.BA 02000000 mov edx,0x2

00700E9C|.E8 1B36D0FF callcontract.004044BC

00700EA1|.8D45 D0 lea eax,[local.12]

00700EA4|.BA 03000000 mov edx,0x3

00700EA9|.E8 0E36D0FF callcontract.004044BC

00700EAE|.8D45 DC lea eax,[local.9]

00700EB1|.E8 E235D0FF callcontract.00404498

00700EB6|.8D45 E0 lea eax,[local.8]

00700EB9|.E8 DA35D0FF callcontract.00404498

00700EBE|.8D45 E4 lea eax,[local.7]

00700EC1|.E8 EE06D1FF callcontract.004115B4

00700EC6|.8D45 F4 lea eax,[local.3]

00700EC9|.E8 CA35D0FF callcontract.00404498

00700ECE|.8D45 F8 lea eax,[local.2]

00700ED1|.BA 02000000 mov edx,0x2

00700ED6|.E8 E135D0FF callcontract.004044BC

00700EDB\. C3 retn

3、堆栈 ss:[0012F160]=00F1A574, (ASCII"qyfa-qhrc-avmc-fnkx-r")

eax=0012F172

0012F160 00F1A574ASCII"qyfa-qhrc-avmc-fnkx-r"

--------------------------------------------------------------------------------

【经验总结】

1、 适合入门新手练习追码和爆破.

2、 可做内存补丁与算法补丁.

3、 可以练习多个方面的知识.

--------------------------------------------------------------------------------

2014年01月08日 上午 11:12:00

本文来自电脑杂谈，转载请注明本文网址：
https://www.pc-fly.com/a/jisuanjixue/article-32309-4.html