好友
阅读权限40
听众
最后登录1970-1-1
|
000 | 00404C60 | 33C0 | xor eax,eax | eax: FFFFFFFB-> 0 ebx: 0-> 0 ecx: 2EE299 | |
001 | 00404C62 | 5E | pop esi | esp: 19F0AC-> 19F0B0 esi: 19F0FC-> 2EE3E | 0019F0AC: 2EE3E98-> 2EE3E98 |
002 | 00404C63 | 83C4 3C | add esp,3C | esp: 19F0B0-> 19F0EC | |
003 | 00404C66 | C2 0400 | ret 4 | esp: 19F0EC-> 19F0F4 | 0019F0EC: 404CC7-> 404CC7 |
004 | 00404CC7 | 83F8 01 | cmp eax,1 | | |
005 | 00404CCA | 75 47 | jne 456.vmp.404D13 | | |
006 | 00404D13 | 8B86 B0000000 | mov eax,dword ptr ds:[esi+B0] | eax: 0-> 52010001 | 02EE3F48: 52010001-> 52010001 |
007 | 00404D19 | 8BB6 B4000000 | mov esi,dword ptr ds:[esi+B4] | esi: 2EE3E98-> 16010003 | 02EE3F4C: 16010003-> 16010003 |
008 | 00404D1F | 8D5424 14 | lea edx,dword ptr ss:[esp+14] | edx: 2EE2999-> 19F108 | |
009 | 00404D23 | 53 | push ebx | esp: 19F0F4-> 19F0F0 | 0019F0F0: 19F0FC-> 0 |
00A | 00404D24 | 52 | push edx | esp: 19F0F0-> 19F0EC | 0019F0EC: 404CC7-> 19F108 |
00B | 00404D25 | 68 D8070000 | push 7D8 | esp: 19F0EC-> 19F0E8 | 0019F0E8: 0-> 7D8 |
00C | 00404D2A | 894424 20 | mov dword ptr ss:[esp+20],eax | | 0019F108: FFE50020-> 52010001 |
00D | 00404D2E | 897424 24 | mov dword ptr ss:[esp+24],esi | | 0019F10C: 2025A1-> 16010003 |
00E | 00404D32 | C74424 28 F8FFFFFF | mov dword ptr ss:[esp+28],FFFFFF | | 0019F110: 7000000-> FFFFFFF8 |
00F | 00404D3A | 895C24 2C | mov dword ptr ss:[esp+2C],ebx | | 0019F114: 86-> 0 |
010 | 00404D3E | 895C24 44 | mov dword ptr ss:[esp+44],ebx | | 0019F12C: 0-> 0 |
011 | 00404D42 | 895C24 48 | mov dword ptr ss:[esp+48],ebx | | 0019F130: C-> 0 |
012 | 00404D46 | E8 B5C80000 | call 456.vmp.411600 | eax: 52010001-> 0 ecx: 2EE2998-> 19F134 | 0019F0E4: 2-> 404D4B |
013 | 00404D4B | 8D4C24 08 | lea ecx,dword ptr ss:[esp+8] | ecx: 19F134-> 19F0FC | |
014 | 00404D4F | C74424 48 FFFFFFFF | mov dword ptr ss:[esp+48],FFFFFF | | 0019F13C: 0-> FFFFFFFF |
015 | 00404D57 | E8 1BAB0600 | call 456.vmp.46F877 | ecx: 19F0FC-> FFFFFFFF edx: 0-> 2FF000 | 0019F0F0: 0-> 404D5C |
016 | 00404D5C | 8B4C24 40 | mov ecx,dword ptr ss:[esp+40] | ecx: FFFFFFFF-> 19F2E0 | 0019F134: 19F2E0-> 19F2E0 |
017 | 00404D60 | 5E | pop esi | esp: 19F0F4-> 19F0F8 esi: 16010003-> 480 | 0019F0F4: 480BA0-> 480BA0 |
018 | 00404D61 | 5B | pop ebx | ebx: 0-> 1 esp: 19F0F8-> 19F0FC | 0019F0F8: 1-> 1 |
019 | 00404D62 | 64:890D 00000000 | mov dword ptr fs:[0],ecx | | 002FF000: 19F134-> 19F2E0 |
01A | 00404D69 | 83C4 44 | add esp,44 | esp: 19F0FC-> 19F140 | |
01B | 00404D6C | C3 | ret | esp: 19F140-> 19F144 | 0019F140: 4741C1-> 4741C1 |
01C | 004741C1 | EB 7F | jmp 456.vmp.474242 | | |
01D | 00474242 | 8BC3 | mov eax,ebx | eax: 0-> 1 | |
01E | 00474244 | 5E | pop esi | esp: 19F144-> 19F148 | 0019F144: 480BA0-> 480BA0 |
01F | 00474245 | 5B | pop ebx | ebx: 1-> BD11 esp: 19F148-> 19F14C | 0019F148: BD11-> BD11 |
020 | 00474246 | 5D | pop ebp | esp: 19F14C-> 19F150 ebp: 19F14C-> 19F17 | 0019F14C: 19F17C-> 19F17C |
021 | 00474247 | C2 1C00 | ret 1C | esp: 19F150-> 19F170 | 0019F150: 47434E-> 47434E |
022 | 0047434E | EB 02 | jmp 456.vmp.474352 | | |
023 | 00474352 | 5F | pop edi | esp: 19F170-> 19F174 edi: 2EE3E98-> 601B | 0019F170: 601B2-> 601B2 |
024 | 00474353 | 5E | pop esi | esp: 19F174-> 19F178 esi: 480BA0-> 0 | 0019F174: 0-> 0 |
025 | 00474354 | 5B | pop ebx | ebx: BD11-> 200 esp: 19F178-> 19F17C | 0019F178: 200-> 200 |
026 | 00474355 | 5D | pop ebp | esp: 19F17C-> 19F180 ebp: 19F17C-> 19F1A | 0019F17C: 19F1A4-> 19F1A4 |
027 | 00474356 | C2 1000 | ret 10 | esp: 19F180-> 19F194 | 0019F180: 472C6E-> 472C6E |
028 | 00472C6E | 85C0 | test eax,eax | | |
029 | 00472C70 | 74 70 | je 456.vmp.472CE2 | | |
02A | 00472C72 | 8B4D 14 | mov ecx,dword ptr ss:[ebp+14] | ecx: 19F2E0-> 0 | 0019F1B8: 0-> 0 |
02B | 00472C75 | 6A 01 | push 1 | esp: 19F194-> 19F190 | 0019F190: 0-> 1 |
02C | 00472C77 | 3BCE | cmp ecx,esi | | |
02D | 00472C79 | 58 | pop eax | esp: 19F190-> 19F194 | 0019F190: 1-> 1 |
02E | 00472C7A | 74 68 | je 456.vmp.472CE4 | | |
02F | 00472CE4 | 5E | pop esi | esp: 19F194-> 19F198 esi: 0-> 2EE3E98 | 0019F194: 2EE3E98-> 2EE3E98 |
030 | 00472CE5 | C9 | leave | esp: 19F198-> 19F1A8 ebp: 19F1A4-> 19F1C | |
031 | 00472CE6 | C2 1000 | ret 10 | esp: 19F1A8-> 19F1BC | 0019F1A8: 472BFC-> 472BFC |
032 | 00472BFC | 5E | pop esi | esp: 19F1BC-> 19F1C0 | 0019F1BC: 2EE3E98-> 2EE3E98 |
033 | 00472BFD | 5D | pop ebp | esp: 19F1C0-> 19F1C4 ebp: 19F1C0-> 2EE0E | 0019F1C0: 2EE0E30-> 2EE0E30 |
034 | 00472BFE | C2 1000 | ret 10 | esp: 19F1C4-> 19F1D8 | 0019F1C4: 472AFE-> 472AFE |
035 | 00472AFE | 5E | pop esi | esp: 19F1D8-> 19F1DC esi: 2EE3E98-> 601B | 0019F1D8: 601B2-> 601B2 |
036 | 00472AFF | C2 0400 | ret 4 | esp: 19F1DC-> 19F1E4 | 0019F1DC: 43422F-> 43422F |
037 | 0043422F | 5E | pop esi | esp: 19F1E4-> 19F1E8 esi: 601B2-> 6E | 0019F1E4: 6E-> 6E |
038 | 00434230 | C3 | ret | esp: 19F1E8-> 19F1EC | 0019F1E8: 43437B-> 43437B |
039 | 0043437B | 83C4 08 | add esp,8 | esp: 19F1EC-> 19F1F4 | |
03A | 0043437E | 85C0 | test eax,eax | | |
03B | 00434380 | 0F85 C9000000 | jne 456.vmp.43444F | | |
03C | 0043444F | 5F | pop edi | esp: 19F1F4-> 19F1F8 edi: 601B2-> 2EE0E3 | 0019F1F4: 2EE0E30-> 2EE0E30 |
03D | 00434450 | 5E | pop esi | esp: 19F1F8-> 19F1FC esi: 6E-> 200006E | 0019F1F8: 200006E-> 200006E |
03E | 00434451 | 5D | pop ebp | esp: 19F1FC-> 19F200 ebp: 2EE0E30-> 19F2 | 0019F1FC: 19F2EC-> 19F2EC |
03F | 00434452 | B8 01000000 | mov eax,1 | | |
040 | 00434457 | 5B | pop ebx | ebx: 200-> 111 esp: 19F200-> 19F204 | 0019F200: 111-> 111 |
041 | 00434458 | 83C4 2C | add esp,2C | esp: 19F204-> 19F230 | |
042 | 0043445B | C3 | ret | esp: 19F230-> 19F234 | 0019F230: 41612E-> 41612E |
043 | 0041612E | 83C4 0C | add esp,C | esp: 19F234-> 19F240 | |
044 | 00416131 | 5F | pop edi | esp: 19F240-> 19F244 | 0019F240: 2EE0E30-> 2EE0E30 |
045 | 00416132 | 5E | pop esi | esp: 19F244-> 19F248 esi: 200006E-> 2EE0 | 0019F244: 2EE0E30-> 2EE0E30 |
046 | 00416133 | 83C4 2C | add esp,2C | esp: 19F248-> 19F274 | |
047 | 00416136 | C2 0800 | ret 8 | esp: 19F274-> 19F280 | 0019F274: 472123-> 472123 |
048 | 00472123 | 85C0 | test eax,eax | | |
049 | 00472125 | 0F84 55010000 | je 456.vmp.472280 | | |
04A | 0047212B | E9 1D040000 | jmp 456.vmp.47254D | | |
04B | 0047254D | C745 F0 01000000 | mov dword ptr ss:[ebp-10],1 | | 0019F2DC: 0-> 1 |
04C | 00472554 | EB 3B | jmp 456.vmp.472591 | | |
04D | 00472591 | 8B45 14 | mov eax,dword ptr ss:[ebp+14] | eax: 1-> 19F308 | 0019F300: 19F308-> 19F308 |
04E | 00472594 | 85C0 | test eax,eax | | |
04F | 00472596 | 74 05 | je 456.vmp.47259D | | |
050 | 00472598 | 8B4D F0 | mov ecx,dword ptr ss:[ebp-10] | ecx: 0-> 1 | 0019F2DC: 1-> 1 |
051 | 0047259B | 8908 | mov dword ptr ds:[eax],ecx | | 0019F308: 0-> 1 |
052 | 0047259D | 6A 01 | push 1 | esp: 19F280-> 19F27C | 0019F27C: 601B2-> 1 |
053 | 0047259F | 58 | pop eax | eax: 19F308-> 1 esp: 19F27C-> 19F280 | 0019F27C: 1-> 1 |
054 | 004725A0 | E9 DDFCFFFF | jmp 456.vmp.472282 | | |
055 | 00472282 | 8B4D F4 | mov ecx,dword ptr ss:[ebp-C] | ecx: 1-> 19F360 | 0019F2E0: 19F360-> 19F360 |
056 | 00472285 | 5F | pop edi | esp: 19F280-> 19F284 | 0019F280: 2EE0E30-> 2EE0E30 |
057 | 00472286 | 5E | pop esi | esp: 19F284-> 19F288 | 0019F284: 2EE0E30-> 2EE0E30 |
058 | 00472287 | 5B | pop ebx | ebx: 111-> E42C00 esp: 19F288-> 19F28C | 0019F288: E42C00-> E42C00 |
059 | 00472288 | 64:890D 00000000 | mov dword ptr fs:[0],ecx | | 002FF000: 19F2E0-> 19F360 |
05A | 0047228F | C9 | leave | esp: 19F28C-> 19F2F0 ebp: 19F2EC-> 19F30 | |
05B | 00472290 | C2 1000 | ret 10 | esp: 19F2F0-> 19F304 | 0019F2F0: 4720D5-> 4720D5 |
05C | 004720D5 | 85C0 | test eax,eax | | |
05D | 004720D7 | 75 16 | jne 456.vmp.4720EF | | |
05E | 004720EF | 8B45 FC | mov eax,dword ptr ss:[ebp-4] | | 0019F308: 1-> 1 | [ebp-4]:"t\v="
05F | 004720F2 | 5E | pop esi | esp: 19F304-> 19F308 esi: 2EE0E30-> 111 | 0019F304: 111-> 111 |
060 | 004720F3 | C9 | leave | esp: 19F308-> 19F310 ebp: 19F30C-> 19F36 | |
061 | 004720F4 | C2 0C00 | ret C | esp: 19F310-> 19F320 | 0019F310: 471115-> 471115 |
062 | 00471115 | 81FE 10010000 | cmp esi,110 | | |
063 | 0047111B | 8945 08 | mov dword ptr ss:[ebp+8],eax | | 0019F374: 2EE0E30-> 1 |
064 | 0047111E | 75 43 | jne 456.vmp.471163 | | |
065 | 00471163 | 6A 07 | push 7 | esp: 19F320-> 19F31C | 0019F31C: 601B2-> 7 |
066 | 00471165 | 8B45 08 | mov eax,dword ptr ss:[ebp+8] | | 0019F374: 1-> 1 |
067 | 00471168 | 8D7B 34 | lea edi,dword ptr ds:[ebx+34] | edi: 2EE0E30-> E42C34 | |
068 | 0047116B | 59 | pop ecx | ecx: 19F360-> 7 esp: 19F31C-> 19F320 | 0019F31C: 7-> 7 |
069 | 0047116C | 8D75 C0 | lea esi,dword ptr ss:[ebp-40] | esi: 111-> 19F32C | |
06A | 0047116F | F3:A5 | rep movsd | ecx: 7-> 0 esi: 19F32C-> 19F348 edi: E42 | |
06B | 00471171 | 8B4D F4 | mov ecx,dword ptr ss:[ebp-C] | ecx: 0-> 19F48C | 0019F360: 19F48C-> 19F48C |
06C | 00471174 | 5F | pop edi | esp: 19F320-> 19F324 edi: E42C50-> 111 | 0019F320: 111-> 111 |
06D | 00471175 | 5E | pop esi | esp: 19F324-> 19F328 esi: 19F348-> 9052A | 0019F324: 9052A-> 9052A |
06E | 00471176 | 64:890D 00000000 | mov dword ptr fs:[0],ecx | | 002FF000: 19F360-> 19F48C |
06F | 0047117D | 5B | pop ebx | ebx: E42C00-> 4712FC esp: 19F328-> 19F32 | 0019F328: 4712FC-> 4712FC |
070 | 0047117E | C9 | leave | esp: 19F32C-> 19F370 ebp: 19F36C-> 19F38 | |
071 | 0047117F | C2 1400 | ret 14 | esp: 19F370-> 19F388 | 0019F370: 471330-> 471330 |
072 | 00471330 | EB 10 | jmp 456.vmp.471342 | | |
073 | 00471342 | 5E | pop esi | esp: 19F388-> 19F38C esi: 9052A-> 0 | 0019F388: 0-> 0 |
074 | 00471343 | 5D | pop ebp | esp: 19F38C-> 19F390 ebp: 19F38C-> 19F3B | 0019F38C: 19F3B8-> 19F3B8 |
075 | 00471344 | C2 1000 | ret 10 | esp: 19F390-> 19F3A4 | 0019F390: 7666438B-> 7666438B |
10B | 00471B2B | 5E | pop esi | esp: 19F788-> 19F78C | 0019F788: 2EE3E98-> 2EE3E98 |
10C | 00471B2C | 5D | pop ebp | esp: 19F78C-> 19F790 ebp: 19F78C-> 19F7A | 0019F78C: 19F7A8-> 19F7A8 |
10D | 00471B2D | C2 0C00 | ret C | esp: 19F790-> 19F7A0 | 0019F790: 4720EC-> 4720EC |
10E | 004720EC | 8945 FC | mov dword ptr ss:[ebp-4],eax | | 0019F7A4: 0-> 1 | [ebp-4]:"t\v="
10F | 004720EF | 8B45 FC | mov eax,dword ptr ss:[ebp-4] | | 0019F7A4: 1-> 1 | [ebp-4]:"t\v="
110 | 004720F2 | 5E | pop esi | esp: 19F7A0-> 19F7A4 esi: 2EE3E98-> 8 | 0019F7A0: 8-> 8 |
111 | 004720F3 | C9 | leave | esp: 19F7A4-> 19F7AC ebp: 19F7A8-> 19F80 | |
112 | 004720F4 | C2 0C00 | ret C | esp: 19F7AC-> 19F7BC | 0019F7AC: 471115-> 471115 |
113 | 00471115 | 81FE 10010000 | cmp esi,110 | | |
114 | 0047111B | 8945 08 | mov dword ptr ss:[ebp+8],eax | | 0019F810: 2EE3E98-> 1 |
115 | 0047111E | 75 43 | jne 456.vmp.471163 | | |
116 | 00471163 | 6A 07 | push 7 | esp: 19F7BC-> 19F7B8 | 0019F7B8: 0-> 7 |
117 | 00471165 | 8B45 08 | mov eax,dword ptr ss:[ebp+8] | | 0019F810: 1-> 1 |
118 | 00471168 | 8D7B 34 | lea edi,dword ptr ds:[ebx+34] | edi: 2EE3E98-> E42C34 | |
119 | 0047116B | 59 | pop ecx | ecx: 8BA00C92-> 7 esp: 19F7B8-> 19F7BC | 0019F7B8: 7-> 7 |
11A | 0047116C | 8D75 C0 | lea esi,dword ptr ss:[ebp-40] | esi: 8-> 19F7C8 | |
11B | 0047116F | F3:A5 | rep movsd | ecx: 7-> 0 esi: 19F7C8-> 19F7E4 edi: E42 | |
11C | 00471171 | 8B4D F4 | mov ecx,dword ptr ss:[ebp-C] | ecx: 0-> 19F928 | 0019F7FC: 19F928-> 19F928 |
11D | 00471174 | 5F | pop edi | esp: 19F7BC-> 19F7C0 edi: E42C50-> 8 | 0019F7BC: 8-> 8 |
11E | 00471175 | 5E | pop esi | esp: 19F7C0-> 19F7C4 esi: 19F7E4-> 601B2 | 0019F7C0: 601B2-> 601B2 |
11F | 00471176 | 64:890D 00000000 | mov dword ptr fs:[0],ecx | | 002FF000: 19F7FC-> 19F928 |
120 | 0047117D | 5B | pop ebx | ebx: E42C00-> 4712FC esp: 19F7C4-> 19F7C | 0019F7C4: 4712FC-> 4712FC |
121 | 0047117E | C9 | leave | esp: 19F7C8-> 19F80C ebp: 19F808-> 19F82 | |
122 | 0047117F | C2 1400 | ret 14 | esp: 19F80C-> 19F824 | 0019F80C: 471330-> 471330 |
123 | 00471330 | EB 10 | jmp 456.vmp.471342 | | |
124 | 00471342 | 5E | pop esi | esp: 19F824-> 19F828 esi: 601B2-> 0 | 0019F824: 0-> 0 |
125 | 00471343 | 5D | pop ebp | esp: 19F828-> 19F82C ebp: 19F828-> 19F85 | 0019F828: 19F854-> 19F854 |
126 | 00471344 | C2 1000 | ret 10 | esp: 19F82C-> 19F840 | 0019F82C: 7666438B-> 7666438B |
16D | 0047111E | 90 | nop | | |
16E | 0047111E | 90 | nop | eax: 1290957-> 0 esi: 7F-> 1C | |
16F | 0047111E | 90 | nop | edi: 2EE0E30-> 4B0B20 | |
170 | 0047111E | 90 | nop | edi: 4B0B20-> 2EE0E30 | |
171 | 0047111E | 90 | nop | edi: 2EE0E30-> 4B0B20 | |
172 | 0047111E | 90 | nop | ecx: 8BA0169A-> 19FBD4 edx: 0-> 2FF000 e | |
173 | 004720D7 | 75 16 | jne 456.vmp.4720EF | ecx: 19FBD4-> 19FBD0 esp: 19FB78-> 19FB7 | |
174 | 004720D7 | 75 16 | jne 456.vmp.4720EF | ecx: 19FBD0-> 19FBEC esp: 19FB74-> 19FB9 | |
175 | 004720D7 | 75 16 | jne 456.vmp.4720EF | esi: 2EE0E30-> 4B0B20 edi: 2EE0E30-> 4B0 | |
176 | 004720D7 | 75 16 | jne 456.vmp.4720EF | eax: 0-> 1 edx: 2FF000-> 0 esi: 4B0B20-> | |
177 | 004720D7 | 75 16 | jne 456.vmp.4720EF | ecx: 19FBEC-> 19F8F8 edx: 0-> 2FF000 esp | |
178 | 004720D7 | 75 16 | jne 456.vmp.4720EF | eax: 1-> 0 ecx: 19F8F8-> 19EF88 esp: 19F | |
179 | 004720D7 | 75 16 | jne 456.vmp.4720EF | ecx: 19EF88-> 19E6F8 esp: 19EF2C-> 19E69 | |
17A | 004720D7 | 75 16 | jne 456.vmp.4720EF | eax: 0-> 1 ecx: 19E6F8-> 19F294 edx: 2FF | |
17B | 004720D7 | 75 16 | jne 456.vmp.4720EF | eax: 1-> 0 ecx: 19F294-> 19EC30 edx: 0-> | |
17C | 004720D7 | 75 16 | jne 456.vmp.4720EF | esi: 2EE0E30-> 2EE1130 edi: 2EE0E30-> 2E | |
17D | 004720D7 | 75 16 | jne 456.vmp.4720EF | eax: 0-> 1 ecx: 19EC30-> 19F294 edx: 2FF | |
17E | 004720D7 | 75 16 | jne 456.vmp.4720EF | ecx: 19F294-> 19F5EC edx: 1-> 0 esp: 19F | |
17F | 004720D7 | 75 16 | jne 456.vmp.4720EF | eax: 1-> 0 ecx: 19F5EC-> 19F84C edx: 0-> | |
180 | 004720D7 | 75 16 | jne 456.vmp.4720EF | ecx: 19F84C-> 19F298 esp: 19F7F0-> 19F23 | |
181 | 004720D7 | 75 16 | jne 456.vmp.4720EF | | |
182 | 004720D7 | 75 16 | jne 456.vmp.4720EF | ecx: 19F298-> 19EF58 esp: 19F23C-> 19EEF | |
183 | 004720D7 | 75 16 | jne 456.vmp.4720EF | eax: 0-> 1 ebx: E42C00-> 471F45 ecx: 19E | |
184 | 004720D7 | 75 16 | jne 456.vmp.4720EF | ebx: 471F45-> E42C00 ecx: 19F288-> 19F30 | |
185 | 004720D7 | 75 16 | jne 456.vmp.4720EF | eax: 1-> 0 ecx: 19F308-> 19F0C8 edx: 0-> | |
186 | 004720D7 | 75 16 | jne 456.vmp.4720EF | | |
自己一边玩去吧。 |
|
[复制链接]
发表于 2021-4-16 17:27
