超线3和谐分析

lees · 2005-03-27, 10:32

超线3和谐分析

* Possible StringData Ref from Data Obj ->"方正超线系统正在初始化，请稍候..."
│
:005314AB 68E8D66A00 push 006AD6E8
:005314B0 E8884AEDFF call 00405F3D
:005314B5 83C404 add esp, 00000004
:005314B8 E8B948EDFF call 00405D76

* Possible StringData Ref from Data Obj ->"正在初始化主窗口，请稍候..."
│
:005314BD 680CD76A00 push 006AD70C
:005314C2 E8764AEDFF call 00405F3D
:005314C7 83C404 add esp, 00000004
:005314CA 8B4D08 mov ecx, dword ptr [ebp+08]
:005314CD 51 push ecx
:005314CE 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]

* Reference To: MFC42.Ordinal:1169, Ord:1169h
│
:005314D4 E8211E1300 Call 006632FA
:005314D9 83F8FF cmp eax, FFFFFFFF
:005314DC 7508 jne 005314E6
:005314DE 83C8FF or eax, FFFFFFFF
:005314E1 E950080000 jmp 00531D36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:005314DC(C)
│

* Possible StringData Ref from Data Obj ->"WindowPos"
│
:005314E6 68B0D66A00 push 006AD6B0

* Possible StringData Ref from Data Obj ->"Settings"
│
:005314EB 68A4D66A00 push 006AD6A4
:005314F0 8D55C8 lea edx, dword ptr [ebp-38]
:005314F3 52 push edx
:005314F4 E84D080000 call 00531D46
:005314F9 85C0 test eax, eax
:005314FB 740F je 0053150C
:005314FD 8D45C8 lea eax, dword ptr [ebp-38]
:00531500 50 push eax
:00531501 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]

* Reference To: MFC42.Ordinal:1833, Ord:1833h
│
:00531507 E8E81D1300 Call 006632F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:005314FB(C)
│

* Possible StringData Ref from Data Obj ->"正在初始化状态条，请稍候..."
│
:0053150C 6828D76A00 push 006AD728
:00531511 E8274AEDFF call 00405F3D
:00531516 83C404 add esp, 00000004

* Possible Ref to Menu: MenuID_006D, Item: "Status Bar"
│

* Possible Reference to String Resource ID=59393: "Show or hide the status bar
Toggle StatusBar"
│
:00531519 6801E80000 push 0000E801
:0053151E 6800820050 push 50008200
:00531523 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531529 51 push ecx
:0053152A 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531530 81C1C4000000 add ecx, 000000C4

* Reference To: MFC42.Ordinal:0845, Ord:0845h
│
:00531536 E8B31D1300 Call 006632EE
:0053153B 85C0 test eax, eax
:0053153D 7425 je 00531564
:0053153F 6A06 push 00000006
:00531541 688CD66A00 push 006AD68C
:00531546 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:0053154C 81C1C4000000 add ecx, 000000C4

* Reference To: MFC42.Ordinal:1770, Ord:1770h
│
:00531552 E8911D1300 Call 006632E8
:00531557 85C0 test eax, eax
:00531559 7409 je 00531564
:0053155B E80649EDFF call 00405E66 //进入eax=1
:00531560 85C0 test eax, eax
:00531562 7536 jne 0053159A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
│:0053153D(C), :00531559(C)
│
:00531564 C745C000000000 mov [ebp-40], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531590(U)
│
:0053156B 837DC00A cmp dword ptr [ebp-40], 0000000A
:0053156F 7D21 jge 00531592
:00531571 6840420F00 push 000F4240

* Reference To: MFC42.Ordinal:0337, Ord:0337h
│
:00531576 E8D7131300 Call 00662952
:0053157B 83C404 add esp, 00000004
:0053157E 89458C mov dword ptr [ebp-74], eax
:00531581 8B558C mov edx, dword ptr [ebp-74]
:00531584 8955BC mov dword ptr [ebp-44], edx
:00531587 8B45C0 mov eax, dword ptr [ebp-40]
:0053158A 83C001 add eax, 00000001
:0053158D 8945C0 mov dword ptr [ebp-40], eax
:00531590 EBD9 jmp 0053156B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0053156F(C)
│
:00531592 83C8FF or eax, FFFFFFFF
:00531595 E99C070000 jmp 00531D36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531562(C)
│
:0053159A 8D4DB0 lea ecx, dword ptr [ebp-50]
:0053159D 51 push ecx
:0053159E 8D55B8 lea edx, dword ptr [ebp-48]
:005315A1 52 push edx
:005315A2 8D45B4 lea eax, dword ptr [ebp-4C]
:005315A5 50 push eax
:005315A6 6A01 push 00000001
:005315A8 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005315AE 81C1C4000000 add ecx, 000000C4

* Reference To: MFC42.Ordinal:0D9A, Ord:0D9Ah
│
:005315B4 E8291D1300 Call 006632E2
:005315B9 DB45B0 fild dword ptr [ebp-50]
:005315BC DC0D08FB6700 fmul qword ptr [0067FB08]

* Reference To: MSVCRT._ftol, Ord:00F1h
│
:005315C2 E81D231300 Call 006638E4
:005315C7 50 push eax
:005315C8 8B4DB8 mov ecx, dword ptr [ebp-48]
:005315CB 51 push ecx
:005315CC 8B55B4 mov edx, dword ptr [ebp-4C]
:005315CF 52 push edx
:005315D0 6A01 push 00000001
:005315D2 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005315D8 81C1C4000000 add ecx, 000000C4

* Reference To: MFC42.Ordinal:17B3, Ord:17B3h
│
:005315DE E8F91C1300 Call 006632DC

* Possible StringData Ref from Data Obj ->"正在初始化工具条，请稍候..."
│
:005315E3 6844D76A00 push 006AD744
:005315E8 E85049EDFF call 00405F3D
:005315ED 83C404 add esp, 00000004

* Possible Reference to Menu: MenuID_006D
│

* Possible Reference to String Resource ID=00109: "????2.0--????????"
│
:005315F0 6A6D push 0000006D
:005315F2 6834280050 push 50002834
:005315F7 8B8570FFFFFF mov eax, dword ptr [ebp+FFFFFF70]
:005315FD 50 push eax
:005315FE 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531604 81C144010000 add ecx, 00000144

* Reference To: MFC42.Ordinal:0848, Ord:0848h
│
:0053160A E8C71C1300 Call 006632D6
:0053160F 85C0 test eax, eax
:00531611 7417 je 0053162A

* Possible Reference to Menu: MenuID_006D
│

* Possible Reference to String Resource ID=00109: "????2.0--????????"
│
:00531613 6A6D push 0000006D
:00531615 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:0053161B 81C144010000 add ecx, 00000144
:00531621 E8D021EDFF call 004037F6
:00531626 85C0 test eax, eax
:00531628 7508 jne 00531632

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531611(C)
│
:0053162A 83C8FF or eax, FFFFFFFF
:0053162D E904070000 jmp 00531D36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531628(C)
│

* Possible StringData Ref from Data Obj ->"标准"
│
:00531632 6860D76A00 push 006AD760
:00531637 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:0053163D 81C144010000 add ecx, 00000144

* Reference To: MFC42.Ordinal:1837, Ord:1837h
│
:00531643 E8A4151300 Call 00662BEC
:00531648 6800F00000 push 0000F000
:0053164D 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531653 81C144010000 add ecx, 00000144

* Reference To: MFC42.Ordinal:0A42, Ord:0A42h
│
:00531659 E8721C1300 Call 006632D0
:0053165E 6800F00000 push 0000F000
:00531663 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]

* Reference To: MFC42.Ordinal:0A43, Ord:0A43h
│
:00531669 E85C1C1300 Call 006632CA
:0053166E 6A00 push 00000000
:00531670 681BE80000 push 0000E81B
:00531675 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:0053167B 81C144010000 add ecx, 00000144
:00531681 51 push ecx
:00531682 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]

* Reference To: MFC42.Ordinal:09BE, Ord:09BEh
│
:00531688 E8371C1300 Call 006632C4
:0053168D 6A00 push 00000000
:0053168F 6800080000 push 00000800
:00531694 6A00 push 00000000
:00531696 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:0053169C 81C144010000 add ecx, 00000144

* Reference To: MFC42.Ordinal:10BC, Ord:10BCh
│
:005316A2 E8171C1300 Call 006632BE
:005316A7 6A01 push 00000001
:005316A9 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005316AF 81C144010000 add ecx, 00000144
:005316B5 E89B44EDFF call 00405B55
:005316BA 8BC8 mov ecx, eax
:005316BC E83567EDFF call 00407DF6

* Possible Ref to Menu: MenuID_006D, Item: "Open... Ctrl+O"
│

* Possible Reference to String Resource ID=57601: "??????????(.spl)
????"
│
:005316C1 6801E10000 push 0000E101
:005316C6 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005316CC 81C144010000 add ecx, 00000144

* Reference To: MFC42.Ordinal:07DC, Ord:07DCh
│
:005316D2 E8E11B1300 Call 006632B8
:005316D7 50 push eax
:005316D8 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005316DE 81C144010000 add ecx, 00000144

* Reference To: MFC42.Ordinal:0B69, Ord:0B69h
│
:005316E4 E8C91B1300 Call 006632B2
:005316E9 8945C4 mov dword ptr [ebp-3C], eax
:005316EC 8B55C4 mov edx, dword ptr [ebp-3C]
:005316EF 83CA08 or edx, 00000008
:005316F2 8955C4 mov dword ptr [ebp-3C], edx
:005316F5 8B45C4 mov eax, dword ptr [ebp-3C]
:005316F8 50 push eax

* Possible Ref to Menu: MenuID_006D, Item: "Open... Ctrl+O"
│

* Possible Reference to String Resource ID=57601: "??????????(.spl)
????"
│
:005316F9 6801E10000 push 0000E101
:005316FE 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531704 81C144010000 add ecx, 00000144

* Reference To: MFC42.Ordinal:07DC, Ord:07DCh
│
:0053170A E8A91B1300 Call 006632B8
:0053170F 50 push eax
:00531710 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531716 81C144010000 add ecx, 00000144

* Reference To: MFC42.Ordinal:16FC, Ord:16FCh
│
:0053171C E88B1B1300 Call 006632AC
:00531721 68A8000000 push 000000A8
:00531726 E8480DEDFF call 00402473
:0053172B 894584 mov dword ptr [ebp-7C], eax
:0053172E C745FC00000000 mov [ebp-04], 00000000
:00531735 837D8400 cmp dword ptr [ebp-7C], 00000000
:00531739 7410 je 0053174B
:0053173B 8B4D84 mov ecx, dword ptr [ebp-7C]
:0053173E E84A66EDFF call 00407D8D
:00531743 89856CFFFFFF mov dword ptr [ebp+FFFFFF6C], eax
:00531749 EB0A jmp 00531755

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531739(C)
│
:0053174B C7856CFFFFFF00000000 mov dword ptr [ebp+FFFFFF6C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531749(U)
│
:00531755 8B8D6CFFFFFF mov ecx, dword ptr [ebp+FFFFFF6C]
:0053175B 894D88 mov dword ptr [ebp-78], ecx
:0053175E C745FCFFFFFFFF mov [ebp-04], FFFFFFFF
:00531765 8B9570FFFFFF mov edx, dword ptr [ebp+FFFFFF70]
:0053176B 8B4588 mov eax, dword ptr [ebp-78]
:0053176E 898270030000 mov dword ptr [edx+00000370], eax
:00531774 6A01 push 00000001
:00531776 6A01 push 00000001
:00531778 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:0053177E 51 push ecx
:0053177F 8B9570FFFFFF mov edx, dword ptr [ebp+FFFFFF70]
:00531785 8B8A70030000 mov ecx, dword ptr [edx+00000370]
:0053178B E8F10DEDFF call 00402581
:00531790 85C0 test eax, eax
:00531792 7507 jne 0053179B
:00531794 33C0 xor eax, eax
:00531796 E99B050000 jmp 00531D36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531792(C)
│

* Possible StringData Ref from Data Obj ->"缩放"
│
:0053179B 6868D76A00 push 006AD768
:005317A0 8B8570FFFFFF mov eax, dword ptr [ebp+FFFFFF70]
:005317A6 8B8870030000 mov ecx, dword ptr [eax+00000370]

* Reference To: MFC42.Ordinal:1837, Ord:1837h
│
:005317AC E83B141300 Call 00662BEC
:005317B1 6800F00000 push 0000F000
:005317B6 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005317BC 8B8970030000 mov ecx, dword ptr [ecx+00000370]

* Reference To: MFC42.Ordinal:0A42, Ord:0A42h
│
:005317C2 E8091B1300 Call 006632D0
:005317C7 8B9570FFFFFF mov edx, dword ptr [ebp+FFFFFF70]
:005317CD 81C244010000 add edx, 00000144
:005317D3 52 push edx
:005317D4 8B8570FFFFFF mov eax, dword ptr [ebp+FFFFFF70]
:005317DA 8B8870030000 mov ecx, dword ptr [eax+00000370]
:005317E0 51 push ecx
:005317E1 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005317E7 E8364EEDFF call 00406622
:005317EC 6A01 push 00000001
:005317EE 6A01 push 00000001
:005317F0 8B9570FFFFFF mov edx, dword ptr [ebp+FFFFFF70]
:005317F6 52 push edx
:005317F7 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005317FD 81C1E8010000 add ecx, 000001E8
:00531803 E8941FEDFF call 0040379C
:00531808 85C0 test eax, eax
:0053180A 7507 jne 00531813
:0053180C 33C0 xor eax, eax
:0053180E E923050000 jmp 00531D36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0053180A(C)
│

* Possible StringData Ref from Data Obj ->"文本"
│
:00531813 6870D76A00 push 006AD770
:00531818 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:0053181E 81C1E8010000 add ecx, 000001E8

* Reference To: MFC42.Ordinal:1837, Ord:1837h
│
:00531824 E8C3131300 Call 00662BEC
:00531829 6800F00000 push 0000F000
:0053182E 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531834 81C1E8010000 add ecx, 000001E8

* Reference To: MFC42.Ordinal:0A42, Ord:0A42h
│
:0053183A E8911A1300 Call 006632D0
:0053183F 8B8570FFFFFF mov eax, dword ptr [ebp+FFFFFF70]
:00531845 8B8870030000 mov ecx, dword ptr [eax+00000370]
:0053184B 51 push ecx
:0053184C 8B9570FFFFFF mov edx, dword ptr [ebp+FFFFFF70]
:00531852 81C2E8010000 add edx, 000001E8
:00531858 52 push edx
:00531859 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:0053185F E8BE4DEDFF call 00406622
:00531864 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:0053186A E8A123EDFF call 00403C10
:0053186F 85C0 test eax, eax
:00531871 7508 jne 0053187B
:00531873 83C8FF or eax, FFFFFFFF
:00531876 E9BB040000 jmp 00531D36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531871(C)
│
:0053187B 688F000000 push 0000008F
:00531880 6834280050 push 50002834
:00531885 8B8570FFFFFF mov eax, dword ptr [ebp+FFFFFF70]
:0053188B 50 push eax
:0053188C 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531892 81C178030000 add ecx, 00000378

* Reference To: MFC42.Ordinal:0848, Ord:0848h
│
:00531898 E8391A1300 Call 006632D6
:0053189D 85C0 test eax, eax
:0053189F 741A je 005318BB
:005318A1 688F000000 push 0000008F
:005318A6 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005318AC 81C178030000 add ecx, 00000378
:005318B2 E83F1FEDFF call 004037F6
:005318B7 85C0 test eax, eax
:005318B9 7508 jne 005318C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0053189F(C)
│
:005318BB 83C8FF or eax, FFFFFFFF
:005318BE E973040000 jmp 00531D36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:005318B9(C)
│
:005318C3 6A00 push 00000000
:005318C5 6A00 push 00000000
:005318C7 6A00 push 00000000
:005318C9 6A00 push 00000000
:005318CB 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005318D1 81C178030000 add ecx, 00000378

* Reference To: MFC42.Ordinal:1AE7, Ord:1AE7h
│
:005318D7 E8CA191300 Call 006632A6

* Possible StringData Ref from Data Obj ->"对齐"
│
:005318DC 6878D76A00 push 006AD778
:005318E1 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005318E7 81C178030000 add ecx, 00000378

* Reference To: MFC42.Ordinal:1837, Ord:1837h
│
:005318ED E8FA121300 Call 00662BEC
:005318F2 6800F00000 push 0000F000
:005318F7 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005318FD 81C178030000 add ecx, 00000378

* Reference To: MFC42.Ordinal:0A42, Ord:0A42h
│
:00531903 E8C8191300 Call 006632D0
:00531908 6A00 push 00000000
:0053190A 681DE80000 push 0000E81D
:0053190F 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531915 81C178030000 add ecx, 00000378
:0053191B 51 push ecx
:0053191C 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]

* Reference To: MFC42.Ordinal:09BE, Ord:09BEh
│
:00531922 E89D191300 Call 006632C4
:00531927 6A00 push 00000000
:00531929 6800080000 push 00000800
:0053192E 6A00 push 00000000
:00531930 8B9570FFFFFF mov edx, dword ptr [ebp+FFFFFF70]
:00531936 8B8AE4010000 mov ecx, dword ptr [edx+000001E4]

* Reference To: MFC42.Ordinal:10BC, Ord:10BCh
│
:0053193C E87D191300 Call 006632BE
:00531941 6A00 push 00000000
:00531943 6800080000 push 00000800
:00531948 6A00 push 00000000
:0053194A 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531950 81C1E8010000 add ecx, 000001E8

* Reference To: MFC42.Ordinal:10BC, Ord:10BCh
│
:00531956 E863191300 Call 006632BE
:0053195B 6A00 push 00000000
:0053195D 6800080000 push 00000800
:00531962 6A00 push 00000000
:00531964 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:0053196A 81C178030000 add ecx, 00000378

* Reference To: MFC42.Ordinal:10BC, Ord:10BCh
│
:00531970 E849191300 Call 006632BE
:00531975 6A00 push 00000000
:00531977 6800080000 push 00000800
:0053197C 6A00 push 00000000
:0053197E 8B8570FFFFFF mov eax, dword ptr [ebp+FFFFFF70]
:00531984 8B8870030000 mov ecx, dword ptr [eax+00000370]

* Reference To: MFC42.Ordinal:10BC, Ord:10BCh
│
:0053198A E82F191300 Call 006632BE
:0053198F 6A01 push 00000001
:00531991 689F000000 push 0000009F
:00531996 E89F20EDFF call 00403A3A
:0053199B 8BC8 mov ecx, eax
:0053199D E83D3FEDFF call 004058DF
:005319A2 50 push eax
:005319A3 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005319A9 E81713EDFF call 00402CC5

* Possible StringData Ref from Data Obj ->"General"
│
:005319AE 6880D76A00 push 006AD780
:005319B3 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]

* Reference To: MFC42.Ordinal:1032, Ord:1032h
│
:005319B9 E8E2181300 Call 006632A0
:005319BE 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:005319C4 83B9A804000000 cmp dword ptr [ecx+000004A8], 00000000
:005319CB 0F8563030000 jne 00531D34

* Possible Reference to Dialog: DialogID_00E4
│
:005319D1 68E4000000 push 000000E4

* Reference To: MFC42.Ordinal:0337, Ord:0337h
│
:005319D6 E8770F1300 Call 00662952
:005319DB 83C404 add esp, 00000004
:005319DE 89857CFFFFFF mov dword ptr [ebp+FFFFFF7C], eax
:005319E4 C745FC01000000 mov [ebp-04], 00000001
:005319EB 83BD7CFFFFFF00 cmp dword ptr [ebp+FFFFFF7C], 00000000
:005319F2 7413 je 00531A07
:005319F4 8B8D7CFFFFFF mov ecx, dword ptr [ebp+FFFFFF7C]
:005319FA E8282EEDFF call 00404827
:005319FF 898568FFFFFF mov dword ptr [ebp+FFFFFF68], eax
:00531A05 EB0A jmp 00531A11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:005319F2(C)
│
:00531A07 C78568FFFFFF00000000 mov dword ptr [ebp+FFFFFF68], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531A05(U)
│
:00531A11 8B9568FFFFFF mov edx, dword ptr [ebp+FFFFFF68]
:00531A17 895580 mov dword ptr [ebp-80], edx
:00531A1A C745FCFFFFFFFF mov [ebp-04], FFFFFFFF
:00531A21 8B8570FFFFFF mov eax, dword ptr [ebp+FFFFFF70]
:00531A27 8B4D80 mov ecx, dword ptr [ebp-80]
:00531A2A 8988A8040000 mov dword ptr [eax+000004A8], ecx
:00531A30 8D4D90 lea ecx, dword ptr [ebp-70]

* Reference To: MFC42.Ordinal:0162, Ord:0162h
│
:00531A33 E8440F1300 Call 0066297C
:00531A38 C745FC02000000 mov [ebp-04], 00000002
:00531A3F 8D4DA4 lea ecx, dword ptr [ebp-5C]

* Reference To: MFC42.Ordinal:021C, Ord:021Ch
│
:00531A42 E82F0F1300 Call 00662976
:00531A47 C645FC03 mov [ebp-04], 03
:00531A4B 8D5590 lea edx, dword ptr [ebp-70]
:00531A4E 52 push edx
:00531A4F 8D4DA8 lea ecx, dword ptr [ebp-58]
:00531A52 E8B462EDFF call 00407D0B
:00531A57 85C0 test eax, eax
:00531A59 753E jne 00531A99
:00531A5B 6A00 push 00000000
:00531A5D 6A00 push 00000000

* Possible StringData Ref from Data Obj ->"无法打开快捷键设置文件！"
│
:00531A5F 6888D76A00 push 006AD788

* Reference To: MFC42.Ordinal:04B0, Ord:04B0h
│
:00531A64 E82B0F1300 Call 00662994
:00531A69 C78578FFFFFF00000000 mov dword ptr [ebp+FFFFFF78], 00000000
:00531A73 C645FC02 mov [ebp-04], 02
:00531A77 8D4DA4 lea ecx, dword ptr [ebp-5C]

* Reference To: MFC42.Ordinal:0320, Ord:0320h
│
:00531A7A E8EB0E1300 Call 0066296A
:00531A7F C745FCFFFFFFFF mov [ebp-04], FFFFFFFF
:00531A86 8D4D90 lea ecx, dword ptr [ebp-70]

* Reference To: MFC42.Ordinal:0299, Ord:0299h
│
:00531A89 E8E20E1300 Call 00662970
:00531A8E 8B8578FFFFFF mov eax, dword ptr [ebp+FFFFFF78]
:00531A94 E99D020000 jmp 00531D36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531A59(C)
│
:00531A99 8D4590 lea eax, dword ptr [ebp-70]
:00531A9C 50 push eax
:00531A9D 8D4DA8 lea ecx, dword ptr [ebp-58]
:00531和谐0 E80325EDFF call 00403FA8
:00531和谐5 85C0 test eax, eax
:00531和谐7 755A jne 00531B03
:00531和谐9 8D4D90 lea ecx, dword ptr [ebp-70]
:00531和谐C 51 push ecx
:00531和谐D 8D4DA8 lea ecx, dword ptr [ebp-58]
:00531AB0 E83E07EDFF call 004021F3
:00531AB5 85C0 test eax, eax
:00531AB7 754A jne 00531B03
:00531AB9 6A00 push 00000000
:00531ABB 6A00 push 00000000

* Possible StringData Ref from Data Obj ->"无法打开快捷键设置文件！"
│
:00531ABD 68A4D76A00 push 006AD7A4

* Reference To: MFC42.Ordinal:04B0, Ord:04B0h
│
:00531AC2 E8CD0E1300 Call 00662994
:00531AC7 8D5590 lea edx, dword ptr [ebp-70]
:00531ACA 52 push edx
:00531ACB 8D4DA8 lea ecx, dword ptr [ebp-58]
:00531ACE E81166EDFF call 004080E4
:00531AD3 C78574FFFFFF00000000 mov dword ptr [ebp+FFFFFF74], 00000000
:00531ADD C645FC02 mov [ebp-04], 02
:00531AE1 8D4DA4 lea ecx, dword ptr [ebp-5C]

* Reference To: MFC42.Ordinal:0320, Ord:0320h
│
:00531AE4 E8810E1300 Call 0066296A
:00531AE9 C745FCFFFFFFFF mov [ebp-04], FFFFFFFF
:00531AF0 8D4D90 lea ecx, dword ptr [ebp-70]

* Reference To: MFC42.Ordinal:0299, Ord:0299h
│
:00531AF3 E8780E1300 Call 00662970
:00531AF8 8B8574FFFFFF mov eax, dword ptr [ebp+FFFFFF74]
:00531AFE E933020000 jmp 00531D36

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
│:00531和谐7(C), :00531AB7(C)
│

* Possible Reference to Menu: MenuID_0070
│

* Possible Reference to String Resource ID=00112: "
SuperLine
SuperLine
SuperLine Files (*.spl)
.spl
SuperLine."
│
:00531B03 C745A070000000 mov [ebp-60], 00000070

* Possible StringData Ref from Data Obj ->"当前"
│
:00531B0A 68C0D76A00 push 006AD7C0
:00531B0F 8D4DA4 lea ecx, dword ptr [ebp-5C]

* Reference To: MFC42.Ordinal:035C, Ord:035Ch
│
:00531B12 E89B0E1300 Call 006629B2
:00531B17 8D45A4 lea eax, dword ptr [ebp-5C]
:00531B1A 50 push eax
:00531B1B 8D4DAC lea ecx, dword ptr [ebp-54]
:00531B1E 51 push ecx
:00531B1F 8D5590 lea edx, dword ptr [ebp-70]
:00531B22 52 push edx
:00531B23 8D4DA8 lea ecx, dword ptr [ebp-58]
:00531B26 E879F6ECFF call 004011A4
:00531B2B 837DACFF cmp dword ptr [ebp-54], FFFFFFFF
:00531B2F 7527 jne 00531B58
:00531B31 6A01 push 00000001
:00531B33 8B45A0 mov eax, dword ptr [ebp-60]
:00531B36 50 push eax
:00531B37 E8EB09EDFF call 00402527
:00531B3C 50 push eax
:00531B3D 6A00 push 00000000
:00531B3F 8D4DA4 lea ecx, dword ptr [ebp-5C]
:00531B42 51 push ecx
:00531B43 8D5590 lea edx, dword ptr [ebp-70]
:00531B46 52 push edx
:00531B47 8B8570FFFFFF mov eax, dword ptr [ebp+FFFFFF70]
:00531B4D 8B88A8040000 mov ecx, dword ptr [eax+000004A8]
:00531B53 E88350EDFF call 00406BDB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531B2F(C)
│

* Possible StringData Ref from Data Obj ->"缺省"
│
:00531B58 68C8D76A00 push 006AD7C8
:00531B5D 8D4DA4 lea ecx, dword ptr [ebp-5C]

* Reference To: MFC42.Ordinal:035C, Ord:035Ch
│
:00531B60 E84D0E1300 Call 006629B2
:00531B65 8D4DA4 lea ecx, dword ptr [ebp-5C]
:00531B68 51 push ecx
:00531B69 8D55AC lea edx, dword ptr [ebp-54]
:00531B6C 52 push edx
:00531B6D 8D4590 lea eax, dword ptr [ebp-70]
:00531B70 50 push eax
:00531B71 8D4DA8 lea ecx, dword ptr [ebp-58]
:00531B74 E82BF6ECFF call 004011A4
:00531B79 837DACFF cmp dword ptr [ebp-54], FFFFFFFF
:00531B7D 7527 jne 00531BA6
:00531B7F 6A01 push 00000001
:00531B81 8B4DA0 mov ecx, dword ptr [ebp-60]
:00531B84 51 push ecx
:00531B85 E89D09EDFF call 00402527
:00531B8A 50 push eax
:00531B8B 6A01 push 00000001
:00531B8D 8D55A4 lea edx, dword ptr [ebp-5C]
:00531B90 52 push edx
:00531B91 8D4590 lea eax, dword ptr [ebp-70]
:00531B94 50 push eax
:00531B95 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531B9B 8B89A8040000 mov ecx, dword ptr [ecx+000004A8]
:00531BA1 E83550EDFF call 00406BDB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531B7D(C)
│

* Possible StringData Ref from Data Obj ->"PageMaker 6.5C快捷键"
│
:00531BA6 68D0D76A00 push 006AD7D0
:00531BAB 8D4DA4 lea ecx, dword ptr [ebp-5C]

* Reference To: MFC42.Ordinal:035C, Ord:035Ch
│
:00531BAE E8FF0D1300 Call 006629B2
:00531BB3 8D55A4 lea edx, dword ptr [ebp-5C]
:00531BB6 52 push edx
:00531BB7 8D45AC lea eax, dword ptr [ebp-54]
:00531BBA 50 push eax
:00531BBB 8D4D90 lea ecx, dword ptr [ebp-70]
:00531BBE 51 push ecx
:00531BBF 8D4DA8 lea ecx, dword ptr [ebp-58]
:00531BC2 E8DDF5ECFF call 004011A4
:00531BC7 837DACFF cmp dword ptr [ebp-54], FFFFFFFF
:00531BCB 7528 jne 00531BF5
:00531BCD 6A01 push 00000001
:00531BCF 688F250000 push 0000258F
:00531BD4 E84E09EDFF call 00402527
:00531BD9 50 push eax
:00531BDA 6A02 push 00000002
:00531BDC 8D55A4 lea edx, dword ptr [ebp-5C]
:00531BDF 52 push edx
:00531BE0 8D4590 lea eax, dword ptr [ebp-70]
:00531BE3 50 push eax
:00531BE4 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531BEA 8B89A8040000 mov ecx, dword ptr [ecx+000004A8]
:00531BF0 E8E64FEDFF call 00406BDB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531BCB(C)
│

* Possible StringData Ref from Data Obj ->"InDesign 1.5快捷键"
│
:00531BF5 68E8D76A00 push 006AD7E8
:00531BFA 8D4DA4 lea ecx, dword ptr [ebp-5C]

* Reference To: MFC42.Ordinal:035C, Ord:035Ch
│
:00531BFD E8B00D1300 Call 006629B2
:00531C02 8D55A4 lea edx, dword ptr [ebp-5C]
:00531C05 52 push edx
:00531C06 8D45AC lea eax, dword ptr [ebp-54]
:00531C09 50 push eax
:00531C0A 8D4D90 lea ecx, dword ptr [ebp-70]
:00531C0D 51 push ecx
:00531C0E 8D4DA8 lea ecx, dword ptr [ebp-58]
:00531C11 E88EF5ECFF call 004011A4
:00531C16 837DACFF cmp dword ptr [ebp-54], FFFFFFFF
:00531C1A 7528 jne 00531C44
:00531C1C 6A01 push 00000001
:00531C1E 688E250000 push 0000258E
:00531C23 E8FF08EDFF call 00402527
:00531C28 50 push eax
:00531C29 6A03 push 00000003
:00531C2B 8D55A4 lea edx, dword ptr [ebp-5C]
:00531C2E 52 push edx
:00531C2F 8D4590 lea eax, dword ptr [ebp-70]
:00531C32 50 push eax
:00531C33 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531C39 8B89A8040000 mov ecx, dword ptr [ecx+000004A8]
:00531C3F E8974FEDFF call 00406BDB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531C1A(C)
│

* Possible StringData Ref from Data Obj ->"CorelDraw 8.0快捷键"
│
:00531C44 68FCD76A00 push 006AD7FC
:00531C49 8D4DA4 lea ecx, dword ptr [ebp-5C]

* Reference To: MFC42.Ordinal:035C, Ord:035Ch
│
:00531C4C E8610D1300 Call 006629B2
:00531C51 8D55A4 lea edx, dword ptr [ebp-5C]
:00531C54 52 push edx
:00531C55 8D45AC lea eax, dword ptr [ebp-54]
:00531C58 50 push eax
:00531C59 8D4D90 lea ecx, dword ptr [ebp-70]
:00531C5C 51 push ecx
:00531C5D 8D4DA8 lea ecx, dword ptr [ebp-58]
:00531C60 E83FF5ECFF call 004011A4
:00531C65 837DACFF cmp dword ptr [ebp-54], FFFFFFFF
:00531C69 7528 jne 00531C93
:00531C6B 6A01 push 00000001
:00531C6D 6890250000 push 00002590
:00531C72 E8B008EDFF call 00402527
:00531C77 50 push eax
:00531C78 6A04 push 00000004
:00531C7A 8D55A4 lea edx, dword ptr [ebp-5C]
:00531C7D 52 push edx
:00531C7E 8D4590 lea eax, dword ptr [ebp-70]
:00531C81 50 push eax
:00531C82 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531C88 8B89A8040000 mov ecx, dword ptr [ecx+000004A8]
:00531C8E E8484FEDFF call 00406BDB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531C69(C)
│

* Possible StringData Ref from Data Obj ->"Artworld 2.X快捷键"
│
:00531C93 6810D86A00 push 006AD810
:00531C98 8D4DA4 lea ecx, dword ptr [ebp-5C]

* Reference To: MFC42.Ordinal:035C, Ord:035Ch
│
:00531C9B E8120D1300 Call 006629B2
:00531CA0 8D55A4 lea edx, dword ptr [ebp-5C]
:00531CA3 52 push edx
:00531CA4 8D45AC lea eax, dword ptr [ebp-54]
:00531CA7 50 push eax
:00531CA8 8D4D90 lea ecx, dword ptr [ebp-70]
:00531CAB 51 push ecx
:00531CAC 8D4DA8 lea ecx, dword ptr [ebp-58]
:00531CAF E8F0F4ECFF call 004011A4
:00531CB4 837DACFF cmp dword ptr [ebp-54], FFFFFFFF
:00531CB8 7527 jne 00531CE1
:00531CBA 6A01 push 00000001
:00531CBC 8B55A0 mov edx, dword ptr [ebp-60]
:00531CBF 52 push edx
:00531CC0 E86208EDFF call 00402527
:00531CC5 50 push eax
:00531CC6 6A05 push 00000005
:00531CC8 8D45A4 lea eax, dword ptr [ebp-5C]
:00531CCB 50 push eax
:00531CCC 8D4D90 lea ecx, dword ptr [ebp-70]
:00531CCF 51 push ecx
:00531CD0 8B9570FFFFFF mov edx, dword ptr [ebp+FFFFFF70]
:00531CD6 8B8和谐8040000 mov ecx, dword ptr [edx+000004A8]
:00531CDC E8FA4EEDFF call 00406BDB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00531CB8(C)
│
:00531CE1 8D4590 lea eax, dword ptr [ebp-70]
:00531CE4 50 push eax
:00531CE5 8D4DA8 lea ecx, dword ptr [ebp-58]
:00531CE8 E8F763EDFF call 004080E4
:00531CED 6A00 push 00000000
:00531CEF 8B8D70FFFFFF mov ecx, dword ptr [ebp+FFFFFF70]
:00531CF5 8B89A8040000 mov ecx, dword ptr [ecx+000004A8]
:00531CFB E89224EDFF call 00404192
:00531D00 6A01 push 00000001
:00531D02 6A00 push 00000000
:00531D04 8B55A0 mov edx, dword ptr [ebp-60]
:00531D07 52 push edx
:00531D08 8B8570FFFFFF mov eax, dword ptr [ebp+FFFFFF70]
:00531D0E 8B88A8040000 mov ecx, dword ptr [eax+000004A8]
:00531D14 E8C069EDFF call 004086D9
:00531D19 C645FC02 mov [ebp-04], 02
:00531D1D 8D4DA4 lea ecx, dword ptr [ebp-5C]

* Reference To: MFC42.Ordinal:0320, Ord:0320h
│
:00531D20 E8450C1300 Call 0066296A
:00531D25 C745FCFFFFFFFF mov [ebp-04], FFFFFFFF
:00531D2C 8D4D90 lea ecx, dword ptr [ebp-70]

* Reference To: MFC42.Ordinal:0299, Ord:0299h
│
:00531D2F E83C0C1300 Call 00662970

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:005319CB(C)
│
:00531D34 33C0 xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
│:005314E1(U), :00531595(U), :0053162D(U), :00531796(U), :0053180E(U)
│:00531876(U), :005318BE(U), :00531A94(U), :00531AFE(U)
│
:00531D36 8B4DF4 mov ecx, dword ptr [ebp-0C]
:00531D39 64890D00000000 mov dword ptr fs:[00000000], ecx
:00531D40 8BE5 mov esp, ebp
:00531D42 5D pop ebp
:00531D43 C20400 ret 0004

经过上面处理会出现程序界面 ,但是马上就退出了.
================================================================================================
跟踪最后会来到这里

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:005A380C(C)
│
:005A3819 8B4D84 mov ecx, dword ptr [ebp-7C]
:005A381C 83C101 add ecx, 00000001
:005A381F 894D84 mov dword ptr [ebp-7C], ecx
:005A3822 BA01000000 mov edx, 00000001 //edx=1
:005A3827 85D2 test edx, edx
:005A3829 7412 je 005A383D
:005A382B 8B4584 mov eax, dword ptr [ebp-7C]
:005A382E 83E801 sub eax, 00000001
:005A3831 894584 mov dword ptr [ebp-7C], eax
:005A3834 8B4D84 mov ecx, dword ptr [ebp-7C]
:005A3837 83C101 add ecx, 00000001
:005A383A 894D84 mov dword ptr [ebp-7C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:005A3829(C)
│
:005A383D 8B55F0 mov edx, dword ptr [ebp-10] //这里又让edx=0了
:005A3840 899578FFFFFF mov dword ptr [ebp+FFFFFF78], edx
:005A3846 C745FCFFFFFFFF mov [ebp-04], FFFFFFFF
:005A384D 8D8D7CFFFFFF lea ecx, dword ptr [ebp+FFFFFF7C]

* Reference To: MFC42.Ordinal:0320, Ord:0320h
│
:005A3853 E812F10B00 Call 0066296A
:005A3858 8B8578FFFFFF mov eax, dword ptr [ebp+FFFFFF78] //eax为0就退出了
:005A385E 8B4DF4 mov ecx, dword ptr [ebp-0C]
:005A3861 64890D00000000 mov dword ptr fs:[00000000], ecx
:005A3868 8BE5 mov esp, ebp
:005A386A 5D pop ebp
:005A386B C3 ret

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00405E66(U)
│
:00529A1A 55 push ebp
:00529A1B 8BEC mov ebp, esp
:00529A1D 83EC10 sub esp, 00000010
:00529A20 A1800B6B00 mov eax, dword ptr [006B0B80] //下断点 bpm 006B0B80 w =====> A
:00529A25 8945F0 mov dword ptr [ebp-10], eax //eax=7d1 > 7cb 显然是不正确的
:00529A28 817DF0CB070000 cmp dword ptr [ebp-10], 000007CB
:00529A2F 7F68 jg 00529A99 //跳走就是错误的
:00529A31 817DF0CB070000 cmp dword ptr [ebp-10], 000007CB
:00529A38 0F8431010000 je 00529B6F
:00529A3E 817DF0C6070000 cmp dword ptr [ebp-10], 000007C6
:00529A45 7F32 jg 00529A79
:00529A47 817DF0C6070000 cmp dword ptr [ebp-10], 000007C6
:00529A4E 0F84AF000000 je 00529B03
:00529A54 8B4DF0 mov ecx, dword ptr [ebp-10]
:00529A57 83E90A sub ecx, 0000000A
:00529A5A 894DF0 mov dword ptr [ebp-10], ecx
:00529A5D 837DF01E cmp dword ptr [ebp-10], 0000001E
:00529A61 0F87F7010000 ja 00529C5E
:00529A67 8B45F0 mov eax, dword ptr [ebp-10]
:00529A6A 33D2 xor edx, edx
:00529A6C 8A90B39C5200 mov dl, byte ptr [eax+00529CB3]
:00529A72 FF24959F9C5200 jmp dword ptr [4*edx+00529C9F]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00529A45(C)
│
:00529A79 8B4DF0 mov ecx, dword ptr [ebp-10]
:00529A7C 81E9C7070000 sub ecx, 000007C7
:00529A82 894DF0 mov dword ptr [ebp-10], ecx
:00529A85 837DF003 cmp dword ptr [ebp-10], 00000003
:00529A89 0F87CF010000 ja 00529C5E
:00529A8F 8B55F0 mov edx, dword ptr [ebp-10]
:00529A92 FF2495D29C5200 jmp dword ptr [4*edx+00529CD2]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00529A2F(C)
│
:00529A99 817DF0B30B0000 cmp dword ptr [ebp-10], 00000BB3
:00529和谐0 7F2C jg 00529ACE
:00529和谐2 817DF0B30B0000 cmp dword ptr [ebp-10], 00000BB3
:00529和谐9 0F8477010000 je 00529C26
:00529和谐F 8B45F0 mov eax, dword ptr [ebp-10]
:00529AB2 2DCC070000 sub eax, 000007CC //eax =5
:00529AB7 8945F0 mov dword ptr [ebp-10], eax
:00529ABA 837DF004 cmp dword ptr [ebp-10], 00000004
:00529ABE 0F879A010000 ja 00529C5E
:
:
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
│:00529A61(C), :00529A89(C), :00529ABE(C), :00529AE8(U)
│
:00529C5E C705800B6B00FFFFFFFF mov dword ptr [006B0B80], FFFFFFFF
==================================== A =======================================================
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
│:005A3744(U), :005A3752(U), :005A3775(U), :005A377D(U)
│
:005A3785 C74580F2A50300 mov [ebp-80], 0003A5F2
:005A378C A1F8C26B00 mov eax, dword ptr [006BC2F8] //再下 bpm 006BC2F8 w
:005A3791 A3800B6B00 mov dword ptr [006B0B80], eax //这里被写入
:005A3796 EB2D jmp 005A37C5
------------------------------------------------------------------------------------------------------
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:00407BAD(U)
│
:0052A269 55 push ebp
:0052A26A 8BEC mov ebp, esp
:0052A26C 51 push ecx
:0052A26D C745FC00000000 mov [ebp-04], 00000000
:0052A274 E8980F1300 call 0065B211 //进入让这里 eax返回 3 就可以了
:0052A279 8945FC mov dword ptr [ebp-04], eax
:0052A27C 837DFC00 cmp dword ptr [ebp-04], 00000000
:0052A280 750A jne 0052A28C
:0052A282 C705F8C26B00D1070000 mov dword ptr [006BC2F8], 000007D1 //罪魁祸首在这里 ,上面必须跳走

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0052A280(C)
│
:0052A28C 8B45FC mov eax, dword ptr [ebp-04]
:0052A28F 8BE5 mov esp, ebp
:0052A291 5D pop ebp
:0052A292 C3 ret

---------------------------------------------------------------------------------------------------------
* Referenced by a CALL at Addresses:
│:0052A274 , :005FB5BB
│
:0065B211 55 push ebp
:0065B212 8BEC mov ebp, esp
:0065B214 83EC08 sub esp, 00000008
:0065B217 53 push ebx
:0065B218 56 push esi
:0065B219 57 push edi
:0065B21A E821060000 call 0065B840

* Possible Reference to Dialog: DialogID_252F, CONTROL_ID:0404, ""
│
:0065B21F 6804040000 push 00000404
:0065B224 6880876C00 push 006C8780
:0065B229 E892660000 call 006618C0
:0065B22E 0FB7C0 movzx eax, ax
:0065B231 8945F8 mov dword ptr [ebp-08], eax
:0065B234 837DF800 cmp dword ptr [ebp-08], 00000000
:0065B238 0F8422000000 je 0065B260
:0065B23E 6882020000 push 00000282

* Possible StringData Ref from Data Obj ->"D:\key32\Mode7\getspid-vc4\Getspid.cpp"
│
:0065B243 68C0AF6B00 push 006BAFC0
:0065B248 8B45F8 mov eax, dword ptr [ebp-08]
:0065B24B 50 push eax

* Possible StringData Ref from Data Obj ->"sproFormatPacket() failed"
│
:0065B24C 6834B16B00 push 006BB134
:0065B251 E867F8FFFF call 0065和谐BD
:0065B256 83C410 add esp, 00000010
:0065B259 33C0 xor eax, eax
:0065B25B E95D010000 jmp 0065B3BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0065B238(C)
│
:0065B260 6880876C00 push 006C8780
:0065B265 E8B6660000 call 00661920
:0065B26A 0FB7C0 movzx eax, ax
:0065B26D 8945F8 mov dword ptr [ebp-08], eax
:0065B270 837DF800 cmp dword ptr [ebp-08], 00000000
:0065B274 0F8422000000 je 0065B29C
:0065B27A 6889020000 push 00000289

* Possible StringData Ref from Data Obj ->"D:\key32\Mode7\getspid-vc4\Getspid.cpp"
│
:0065B27F 68C0AF6B00 push 006BAFC0
:0065B284 8B45F8 mov eax, dword ptr [ebp-08]
:0065B287 50 push eax

* Possible StringData Ref from Data Obj ->"sproInitialize() failed"
│
:0065B288 6850B16B00 push 006BB150
:0065B28D E82BF8FFFF call 0065和谐BD
:0065B292 83C410 add esp, 00000010
:0065B295 33C0 xor eax, eax
:0065B297 E921010000 jmp 0065B3BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0065B274(C)
│
:0065B29C 68ACA90000 push 0000A9AC
:0065B2A1 6880876C00 push 006C8780
:0065B2A6 E855680000 call 00661B00
:0065B2AB 0FB7C0 movzx eax, ax
:0065B2AE 8945F8 mov dword ptr [ebp-08], eax
:0065B2B1 837DF800 cmp dword ptr [ebp-08], 00000000
:0065B2B5 0F8422000000 je 0065B2DD
:0065B2BB 6890020000 push 00000290

* Possible StringData Ref from Data Obj ->"D:\key32\Mode7\getspid-vc4\Getspid.cpp"
│
:0065B2C0 68C0AF6B00 push 006BAFC0
:0065B2C5 8B45F8 mov eax, dword ptr [ebp-08]
:0065B2C8 50 push eax

* Possible StringData Ref from Data Obj ->"failed to find first key"
│
:0065B2C9 6868B16B00 push 006BB168
:0065B2CE E8EAF7FFFF call 0065和谐BD
:0065B2D3 83C410 add esp, 00000010
:0065B2D6 33C0 xor eax, eax //在这之前eax=3 因此我们9090掉
:0065B2D8 E9E0000000 jmp 0065B3BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0065B2B5(C)
│
:0065B2DD C745FC00000000 mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0065B398(U)
│
:0065B2E4 6880876C00 push 006C8780
:0065B2E9 E876FCFFFF call 0065AF64
:0065B2EE 83C404 add esp, 00000004
:0065B2F1 85C0 test eax, eax
:0065B2F3 0F8442000000 je 0065B33B
:0065B2F9 E8C4000000 call 0065B3C2
:0065B2FE 85C0 test eax, eax
:0065B300 0F8417000000 je 0065B31D
:0065B306 6880876C00 push 006C8780
:0065B30B E865FDFFFF call 0065B075
:0065B310 83C404 add esp, 00000004
:0065B313 E9A5000000 jmp 0065B3BD
:0065B318 E919000000 jmp 0065B336

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0065B300(C)
│
:0065B31D 689F020000 push 0000029F

* Possible StringData Ref from Data Obj ->"D:\key32\Mode7\getspid-vc4\Getspid.cpp"
│
:0065B322 68C0AF6B00 push 006BAFC0
:0065B327 6AFF push FFFFFFFF

* Possible StringData Ref from Data Obj ->"Failed to CheckIdCard"
│
:0065B329 6884B16B00 push 006BB184
:0065B32E E88AF7FFFF call 0065和谐BD
:0065B333 83C410 add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0065B318(U)
│
:0065B336 E925000000 jmp 0065B360

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0065B2F3(C)
│
:0065B33B 68A4020000 push 000002A4

* Possible StringData Ref from Data Obj ->"D:\key32\Mode7\getspid-vc4\Getspid.cpp"
│
:0065B340 68C0AF6B00 push 006BAFC0
:0065B345 6880876C00 push 006C8780
:0065B34A E846FCFFFF call 0065AF95
:0065B34F 83C404 add esp, 00000004
:0065B352 50 push eax

* Possible StringData Ref from Data Obj ->"key id wrong"
│
:0065B353 689CB16B00 push 006BB19C
:0065B358 E860F7FFFF call 0065和谐BD
:0065B35D 83C410 add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0065B336(U)
│
:0065B360 6880876C00 push 006C8780
:0065B365 E886680000 call 00661BF0
:0065B36A 0FB7C0 movzx eax, ax
:0065B36D 8945F8 mov dword ptr [ebp-08], eax
:0065B370 837DF800 cmp dword ptr [ebp-08], 00000000
:0065B374 0F8405000000 je 0065B37F
:0065B37A E91E000000 jmp 0065B39D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0065B374(C)
│
:0065B37F 68和谐020000 push 000002和谐

* Possible StringData Ref from Data Obj ->"D:\key32\Mode7\getspid-vc4\Getspid.cpp"
│
:0065B384 68C0AF6B00 push 006BAFC0
:0065B389 6A00 push 00000000

* Possible StringData Ref from Data Obj ->"find another key"
│
:0065B38B 68ACB16B00 push 006BB1AC
:0065B390 E828F7FFFF call 0065和谐BD
:0065B395 83C410 add esp, 00000010
:0065B398 E947FFFFFF jmp 0065B2E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
│:0065B37A(U)
│
:0065B39D 68AD020000 push 000002AD

* Possible StringData Ref from Data Obj ->"D:\key32\Mode7\getspid-vc4\Getspid.cpp"
│
:0065B3A2 68C0AF6B00 push 006BAFC0
:0065B3A7 6AFF push FFFFFFFF

* Possible StringData Ref from Data Obj ->"No more key"
│
:0065B3A9 68C0B16B00 push 006BB1C0
:0065B3AE E80AF7FFFF call 0065和谐BD
:0065B3B3 83C410 add esp, 00000010
:0065B3B6 33C0 xor eax, eax
:0065B3B8 E900000000 jmp 0065B3BD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
│:0065B25B(U), :0065B297(U), :0065B2D8(U), :0065B313(U), :0065B3B8(U)
│
:0065B3BD 5F pop edi
:0065B3BE 5E pop esi
:0065B3BF 5B pop ebx
:0065B3C0 C9 leave
:0065B3C1 C3 ret eax在这里返回 3

lees · 2005-03-27, 10:33

转自：白若冰数码婚纱摄影论坛 >> 和谐交流 >> 超线3和谐分析

zzs1225 · 2005-03-27, 14:36

已经看过,感觉上还行.不过.它的程序写得有点乱.没有明确的CALL和JMP.
对于初学者不知道能不能看懂.

webcooler · 2005-03-29, 13:12

真晕我是一点都看不懂！！

8ss8 · 2005-04-09, 23:18

看不懂啊！！！！！！！！！！！！！！！

qidian6110 · 2005-04-15, 10:12

为什么看不懂啊，是不是要编译成程序啊

**ccdesign** · 2005-04-18, 13:36

看不懂啊@
天书!

lwy · 2005-04-20, 01:44

这个文章很早以前见过....

wbzd · 2005-04-20, 19:39

我也看过，试着跟踪，没有结果。

向日葵 · 2005-05-03, 17:21

想完美和谐很难,用的可是智能狗呀,大多数的和谐连日历都放不上去

pika99 · 2005-05-12, 12:43

看不懂啊@
天书!

whglxh · 2005-05-23, 20:53

用的汇编，当然一般的人看不懂呀．

shenglain · 2005-05-29, 08:18

不懂呀．!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

stzb · 2005-10-02, 20:02

天书来的！！一点都看不懂能否写的清楚一点

gxnethy · 2005-12-09, 19:56

高手啊，好o