逆向过程

原创 2015年11月18日 15:26:02
瞬移=007647E0
push ecx=00764D29


00764790 - 76 34                      - jna 007647c6
00764792 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764798 - 81 c1 a0 05 00 00          - add ecx,000005a0
0076479E - e8 ad 02 cc ff             - call 00424a50
007647A3 - 39 45 08                   - cmp [ebp+08],eax
007647A6 - 76 1e                      - jna 007647c6
007647A8 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
007647AE - 81 c1 a0 05 00 00          - add ecx,000005a0
007647B4 - e8 97 02 cc ff             - call 00424a50
007647B9 - 8b 4d 08                   - mov ecx,[ebp+08]
007647BC - 2b c8                      - sub ecx,eax
007647BE - 89 8d dc fc ff ff          - mov [ebp-00000324],ecx
007647C4 - eb 0a                      - jmp 007647d0
007647C6 - c7 85 dc fc ff ff 00 00 00 00 - mov [ebp-00000324],00000000
007647D0 - 8b 95 dc fc ff ff          - mov edx,[ebp-00000324]
007647D6 - 89 55 f8                   - mov [ebp-08],edx
007647D9 - 81 7d f8 f4 01 00 00       - cmp [ebp-08],000001f4
007647E0 - 76 07                      - jna 007647e9
007647E2 - c7 45 f8 f4 01 00 00       - mov [ebp-08],000001f4
007647E9 - 8b 45 08                   - mov eax,[ebp+08]
007647EC - 50                         - push eax
007647ED - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
007647F3 - 81 c1 a0 05 00 00          - add ecx,000005a0
007647F9 - e8 72 30 d2 ff             - call 00487870
007647FE - 8d 8d e0 fd ff ff          - lea ecx,[ebp-00000220]
00764804 - e8 37 f5 00 00             - call 00773d40
00764809 - c6 45 ff 00                - mov byte ptr [ebp-01],00
0076480D - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764813 - 8b 11                      - mov edx,[ecx]
00764815 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
0076481B - 8b 42 58                   - mov eax,[edx+58]
0076481E - ff d0                      - call eax
00764820 - 0f b6 c8                   - movzx ecx,al
00764823 - 85 c9                      - test ecx,ecx
00764825 - 0f 84 e1 01 00 00          - je 00764a0c
0076482B - 8b 95 e0 fc ff ff          - mov edx,[ebp-00000320]
00764831 - 8b 02                      - mov eax,[edx]
00764833 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764839 - 8b 50 68                   - mov edx,[eax+68]
0076483C - ff d2                      - call edx
0076483E - 89 85 dc fd ff ff          - mov [ebp-00000224],eax
00764844 - 83 bd dc fd ff ff 00       - cmp dword ptr [ebp-00000224],00
0076484B - 75 12                      - jne 0076485f
0076484D - 6a 00                      - push 00
0076484F - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764855 - e8 96 fa 00 00             - call 007742f0
0076485A - e9 ad 01 00 00             - jmp 00764a0c
0076485F - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
00764865 - 8b 8d dc fd ff ff          - mov ecx,[ebp-00000224]
0076486B - 3b 48 44                   - cmp ecx,[eax+44]
0076486E - 75 6d                      - jne 007648dd
00764870 - 8b 95 e0 fc ff ff          - mov edx,[ebp-00000320]
00764876 - 81 c2 10 06 00 00          - add edx,00000610
0076487C - 52                         - push edx
0076487D - 8d 8d e0 fd ff ff          - lea ecx,[ebp-00000220]
00764883 - e8 48 fb 00 00             - call 007743d0
00764888 - c6 45 ff 01                - mov byte ptr [ebp-01],01
0076488C - 51                         - push ecx
0076488D - d9 05 20 a0 cd 00          - fld dword ptr [00cda020] : [3F000000]
00764893 - d9 1c 24                   - fstp dword ptr [esp]
00764896 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
0076489C - 81 c1 ac 06 00 00          - add ecx,000006ac
007648A2 - e8 09 02 cc ff             - call 00424ab0
007648A7 - 51                         - push ecx
007648A8 - d9 05 cc 5c cf 00          - fld dword ptr [00cf5ccc] : [(float)6000.0000]
007648AE - d9 1c 24                   - fstp dword ptr [esp]
007648B1 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
007648B7 - 81 c1 88 06 00 00          - add ecx,00000688
007648BD - e8 ee 01 cc ff             - call 00424ab0
007648C2 - 68 bf 63 00 00             - push 000063bf
007648C7 - b9 90 a5 e0 00             - mov ecx,00e0a590 : [00000000]
007648CC - e8 4f f6 e0 ff             - call 00573f20
007648D1 - 8b c8                      - mov ecx,eax
007648D3 - e8 e8 e3 e0 ff             - call 00572cc0
007648D8 - e9 2f 01 00 00             - jmp 00764a0c
007648DD - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
007648E3 - 8b 8d dc fd ff ff          - mov ecx,[ebp-00000224]
007648E9 - 3b 48 48                   - cmp ecx,[eax+48]
007648EC - 75 44                      - jne 00764932
007648EE - 8b 95 e0 fc ff ff          - mov edx,[ebp-00000320]
007648F4 - 81 c2 10 06 00 00          - add edx,00000610
007648FA - 52                         - push edx
007648FB - 8d 8d e0 fd ff ff          - lea ecx,[ebp-00000220]
00764901 - e8 ca fa 00 00             - call 007743d0
00764906 - c6 45 ff 01                - mov byte ptr [ebp-01],01
0076490A - 6a 01                      - push 01
0076490C - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764912 - e8 d9 f9 00 00             - call 007742f0
00764917 - 68 bf 63 00 00             - push 000063bf
0076491C - b9 90 a5 e0 00             - mov ecx,00e0a590 : [00000000]
00764921 - e8 fa f5 e0 ff             - call 00573f20
00764926 - 8b c8                      - mov ecx,eax
00764928 - e8 93 e3 e0 ff             - call 00572cc0
0076492D - e9 da 00 00 00             - jmp 00764a0c
00764932 - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
00764938 - 8b 8d dc fd ff ff          - mov ecx,[ebp-00000224]
0076493E - 3b 48 4c                   - cmp ecx,[eax+4c]
00764941 - 75 44                      - jne 00764987
00764943 - 8b 95 e0 fc ff ff          - mov edx,[ebp-00000320]
00764949 - 81 c2 10 06 00 00          - add edx,00000610
0076494F - 52                         - push edx
00764950 - 8d 8d e0 fd ff ff          - lea ecx,[ebp-00000220]
00764956 - e8 75 fa 00 00             - call 007743d0
0076495B - c6 45 ff 01                - mov byte ptr [ebp-01],01
0076495F - 6a 02                      - push 02
00764961 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764967 - e8 84 f9 00 00             - call 007742f0
0076496C - 68 bf 63 00 00             - push 000063bf
00764971 - b9 90 a5 e0 00             - mov ecx,00e0a590 : [00000000]
00764976 - e8 a5 f5 e0 ff             - call 00573f20
0076497B - 8b c8                      - mov ecx,eax
0076497D - e8 3e e3 e0 ff             - call 00572cc0
00764982 - e9 85 00 00 00             - jmp 00764a0c
00764987 - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
0076498D - 8b 8d dc fd ff ff          - mov ecx,[ebp-00000224]
00764993 - 3b 48 50                   - cmp ecx,[eax+50]
00764996 - 75 31                      - jne 007649c9
00764998 - 6a 01                      - push 01
0076499A - 51                         - push ecx
0076499B - d9 05 cc 98 cd 00          - fld dword ptr [00cd98cc] : [(float)0.6000]
007649A1 - d9 1c 24                   - fstp dword ptr [esp]
007649A4 - 6a 01                      - push 01
007649A6 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
007649AC - e8 ef eb 00 00             - call 007735a0
007649B1 - 68 bf 63 00 00             - push 000063bf
007649B6 - b9 90 a5 e0 00             - mov ecx,00e0a590 : [00000000]
007649BB - e8 60 f5 e0 ff             - call 00573f20
007649C0 - 8b c8                      - mov ecx,eax
007649C2 - e8 f9 e2 e0 ff             - call 00572cc0
007649C7 - eb 43                      - jmp 00764a0c
007649C9 - 8b 95 e0 fc ff ff          - mov edx,[ebp-00000320]
007649CF - 8b 85 dc fd ff ff          - mov eax,[ebp-00000224]
007649D5 - 3b 42 54                   - cmp eax,[edx+54]
007649D8 - 75 25                      - jne 007649ff
007649DA - 6a 01                      - push 01
007649DC - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
007649E2 - e8 39 ef 00 00             - call 00773920
007649E7 - 68 bf 63 00 00             - push 000063bf
007649EC - b9 90 a5 e0 00             - mov ecx,00e0a590 : [00000000]
007649F1 - e8 2a f5 e0 ff             - call 00573f20
007649F6 - 8b c8                      - mov ecx,eax
007649F8 - e8 c3 e2 e0 ff             - call 00572cc0
007649FD - eb 0d                      - jmp 00764a0c
007649FF - 6a 00                      - push 00
00764A01 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764A07 - e8 e4 f8 00 00             - call 007742f0
00764A0C - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764A12 - c6 81 8c 01 00 00 00       - mov byte ptr [ecx+0000018c],00
00764A19 - 8b 95 e0 fc ff ff          - mov edx,[ebp-00000320]
00764A1F - c6 82 a8 01 00 00 00       - mov byte ptr [edx+000001a8],00
00764A26 - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
00764A2C - c6 80 b0 01 00 00 00       - mov byte ptr [eax+000001b0],00
00764A33 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764A39 - d9 ee                      - fldz
00764A3B - d9 99 90 01 00 00          - fstp dword ptr [ecx+00000190]
00764A41 - 8b 95 e0 fc ff ff          - mov edx,[ebp-00000320]
00764A47 - d9 ee                      - fldz
00764A49 - d9 9a ac 01 00 00          - fstp dword ptr [edx+000001ac]
00764A4F - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764A55 - 81 c1 8c 00 00 00          - add ecx,0000008c
00764A5B - e8 10 86 ed ff             - call 0063d070
00764A60 - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
00764A66 - d9 80 94 0c 00 00          - fld dword ptr [eax+00000c94]
00764A6C - d9 e8                      - fld1
00764A6E - da e9                      - fucompp
00764A70 - df e0                      - fnstsw ax
00764A72 - f6 c4 44                   - test ah,44
00764A75 - 7b 20                      - jnp 00764a97
00764A77 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764A7D - 83 b9 98 0c 00 00 00       - cmp dword ptr [ecx+00000c98],00
00764A84 - 75 11                      - jne 00764a97
00764A86 - 8b 95 e0 fc ff ff          - mov edx,[ebp-00000320]
00764A8C - 8b 45 08                   - mov eax,[ebp+08]
00764A8F - 89 82 98 0c 00 00          - mov [edx+00000c98],eax
00764A95 - eb 5d                      - jmp 00764af4
00764A97 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764A9D - 8b 55 08                   - mov edx,[ebp+08]
00764AA0 - 2b 91 98 0c 00 00          - sub edx,[ecx+00000c98]
00764AA6 - 81 fa e8 03 00 00          - cmp edx,000003e8
00764AAC - 76 46                      - jna 00764af4
00764AAE - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
00764AB4 - d9 80 94 0c 00 00          - fld dword ptr [eax+00000c94]
00764ABA - d9 e8                      - fld1
00764ABC - da e9                      - fucompp
00764ABE - df e0                      - fnstsw ax
00764AC0 - f6 c4 44                   - test ah,44
00764AC3 - 7b 2f                      - jnp 00764af4
00764AC5 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764ACB - 0f b6 91 94 01 00 00       - movzx edx,byte ptr [ecx+00000194]
00764AD2 - 85 d2                      - test edx,edx
00764AD4 - 74 1e                      - je 00764af4
00764AD6 - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
00764ADC - d9 e8                      - fld1
00764ADE - d9 98 94 0c 00 00          - fstp dword ptr [eax+00000c94]
00764AE4 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764AEA - c7 81 98 0c 00 00 00 00 00 00 - mov [ecx+00000c98],00000000
00764AF4 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764AFA - 81 c1 74 01 00 00          - add ecx,00000174
00764B00 - e8 1b c5 d9 ff             - call 00501020
00764B05 - 0f b6 d0                   - movzx edx,al
00764B08 - 85 d2                      - test edx,edx
00764B0A - 0f 85 cf 0a 00 00          - jne 007655df
00764B10 - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
00764B16 - 05 a8 00 00 00             - add eax,000000a8
00764B1B - 50                         - push eax
00764B1C - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764B22 - 81 c1 8c 00 00 00          - add ecx,0000008c
00764B28 - e8 23 0d d2 ff             - call 00485850
00764B2D - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764B33 - 81 c1 ac 05 00 00          - add ecx,000005ac
00764B39 - e8 12 ff cb ff             - call 00424a50
00764B3E - 85 c0                      - test eax,eax
00764B40 - 0f 86 ca 00 00 00          - jbe 00764c10
00764B46 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764B4C - 81 c1 ac 05 00 00          - add ecx,000005ac
00764B52 - e8 f9 fe cb ff             - call 00424a50
00764B57 - 89 85 38 fd ff ff          - mov [ebp-000002c8],eax
00764B5D - 8d 4d f8                   - lea ecx,[ebp-08]
00764B60 - 51                         - push ecx
00764B61 - 8d 95 38 fd ff ff          - lea edx,[ebp-000002c8]
00764B67 - 52                         - push edx
00764B68 - e8 73 6a cf ff             - call 0045b5e0
00764B6D - 83 c4 08                   - add esp,08
00764B70 - 8b 00                      - mov eax,[eax]
00764B72 - 50                         - push eax
00764B73 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764B79 - 81 c1 ac 05 00 00          - add ecx,000005ac
00764B7F - e8 9c bd eb ff             - call 00620920
00764B84 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764B8A - 81 c1 ac 05 00 00          - add ecx,000005ac
00764B90 - e8 bb fe cb ff             - call 00424a50
00764B95 - 85 c0                      - test eax,eax
00764B97 - 75 77                      - jne 00764c10
00764B99 - 6a 00                      - push 00
00764B9B - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764BA1 - e8 5a 82 ff ff             - call 0075ce00
00764BA6 - 83 3d 34 b0 e0 00 00       - cmp dword ptr [00e0b034],00
00764BAD - 74 41                      - je 00764bf0
00764BAF - 51                         - push ecx
00764BB0 - 8b cc                      - mov ecx,esp
00764BB2 - 68 cc 0e cf 00             - push 00cf0ecc : [""flyingPetEnable""]
00764BB7 - e8 84 8f cb ff             - call 0041db40
00764BBC - 51                         - push ecx
00764BBD - 8b cc                      - mov ecx,esp
00764BBF - 6a 01                      - push 01
00764BC1 - 8b 95 e0 fc ff ff          - mov edx,[ebp-00000320]
00764BC7 - 52                         - push edx
00764BC8 - e8 73 bb 10 00             - call 00870740
00764BCD - 51                         - push ecx
00764BCE - 8b cc                      - mov ecx,esp
00764BD0 - 6a 01                      - push 01
00764BD2 - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
00764BD8 - 50                         - push eax
00764BD9 - e8 62 bb 10 00             - call 00870740
00764BDE - 8b 0d 34 b0 e0 00          - mov ecx,[00e0b034] : [00000000]
00764BE4 - 8b 11                      - mov edx,[ecx]
00764BE6 - 8b 0d 34 b0 e0 00          - mov ecx,[00e0b034] : [00000000]
00764BEC - 8b 02                      - mov eax,[edx]
00764BEE - ff d0                      - call eax
00764BF0 - 6a 00                      - push 00
00764BF2 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764BF8 - 81 c1 c0 01 00 00          - add ecx,000001c0
00764BFE - e8 cd 44 d7 ff             - call 004d90d0
00764C03 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764C09 - c6 81 d9 09 00 00 00       - mov byte ptr [ecx+000009d9],00
00764C10 - c7 85 d4 fd ff ff 02 00 00 00 - mov [ebp-0000022c],00000002
00764C1A - d9 05 c8 5c cf 00          - fld dword ptr [00cf5cc8] : [(float)0.0010]
00764C20 - d9 9d d8 fd ff ff          - fstp dword ptr [ebp-00000228]
00764C26 - 8b 55 f8                   - mov edx,[ebp-08]     			;瞬移速度因子赋值
00764C29 - 89 95 d0 fd ff ff          - mov [ebp-00000230],edx			;速度因子:[ebp - 0x230]
00764C2F - 83 bd d0 fd ff ff 00       - cmp dword ptr [ebp-00000230],00
00764C36 - 0f 86 74 09 00 00          - jbe 007655b0				;小于或等于跳转
00764C3C - 83 bd d0 fd ff ff 02       - cmp dword ptr [ebp-00000230],02
00764C43 - 73 0e                      - jae 00764c53				;如果超过或等于(>=)则跳转,由于速度因子不可能小于0且大于2,所以跳转00764C53
00764C45 - 8b 85 d0 fd ff ff          - mov eax,[ebp-00000230]
00764C4B - 89 85 d8 fc ff ff          - mov [ebp-00000328],eax
00764C51 - eb 0a                      - jmp 00764c5d
00764C53 - c7 85 d8 fc ff ff 02 00 00 00 - mov [ebp-00000328],00000002          ;[ebp-0x328]赋值为02,这个是时候速度因子是>=2
00764C5D - 8b 8d d8 fc ff ff          - mov ecx,[ebp-00000328]			;然后赋予ecx	
00764C63 - 89 8d c8 fd ff ff          - mov [ebp-00000238],ecx			;将ecx又赋予了  [ebp - 0x238] -->2
00764C69 - 8b 95 d0 fd ff ff          - mov edx,[ebp-00000230]			;(将速度因子)通过[ebp-0x230] 计算一个值给edx
00764C6F - 2b 95 c8 fd ff ff          - sub edx,[ebp-00000238]			;edx = edx - [ebp - 0x238]  将速度因子给减去了一个默认值.
00764C75 - 89 95 d0 fd ff ff          - mov [ebp-00000230],edx			;得到最新的速度因子给局部变量
00764C7B - 8b 85 c8 fd ff ff          - mov eax,[ebp-00000238]			;将被减的局部变量赋值了eax
00764C81 - 89 85 d0 fc ff ff          - mov [ebp-00000330],eax			;将[被减的值]eax的值存放在了局部变量[ebp - 0x330]
00764C87 - c7 85 d4 fc ff ff 00 00 00 00 - mov [ebp-0000032c],00000000		;将[ebp - 0x32c]初始化
00764C91 - df ad d0 fc ff ff          - fild qword ptr [ebp-00000330]		;将被减的值[ebp - 0x330]-->浮点加载整数,将浮点化为整数.?
00764C97 - d8 8d d8 fd ff ff          - fmul dword ptr [ebp-00000228]		;浮点乘
00764C9D - d9 9d c4 fd ff ff          - fstp dword ptr [ebp-0000023c]           ;将上面两句结合起来:[ebp - 0x330] * [ebp - 0x228] = [ebp - 23c]
00764CA3 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764CA9 - 81 c1 e4 05 00 00          - add ecx,000005e4
00764CAF - e8 9c fd cb ff             - call 00424a50
00764CB4 - 85 c0                      - test eax,eax
00764CB6 - 76 71                      - jna 00764d29				;如果不超过(不>)则跳转,参数计算完毕后,跳转 00764D29
00764CB8 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764CBE - 81 c1 e4 05 00 00          - add ecx,000005e4
00764CC4 - e8 87 fd cb ff             - call 00424a50
00764CC9 - 89 85 28 fd ff ff          - mov [ebp-000002d8],eax
00764CCF - 8d 8d c8 fd ff ff          - lea ecx,[ebp-00000238]
00764CD5 - 51                         - push ecx
00764CD6 - 8d 95 28 fd ff ff          - lea edx,[ebp-000002d8]
00764CDC - 52                         - push edx
00764CDD - e8 fe 68 cf ff             - call 0045b5e0
00764CE2 - 83 c4 08                   - add esp,08
00764CE5 - 8b 00                      - mov eax,[eax]
00764CE7 - 89 85 bc fd ff ff          - mov [ebp-00000244],eax
00764CED - 8b 8d bc fd ff ff          - mov ecx,[ebp-00000244]
00764CF3 - 51                         - push ecx
00764CF4 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764CFA - 81 c1 e4 05 00 00          - add ecx,000005e4
00764D00 - e8 1b bc eb ff             - call 00620920
00764D05 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764D0B - 81 c1 e4 05 00 00          - add ecx,000005e4
00764D11 - e8 3a fd cb ff             - call 00424a50
00764D16 - 85 c0                      - test eax,eax
00764D18 - 75 0f                      - jne 00764d29
00764D1A - 6a 00                      - push 00
00764D1C - 6a 00                      - push 00
00764D1E - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764D24 - e8 b7 b4 00 00             - call 007701e0
00764D29 - 51                         - push ecx				;push ecx   ecx就是一个被减的值02
00764D2A - d9 85 c4 fd ff ff          - fld dword ptr [ebp-0000023c]		;之前的乘积又加载出来
00764D30 - d9 1c 24                   - fstp dword ptr [esp]			;将结果保存在esp栈
00764D33 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]			;恢复ecx
00764D39 - e8 72 15 00 00             - call 007662b0
00764D3E - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764D44 - e8 f7 db 00 00             - call 00772940
00764D49 - 8b 95 e0 fc ff ff          - mov edx,[ebp-00000320]
00764D4F - 83 ba cc 01 00 00 02       - cmp dword ptr [edx+000001cc],02
00764D56 - 74 1b                      - je 00764d73
00764D58 - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
00764D5E - 83 b8 cc 01 00 00 03       - cmp dword ptr [eax+000001cc],03
00764D65 - 74 0c                      - je 00764d73
00764D67 - c7 85 cc fc ff ff 00 00 00 00 - mov [ebp-00000334],00000000
00764D71 - eb 0a                      - jmp 00764d7d
00764D73 - c7 85 cc fc ff ff 01 00 00 00 - mov [ebp-00000334],00000001
00764D7D - 8a 8d cc fc ff ff          - mov cl,[ebp-00000334]
00764D83 - 88 8d c3 fd ff ff          - mov [ebp-0000023d],cl
00764D89 - 51                         - push ecx
00764D8A - d9 85 c4 fd ff ff          - fld dword ptr [ebp-0000023c]
00764D90 - d9 1c 24                   - fstp dword ptr [esp]
00764D93 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764D99 - e8 92 19 00 00             - call 00766730
00764D9E - 0f b6 95 c3 fd ff ff       - movzx edx,byte ptr [ebp-0000023d]
00764DA5 - 52                         - push edx
00764DA6 - 51                         - push ecx
00764DA7 - d9 85 c4 fd ff ff          - fld dword ptr [ebp-0000023c]
00764DAD - d9 1c 24                   - fstp dword ptr [esp]
00764DB0 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764DB6 - e8 b5 1b 00 00             - call 00766970
00764DBB - 88 85 cf fd ff ff          - mov [ebp-00000231],al
00764DC1 - 51                         - push ecx
00764DC2 - d9 85 c4 fd ff ff          - fld dword ptr [ebp-0000023c]
00764DC8 - d9 1c 24                   - fstp dword ptr [esp]
00764DCB - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764DD1 - e8 ba f6 ff ff             - call 00764490
00764DD6 - 0f b6 85 c3 fd ff ff       - movzx eax,byte ptr [ebp-0000023d]
00764DDD - 85 c0                      - test eax,eax
00764DDF - 74 22                      - je 00764e03
00764DE1 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764DE7 - c6 81 d0 09 00 00 00       - mov byte ptr [ecx+000009d0],00
00764DEE - 51                         - push ecx
00764DEF - d9 85 c4 fd ff ff          - fld dword ptr [ebp-0000023c]
00764DF5 - d9 1c 24                   - fstp dword ptr [esp]
00764DF8 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764DFE - e8 6d 57 00 00             - call 0076a570
00764E03 - 0f b6 95 cf fd ff ff       - movzx edx,byte ptr [ebp-00000231]
00764E0A - 85 d2                      - test edx,edx
00764E0C - 75 15                      - jne 00764e23
00764E0E - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
00764E14 - 0f b6 88 80 0c 00 00       - movzx ecx,byte ptr [eax+00000c80]
00764E1B - 85 c9                      - test ecx,ecx
00764E1D - 0f 84 a2 00 00 00          - je 00764ec5
00764E23 - 0f b6 95 c3 fd ff ff       - movzx edx,byte ptr [ebp-0000023d]
00764E2A - 85 d2                      - test edx,edx
00764E2C - 75 6a                      - jne 00764e98
00764E2E - 51                         - push ecx
00764E2F - d9 85 c4 fd ff ff          - fld dword ptr [ebp-0000023c]
00764E35 - d9 1c 24                   - fstp dword ptr [esp]
00764E38 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764E3E - e8 4d 21 00 00             - call 00766f90
00764E43 - 51                         - push ecx
00764E44 - d9 85 c4 fd ff ff          - fld dword ptr [ebp-0000023c]
00764E4A - d9 1c 24                   - fstp dword ptr [esp]
00764E4D - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764E53 - e8 58 23 00 00             - call 007671b0
00764E58 - 8b 85 e0 fc ff ff          - mov eax,[ebp-00000320]
00764E5E - 0f b6 88 3c 0d 00 00       - movzx ecx,byte ptr [eax+00000d3c]
00764E65 - 85 c9                      - test ecx,ecx
00764E67 - 74 1a                      - je 00764e83
00764E69 - 8b 95 e0 fc ff ff          - mov edx,[ebp-00000320]
00764E6F - c6 82 3c 0d 00 00 00       - mov byte ptr [edx+00000d3c],00
00764E76 - 6a 01                      - push 01
00764E78 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764E7E - e8 2d b2 00 00             - call 007700b0
00764E83 - 51                         - push ecx
00764E84 - d9 85 c4 fd ff ff          - fld dword ptr [ebp-0000023c]
00764E8A - d9 1c 24                   - fstp dword ptr [esp]
00764E8D - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764E93 - e8 a8 2a 00 00             - call 00767940
00764E98 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764E9E - e8 0d 48 00 00             - call 007696b0
00764EA3 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764EA9 - e8 f2 49 00 00             - call 007698a0
00764EAE - 51                         - push ecx
00764EAF - d9 85 c4 fd ff ff          - fld dword ptr [ebp-0000023c]
00764EB5 - d9 1c 24                   - fstp dword ptr [esp]
00764EB8 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764EBE - e8 8d 4c 00 00             - call 00769b50
00764EC3 - eb 16                      - jmp 00764edb
00764EC5 - 0f b6 85 c3 fd ff ff       - movzx eax,byte ptr [ebp-0000023d]
00764ECC - 85 c0                      - test eax,eax
00764ECE - 75 0b                      - jne 00764edb
00764ED0 - 8b 8d e0 fc ff ff          - mov ecx,[ebp-00000320]
00764ED6 - e8 b5 42 00 00             - call 00769190
00764EDB - 0f b6 8d c3 fd ff ff       - movzx ecx,byte ptr [ebp-0000023d]
00764EE2 - 51                         - push ecx

版权声明:本文为博主原创文章,未经博主允许不得转载。

相关文章推荐

逆向工程__某游戏基址查找过程

某游戏基址查找过程      今天闲来无事,好久没有逆软件了,本来用CE想找个基址来写个外挂玩玩,结果发现这个是一个数组,而且跳跃次数也比较多,较为麻烦,没办法,只有祭出我的大杀器OD来办它。过...

Python灰帽子--黑客与逆向工程师的Python编程之道 笔记,过程问题解决

自从上次读了python黑帽子(http://blog.csdn.net/u012763794/article/details/50612756),感觉作者写的书还不错,现在来读读python灰帽子吧...

c&c++反汇编与逆向分析学习笔记(5)--加法的求值过程和编译器优化

学了逆向分析之后,发现,虽然我们写了程序,但是程序并不是按完全按照我们写的代码一句 一句执行的,很有可能一大部分代码都被编译器优化修改了。只有了解这些东西,我们才能写出 性能更加优益,可读性与精炼...

iOS逆向过程思考(1)

通过隐藏iOS系统自带APP-Mail底部的编辑按钮对逆向过程的思考对于APP来说,我们感兴趣的往往体现在UI上,UI展示了函数的执行过程和结果.函数和UI之间的关联非常紧密,如果能够拿到感兴趣的UI...

需求获取过程中的逆向沟通

一、需求的分类 需求分析是构建软件系统的一个重要过程。一般,把需求类型分成三个类型 1、业务需求(business requirement)反映了组织机构或客户对系统、产品高层次的目的要求,它们...

CVE-2010-3962逆向分析过程

这个漏洞已经发布有一段时间了,现在假期有空,分析一下当作练手。运行环境:Windows XP SP3IE 6.0.2900.5512以下将从逆向的角度,通过对汇编代码的分析,找出漏洞产生原因。首先从网...
  • QEver
  • QEver
  • 2011-01-31 18:42
  • 587

<开心消消乐>简单的逆向破解过程

0x0 定位dex脱壳 反编译之后,可以很明显的发现源码的Dex已经壳文件代替,主代码被加密隐藏了起来。分析壳的代码,DexClassLoader加载的形式: 那应该说明Dex是被整体加密...

JDBC执行过程

  • 2017-06-29 11:38
  • 121KB
  • 下载
内容举报
返回顶部
收藏助手
不良信息举报
您举报文章:深度学习:神经网络中的前向传播和反向传播算法推导
举报原因:
原因补充:

(最多只允许输入30个字)