:0040ADD2 8D542414 lea edx, dword ptr [esp+14] :0040ADD6 F2 repnz :0040ADD7 AE scasb :0040ADD8 F7D1 not ecx :0040ADDA 2BF9 sub edi, ecx :0040ADDC 8BF7 mov esi, edi :0040ADDE 8BFA mov edi, edx :0040ADE0 8BD1 mov edx, ecx :0040ADE2 83C9FF or ecx, FFFFFFFF :0040ADE5 F2 repnz :0040ADE6 AE scasb :0040ADE7 8BCA mov ecx, edx :0040ADE9 4F dec edi :0040ADEA C1E902 shr ecx, 02 :0040ADED F3 repz :0040ADEE A5 movsd :0040ADEF 8BCA mov ecx, edx :0040ADF1 83E103 and ecx, 00000003 :0040ADF4 F3 repz :0040ADF5 A4 movsb
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses: :0040ADB7(C), :0040ADC6(C)
:0040ADF6 43 inc ebx :0040ADF7 83FB09 cmp ebx, 00000009 :0040ADFA 0F8247FFFFFF jb 0040AD47 :0040AE00 8D442414 lea eax, dword ptr [esp+14] :0040AE04 6810E64500 push 0045E610
上一篇:Registry Crawler 4.0注册码算法分析(2)
下一篇:Revival 的算法跟踪(1)
|