这是一段从一个程序中用ollydbg反汇编出来的, 感觉应该是一个注册码的比较程序, 可好像什么都没有设置, 请高人帮忙看看这段程序如果注册码符合, 它设置了哪里啊?
00402900 /$ 83EC 08 sub esp, 8
00402903 |. 53 push ebx
00402904 |. 56 push esi
00402905 |. 57 push edi
00402906 |. 8BF1 mov esi, ecx
00402908 |. E8 03010000 call 00402A10
0040290D |. 68 48100000 push 1048
00402912 |. E8 C55C0000 call <jmp.&MFC42.#823_operator new>
00402917 |. 8946 04 mov dword ptr [esi+4], eax
0040291A |. 83C4 04 add esp, 4
0040291D |. B8 48000000 mov eax, 48
00402922 |> B9 90A94000 /mov ecx, 0040A990
00402927 |. BA 00010000 |mov edx, 100
0040292C |. 83E9 48 |sub ecx, 48
0040292F |> 8B7E 04 |/mov edi, dword ptr [esi+4]
00402932 |. 8B1C01 ||mov ebx, dword ptr [ecx+eax]
00402935 |. 891C38 ||mov dword ptr [eax+edi], ebx
00402938 |. 83C0 04 ||add eax, 4
0040293B |. 4A ||dec edx
0040293C |.^ 75 F1 |\jnz short 0040292F
0040293E |. 3D 48100000 |cmp eax, 1048
00402943 |.^ 7C DD \jl short 00402922
00402945 |. 8B7C24 1C mov edi, dword ptr [esp+1C]
00402949 |. 8B5424 18 mov edx, dword ptr [esp+18]
0040294D |. 55 push ebp
0040294E |. 33C0 xor eax, eax
00402950 |. 33ED xor ebp, ebp
00402952 |> 33C9 /xor ecx, ecx
00402954 |. C74424 20 040>|mov dword ptr [esp+20], 4
0040295C |> 33DB |/xor ebx, ebx
0040295E |. 8A1C10 ||mov bl, byte ptr [eax+edx]
00402961 |. C1E1 08 ||shl ecx, 8
00402964 |. 0BCB ||or ecx, ebx
00402966 |. 40 ||inc eax
00402967 |. 3BC7 ||cmp eax, edi
00402969 |. 7C 02 ||jl short 0040296D
0040296B |. 33C0 ||xor eax, eax
0040296D |> 8B5C24 20 ||mov ebx, dword ptr [esp+20]
00402971 |. 4B ||dec ebx
00402972 |. 895C24 20 ||mov dword ptr [esp+20], ebx
00402976 |.^ 75 E4 |\jnz short 0040295C
00402978 |. 8B9D 48A94000 |mov ebx, dword ptr [ebp+40A948]
0040297E |. 83C5 04 |add ebp, 4
00402981 |. 33D9 |xor ebx, ecx
00402983 |. 8B4E 04 |mov ecx, dword ptr [esi+4]
00402986 |. 83FD 48 |cmp ebp, 48
00402989 |. 895C29 FC |mov dword ptr [ecx+ebp-4], ebx
0040298D |.^ 7C C3 \jl short 00402952
0040298F |. 33FF xor edi, edi
00402991 |. 5D pop ebp
00402992 |. 897C24 0C mov dword ptr [esp+C], edi
00402996 |. 897C24 10 mov dword ptr [esp+10], edi
0040299A |> 8D5424 10 /lea edx, dword ptr [esp+10]
0040299E |. 8D4424 0C |lea eax, dword ptr [esp+C]
004029A2 |. 52 |push edx
004029A3 |. 50 |push eax
004029A4 |. 8BCE |mov ecx, esi
004029A6 |. E8 95000000 |call 00402A40
004029AB |. 8B4E 04 |mov ecx, dword ptr [esi+4]
004029AE |. 8B5424 0C |mov edx, dword ptr [esp+C]
004029B2 |. 89140F |mov dword ptr [edi+ecx], edx
004029B5 |. 8B46 04 |mov eax, dword ptr [esi+4]
004029B8 |. 8B4C24 10 |mov ecx, dword ptr [esp+10]
004029BC |. 894C07 04 |mov dword ptr [edi+eax+4], ecx
004029C0 |. 83C7 08 |add edi, 8
004029C3 |. 83FF 48 |cmp edi, 48
004029C6 |.^ 7C D2 \jl short 0040299A
004029C8 |. BF 4C000000 mov edi, 4C
004029CD |> BB 80000000 /mov ebx, 80
004029D2 |> 8D5424 10 |/lea edx, dword ptr [esp+10]
004029D6 |. 8D4424 0C ||lea eax, dword ptr [esp+C]
004029DA |. 52 ||push edx
004029DB |. 50 ||push eax
004029DC |. 8BCE ||mov ecx, esi
004029DE |. E8 5D000000 ||call 00402A40
004029E3 |. 8B4E 04 ||mov ecx, dword ptr [esi+4]
004029E6 |. 8B5424 0C ||mov edx, dword ptr [esp+C]
004029EA |. 89540F FC ||mov dword ptr [edi+ecx-4], edx
004029EE |. 8B46 04 ||mov eax, dword ptr [esi+4]
004029F1 |. 8B4C24 10 ||mov ecx, dword ptr [esp+10]
004029F5 |. 890C07 ||mov dword ptr [edi+eax], ecx
004029F8 |. 83C7 08 ||add edi, 8
004029FB |. 4B ||dec ebx
004029FC |.^ 75 D4 |\jnz short 004029D2
004029FE |. 81FF 4C100000 |cmp edi, 104C
00402A04 |.^ 7C C7 \jl short 004029CD
00402A06 |. 5F pop edi
00402A07 |. 5E pop esi
00402A08 |. 5B pop ebx
00402A09 83C4 08 add esp, 8
00402A0C \. C2 0800 retn 8
00402A0F 90 nop
00402A10 /$ 8BD1 mov edx, ecx
00402A12 |. 57 push edi
00402A13 |. 8B7A 04 mov edi, dword ptr [edx+4]
00402A16 |. 85FF test edi, edi
00402A18 |. 74 15 je short 00402A2F
00402A1A |. B9 12040000 mov ecx, 412
00402A1F |. 33C0 xor eax, eax
00402A21 |. F3:AB rep stos dword ptr es:[edi]
00402A23 |. 8B42 04 mov eax, dword ptr [edx+4]
00402A26 |. 50 push eax ; /block
00402A27 |. E8 E45A0000 call <jmp.&MFC42.#825_operator delete>; \free
00402A2C |. 83C4 04 add esp, 4
00402A2F |> 5F pop edi
00402A30 \. C3 retn
[培训]科锐逆向工程师培训第53期2025年7月8日开班！
