跪求好心人给这段汇编填段注释!百分相送,走过路过的都来救济救济!

effenberg 2004-04-22 02:02:27
006B0D0B 00558B add [ebp-$75], dl
006B0D0E EC in al, dx
006B0D0F 83C4C8 add esp, -$38
006B0D12 53 push ebx
006B0D13 56 push esi
006B0D14 57 push edi
006B0D15 33D2 xor edx, edx
006B0D17 8955EC mov [ebp-$14], edx
006B0D1A 8955CC mov [ebp-$34], edx
006B0D1D 8955C8 mov [ebp-$38], edx
006B0D20 8845FF mov [ebp-$01], al
006B0D23 33C0 xor eax, eax
006B0D25 55 push ebp

* Possible String Reference to: '閧9?脬嬅_^[嬪]?'
|
006B0D26 68580F6B00 push $006B0F58

***** TRY
|
006B0D2B 64FF30 push dword ptr fs:[eax]
006B0D2E 648920 mov fs:[eax], esp
006B0D31 803D304B790000 cmp byte ptr [$00794B30], $00
006B0D38 7507 jnz 006B0D41
006B0D3A B301 mov bl, $01
006B0D3C E9F4010000 jmp 006B0F35
006B0D41 8D45CC lea eax, [ebp-$34]

* Possible String Reference to: '1999-07-11'
|
006B0D44 BA700F6B00 mov edx, $006B0F70

* Reference to: System.@LStrLAsg(void;void;void;void);
|
006B0D49 E8A242D5FF call 00404FF0
006B0D4E 8D45C8 lea eax, [ebp-$38]

* Possible String Reference to: '9999-34-67'
|
006B0D51 BA840F6B00 mov edx, $006B0F84

* Reference to: System.@LStrLAsg(void;void;void;void);
|
006B0D56 E89542D5FF call 00404FF0
006B0D5B 33DB xor ebx, ebx
006B0D5D 8D45CC lea eax, [ebp-$34]

* Possible String Reference to: '1999-07-11'
|
006B0D60 BA700F6B00 mov edx, $006B0F70

* Reference to: System.@LStrLAsg(void;void;void;void);
|
006B0D65 E88642D5FF call 00404FF0
006B0D6A 8B45CC mov eax, [ebp-$34]

* Reference to: SysUtils.StrToDate(AnsiString):TDateTime;overload;
| or: SysUtils.StrToTime(AnsiString):TDateTime;overload;
| or: SysUtils.StrToDateTime(AnsiString):TDateTime;overload;
|
006B0D6D E8DACFD5FF call 0040DD4C
006B0D72 DD5DE0 fstp qword ptr [ebp-$20]
006B0D75 9B wait
006B0D76 FF75E4 push dword ptr [ebp-$1C]
006B0D79 FF75E0 push dword ptr [ebp-$20]
006B0D7C B82D000000 mov eax, $0000002D

* Reference to: SysUtils.IncMonth(TDateTime;Integer):TDateTime;
|
006B0D81 E822BAD5FF call 0040C7A8
006B0D86 DD5DD8 fstp qword ptr [ebp-$28]
006B0D89 9B wait
006B0D8A FF75DC push dword ptr [ebp-$24]
006B0D8D FF75D8 push dword ptr [ebp-$28]
006B0D90 B802000000 mov eax, $00000002

* Reference to: SysUtils.IncMonth(TDateTime;Integer):TDateTime;
|
006B0D95 E80EBAD5FF call 0040C7A8
006B0D9A DDD8 fstp st(0)
006B0D9C 8D45C8 lea eax, [ebp-$38]

* Possible String Reference to: '2001-12-31'
|
006B0D9F BA980F6B00 mov edx, $006B0F98

* Reference to: System.@LStrLAsg(void;void;void;void);
|
006B0DA4 E84742D5FF call 00404FF0
006B0DA9 8D45CC lea eax, [ebp-$34]
006B0DAC 8B15344B7900 mov edx, [$00794B34]

* Reference to: System.@LStrLAsg(void;void;void;void);
|
006B0DB2 E83942D5FF call 00404FF0

* Reference to: SysUtils.Now:TDateTime;
|
006B0DB7 E89CB9D5FF call 0040C758
006B0DBC DD5DD8 fstp qword ptr [ebp-$28]
006B0DBF 9B wait
006B0DC0 BF05000000 mov edi, $00000005
006B0DC5 FF75DC push dword ptr [ebp-$24]
006B0DC8 FF75D8 push dword ptr [ebp-$28]
006B0DCB 8BC7 mov eax, edi

* Reference to: SysUtils.IncMonth(TDateTime;Integer):TDateTime;
|
006B0DCD E8D6B9D5FF call 0040C7A8
006B0DD2 DD5DD0 fstp qword ptr [ebp-$30]
006B0DD5 9B wait
006B0DD6 8B45CC mov eax, [ebp-$34]

...全文
81 4 打赏 收藏 转发到动态 举报
写回复
用AI写文章
4 条回复
切换为时间正序
请发表友善的回复…
发表回复
sfengnet 2004-04-23
  • 打赏
  • 举报
回复
看晕了半天,原来是想破解软件啊!!!


我大概帮你分析了一下,你估计只需要把

006B0E7D 0F84B2000000 jz 006B0F35

改为

006B0E7D 0F85B2000000 jnz 006B0F35

就可以了

因为
006B0E79 807DFF00 cmp byte ptr [ebp-$01], $00 ;比较当前时间是否到期
ytssu 2004-04-22
  • 打赏
  • 举报
回复
我看你是吃饱了撑着!我以为你是自己写的,原来是反汇编的,不会有人有兴趣的!
effenberg 2004-04-22
  • 打赏
  • 举报
回复
* Possible String Reference to: '错误提示'
|
006B0F1E B9A4106B00 mov ecx, $006B10A4

* Reference to TApplication instance
|
006B0F23 A1A85B7900 mov eax, dword ptr [$00795BA8]
006B0F28 8B00 mov eax, [eax]

* Reference to: Forms.TApplication.MessageBox(TApplication;PChar;PChar;Longint):Integer;
|
006B0F2A E8BD66DFFF call 004A75EC
006B0F2F 33DB xor ebx, ebx
006B0F31 EB02 jmp 006B0F35
006B0F33 B301 mov bl, $01
006B0F35 33C0 xor eax, eax
006B0F37 5A pop edx
006B0F38 59 pop ecx
006B0F39 59 pop ecx
006B0F3A 648910 mov fs:[eax], edx

****** FINALLY
|

* Possible String Reference to: '嬅_^[嬪]?'
|
006B0F3D 685F0F6B00 push $006B0F5F
006B0F42 8D45C8 lea eax, [ebp-$38]
006B0F45 BA02000000 mov edx, $00000002

* Reference to: System.@LStrArrayClr(void;void;Integer);
|
006B0F4A E82D40D5FF call 00404F7C
006B0F4F 8D45EC lea eax, [ebp-$14]

* Reference to: System.@LStrClr(void;void);
|
006B0F52 E80140D5FF call 00404F58
006B0F57 C3 ret


* Reference to: System.@HandleFinally;
|
006B0F58 E97B39D5FF jmp 004048D8
006B0F5D EBE3 jmp 006B0F42

****** END
|
006B0F5F 8BC3 mov eax, ebx
006B0F61 5F pop edi
006B0F62 5E pop esi
006B0F63 5B pop ebx
006B0F64 8BE5 mov esp, ebp
006B0F66 5D pop ebp
006B0F67 C3 ret

这是一段用DEDE反出来的DEPHI程序,应该是个比较日期的,哪位大侠能帮俺注一下。如果嫌麻烦,只要把与当前时间比较那部分注释一下写给俺就可以了。
effenberg 2004-04-22
  • 打赏
  • 举报
回复
* Reference to: SysUtils.StrToDate(AnsiString):TDateTime;overload;
| or: SysUtils.StrToTime(AnsiString):TDateTime;overload;
| or: SysUtils.StrToDateTime(AnsiString):TDateTime;overload;
|
006B0DD9 E86ECFD5FF call 0040DD4C
006B0DDE DD5DD8 fstp qword ptr [ebp-$28]
006B0DE1 9B wait
006B0DE2 FF75D4 push dword ptr [ebp-$2C]
006B0DE5 FF75D0 push dword ptr [ebp-$30]
006B0DE8 8BC7 mov eax, edi
006B0DEA F7D8 neg eax

* Reference to: SysUtils.IncMonth(TDateTime;Integer):TDateTime;
|
006B0DEC E8B7B9D5FF call 0040C7A8
006B0DF1 DC6DD8 fsubr qword ptr [ebp-$28]
006B0DF4 DD5DF0 fstp qword ptr [ebp-$10]
006B0DF7 9B wait

* Reference to: SysUtils.Now:TDateTime;
|
006B0DF8 E85BB9D5FF call 0040C758
006B0DFD DD5DE0 fstp qword ptr [ebp-$20]
006B0E00 9B wait

* Reference to: SysUtils.Now:TDateTime;
|
006B0E01 E852B9D5FF call 0040C758
006B0E06 83C4F8 add esp, -$08
006B0E09 DD1C24 fstp qword ptr [esp]
006B0E0C 9B wait
006B0E0D B801000000 mov eax, $00000001

* Reference to: SysUtils.IncMonth(TDateTime;Integer):TDateTime;
|
006B0E12 E891B9D5FF call 0040C7A8
006B0E17 DD1D40A87900 fstp qword ptr [$0079A840]
006B0E1D 9B wait

* Reference to: SysUtils.Now:TDateTime;
|
006B0E1E E835B9D5FF call 0040C758
006B0E23 83C4F8 add esp, -$08
006B0E26 DD1C24 fstp qword ptr [esp]
006B0E29 9B wait
006B0E2A B802000000 mov eax, $00000002

* Reference to: SysUtils.IncMonth(TDateTime;Integer):TDateTime;
|
006B0E2F E874B9D5FF call 0040C7A8
006B0E34 DD1D48A87900 fstp qword ptr [$0079A848]
006B0E3A 9B wait

* Reference to: SysUtils.Now:TDateTime;
|
006B0E3B E818B9D5FF call 0040C758
006B0E40 DC5DE0 fcomp qword ptr [ebp-$20]
006B0E43 DFE0 fstsw ax
006B0E45 9E sahf
006B0E46 0F85E7000000 jnz 006B0F33
006B0E4C DD45F0 fld qword ptr [ebp-$10]
006B0E4F D81DA40F6B00 fcomp dword ptr [$006B0FA4]
006B0E55 DFE0 fstsw ax
006B0E57 9E sahf
006B0E58 0F83D5000000 jnb 006B0F33
006B0E5E DD0548A87900 fld qword ptr [$0079A848]
006B0E64 DC2540A87900 fsub qword ptr [$0079A840]
006B0E6A D81DA40F6B00 fcomp dword ptr [$006B0FA4]
006B0E70 DFE0 fstsw ax
006B0E72 9E sahf
006B0E73 0F86BA000000 jbe 006B0F33
006B0E79 807DFF00 cmp byte ptr [ebp-$01], $00
006B0E7D 0F84B2000000 jz 006B0F35

* Reference to: System.Randomize;
|
006B0E83 E8DC1ED5FF call 00402D64
006B0E88 BFD0070000 mov edi, $000007D0
006B0E8D B808000000 mov eax, $00000008

|
006B0E92 E85926D5FF call 004034F0
006B0E97 8BF0 mov esi, eax
006B0E99 B804000000 mov eax, $00000004

|
006B0E9E E84D26D5FF call 004034F0
006B0EA3 03F0 add esi, eax
006B0EA5 83FE05 cmp esi, +$05
006B0EA8 7F03 jnle 006B0EAD
006B0EAA 4F dec edi
006B0EAB 75E0 jnz 006B0E8D
006B0EAD 8BC6 mov eax, esi
006B0EAF B905000000 mov ecx, $00000005
006B0EB4 99 cdq
006B0EB5 F7F9 idiv ecx
006B0EB7 8BDA mov ebx, edx
006B0EB9 83FB01 cmp ebx, +$01
006B0EBC 750D jnz 006B0ECB
006B0EBE 8D45EC lea eax, [ebp-$14]

* Possible String Reference to: '您的软件已经过期,请与供应商联系 !'
|
006B0EC1 BAB00F6B00 mov edx, $006B0FB0

* Reference to: System.@LStrLAsg(void;void;void;void);
|
006B0EC6 E82541D5FF call 00404FF0
006B0ECB 83FB02 cmp ebx, +$02
006B0ECE 750D jnz 006B0EDD
006B0ED0 8D45EC lea eax, [ebp-$14]

* Possible String Reference to: 'Kernel32.exe Error, please reinstal
| l your windows!'
|
006B0ED3 BADC0F6B00 mov edx, $006B0FDC

* Reference to: System.@LStrLAsg(void;void;void;void);
|
006B0ED8 E81341D5FF call 00404FF0
006B0EDD 83FB03 cmp ebx, +$03
006B0EE0 750D jnz 006B0EEF
006B0EE2 8D45EC lea eax, [ebp-$14]

* Possible String Reference to: 'Can not load tapi2.dll ,please rein
| stall windows!'
|
006B0EE5 BA18106B00 mov edx, $006B1018

* Reference to: System.@LStrLAsg(void;void;void;void);
|
006B0EEA E80141D5FF call 00404FF0
006B0EEF 83FB04 cmp ebx, +$04
006B0EF2 750D jnz 006B0F01
006B0EF4 8D45EC lea eax, [ebp-$14]

* Possible String Reference to: 'Internal Error !'
|
006B0EF7 BA54106B00 mov edx, $006B1054

* Reference to: System.@LStrLAsg(void;void;void;void);
|
006B0EFC E8EF40D5FF call 00404FF0
006B0F01 85DB test ebx, ebx
006B0F03 750D jnz 006B0F12
006B0F05 8D45EC lea eax, [ebp-$14]
* Possible String Reference to: 'Not enough resource to load program
| ,please reboot !'
|
006B0F08 BA70106B00 mov edx, $006B1070

* Reference to: System.@LStrLAsg(void;void;void;void);
|
006B0F0D E8DE40D5FF call 00404FF0
006B0F12 6A10 push $10
006B0F14 8B45EC mov eax, [ebp-$14]

* Reference to: System.@LStrToPChar(String):PAnsiChar;
|
006B0F17 E8FC44D5FF call 00405418
006B0F1C 8BD0 mov edx, eax

21,459

社区成员

发帖
与我相关
我的任务
社区描述
汇编语言(Assembly Language)是任何一种用于电子计算机、微处理器、微控制器或其他可编程器件的低级语言,亦称为符号语言。
社区管理员
  • 汇编语言
加入社区
  • 近7日
  • 近30日
  • 至今
社区公告
暂无公告

试试用AI创作助手写篇文章吧