动态库的函数,已经反汇编成汇编程序,请教函数VLSgetMachineID的输入参数和返回参数(高分相送)
benan 2005-05-25 04:26:44 Exported fn(): VLSgetMachineID - Ord:0021h
:100159BB 55 push ebp
:100159BC 8BEC mov ebp, esp
:100159BE 56 push esi
:100159BF FF7510 push [ebp+10]
:100159C2 8B750C mov esi, dword ptr [ebp+0C]
:100159C5 56 push esi
:100159C6 FF7508 push [ebp+08]
:100159C9 E896FEFFFF call 10015864
:100159CE 83C40C add esp, 0000000C
:100159D1 85C0 test eax, eax
:100159D3 7524 jne 100159F9
:100159D5 F6450808 test [ebp+08], 08
:100159D9 741C je 100159F7
:100159DB 83C648 add esi, 00000048
:100159DE 803E00 cmp byte ptr [esi], 00
:100159E1 7414 je 100159F7
:100159E3 6A40 push 00000040
:100159E5 56 push esi
:100159E6 E807030100 call 10025CF2
:100159EB 83C408 add esp, 00000008
:100159EE 56 push esi
:100159EF E853F60000 call 10025047
:100159F4 83C404 add esp, 00000004
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:100159D9(C), :100159E1(C)
|
:100159F7 33C0 xor eax, eax
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:100159D3(C)
|
:100159F9 5E pop esi
:100159FA 5D pop ebp
:100159FB C3 ret
* Referenced by a CALL at Addresses:
|:1000E4AF , :10015C7D , :10015CF4 , :10015D2A , :10033738
|:100411DD , :1004174C , :1004178A , :10041844 , :10041873
|
:100159FC 55 push ebp
:100159FD 8BEC mov ebp, esp
:100159FF 83EC04 sub esp, 00000004
:10015A02 C745FC00000000 mov [ebp-04], 00000000
:10015A09 53 push ebx
:10015A0A 56 push esi
:10015A0B 57 push edi
:10015A0C 8B7510 mov esi, dword ptr [ebp+10]
:10015A0F 85F6 test esi, esi
:10015A11 750A jne 10015A1D
:10015A13 B8FFFFFFFF mov eax, FFFFFFFF
:10015A18 E9FE000000 jmp 10015B1B
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:10015A11(C)
|
:10015A1D F7C602000000 test esi, 00000002
:10015A23 745A je 10015A7F
:10015A25 833DF400081000 cmp dword ptr [100800F4], 00000000
:10015A2C 753B jne 10015A69
:10015A2E 8B7D08 mov edi, dword ptr [ebp+08]
:10015A31 57 push edi
:10015A32 E8DCF5FFFF call 10015013
:10015A37 83C404 add esp, 00000004
:10015A3A 85C0 test eax, eax
:10015A3C 7544 jne 10015A82
:10015A3E 6A14 push 00000014
:10015A40 BBE0000810 mov ebx, 100800E0
:10015A45 6A00 push 00000000
:10015A47 53 push ebx
:10015A48 E8C3B50400 call 10061010
:10015A4D 83C40C add esp, 0000000C
:10015A50 8D4704 lea eax, dword ptr [edi+04]
:10015A53 50 push eax
:10015A54 53 push ebx
:10015A55 E8A6B00400 call 10060B00
:10015A5A C705F400081001000000 mov dword ptr [100800F4], 00000001
:10015A64 83C408 add esp, 00000008
:10015A67 EB19 jmp 10015A82
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:10015A2C(C)
|
:10015A69 68E0000810 push 100800E0
:10015A6E 8B7D08 mov edi, dword ptr [ebp+08]
:10015A71 8D4704 lea eax, dword ptr [edi+04]
:10015A74 50 push eax
:10015A75 E886B00400 call 10060B00
:10015A7A 83C408 add esp, 00000008
:10015A7D EB03 jmp 10015A82
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:10015A23(C)
|
:10015A7F 8B7D08 mov edi, dword ptr [ebp+08]
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:10015A3C(C), :10015A67(U), :10015A7D(U)
|
:10015A82 F7C680000000 test esi, 00000080
:10015A88 7458 je 10015AE2
:10015A8A 833D8833071000 cmp dword ptr [10073388], 00000000
:10015A91 753B jne 10015ACE
:10015A93 57 push edi
:10015A94 E847F8FFFF call 100152E0
:10015A99 83C404 add esp, 00000004
:10015A9C 85C0 test eax, eax
:10015A9E 7542 jne 10015AE2
:10015AA0 6A40 push 00000040
:10015AA2 BB80000810 mov ebx, 10080080
:10015AA7 6A00 push 00000000
:10015AA9 53 push ebx
:10015AAA E861B50400 call 10061010
:10015AAF 83C40C add esp, 0000000C
:10015AB2 8D87D0000000 lea eax, dword ptr [edi+000000D0]
:10015AB8 50 push eax
:10015AB9 53 push ebx
:10015ABA E841B00400 call 10060B00
:10015ABF C705F400081001000000 mov dword ptr [100800F4], 00000001
:10015AC9 83C408 add esp, 00000008
:10015ACC EB14 jmp 10015AE2(待续1)