📄 00000007.htm
字号:
<BR>(gdb) disass 0x80561d9 0x805624e
<BR>Dump of assembler code from 0x80561d9 to 0x805624e:
<BR>0x80561d9 <whereError+13149>: pushl %edi
<BR>0x80561da <whereError+13150>: pushl %esi
<BR>0x80561db <whereError+13151>: pushl %ebx
<BR>0x80561dc <whereError+13152>: movl 0x14(%esp,1),%edi
<BR>0x80561e0 <whereError+13156>: movl 0x10(%esp,1),%edx
<BR>0x80561e4 <whereError+13160>: xorl %ebx,%ebx
<BR>0x80561e6 <whereError+13162>: movl %edi,%eax
<BR>0x80561e8 <whereError+13164>: movl %edi,%esi
<BR>0x80561ea <whereError+13166>: andl $0x3,%eax
<BR>0x80561ed <whereError+13169>: je 0x8056205 <whereError+13193>
<BR>0x80561ef <whereError+13171>: jp 0x8056200 <whereError+13188>
<BR>0x80561f1 <whereError+13173>: cmpl $0x2,%eax
<BR>0x80561f4 <whereError+13176>: je 0x80561fb <whereError+13183>
<BR>0x80561f6 <whereError+13178>: cmpb %ah,(%esi)
<BR>0x80561f8 <whereError+13180>: je 0x8056229 <whereError+13229>
<BR>0x80561fa <whereError+13182>: incl %esi
<BR>0x80561fb <whereError+13183>: cmpb %ah,(%esi)
<BR>0x80561fd <whereError+13185>: je 0x8056229 <whereError+13229>
<BR>0x80561ff <whereError+13187>: incl %esi
<BR>0x8056200 <whereError+13188>: cmpb %ah,(%esi)
<BR>0x8056202 <whereError+13190>: je 0x8056229 <whereError+13229>
<BR>0x8056204 <whereError+13192>: incl %esi
<BR>0x8056205 <whereError+13193>: movl (%esi),%eax
<BR>0x8056207 <whereError+13195>: testb %ah,%al
<BR>0x8056209 <whereError+13197>: jne 0x8056213 <whereError+13207>
<BR>0x805620b <whereError+13199>: testb %al,%al
<BR>0x805620d <whereError+13201>: je 0x8056229 <whereError+13229>
<BR>0x805620f <whereError+13203>: testb %ah,%ah
<BR>0x8056211 <whereError+13205>: je 0x8056228 <whereError+13228>
<BR>0x8056213 <whereError+13207>: testl $0xff0000,%eax
<BR>0x8056218 <whereError+13212>: je 0x8056227 <whereError+13227>
<BR>0x805621a <whereError+13214>: addl $0x4,%esi
<BR>0x805621d <whereError+13217>: testl $0xff000000,%eax
<BR>0x8056222 <whereError+13222>: jne 0x8056205 <whereError+13193>
<BR>0x8056224 <whereError+13224>: subl $0x3,%esi
<BR>0x8056227 <whereError+13227>: incl %esi
<BR>0x8056228 <whereError+13228>: incl %esi
<BR>0x8056229 <whereError+13229>: subl %edi,%esi
<BR>0x805622b <whereError+13231>: cmpl %esi,%ebx
<BR>0x805622d <whereError+13233>: jnl 0x8056248 <whereError+13260>
<BR>0x805622f <whereError+13235>: movb (%ebx,%edi,1),%al
<BR>0x8056232 <whereError+13238>: incl %ebx
<BR>0x8056233 <whereError+13239>: andl $0xff,%eax
<BR>0x8056238 <whereError+13244>: pushl %eax
<BR>0x8056239 <whereError+13245>: pushl %edx
<BR>0x805623a <whereError+13246>: call 0x8055b58 <whereError+11484>
<BR>0x805623f <whereError+13251>: movl %eax,%edx
<BR>0x8056241 <whereError+13253>: addl $0x8,%esp
<BR>0x8056244 <whereError+13256>: cmpl %esi,%ebx
<BR>0x8056246 <whereError+13258>: jl 0x805622f <whereError+13235>
<BR>0x8056248 <whereError+13260>: popl %ebx
<BR>0x8056249 <whereError+13261>: movl %edx,%eax
<BR>0x805624b <whereError+13263>: popl %esi
<BR>0x805624c <whereError+13264>: popl %edi
<BR>0x805624d <whereError+13265>: ret
<BR>
<BR>0x8055b58处的函数太长了, bbs不让我发..:( 砍掉了
<BR>
<BR>由这个程序的破解可以看出, linux下的破解并不困难, 只是gdb有点不太方便
<BR>有时会有点小毛病(比如ni有时也会跟到函数中), 不过用多了就习惯了.
<BR>
<BR>
<BR> <BR>-- <BR> <BR> ~0 (_| . - ' - . _ . - ' - . _ . - ' - . |_) O <BR> |(_~|^~~| |~~^|~_)| <BR> TT/_ T"T 网络连着你我她 T"T _\HH <BR>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ <BR> <BR> <BR>※ 来源:·BBS 水木清华站 bbs.net.tsinghua.edu.cn·[FROM: sun.swjtu.edu.cn] <BR><CENTER><H1>BBS水木清华站∶精华区</H1></CENTER></BODY></HTML>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -