2009-8-18 07:42
godtype
以下代码是根据norton的UE改法转回OB代码的：
0043AC2F >-E9 D4200500 JMP 0048CD08
0043AC34 90 NOP
0043AC35 90 NOP
0048CD08 FF75 F0 PUSH DWORD PTR SS:[EBP-10]
0048CD0B FF75 F8 PUSH DWORD PTR SS:[EBP-8]
0048CD0E E8 56FFFFFF CALL 0048CC69
0048CD13 83C4 08 ADD ESP,8
0048CD16 85C0 TEST EAX,EAX
0048CD18 74 1A JE SHORT 0048CD34
0048CD1A 8A45 F8 MOV AL,BYTE PTR SS:[EBP-8]
0048CD1D 8B4D F0 MOV ECX,DWORD PTR SS:[EBP-10]
0048CD20 8A51 04 MOV DL,BYTE PTR DS:[ECX+4]
0048CD23 52 PUSH EDX
0048CD24 50 PUSH EAX
0048CD25 B9 F0274900 MOV ECX,004927F0
0048CD2A E8 C297F7FF CALL 004064F1
0048CD2F -E9 10DFFAFF JMP 0043AC44
0048CD34 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0048CD37 50 PUSH EAX
0048CD38 8B4D F0 MOV ECX,DWORD PTR SS:[EBP-10]
0048CD3B -E9 F6DEFAFF JMP 0043AC36
0043DB3B .-E9 D9EF0400 JMP 0048CB19
0043DB40 90 NOP
0048CB19 83C4 08 ADD ESP,8
0048CB1C FF75 F4 PUSH DWORD PTR SS:[EBP-C]
0048CB1F FF75 F8 PUSH DWORD PTR SS:[EBP-8]
0048CB22 E8 42010000 CALL 0048CC69
0048CB27 83C4 08 ADD ESP,8
0048CB2A 85C0 TEST EAX,EAX
0048CB2C 74 1A JE SHORT 0048CB48
0048CB2E 8A45 F8 MOV AL,BYTE PTR SS:[EBP-8]
0048CB31 8B4D F4 MOV ECX,DWORD PTR SS:[EBP-C]
0048CB34 8A51 04 MOV DL,BYTE PTR DS:[ECX+4]
0048CB37 52 PUSH EDX
0048CB38 50 PUSH EAX
0048CB39 B9 F0274900 MOV ECX,004927F0
0048CB3E E8 AE99F7FF CALL 004064F1
0048CB43 -E9 0B10FBFF JMP 0043DB53
0048CB48 8B45 F8 MOV EAX,DWORD PTR SS:[EBP-8]
0048CB4B -E9 F10FFBFF JMP 0043DB41
0048CC69 55 PUSH EBP
0048CC6A 8BEC MOV EBP,ESP
0048CC6C 83EC 14 SUB ESP,14
0048CC6F 8B45 0C MOV EAX,DWORD PTR SS:[EBP+C]
0048CC72 8945 F8 MOV DWORD PTR SS:[EBP-8],EAX
0048CC75 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
0048CC78 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
0048CC7B 25 FF000000 AND EAX,0FF
0048CC80 6BC0 24 IMUL EAX,EAX,24
0048CC83 05 502C4B00 ADD EAX,004B2C50
0048CC88 8945 F4 MOV DWORD PTR SS:[EBP-C],EAX
0048CC8B 8BC8 MOV ECX,EAX
0048CC8D E8 DEE7FAFF CALL 0043B470
0048CC92 E9 E2010000 JMP 0048CE79
0048CE79 3C 40 CMP AL,40
0048CE7B 75 05 JNZ SHORT 0048CE82
0048CE7D E9 81020000 JMP 0048D103
0048CE82 8B4D F4 MOV ECX,DWORD PTR SS:[EBP-C]
0048CE85 E8 E627FDFF CALL 0045F670
0048CE8A 3D 00040000 CMP EAX,400
0048CE8F 0F85 47020000 JNZ 0048D0DC
0048CE95 E9 69020000 JMP 0048D103
0048D0DC 6A 17 PUSH 17
0048D0DE 8B4D F4 MOV ECX,DWORD PTR SS:[EBP-C]
0048D0E1 E8 8A25FDFF CALL 0045F670
0048D0E6 8BC8 MOV ECX,EAX
0048D0E8 6BC9 48 IMUL ECX,ECX,48
0048D0EB 81C1 681B4A00 ADD ECX,004A1B68
0048D0F1 E8 13A9F7FF CALL 00407A09
0048D0F6 85C0 TEST EAX,EAX
0048D0F8 ^0F84 F7FBFFFF JE 0048CCF5
0048D0FE ^E9 94FBFFFF JMP 0048CC97
0048D103 6A 17 PUSH 17
0048D105 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8]
0048D108 E8 6325FDFF CALL 0045F670
0048D10D 8BC8 MOV ECX,EAX
0048D10F 6BC9 48 IMUL ECX,ECX,48
0048D112 81C1 681B4A00 ADD ECX,004A1B68
0048D118 E8 ECA8F7FF CALL 00407A09
0048D11D 85C0 TEST EAX,EAX
0048D11F ^0F84 72FBFFFF JE 0048CC97
0048D125 ^E9 CBFBFFFF JMP 0048CCF5
0048CC97 6A 08 PUSH 8
0048CC99 8B4D F4 MOV ECX,DWORD PTR SS:[EBP-C]
0048CC9C E8 3F9AF7FF CALL 004066E0
0048CCA1 85C0 TEST EAX,EAX
0048CCA3 74 02 JE SHORT 0048CCA7
0048CCA5 EB 4E JMP SHORT 0048CCF5
0048CCA7 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8]
0048CCAA E8 C129FDFF CALL 0045F670
0048CCAF 8945 F0 MOV DWORD PTR SS:[EBP-10],EAX
0048CCB2 8B4D F4 MOV ECX,DWORD PTR SS:[EBP-C]
0048CCB5 E8 B629FDFF CALL 0045F670
0048CCBA 8945 EC MOV DWORD PTR SS:[EBP-14],EAX
0048CCBD 6A 00 PUSH 0
0048CCBF FF75 F0 PUSH DWORD PTR SS:[EBP-10]
0048CCC2 FF75 EC PUSH DWORD PTR SS:[EBP-14]
0048CCC5 B9 F05D4B00 MOV ECX,004B5DF0
0048CCCA E8 FBE2FCFF CALL 0045AFCA
0048CCCF 85C0 TEST EAX,EAX
0048CCD1 74 22 JE SHORT 0048CCF5
0048CCD3 6A 00 PUSH 0
0048CCD5 6A 00 PUSH 0
0048CCD7 6A 00 PUSH 0
0048CCD9 68 FF000000 PUSH 0FF
0048CCDE FF75 F0 PUSH DWORD PTR SS:[EBP-10]
0048CCE1 FF75 EC PUSH DWORD PTR SS:[EBP-14]
0048CCE4 B9 F05D4B00 MOV ECX,004B5DF0
0048CCE9 E8 3AA7FCFF CALL 00457428
0048CCEE B8 01000000 MOV EAX,1
0048CCF3 EB 02 JMP SHORT 0048CCF7
0048CCF5 33C0 XOR EAX,EAX
0048CCF7 8BE5 MOV ESP,EBP
0048CCF9 5D POP EBP
0048CCFA C3 RETN
[color=Silver][[i] 本帖最后由 godtype 于 2009-8-18 07:43 编辑 [/i]][/color]