搞定！ (2千字)
ok!我来讲讲！
016F:00404A50 SUB ESP,BYTE +50
016F:00404A53 CALL 004048B0
016F:00404A58 PUSH EAX <--------- ? eax 注意到吗？
016F:00404A59 LEA EAX,[ESP+34]
016F:00404A5D PUSH EAX
016F:00404A5E MOV ECX,00440BE8
016F:00404A63 CALL 00405770
016F:00404A68 LEA ECX,[ESP+30]
016F:00404A6C PUSH ECX
016F:00404A6D CALL 00404A10
016F:00404A72 ADD ESP,BYTE +04
016F:00404A75 LEA EDX,[ESP+18]
016F:00404A79 MOV ECX,00440BE8
016F:00404A7E PUSH EDX
016F:00404A7F CALL 004059D0
016F:00404A84 PUSH EAX
016F:00404A85 MOV ECX,00440BE8
016F:00404A8A CALL 00405C10
016F:00404A8F LEA ECX,[ESP+00]
016F:00404A93 PUSH BYTE +10
016F:00404A95 PUSH ECX
016F:00404A96 PUSH EAX
016F:00404A97 CALL 00424CC7
016F:00404A9C ADD ESP,BYTE +0C
016F:00404A9F LEA EDX,[ESP+00]
016F:00404AA3 MOV ECX,00440BE8
016F:00404AA8 PUSH EDX
016F:00404AA9 CALL 00405990
016F:00404AAE LEA EAX,[ESP+30] <-------? eax 正确的password
016F:00404AB2 PUSH DWORD 00441124 <-----? 441124 你输入的
016F:00404AB7 PUSH EAX
016F:00404AB8 MOV ECX,00440BE8
016F:00404ABD CALL 00405730 开始比较
016F:00404AC2 TEST EAX,EAX
--------------------------------------------------------------
016F:00405730 MOV EAX,[ESP+04]
016F:00405734 PUSH ESI
016F:00405735 XOR ESI,ESI
016F:00405737 MOV CL,[EAX] <------ 取一位到cl
016F:00405739 PUSH EDI
016F:0040573A MOV EDI,[ESP+10]
016F:0040573E TEST CL,CL <-------测试
016F:00405740 JZ 00405754
016F:00405742 MOV EDX,EDI
016F:00405744 SUB EDX,EAX
016F:00405746 CMP CL,[EDX+EAX] <------比较
016F:00405749 JNZ 00405763
016F:0040574B MOV CL,[EAX+01]
016F:0040574E INC ESI <--------
016F:0040574F INC EAX <--------计数器
016F:00405750 TEST CL,CL
016F:00405752 JNZ 00405746
016F:00405754 MOV CL,[ESI+EDI]
016F:00405757 XOR EAX,EAX
016F:00405759 TEST CL,CL
016F:0040575B POP EDI
016F:0040575C POP ESI
016F:0040575D SETNZ AL <-----------标志位
password:Bn9-pW-56z-aa
我们都在成长！
THK
